天天看點
傳回

openstack train 版本安裝

版本檢視

https://releases.openstack.org/

openstack 安裝：

簡介 

OpenStack是一個開源的雲計算管理平台項目，是一系列軟體開源項目的組合，由NASA(美國國家航空航天局)和Rackspace合作研發并發起，以Apache許可證授權的開源代碼項目
OpenStack為私有雲和公有雲提供可擴充的彈性的雲計算服務，項目目标是提供實施簡單、可大規模擴充、豐富、标準統一的雲計算管理平台
OpenStack覆寫了網絡、虛拟化、作業系統、伺服器等各個方面,它是一個正在開發中的雲計算平台項目，根據成熟及重要程度的不同，被分解成核心項目、孵化項目，以及支援項目和相關項目，每個項目都有自己的委員會和項目技術主管，而且每個項目都不是一成不變的，孵化項目可以根據發展的成熟度和重要性，轉變為核心項目
核心元件
1、計算(Compute)Nova：一套控制器，用于為單個使用者或使用群組管理虛拟機執行個體的整個生命周期，根據使用者需求來提供虛拟服務。負責虛拟機建立、開機、關機、挂起、暫停、調整、遷移、重新開機、銷毀等操作，配置CPU、記憶體等資訊規格
2、對象存儲(Object Storage)Swift：一套用于在大規模可擴充系統中通過内置備援及高容錯機制實作對象存儲的系統，允許進行存儲或者檢索檔案，可為Glance提供鏡像存儲，為Cinder提供卷備份服務
3、鏡像服務(Image Service)Glance：一套虛拟機鏡像查找及檢索系統，支援多種虛拟機鏡像格式（AKI、AMI、ARI、ISO、QCOW2、Raw、VDI、VHD、VMDK），有建立上傳鏡像、删除鏡像、編輯鏡像基本資訊的功能
4、身份服務(Identity Service)Keystone：為OpenStack其他服務提供身份驗證、服務規則和服務令牌的功能，管理Domains、Projects、Users、Groups、Roles
5、網絡&位址管理(Network)Neutron：提供雲計算的網絡虛拟化技術，為OpenStack其他服務提供網絡連接配接服務。為使用者提供接口，可以定義Network、Subnet、Router，配置DHCP、DNS、負載均衡、L3服務，網絡支援GRE、VLAN，插件架構支援許多主流的網絡廠家和技術，如OpenvSwitch
6、塊存儲(Block Storage)Cinder：為運作執行個體提供穩定的資料塊存儲服務，它的插件驅動架構有利于塊裝置的建立和管理，如建立卷、删除卷，在執行個體上挂載和解除安裝卷
7、UI 界面(Dashboard)Horizon：OpenStack中各種服務的Web管理門戶，用于簡化使用者對服務的操作，例如：啟動執行個體、配置設定IP位址、配置通路控制等
8、測量(Metering)Ceilometer：能把OpenStack内部發生的幾乎所有的事件都收集起來，然後為計費和監控以及其它服務提供資料支撐
9、部署編排(Orchestration)Heat：提供了一種通過模闆定義的協同部署方式，實作雲基礎設施軟體運作環境(計算、存儲和網絡資源)的自動化部署
10、資料庫服務(Database Service)Trove：為使用者在OpenStack的環境提供可擴充和可靠的關系和非關系資料庫引擎服務

前期準備

準備兩台Centos7伺服器，配置IP位址和hostname,同步系統時間，關閉防火牆和selinux，修改ip位址和hostname映射

1.修改機器主機名分别為：controller和compute

#hostnamectl set-hostname hostname

2.編輯controller和compute的 /etc/hosts 檔案

#vi /etc/hosts
172.30.154.44 controller
172.30.154.47 compute

3.驗證

采取互ping以及ping百度的方式

4.關閉防火牆

systemctl stop firewalld.service            #停止firewall
systemctl disable firewalld.service        #禁止firewall開機啟動

5.關閉selinux

#setenforce 0 臨時關閉
#vi /etc/selinux/config
#SELINUX=enforcing改為SELINUX=disabled
重新開機生效
  1. 設定同一時間可以打開的檔案數為65535 
[root@controller]# ulimit -n 65535
[root@controller# ulimit -n
65535
[root@rabbitmq rabbitmq]# vim /etc/security/limits.conf
* soft nofile 65536
* hard nofile 131072
* soft nproc 2048
* hard nproc 4096
  1. 設定時間同步
自行百度設定時間同步
  1. 重新開機伺服器
reboot

部署服務

安裝epel源 

[root@controller ~]# yum install epel-release -y
[root@computer ~]# yum install epel-release -y

安裝openstack源（train 版本） 

[root@controller ~]# yum install centos-release-openstack-train -y
[root@computer ~]# yum install centos-release-openstack-train -y

安裝openstack的用戶端和selinux服務 

[root@controller ~]# yum install -y python2-openstackclient openstack-selinux
[root@computer ~]# yum install -y python2-openstackclient openstack-selinux

部署Mariadb資料庫和memcached 

[root@controller ~]# yum install mariadb mariadb-server python2-PyMySQL memcached -y

安裝消息隊列服務 

[root@controller ~]# yum install rabbitmq-server -y

安裝keystone服務 

[root@controller bin]# yum install openstack-keystone httpd mod_wsgi -y

安裝glance服務 

[root@controller ~]# yum install openstack-glance -y

安裝placememt服務 

[root@controller ~]# yum install openstack-placement-api -y

controller安裝nova服務 

[root@controller ~]# yum install openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler  -y

computer安裝nova服務 

[root@computer ~]# yum install openstack-nova-compute -y

controller安裝neutron服務 

[root@controller ~]# yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables ipset iproute -y

computer安裝neutron服務 

[root@computer ~]# yum install openstack-neutron-linuxbridge ebtables ipset iproute -y

安裝dashboard元件 

[root@controller ~]# yum install openstack-dashboard -y

controller安裝cinder和lvm服務 

[root@storager ~]# yum install l openstack-cinder -y

computer安裝cinder和lvm服務 

[root@storager ~]# yum install lvm2 device-mapper-persistent-data openstack-cinder targetcli python2-keystone -y

開啟硬體加速 

[root@controller ~]# modprobe kvm-intel
[root@computer ~]# modprobe kvm-intel

安裝依賴 

[root@controller ~]# yum -y install libibverbs

配置消息隊列服務

開啟服務 

[root@controller ~]# systemctl start rabbitmq-server.service
[root@controller ~]# systemctl enable rabbitmq-server.service

添加使用者 

[root@controller ~]# rabbitmqctl add_user openstack openstack

授權限 

[root@controller ~]#rabbitmqctl set_user_tags admin administrator
[root@controller ~]# rabbitmqctl set_permissions openstack ".*" ".*" ".*"

啟動監控界面 

[root@controller ~]#rabbitmq-plugins enable rabbitmq_management

配置memcached服務

修改配置檔案 

[root@controller ~]# vim /etc/sysconfig/memcached 
PORT="11211"
USER="memcached"
MAXCONN="65535"
CACHESIZE="1024"
OPTIONS="-l 127.0.0.1,::1,controller"

啟動服務 

[root@controller ~]# systemctl start memcached.service
[root@controller ~]# systemctl enable memcached.service

配置資料庫服務 

[root@controller ~]# vim /etc/my.cnf.d/mariadb-server.cnf
bind-address = 172.30.154.44
default-storage-engine = innodb
innodb_file_per_table = on
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8
           

[root@controller ~]# systemctl start mariadb.service
[root@controller ~]# systemctl enable mariadb.service

建立資料庫 

MariaDB [(none)]> create database keystone;
MariaDB [(none)]> create database glance;
MariaDB [(none)]> create database nova;
MariaDB [(none)]> create database nova_api;
MariaDB [(none)]> create database nova_cell0;
MariaDB [(none)]> create database neutron;
MariaDB [(none)]> create database cinder;
MariaDB [(none)]> create database placement;

授權使用者 

MariaDB [(none)]> grant all privileges on keystone.* to 'keystone'@'localhost' identified by '123456';
MariaDB [(none)]> grant all privileges on keystone.* to 'keystone'@'%' identified by '123456';

MariaDB [(none)]> grant all privileges on glance.* to 'glance'@'localhost' identified by '123456';
MariaDB [(none)]> grant all privileges on glance.* to 'glance'@'%' identified by '123456';

MariaDB [(none)]> grant all privileges on nova.* to 'nova'@'localhost' identified by '123456';
MariaDB [(none)]> grant all privileges on nova.* to 'nova'@'%' identified by '123456';

MariaDB [(none)]> grant all privileges on nova_api.* to 'nova'@'localhost' identified by '123456';
MariaDB [(none)]> grant all privileges on nova_api.* to 'nova'@'%' identified by '123456';

MariaDB [(none)]> grant all privileges on nova_cell0.* to 'nova'@'localhost' identified by '123456';
MariaDB [(none)]> grant all privileges on nova_cell0.* to 'nova'@'%' identified by '123456';

MariaDB [(none)]> grant all privileges on neutron.* to 'neutron'@'localhost' identified by '123456';
MariaDB [(none)]> grant all privileges on neutron.* to 'neutron'@'%' identified by '123456';

MariaDB [(none)]> grant all privileges on cinder.* to 'cinder'@'localhost' identified by '123456';
MariaDB [(none)]> grant all privileges on cinder.* to 'cinder'@'%' identified by '123456';

MariaDB [(none)]> grant all privileges on placement.* to 'placement'@'localhost' identified by '123456';
MariaDB [(none)]> grant all privileges on placement.* to 'placement'@'%' identified by '123456';

MariaDB [(none)]> flush privileges;

通過運作mysql_secure_installation腳本來保護資料庫服務 

[root@controller ~]# mysql_secure_installation

配置keystone服務 

[root@controller ~]# vim /etc/keystone/keystone.conf
[database]
connection = mysql+pymysql://keystone:your_password@controller/keystone
[token]
provider = fernet

資料庫同步 

[root@controller ~]# su -s /bin/sh -c "keystone-manage db_sync" keystone

密鑰庫初始化 

[root@controller ~]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone

[root@controller ~]# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

[root@controller ~]# keystone-manage bootstrap --bootstrap-password openstack --bootstrap-admin-url http://controller:5000/v3/ --bootstrap-internal-url http://controller:5000/v3/ --bootstrap-public-url http://controller:5000/v3/ --bootstrap-region-id RegionOne

配置httpd服務 

#修改配置檔案
[root@controller ~]# vi /etc/httpd/conf/httpd.conf
ServerName controller

#建立軟連接配接
[root@controller ~]# ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

#啟動服務
[root@controller ~]# systemctl start httpd
[root@controller ~]# systemctl enable httpd

配置admin環境變量腳本 

[root@controller ~]# vi admin-openrc 
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=openstack
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
export OS_VOLUME_API_VERSION=2

驗證環境變量 

[root@controller ~]# source admin-openrc
[root@controller ~]# openstack token issue

建立service項目 

[root@controller ~]# openstack project create --domain default --description "Service Project" service

建立demo項目 

[root@controller ~]# openstack project create --domain default --description "Demo Project" demo

建立demo使用者 

[root@controller ~]# openstack user create --domain default --password-prompt demo

建立user角色 

[root@controller ~]# openstack role create user

添加user角色到demo項目和使用者 

[root@controller ~]# openstack role add --project demo --user demo user

配置demo環境變量腳本 

[root@controller ~]# vi demo-openrc 
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=demo
export OS_USERNAME=demo
export OS_PASSWORD=demo
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

配置glance服務

建立并配置glance使用者 

[root@controller ~]# openstack user create --domain default --password-prompt glance
[root@controller ~]# openstack role add --project service --user glance admin

建立glance服務實體 

[root@controller ~]# openstack service create --name glance  --description "OpenStack Image" image

建立glance服務端點 

[root@controller ~]# openstack endpoint create --region RegionOne image public http://controller:9292
[root@controller ~]# openstack endpoint create --region RegionOne image internal http://controller:9292
[root@controller ~]# openstack endpoint create --region RegionOne  image admin http://controller:9292
           
[root@controller ~]# vim /etc/glance/glance-api.conf
[database]
connection = mysql+pymysql://glance:your_password@controller/glance
[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = glance

[paste_deploy]
flavor = keystone

[glance_store]
stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/

同步資料庫 

[root@controller ~]# su -s /bin/sh -c "glance-manage db_sync" glance
           

[root@controller ~]# systemctl enable openstack-glance-api.service
[root@controller ~]# systemctl start openstack-glance-api.service

上傳鏡像 

[root@controller ~]# glance image-create --name Centos7 --disk-format qcow2 --container-format bare --progress < CentOS-7-x86_64-GenericCloud-1907.qcow2

檢視鏡像 

[root@controller ~]# openstack image list

Controller配置placement服務

建立并配置placement使用者 

[root@controller ~]# openstack user create --domain default --password-prompt placement
[root@controller ~]# openstack role add --project service --user placement admin

建立placement服務實體 

[root@controller ~]# openstack service create --name placement   --description "Placement API" placement

建立placement服務端點 

[root@controller ~]# openstack endpoint create --region RegionOne   placement public http://controller:8778
[root@controller ~]# openstack endpoint create --region RegionOne   placement internal http://controller:8778
[root@controller ~]# openstack endpoint create --region RegionOne   placement admin http://controller:8778
           

[root@controller ~]# vim /etc/placement/placement.conf
[placement_database]
connection = mysql+pymysql://placement:'your_password'@controller/placement

[api]
auth_strategy = keystone

[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = placement
password = placement
           

[root@controller ~]# su -s /bin/sh -c "placement-manage db sync" placement

重新開機服務 

[root@controller ~]# systemctl restart httpd

Controller配置nova服務

建立并配置nova使用者 

[root@controller ~]# openstack user create --domain default --password-prompt nova
[root@controller ~]# openstack role add --project service --user nova admin

建立nova服務實體 

[root@controller ~]# openstack service create --name nova --description "OpenStack Compute" compute

建立nova服務端點 

[root@controller ~]# openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1
[root@controller ~]# openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1
[root@controller ~]# openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1
           

[root@controller nova]# cp -a /etc/nova/nova.conf{,.bak2}
[root@controller nova]# grep -Ev '^$|#' /etc/nova/nova.conf.bak2 > /etc/nova/nova.conf
[root@controller ~]# vim /etc/nova/nova.conf
[DEFAULT]
enabled_apis = osapi_compute,metadata
my_ip = 192.168.29.148
transport_url = rabbit://openstack:openstack@controller:5672/
auth_strategy=keystone
block_device_allocate_retries = 600

[api_database]
connection = mysql+pymysql://nova:your_password@controller/nova_api

[database]
connection = mysql+pymysql://nova:your_password@controller/nova

[api]
auth_strategy = keystone 

[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = nova

[vnc]
enabled = true
server_listen = $my_ip
server_proxyclient_address = $my_ip

[glance]
api_servers = http://controller:9292

[oslo_concurrency]
lock_path = /var/lib/nova/tmp

[placement]
os_region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = placement
[root@controller ~]# vi /etc/httpd/conf.d/00-placement-api.conf

添加如下内容

<Directory /usr/bin>
   <IfVersion >= 2.4>
      Require all granted
   </IfVersion>
   <IfVersion < 2.4>
      Order allow,deny
      Allow from all
   </IfVersion>
</Directory>

重新開機httpd服務 

[root@controller ~]# systemctl restart httpd
           

[root@controller ~]# su -s /bin/sh -c "nova-manage api_db sync" nova
[root@controller ~]# su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
[root@controller ~]# su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
[root@controller ~]# su -s /bin/sh -c "nova-manage db sync" nova

驗證 

[root@controller ~]# su -s /bin/sh -c "nova-manage cell_v2 list_cells" nova
           

[root@controller ~]# systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
[root@controller ~]# systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service

compute配置nova服務 

[root@controller nova]# cp -a /etc/nova/nova.conf{,.bak2}
[root@controller nova]# grep -Ev '^$|#' /etc/nova/nova.conf.bak2 > /etc/nova/nova.conf
[root@compute ~]# vi /etc/nova/nova.conf
[DEFAULT]
enabled_apis = osapi_compute,metadata
transport_url = rabbit://openstack:openstack@controller
my_ip = 192.168.29.146
auth_strategy=keystone
block_device_allocate_retries = 600

[api]
auth_strategy = keystone

[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = nova

[vnc]
enabled = True
server_listen = 0.0.0.0
server_proxyclient_address = $my_ip
novncproxy_base_url = http://controller:6080/vnc_auto.html

[glance]
api_servers = http://controller:9292

[oslo_concurrency]
lock_path = /var/lib/nova/tmp

[placement]
os_region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = placement

[libvirt]
virt_type = kvm
#虛拟機部署叢集需要用qemu
#virt_type = qemu
           
[root@compute ~]# systemctl start libvirtd.service openstack-nova-compute.service
[root@compute ~]# systemctl enable libvirtd.service openstack-nova-compute.service

controller添加computer進入資料庫

檢視nova-compute結點 

[root@controller ~]# openstack compute service list --service nova-compute

添加資料庫 

[root@controller ~]# su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova

controller配置neutron服務

建立并配置neutron使用者 

[root@controller ~]# openstack user create --domain default --password-prompt neutron
[root@controller ~]# openstack role add --project service --user neutron admin

建立neutron服務實體 

[root@controller ~]# openstack service create --name neutron --description "OpenStack Networking" network

建立neutron服務端點 

[root@controller ~]# openstack endpoint create --region RegionOne network public http://controller:9696
[root@controller ~]# openstack endpoint create --region RegionOne  network internal http://controller:9696
[root@controller ~]# openstack endpoint create --region RegionOne  network admin http://controller:9696

修改配置檔案(linuxbridge網絡架構)

[root@controller ~]# vi /etc/neutron/neutron.conf 
[DEFAULT]
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = true
transport_url = rabbit://openstack:openstack@controller
auth_strategy = keystone
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true

[database]
connection = mysql+pymysql://neutron:your_password@controller/neutron

[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = neutron

[nova]
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = nova

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
[root@controller ~]# vi /etc/neutron/plugins/ml2/ml2_conf.ini 
[ml2]
#type_drivers = flat,vlan,vxlan
type_drivers = flat,vlan
#tenant_network_types = vxlan
tenant_network_types =
mechanism_drivers = linuxbridge,l2population
extension_drivers = port_security

[ml2_type_flat]
flat_networks = provider

[ml2_type_vxlan]
#vni_ranges = 1:1000

[securitygroup]
enable_ipset = true
[root@controller ~]# vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini 
[linux_bridge]
physical_interface_mappings = provider:ens160 #ens160為實體機對外通路網卡

[vxlan]
enable_vxlan = false
#enable_vxlan = true
#local_ip = 172.30.154.44
#l2_population = true

[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
[root@controller ~]# vi /etc/neutron/l3_agent.ini 
[DEFAULT]
interface_driver = linuxbridge
[root@controller ~]# vi /etc/neutron/dhcp_agent.ini 
[DEFAULT]
interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true
[root@controller ~]# vi /etc/neutron/metadata_agent.ini 
[DEFAULT]
nova_metadata_host = controller
#metadata_proxy_shared_secret = 000000
metadata_proxy_shared_secret = METADATA_SECRET
[root@controller ~]# vi /etc/nova/nova.conf 
[neutron]
url = http://controller:9696
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET

建立軟連結 

[root@controller ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
           

[root@controller ~]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
           

#重新開機nova-api服務
[root@controller ~]# systemctl restart openstack-nova-api.service

#linuxbridge架構
[root@controller ~]# systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service
[root@controller ~]# systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service

computer配置neutron服務

修改配置檔案(linuxbridge架構) 

[root@computer ~]# vi /etc/neutron/neutron.conf
[DEFAULT]
transport_url = rabbit://openstack:openstack@controller
auth_strategy = keystone

[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = neutron

[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
[root@computer ~]# vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini 
[linux_bridge]
physical_interface_mappings = provider:ens160

[vxlan]
enable_vxlan = false
#local_ip = 192.168.29.149
#l2_population = true

[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
[root@computer ~]# vi /etc/nova/nova.conf 
[neutron]
url = http://controller:9696
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = neutron
           

#重新開機nova-compute服務
[root@compute ~]# systemctl stop openstack-nova-compute.service
[root@compute ~]# systemctl start openstack-nova-compute.service
#注:直接restart重新開機可能會導緻報錯

#linuxbridge架構
[root@compute ~]# systemctl start neutron-linuxbridge-agent.service
[root@compute ~]# systemctl enable neutron-linuxbridge-agent.service
驗證

[root@controller ~]# openstack network agent list

#檢視日志
[root@computer ~]# tail /var/log/nova/nova-compute.log

配置dashboard元件 

[root@controller ~]# vim /etc/openstack-dashboard/local_settings
OPENSTACK_HOST = "controller"
ALLOWED_HOSTS = ['*', 'two.example.com']
SESSION_ENGINE = 'django.contrib.sessions.backends.cache'
CACHES = { 'default': { 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache', 'LOCATION': 'controller:11211', }
}
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
OPENSTACK_API_VERSIONS = { "identity": 3, "image": 2, "volume": 2,
}
OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"
WEBROOT = '/dashboard/'

重建apache的dashboard配置檔案 

[root@controller  ~]# cd /usr/share/openstack-dashboard
[root@controller  ~]# python manage.py make_web_conf --apache > /etc/httpd/conf.d/openstack-dashboard.conf
[root@controller  ~]#ln -s /etc/openstack-dashboard /usr/share/openstack-dashboard/openstack_dashboard/conf
[root@controller ~]# vim /etc/httpd/conf.d/openstack-dashboard.conf
WSGIApplicationGroup %{GLOBAL}
#将原有的配置注釋掉，添加以下配置
#WSGIScriptAlias / /usr/share/openstack-dashboard/openstack_dashboard/wsgi.py
#Alias /static /usr/share/openstack-dashboard/stati

WSGIScriptAlias /dashboard /usr/share/openstack-dashboard/openstack_dashboard/wsgi/django.wsgi
Alias /dashboard/static /usr/share/openstack-dashboard/static
           

[root@controller ~]# systemctl restart httpd.service memcached.service

通路web界面 

浏覽器通路http://ip/dashboard

安裝并配置一個存儲節點（類似于計算節點）

沒有存儲節點預設存儲在計算節點的本地硬碟，目錄為/var/lib/nova/instances

本地硬碟的優勢是性能好，缺點是不靈活

本次試驗還是安裝在控制節點上面（對于cinder來說就是一個存儲節點）

Computer配置cinder服務(有第二塊硬碟可配置，差別系統盤)

配置cinder硬碟 

[root@computer~]# mkfs.xfs -f /dev/sdb

配置邏輯卷 

[root@computer~]# pvcreate /dev/sdb
[root@computer~]# vgcreate cinder-volumes /dev/sdb

修改lvm的配置檔案中添加filter，隻有instance可以通路 

[root@test03 ~]# vim /etc/lvm/lvm.conf
143 filter = ["a/sda/","a/sdb/","r/.*/"]

啟動lvm 程式

[root@test03 ~]# systemctl enable lvm2-lvmetad.service
[root@test03 ~]# systemctl start lvm2-lvmetad.service
           

[root@controller ~]# cp -a /etc/cinder/cinder.conf{,.bak}
[root@controller ~]# grep -Ev '^$|#' /etc/cinder/cinder.conf.bak > /etc/cinder/cinder.conf
[root@controller ~]# vim /etc/cinder/cinder.conf

[default]
transport_url = rabbit://openstack:openstack@controller
auth_strategy = keystone
my_ip = 192.168.29.149
enabled_backends = lvm
glance_api_servers = http://controller:9292

[database]
connection = mysql+pymysql://cinder:your_password@controller/cinder

[keystone_authtoken]
www_authenticate_uri = http://controller:5000
#auth_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_id = default
user_domain_id = default
project_name = service
username = cinder
password = cinder

[oslo_concurrency]
lock_path = /var/lib/cinder/tmp

#沒有lvm标簽自行添加
[lvm]
volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
volume_group = cinder-volumes
#volumes_dir = $state_path/volumes
iscsi_protocol = iscsi
iscsi_helper = lioadm
#iscsi_ip_address = 172.30.154.47#存儲節點ip
           
[root@computer~]# systemctl start openstack-cinder-volume.service  target.service 
[root@computer~]# systemctl enable openstack-cinder-volume.service  target.service

Computer配置tgt服務(此服務官方文檔未說明，具體作用未知，檢視源碼有此服務，故安裝，不安裝報錯)

安裝 scsi-target-utils 

[root@computer~]# yum --enablerepo=epel -y install scsi-target-utils libxslt

配置 

vim /etc/tgt/tgtd.conf
添加如下内容
include /var/lib/cinder/volumes/*
啟動 tgtd 服務 
//設定開機啟動
systemctl enable tgtd

//啟動
systemctl start tgtd

Controller配置cinder服務

建立并配置cinder使用者 

[root@controller ~]# openstack user create --domain default --password-prompt cinder
[root@controller ~]# openstack role add --project service --user cinder admin

建立cinder服務實體 

[root@controller ~]# openstack service create --name cinderv2 --description "OpenStack Block Storage" volumev2
[root@controller ~]# openstack service create --name cinderv3 --description "OpenStack Block Storage" volumev3

建立cinder服務端點 

[root@controller ~]# openstack endpoint create --region RegionOne  volumev2 public http://controller:8776/v2/%\(project_id\)s
[root@controller ~]# openstack endpoint create --region RegionOne  volumev2 internal  http://controller:8776/v2/%\(project_id\)s
[root@controller ~]# openstack endpoint create --region RegionOne  volumev2 admin  http://controller:8776/v2/%\(project_id\)s

[root@controller ~]# openstack endpoint create --region RegionOne  volumev3 public http://controller:8776/v3/%\(project_id\)s
[root@controller ~]# openstack endpoint create --region RegionOne  volumev3 internal  http://controller:8776/v3/%\(project_id\)s
[root@controller ~]# openstack endpoint create --region RegionOne  volumev3 admin http://controller:8776/v3/%\(project_id\)s

編輯配置檔案 

[root@controller ~]# cp -a /etc/cinder/cinder.conf{,.bak}
[root@controller ~]# grep -Ev '^$|#' /etc/cinder/cinder.conf.bak > /etc/cinder/cinder.conf
[root@controller ~]# vim /etc/cinder/cinder.conf

[default]
transport_url = rabbit://openstack:openstack@controller
auth_strategy = keystone
my_ip = 192.168.29.148

[database]
connection = mysql+pymysql://cinder:your_password@controller/cinder
[keystone_authtoken]
www_authenticate_uri = http://controller:5000
#auth_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = cinder
password = cinder

[oslo_concurrency]
lock_path = /var/lib/cinder/tmp
[root@controller ~]# vim /etc/nova/nova.conf 
[cinder]
os_region_name = RegionOne

重新開機nova服務

systemctl restart openstack-nova-api.service 

[root@controller ~]# su -s /bin/sh -c "cinder-manage db sync" cinder
           

[root@controller ~]# systemctl start openstack-cinder-api.service openstack-cinder-scheduler.service 
[root@controller ~]# systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service

檢視狀态

[root@controller ~]# openstack volume service list

建立卷 

#容量為1G
[root@controller ~]# cinder create --name demo_volume 1

挂載卷 

#檢視卷id
[root@controller ~]# cinder list
#挂載卷到雲主機
[root@controller ~]# nova volume-attach mycentos e9804810-9dce-47f6-84f7-25a8da672800

建立執行個體

鏡像下載下傳

下載下傳clould 鏡像 （官網鏡像存在bug，不建議使用）

最簡單的方法是使用标準鏡像。主流的Linux發行版都提供可以在 OpenStack 中直接使用的cloud鏡像，下載下傳位址：

CentOS6：http://cloud.centos.org/centos/6/images/

CentOS7：http://cloud.centos.org/centos/7/images/

Ubuntu14.04：http://cloud-images.ubuntu.com/trusty/current/

Ubuntu16.04：http://cloud-images.ubuntu.com/xenial/current/

定制 openstack centos7鏡像（推薦） 

參考次部落格方法定制：
https://www.jianshu.com/p/137e6f3f0369

openstack image create "centos" --file CentOS-7-x86_64-Azure-1707.qcow2 --disk-format qcow2 --container-format bare --public

openstack image create --disk-format qcow2 --container-format bare --public --file /root/CentOS-7-x86_64-Minimal-1708.iso CentOS-7-x86_64

檢視制作的鏡像資訊

openstack image list

建立網絡

openstack network create --share --external --provider-physical-network provider --provider-network-type flat provider 
參數
–share 允許所有項目使用虛拟網絡
–external 定義外接虛拟網絡 如果需要建立外網使用 --internal
–provider-physical-network provider && --provider-network-type flat 連接配接flat 虛拟網絡

建立子網 

openstack subnet create --network provider  --allocation-pool start=10.71.11.50,end=10.71.11.60 --dns-nameserver 114.114.114.114 --gateway 10.71.11.254 --subnet-range 10.71.11.0/24 provider
openstack network list

建立flavor 

openstack flavor create --id 1 --vcpus 4 --ram 128 --disk 1 m2.nano
openstack flavor list

控制節點生成秘鑰對,在啟動執行個體之前，需要将公鑰添加到Compute服務 

ssh-keygen -q -N ""
openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey

添加安全組，允許ICMP（ping）和安全shell（SSH） 

openstack security group rule create --proto icmp default
openstack security group list

允許安全shell（SSH）通路 

openstack security group rule create --proto tcp --dst-port 22 default

建立虛拟機

方法一：界面按照指引建立

方法二：

openstack server create --flavor min --image cirros --nic net-id=6ef57ba4-b18b-4d37-9696-ca6d740ae586 --security-group default --key-name liukey cirros

檢視虛拟機狀态 

openstack server list
上一篇: ifconfig 中的 eth0 eth0:1 eth0.1 與 lo
下一篇: MYSQL 檔案類型