OpenStack安装教程0、说明1、搭建基础环境2、准备工作3、安装软件4、安装OpenStack5、常见问题

180 阅读 0 评论 119 点赞

我是靠谱客的博主高挑魔镜，最近开发中收集的这篇文章主要介绍OpenStack安装教程0、说明1、搭建基础环境2、准备工作3、安装软件4、安装OpenStack5、常见问题，觉得挺不错的，现在分享给大家，希望可以做个参考。

概述

0、说明

本教程安装QueenS版本的OpenStack，采用all in one的方式安装（即：所有组件均安装在同一个机器上）
本教程亲测可用，已经部署完成
OpenStack官网安装手册：https://docs.openstack.org/install-guide/

1、搭建基础环境

1.1、安装VMWare

使用VMWare16 pro版本，下载地址：https://www.vmware.com/cn/products/workstation-pro/workstation-pro-evaluation.html

1.2、下载CentoOS7

使用CentOS7系统，下载地址：https://www.vmware.com/cn/products/workstation-pro/workstation-pro-evaluation.html

1.3、安装虚拟机

安装教程：https://blog.csdn.net/babyxue/article/details/80970526
虚拟机配置如下：

RAM：大于10GB，否则OpenStack安装完成后，虚拟机运行会卡顿。

ROM：100GB，分两块磁盘，sda用于存放CentOS系统，sdb用于存放LVM（cinder的数据卷）。

网卡：enss33用于虚拟机访问网络，enss37用于OpenStack组件之间的通信（all in one的方式，实际上不需要用到enss37网卡）

2、准备工作

2.1、禁用SELinux

作用：不禁用SELinux可能会导致openstack newton Apache无法启动。

错误如下："Devstack fail to start apache2 -“Address already in use”:“coild not bind to address”

解决方式：配置/etc/selinux/config，关闭SELINUX

[root@controller /]# cat /etc/selinux/config
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#
enforcing - SELinux security policy is enforced.
#
permissive - SELinux prints warnings instead of enforcing.
#
disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of three values:
#
targeted - Targeted processes are protected,
#
minimum - Modification of targeted policy. Only selected processes are protected. 
#
mls - Multi Level Security protection.
SELINUXTYPE=targeted

2.2、关闭防火墙

作用：免去配置OpenStack各个节点时，需要不断手动开启端口的麻烦。但是在实际生产环境中绝对不允许这样做，这会引起安全问题。

[root@controller ~]# systemctl stop firewalld 
[root@controller ~]# systemctl disable firewalld

2.3、配置网卡

CentOS系统默认使用DHCP（动态主机配置协议）分配网卡IP。此处，建议使用static（静态）网卡IP，因为在VMWare的虚拟机重启之后，虚拟机的网卡IP可能会变化，这就会导致OpenStack其他节点配置的网卡IP无法使用。

查看当前网卡IP

[root@controller /]# ifconfig
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>
mtu 1500
inet 192.168.83.139
netmask 255.255.255.0
broadcast 192.168.83.255
inet6 fe80::c62f:bd78:ba20:b81
prefixlen 64
scopeid 0x20<link>
ether 00:0c:29:5b:0e:1c
txqueuelen 1000
(Ethernet)
RX packets 15733
bytes 10884363 (10.3 MiB)
RX errors 0
dropped 0
overruns 0
frame 0
TX packets 11840
bytes 6242032 (5.9 MiB)
TX errors 0
dropped 0 overruns 0
carrier 0
collisions 0

配置网卡IP

[root@controller /]# cat /etc/sysconfig/network-scripts/ifcfg-ens33
TYPE=Ethernet
PROXY_METHOD=none
BROWSER_ONLY=no
DEFROUTE=yes
IPV4_FAILURE_FATAL=no
IPV6INIT=yes
IPV6_AUTOCONF=yes
IPV6_DEFROUTE=yes
IPV6_FAILURE_FATAL=no
IPV6_ADDR_GEN_MODE=stable-privacy
NAME=ens33
UUID=038e74ab-c77d-4f83-b67b-dabde3a03c1d
DEVICE=ens33
#更改的部分
ONBOOT=yes
BOOTPROTO=static
IPADDR=192.168.83.139
GATEWAY=192.168.83.2
NETMASK=255.255.255.0
DNS1=114.114.114.114

若需要配置第二张网卡enss37，则将上面的NAME、DEVICE更改后，删除UUID，并配置新的IPADDR，即可。

2.4、配置主机名

#设置主机名
[root@controller ~]# hostnamectl set-hostname controller 
#查看设置
[root@controller ~]# hostname 
controller
#修改hosts文件：controller域名，解析时指向本机的网卡IP
[root@controller ~]# cat /etc/hosts
127.0.0.1
localhost localhost.localdomain localhost4 localhost4.localdomain4
::1
localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.83.139 controller

2.5、设置时区

[root@controller ~]# cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime cp: overwrite ‘/etc/localtime’? y 
[root@controller ~]# date Tue Jul 20 16:13:44 CST 2021

3、安装软件

注意：安装软件时，如果出现安装失败的情况，可能是因为网络原因导致的。只需要再次执行安装命令即可。

3.1、安装NTP

用于同步各个节点的时间。需要安装Chrony，通常情况下安装在控制器节点，其他节点则同步控制节点的时间，来达到各个节点时间一致的效果。

#安装chrony
[root@controller /]# yum install chrony -y
#配置（可选）
[root@controller /]# vim /etc/chrony.conf
server 0.centos.pool.ntp.org iburst
#启动软件、设置开机启动
[root@controller /]# systemctl start chronyd.service
[root@controller /]# systemctl enable chronyd.service

3.2、添加OpenStack软件源

网络上发布的OpenStack存在多个不同版本，eg：Victoria、Queens、Train等。本次使用的时Queens版本。

#添加Queens版本源
[root@controller ~]# yum install centos-release-openstack-queens -y 
#升级软件包
[root@controller ~]# yum upgrade -y
#安装OpenStack Client
[root@controller ~]# yum install python-openstackclient -y

3.3、安装SQL数据库

通常情况下，数据库安装在控制节点上，用于存储OpenStack的数据。

#安装SQL
[root@controller ~]# yum install mariadb mariadb-server python2-PyMySQL -y
#配置SQL
[root@controller /]# vim /etc/my.cnf.d/openstack.cnf
[mysqld]
#修改为本机的网卡IP
bind-address = 192.168.83.139
default-storage-engine = innodb
innodb_file_per_table = on
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8
#设置开机自启、启动SQL
[root@controller /]# systemctl enable mariadb.service
[root@controller /]# systemctl start mariadb.service
#设置SQL数据库的root账号、密码
[root@controller /]# mysql_secure_installation

3.4、安装消息队列

消息队列服务通常安装在控制器节点上。用于协调服务之间的操作和状态信息。

#安装MQ
[root@controller /]# yum install rabbitmq-server
#设置开机自启、启动MQ
[root@controller /]# systemctl enable rabbitmq-server.service
[root@controller /]# systemctl start rabbitmq-server.service
#添加MQ用户，设置密码
[root@controller /]# rabbitmqctl add_user openstack RABBIT_PASS
#允许openstack用户进行配置、写入和读取访问
[root@controller /]# rabbitmqctl set_permissions openstack ".*" ".*" ".*"

3.5、安装Memcached

Memcached 服务通常安装在控制器节点上。服务的身份服务认证机制使用 Memcached 来缓存token令牌。

#安装
[root@controller /]# yum install memcached python-memcached
#配置
[root@controller /]# vim /etc/sysconfig/memcached
PORT="11211"
USER="memcached"
MAXCONN="1024"
CACHESIZE="64"
#新增controller域名，其他节点可以通过该域名直接访问
OPTIONS="-l 127.0.0.1,::1,controller"
#设置开机自启、启动软件
[root@controller /]# systemctl enable memcached.service
[root@controller /]# systemctl start memcached.service

3.6、安装ETCD数据库

用于分布式密钥锁定、存储配置、跟踪服务实时性和其他场景

#安装etcd
[root@controller /]# yum install etcd
#配置etcd：
#ETCD_INITIAL_CLUSTER, ETCD_INITIAL_ADVERTISE_PEER_URLS, ETCD_ADVERTISE_CLIENT_URLS,ETCD_LISTEN_CLIENT_URLS设置为控制节点的IP（即：本机的网卡IP）
[root@controller /]# vim /etc/etcd/etcd.conf
[Member]
ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
ETCD_LISTEN_PEER_URLS="http://192.168.83.139:2380"
ETCD_LISTEN_CLIENT_URLS="http://localhost:2379,http://192.168.83.139:2379"
ETCD_NAME="controller"
[Clustering]
ETCD_INITIAL_ADVERTISE_PEER_URLS="http://192.168.83.139:2380"
ETCD_ADVERTISE_CLIENT_URLS="http://192.168.83.139:2379"
ETCD_INITIAL_CLUSTER="controller=http://192.168.83.139:2380"
ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01"
ETCD_INITIAL_CLUSTER_STATE="new"
#设置开机自启、启动软件
[root@controller /]# systemctl enable etcd
[root@controller /]# systemctl start etcd

4、安装OpenStack

注意：本次安装的是Queens版本

4.1、默认密码

本次安装OpenStack所有的组件，均使用默认密码。

Password name	Description
Database password (no variable used)	Root password for the database
`ADMIN_PASS`	Password of user `admin`
`CINDER_DBPASS`	Database password for the Block Storage service
`CINDER_PASS`	Password of Block Storage service user `cinder`
`DASH_DBPASS`	Database password for the Dashboard
`DEMO_PASS`	Password of user `demo`
`GLANCE_DBPASS`	Database password for Image service
`GLANCE_PASS`	Password of Image service user `glance`
`KEYSTONE_DBPASS`	Database password of Identity service
`METADATA_SECRET`	Secret for the metadata proxy
`NEUTRON_DBPASS`	Database password for the Networking service
`NEUTRON_PASS`	Password of Networking service user `neutron`
`NOVA_DBPASS`	Database password for Compute service
`NOVA_PASS`	Password of Compute service user `nova`
`PLACEMENT_PASS`	Password of the Placement service user `placement`
`RABBIT_PASS`	Password of RabbitMQ user `openstack`

4.2、安装Keystone

4.2.1、安装Keystone步骤

作用：用于管理身份验证、授权和服务目录。通过身份验证后，最终用户可以使用他们的身份访问其他 OpenStack 服务。

创建数据库

#登录数据库
[root@controller /]# mysql -u root -p
#创建keystone数据库
MariaDB [(none)]> CREATE DATABASE keystone;
#用户登录授权
#本地登录
MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' 
IDENTIFIED BY 'KEYSTONE_DBPASS';
#远程登录
MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' 
IDENTIFIED BY 'KEYSTONE_DBPASS';

安装、配置keystone

#安装软件
[root@controller /]# yum install openstack-keystone httpd mod_wsgi
#配置keystone.conf
[root@controller /]# vim /etc/keystone/keystone.conf 
[database]
connection = mysql+pymysql://keystone:KEYSTONE_DBPASS@controller/keystone
[token]
provider = fernet
#填充keystone数据库
[root@controller /]# su -s /bin/sh -c "keystone-manage db_sync" keystone
#初始化Fernet密钥库
[root@controller /]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
[root@controller /]# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone
#引导身份服务
[root@controller /]# keystone-manage bootstrap --bootstrap-password ADMIN_PASS 
--bootstrap-admin-url http://controller:5000/v3/ 
--bootstrap-internal-url http://controller:5000/v3/ 
--bootstrap-public-url http://controller:5000/v3/ 
--bootstrap-region-id RegionOne

配置Apache HTTP服务

#配置httpd.conf
[root@controller /]# vim /etc/httpd/conf/httpd.conf
ServerName controller
#创建软链接
[root@controller /]# /usr/share/keystone/wsgi-keystone.conf

配置系统环境

[root@controller /]# systemctl enable httpd.service
[root@controller /]# systemctl start httpd.service
#配置管理账户
[root@controller /]# export OS_USERNAME=admin 
export OS_PASSWORD=ADMIN_PASS 
export OS_PROJECT_NAME=admin 
export OS_USER_DOMAIN_NAME=Default 
export OS_PROJECT_DOMAIN_NAME=Default 
export OS_AUTH_URL=http://controller:5000/v3 
export OS_IDENTITY_API_VERSION=3

创建域、项目、用户、角色信息

此处创建一个示例域：example

#创建域
[root@controller /]# openstack domain create --description "An Example Domain" example
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | An Example Domain
|
| enabled
| True
|
| id
| 2f4f80574fd84fe6ba9067228ae0a50c |
| name
| example
|
+-------------+----------------------------------+
#创建项目
[root@controller /]# openstack project create --domain default 
--description "Service Project" service
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | Service Project
|
| domain_id
| default
|
| enabled
| True
|
| id
| 24ac7f19cd944f4cba1d77469b2a73ed |
| is_domain
| False
|
| name
| service
|
| parent_id
| default
|
+-------------+----------------------------------+

创建一个demo项目

#创建demo项目
[root@controller /]# openstack project create --domain default 
--description "Demo Project" demo
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | Demo Project
|
| domain_id
| default
|
| enabled
| True
|
| id
| 231ad6e7ebba47d6a1e57e1cc07ae446 |
| is_domain
| False
|
| name
| demo
|
| parent_id
| default
|
+-------------+----------------------------------+
#创建demo项目的用户
[root@controller /]# openstack user create --domain default 
--password-prompt demo
#填入默认密码：DEMO_PASS
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field
| Value
|
+---------------------+----------------------------------+
| domain_id
| default
|
| enabled
| True
|
| id
| aeda23aa78f44e859900e22c24817832 |
| name
| demo
|
| options
| {}
|
| password_expires_at | None
|
+---------------------+----------------------------------+
#创建角色
[root@controller /]# openstack role create user
+-----------+----------------------------------+
| Field
| Value
|
+-----------+----------------------------------+
| domain_id | None
|
| id
| 997ce8d05fc143ac97d83fdfb5998552 |
| name
| user
|
+-----------+----------------------------------+
#为demo项目的用户：demoe，赋予角色：user
[root@controller /]# openstack role add --project demo --user demo user

4.2.2、验证是否成功安装

#取消设置临时OS_AUTH_URL和OS_PASSWORD 环境变量
[root@controller /]# unset OS_AUTH_URL OS_PASSWORD
#
[root@controller /]# openstack --os-auth-url http://controller:35357/v3 
--os-project-domain-name Default --os-user-domain-name Default 
--os-project-name admin --os-username admin token issue
#此处填入的密码为用户demo的密码，默认为DEMO_PASS
Password:
+------------+-----------------------------------------------------------------+
| Field
| Value
|
+------------+-----------------------------------------------------------------+
| expires
| 2016-02-12T20:14:07.056119Z
|
| id
| gAAAAABWvi7_B8kKQD9wdXac8MoZiQldmjEO643d-e_j-XXq9AmIegIbA7UHGPv |
|
| atnN21qtOMjCFWX7BReJEQnVOAj3nclRQgAYRsfSU_MrsuWb4EDtnjU7HEpoBb4 |
|
| o6ozsA_NmFWEpLeKy0uNn_WeKbAhYygrsmQGA49dclHVnz-OMVLiyM9ws
|
| project_id | 343d245e850143a096806dfaefa9afdc
|
| user_id
| ac3377633149401296f6c0d92d79dc16
|
+------------+-----------------------------------------------------------------+

4.2.3、创建OpenStack客户端脚本

为什么需要使用脚本？

由于之前，配置系统环境时，使用的是export命令，该命令用于临时配置环境变量，当系统重启或者执行export明令的终端关闭后，该环境变量就无法使用了，导致openstack命令无法被执行。

需要创建的脚本如下：

为管理（admin）和演示（demo）项目以及用户创建客户端环境脚本。即：获取相应权限的CLI命令(Command Line Interface)，通过命令的方式进行交互。这两个脚本可以存放在同一个目录中。

admin-openrc

export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=ADMIN_PASS
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

demo-openrc

export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=demo
export OS_USERNAME=demo
export OS_PASSWORD=DEMO_PASS
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

使用脚本的方式

[root@controller /]# . admin-openrc
#请求身份验证令牌
[root@controller /]# openstack token issue
+------------+-----------------------------------------------------------------+
| Field
| Value
|
+------------+-----------------------------------------------------------------+
| expires
| 2016-02-12T20:44:35.659723Z
|
| id
| gAAAAABWvjYj-Zjfg8WXFaQnUd1DMYTBVrKw4h3fIagi5NoEmh21U72SrRv2trl |
|
| JWFYhLi2_uPR31Igf6A8mH2Rw9kv_bxNo1jbLNPLGzW_u5FC7InFqx0yYtTwa1e |
|
| eq2b0f6-18KZyQhs7F3teAta143kJEWuNEYET-y7u29y0be1_64KYkM7E
|
| project_id | 343d245e850143a096806dfaefa9afdc
|
| user_id
| ac3377633149401296f6c0d92d79dc16
|
+------------+-----------------------------------------------------------------+

4.3、安装Glance

4.3.1、安装Glance步骤

作用：提供发现、注册和检索虚拟机镜像的功能。

创建数据库

#登录数据库
[root@controller /]# mysql -u root -p
#创建glance数据库
MariaDB [(none)]> CREATE DATABASE glance;
#授权
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' 
IDENTIFIED BY 'GLANCE_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' 
IDENTIFIED BY 'GLANCE_DBPASS';

获取管理员的CLI命令
```
[root@controller /]# . admin-openrc
```

创建服务凭证：用户、角色信息，镜像服务端点

#创建glance用户
[root@controller /]# openstack user create --domain default --password-prompt glance
#此处使用默认密码：GLANCE_PASS
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field
| Value
|
+---------------------+----------------------------------+
| domain_id
| default
|
| enabled
| True
|
| id
| 3f4e777c4062483ab8d9edd7dff829df |
| name
| glance
|
| options
| {}
|
| password_expires_at | None
|
+---------------------+----------------------------------+
#为glance用户添加角色信息
[root@controller /]# openstack role add --project service --user glance admin
#创建glance服务实例
[root@controller /]# openstack service create --name glance 
--description "OpenStack Image" image
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | OpenStack Image
|
| enabled
| True
|
| id
| 8c2c7f1b9b5049ea9e63757b5533e6d2 |
| name
| glance
|
| type
| image
|
+-------------+----------------------------------+

创建镜像服务的API端点：一共需要创建3种

#public类型
[root@controller /]# openstack endpoint create --region RegionOne 
image public http://controller:9292
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| 340be3625e9b4239a6415d034e98aace |
| interface
| public
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 8c2c7f1b9b5049ea9e63757b5533e6d2 |
| service_name | glance
|
| service_type | image
|
| url
| http://controller:9292
|
+--------------+----------------------------------+
#admin类型
[root@controller /]# openstack endpoint create --region RegionOne 
image admin http://controller:9292
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| 0c37ed58103f4300a84ff125a539032d |
| interface
| admin
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 8c2c7f1b9b5049ea9e63757b5533e6d2 |
| service_name | glance
|
| service_type | image
|
| url
| http://controller:9292
|
+--------------+----------------------------------+
#internal类型
[root@controller /]# openstack endpoint create --region RegionOne 
image internal http://controller:9292
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| a6e4b153c2ae4c919eccfdbb7dceb5d2 |
| interface
| internal
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 8c2c7f1b9b5049ea9e63757b5533e6d2 |
| service_name | glance
|
| service_type | image
|
| url
| http://controller:9292
|
+--------------+----------------------------------+

安装、配置glance

#安装glance
[root@controller /]# yum install openstack-glance
#配置glance-api.conf
[root@controller /]# vim /etc/glance/glance-api.conf 
[database]
connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = GLANCE_PASS
[paste_deploy]
flavor = keystone
[glance_store]
stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/
#配置glance-registry.conf
[root@controller /]# vim /etc/glance/glance-registry.conf
[database]
connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = GLANCE_PASS
[paste_deploy]
flavor = keystone
#填充lance数据库
[root@controller /]# su -s /bin/sh -c "glance-manage db_sync" glance

配置环境

开机自启动、启动glance

[root@controller /]# systemctl enable openstack-glance-api.service 
openstack-glance-registry.service
[root@controller /]# systemctl start openstack-glance-api.service 
openstack-glance-registry.service

4.3.2、验证是否成功安装

使用CirrOS验证 Image 服务是否可用：使用OpenStack 部署一个小型 Linux 映像（eg：cirros-cloud）

[root@controller /]# . admin-openrc
[root@controller /]# wget http://download.cirros-cloud.net/0.4.0/cirros-0.4.0-x86_64-disk.img
[root@controller /]# openstack image create "cirros" 
--file cirros-0.4.0-x86_64-disk.img 
--disk-format qcow2 --container-format bare 
--public
+------------------+------------------------------------------------------+
| Field
| Value
|
+------------------+------------------------------------------------------+
| checksum
| 133eae9fb1c98f45894a4e60d8736619
|
| container_format | bare
|
| created_at
| 2015-03-26T16:52:10Z
|
| disk_format
| qcow2
|
| file
| /v2/images/cc5c6982-4910-471e-b864-1098015901b5/file |
| id
| cc5c6982-4910-471e-b864-1098015901b5
|
| min_disk
| 0
|
| min_ram
| 0
|
| name
| cirros
|
| owner
| ae7a98326b9c455588edd2656d723b9d
|
| protected
| False
|
| schema
| /v2/schemas/image
|
| size
| 13200896
|
| status
| active
|
| tags
|
|
| updated_at
| 2015-03-26T16:52:10Z
|
| virtual_size
| None
|
| visibility
| public
|
+------------------+------------------------------------------------------+
[root@controller /]# openstack image list
+--------------------------------------+--------+--------+
| ID
| Name
| Status |
+--------------------------------------+--------+--------+
| 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros | active |
+--------------------------------------+--------+--------+

4.4、安装Nova

4.4.1、安装、配置控制节点

创建Nova数据库

#进入数据库
[root@controller /]# mysql -u root -p
#创建数据库
MariaDB [(none)]> CREATE DATABASE nova_api;
MariaDB [(none)]> CREATE DATABASE nova;
MariaDB [(none)]> CREATE DATABASE nova_cell0;
#数据库授权
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' 
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' 
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' 
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' 
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' 
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' 
IDENTIFIED BY 'NOVA_DBPASS';

获取管理员的CLI命令
```
[root@controller /]# . admin-openrc
```

创建计算服务凭证

#创建nova用户
[root@controller /]# openstack user create --domain default --password-prompt nova
#使用默认密码：NOVA_PASS
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field
| Value
|
+---------------------+----------------------------------+
| domain_id
| default
|
| enabled
| True
|
| id
| 8a7dbf5279404537b1c7b86c033620fe |
| name
| nova
|
| options
| {}
|
| password_expires_at | None
|
+---------------------+----------------------------------+
#为nova用户添加角色
[root@controller /]# openstack role add --project service --user nova admin
#创建nova服务实例
[root@controller /]# openstack service create --name nova 
--description "OpenStack Compute" compute
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | OpenStack Compute
|
| enabled
| True
|
| id
| 060d59eac51b4594815603d75a00aba2 |
| name
| nova
|
| type
| compute
|
+-------------+----------------------------------+
#创建计算API端点：3种
[root@controller /]# openstack endpoint create --region RegionOne 
compute public http://controller:8774/v2.1
+--------------+-------------------------------------------+
| Field
| Value
|
+--------------+-------------------------------------------+
| enabled
| True
|
| id
| 3c1caa473bfe4390a11e7177894bcc7b
|
| interface
| public
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 060d59eac51b4594815603d75a00aba2
|
| service_name | nova
|
| service_type | compute
|
| url
| http://controller:8774/v2.1
|
+--------------+-------------------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne 
compute public http://controller:8774/v2.1
+--------------+-------------------------------------------+
| Field
| Value
|
+--------------+-------------------------------------------+
| enabled
| True
|
| id
| 3c1caa473bfe4390a11e7177894bcc7b
|
| interface
| public
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 060d59eac51b4594815603d75a00aba2
|
| service_name | nova
|
| service_type | compute
|
| url
| http://controller:8774/v2.1
|
+--------------+-------------------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne 
compute admin http://controller:8774/v2.1
+--------------+-------------------------------------------+
| Field
| Value
|
+--------------+-------------------------------------------+
| enabled
| True
|
| id
| 38f7af91666a47cfb97b4dc790b94424
|
| interface
| admin
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 060d59eac51b4594815603d75a00aba2
|
| service_name | nova
|
| service_type | compute
|
| url
| http://controller:8774/v2.1
|
+--------------+-------------------------------------------+
#创建放置服务用户（placement）
[root@controller /]# openstack user create --domain default --password-prompt placement
#使用默认密码：PLACEMENT_PASS
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field
| Value
|
+---------------------+----------------------------------+
| domain_id
| default
|
| enabled
| True
|
| id
| fa742015a6494a949f67629884fc7ec8 |
| name
| placement
|
| options
| {}
|
| password_expires_at | None
|
+---------------------+----------------------------------+
#为placement用户添加角色信息
[root@controller /]# openstack role add --project service --user placement admin
#在服务目录中创建Placement API条目
[root@controller /]# openstack service create --name placement --description "Placement API" placement
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | Placement API
|
| enabled
| True
|
| id
| 2d1a27022e6e4185b86adac4444c495f |
| name
| placement
|
| type
| placement
|
+-------------+----------------------------------+
#创建Placement API服务端点：3种
[root@controller /]#
openstack endpoint create --region RegionOne placement public http://controller:8780
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| 2b1b2637908b4137a9c2e0470487cbc0 |
| interface
| public
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 2d1a27022e6e4185b86adac4444c495f |
| service_name | placement
|
| service_type | placement
|
| url
| http://controller:8780
|
+--------------+----------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne placement internal http://controller:8780
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| 02bcda9a150a4bd7993ff4879df971ab |
| interface
| internal
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 2d1a27022e6e4185b86adac4444c495f |
| service_name | placement
|
| service_type | placement
|
| url
| http://controller:8780
|
+--------------+----------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne placement admin http://controller:8780
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| 3d71177b9e0f406f98cbff198d74b182 |
| interface
| admin
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| 2d1a27022e6e4185b86adac4444c495f |
| service_name | placement
|
| service_type | placement
|
| url
| http://controller:8780
|
+--------------+----------------------------------+

安装、配置Glance服务

#安装Nova服务
[root@controller /]# zypper install openstack-nova-api openstack-nova-scheduler 
openstack-nova-conductor openstack-nova-consoleauth 
openstack-nova-novncproxy openstack-nova-placement-api 
iptables
#配置nova.conf
[root@controller /]# vim /etc/nova/nova.conf 
[DEFAULT]
enabled_apis = osapi_compute,metadata
[api_database]
connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova_api
[database]
connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova
[DEFAULT]
transport_url = rabbit://openstack:RABBIT_PASS@controller
[api]
auth_strategy = keystone
[keystone_authtoken]
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = NOVA_PASS
[DEFAULT]
my_ip = 10.0.0.11
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[vnc]
enabled = true
server_listen = $my_ip
server_proxyclient_address = $my_ip
[glance]
api_servers = http://controller:9292
[oslo_concurrency]
lock_path = /var/run/nova
[placement]
os_region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = PLACEMENT_PASS
#填充Nova-api数据库
[root@controller /]# su -s /bin/sh -c "nova-manage api_db sync" nova
#注册cell0数据库
[root@controller /]# su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
#创建cell1单元：此处会生成一个UUID
[root@controller /]# su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
#填充nova数据库
[root@controller /]# su -s /bin/sh -c "nova-manage db sync" nova
#验证novecell0、cell1是否正确注册
[root@controller /]# nova-manage cell_v2 list_cells
+-------+--------------------------------------+
| Name
| UUID
|
+-------+--------------------------------------+
| cell1 | 109e1d4b-536a-40d0-83c6-5f121b82b650 |
| cell0 | 00000000-0000-0000-0000-000000000000 |
+-------+--------------------------------------+

配置环境

#重命名配置文件：将源配置文件拿过来使用
[root@controller /]# mv /etc/apache2/vhosts.d/nova-placement-api.conf.sample /etc/apache2/vhosts.d/nova-placement-api.conf
#重新加载apache服务
[root@controller /]# systemctl reload apache2.service
#开机自启动、启动nova服务
[root@controller /]# systemctl enable openstack-nova-api.service 
openstack-nova-consoleauth.service openstack-nova-scheduler.service 
openstack-nova-conductor.service openstack-nova-novncproxy.service
[root@controller /]# systemctl start openstack-nova-api.service 
openstack-nova-consoleauth.service openstack-nova-scheduler.service 
openstack-nova-conductor.service openstack-nova-novncproxy.service

4.4.2、安装、配置计算节点

安装、配置Nova-compute

#安装软件
[root@controller /]# yum install openstack-nova-compute
#配置nova.conf
[root@controller /]# vim /etc/nova/nova.conf
[DEFAULT]
enabled_apis = osapi_compute,metadata
transport_url = rabbit://openstack:RABBIT_PASS@controller
[api]
auth_strategy = keystone
[keystone_authtoken]
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = NOVA_PASS
[DEFAULT]
#MANAGEMENT_INTERFACE_IP_ADDRESS：替换为本机的网卡IP
my_ip = MANAGEMENT_INTERFACE_IP_ADDRESS
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[vnc]
enabled = True
server_listen = 0.0.0.0
server_proxyclient_address = $my_ip
novncproxy_base_url = http://controller:6080/vnc_auto.html
[glance]
api_servers = http://controller:9292
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
[placement]
os_region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = PLACEMENT_PASS

配置环境

#判断VMWware的虚拟机是否开启虚拟加速
[root@controller /]# egrep -c '(vmx|svm)' /proc/cpuinfo
#若上述命令的输出结果 = 0，则需要执行此步骤（说明未开启虚拟加速，需要配置nova.conf的virt_type ）
[root@controller /]# vim
/etc/nova/nova.conf
[libvirt]
# 默认是KVM
virt_type = qemu
#设置开机自启动、启动nova-compute服务
[root@controller /]# systemctl enable libvirtd.service openstack-nova-compute.service
[root@controller /]# systemctl start libvirtd.service openstack-nova-compute.service

获取管理员的CLI命令
```
[root@controller /]# . admin-openrc
```

将计算节点添加至cell数据库种

#确认数据库中存在host主机
[root@controller /]# openstack compute service list --service nova-compute
+----+-------+--------------+------+-------+---------+----------------------------+
| ID | Host
| Binary
| Zone | State | Status
| Updated At
|
+----+-------+--------------+------+-------+---------+----------------------------+
| 1
| node1 | nova-compute | nova | up
| enabled | 2017-04-14T15:30:44.000000 |
+----+-------+--------------+------+-------+---------+----------------------------+
#发现计算主机
[root@controller /]# su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova
Found 2 cell mappings.
Skipping cell0 since it does not contain hosts.
Getting compute nodes from cell 'cell1': ad5a5985-a719-4567-98d8-8d148aaae4bc
Found 1 computes in cell: ad5a5985-a719-4567-98d8-8d148aaae4bc
Checking host mapping for compute host 'compute': fe58ddc1-1d65-4f87-9456-bc040dc106b3
Creating host mapping for compute host 'compute': fe58ddc1-1d65-4f87-9456-bc040dc106b3

4.5、安装Neutron

4.5.1、安装、配置控制节点

创建数据库

#进入数据库
[root@controller /]# mysql -u root -p
#创建数据库
MariaDB [(none)] CREATE DATABASE neutron;
#授权
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' 
IDENTIFIED BY 'NEUTRON_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' 
IDENTIFIED BY 'NEUTRON_DBPASS';

获取管理员的CLI命令
```
[root@controller /]# . admin-openrc
```

创建服务凭证

#创建Neutron用户
[root@controller /]# openstack user create --domain default --password-prompt neutron
#此处使用默认密码：NEUTRON_PASS
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field
| Value
|
+---------------------+----------------------------------+
| domain_id
| default
|
| enabled
| True
|
| id
| fdb0f541e28141719b6a43c8944bf1fb |
| name
| neutron
|
| options
| {}
|
| password_expires_at | None
|
+---------------------+----------------------------------+
#添加Neutron用户的juese
[root@controller /]# openstack role add --project service --user neutron admin
#创建Neutron服务实例
[root@controller /]# openstack service create --name neutron 
--description "OpenStack Networking" network
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | OpenStack Networking
|
| enabled
| True
|
| id
| f71529314dab4a4d8eca427e701d209e |
| name
| neutron
|
| type
| network
|
+-------------+----------------------------------+

创建网络服务API端点

[root@controller /]# openstack endpoint create --region RegionOne 
network public http://controller:9696
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| 85d80a6d02fc4b7683f611d7fc1493a3 |
| interface
| public
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| f71529314dab4a4d8eca427e701d209e |
| service_name | neutron
|
| service_type | network
|
| url
| http://controller:9696
|
+--------------+----------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne 
network internal http://controller:9696
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| 09753b537ac74422a68d2d791cf3714f |
| interface
| internal
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| f71529314dab4a4d8eca427e701d209e |
| service_name | neutron
|
| service_type | network
|
| url
| http://controller:9696
|
+--------------+----------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne 
network admin http://controller:9696
+--------------+----------------------------------+
| Field
| Value
|
+--------------+----------------------------------+
| enabled
| True
|
| id
| 1ee14289c9374dffb5db92a5c112fc4e |
| interface
| admin
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| f71529314dab4a4d8eca427e701d209e |
| service_name | neutron
|
| service_type | network
|
| url
| http://controller:9696
|
+--------------+----------------------------------+

配置网络

此处有两种网络可选：provider networks、self-service networks。本次使用self-service networks。

安装组件

[root@controller /]# yum install openstack-neutron openstack-neutron-ml2 
openstack-neutron-linuxbridge ebtables

配置neutron.conf

[root@controller /]# vim /etc/neutron/neutron.conf
[database]
connection = mysql+pymysql://neutron:NEUTRON_DBPASS@controller/neutron
[DEFAULT]
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = true
[DEFAULT]
transport_url = rabbit://openstack:RABBIT_PASS@controller
auth_strategy = keystone
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS
[DEFAULT]
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true
[nova]
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = NOVA_PASS
[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

配置ml2_conf.ini

配置模块化第 2 层 (ML2) 插件

[root@controller /]# vim /etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
type_drivers = flat,vlan,vxlan
tenant_network_types = vxlan
mechanism_drivers = linuxbridge,l2population
extension_drivers = port_security
[ml2_type_flat]
flat_networks = provider
[ml2_type_vxlan]
vni_ranges = 1:1000
[securitygroup]
enable_ipset = true

配置linuxbridge_agent.ini

配置 Linux 网桥代理

#配置文件
[root@controller /]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[linux_bridge]
#PROVIDER_INTERFACE_NAME：替换为本机网卡名，eg：ens33
physical_interface_mappings
=
provider:PROVIDER_INTERFACE_NAME
[vxlan]
enable_vxlan
=
true
#OVERLAY_INTERFACE_IP_ADDRESS：替换为本机网卡IP
local_ip
=
OVERLAY_INTERFACE_IP_ADDRESS
l2_population
=
true
[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
#验证linux系统内核是否支持网桥筛选器，下面的参数输出值均为1，说明支持。
[root@controller /]# sysctl net.bridge.bridge-nf-call-iptables
net.bridge.bridge-nf-call-iptables = 1
[root@controller /]# sysctl net.bridge.bridge-nf-call-ip6tables
net.bridge.bridge-nf-call-ip6tables = 1
#（可选）若上述的参数不为1，则需要手动配置/etc/sysctl.conf
[root@controller /]# vim /etc/sysctl.conf
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1

配置第三层代理

为自助服务虚拟网络提供路由和 NAT 服务。

[root@controller /]# vim /etc/neutron/l3_agent.ini
[DEFAULT]
interface_driver = linuxbridge

配置DHCP代理

为虚拟网络提供 DHCP 服务

[root@controller /]# vim /etc/neutron/dhcp_agent.ini 
[DEFAULT]
interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true

配置元数据代理

[root@controller /]# vim /etc/neutron/metadata_agent.ini
[DEFAULT]
nova_metadata_host = controller
metadata_proxy_shared_secret = METADATA_SECRET

配置Compute服务使用Networking服务

即：配置Nova服务使用Neutron服务

[root@controller /]# vim /etc/nova/nova.conf 
[neutron]
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET

配置环境

#网络服务初始化脚本需要一个符号链接/etc/neutron/plugin.ini，
#指向ML2插件配置文件/etc/neutron/plugins/ML2/ml2conf.ini
[root@controller /]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
#填充数据库
[root@controller /]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf 
--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
#重启Nova-API服务
[root@controller /]# systemctl restart openstack-nova-api.service
#配置网络服务开机自启、启动网络服务
[root@controller /]# systemctl enable neutron-server.service 
neutron-linuxbridge-agent.service neutron-dhcp-agent.service 
neutron-metadata-agent.service
[root@controller /]# systemctl start neutron-server.service 
neutron-linuxbridge-agent.service neutron-dhcp-agent.service 
neutron-metadata-agent.service
#配置第三层服务开机自启、启动服务
[root@controller /]# systemctl enable neutron-l3-agent.service
[root@controller /]# systemctl start neutron-l3-agent.service

4.5.2、安装、配置计算节点

安装组件

[root@controller /]# yum install openstack-neutron-linuxbridge ebtables ipset

（该步骤可省略）配置通用组件

该步骤可省略，因为all in one安装方式，计算节点和控制节点在同一台主机中，4.5.1中已经配置了neutron.conf文件。因此该步骤可省略。

[root@controller /]# vim /etc/neutron/neutron.conf
#（注意：使用all in one的安装方式，此处的数据库不可以注释，使用所有节点均在同一台主机中，注释掉会导致网络组件无法使用）
#注释[database]的connection，此处不需要使用数据库
[database]
#connection=mysql+pymysql://neutron:NEUTRON_DBPASS@controller/neutron
[DEFAULT]
transport_url = rabbit://openstack:RABBIT_PASS@controller
auth_strategy = keystone
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS
[oslo_concurrency]
lock_path = /var/lib/neutron/tmp

（该步骤可省略）配置网络

该步骤可省略，因为all in one安装方式，计算节点和控制节点在同一台主机中，4.5.1中已经配置了linuxbridge_agent.ini文件。因此该步骤可省略。

#配置文件
[root@controller /]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[linux_bridge]
#PROVIDER_INTERFACE_NAME：替换为本机网卡名，eg：ens33
physical_interface_mappings
=
provider:PROVIDER_INTERFACE_NAME
[vxlan]
enable_vxlan
=
true
#OVERLAY_INTERFACE_IP_ADDRESS：替换为本机网卡IP
local_ip
=
OVERLAY_INTERFACE_IP_ADDRESS
l2_population
=
true
[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
#验证linux系统内核是否支持网桥筛选器，下面的参数输出值均为1，说明支持。
[root@controller /]# sysctl net.bridge.bridge-nf-call-iptables
net.bridge.bridge-nf-call-iptables = 1
[root@controller /]# sysctl net.bridge.bridge-nf-call-ip6tables
net.bridge.bridge-nf-call-ip6tables = 1
#（可选）若上述的参数不为1，则需要手动配置/etc/sysctl.conf
[root@controller /]# vim /etc/sysctl.conf
net.bridge.bridge-nf-call-iptables = 1
net.bridge.bridge-nf-call-ip6tables = 1

验证网络是否配置好

[root@controller /]# . admin-openrc
#列出加载的扩展以验证neutron-server进程是否成功启动
[root@controller /]# openstack extension list --network
+---------------------------+---------------------------+----------------------------+
| Name
| Alias
| Description
|
+---------------------------+---------------------------+----------------------------+
| Default Subnetpools
| default-subnetpools
| Provides ability to mark
|
|
|
| and use a subnetpool as
|
|
|
| the default
|
| Availability Zone
| availability_zone
| The availability zone
|
......
......

（该步骤可省略）配置Compute服务使用Networking服务

即：配置Nova服务使用Neutron服务

该步骤可省略，因为all in one安装方式，计算节点和控制节点在同一台主机中，4.5.1中已经配置了nova.conf 文件。因此该步骤可省略。

[root@controller /]# vim /etc/nova/nova.conf 
[neutron]
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS

配置环境

重启、开机自启动

 [root@controller /]# systemctl restart openstack-nova-compute.service
[root@controller /]# systemctl enable neutron-linuxbridge-agent.service
[root@controller /]# systemctl start neutron-linuxbridge-agent.service

4.6、安装Horizon

4.6.1、安装Horizon步骤

该组件选用手动安装的方式，不使用source的方式安装

安装dashboard软件

[root@controller /]# yum install openstack-dashboard

配置local_settings

[root@controller /]# vim /etc/openstack-dashboard/local_settings
#配置主机名
OPENSTACK_HOST = "controller"
#'*'
允许所有主机访问
ALLOWED_HOSTS = ['*', 'two.example.com']
#新增SESSION_ENGINE
SESSION_ENGINE = 'django.contrib.sessions.backends.cache'
#修改原有的CACHES，为下面的部分
CACHES = {
'default': {
'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
'LOCATION': 'controller:11211',
}
}
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
#修改原有的OPENSTACK_API_VERSIONS为：
OPENSTACK_API_VERSIONS = {
"identity": 3,
"image": 2,
"volume": 2,
}
OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"
#（不需要设置）只有在选择网络为provider networks时才需要设置该步骤
OPENSTACK_NEUTRON_NETWORK = {
...
'enable_router': False,
'enable_quotas': False,
'enable_distributed_router': False,
'enable_ha_router': False,
'enable_lb': False,
'enable_firewall': False,
'enable_vpn': False,
'enable_fip_topology_check': False,
}
#（可选）设置时区
TIME_ZONE = "TIME_ZONE"

配置openstack-dashboard.conf

[root@controller /]# vim /etc/httpd/conf.d/openstack-dashboard.conf 
#新增
WSGIApplicationGroup %{GLOBAL}

配置环境

#重启httpd、memcached服务
[root@controller /]# systemctl restart httpd.service memcached.service

4.6.2、验证是否成功安装

在浏览器，登录下面的地址

#方式1：
http://controller/dashboard
#方式2：
http://本机网卡IP/dashboard

登录选项
- domain：default
- username：admin
- password：ADMIN_PASS
结果

4.7、安装Cinder

4.7.1、安装、配置存储节点

安装LVM

[root@controller /]# yum install lvm2 device-mapper-persistent-data
#设置开机自启动
[root@controller /]# systemctl enable lvm2-lvmetad.service
[root@controller /]# systemctl start lvm2-lvmetad.service

创建LVM物理卷

注意：此处的sdb，表示的是第二块硬盘。（同理，sda表示第一块硬盘）
```
[root@controller /]# pvcreate /dev/sdb
Physical volume "/dev/sdb" successfully created
```

创建 LVM 卷组cinder-volumes：

[root@controller /]# vgcreate cinder-volumes /dev/sdb
Volume group "cinder-volumes" successfully created

配置lvm.conf

[root@controller /]# vim /etc/lvm/lvm.conf
#设置过滤器，a：接受。 r：拒绝
#下面的filter，只需要选择一个进行配置即可。
#存储节点使用LVM （本教程使用这个）
filter
=
[ "a/sda/", "a/sdb/", "r/.*/"]
#计算节点使用LVM
filter
=
[ "a/sda/", "r/.*/"]

安装cinder组件

[root@controller /]# yum install openstack-cinder targetcli python-keystone

配置cinder.conf

[root@controller /]# vim /etc/cinder/cinder.conf
[database]
connection = mysql+pymysql://cinder:CINDER_DBPASS@controller/cinder
[DEFAULT]
transport_url = rabbit://openstack:RABBIT_PASS@controller
auth_strategy = keystone
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_id = default
user_domain_id = default
project_name = service
username = cinder
password = CINDER_PASS
[DEFAULT]
#配置为本机的网卡IP
my_ip = MANAGEMENT_INTERFACE_IP_ADDRESS
[lvm]
volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
volume_group = cinder-volumes
iscsi_protocol = iscsi
iscsi_helper = lioadm
[DEFAULT]
enabled_backends = lvm
glance_api_servers = http://controller:9292
[oslo_concurrency]
lock_path = /var/lib/cinder/tmp

配置环境

[root@controller /]# systemctl enable openstack-cinder-volume.service target.service
[root@controller /]# systemctl start openstack-cinder-volume.service target.service

4.7.2、安装、配置控制节点

在控制器节点上安装和配置块存储服务.

创建数据库

#进入数据库
[root@controller /]# mysql -u root -p
#创建cinder数据库
MariaDB [(none)]> CREATE DATABASE cinder;
#数据库授权
MariaDB [(none)]> GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' 
IDENTIFIED BY 'CINDER_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' 
IDENTIFIED BY 'CINDER_DBPASS';

创建服务凭证

#获取管理员的CLI命令
[root@controller /]# . admin-openrc
#创建cinde用户
[root@controller /]#openstack user create --domain default --password-prompt cinder
#此处使用默认密码：CINDER_PASS
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field
| Value
|
+---------------------+----------------------------------+
| domain_id
| default
|
| enabled
| True
|
| id
| 9d7e33de3e1a498390353819bc7d245d |
| name
| cinder
|
| options
| {}
|
| password_expires_at | None
|
+---------------------+----------------------------------+
#为cinder用户添角色信息
[root@controller /]# openstack role add --project service --user cinder admin
#创建cinder服务实例
#cinderv2
[root@controller /]# openstack service create --name cinderv2 
--description "OpenStack Block Storage" volumev2
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | OpenStack Block Storage
|
| enabled
| True
|
| id
| eb9fd245bdbc414695952e93f29fe3ac |
| name
| cinderv2
|
| type
| volumev2
|
+-------------+----------------------------------+
#cinderv3
[root@controller /]# openstack service create --name cinderv3 
--description "OpenStack Block Storage" volumev3
+-------------+----------------------------------+
| Field
| Value
|
+-------------+----------------------------------+
| description | OpenStack Block Storage
|
| enabled
| True
|
| id
| ab3bbbef780845a1a283490d281e7fda |
| name
| cinderv3
|
| type
| volumev3
|
+-------------+----------------------------------+

创建块存储服务API端点

创建v2版本的端点

[root@controller /]# openstack endpoint create --region RegionOne 
volumev2 public http://controller:8776/v2/%(project_id)s
+--------------+------------------------------------------+
| Field
| Value
|
+--------------+------------------------------------------+
| enabled
| True
|
| id
| 513e73819e14460fb904163f41ef3759
|
| interface
| public
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| eb9fd245bdbc414695952e93f29fe3ac
|
| service_name | cinderv2
|
| service_type | volumev2
|
| url
| http://controller:8776/v2/%(project_id)s |
+--------------+------------------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne 
volumev2 internal http://controller:8776/v2/%(project_id)s
+--------------+------------------------------------------+
| Field
| Value
|
+--------------+------------------------------------------+
| enabled
| True
|
| id
| 6436a8a23d014cfdb69c586eff146a32
|
| interface
| internal
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| eb9fd245bdbc414695952e93f29fe3ac
|
| service_name | cinderv2
|
| service_type | volumev2
|
| url
| http://controller:8776/v2/%(project_id)s |
+--------------+------------------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne 
volumev2 admin http://controller:8776/v2/%(project_id)s
+--------------+------------------------------------------+
| Field
| Value
|
+--------------+------------------------------------------+
| enabled
| True
|
| id
| e652cf84dd334f359ae9b045a2c91d96
|
| interface
| admin
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| eb9fd245bdbc414695952e93f29fe3ac
|
| service_name | cinderv2
|
| service_type | volumev2
|
| url
| http://controller:8776/v2/%(project_id)s |
+--------------+------------------------------------------+

创建v3版本的端点

[root@controller /]# openstack endpoint create --region RegionOne 
volumev3 public http://controller:8776/v3/%(project_id)s
+--------------+------------------------------------------+
| Field
| Value
|
+--------------+------------------------------------------+
| enabled
| True
|
| id
| 03fa2c90153546c295bf30ca86b1344b
|
| interface
| public
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| ab3bbbef780845a1a283490d281e7fda
|
| service_name | cinderv3
|
| service_type | volumev3
|
| url
| http://controller:8776/v3/%(project_id)s |
+--------------+------------------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne 
volumev3 internal http://controller:8776/v3/%(project_id)s
+--------------+------------------------------------------+
| Field
| Value
|
+--------------+------------------------------------------+
| enabled
| True
|
| id
| 94f684395d1b41068c70e4ecb11364b2
|
| interface
| internal
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| ab3bbbef780845a1a283490d281e7fda
|
| service_name | cinderv3
|
| service_type | volumev3
|
| url
| http://controller:8776/v3/%(project_id)s |
+--------------+------------------------------------------+
[root@controller /]# openstack endpoint create --region RegionOne 
volumev3 admin http://controller:8776/v3/%(project_id)s
+--------------+------------------------------------------+
| Field
| Value
|
+--------------+------------------------------------------+
| enabled
| True
|
| id
| 4511c28a0f9840c78bacb25f10f62c98
|
| interface
| admin
|
| region
| RegionOne
|
| region_id
| RegionOne
|
| service_id
| ab3bbbef780845a1a283490d281e7fda
|
| service_name | cinderv3
|
| service_type | volumev3
|
| url
| http://controller:8776/v3/%(project_id)s |
+--------------+------------------------------------------+

安装cinder组件

[root@controller /]# yum install openstack-cinder

配置cinder.conf

[root@controller /]# vim /etc/cinder/cinder.conf
[database]
connection = mysql+pymysql://cinder:CINDER_DBPASS@controller/cinder
[DEFAULT]
transport_url = rabbit://openstack:RABBIT_PASS@controller
auth_strategy = keystone
my_ip = 10.0.0.11
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_id = default
user_domain_id = default
project_name = service
username = cinder
password = CINDER_PASS
[oslo_concurrency]
lock_path = /var/lib/cinder/tmp

填充数据库

[root@controller /]# su -s /bin/sh -c "cinder-manage db sync" cinder

配置Nova使用块存储

[root@controller /]# vim /etc/nova/nova.conf

配置环境

[root@controller /]# systemctl restart openstack-nova-api.service
[root@controller /]# systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service
[root@controller /]# systemctl start openstack-cinder-api.service openstack-cinder-scheduler.service

4.7.3、（可选）安装、配置备份服务

本教程没有安装swift组件，因此可省略此步骤

安装cinder

[root@controller /]# yum install openstack-cinder

配置cinder.conf

[root@controller /]# /etc/cinder/cinder.conf
[DEFAULT]
backup_driver = cinder.backup.drivers.swift
#替换SWIFT_URL为；为对象存储服务的 URL
#可通过命令查看具体的替换数值：openstack catalog show object-store
backup_swift_url = SWIFT_URL

配置环境

[root@controller /]# systemctl enable openstack-cinder-backup.service
[root@controller /]# systemctl start openstack-cinder-backup.service

4.7.4、验证是否成功安装

[root@controller /]# . admin-openrc
[root@controller /]# openstack volume service list
#此处未安装swift组件，因此只有存储节点、控制节点
+------------------+------------+------+---------+-------+----------------------------+
| Binary
| Host
| Zone | Status
| State | Updated_at
|
+------------------+------------+------+---------+-------+----------------------------+
| cinder-scheduler | controller | nova | enabled | up
| 2016-09-30T02:27:41.000000 |
| cinder-volume
| block@lvm
| nova | enabled | up
| 2016-09-30T02:27:46.000000 |
+------------------+------------+------+---------+-------+----------------------------+

5、常见问题

1、安装keystone后，执行命令：openstack domain create --description “An Example Domain” example

出现错误：

Failed to discover available identity versions when contacting http://controller:5000/v3. Attempting to parse version from URL.
Unable to establish connection to http://controller:5000/v3/auth/tokens: HTTPConnectionPool(host='controller', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7fa20bba02b0>: Failed to establish a new connection: [Errno -3] Temporary failure in name resolution',))

解决方式：

关闭SELinux，然后使用命令setnforce 0（或者重启系统）

2、配置网卡时，需要注意的事项

配置网络时，需要先使用dhcp，获取虚拟机网卡ip，然后再使用static的方式，配置网卡ip。如果直接使用dhcp的方式，可能会导致该ip无法使用，无法ping通。

3.2、安装OpenStack各个组件时，使用命令： yum install xxxx -y。

出现错误：

Error downloading packages:
python-dogpile-cache-0.6.2-1.el7.noarch: [Errno 256] No more mirrors to try.
python-keyring-5.7.1-1.el7.noarch: [Errno 256] No more mirrors to try.
python-dogpile-core-0.4.1-2.el7.noarch: [Errno 256] No more mirrors to try.
python-cmd2-0.6.8-8.el7.noarch: [Errno 256] No more mirrors to try.

解决方式：
（1）方式1：再次执行安装命令 yum install python-openstackclient -y
（2）方式2：yum update =》yum install python-openstackclient -y
若还是出现错误：Error downloading packages: lttng-ust-2.10.0-1.el7.x86_64: [Errno 256] No more mirrors to try.
使用yum clean cache、yum makecache，然后再次进行yum update

4、horizon登录注意事项
地址：http://controller/dashboard
不行的话，换成: http://controller对用的IP地址/dashboard
登录填写的资料：
domain：default
username：admin
password：ADMIN_PASS

5、禁用 SELinux

**否则会出现错误：**the request you have made requires authentication(HTTPConnection 401)

解决方式：

[root@controller /]# vim /etc/selinux/config
SELINUX=disabled
SELINUXTYPE=targeted

然后setnforce 0（或者重启系统）

6、VMWare挂载磁盘的注意事项
查看挂载：

[root@controller /]# fdisk -l

若新增的磁盘未挂载上，处理方式：

#1、查看当前有的磁盘文件：
[root@controller /]# cd /sys/class/scsi_host/ 
#2、获取当前目录下的所有文件名
[root@controller /]# ls
host0 host1 host2
#3、逐个执行上面文件中出现的文件
[root@controller /]# echo "- - -" >
/sys/class/scsi_host/host0/scan
[root@controller /]# echo "- - -" >
/sys/class/scsi_host/host1/scan
[root@controller /]# echo "- - -" >
/sys/class/scsi_host/host2/scan

7、重启虚拟机后，无法使用openstack命令

原因：

因为使用export设置环境变量，因此该环境变量只限定于当前执行命令的终端使用。系统关机、开启新的终端均无法使用这个环境变量。

解决方式：

需要运行源文件命令，添加环境变量。

[root@controller /]# . admin-openrc

#admin-openrc文件中的内容
[root@controller /]# vim admin-openrc
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=ADMIN_PASS
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

8、执行openstack volume service list，cinder-volume运行失败

原因：
若，存储节点在操作系统磁盘上使用LVM，则需要将关联的设备添加到过滤器中。

解决方式：
配置存储节点时，需要挂载相应的卷。

#修改配置文件：/etc/lvm/lvm.conf
[root@controller /]# vim /etc/lvm/lvm.conf
devices {
...
filter = [ "a/sda/", "a/sdb/", "r/.*/"]
}

9、Nova无法启动

原因：

防火墙阻止访问5672端口

解决方式：

#查看nova-comput日志：发现端口未启用
cat /var/log/nova/nova-compute.log
#关闭防火墙
systemctl stop firewalld
systemctl disable firewalld
#重启nova服务
systemctl start libvirtd.service openstack-nova-compute.service

执行安装命令 yum install python-openstackclient -y
（2）方式2：yum update =》yum install python-openstackclient -y
若还是出现错误：Error downloading packages: lttng-ust-2.10.0-1.el7.x86_64: [Errno 256] No more mirrors to try.
使用yum clean cache、yum makecache，然后再次进行yum update

5、禁用 SELinux

**否则会出现错误：**the request you have made requires authentication(HTTPConnection 401)

解决方式：

[root@controller /]# vim /etc/selinux/config
SELINUX=disabled
SELINUXTYPE=targeted

然后setnforce 0（或者重启系统）

6、VMWare挂载磁盘的注意事项
查看挂载：

[root@controller /]# fdisk -l

若新增的磁盘未挂载上，处理方式：

#1、查看当前有的磁盘文件：
[root@controller /]# cd /sys/class/scsi_host/ 
#2、获取当前目录下的所有文件名
[root@controller /]# ls
host0 host1 host2
#3、逐个执行上面文件中出现的文件
[root@controller /]# echo "- - -" >
/sys/class/scsi_host/host0/scan
[root@controller /]# echo "- - -" >
/sys/class/scsi_host/host1/scan
[root@controller /]# echo "- - -" >
/sys/class/scsi_host/host2/scan

7、重启虚拟机后，无法使用openstack命令

原因：

因为使用export设置环境变量，因此该环境变量只限定于当前执行命令的终端使用。系统关机、开启新的终端均无法使用这个环境变量。

解决方式：

需要运行源文件命令，添加环境变量。

[root@controller /]# . admin-openrc

#admin-openrc文件中的内容
[root@controller /]# vim admin-openrc
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=ADMIN_PASS
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

8、执行openstack volume service list，cinder-volume运行失败

原因：
若，存储节点在操作系统磁盘上使用LVM，则需要将关联的设备添加到过滤器中。

解决方式：
配置存储节点时，需要挂载相应的卷。

#修改配置文件：/etc/lvm/lvm.conf
[root@controller /]# vim /etc/lvm/lvm.conf
devices {
...
filter = [ "a/sda/", "a/sdb/", "r/.*/"]
}

9、Nova无法启动

原因：

防火墙阻止访问5672端口

解决方式：

#查看nova-comput日志：发现端口未启用
cat /var/log/nova/nova-compute.log
#关闭防火墙
systemctl stop firewalld
systemctl disable firewalld
#重启nova服务
systemctl start libvirtd.service openstack-nova-compute.service

最后

以上就是高挑魔镜为你收集整理的OpenStack安装教程0、说明1、搭建基础环境2、准备工作3、安装软件4、安装OpenStack5、常见问题的全部内容，希望文章能够帮你解决OpenStack安装教程0、说明1、搭建基础环境2、准备工作3、安装软件4、安装OpenStack5、常见问题所遇到的程序开发问题。

如果觉得靠谱客网站的内容还不错，欢迎将靠谱客网站推荐给程序员好友。

本图文内容来源于网友提供，作为学习参考使用，或来自网络收集整理，版权属于原作者所有。

本文分类：openstack
浏览次数：180 次浏览
发布日期：2023-04-06 14:10:02
本文链接：https://www.kaopuke.com/article/k-p-k_14_ujo_6_f2_12__23__10_3.html

OpenStack安装教程0、说明1、搭建基础环境2、准备工作3、安装软件4、安装OpenStack5、常见问题

概述

0、说明

1、搭建基础环境

1.1、安装VMWare

1.2、下载CentoOS7

1.3、安装虚拟机

2、准备工作

2.1、禁用SELinux

2.2、关闭防火墙

2.3、配置网卡

2.4、配置主机名

2.5、设置时区

3、安装软件

3.1、安装NTP

3.2、添加OpenStack软件源

3.3、安装SQL数据库

3.4、安装消息队列

3.5、安装Memcached

3.6、安装ETCD数据库

4、安装OpenStack

4.1、默认密码

4.2、安装Keystone

4.2.1、安装Keystone步骤

4.2.2、验证是否成功安装

4.2.3、创建OpenStack客户端脚本

4.3、安装Glance

4.3.1、安装Glance步骤

4.3.2、验证是否成功安装

4.4、安装Nova

4.4.1、安装、配置控制节点

4.4.2、安装、配置计算节点

4.5、安装Neutron

4.5.1、安装、配置控制节点

4.5.2、安装、配置计算节点

4.6、安装Horizon

4.6.1、安装Horizon步骤

4.6.2、验证是否成功安装

4.7、安装Cinder

4.7.1、安装、配置存储节点

4.7.2、安装、配置控制节点

4.7.3、（可选）安装、配置备份服务

4.7.4、验证是否成功安装

5、常见问题

最后

相关文章

评论列表共有 0 条评论

发表评论 取消回复

发表评论取消回复