23 KiB
Using the Glance CLI Tool
Glance ships with a command-line tool for querying and managing Glance. It has a fairly simple but powerful interface of the form:
Usage: glance <command> [options] [args]Where <command> is one of the following:
helpShow detailed help information about a specific command
addAdds an image to Glance
updateUpdates an image's stored metadata in Glance
deleteDeletes an image and its metadata from Glance
indexLists brief information about public images that Glance knows about
detailsLists detailed information about public images that Glance knows about
showLists detailed information about a specific image
clearDestroys all public images and their associated metadata
This document describes how to use the glance tool for
each of the above commands.
The help command
Issuing the help command with a
<COMMAND> argument shows detailed help about a
specific command. Running glance without any arguments
shows a brief help message, like so:
$> glance
Usage: glance <command> [options] [args]
Commands:
help <command> Output help for one of the commands below
add Adds a new image to Glance
update Updates an image's metadata in Glance
delete Deletes an image from Glance
index Return brief information about images in Glance
details Return detailed information about images in
Glance
show Show detailed information about an image in
Glance
clear Removes all images and metadata from Glance
Member Commands:
image-members List members an image is shared with
member-images List images shared with a member
member-add Grants a member access to an image
member-delete Revokes a member's access to an image
members-replace Replaces all membership for an image
Options:
--version show program's version number and exit
-h, --help show this help message and exit
--silent-upload disable progress bar animation and information during
upload
-v, --verbose Print more verbose output
-d, --debug Print more verbose output
-H ADDRESS, --host=ADDRESS
Address of Glance API host. Default: 0.0.0.0
-p PORT, --port=PORT Port the Glance API host listens on. Default: 9292
-U URL, --url=URL URL of Glance service. This option can be used to
specify the hostname, port and protocol (http/https)
of the glance server, for example -U
https://localhost:9292/v1 Default: None
-k, --insecure Explicitly allow glance to perform "insecure" SSL
(https) requests. The server's certificate will not be
verified against any certificate authorities. This
option should be used with caution.
-A TOKEN, --os_auth_token=TOKEN
Authentication token to use to identify the client to
the glance server
-I USER, --os_username=USER
User name used to acquire an authentication token
-K PASSWORD, --os_password=PASSWORD
Password used to acquire an authentication token
-R REGION, --os_region_name=REGION
Region name. When using keystone authentication
version 2.0 or later this identifies the region name
to use when selecting the service endpoint. A region
name must be provided if more than one region endpoint
is available
-T TENANT, --os_tenant_name=TENANT
Tenant name
-N AUTH_URL, --os_auth_url=AUTH_URL
Authentication URL
-S STRATEGY, --os_auth_strategy=STRATEGY
Authentication strategy (keystone or noauth)
--limit=LIMIT Page size to use while requesting image metadata
--marker=MARKER Image index after which to begin pagination
--sort_key=KEY Sort results by this image attribute.
--sort_dir=[desc|asc]
Sort results in this direction.
-f, --force Prevent select actions from requesting user
confirmation
--dry-run Don't actually execute the command, just print output
showing what WOULD happen.
--can-share Allow member to further share image.With a <COMMAND> argument, more information on the
command is shown, like so:
$> glance help update
glance update [options] <ID> <field1=value1 field2=value2 ...>
Updates an image's metadata in Glance. Specify metadata fields as arguments.
Metadata fields that are not specified in the update command will be deleted.
All field/value pairs are converted into a mapping that is passed
to Glance that represents the metadata for an image.
Field names that can be specified:
name A name for the image.
location An external location to serve out from.
copy_from An external location (HTTP, S3 or Swift URI) to copy image
content from.
is_public If specified, interpreted as a boolean value
and sets or unsets the image's availability to the public.
protected If specified, interpreted as a boolean value
and enables or disables deletion protection for the image.
disk_format Format of the disk image
container_format Format of the container
All other field names are considered to be custom properties so be careful
to spell field names correctly.The add command
The add command is used to do both of the following:
- Store virtual machine image data and metadata about that image in Glance
- Let Glance know about an existing virtual machine image that may be stored somewhere else
We cover both use cases below.
Important Information about Uploading Images
Before we go over the commands for adding an image to Glance, it is important to understand that Glance does not currently inspect the image files you add to it. In other words, Glance only understands what you tell it, via attributes and custom properties.
If the file extension of the file you upload to Glance ends in
'.vhd', Glance does not know that the image you are
uploading has a disk format of vhd. You have to
tell Glance that the image you are uploading has a disk
format by using the disk_format=vhd on the command line
(see more below).
By the same token, Glance does not currently allow you to upload "multi-part" disk images at once. The common operation of bundling a kernel image and ramdisk image into a machine image is not done automagically by Glance.
Store virtual machine image data and metadata
When adding an actual virtual machine image to Glance, you use the
add command. You will pass metadata about the VM image on
the command line, and you will use a standard shell redirect to stream
the image data file to glance.
Let's walk through a simple example. Suppose we have a virtual disk
image in qcow2 format stored on our local filesystem at
/tmp/images/myimage.img. We'd also like to tell Glance that
this image should be called "My Image", and that the image should be
public -- anyone should be able to fetch it. Here is how we'd upload
this image to Glance:
$> glance add name="My Image" is_public=true \
container_format=bare disk_format=qcow2 < /tmp/images/myimage.imgNote that the disk container formats are no longer defaulted and are thus strictly required.
If Glance was able to successfully upload and store your VM image data and metadata attributes, you would see something like this:
$> glance add name="My Image" is_public=true \
container_format=bare disk_format=qcow2 < /tmp/images/myimage.img
Added new image with ID: 991baaf9-cc0d-4183-a201-8facdf1a1430You can use the --verbose (or -v)
command-line option to print some more information about the metadata
that was saved with the image:
$> glance --verbose add name="My Image" is_public=true \
container_format=bare disk_format=qcow2 < /tmp/images/myimage.img
Added new image with ID: 541424be-27b1-49d6-a55b-6430b8ae0f5f
Returned the following metadata for the new image:
checksum => 2cec138d7dae2aa59038ef8c9aec2390
container_format => bare
created_at => 2011-02-22T19:20:53.298556
deleted => False
deleted_at => None
disk_format => qcow2
id => 541424be-27b1-49d6-a55b-6430b8ae0f5f
is_public => True
min_disk => 0
min_ram => 0
name => My Image
owner => tenant1
properties => {}
protected => False
size => 58520278
status => active
updated_at => 2011-02-22T19:20:54.451291
Completed in 0.6141 sec.If you are unsure about what will be added, you can use the
--dry-run command-line option, which will simply show you
what would have happened:
$> glance --dry-run add name="Foo" distro="Ubuntu" is_public=True \
container_format=bare disk_format=qcow2 < /tmp/images/myimage.img
Dry run. We would have done the following:
Add new image with metadata:
container_format => bare
disk_format => qcow2
id => None
is_public => False
min_disk => 0
min_ram => 0
name => Foo
properties => {'is_public': 'True', 'distro': 'Ubuntu'}
protected => FalseThis is useful for detecting problems and for seeing what the default
field values supplied by glance are. For instance, there
was a typo in the command above (the is_public field was
incorrectly spelled is_public which resulted in the image
having an is_public custom property added to the image and
the real is_public field value being False (the default) and not True...
Examples of uploading different kinds of images
To upload an EC2 tarball VM image:
$> glance add name="ubuntu-10.10-amd64" is_public=true \
container_format=ovf disk_format=raw \
< maverick-server-uec-amd64.tar.gzTo upload an EC2 tarball VM image with an associated property (e.g., distro):
$> glance add name="ubuntu-10.10-amd64" is_public=true \
container_format=ovf disk_format=raw \
distro="ubuntu 10.10" < /root/maverick-server-uec-amd64.tar.gzTo reference an EC2 tarball VM image available at an external URL:
$> glance add name="ubuntu-10.04-amd64" is_public=true \
container_format=ovf disk_format=raw \
location="http://uec-images.ubuntu.com/lucid/current/\
lucid-server-uec-amd64.tar.gz"To upload a copy of that same EC2 tarball VM image:
$> glance add name="ubuntu-10.04-amd64" is_public=true \
container_format=bare disk_format=raw \
copy_from="http://uec-images.ubuntu.com/lucid/current/lucid-server-uec-amd64.tar.gz"To upload a qcow2 image:
$> glance add name="ubuntu-11.04-amd64" is_public=true \
container_format=bare disk_format=qcow2 \
distro="ubuntu 11.04" < /data/images/rock_natty.qcow2To upload kernel, ramdisk and machine image files:
$> glance add disk_format=aki container_format=aki \
name="maverick-server-uec-amd64-vmlinuz-virtual" \
< maverick-server-uec-amd64-vmlinuz-virtual
$> glance add disk_format=ari container_format=ari \
name="maverick-server-uec-amd64-loader" \
< maverick-server-uec-amd64-loader
# Determine what the ids associated with the kernel and ramdisk files
$> glance index
# Assuming the ids are 94c2adcf-1bca-4881-92f1-62fe7593f108 and 6e75405d-7de0-4c99-b936-87f98ff4959f:
$> glance add disk_format=ami container_format=ami \
name="maverick-server-uec-amd64" \
kernel_id=94c2adcf-1bca-4881-92f1-62fe7593f108 \
ramdisk_id=6e75405d-7de0-4c99-b936-87f98ff4959f \
< maverick-server-uec-amd64.imgTo upload a raw image file:
$> glance add disk_format=raw container_format=bare \
name="maverick-server-uec-amd64.img_v2" < maverick-server-uec-amd64.imgRegister a virtual machine image in another location
Sometimes, you already have stored the virtual machine image in some
non-Glance location -- perhaps even a location you have no write access
to -- and you want to tell Glance where this virtual machine image is
located and some metadata about it. The add command can do
this for you.
When registering an image in this way, the only difference is that
you do not use a shell redirect to stream a virtual machine image file
into Glance, but instead, you tell Glance where to find the existing
virtual machine image by setting the location field. Below
is an example of doing this.
Let's assume that there is a virtual machine image located at the URL
http://example.com/images/myimage.vhd. We can register this
image with Glance using the following:
$> glance add name="Some web image" disk_format=vhd \
container_format=ovf location="http://example.com/images/myimage.vhd"
Added new image with ID: 71c675ab-d94f-49cd-a114-e12490b328d9The update command
After uploading/adding a virtual machine image to Glance, it is not possible to modify the actual virtual machine image -- images are read-only after all --however, it is possible to update any metadata about the image after you add it to Glance.
The update command allows you to update the metadata
fields of a stored image. You use this command like so:
glance update <ID> [field1=value1 field2=value2 ...]Let's say we have an image with identifier '9afc4097-1c70-45c3-8c12-1b897f083faa' that we wish to change the 'is_public' attribute of the image from False to True. The following would accomplish this:
$> glance update 9afc4097-1c70-45c3-8c12-1b897f083faa is_public=true
Updated image 9afc4097-1c70-45c3-8c12-1b897f083faaUsing the --verbose flag will show you all the updated
data about the image:
$> glance --verbose update 97243446-9c74-42af-a31a-34ba16555868 \
is_public=true
Updated image 97243446-9c74-42af-a31a-34ba16555868
Updated image metadata for image 97243446-9c74-42af-a31a-34ba16555868:
URI: http://glance.example.com/v1/images/97243446-9c74-42af-a31a-34ba16555868
Id: 97243446-9c74-42af-a31a-34ba16555868
Public: Yes
Protected: No
Name: My Image
Status: active
Size: 58520278
Disk format: raw
Container format: ovf
Minimum Ram Required (MB): 0
Minimum Disk Required (GB): 0
Owner: tenant1
Completed in 0.0596 sec.The delete command
You can delete an image by using the delete command,
shown below:
$> glance --verbose -f delete 660c96a7-ef95-45e7-8e48-595df6937675
Delete image 660c96a7-ef95-45e7-8e48-595df6937675? [y/N] y
Deleted image 660c96a7-ef95-45e7-8e48-595df6937675The index command
The index command displays brief information about
public images available in Glance alongside any private images you can
access, as shown below:
$> glance index
ID Name Disk Format Container Format Size
------------------------------------ ------------------------------ -------------------- -------------------- --------------
baa87554-34d2-4e9e-9949-e9e5620422bb Ubuntu 10.10 vhd ovf 58520278
9e1aede2-dc6e-4981-9f3e-93dee24d48b1 Ubuntu 10.04 ami ami 58520278
771c0223-27b4-4789-a83d-79eb9c166578 Fedora 9 vdi bare 3040
cb8f4908-ef58-4e4b-884e-517cf09ead86 Vanilla Linux 2.6.22 qcow2 bare 0Image metadata such as 'name', 'disk_format', 'container_format' and 'status' may be used to filter the results of an index or details command. These commands also accept 'size_min' and 'size_max' as lower and upper bounds of the image attribute 'size.' Any unrecognized fields are handled as custom image properties.
The 'limit' and 'marker' options are used by the index and details commands to control pagination. The 'marker' indicates the last record that was seen by the user. The page of results returned will begin after the provided image ID. The 'limit' param indicates the page size. Each request to the api will be restricted to returning a maximum number of results. Without the 'force' option, the user will be prompted before each page of results is fetched from the API.
Results from index and details commands may be ordered using the 'sort_key' and 'sort_dir' options. Any image attribute may be used for 'sort_key', while only 'asc' or 'desc' are allowed for 'sort_dir'.
The details command
The details command displays detailed information about
the public images available in Glance, as shown below:
$> glance details
==============================================================================
URI: http://example.com/images/baa87554-34d2-4e9e-9949-e9e5620422bb
Id: baa87554-34d2-4e9e-9949-e9e5620422bb
Public: Yes
Protected: No
Name: Ubuntu 10.10
Status: active
Size: 58520278
Disk format: vhd
Container format: ovf
Minimum Ram Required (MB): 0
Minimum Disk Required (GB): 0
Owner: None
Property 'distro_version': 10.10
Property 'distro': Ubuntu
==============================================================================
URI: http://example.com/images/9e1aede2-dc6e-4981-9f3e-93dee24d48b1
Id: 9e1aede2-dc6e-4981-9f3e-93dee24d48b1
Public: Yes
Protected: No
Name: Ubuntu 10.04
Status: active
Size: 58520278
Disk format: ami
Container format: ami
Minimum Ram Required (MB): 0
Minimum Disk Required (GB): 0
Owner: None
Property 'distro_version': 10.04
Property 'distro': Ubuntu
==============================================================================
URI: http://example.com/images/771c0223-27b4-4789-a83d-79eb9c166578
Id: 771c0223-27b4-4789-a83d-79eb9c166578
Public: Yes
Protected: No
Name: Fedora 9
Status: active
Size: 3040
Disk format: vdi
Container format: bare
Minimum Ram Required (MB): 512
Minimum Disk Required (GB): 10
Owner: None
Property 'distro_version': 9
Property 'distro': Fedora
==============================================================================
URI: http://example.com/images/cb8f4908-ef58-4e4b-884e-517cf09ead86
Id: cb8f4908-ef58-4e4b-884e-517cf09ead86
Public: Yes
Protected: No
Name: Vanilla Linux 2.6.22
Status: active
Size: 0
Disk format: qcow2
Container format: bare
Minimum Ram Required (MB): 0
Minimum Disk Required (GB): 0
Owner: tenant1
==============================================================================The show command
The show command displays detailed information about a
specific image, specified with <ID>, as shown
below:
$> glance show 771c0223-27b4-4789-a83d-79eb9c166578
URI: http://example.com/images/771c0223-27b4-4789-a83d-79eb9c166578
Id: 771c0223-27b4-4789-a83d-79eb9c166578
Public: Yes
Protected: No
Name: Fedora 9
Status: active
Size: 3040
Disk format: vdi
Container format: bare
Minimum Ram Required (MB): 512
Minimum Disk Required (GB): 10
Owner: None
Property 'distro_version': 9
Property 'distro': FedoraThe clear command
The clear command is an administrative command that
deletes ALL images and all image metadata. Passing the
--verbose command will print brief information about all
the images that were deleted, as shown below:
$> glance --verbose clear
Deleting image ab15b8d3-8f33-4467-abf2-9f89a042a8c4 "Some web image" ... done
Deleting image dc9698b4-e9f1-4f75-b777-1a897633e488 "Some other web image" ... done
Completed in 0.0328 sec.The image-members
Command
The image-members command displays the list of members
with which a specific image, specified with <ID>, is
shared, as shown below:
$> glance image-members ab15b8d3-8f33-4467-abf2-9f89a042a8c4
tenant1
tenant2 *
(*: Can share image)The member-images
Command
The member-images command displays the list of images
which are shared with a specific member, specified with
<MEMBER>, as shown below:
$> glance member-images tenant1
ab15b8d3-8f33-4467-abf2-9f89a042a8c4
dc9698b4-e9f1-4f75-b777-1a897633e488 *
(*: Can share image)The member-add Command
The member-add command grants a member, specified with
<MEMBER>, access to a private image, specified with
<ID>. The --can-share flag can be given
to allow the member to share the image, as shown below:
$> glance member-add ab15b8d3-8f33-4467-abf2-9f89a042a8c4 tenantId1
$> glance member-add ab15b8d3-8f33-4467-abf2-9f89a042a8c4 tenantId2 --can-shareThe member-delete
Command
The member-delete command revokes the access of a
member, specified with <MEMBER>, to a private image,
specified with <ID>, as shown below:
$> glance member-delete ab15b8d3-8f33-4467-abf2-9f89a042a8c4 tenant1
$> glance member-delete ab15b8d3-8f33-4467-abf2-9f89a042a8c4 tenant2The members-replace
Command
The members-replace command revokes all existing
memberships on a private image, specified with <ID>,
and replaces them with a membership for one member, specified with
<MEMBER>. The --can-share flag can be
given to allow the member to share the image, as shown below:
$> glance members-replace ab15b8d3-8f33-4467-abf2-9f89a042a8c4 tenant1 \
--can-shareThe command is given in plural form to make it clear that all existing memberships are affected by the command.