设为首页 收藏本站

运维网

 找回密码
 立即注册
查看: 1639|回复: 0

[经验分享] 在rhel7中搭建openstack kilo

[复制链接]
3254rf
累计签到：2 天
连续签到：1 天
发表于 2016-2-19 09:05:17 | 显示全部楼层 |阅读模式
1.       安装Controller1.1        配置主机名
1.2        配置网络
1.3        配置Selinux
1.4        安装源配置安装源包括：CENTOS7、EPEL7、OPENSTACK-KILO
1.5        安装Mariadb
安装mysql数据库依赖包
                   # yuminstall mariadb mariadb-server MySQL-python –y
编辑文件完成下列步骤:
#vi /etc/my.cnf.d/mariadb_openstack.cnf
在 [mysqld] 部分, 修改添加下列的选项
[mysqld]
bind-address = 10.0.0.11
default-storage-engine = innodb
lower_case_table_names=1
innodb_file_per_table
collation-server = utf8_general_ci
init-connect = 'SET NAMES utf8'
character-set-server = utf8



启动数据库服务
#systemctl start mariadb.service
#systemctl enable  mariadb.service
设置MySQL安全配置向导(此步骤主要设置mysql可远程连接):
#mysql_secure_installation
设置root密码为A0staryh
                            spacer.jpg


#systemctl restart  mariadb.service

1.6        安装Rabbitmq-Server
安装rabbitmq服务
# yum install rabbitmq-server  -y
启动rabbitmq服务并设置为不开机启动:
# systemctl start rabbitmq-server.service
# systemctl enable rabbitmq-server.service
# systemctl status rabbitmq-server.service
spacer.jpg
添加ops用户
# rabbitmqctl add_user openstack A0staryh
赋权
# rabbitmqctl set_permissions openstack ".*"".*" ".*"

# systemctl restart rabbitmq-server.service
1.7        安装身份验证服务Keystone1.7.1       配置前的准备
  • 操作数据库,这里要用到刚刚数据库安装时用到的密码

# mysql -uroot -pA0staryh
建立数据库，与授权用户，还有加密码KEYSTONE_DBPASS
MariaDB [(none)]> CREATE DATABASE keystone;
MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO'keystone'@'localhost' IDENTIFIED BY 'A0staryh';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%'IDENTIFIED BY 'A0staryh';
MariaDB [(none)]> exit
  • 生成一个随机値，做为管理令牌，为后面的配置要用

# openssl rand -hex 10
fb7269c14626a5966181
1.7.2       安装和配置组件
  • 安装包

# yum install –y openstack-keystone python-keystoneclient

# vim /etc/keystone/keystone.conf
admin_token = 11d5c31d5a96d7b42315
verbose = true

[database]
connection = mysql://keystone:A0staryh@controller/keystone

[token]
provider = keystone.token.providers.uuid.Provider
driver = keystone.token.persistence.backends.sql.Token

[revoke]
driver = keystone.contrib.revoke.backends.sql.Revoke
  • 创建管理证书与密钥，设置相关文件权限

# keystone-manage pki_setup --keystone-user keystone--keystone-group keystone
No handlers could be found for logger "oslo_config.cfg"
The following cert files already exist, use --rebuild to remove theexisting files before regenerating:
/etc/keystone/ssl/private/cakey.pem already exists
/etc/keystone/ssl/certs/ca.pem already exists
/etc/keystone/ssl/private/signing_key.pem already exists
/etc/keystone/ssl/certs/signing_cert.pem already exists

# chown -R keystone:keystone /var/log/keystone
# chown -R keystone:keystone /etc/keystone/ssl
# chmod -R o-rwx /etc/keystone/ssl
  • 填充数据库数据

# su -s /bin/sh -c "keystone-manage db_sync"keystone
No handlers could be found for logger"oslo_config.cfg"
  • 填加到启动与启动程序

# systemctl enable openstack-keystone.service
# systemctl start openstack-keystone.service

  • 默认情况下,认证身份令牌到期后不会删除，会一直存在数据库中，所以加一下自动删除

# (crontab -l -u keystone 2>&1 | grep -q token_flush)|| echo '@hourly /usr/bin/keystone-manage token_flush >/var/log/keystone/keystone-tokenflush.log2>&1' >> /var/spool/cron/keystone
1.7.3       创建租户、用户和角色
  • 创建admin用户

# export OS_SERVICE_TOKEN=11d5c31d5a96d7b42315
# export OS_SERVICE_ENDPOINT=http://controller:35357/v2.0
# keystone tenant-create --name admin --description "AdminTenant"
# keystone user-create --name admin --pass A0staryh --email root@localhost
# keystone role-create --name admin
# keystone user-role-add --tenant admin --user admin --roleadmin
  • 创建demo用户

# keystone tenant-create --name demo --description "DemoTenant"
# keystone user-create --name demo --tenant demo --pass A0staryh --email demo@localhost
  • 创建 service租户

# keystone tenant-create --name service --description"Service Tenant"

1.7.4       创建服务实体和 API 端点
  • 创建实体

# keystone service-create --name keystone --type identity--description "OpenStack Identity"

# keystone endpoint-create --service-id $(keystoneservice-list | awk '/ identity / {print $2}') --publicurlhttp://controller:5000/v2.0 --internalurl http://controller:5000/v2.0--adminurl http://controller:35357/v2.0 --region regionOne
+-------------+----------------------------------        +
|   Property  |             Value                    |
+-------------+----------------------------------         +
|   adminurl  |   http://controller:35357/v2.0        |
|      id     | 71ed01478ea34f12bfe81cc9de80ff75   |
| internalurl |  http://controller:5000/v2.0            |
|  publicurl  |  http://controller:5000/v2.0           |
|    region   |           regionOne                  |
|  service_id |efa9e2e0830b4bd4a8d6470f1d1c95d4 |
+-------------+----------------------------------+

  • 验证

# unset OS_SERVICE_TOKEN OS_SERVICE_ENDPOINT
使用admin租户和用户，需要一个认证的令牌
# keystone --os-tenant-name admin --os-username admin--os-password A0staryh--os-auth-url http://controller:35357/v2.0 token-get
使用 admin租户和用户，列出租户以验证 admin租户和用户
# keystone --os-tenant-name admin --os-username admin--os-password A0staryh--os-auth-url http://controller:35357/v2.0 tenant-list
使用 admin租户和用户，列出用户
# keystone --os-tenant-name admin --os-username admin--os-password A0staryh--os-auth-url http://controller:35357/v2.0 user-list
使用 admin租户和用户，列出角色
# keystone --os-tenant-name admin --os-username admin--os-password A0staryh--os-auth-url http://controller:35357/v2.0 role-list
  • 创建客户端环境脚本

# vi admin-openrc.sh
export OS_TENANT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=A0staryh
export OS_AUTH_URL=http://controller:35357/v2.0

# vi demo-openrc.sh
export OS_TENANT_NAME=demo
export OS_USERNAME=demo
export OS_PASSWORD=A0staryh
export OS_AUTH_URL=http://controller:5000/v2.0

# source admin-openrc.sh

1.8        安装镜像服务Glance1.8.1       创建数据库、服务证书和 API 端点
  • 创建数据库

# mysql -uroot -pA0staryh
MariaDB [(none)]> CREATE DATABASEglance;
MariaDB [(none)]> GRANT ALLPRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'A0staryh';
MariaDB [(none)]> GRANT ALLPRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'A0staryh';
  • 导入 admin身份凭证以执行管理员用户专有的命令

# sourceadmin-openrc.sh
  • 创建服务证书

创建glance用户
#keystone user-create --name glance --pass A0staryh
给glance用户添加admin角色
# keystoneuser-role-add --user glance --tenant service --role admin
创建glance服务实体
# keystone service-create --name glance--type image --description "OpenStack Image Service"
创建镜像服务的 API 端点
# keystone endpoint-create --service-id$(keystone service-list | awk '/ image / {print $2}') --publicurl http://controller:9292--internalurl http://controller:9292--adminurl http://controller:9292--region regionOne

1.8.2       安装和配置镜像服务组件
  • 安装软件包

# yum install openstack-glance python-glanceclient
  • 修改配置文件vim /etc/glance/glance-api.conf


[DEFAULT]
verbose = True
notification_driver = noop

[database]
connection =mysql://glance:A0staryh@controller/glance

[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = glance
admin_password = A0staryh
[paste_deploy]
flavor = keystone

[glance_store]
default_store = file
filesystem_store_datadir = /var/lib/glance/images/


注意：注释所有 auth_host、auth_port和 auth_protocol选项，因为
identity_uri已经包括了它们。
  • 修改vim /etc/glance/glance-registry.conf

[DEFAULT]
verbose = True
notification_driver = noop
[database]
connection = mysql://glance:A0staryh@controller/glance
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = glance
admin_password = A0staryh
[paste_deploy]
flavor = keystone
  • 写入镜像服务数据库

# su -s /bin/sh -c"glance-manage db_sync" glance
  • 启动镜像服务并将其配置为随系统启动

# systemctlenable openstack-glance-api.service openstack-glance-registry.service
#systemctl start openstack-glance-api.service openstack-glance-registry.service
1.8.3       验证# mkdir /tmp/images
下载cirros-0.3.0-x86_64-disk.img，并将文件拷贝至该目录
# source admin-openrc.sh
# glance image-create --name"cirros-0.3.0-x86_64" --file /tmp/images/cirros-0.3.0-x86_64-disk.img--disk-format qcow2 --container-format bare --is-public True --progress
# glance image-list
2.       安装计算服务Nova2.1        在controller端创建数据库
  • 创建数据库

# mysql -u root -p
MariaDB [(none)]> CREATE DATABASE nova;
MariaDB [(none)]> GRANT ALL PRIVILEGES ONnova.* TO 'nova'@'localhost' IDENTIFIED BY 'A0staryh';
MariaDB [(none)]> GRANT ALL PRIVILEGES ONnova.* TO 'nova'@'%' IDENTIFIED BY 'A0staryh';
  • 导入 admin身份凭证以执行管理员用户专有的命令

# source admin-openrc.sh
  • 创建服务证书

创建 nova用户
# keystone user-create --name nova--pass A0staryh
# keystone user-role-add --user nova--tenant service --role admin
# keystone service-create --name nova--type compute --description "OpenStack Compute"
# keystone endpoint-create--service-id $(keystone service-list | awk '/ compute / {print $2}')--publicurl http://controller:8774/v2/%\(tenant_id\)s--internalurl http://controller:8774/v2/%\(tenant_id\)s--adminurl http://controller:8774/v2/%\(tenant_id\)s--region regionOne
  • 安装包

# yum install openstack-nova-api openstack-nova-certopenstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-schedulerpython-novaclient
  • 修改配置文件 vim /etc/nova/nova.conf

[DEFAULT]
rpc_backend = rabbit
my_ip= 10.0.0.11
rabbit_host = controller
rabbit_password = A0staryh
auth_strategy= keystone
vncserver_listen = 10.0.0.11
vncserver_proxyclient_address = 10.0.0.11
verbose = True
[database]
connection = mysql://nova:A0staryh@controller/nova

[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = nova
admin_password = A0staryh
[glance]
host = controller

  • 同步Compute 数据库

# su -s/bin/sh -c "nova-manage db sync" nova

  • 启动服务

# systemctl enableopenstack-nova-api.service openstack-nova-cert.service  openstack-nova-consoleauth.serviceopenstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
# systemctl startopenstack-nova-api.service openstack-nova-cert.service  openstack-nova-consoleauth.serviceopenstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
2.2        安装配置compute节点
  • 安装软件包

# yum install openstack-nova-computesysfsutils
  • 修改配置文件 vim /etc/nova/nova.conf

[DEFAULT]
         verbose = True
rpc_backend = rabbit
rabbit_host = controller
rabbit_password = A0staryh
auth_strategy = keystone
my_ip = 10.0.0.2[管理网IP地址]
vnc_enabled = True
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = 10.0.0.2[管理网IP地址]
novncproxy_base_url = http://controller:6080/vnc_auto.html
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = nova
admin_password = A0staryh
[glance]
host = controller

  • 完成安装
    确定您的计算节点是否支持虚拟机的硬件加速。
    # egrep -c '(vmx|svm)' /proc/cpuinfo

启动计算服务及其依赖，并将其配置为随系统自动启动
# systemctl enable libvirtd.serviceopenstack-nova-compute.service
# systemctl start libvirtd.service openstack-nova-compute.service
2.3        在controller端验证
# source admin-openrc.sh
# nova service-list
# nova image-list
3.      安装网络组件3.1        使用OPENSTACK网络Neutron3.1.1       在controller端创neutron
  • 创建数据库

# mysql -uroot -pA0staryh
MariaDB [(none)]> CREATE DATABASE neutron;
MariaDB [(none)]> GRANT ALL PRIVILEGES ONneutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'A0staryh';
MariaDB [(none)]> GRANT ALL PRIVILEGES ONneutron.* TO 'neutron'@'%' IDENTIFIED BY 'A0staryh';
  • 导入 admin 身份凭证以执行管理员用户专有的命令：
    # source admin-openrc.sh
  • 创建服务证书

# keystone user-create --name neutron --pass A0staryh
# keystone user-role-add --user neutron --tenantservice --role admin
# keystone service-create --name neutron --typenetwork --description "OpenStack Networking"
# keystone endpoint-create --service-id $(keystoneservice-list | awk '/ network / {print $2}') --publicurl http://controller:9696  --adminurl http://controller:9696  --internalurl http://controller:9696 --region regionOne
  • 安装网络组件

# yum install -y openstack-neutronopenstack-neutron-ml2 python-neutronclient which
  • 修改配置文件vim/etc/neutron/neutron.conf

[DEFAULT]
         verbose = True
rpc_backend= rabbit
rabbit_host = controller
rabbit_password = A0staryh
auth_strategy= keystone
core_plugin= ml2
service_plugins = router
allow_overlapping_ips = True
notify_nova_on_port_status_changes= True
notify_nova_on_port_data_changes = True
nova_url = http://controller:8774/v2
nova_admin_auth_url = http://controller:35357/v2.0
nova_region_name = regionOne
nova_admin_username = nova
nova_admin_tenant_id = SERVICE_TENANT_ID
【获取方式：
# source admin-openrc.sh
#keystone tenant-get service】
nova_admin_password= A0staryh
[database]
connection = mysql://neutron:A0staryh@controller/neutron
[keystone_authtoken]
auth_uri= http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = neutron
admin_password = A0staryh
  • 配置Modular Layer2 (ML2) 插件

修改配置文件vim/etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
type_drivers= flat,gre
tenant_network_types = gre
mechanism_drivers = openvswitch
[ml2_type_gre]
tunnel_id_ranges = 1:1000
[securitygroup]
enable_security_group= True
enable_ipset = True
firewall_driver =neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
  • 配置 Compute 以使用Networking

修改控制节点上的配置文件 vim /etc/nova/nova.conf
[DEFAULT]
network_api_class= nova.network.neutronv2.api.API
security_group_api= neutron
linuxnet_interface_driver= nova.network.linux_net.LinuxOVSInterfaceDriver
firewall_driver= nova.virt.firewall.NoopFirewallDriver
[neutron]
url =http://controller:9696
auth_strategy= keystone
admin_auth_url= http://controller:35357/v2.0
admin_tenant_name= service
admin_username= neutron
admin_password= A0staryh

  • 完成安装

创建链接
# ln -s/etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
同步数据库
# su -s/bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade kilo" neutron
重启 Compute 服务
# systemctlrestart openstack-nova-api.service openstack-nova-scheduler.serviceopenstack-nova-conductor.service
启动 Networking 服务并将其配置为随系统启动
#systemctl enable neutron-server.service
#systemctl start neutron-server.service
  • 验证

导入admin身份凭证以执行管理员用户专有的命令：
# sourceadmin-openrc.sh
列出加载的扩展，以验证是否成功启动了一个 neutron-server 进程：
# neutronext-list
3.1.2       在network端安装配置网络节点
  • 配置前的准备

修改配置文件vim /etc/sysctl.conf 以将下列参数包含其中：
net.ipv4.ip_forward=1
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0
使修改生效：
# sysctl-p
  • 安装网络组件

# yuminstall -y openstack-neutron openstack-neutron-ml2openstack-neutron-openvswitch
  • 配置网络的通用组件

修改配置文件vim /etc/neutron/neutron.conf
[DEFAULT]
verbose = True
rpc_backend = rabbit
rabbit_host = controller
rabbit_password = A0staryh
auth_strategy = keystone
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = neutron
admin_password = A0staryh
  • 配置Modular Layer 2 (ML2)插件

修改配置文件 vim /etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
type_drivers = flat,gre
tenant_network_types = gre
mechanism_drivers = openvswitch
[ml2_type_flat]
flat_networks = external
[ml2_type_gre]
tunnel_id_ranges = 1:1000
[securitygroup]
enable_security_group = True
enable_ipset = True
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
[ovs]
local_ip = 10.0.0.11
###########################################################
local_ip= INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS
###########################################################
enable_tunneling = True
bridge_mappings = external:br-ex
[agent]
tunnel_types = gre

  • 配置 Layer-3 (L3) 代理

修改配置文件 /etc/neutron/l3_agent.ini
[DEFAULT]
verbose = True
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
use_namespaces = True
external_network_bridge = br-ex
router_delete_namespaces = True
  • 配置DHCP代理

修改配置文件vim /etc/neutron/dhcp_agent.ini
[DEFAULT]
verbose = True
interface_driver =neutron.agent.linux.interface.OVSInterfaceDriver
dhcp_driver =neutron.agent.linux.dhcp.Dnsmasq
use_namespaces = True
dhcp_delete_namespaces = True
##############################################################################
注意：一些云镜像会忽略 DHCP MTU 选项，在这种情况下，您要配置其使用metadata
# vim /etc/neutron/dhcp_agent.ini
[DEFAULT]
dnsmasq_config_file =/etc/neutron/dnsmasq-neutron.conf
创建并修改文件 /etc/neutron/dnsmasq-neutron.conf
dhcp-option-force=26,1454
杀死所有存在的 dnsmasq 进程：
# pkilldnsmasq
##############################################################################
  • 配置metadata代理

修改配置文件 /etc/neutron/metadata_agent.ini
[DEFAULT]
auth_url = http://controller:5000/v2.0
auth_region = regionOne
admin_tenant_name = service
admin_user = neutron
admin_password = A0staryh
nova_metadata_ip = 10.0.0.11（controler的Ip）
metadata_proxy_shared_secret = A0staryh
  • 在控制节点（controller节点）上，修改配置文件vim /etc/nova/nova.conf

[neutron]
service_metadata_proxy = True
metadata_proxy_shared_secret = A0staryh（与上个配置文件保持一致）

# systemctl restart openstack-nova-api.service
  • 配置Open vSwitch (OVS)服务

#systemctl enable openvswitch.service
#systemctl start openvswitch.service
#ovs-vsctl add-br br-ex
# ovs-vsctladd-port br-ex eth1
  • 完成安装

# ln -s/etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
# cp/usr/lib/systemd/system/neutron-openvswitch-agent.service/usr/lib/systemd/system/neutron-openvswitch-agent.service.orig
# sed -i's,plugins/openvswitch/ovs_neutron_plugin.ini,plugin.ini,g'/usr/lib/systemd/system/neutron-openvswitch-agent.service
# systemctlenable neutron-openvswitch-agent.service neutron-l3-agent.serviceneutron-dhcp-agent.service neutron-metadata-agent.serviceneutron-ovs-cleanup.service
#systemctl start neutron-openvswitch-agent.service neutron-l3-agent.service neutron-dhcp-agent.serviceneutron-metadata-agent.service
请勿直接地启动 neutron-ovs-cleanup 服务
  • controller端验证

# sourceadmin-openrc.sh
# neutronagent-list
此处可能由于在controller端执行同步数据时，写的版本有误导致错误，重新执行数据同步命令，将juno修改为kilo即可。
3.1.3       在compute端安装和配置计算节点
  • 配置前的准备

# vim /etc/sysctl.conf
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0
# sysctl –p
  • 安装网络组件

# yuminstall openstack-neutron-ml2 openstack-neutron-openvswitch
  • 配置网络的通用组件

# vim /etc/neutron/neutron.conf
[DEFAULT]
rpc_backend = rabbit
rabbit_host = controller
rabbit_password = A0staryh
auth_strategy = keystone
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
verbose = True
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = neutron
admin_password = A0staryh
  • 配置 Modular Layer 2 (ML2) 插件

# vim /etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
type_drivers = flat,gre
tenant_network_types = gre
mechanism_drivers = openvswitch
[ml2_type_gre]
tunnel_id_ranges = 1:1000
[securitygroup]
enable_security_group = True
enable_ipset = True
firewall_driver =neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
[ovs]
local_ip = 10.0.0.2
###########################################################
local_ip= INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS
计算节点上的管理网络接口的IP 地址
###########################################################
enable_tunneling = True
[agent]
tunnel_types = gre
  • 配置 Open vSwitch (OVS) 服务

启动 OVS 服务并将其配置为随系统启动：
# systemctl enableopenvswitch.service
# systemctl startopenvswitch.service
  • 配置 Compute 以使用 Networking

# vim /etc/nova/nova.conf
[DEFAULT]
network_api_class= nova.network.neutronv2.api.API
security_group_api= neutron
linuxnet_interface_driver= nova.network.linux_net.LinuxOVSInterfaceDriver
firewall_driver= nova.virt.firewall.NoopFirewallDriver
[neutron]
url =http://controller:9696
auth_strategy= keystone
admin_auth_url= http://controller:35357/v2.0
admin_tenant_name= service
admin_username= neutron
admin_password= A0staryh
  • 完成安装

# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini/etc/neutron/plugin.ini
# cp/usr/lib/systemd/system/neutron-openvswitch-agent.service/usr/lib/systemd/system/neutron-openvswitch-agent.service.orig
# sed -i's,plugins/openvswitch/ovs_neutron_plugin.ini,plugin.ini,g'/usr/lib/systemd/system/neutron-openvswitch-agent.service
# systemctl restartopenstack-nova-compute.service
#systemctl enable neutron-openvswitch-agent.service
# systemctl startneutron-openvswitch-agent.service
  • 验证操作

在controller节点执行
# source admin-openrc.sh
# neutron agent-list
3.1.4       在controller创建初始网络可通过Dashboard完成
3.2        使用传统网络3.2.1       在controller配置# vim /etc/nova/nova.conf
         [DEFAULT]
network_api_class= nova.network.api.API
security_group_api= nova
# systemctl restart openstack-nova-api.serviceopenstack-nova-scheduler.service openstack-nova-conductor.service
3.2.2       在compute端配置# yum install openstack-nova-networkopenstack-nova-api
# vi /etc/nova/nova.conf
[DEFAULT]
network_api_class= nova.network.api.API
security_group_api= nova
firewall_driver= nova.virt.libvirt.firewall.IptablesFirewallDriver
network_manager= nova.network.manager.FlatDHCPManager
network_size= 254
allow_same_net_traffic= False
multi_host= True
send_arp_for_ha= True
share_dhcp_address= True
force_dhcp_release= True
flat_network_bridge= br100
flat_interface= INTERFACE_NAME
public_interface= INTERFACE_NAME

# systemctl enable openstack-nova-network.serviceopenstack-nova-metadata-api.service
# systemctl start openstack-nova-network.serviceopenstack-nova-metadata-api.service
3.2.3       在controller配置# sourceadmin-openrc.sh
# novanetwork-create demo-net --bridge br100 --multi-host T --fixed-range-v410.0.1.0/24
# novanet-list
4.       安装DASHBORAD4.1.1       安装配置# yuminstall openstack-dashboard httpd mod_wsgi memcached python-memcached
# vim /etc/openstack-dashboard/local_settings
OPENSTACK_HOST = "controller"
ALLOWED_HOSTS = ['*']
CACHES = {
'default': {
'BACKEND':'django.core.cache.backends.memcached.MemcachedCache',
'LOCATION':'127.0.0.1:11211',
}
}
由于一个包的 bug，仪表板的 CSS 会加载失败。可以执行以下命令来解决这个问题：
# chown-R apache:apache /usr/share/openstack-dashboard/static
启动服务
#systemctl enable httpd.service memcached.service
#systemctl start httpd.service memcached.service

4.1.2       验证http://controller/dashboard
5.       安装块设备存储服务5.1.1       在controller端创建数据库及配置
  • 创建数据库

# mysql -uroot-pA0staryh
MariaDB[(none)]> CREATE DATABASE cinder;
MariaDB[(none)]> GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost'IDENTIFIED BY 'A0staryh';
MariaDB[(none)]> GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'A0staryh';
# sourceadmin-openrc.sh
创建 cinder 用户
# keystoneuser-create --name cinder --pass A0staryh
# keystone user-role-add --user cinder--tenant service --role admin
# keystone service-create --name cinderv2--type volumev2 --description "OpenStack Block Storage"
# keystone endpoint-create --service-id$(keystone service-list | awk '/ volumev2 / {print $2}') --publicurl http://controller:8776/v2/%\(tenant_id\)s --internalurl http://controller:8776/v2/%\(tenant_id\)s --adminurl http://controller:8776/v2/%\(tenant_id\)s --region regionOne
  • 安装并配置块设备存储服务在控制节点服务器上的组件

# yum installopenstack-cinder python-cinderclient python-oslo-db
# vim /etc/cinder/cinder.conf
[database]
connection = mysql://cinder:A0staryh@controller/cinder
[DEFAULT]
rpc_backend = rabbit
rabbit_host = controller
rabbit_password = A0staryh
auth_strategy = keystone
my_ip = 10.0.0.11
verbose = True
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = cinder
admin_password = A0staryh
# su -s /bin/sh -c"cinder-manage db sync" cinder
# systemctl enable openstack-cinder-api.serviceopenstack-cinder-scheduler.service
# systemctl start openstack-cinder-api.serviceopenstack-cinder-scheduler.service
5.1.2       在compute节点上创建块存储
  • 配置前的准备

# yuminstall lvm2
#systemctl enable lvm2-lvmetad.service
#systemctl start lvm2-lvmetad.service
#pvcreate /dev/sdb1
#vgcreate cinder-volumes/dev/sdb1
# vim /etc/lvm/lvm.conf
         devices {
filter = [ "a/sdb/", "r/.*/"]
  • 安装并配置块存储卷组件

# yum install openstack-cindertargetcli python-oslo-db MySQL-python
# vim /etc/cinder/cinder.conf
         [database]
connection = mysql://cinder:A0staryh@controller/cinder
[DEFAULT]
rpc_backend = rabbit
rabbit_host = controller
rabbit_password = A0staryh
auth_strategy = keystone
my_ip = 10.0.0.2
#################################################
my_ip =MANAGEMENT_INTERFACE_IP_ADDRESS
存储节点的管理网IP地址
#################################################
glance_host = controller
iscsi_helper = lioadm
verbose = True
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = cinder
admin_password = A0staryh
  • 启动服务

# systemctlenable openstack-cinder-volume.service target.service
# systemctl startopenstack-cinder-volume.service target.service
  • 验证操作

在controller端操作
# source admin-openrc.sh
# cinder service-list
创建一个 1 GB 的卷
# source demo-openrc.sh
# cinder create --display-name demo-volume1 1



6.       安装对象存储服务6.1.1       在controller端创建数据库及配置
  • 创建数据库

# keystone user-create --name swift --pass A0staryh
# keystone user-role-add --user swift --tenant service --role admin
# keystone service-create --name swift --type object-store--description "OpenStack Object Storage"
# keystone endpoint-create --service-id $(keystone service-list | awk'/ object-store / {print $2}') --publicurl 'http://controller:8080/v1/AUTH_%(tenant_id)s' --internalurl'http://controller:8080/v1/AUTH_%(tenant_id)s'--adminurl http://controller:8080 --region regionOne
  • 在controller节点配置

# yum install openstack-swift-proxy python-swiftclient python-keystone-auth-token python-keystonemiddlewarememcached
将配置文件proxy-server.conf-sample拷贝至/etc/swift
# vim /etc/swift/proxy-server.conf
[DEFAULT]
bind_port = 8080
user = swift
swift_dir = /etc/swift
[pipeline:main]
pipeline =authtoken cache healthcheck keystoneauth proxy-logging proxy-server
[app:proxy-server]
allow_account_management= true
account_autocreate= true
[filter:keystoneauth]
use =egg:swift#keystoneauth
operator_roles= admin,_member_
[filter:authtoken]
paste.filter_factory= keystonemiddleware.auth_token:filter_factory
auth_uri =http://controller:5000/v2.0
identity_uri= http://controller:35357
admin_tenant_name= service
admin_user= swift
admin_password= A0staryh
delay_auth_decision= true
[filter:cache]
memcache_servers= 127.0.0.1:11211


6.1.2       安装和配置存储节点# yuminstall xfsprogs rsync
#mkfs.xfs /dev/sda5
# vi /etc/fstab
         /dev/sda5 /srv/node/sda5 xfsnoatime,nodiratime,nobarrier,logbufs=8 0 2
# mount/srv/node/sda5
# vim /etc/rsyncd.conf   
uid = swift
gid = swift
log file = /var/log/rsyncd.log
pid file = /var/run/rsyncd.pid
address = 10.0.0.2
[account]
max connections = 2
path = /srv/node/
read only = false
lock file = /var/lock/account.lock
[container]
max connections = 2
path = /srv/node/
read only = false
lock file =/var/lock/container.lock
[object]
max connections = 2
path = /srv/node/
read only = false
lock file = /var/lock/object.lock

#systemctl enable rsyncd.service
#systemctl start rsyncd.service



# yuminstall openstack-swift-account openstack-swift-containeropenstack-swift-object
# vim/etc/swift/account-server.conf

[DEFAULT]
bind_ip = 10.0.0.2[存储节点的管理地址]
bind_port = 6002
user = swift
swift_dir = /etc/swift
devices = /srv/node
[pipeline:main]
pipeline = account-server
[官方手册是pipeline = healthcheck reconaccount-server，但是是错误的]
[filter:recon]
recon_cache_path =/var/cache/swift

# vim /etc/swift/container-server.conf
         [DEFAULT]
bind_ip = 10.0.0.2[存储节点的管理地址]
bind_port = 6001
user = swift
swift_dir = /etc/swift
devices = /srv/node

[pipeline:main]
pipeline = account-server
[官方手册是pipeline = healthcheck reconaccount-server，但是是错误的]
[filter:recon]
recon_cache_path =/var/cache/swift

# vim /etc/swift/object-server.conf
[DEFAULT]
bind_ip = 10.0.0.2[存储节点的管理地址]
bind_port = 6000
user = swift
swift_dir = /etc/swift
devices = /srv/node
[pipeline:main]
pipeline = account-server
[官方手册是pipeline = healthcheck reconaccount-server，但是是错误的]
[filter:recon]
recon_cache_path =/var/cache/swift
# chown-R swift:swift /srv/node
# mkdir-p /var/cache/swift
# chown-R swift:swift /var/cache/swift
6.1.3       在controller端创建初始化的 rings
  • 帐户 ring

# cd /etc/swift
# swift-ring-builder account.builder create 10 3 1
# swift-ring-builder account.builder addr1z1-10.0.0.2:6002/sda5 100
# swift-ring-builder account.builder
# swift-ring-builder account.builder rebalance
  • 容器 ring

# cd/etc/swift
# swift-ring-builder container.builder create 10 31
# swift-ring-builder container.builder addr1z1-10.0.0.2:6001/sda5 100
# swift-ring-builder container.builder
# swift-ring-builder container.builder rebalance
  • 对象环

# cd /etc/swift
# swift-ring-builder object.builder create 10 3 1
# swift-ring-builder object.builder addr1z1-10.0.0.2:6000/sda5 100
# swift-ring-builder object.builder
# swift-ring-builder object.builder rebalance
  • 分发环配置文件
  •        完成安装
  • 在控制节点上

vim/etc/swift.conf
[swift-hash]
swift_hash_path_suffix= A0staryh
swift_hash_path_prefix= A0staryh
[storage-policy:0]
name =Policy-0
default= yes
  • 将switf.conf拷贝至每个存储节点和其他运行了代理服务的额外节点
  • 在控制节点和其他运行了代理服务的节点上

# systemctl enable openstack-swift-proxy.servicememcached.service
# systemctl start openstack-swift-proxy.service memcached.service
  • 在存储节点上，启动对象存储服务，并将其设置为随系统启动

# systemctl enable openstack-swift-account.serviceopenstack-swift-account-auditor.service openstack-swift-account-reaper.serviceopenstack-swift-account-replicator.service
# systemctl start openstack-swift-account.serviceopenstack-swift-account-auditor.service openstack-swift-account-reaper.serviceopenstack-swift-account-replicator.service
# systemctl enable openstack-swift-container.serviceopenstack-swift-container-auditor.service openstack-swift-container-replicator.serviceopenstack-swift-container-updater.service
# systemctl start openstack-swift-container.serviceopenstack-swift-container-auditor.serviceopenstack-swift-container-replicator.serviceopenstack-swift-container-updater.service
# systemctl enable openstack-swift-object.serviceopenstack-swift-object-auditor.serviceopenstack-swift-object-replicator.serviceopenstack-swift-object-updater.service
# systemctl startopenstack-swift-object.service openstack-swift-object-auditor.service openstack-swift-object-replicator.serviceopenstack-swift-object-updater.service
6.1.5       验证操作# sourcedemo-openrc.sh
# swiftstat



运维网声明 1、欢迎大家加入本站运维交流群:群②:261659950 群⑤:202807635 群⑦870801961 群⑧679858003
2、本站所有主题由该帖子作者发表，该帖子作者与运维网享有帖子相关版权
3、所有作品的著作权均归原作者享有，请您和我们一样尊重他人的著作权等合法权益。如果您对作品感到满意，请购买正版
4、禁止制作、复制、发布和传播具有反动、淫秽、色情、暴力、凶杀等内容的信息，一经发现立即删除。若您因此触犯法律，一切后果自负，我们对此不承担任何责任
5、所有资源均系网友上传或者通过网络收集，我们仅提供一个展示、介绍、观摩学习的平台，我们不对其内容的准确性、可靠性、正当性、安全性、合法性等负责，亦不承担任何法律责任
6、所有作品仅供您个人学习、研究或欣赏，不得用于商业或者其他用途，否则，一切后果均由您自己承担，我们对此不承担任何法律责任
7、如涉及侵犯版权等问题，请您及时通知我们，我们将立即采取措施予以解决
8、联系人Email：admin@iyunv.com 网址：www.yunweiku.com

所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其承担任何法律责任,如涉及侵犯版权等问题,请您及时通知我们,我们将立即处理,联系人Email:kefu@iyunv.com,QQ:1061981298 本贴地址：https://www.yunweiku.com/thread-179858-1-1.html 上篇帖子： Kolla - 使用docker安装部署openstack 下篇帖子： 关于在openstack执行nova get-vnc-console命令，无法得到vnc url并提示服务器超时的问题描述
回复

使用道具 举报

返回列表
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 立即注册

本版积分规则

扫码加入运维网微信交流群X

扫码加入运维网微信交流群

扫描二维码加入运维网微信交流群，最新一手资源尽在官方微信交流群！快快加入我们吧...

扫描微信二维码查看详情

客服 E-mail:iyunvcom@gmail.com

本站由青云提供云计算服务

运维网--中国最专业的运维工程师交流社区

豫ICP备20007574号-1 Copyright © 2012-2025

关于我们

发展历程

联系我们

关注我们

广告服务

广告案例

隐私条款

免责声明

用户登录

用户注册

版主守则

申请版主

手机版

金币获取

帮助中心

每日签到

Good Good

Study

Day Day

UP


客服E-mail:kefu@iyunv.com 客服QQ：1061981298


QQ群⑦：运维网交流群⑦ QQ群⑧：运维网交流群⑧ k8s群：运维网kubernetes交流群


提醒：禁止发布任何违反国家法律、法规的言论与图片等内容；本站内容均来自个人观点与网络等信息，非本站认同之观点.


本站大部分资源是网友从网上搜集分享而来，其版权均归原作者及其网站所有，我们尊重他人的合法权益，如有内容侵犯您的合法权益，请及时与我们联系进行核实删除！



合作伙伴: 青云cloud

快速回复 返回顶部 返回列表