解读先电2.4 iaas-install-swift-{controller，compute}.sh 脚本

     							*******************  iaas-install-swift-controller.sh  ****************

#!/bin/bash

source /etc/xiandian/openrc.sh
source /etc/keystone/admin-openrc.sh

yum install openstack-swift-proxy python-swiftclient python-keystoneclient python-keystonemiddleware memcached -y
 
 
# 创建swift用户并授予admin权限，创建对象存储服务，创建处理外部、内部和admin访问端口

openstack user create --domain $DOMAIN_NAME --password $SWIFT_PASS swift
openstack role add --project service --user swift admin
openstack service create --name swift --description "OpenStack Object Storage" object-store
openstack endpoint create --region RegionOne object-store public http://$HOST_NAME:8080/v1/AUTH_%\(tenant_id\)s
openstack endpoint create --region RegionOne object-store internal http://$HOST_NAME:8080/v1/AUTH_%\(tenant_id\)s
openstack endpoint create --region RegionOne object-store admin http://$HOST_NAME:8080/v1

cat <<EOF > /etc/swift/proxy-server.conf		# 使用标准输入和输出编写swift的代理服务配置文件

 # 配置默认信息
[DEFAULT]
bind_port = 8080 	 			# 配置对象存储服务组件使用的端口
swift_dir = /etc/swift  		# 配置对象存储服务组件使用的路径
user = swift  					# 配置对象存储服务使用的用户
		
# 配置安装管道： 启用相应的模块
[pipeline:main]
pipeline = catch_errors gatekeeper healthcheck proxy-logging cache container_sync bulk ratelimit authtoken keystoneauth container-quotas account-quotas slo dlo versioned_writes proxy-logging proxy-server 

# 配置代理服务
[app:proxy-server]
use = egg:swift#proxy  		# 设置使用方法
account_autocreate = True  	# 开启自动创建账户

# 配置临时用户角色
[filter:tempauth]
use = egg:swift#tempauth  							# 设置使用方法
user_admin_admin = admin .admin .reseller_admin  	# 设置管理员角色
user_test_tester = testing .admin  					# 设置普通用户角色
user_test2_tester2 = testing2 .admin
user_test_tester3 = testing3
user_test5_tester5 = testing5 service
 
#  配置身份认证服务的访问
[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory  	# Paste过滤器 "authtoken" 添加到Paste管道的适当位置, 完成在OpenStack服务上部署Keystone中间件
auth_uri = http://$HOST_NAME:5000  					# 设置普通用户访问端口
auth_url = http://$HOST_NAME:35357 				 	# 设置管理员访问端口
memcached_servers = $HOST_NAME:11211  				# 设置缓存服务访问端口
auth_type = password								# 设置令牌类型为密码
project_domain_name = $DOMAIN_NAME  				# 设置租户域名
user_domain_name = $DOMAIN_NAME 					# 设置用户域名
project_name = service  							# 设置租户
username = swift  									# 设置用户
password = $SWIFT_PASS  							# 设置密码
delay_auth_decision = True							# 开启延迟授权决定

#配置operator的角色
[filter:keystoneauth]
use = egg:swift#keystoneauth  		# 设置使用方法
operator_roles = admin,user  		# 设置用户角色

# 配置安全验证
[filter:healthcheck]
use = egg:swift#healthcheck、

# 配置memcached
[filter:cache]
memcache_servers = $HOST_NAME:11211		#配置memcached的地址
use = egg:swift#memcache

# 配置速率限制
[filter:ratelimit]
use = egg:swift#ratelimit

# 配置域的重新映射
[filter:domain_remap]
use = egg:swift#domain_remap
[filter:catch_errors]
use = egg:swift#catch_errors

# 配置显示名
[filter:cname_lookup]
use = egg:swift#cname_lookup

# 配置静态网页
[filter:staticweb]
use = egg:swift#staticweb

# 配置临时URL
[filter:tempurl]
use = egg:swift#tempurl

# 配置表单提交方式
[filter:formpost]
 use = egg:swift#formpost

# 配置用户名校验
[filter:name_check]
use = egg:swift#name_check

# 配置端口显示
[filter:list-endpoints]
use = egg:swift#list_endpoints

 # 配置代理日志
[filter:proxy-logging]
use = egg:swift#proxy_logging

# 配置块
[filter:bulk]
use = egg:swift#bulk
[filter:slo]
use = egg:swift#slo
[filter:dlo]
use = egg:swift#dlo

# 容器配额
[filter:container-quotas]
use = egg:swift#container_quotas

# 用户配额
[filter:account-quotas]
use = egg:swift#account_quotas

# 配置系统卫士
[filter:gatekeeper]
use = egg:swift#gatekeeper

# 配置容器同步
[filter:container_sync]
use = egg:swift#container_sync
[filter:xprofile]
use = egg:swift#xprofile
[filter:versioned_writes]
use = egg:swift#versioned_writes
EOF

# swift操作
pushd /etc/swift # 创建目录栈，将当前目录压入栈中（栈顶） 

# 用户环操作

swift-ring-builder account.builder create 18 1 1 # 创建18个分区、1个副本和1频率的用户环构造器文件
swift-ring-builder account.builder add --region 1 --zone 1 --ip $STORAGE_LOCAL_NET_IP --port 6002 --device $OBJECT_DISK --weight 100  # 将$OBJECT_DISK设备添加到用户环 
swift-ring-builder account.builder  			# 构建用户环
swift-ring-builder account.builder rebalance  	# 重新平衡环，通过重新分配分区来检查最近有没有被重新分配的分区

# 容器环操作

swift-ring-builder container.builder create 10 1 1  		# 创建10个分区、副本和频率是1的容器环构造文件
swift-ring-builder container.builder add --region 1 --zone 1 --ip $STORAGE_LOCAL_NET_IP --port 6001 --device $OBJECT_DISK --weight 100  		# 将$OBJECT_DISK设备添加到容器环
swift-ring-builder container.builder  			# 构架容器环
swift-ring-builder container.builder rebalance  # 重新平衡环

# 对象环操作

swift-ring-builder object.builder create 10 1 1  # 创建10个分区、副本和频率是1的对象环构造文件
swift-ring-builder object.builder  add --region 1 --zone 1 --ip $STORAGE_LOCAL_NET_IP --port 6000 --device $OBJECT_DISK --weight 100   # 将$OBJECT_DISK设备添加到容器环
swift-ring-builder object.builder  				# 构建对象环
swift-ring-builder object.builder rebalance  	# 重新平衡环

popd # 将栈顶的目录弹出，与pushd相反

cat << EOF > /etc/swift/swift.conf			# 使用标准输入输出编写swift的配置文件

# 配置存储路径
[swift-hash]
swift_hash_path_suffix = changeme  			# 配置hash路径的前缀
swift_hash_path_prefix = changeme  			# 配置hash路径的后缀

# 配置存储策略
[storage-policy:0]
name = Policy-0  				# 配置默认存储策略的名字
default = yes  					# 开启默认存储策略
aliases = yellow, orange  		# 别名的颜色
[swift-constraints]
EOF

# 修改权限，开启swift的代理和缓存服务
chown -R root:swift /etc/swift

systemctl enable openstack-swift-proxy.service memcached.service
systemctl restart openstack-swift-proxy.service memcached.service

——代理服务（Proxy Server）：对外提供对象服务 API，会根据环的信息来查找服务地址并转发用户请求至相应的账户、容器或者对象服务；由于采用无状态的 REST 请求协议，可以进行横向扩展来均衡负载。

——缓存服务（Cache Server）：缓存的内容包括对象服务令牌，账户和容器的存在信息，但不会缓存对象本身的数据；缓存服务可采用 Memcached 集群，Swift 会使用一致性散列算法来分配缓存地址。

     *******************  iaas-install-swift-compute.sh  ****************

#!/bin/bash

source /etc/xiandian/openrc.sh  
								
yum install xfsprogs rsync openstack-swift-account openstack-swift-container openstack-swift-object -y  		# 安装swift服务组件

mkfs.xfs -i size=1024 -f /dev/$OBJECT_DISK  			# 格式化分区

sed -i '/nodiratime/d' /etc/fstab  						# 删除旧挂载

echo "/dev/$OBJECT_DISK /swift/node xfs loop,noatime,nodiratime,nobarrier,logbufs=8 0 0" >> /etc/fstab  	# 设置永久挂载

mkdir -p /swift/node  									# 创建挂载目录

mount /dev/$OBJECT_DISK /swift/node  					# 挂载

scp $HOST_NAME:/etc/swift/ *.ring.gz /etc/swift/  		#同步环到集群到当前节点

cat <<EOF > /etc/rsyncd.conf		# 配置同步服务器

pid file = /var/run/rsyncd.pid  	# 进程号文件路径
log file = /var/log/rsyncd.log  	# 日志文件路径
uid = swift  						# 用户号
gid = swift  						# 组号
address = 127.0.0.1  				# 本机地址

# 用户配置
[account]
path            = /swift/node  				# 路径
read only       = false 					# 是否只读
write only      = no 						# 是否只写
list            = yes  						# 是否可以查看
incoming chmod  = 0644  					# 进入权限
outgoing chmod  = 0644  					# 出去权限
max connections = 25  						# 最大连接数
lock file =     /var/lock/account.lock  	# 锁文件路径

# 容器配置
[container]
path            = /swift/node
read only       = false
write only      = no
list            = yes
incoming chmod  = 0644
outgoing chmod  = 0644
max connections = 25
lock file =     /var/lock/container.lock

# 对象配置
[object]
path            = /swift/node
read only       = false
write only      = no
list            = yes
incoming chmod  = 0644
outgoing chmod  = 0644
max connections = 25
lock file =     /var/lock/object.lock

# 服务配置
[swift_server]
path            = /etc/swift
read only       = true
write only      = no
list            = yes
incoming chmod  = 0644
outgoing chmod  = 0644
max connections = 5
lock file =     /var/lock/swift_server.lock
EOF

# 开启同步服务
systemctl enable rsyncd.service
systemctl restart rsyncd.service

cat <<EOF > /etc/swift/account-server.conf			# 配置账户服务
[DEFAULT]
bind_port = 6002  						# 访问端口
user = swift  							# 用户
swift_dir = /etc/swift  				# 访问路径
devices = /swift/node  					# 设备路径
mount_check = false						# 配置挂载不用检查

[pipeline:main]
pipeline = healthcheck recon account-server

[app:account-server]
use = egg:swift#account

[filter:healthcheck]
use = egg:swift#healthcheck

[filter:recon]
use = egg:swift#recon

recon_cache_path = /var/cache/swift

[account-replicator]
[account-auditor]
[account-reaper]

[filter:xprofile]
use = egg:swift#xprofile
EOF

cat <<EOF > /etc/swift/container-server.conf			# 配置容器服务
[DEFAULT]
bind_port = 6001
user = swift
swift_dir = /etc/swift
devices = /swift/node
mount_check = false

[pipeline:main]
pipeline = healthcheck recon container-server

[app:container-server]
use = egg:swift#container

[filter:healthcheck]
use = egg:swift#healthcheck

[filter:recon]
use = egg:swift#recon

recon_cache_path = /var/cache/swift

[container-replicator]
[container-updater]
[container-auditor]
[container-sync]

[filter:xprofile]
use = egg:swift#xprofile
EOF

cat <<EOF > /etc/swift/object-server.conf			# 配置对象服务

[DEFAULT]
bind_port = 6000
user = swift
swift_dir = /etc/swift
devices = /swift/node
mount_check = false

[pipeline:main]
pipeline = healthcheck recon object-server

[app:object-server]
use = egg:swift#object

[filter:healthcheck]
use = egg:swift#healthcheck

[filter:recon]
use = egg:swift#recon
recon_cache_path = /var/cache/swift
recon_lock_path = /var/lock

[object-replicator]
[object-reconstructor]
[object-updater]
[object-auditor]

[filter:xprofile]
use = egg:swift#xprofile
EOF

cat <<EOF > /etc/swift/swift.conf			# 配置swift

# 配置存储路径
[swift-hash]
swift_hash_path_suffix = changeme  		# 配置hash路径的后缀
swift_hash_path_prefix = changeme 		# 配置hash路径的前缀

# 配置存储策略
[storage-policy:0]
name = Policy-0
default = yes
aliases = yellow, orange
[swift-constraints]
EOF

# 修改目录访问权限

chown -R swift:swift /swift/node
mkdir -p /var/cache/swift
chown -R root:swift /var/cache/swift
chmod -R 775 /var/cache/swift
chown -R root:swift /etc/swift

# 开启swift的账户、容器和对象服务

systemctl enable openstack-swift-account.service openstack-swift-account-auditor.service openstack-swift-account-reaper.service openstack-swift-account-replicator.service
systemctl restart openstack-swift-account.service openstack-swift-account-auditor.service openstack-swift-account-reaper.service openstack-swift-account-replicator.service

systemctl enable openstack-swift-container.service openstack-swift-container-auditor.service openstack-swift-container-replicator.service openstack-swift-container-updater.service
systemctl restart openstack-swift-container.service openstack-swift-container-auditor.service openstack-swift-container-replicator.service openstack-swift-container-updater.service

systemctl enable openstack-swift-object.service openstack-swift-object-auditor.service openstack-swift-object-replicator.service openstack-swift-object-updater.service
systemctl restart openstack-swift-object.service openstack-swift-object-auditor.service openstack-swift-object-replicator.service openstack-swift-object-updater.service

——账户服务（Account Server）：提供账户元数据和统计信息，并维护所含容器列表的服务，每个账户的信息被存储在一个 SQLite 数据库中。

——容器服务（Container Server）：提供容器元数据和统计信息，并维护所含对象列表的服务，每个容器的信息也存储在一个 SQLite 数据库中。

——对象服务（Object Server）：提供对象元数据和内容服务，每个对象的内容会以文件的形式存储在文件系统中，元数据会作为文件属性来存储，建议采用支持扩展属性的 XFS 文件系统。

——账户清理服务（Account Reaper）：移除被标记为删除的账户，删除其所包含的所有容器和对象。

——复制服务（Replicator）：会检测本地分区副本和远程副本是否一致，具体是通过对比散列文件和高级水印来完成，发现不一致时会采用推式（Push）更新远程副本，例如对象复制服务会使用远程文件拷贝工具 rsync 来同步；另外一个任务是确保被标记删除的对象从文件系统中移除。

——更新服务（Updater）：当对象由于高负载的原因而无法立即更新时，任务将会被序列化到在本地文件系统中进行排队，以便服务恢复后进行异步更新；例如成功创建对象后容器服务器没有及时更新对象列表，这个时候容器的更新操作就会进入排队中，更新服务会在系统恢复正常后扫描队列并进行相应的更新处理。

——审计服务（Auditor）：检查对象，容器和账户的完整性，如果发现比特级的错误，文件将被隔离，并复制其他的副本以覆盖本地损坏的副本；其他类型的错误会被记录到日志中。

OpenStack的Swift组件详解：https://www.cnblogs.com/mh20131118/p/12939351.html