puppet快速部署openstack
因为参加了学校老师的项目，是关于云计算的。打算用ubuntu搭建openstack。刚接触两个月，对于安装还有有点心得（基本上做一次重装一次）。有幸的是幸好这东西开源，才得以让我摆脱装机男的命运。下面将跟大家分析一下如何从裸机开始安装openstack，鄙人亲测：裸机到ubuntu系统25分钟左右，ubuntu添加计算节点（200秒左右），ubuntu控制端（500秒左右）。
环境如下：
三台裸机（先用pxe安装好，纯净的ubuntu12.04，）
192.168.0.21 master.cloud.com master
192.168.0.20 node1.cloud.com node1
192.168.0.23 node2.cloud.com node2
2 1，安装控制端，即主服务器端。
20，23两个计算节点。
前期工作：
安装好ubuntu后，更新系统。
root@master:~# apt-get update;apt-get upgrade
配置所有节点hostname，hosts文件。
root@master:/etc# cat hostname
master
root@master:/etc# cat hosts
127.0.0.1 localhost
192.168.0.21 master.cloud.com master
192.168.0.20 node1.cloud.com node1
192.168.0.23 node2.cloud.com node2
确保三个节点之间能相互ping通。
动态迁移部分：
为了方便做动态迁移，那我们先建立三个用户，以保证迁移的时候权限不会出错。
所有节点都必须做。
cat> /root/Adduer.sh <<EOF
addgroup --system --gid 119 kvm
addgroup --system --gid 118 libvirtd
addgroup --system --gid 117 nova
adduser --system --home /var/lib/libvirt --shell /bin/false --uid 119 --gid 119 --disabled-password libvirt-qemu
adduser --system --home /var/lib/libvirt/dnsmasq --shell /bin/false --uid 118 --gid 118 --disabled-password libvirt-dnsmasq
adduser --system --home /var/lib/nova --shell /bin/false --uid 117 --gid 117 --disabled-password nova
adduser nova libvirtd
EOF
在每个节点运行脚本，
chroot@master:~#mod +x Adduser.sh
root@master:~# ./Adduser.sh
Adding group `kvm' (GID 119) ...
Done.
Adding group `libvirtd' (GID 118) ...
Done.
Adding group `nova' (GID 117) ...
Done.
Adding system user `libvirt-qemu' (UID 119) ...
Adding new user `libvirt-qemu' (UID 119) with group `kvm' ...
Creating home directory `/var/lib/libvirt' ...
Adding system user `libvirt-dnsmasq' (UID 118) ...
Adding new user `libvirt-dnsmasq' (UID 118) with group `libvirtd' ...
Creating home directory `/var/lib/libvirt/dnsmasq' ...
Adding system user `nova' (UID 117) ...
Adding new user `nova' (UID 117) with group `nova' ...
Creating home directory `/var/lib/nova' ...
Adding user `nova' to group `libvirtd' ...
Adding user nova to group libvirtd
Done.
前期工作都做完了。现在我们来部署puppet。
在所有节点都安装puppet客户端。
aptitude -y install puppet augeas-tools
客户端装完后，在控制端，master安装puppet服务器，只在master上装哦。
root@master:~# aptitude -y install puppetmaster sqlite3 libsqlite3-ruby libactiverecord-ruby git rake gem install puppetlabs_spec_helper
控制端也完成之后，我们要启用puppet的插件，跟服务器同步。
所有节点运行下面命令
augtool << EOF
set /files/etc/puppet/puppet.conf/agent/pluginsync true
set /files/etc/puppet/puppet.conf/agent/server master.cloud.com
save
EOF
数据库部分 只在maser控制端运行。
augtool << EOF
set /files/etc/puppet/puppet.conf/master/storeconfigs true
set /files/etc/puppet/puppet.conf/master/dbadapter sqlite3
set /files/etc/puppet/puppet.conf/master/dblocation /var/lib/puppet/server_data/storeconfigs.sqlite
save
EOF
然我我没做个文件，等会用来做测试。
cat > /etc/puppet/manifests/site.pp << EOF
node default {
notify { "恩，成功了哦！": }
}
然后
重启 服务器端
/etc/init.d/puppetmaster restart
同步部分：
下面在所有节点上运行：
node1, node2,master
puppet agent -vt --waitforcert 60
然后再开一个master的终端，给他们发证书。
puppetca sign -aroot@master:~# puppetca sign -a
notice: Signed certificate request for node2.cloud.com
notice: Removing file Puppet::SSL::CertificateRequest node2.cloud.com at '/var/lib/puppet/ssl/ca/requests/node2.cloud.com.pem'
notice: Signed certificate request for node1.cloud.com
notice: Removing file Puppet::SSL::CertificateRequest node1.cloud.com at '/var/lib/puppet/ssl/ca/requests/node1.cloud.com.pem'
成功的话所有客户端都会输出。
sage' as '恩，成功了哦！
这样就没问题了。
（控制端）安装openstack的模块。
cd /etc/puppet/modules
git clone git://github.com/puppetlabs/puppetlabs-openstack openstack
cd openstack
rake modules:clone
root@master:~# ls -la /etc/puppet/modules/
total 80
drwxr-xr-x 20 root root 4096 Oct 24 21:18 .
drwxr-xr-x 5 root root 4096 Oct 24 21:02 ..
drwxr-xr-x 7 root root 4096 Oct 24 21:14 apt
drwxr-xr-x 7 root root 4096 Oct 24 21:17 concat
drwxr-xr-x 5 root root 4096 Oct 24 21:18 git
drwxr-xr-x 10 root root 4096 Oct 24 21:15 glance
drwxr-xr-x 6 root root 4096 Oct 24 21:17 horizon
drwxr-xr-x 9 root root 4096 Oct 24 21:17 keystone
drwxr-xr-x 8 root root 4096 Oct 24 21:17 memcached
drwxr-xr-x 9 root root 4096 Oct 24 21:15 mysql
drwxr-xr-x 11 root root 4096 Oct 24 21:14 nova
drwxr-xr-x 7 root root 4096 Oct 24 21:13 openstack
drwxr-xr-x 9 root root 4096 Oct 24 21:18 rabbitmq
drwxr-xr-x 8 root root 4096 Oct 24 21:18 rsync
drwxr-xr-x 7 root root 4096 Oct 24 21:16 ssh
drwxr-xr-x 7 root root 4096 Oct 24 21:16 stdlib
drwxr-xr-x 10 root root 4096 Oct 24 21:17 swift
drwxr-xr-x 5 root root 4096 Oct 24 21:18 sysctl
drwxr-xr-x 6 root root 4096 Oct 24 21:18 vcsrepo
drwxr-xr-x 8 root root 4096 Oct 24 21:17 xinetd
（控制端）做一下配置。
cat > /tmp/puppetlabs-openstack.patch << EOF
diff --git examples/site.pp examples/site.pp
index 879d8fa..fd38d4e 100644
--- examples/site.pp
+++ examples/site.pp
@@ -4,7 +4,9 @@
#
# deploy a script that can be used to test nova
-class { 'openstack::test_file': }
+class { 'openstack::test_file':
+ image_type => 'ubuntu',
+}
####### shared variables ##################
@@ -21,17 +23,17 @@ \$public_interface = 'eth0'
\$private_interface = 'eth0'
# credentials
\$admin_email = 'root@localhost'
-\$admin_password = 'keystone_admin'
-\$keystone_db_password = 'keystone_db_pass'
-\$keystone_admin_token = 'keystone_admin_token'
-\$nova_db_password = 'nova_pass'
-\$nova_user_password = 'nova_pass'
-\$glance_db_password = 'glance_pass'
-\$glance_user_password = 'glance_pass'
-\$rabbit_password = 'openstack_rabbit_password'
-\$rabbit_user = 'openstack_rabbit_user'
-\$fixed_network_range = '10.0.0.0/24'
-\$floating_network_range = '192.168.101.64/28'
+\$admin_password = 'openstack'
+\$keystone_db_password = 'openstack'
+\$keystone_admin_token = 'bdbb8df712625fa7d1e0ff1e049e8aab'
+\$nova_db_password = 'openstack'
+\$nova_user_password = 'openstack'
+\$glance_db_password = 'openstack'
+\$glance_user_password = 'openstack'
+\$rabbit_password = 'openstack'
+\$rabbit_user = 'openstack'
+\$fixed_network_range = '10.1.0.0/16'
+\$floating_network_range = '192.168.0.192/26'
# switch this to true to have all service log at verbose
\$verbose = false
# by default it does not enable atomatically adding floating IPs
@@ -75,7 +77,7 @@ node /openstack_all/ {
# multi-node specific parameters
-\$controller_node_address = '192.168.101.11'
+\$controller_node_address = '192.168.0.21'
\$controller_node_public = \$controller_node_address
\$controller_node_internal = \$controller_node_address
@@ -83,9 +85,9 @@ \$sql_connection = "mysql://nova:\${nova_db_password}@\${controller_node_in
node /openstack_controller/ {
-# class { 'nova::volume': enabled => true }
+ class { 'nova::volume': enabled => true }
-# class { 'nova::volume::iscsi': }
+ class { 'nova::volume::iscsi': }
class { 'openstack::controller':
public_address => \$controller_node_public,
@@ -142,7 +144,7 @@ node /openstack_compute/ {
vncproxy_host => \$controller_node_public,
vnc_enabled => true,
verbose => \$verbose,
- manage_volumes => true,
+ manage_volumes => false,
nova_volume => 'nova-volumes'
}
然后将配置打进去
cd /etc/puppet/modules/openstack
patch -p0 < /tmp/puppetlabs-openstack.patch
之后我们安装openstack的控制端。
puppet agent -vt --waitforcert 60 --certname openstack_controller
再开一个窗口对其进行验证
puppetca sign -a
大概过个800s左右吧，这个不一定。你就可以访问http://192.168.0.21openstackde dashboard了。嘿嘿。
[*] 接下来我们要在三台机子上都安装上计算nova，命令如下
puppet agent -vt --waitforcert 60 --certname openstack_compute_node1
puppet agent -vt --waitforcert 60 --certname openstack_compute_node2
puppet agent -vt --waitforcert 60 --certname openstack_compute_master
名字不能写错了哦，然后在控制端再开一个终端对他们进行验证。
puppetca sign -a
如果没有报错，大概80几秒就能完成安装了。然我我们在控制端来测试一下。
source /root/openrc //环境变量
开启一些防火墙让节点能够认证。
nova secgroup-add-rule default tcp 1 65535 0.0.0.0/0
nova secgroup-add-rule default udp 1 65535 0.0.0.0/0
nova secgroup-add-rule default icmp -1 255 0.0.0.0/0
然后运行root@master:~# nova-manage service list
Binary Host Zone Status State Updated_At
nova-consoleauth master nova enabled :-) 2012-10-25 09:17:15
nova-scheduler master nova enabled :-) 2012-10-25 09:17:10
nova-network node2 nova enabled :-) 2012-10-25 09:17:10
nova-compute node2 nova enabled :-) 2012-10-25 09:17:01
nova-compute node1 nova enabled :-) 2012-10-25 09:17:10
nova-network node1 nova enabled :-) 2012-10-25 09:17:09
nova-cert master nova enabled :-) 2012-10-25 09:17:10
nova-compute master nova enabled :-) 2012-10-25 09:17:12
nova-network master nova enabled :-) 2012-10-25 09:17:15
这样就成功了哦，嘿嘿。
页:
[1]