在openstack 中我们登陆我们所创建得虚机往往需要输入用户名和密码才可以登陆虚机， 那么怎么实现免密登陆openstack 虚机
在openstack 中可以通过keypair 来实现免密登陆
介绍用keypair生成和访问虚机的方法.
1. 查看当前环境得keypair
openstack keypair list
2. 创建新得keypair
openstack keypair create test-key
命令回显
-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----
3. 将回显得信息输入一个文件中
vim test.pem
cat test.pem
-----BEGIN RSA PRIVATE KEY-----
MIIEqAIBAAKCAQEAqgUGQqW9hO00k9uQeVi+YJTl/Wz0k198gQf20paI9t4Z0gVC
W1HYujQmuWlj5wPQxWVZSFllttOTaJuzJhctMs5YhhNHAjKTShKovEV9KppqMhyg
mdY22D7FJ7NRVZEcjVhyw2pQt/BVKDLXCR9vBbFIJO0H0h1fBGnv3RDW96PLjch5
ZOX9JRp3v2q/cJAr9jJIhowu7HOxezDOkDZXG+ZblrzRA09wbMYfw9rCOUqAlH8O
Zb4dHKhxeFq1GAcDWYu7y5afiVlMIvftfhJ7FXZPNV4kUkDEZfG0gsOSpfWRQOXl
vMntLkQBZYO+zUFkvRSpAuVVW3TIDlI9F1NRvwIDAQABAoIBAETOscDpSLDyOtQY
CPlDNBDsUcPlg3ndLAsgSQDjEV0vd62qmTdSAW8iSgXBpD/LKIOqx55jJ6n9KGwu
jys8N/uWzPa9+H/oLfnNYWKIkOZcBdxv/4Mi0aFkje/KP4Fsr+x4PkHd1fsLFbum
D6bOhOT94V+oWgDsCBdGNF/4P7eKdn7vfOMb6fGGy52/xFBHo1N6Uwhf6km9XPYP
u8jN8FKp4KUOkYXe2S5s/B1se+56g0v6GbjEZR/xa64np9q/dQZPFD+jsRYdhcTB
CZALX8JZ4xfVtZ6r1yVEma/7Och+NuI5l214AOCRCFVNcVm/Cv4+lx8cP/s4BJ+Z
Ei8WndkCggCBAMeBl9EhFcqBwrTtL+/cL56NU86qOEdOQRBB1YelTMmkJ/jTxw1w
C9K58u59oSok90SaX5TuXo0MwLPekj86bHqmtMIisBlOHGn+m/0P9uP38IfTn8Sg
hYocMuzHy1F4kU1+Mv8SfnBg/Wud64JTVFrcNy1xwsjrwUQDbAUHRH7lAoIAgQDa
KesbT5wk4TR7SPSNp+69Y3ySI2pM96B94kxnn4EAO97SvCwvnZGh89HnTp3Orl3k
a0T+pVg6b5v07hmEj842hhKg/VO9R1NuerycTW+1mVeDM+iAGh0BFGG8P542nuiq
zRH1EL8nW1qiHJekIw3bn4thFbEi/kzFkt62O20f0wKCAIEAm1wMuHtWN9OipzgJ
W3UQ1BxkRgyCNOz4d8t8l9weluuxgPCSEqHNYzUQu62zQll1AMRiaFzT3m0u5yMM
qhY6Aa0uF/vhPGN6dwQhvwiej1o1weAHi5whQbLB6WeQqgoExN7goYdqVOMClbpt
epifmP3iLg5nzATjBK7RgHzvVw0CggCAclK7IGG0emMFZIGTndPduKM0uUQTxWeS
U8VNspOUPzIgjyAKq50PnuWtHmBFM/SNwVAxJJwywtSPzmcjOiM9tbbGdlSqGCsT
Xna09ddibbCAeoGuGcsVXeZ3XPWdjBPz6uVxvpFbCl3F/eOr11iDP464tFRwsdy/
EF3plWdIxP8CggCADdZUKyYJ7IubUk0iIpqIRsdz+96bZuwfp6uwWg0EfnLcVyU2
7rmU/Mut4+G6h+ZSSD356Iuys1nQzv7StOjXJza5rwvMGBuuB1FiDt36ef1ErR9e
VdfkBi47nAUU5ylCHvKYp61RvLbxeVwWoA+rZOAecSZWo8OZeImoNgNRDKM=
-----END RSA PRIVATE KEY-----
4. 确认环境里要使用得 image 、flavor、 network、AZ 创建免密登陆得虚机
nova boot --flavor 4 --image ST_ubuntu_14_04 --key-name test-key --availability-zone AZ2 --nic net-id=1d0e3059-fb84-4a7d-bdcd-445018fce0bc test-vm
+--------------------------------------+--------------------------------------------------------+
| Property | Value |
+--------------------------------------+--------------------------------------------------------+
| OS-DCF:diskConfig | MANUAL |
| OS-EXT-AZ:availability_zone | AZ2 |
| OS-EXT-SRV-ATTR:host | - |
| OS-EXT-SRV-ATTR:hostname | test-vm |
| OS-EXT-SRV-ATTR:hypervisor_hostname | - |
| OS-EXT-SRV-ATTR:instance_name | instance-000000bd |
| OS-EXT-SRV-ATTR:kernel_id | |
| OS-EXT-SRV-ATTR:launch_index | 0 |
| OS-EXT-SRV-ATTR:ramdisk_id | |
| OS-EXT-SRV-ATTR:reservation_id | r-qgxvh0gc |
| OS-EXT-SRV-ATTR:root_device_name | - |
| OS-EXT-SRV-ATTR:user_data | - |
| OS-EXT-STS:power_state | 0 |
| OS-EXT-STS:task_state | scheduling |
| OS-EXT-STS:vm_state | building |
| OS-SRV-USG:launched_at | - |
| OS-SRV-USG:terminated_at | - |
| accessIPv4 | |
| accessIPv6 | |
| adminPass | tXirSKepU8JE |
| config_drive | |
| created | 2020-11-05T10:44:18Z |
| description | - |
| flavor | m1.large (4) |
| hostId | |
| host_status | |
| id | 0b603984-f21e-437a-be21-79487174d1de |
| image | ST_ubuntu_14_04 (3c2ca80b-e494-440c-a68e-b860aa9bd6d8) |
| key_name | test-key |
| locked | False |
| metadata | {} |
| name | test-vm |
| os-extended-volumes:volumes_attached | [] |
| progress | 0 |
| scheduler_hints | {} |
| security_groups | default |
| status | BUILD |
| tenant_id | 22b1dd36c330402f8e936f8a0742c1e8 |
| updated | 2020-11-05T10:44:17Z |
| user_id | f408ca4785194664acd599a92030c00c |
+--------------------------------------+--------------------------------------------------------+
5. 检查创建好得虚机
nova list | grep test-vm
| 0b603984-f21e-437a-be21-79487174d1de | test-vm | ACTIVE | - | Running | test-yk=199.199.1.48
6. 很重要的一步： 修改key file的读写属性为只读（这里已经是root用户，如果不是就加sudo）：
chmod 600 test.pem
7. 更加当前环境决定
（1.） 虚机得网络若是有命令空间 通过以下得命令登陆
查看当前得命名空间
ip netns list
（qdhcp-id（此id时network 得得id ））
qdhcp-c9ba3438-1bdb-472c-87fe-002fbf805dab
qdhcp-1d0e3059-fb84-4a7d-bdcd-445018fce0bc
qdhcp-a2956c43-4d53-4520-9787-07b31d1b183b
ip netns exec qdhcp-1d0e3059-fb84-4a7d-bdcd-445018fce0bc ssh -i test.pem root@199.199.1.48
The authenticity of host '199.199.1.48 (199.199.1.48)' can't be established.
ECDSA key fingerprint is 64:c0:28:fa:9a:8a:48:f9:37:d8:2f:30:6f:ad:c7:20.
Are you sure you want to continue connecting (yes/no)? yes
root@host-199-199-1-48:~#
（2.） 若是虚机网络可以直接和环境通 可以直接ssh -i 登陆
ssh -i test.pem root@199.199.1.48