Openstack云平台实践

便民

　　计算，网络，存储模块化
　　环境准备（参考https://www.unixhot.com/article/64）
　　Centos7.0
　　1，安装rpel仓库
　　rpm -ivh http://mirrors.aliyun.com/epel/epel-release-latest-7.noarch.rpm
　　2，安装OpenStack仓库
　　yum install -y centos-release-openstack-mitaka
　　3，安装OpenStack客户端
　　yum install -y python-openstackclient
　　4，安装openstack Selinux管理包
　　yum install -y openstack-selinux
　　MySQL数据库部署
　　yum install -y mariadb mariadb-server python2-PyMySQL
　　配置
　　cd /etc/my.cnf.d
　　vim openstack.cnf



[mysqld]
bind-address = 10.0.0.151
default-storage-engine = innodb
innodb_file_per_table
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8

　　配置参考文档https://docs.openstack.org/mitaka/zh_CN/install-guide-rdo/index.html
　　启动mysql
　　systemctl start mariadb
　　systemctl enable mariadb
　　创建数据库
　　mysql -uroot -p123456
　　create database keystone;
　　grant all on keystone.* to keystone@'localhost' identified by 'keystone';
　　grant all on keystone.* to keystone@'%' identified by 'keystone';
　　create database glance;
　　grant all on glance.* to glance@'localhost' identified by 'glance';
　　grant all on glance.* to glance@'%' identified by 'glance';
　　create database nove;
　　grant all on nova.* to nova@'localhost' identified by 'nova';
　　grant all on nova.* to nova@'%' identified by 'nova';
　　create database nove_api;
　　grant all on nova_api.* to nova@'loaclhost' identified by 'nova';
　　grant all on nova_api.* to nova@'%' identified by 'nova';
　　create database neutron;
　　grant all on neutron.* to neutron@'localhost' identified by 'neutron';
　　grant all on neutron.* to neutron@'%' identified by 'neutron';
　　安装消息队列RabbitMQ
　　yum -y install rabbitmq-server
　　设置开机自启动
　　systemctl enable rabbitmq-server
　　systemctl start rabbitmq-server
　　PS：如果启动出现这个错误
　　Job for rabbitmq-server.service failed because the control process exited with error code. See "systemctl status rabbitmq-server.service" and "journalctl -xe" for details
　　关闭selinux 配置好hosts
　　添加openstack用户
　　rabbitmqctl add_user openstack openstack
　　用户名和密码都为openstack
　　给openstack授权
　　rabbitmqctl set_permissions openstack ".*" ".*" ".*"
　　查看插件
　　rabbitmq-plugins list
　　启用web界面插件
　　rabbitmq-plugins enable rabbitmq_management

　　启动15672端口

　　http://10.0.0.151:15672/
　　默认用户 guest guest

　　Openstack验证服务KeyStone
　　yum -y install openstack-keystone httpd mod_swgi memcached python-memcached
　　配置admin_token
　　vim /etc/keystone/keystone.conf

　　PS：随机值由命令openssl rand -hex 10 生成
　　配置数据库

　　connection = mysql+pymysql://keystone:keystone@10.0.0.151/keystone
　　PS：三个keystone分别代表用户名，密码，库名
　　配置Fernet UUID令牌的提供者

　　配置memcached

　　查看所有配置

　　初始化数据库
　　su -s /bin/sh -c "keystone-manage db_sync" keystone
　　PS：会自动读取keystone配置文件创建数据库表

　　PS：同步的日志文件 /var/log/keystone/keystone.log
　　初始化Fernet keys

keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone

　　在这个目录生成证书
　　启动memcached
　　systemctl enable memcached
systemctl start memcached
　　配置文件

　　配置apache
　　vim /etc/httpd/conf/httpd.conf

　　PS：必须修改否则会出现奇怪的问题
　　vim /etc/httpd/conf.d/wsgi-keystone.conf



Listen 5000
Listen 35357
<VirtualHost *:5000>
WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-public
WSGIScriptAlias / /usr/bin/keystone-wsgi-public
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
ErrorLogFormat "%{cu}t %M"
ErrorLog /var/log/httpd/keystone-error.log
CustomLog /var/log/httpd/keystone-access.log combined
<Directory /usr/bin>
Require all granted
</Directory>
</VirtualHost>
<VirtualHost *:35357>
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-admin
WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
ErrorLogFormat "%{cu}t %M"
ErrorLog /var/log/httpd/keystone-error.log
CustomLog /var/log/httpd/keystone-access.log combined
<Directory /usr/bin>
Require all granted
</Directory>
</VirtualHost>

　　启动systemctl start httpd
　　报错了 明天再看