172 lines
6.6 KiB
Bash
Executable File
172 lines
6.6 KiB
Bash
Executable File
|
||
#!/bin/bash
|
||
# OpenStack 控制节点(Rocky) Glance 镜像服务部署检查脚本
|
||
# 适用于: 3.3 Glance镜像服务部署
|
||
# 强制设置字符集为 UTF-8，防止 OpenStack 客户端因为读取到中文/全角标点而崩溃报错 ascii codec
|
||
export LANG=en_US.UTF-8
|
||
export LC_ALL=en_US.UTF-8
|
||
# 学生可见输出：每组一行，失败时列出原因；仅统计实际检查结果。
|
||
RED='\033[0;31m'
|
||
GREEN='\033[0;32m'
|
||
CYAN='\033[0;36m'
|
||
NC='\033[0m'
|
||
PASS_CNT=0
|
||
FAIL_CNT=0
|
||
SECTION_TITLE=''
|
||
SECTION_PASS=0
|
||
SECTION_FAIL=0
|
||
SECTION_DETAILS=()
|
||
|
||
pass() { PASS_CNT=$((PASS_CNT+1)); }
|
||
fail() {
|
||
FAIL_CNT=$((FAIL_CNT+1))
|
||
if [ -n "$SECTION_TITLE" ]; then
|
||
SECTION_DETAILS+=("$1")
|
||
else
|
||
printf '%b[✘ 失败] %s%b\n' "$RED" "$1" "$NC"
|
||
fi
|
||
}
|
||
section_summary() {
|
||
[ -n "$SECTION_TITLE" ] || return 0
|
||
local passed=$((PASS_CNT-SECTION_PASS)) failed=$((FAIL_CNT-SECTION_FAIL)) message
|
||
# 没有实际检查结果的分组不显示，也不记为通过。
|
||
if [ "$failed" -gt 0 ]; then
|
||
printf '%b[✘ 失败] %s：通过 %s，失败 %s%b\n' "$RED" "$SECTION_TITLE" "$passed" "$failed" "$NC"
|
||
for message in "${SECTION_DETAILS[@]}"; do
|
||
printf '%b · %s%b\n' "$RED" "$message" "$NC"
|
||
done
|
||
elif [ "$passed" -gt 0 ]; then
|
||
printf '%b[✔ 通过] %s（%s 项）%b\n' "$GREEN" "$SECTION_TITLE" "$passed" "$NC"
|
||
fi
|
||
}
|
||
info() {
|
||
section_summary
|
||
SECTION_TITLE=$1
|
||
SECTION_PASS=$PASS_CNT
|
||
SECTION_FAIL=$FAIL_CNT
|
||
SECTION_DETAILS=()
|
||
}
|
||
finish() {
|
||
section_summary
|
||
printf '\n检查完毕：通过 %b%s%b 项，失败 %b%s%b 项。\n' \
|
||
"$GREEN" "$PASS_CNT" "$NC" "$RED" "$FAIL_CNT" "$NC"
|
||
if [ "$FAIL_CNT" -gt 0 ]; then
|
||
printf '%b请按失败提示修正后重试。%b\n' "$RED" "$NC"
|
||
exit 1
|
||
fi
|
||
printf '%b本次检查项全部通过。%b\n' "$GREEN" "$NC"
|
||
exit 0
|
||
}
|
||
|
||
printf '%bOpenStack Glance 镜像服务自测%b\n' "$CYAN" "$NC"
|
||
|
||
if [ "$EUID" -ne 0 ]; then
|
||
fail "请使用 root 权限执行此脚本"
|
||
exit 1
|
||
fi
|
||
|
||
# 1. 检查数据库
|
||
info "MariaDB 数据库创建与授权"
|
||
if mysql -uglance -pglance -e "SHOW DATABASES;" 2>/dev/null | grep -qw "glance"; then
|
||
pass "glance 数据库已创建且用户授权正确"
|
||
|
||
if [ $(mysql -uglance -pglance -e "USE glance; SHOW TABLES;" 2>/dev/null | wc -l) -gt 2 ]; then
|
||
pass "glance 数据库表结构同步 (db_sync) 已完成"
|
||
else
|
||
fail "glance 数据库表为空，未执行同步命令"
|
||
fi
|
||
else
|
||
fail "glance 数据库未创建，或 glance 用户授权失败/密码不正确"
|
||
fi
|
||
|
||
# 2. 检查软件包
|
||
info "依赖软件包安装"
|
||
if rpm -q openstack-glance &>/dev/null; then
|
||
pass "相关软件包 (openstack-glance) 已安装"
|
||
else
|
||
fail "软件包 openstack-glance 未安装"
|
||
fi
|
||
|
||
# 导入临时管理员环境变量用于 API 测试
|
||
export OS_USERNAME=admin
|
||
export OS_PASSWORD=admin
|
||
export OS_PROJECT_NAME=admin
|
||
export OS_USER_DOMAIN_NAME=Default
|
||
export OS_PROJECT_DOMAIN_NAME=Default
|
||
export OS_AUTH_URL=http://controller:5000/v3
|
||
export OS_IDENTITY_API_VERSION=3
|
||
export NO_PROXY=localhost,127.0.0.1,controller
|
||
|
||
# 验证 Keystone 连通性
|
||
info "Keystone 认证与 Glance 注册"
|
||
AUTH_OK=1
|
||
if ! openstack token issue >/dev/null 2>&1; then
|
||
fail "Keystone 认证失败，请检查服务及管理员凭证"
|
||
AUTH_OK=0
|
||
fi
|
||
|
||
if [ "$AUTH_OK" -eq 1 ]; then
|
||
# 3. 检查 Glance 凭证注册
|
||
if openstack user show glance >/dev/null 2>&1; then pass "用户: glance 已在 KeyStone 中创建"; else fail "用户: glance 未在 KeyStone 中找到"; fi
|
||
|
||
if openstack role assignment list --user glance --project service --role admin -f value --names 2>/dev/null | grep -q "glance"; then
|
||
pass "用户 glance 已成功加入 service 项目并绑定 admin 角色"
|
||
else
|
||
fail "未将 glance 用户绑定到 service 项目的 admin 角色"
|
||
fi
|
||
|
||
if openstack service show image >/dev/null 2>&1; then pass "服务实体: image(glance) 已创建"; else fail "服务实体: image(glance) 未创建"; fi
|
||
|
||
# 4. 检查端点 Endpoint 注册
|
||
info "Endpoint API 端点注册"
|
||
endpoints=$(openstack endpoint list --service image -f value -c Interface 2>/dev/null)
|
||
if echo "$endpoints" | grep -qw "public" && echo "$endpoints" | grep -qw "internal" && echo "$endpoints" | grep -qw "admin"; then
|
||
pass "镜像服务的 public, internal, admin 端点已全部注册成功"
|
||
else
|
||
fail "镜像服务的端点注册不全，请检查 openstack endpoint list"
|
||
fi
|
||
|
||
fi
|
||
|
||
# 本地配置和进程检查不依赖 Keystone 认证。
|
||
# 5. 检查 Glance 配置文件
|
||
info "Glance 服务配置文件"
|
||
if grep -q "^connection.*=.*glance:glance@controller/glance" /etc/glance/glance-api.conf 2>/dev/null; then
|
||
pass "glance-api.conf 数据库配置正确"
|
||
else
|
||
fail "glance-api.conf 数据库连接 [database] 未配置或错误"
|
||
fi
|
||
|
||
if grep -q "^auth_url.*=.*http://controller:5000" /etc/glance/glance-api.conf 2>/dev/null; then
|
||
pass "glance-api.conf 身份认证 [keystone_authtoken] 配置正确"
|
||
else
|
||
fail "glance-api.conf 身份认证 [keystone_authtoken] 配置有误"
|
||
fi
|
||
|
||
if grep -q "^filesystem_store_datadir.*=.*?/var/lib/glance/images/" /etc/glance/glance-api.conf 2>/dev/null || grep -q "^stores.*=.*file" /etc/glance/glance-api.conf 2>/dev/null; then
|
||
pass "glance-api.conf 本地存储目录 [glance_store] 配置完成"
|
||
else
|
||
fail "glance-api.conf 存储方式 [glance_store] 配置有误"
|
||
fi
|
||
|
||
# 6. 检查系统服务进程
|
||
info "Glance 服务启动状态"
|
||
if systemctl is-active openstack-glance-api &>/dev/null; then pass "openstack-glance-api 服务正在运行"; else fail "openstack-glance-api 服务未运行"; fi
|
||
if systemctl is-enabled openstack-glance-api &>/dev/null; then pass "openstack-glance-api 服务已设为开机自启"; else fail "openstack-glance-api 服务未设置开启自启"; fi
|
||
|
||
if systemctl is-active openstack-glance-registry &>/dev/null; then pass "openstack-glance-registry 服务正在运行"; else fail "openstack-glance-registry 服务未运行"; fi
|
||
if systemctl is-enabled openstack-glance-registry &>/dev/null; then pass "openstack-glance-registry 服务已设为开机自启"; else fail "openstack-glance-registry 未设置开机自启"; fi
|
||
|
||
if [ "$AUTH_OK" -eq 1 ]; then
|
||
# 7. 检查镜像上传测试结果
|
||
info "CirrOS 镜像上传测试结果"
|
||
img_status=$(openstack image show cirros -f value -c status 2>/dev/null)
|
||
if [ "$img_status" == "active" ]; then
|
||
pass "测试镜像 cirros 已成功上传，且目前处于 active 状态！"
|
||
else
|
||
fail "未找到处于 active 状态的测试镜像 cirros，请检查上传步骤"
|
||
fi
|
||
fi
|
||
|
||
finish
|