通过libvirt使用ceph块设备


1.     创建存储池

[root@ceph1 ~]# ceph osd pool create libvirt-pool 128 128

查看刚刚创建的存储池:

[root@ceph1 ~]# ceph osd lspools

0 rbd,1 .rgw.root,2 default.rgw.control,3 default.rgw.meta,4 default.rgw.log,5 default.rgw.buckets.index,6 default.rgw.buckets.data,7 default.rgw.buckets.non-ec,8 libvirt-pool,

2.     创建ceph用户client.libvirt,权限限制到存储池libvirt-pool

[root@ceph1 ~]# ceph auth get-or-create client.libvirt mon 'allow r' osd 'allow class-read object_prefix rbd_children, allow rwx pool=libvirt-pool'

验证:

[root@ceph1 ~]# ceph auth list

...

client.libvirt

key: AQBblU1b9FECCRAA4tW8qaBYtxTsDlaNJybZSQ==

caps: [mon] allow r

    caps: [osd] allow class-read object_prefix rbd_children, allow rwx pool=libvirt-pool

   ...

3.     把虚拟机镜像文件centos6864.qcow2.img导入存储池libvirt-pool中

[root@ceph1 ~]# qemu-img convert -f qcow2 -O raw centos6864.qcow2.img rbd:libvirt-pool/centos6864.qcow2.img

验证:

[root@ceph1 ~]# rbd -p libvirt-pool ls

centos6864.qcow2.img

4.     在libvirt中配置ceph认证需要的密钥

a.      定义密钥

[root@localhost ~]# cat > secret.xml <<EOF

<secret ephemeral='no' private='no'>

    <usage type='ceph'>

        <name>client.libvirt secret</name>

    </usage>

</secret>

virsh secret-define --file secret.xml

b.      获取密钥uuid

[root@localhost ~]# virsh secret-list

        UUID                                  Usage

--------------------------------------------------------------------------------

 fdcb5967-d3e5-4618-98f5-5919a723e414  ceph client.libvirt secret

c.      设置密钥的值

virsh secret-set-value --secret fdcb5967-d3e5-4618-98f5-5919a723e414 --base64 AQBblU1b9FECCRAA4tW8qaBYtxTsDlaNJybZSQ==

其中“AQBblU1b9FECCRAA4tW8qaBYtxTsDlaNJybZSQ==”是从上面ceph auth list的client.libvirt的key字段中得到的

5.     修改虚拟机xml文件的disk部分

[root@localhost ~]# virsh edit test

...

<disk type='network' device='disk'>

      <driver name='qemu'/>

      <auth username='libvirt'>

        <secret type='ceph' uuid='fdcb5967-d3e5-4618-98f5-5919a723e414'/>

      </auth>

      <source protocol='rbd' name='libvirt-pool/centos6864.qcow2.img'>

        <host name='192.168.1.15' port='6789'/>

        <host name='192.168.1.16' port='6789'/>

        <host name='192.168.1.17' port='6789'/>

      </source>

      <target dev='vda' bus='virtio'/>

      <address type='pci' domain='0x0000' bus='0x00' slot='0x06' function='0x0'/>

</disk>

     ...

     其中secret的uuid就是上面创建密钥的uuid;host配置的是ceph monitor的ip和端口,有几个monitor就写几个。

6.     开启虚拟机

[root@localhost ~]# virsh start test

image.png


猜你喜欢

转载自blog.51cto.com/3646344/2146240