OpenStack Epoxy : Swift 設定 (Storage ノード)2025/05/27 |
|
OpenStack Object Storage（Swift）を設定します。 当例では以下のような環境を例に Swift サービスを設定します。
------------+--------------------------+------------
| |
eth0|10.0.0.30 eth0|10.0.0.50
+-----------+-----------+ +-----------+-----------+
| [ dlp.srv.world ] | | [ network.srv.world ] |
| (Control Node) | | (Proxy Node) |
| | | |
| MariaDB RabbitMQ | | Swift Proxy |
| Memcached Nginx | | Nginx |
| Keystone httpd | | |
+-----------------------+ +-----------------------+
------------+--------------------------+--------------------------+-----------
eth0|10.0.0.71 eth0|10.0.0.72 eth0|10.0.0.73
+-----------+-----------+ +-----------+-----------+ +-----------+-----------+
| [snode01.srv.world] | | [snode02.srv.world] | | [snode03.srv.world] |
| (Storage Node#1) | | (Storage Node#2) | | (Storage Node#3) |
| | | | | |
| Swift-Account | | Swift-Account | | Swift-Account |
| Swift-Container | | Swift-Container | | Swift-Container |
| Swift-Object | | Swift-Object | | Swift-Object |
+-----------------------+ +-----------------------+ +-----------------------+
|
|
Storage ノードの設定をします。 |
|
| [1] | 全 Storage ノード で、こちらの [3] を参考に OpenStack Epoxy リポジトリを設定した後、Swift-Account, Swift-Container, Swift-Object 等々をインストールします。 |
|
[root@snode01 ~]# dnf --enablerepo=centos-openstack-epoxy,epel,crb -y install openstack-swift-account openstack-swift-container openstack-swift-object openstack-selinux xfsprogs rsync rsync-daemon openssh-clients
|
| [2] | 全 Storage ノード でディスクの空き領域を XFS でフォーマットし、[/srv/node] にマウントします。 |
|
[root@snode01 ~]# mkfs.xfs /dev/sdb1
meta-data=/dev/sdb1 isize=512 agcount=4, agsize=5242816 blks
= sectsz=512 attr=2, projid32bit=1
= crc=1 finobt=1, sparse=1, rmapbt=0
= reflink=1 bigtime=1 inobtcount=1
data = bsize=4096 blocks=20971264, imaxpct=25
= sunit=0 swidth=0 blks
naming =version 2 bsize=4096 ascii-ci=0, ftype=1
log =internal log bsize=4096 blocks=10239, version=2
= sectsz=512 sunit=0 blks, lazy-count=1
realtime =none extsz=4096 blocks=0, rtextents=0
Discarding blocks...Done.
[root@snode01 ~]#
mkdir -p /srv/node/device [root@snode01 ~]# mount -o noatime,nodiratime /dev/sdb1 /srv/node/device [root@snode01 ~]# chown -R swift:swift /srv/node
[root@snode01 ~]#
blkid | grep sdb1 /dev/sdb1: UUID="422f35a7-5f4d-4915-8ec2-d90b94f1786b" TYPE="xfs" PARTUUID="b64bc6a4-01"
[root@snode01 ~]#
vi /etc/fstab # 最終行に追記 UUID="422f35a7-5f4d-4915-8ec2-d90b94f1786b" /srv/node/device xfs defaults,noatime,nodiratime 0 0 |
| [3] | Proxy ノードから 全 Storage ノードへ Swift Ring ファイルをコピーします。 |
|
[root@network ~]# scp /etc/swift/*.gz 10.0.0.71:/etc/swift/ account.ring.gz 100% 3912 3.8KB/s 00:00 container.ring.gz 100% 3904 3.8KB/s 00:00 object.ring.gz 100% 3895 3.8KB/s 00:00 |
| [4] | 全 Storage ノードで Swift および Rsync の設定をします。 |
|
[root@snode01 ~]# chown swift:swift /etc/swift/*.gz
[root@snode01 ~]#
vi /etc/swift/swift.conf # 9,10 行目 : プロキシノードに設定したものと同じ値に変更 [swift-hash] swift_hash_path_suffix = swift_shared_path swift_hash_path_prefix = swift_shared_path
[root@snode01 ~]#
vi /etc/swift/account-server.conf # 2行目 : コメント解除 [DEFAULT] bind_ip = 0.0.0.0 bind_port = 6202
[root@snode01 ~]#
vi /etc/swift/container-server.conf # 2行目 : コメント解除 [DEFAULT] bind_ip = 0.0.0.0 bind_port = 6201
[root@snode01 ~]#
vi /etc/swift/object-server.conf # 2行目 : コメント解除 [DEFAULT] bind_ip = 0.0.0.0 bind_port = 6200
[root@snode01 ~]#
vi /etc/rsyncd.conf # 最終行に追記 pid file = /var/run/rsyncd.pid log file = /var/log/rsyncd.log uid = swift gid = swift address = 0.0.0.0 [account] path = /srv/node read only = false write only = no list = yes incoming chmod = 0644 outgoing chmod = 0644 max connections = 25 lock file = /var/lock/account.lock [container] path = /srv/node read only = false write only = no list = yes incoming chmod = 0644 outgoing chmod = 0644 max connections = 25 lock file = /var/lock/container.lock [object] path = /srv/node read only = false write only = no list = yes incoming chmod = 0644 outgoing chmod = 0644 max connections = 25 lock file = /var/lock/object.lock [swift_server] path = /etc/swift read only = true write only = no list = yes incoming chmod = 0644 outgoing chmod = 0644 max connections = 5 lock file = /var/lock/swift_server.lock |
| [5] | Storage ノードで SELinux を有効にしている場合は、ポリシーの変更が必要です。 |
|
[root@snode01 ~]# setsebool -P domain_can_mmap_files on [root@snode01 ~]# semanage fcontext -a -t swift_data_t /srv/node/device [root@snode01 ~]# restorecon /srv/node/device
|
| [6] | Storage ノードで Firewalld を有効にしている場合は、サービスポートの許可が必要です。 |
|
[root@snode01 ~]# firewall-cmd --add-port={873/tcp,6200/tcp,6201/tcp,6202/tcp} success [root@snode01 ~]# firewall-cmd --runtime-to-permanent success |
| [7] | 各サービスを起動します。 |
|
[root@snode01 ~]# systemctl enable --now rsyncd \ openstack-swift-account-auditor \ openstack-swift-account-replicator \ openstack-swift-account \ openstack-swift-container-auditor \ openstack-swift-container-replicator \ openstack-swift-container-updater \ openstack-swift-container \ openstack-swift-object-auditor \ openstack-swift-object-replicator \ openstack-swift-object-updater \ openstack-swift-object |
| Sponsored Link |
|
|