glance/doc/source/install/install-debian.rst

Install and configure (Debian)

This section describes how to install and configure the Image service, code-named glance, on the controller node. For simplicity, this configuration stores images on the local file system.

Prerequisites

Before you install and configure the Image service, you must create a database, service credentials, and API endpoints.

1. To create the database, complete these steps:

   • Use the database access client to connect to the database server as the root user:

     $ mysql -u root -p

   • Create the glance database:

     MariaDB [(none)]> CREATE DATABASE glance;

   • Grant proper access to the glance database:

     MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' \
       IDENTIFIED BY 'GLANCE_DBPASS';
     MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' \
       IDENTIFIED BY 'GLANCE_DBPASS';

     Replace GLANCE_DBPASS with a suitable password.

   • Exit the database access client.

2. Source the admin credentials to gain access to admin-only CLI commands:

   $ . admin-openrc

3. To create the service credentials, complete these steps:

   • Create the glance user:

     $ openstack user create --domain default --password-prompt glance
     
     User Password:
     Repeat User Password:
     +---------------------+----------------------------------+
     | Field               | Value                            |
     +---------------------+----------------------------------+
     | domain_id           | default                          |
     | enabled             | True                             |
     | id                  | 3f4e777c4062483ab8d9edd7dff829df |
     | name                | glance                           |
     | options             | {}                               |
     | password_expires_at | None                             |
     +---------------------+----------------------------------+

   • Add the admin role to the glance user and service project:

     $ openstack role add --project service --user glance admin

     Note

     This command provides no output.

   • Create the glance service entity:

     $ openstack service create --name glance \
       --description "OpenStack Image" image
     
     +-------------+----------------------------------+
     | Field       | Value                            |
     +-------------+----------------------------------+
     | description | OpenStack Image                  |
     | enabled     | True                             |
     | id          | 8c2c7f1b9b5049ea9e63757b5533e6d2 |
     | name        | glance                           |
     | type        | image                            |
     +-------------+----------------------------------+

4. Create the Image service API endpoints:

   $ openstack endpoint create --region RegionOne \
     image public http://controller:9292
   
   +--------------+----------------------------------+
   | Field        | Value                            |
   +--------------+----------------------------------+
   | enabled      | True                             |
   | id           | 340be3625e9b4239a6415d034e98aace |
   | interface    | public                           |
   | region       | RegionOne                        |
   | region_id    | RegionOne                        |
   | service_id   | 8c2c7f1b9b5049ea9e63757b5533e6d2 |
   | service_name | glance                           |
   | service_type | image                            |
   | url          | http://controller:9292           |
   +--------------+----------------------------------+
   
   $ openstack endpoint create --region RegionOne \
     image internal http://controller:9292
   
   +--------------+----------------------------------+
   | Field        | Value                            |
   +--------------+----------------------------------+
   | enabled      | True                             |
   | id           | a6e4b153c2ae4c919eccfdbb7dceb5d2 |
   | interface    | internal                         |
   | region       | RegionOne                        |
   | region_id    | RegionOne                        |
   | service_id   | 8c2c7f1b9b5049ea9e63757b5533e6d2 |
   | service_name | glance                           |
   | service_type | image                            |
   | url          | http://controller:9292           |
   +--------------+----------------------------------+
   
   $ openstack endpoint create --region RegionOne \
     image admin http://controller:9292
   
   +--------------+----------------------------------+
   | Field        | Value                            |
   +--------------+----------------------------------+
   | enabled      | True                             |
   | id           | 0c37ed58103f4300a84ff125a539032d |
   | interface    | admin                            |
   | region       | RegionOne                        |
   | region_id    | RegionOne                        |
   | service_id   | 8c2c7f1b9b5049ea9e63757b5533e6d2 |
   | service_name | glance                           |
   | service_type | image                            |
   | url          | http://controller:9292           |
   +--------------+----------------------------------+

Install and configure components

1. Install the packages:

   # apt install glance

2. Edit the /etc/glance/glance-api.conf file and complete the following actions:

   • In the [database] section, configure database access:

     [database]
     # ...
     connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance

     Replace GLANCE_DBPASS with the password you chose for the Image service database.

   • In the [keystone_authtoken] and [paste_deploy] sections, configure Identity service access:

     [keystone_authtoken]
     # ...
     www_authenticate_uri = http://controller:5000
     auth_url = http://controller:5000
     memcached_servers = controller:11211
     auth_type = password
     project_domain_name = Default
     user_domain_name = Default
     project_name = service
     username = glance
     password = GLANCE_PASS
     
     [paste_deploy]
     # ...
     flavor = keystone

     Replace GLANCE_PASS with the password you chose for the glance user in the Identity service.

     Note

     Comment out or remove any other options in the [keystone_authtoken] section.

   • In the [glance_store] section, configure the local file system store and location of image files:

     [glance_store]
     # ...
     stores = file,http
     default_store = file
     filesystem_store_datadir = /var/lib/glance/images/

3. Populate the Image service database:

   # su -s /bin/sh -c "glance-manage db_sync" glance

   Note

   Ignore any deprecation messages in this output.

Finalize installation

1. Restart the Image services:

   # service glance-api restart