은솔이의 공부방

📘 Day 58 (2025.09.04.THU) - 오픈스택 기반 클라우드 포렌식(리눅스 포렌식)

📕 local.conf 설정

        stack@ubuntu:~$ cd devstack 

        stack@ubuntu:~/devstack$ nano local.conf 

        [[local|localrc]]

        HOST_IP=192.168.56.125

        SERVICE_HOST=192.168.56.125

        MYSQL_HOST=192.168.56.125

        RABBIT_HOST=192.168.56.125

        GLANCE_HOSTPORT=192.168.56.125:9292

        ADMIN_PASSWORD=openstack

        DATABASE_PASSWORD=$ADMIN_PASSWORD

        RABBIT_PASSWORD=$ADMIN_PASSWORD

        SERVICE_PASSWORD=$ADMIN_PASSWORD

        # Nova

        enable_service n-api n-cond n-cpu n-sch n-novnc

        # Neutron (OVN)

        disable_service q-agt

        enable_service ovn-northd

        enable_service ovn-controller

        enable_service q-ovn-metadata-agent

        enable_service neutron

        # Horizon

        enable_service horizon

        ## Neutron 네트워크 옵션

        Q_USE_SECGROUP=True

        FLOATING_RANGE="192.168.0.0/24"

        FIXED_RANGE="10.0.0.0/24"

        Q_FLOATING_ALLOCATION_POOL=start=192.168.0.100,end=192.168.0.200

        PUBLIC_NETWORK_GATEWAY="192.168.0.1"

        PUBLIC_INTERFACE=enp0s8

        # Open vSwitch 프로바이더 네트워킹 환경설정

        Q_USE_PROVIDERNET_FOR_PUBLIC=True

        OVS_PHYSICAL_BRIDGE=br-enp0s8

        PUBLIC_BRIDGE=br-enp0s8

        OVS_BRIDGE_MAPPINGS=public:br-enp0s8

🌐 네트워크 설정

nano /etc/netplan/50-*.yaml 편집:

웹사이트 접속: 192.168.56.125

📂 설치에 사용된 이미지 확인

        /opt/stack/data/glance/images/UUID 

        UUID: 560f8599-fb14-4925-b04b-46bf30eb7d11

        cirros

확인 명령어:

        openstack image list 

        Missing value auth-url required for auth plugin password

🔑 keystone.rc 설정

        export OS_PROJECT_DOMAIN_NAME=default

        export OS_USER_DOMAIN_NAME=default

        export OS_PROJECT_NAME=admin

        export OS_USERNAME=admin

        export OS_PASSWORD=openstack

        export OS_AUTH_URL=http://192.168.56.125:5000

        export OS_IDENTITY_API_VERSION=3

        export OS_IMAGE_API_VERSION=2

        export PS1='\u@\h \W(keystone)\$ '

		root@openstack ~(keystone)#
 
nano keystone.rc

export OS_PROJECT_DOMAIN_NAME=default

export OS_USER_DOMAIN_NAME=default

export OS_PROJECT_NAME=admin

export OS_USERNAME=admin

export OS_PASSWORD=openstack

export OS_AUTH_URL=http://192.168.56.125:5000

export OS_IDENTITY_API_VERSION=3

export OS_IMAGE_API_VERSION=2

export PS1='\u@\h \W(keystone)\$ '

권한 및 적용:

        chmod 600 ~/keystonerc

        source ~/keystonerc

        echo "source ~/keystonerc " >> ~/.bashrc

💻 설치된 인스턴스 확인

        openstack server list 

        openstack server show <ID>

경로:

        /opt/stack/data/nova/instances/ 

        ├── disk 

        ├── console.log 

        └── libvirt.xml

💾 볼륨(실제 저장 파일) 확인

DevStack은 하나의 시스템에 Controller + Compute가 동시에 작동하므로, 증거 파일은 로컬에서 채집 가능

		장치 이름: /dev/vda
        stack@openstack:/dev/stack-volumes-lvmdriver-1$ ls -al
      

주의: 인스턴스가 running 상태일 때 /opt/stack/data/nova/instances/ 경로에서 디스크 이미지를 확인 가능