码迷,mamicode.com
首页 > 其他好文 > 详细

OpenStack镜像制作-CentOS

时间:2014-12-03 22:46:57      阅读:247      评论:0      收藏:0      [点我收藏+]

标签:style   blog   http   io   ar   color   os   sp   for   

云平台中镜像还是很重要的,提供各种定制化的镜像使得用户体验更好。

最开始玩OpenStack的时候用的是安装文档中提到的cirros,其密码cubswin:) 刚开始感觉很怪,现在已经可以随手打出。ps:打的还很熟练:-)

然后慢慢开始想尝试各种镜像,于是乎在网上搜了很多。如下:

关于CentOS镜像制作需要注意以下几点:

(1)修改网络信息 /etc/sysconfig/network-scripts/ifcfg-eth0 (删掉mac信息),如下:

TYPE=Ethernet
DEVICE=eth0
ONBOOT=yes
BOOTPROTO=dhcp
NM_CONTROLLED=no

(2)删除已生成的网络设备规则,否则制作的镜像不能上网

# rm -rf /etc/udev/rules.d/70-persistent-net.rules 

(3)增加一行到/etc/sysconfig/network

NOZERCONF=yes

(4)安装cloud-init(可选),cloud-init可以在开机时进行密钥注入以及修改hostname等,关于cloud-init,陈沙克的一篇博文有介绍:http://www.chenshake.com/about-openstack-centos-mirror/

# yum install -y cloud-utils cloud-init parted
修改配置文件/etc/cloud/cloud.cfg ,在cloud_init_modules 下面增加:
- resolv-conf

(5)设置系统能自动获取openstack指定的hostname和ssh-key(可选)
编辑/etc/rc.local文件,该文件在开机后会执行,加入以下代码:

 1 if [ ! -d /root/.ssh ]; then
 2 mkdir -p /root/.ssh
 3 chmod 700 /root/.ssh
 4 fi
 5 # Fetch public key using HTTP
 6 ATTEMPTS=30
 7 FAILED=0
 8 
 9  
10 
11 while [ ! -f /root/.ssh/authorized_keys ]; do
12 curl -f http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key > /tmp/metadata-key 2>/dev/null
13 if [ $? -eq 0 ]; then
14 cat /tmp/metadata-key >> /root/.ssh/authorized_keys
15 chmod 0600 /root/.ssh/authorized_keys
16 restorecon /root/.ssh/authorized_keys
17 rm -f /tmp/metadata-key
18 echo “Successfully retrieved public key from instance metadata”
19 echo “*****************20 echo “AUTHORIZED KEYS”
21 echo “*****************22 cat /root/.ssh/authorized_keys
23 echo “*****************24 
25 curl -f http://169.254.169.254/latest/meta-data/hostname > /tmp/metadata-hostname 2>/dev/null
26 if [ $? -eq 0 ]; then
27 TEMP_HOST=`cat /tmp/metadata-hostname`
28 sed -i “s/^HOSTNAME=.*$/HOSTNAME=$TEMP_HOST/g” /etc/sysconfig/network
29 /bin/hostname $TEMP_HOST
30 echo “Successfully retrieved hostname from instance metadata”
31 echo “*****************32 echo “HOSTNAME CONFIG”
33 echo “*****************34 cat /etc/sysconfig/network
35 echo “*****************36 
37 else
38 echo “Failed to retrieve hostname from instance metadata. This is a soft error so we’ll continue”
39 fi
40 rm -f /tmp/metadata-hostname
41 else
42 FAILED=$(($FAILED + 1))
43 if [ $FAILED -ge $ATTEMPTS ]; then
44 echo “Failed to retrieve public key from instance metadata after $FAILED attempts, quitting”
45 break
46 fi
47 echo “Could not retrieve public key from instance metadata (attempt #$FAILED/$ATTEMPTS), retrying in 5 seconds…”
48 sleep 5
49 fi
50 done 

或者

 1 # set a random pass on first boot
 2 if [ -f /root/firstrun ]; then
 3   dd if=/dev/urandom count=50|md5sum|passwd --stdin root
 4   passwd -l root
 5   rm /root/firstrun
 6 fi
 7 
 8 if [ ! -d /root/.ssh ]; then
 9   mkdir -m 0700 -p /root/.ssh
10   restorecon /root/.ssh
11 fi
12 # Get the root ssh key setup
13 # Get the root ssh key setup
14 ReTry=0
15 while [ ! -f /root/.ssh/authorized_keys ] && [ $ReTry -lt 10 ]; do
16   sleep 2
17   curl -f http://169.254.169.254/latest/meta-data/public-keys/0/openssh-key > /root/.ssh/pubkey
18   if [ 0 -eq 0 ]; then
19     mv /root/.ssh/pubkey /root/.ssh/authorized_keys
20   fi
21   ReTry=$[Retry+1]
22 done
23 chmod 600 /root/.ssh/authorized_keys && restorecon /root/.ssh/authorized_keys

主要目的就是获取hostname和公钥

 (6)其他

route命令查看一下路由表

查看/etc/ssh/sshd_conf中PermitRootLogin是不是为yes

 

OpenStack镜像制作-CentOS

标签:style   blog   http   io   ar   color   os   sp   for   

原文地址:http://www.cnblogs.com/gorlf/p/4140740.html

(0)
(0)
   
举报
评论 一句话评论(0
登录后才能评论!
© 2014 mamicode.com 版权所有  联系我们:gaon5@hotmail.com
迷上了代码!