经验首页 前端设计 程序设计 Java相关 移动开发 数据库/运维 软件/图像 大数据/云计算 其他经验
当前位置：技术经验 » 大数据/云/AI » openstack » 查看文章
OpenStack云平台部署
来源：cnblogs　　作者：SkyRainmom　　时间：2023/5/17 8:52:47　　对本文有异议

前言：本次部署采用系统的是Centos 8-Stream版，存储库为OpenStack-Victoria版，除基础配置，五大服务中的时间同步服务，七大组件中的nova服务，neutron服务，cinder服务需要在双节点配置外，其他服务配置均在控制节点，neutron配置从公有网络和私有网络中选择一种即可，大多数情况还是选公有网络的配置，此次部署所有密码均为111111，可按自身需要自行配置

安装环境：

  • 采用虚拟化软件：VMware Workstation 16 Pro
  • 操作系统：Centos 8-Stream
  • 控制节点配置：内存4G，CPU4核，磁盘100G，启用虚拟化引擎
  • 计算节点配置：内存4G，CPU4核，磁盘100G，启用虚拟化引擎

基础配置(双节点)

Yum源仓库配置

阿里云镜像仓库地址：https://mirrors.aliyun.com，有需要可自行配置，但是这里用不到

（1） 配置Centos 8的源只需改yum仓库.repo文件参数即可如下

  1. #更改CentOS-Stream-AppStream.repo文件，将baseurl参数中的地址改为https://mirrors.aliyun.com
  3. [root@localhost ~]# cd /etc/yum.repos.d/
  4. [root@localhost yum.repos.d]# vi CentOS-Stream-AppStream.repo 
  5. [appstream]
  6. name=CentOS Stream $releasever - AppStream
  7. #mirrorlist=http://mirrorlist.centos.org/?   release=$stream&arch=$basearch&repo=AppStream&infra=$infra
  8. baseurl=https://mirrors.aliyun.com/$contentdir/$stream/AppStream/$basearch/os/
  9. gpgcheck=1
  10. enabled=1
  11. gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
  14. #更改CentOS-Stream-BaseOS.repo 文件，将baseurl参数中的地址改为https://mirrors.aliyun.com
  16. [root@localhost yum.repos.d]# vi CentOS-Stream-BaseOS.repo 
  17. [baseos]
  18. name=CentOS Stream $releasever - BaseOS
  19. #mirrorlist=http://mirrorlist.centos.org/?release=$stream&arch=$basearch&repo=BaseOS&infra=$infra
  20. baseurl=https://mirrors.aliyun.com/$contentdir/$stream/BaseOS/$basearch/os/
  21. gpgcheck=1
  22. enabled=1
  23. gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial
  26. #更改CentOS-Stream-Extras.repo 文件，将baseurl参数中的地址改为https://mirrors.aliyun.com
  28. [root@localhost yum.repos.d]# vi CentOS-Stream-Extras.repo 
  29. [extras]
  30. name=CentOS Stream $releasever - Extras
  31. #mirrorlist=http://mirrorlist.centos.org/?release=$stream&arch=$basearch&repo=extras&infra=$infra
  32. baseurl=https://mirrors.aliyun.com/$contentdir/$stream/extras/$basearch/os/
  33. gpgcheck=1
  34. enabled=1
  35. gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-centosofficial

（2）配置openstack源

  1. #在yum仓库文件夹下面创建openstack-victoria.repo文件
  3. [root@localhost ~]# vi /etc/yum.repos.d/openstack-victoria.repo 
  4. #写入以下内容
  5. [virctoria]
  6. name=virctoria
  7. baseurl=https://mirrors.aliyun.com/centos/8-stream/cloud/x86_64/openstack-victoria/
  8. gpgcheck=0
  9. enabled=1

（3）清除缓存，重建缓存

  1. [root@controller ~]# yum clean all
  2. [root@controller ~]# yum makecache

网络配置

  • 控制节点双网卡-------> 仅主机IP：10.10.10.10 Net外网IP：10.10.20.10
  • 计算节点双网卡-------> 仅主机IP：10.10.10.20 Net外网IP：10.10.20.20

（1）安装network网络服务

  1. #安装network，由于8系统自带的服务为NetworkManager,它会与neutron服务有冲突，所以安装network，关闭NetworkManager,并设置disable状态
  3. [root@localhost ~]# dnf -y install network-scripts
  4. [root@localhost ~]# systemctl disable --now NetManager
  6. #启动network服务，设为开机自启动
  8. [root@localhost ~]# systemctl enable --now network

（2） 配置静态IP

  1. #ens33，以控制节点为例
  2. [root@localhost ~]# vi /etc/sysconfig/network-scripts/ifcfg-ens33
  3. BOOTPROTO=static				#修改
  4. ONBOOT=yes						#修改
  5. IPADDR=10.10.10.10				#添加
  6. NETMASK=255.255.255.0			#添加
  8. #ens34，以控制节点为例
  9. [root@localhost ~]# vi /etc/sysconfig/network-scripts/ifcfg-ens34
  10. BOOTPROTO=static				#修改
  11. ONBOOT=yes						#修改
  12. IPADDR=10.10.20.10				#添加
  13. NETMASK=255.255.255.0			#添加
  14. GATEWAY=10.10.20.2				#添加
  15. DNS1=8.8.8.8					#添加
  16. DNS2=114.114.114.114			#添加

（3）重启网络，测试外网连通性

  1. [root@localhost ~]# systemctl restart network
  2. [root@localhost ~]# ping -c 3 www.baidu.com

主机配置

（1）修改主机名

  1. #控制节点
  2. [root@localhost ~]# hostnamectl set-hostname controller
  3. [root@localhost ~]# bash
  4. [root@controller ~]#
  6. #计算节点
  7. [root@localhost ~]# hostnamectl set-hostname compute
  8. [root@localhost ~]# bash
  9. [root@compute ~]#

（2）关闭防火墙

  1. #关防火墙并设置disable开机禁启动
  2. [root@controller ~]# systemctl disable --now firewalld

（3）关闭selinux安全子系统

  1. #设置selinux并设置disable开机禁启动
  2. [root@controller ~]# vi /etc/selinux/config 
  3. SELINUX=disabled
  5. #可通过getenforce命令查看selinux状态
  6. [root@controller ~]# getenforce 
  7. Disabled

（4）配置host主机映射

  1. #控制节点
  2. [root@controller ~]# cat >>etc/hosts<<EOF
  3. > 10.10.10.10    controller
  4. > 10.10.10.20    computer
  5. > EOF
  7. #计算节点
  8. [root@compute ~]# cat >>etc/hosts<<EOF
  9. > 10.10.10.10    controller
  10. > 10.10.10.20    compute
  11. > EOF

openstack存储库

  1. #安装openstack-victoria版存储库
  2. [root@controller ~]# dnf -y install centos-release-openstack-victoria
  4. #升级节点上所有的安装包
  5. [root@controller ~]# dnf -y upgrade 
  7. #安装openstack客户端和openstack-selinux
  8. [root@controller ~]# dnf -y install python3-openstackclient openstack-selinux

五大服务

Chrony时间同步（双节点）

（1）查看系统是否安装chrony

  1. [root@controller ~]# rpm -qa |grep chrony
  3. #没有的话就安装
  4. [root@controller ~]# dnf -y install chrony

（2）编辑chrony配置文件

  1. #控制节点
  2. [root@controller ~]# vim /etc/chrony.conf
  3. server ntp6.aliyun.com iburst		#添加与阿里云时间同步
  4. allow 10.10.10.0/24			#添加
  6. #计算节点
  7. [root@controller ~]# vim /etc/chrony.conf
  8. server controller iburst		#添加与控制节点时间同步

（3）重启时间同步服务，设置开机自启

  1. [root@controller ~]# systemctl restart chronyd && systemctl enable chronyd

Mariadb数据库

（1）安装mariadb数据库

  1. [root@controller ~]# dnf -y install mariadb mariadb-server python3-PyMySQL 
  3. #启动mariadb数据库
  4. [root@controller ~]# systemctl start mariadb

（2）创建openstack.cnf文件，编辑它

  1. [root@controller ~]# vim /etc/my.cnf.d/openstack.cnf
  2. [mysqld]
  3. bind-address = 10.10.10.10		#绑定IP，如果后面换IP，这行可以删掉
  4. default-storage-engine = innodb
  5. innodb_file_per_table = on
  6. max_connections = 4096
  7. collation-server = utf8_general_ci
  8. character-set-server = utf8

（3）初始化数据库

  1. [root@controller ~]# mysql_secure_installation
  2. Enter current password for root (enter for none):    #输入当前用户root密码，若为空直接回车
  3. OK, successfully used password, moving on...
  4. Set root password? [Y/n] y				# 是否设置root密码
  5. New password:					# 输入新密码
  6. Re-enter new password:			# 再次输入新密码
  7. Remove anonymous users? [Y/n] y				# 是否删除匿名用户
  8. Disallow root login remotely? [Y/n] n			# 是否禁用远程登录
  9. Remove test database and access to it? [Y/n] y			# 是否删除数据库并访问它	
  10. Reload privilege tables now? [Y/n] y		# 是否重新加载权限表

（4）重启数据库服务并设置开机自启

  1. [root@controller ~]# systemctl restart mariadb && systemctl enable mariadb

RabbitMQ消息队列

注意：安装rabbitmq-server时，可能会报错，这是安装源里面没有libSDL，下载所需包，再安装rabbitmq-server就行了

下载命令：wget http://rpmfind.net/linux/centos/8-stream/PowerTools/x86_64/os/Packages/SDL2-2.0.10-2.el8.x86_64.rpm

安装命令：dnf -y install SDL2-2.0.10-2.el8.x86_64.rpm

（1）安装rabbitmq软件包

  1. [root@controller ~]# dnf -y install rabbitmq-server

（2）启动消息队列服务并设置开机自启动

  1. [root@controller ~]# systemctl start rabbitmq-server && systemctl enable rabbitmq-server

(3) 添加openstack用户并设置密码

  1. [root@controller ~]# rabbitmqctl add_user openstack 111111

(4) 配置openstack用户权限

  1. [root@controller ~]# rabbitmqctl set_permissions openstack ".*" ".*" ".*"

（5）启用消息队列Web界面管理插件

  1. [root@controller ~]# rabbitmq-plugins enable rabbitmq_management
  3. #这一步启动后，ss -antlu命令查看端口会有一个15672的端口开启，可通过web界面登录RabbitMQ查看，网站地址：http://10.10.10.10:15672，用户和密码默认都是guest

Memcached缓存

（1）安装memcache软件包

  1. [root@controller ~]# dnf -y install memcached python3-memcached

（2）编辑memcache配置文件

  1. [root@controller ~]# vim /etc/sysconfig/memcached
  2. ..........
  3. OPTIONS="-l 127.0.0.1,::1,controller"          #修改这一行

（3）重启缓存服务并设置开机自启

  1. [root@controller ~]# systemctl start memcached && systemctl enable memcached

Etcd集群

（1）安装etcd软件包

  1. [root@controller ~]# dnf -y install etcd

（2）编辑etcd配置文件

  1. [root@controller ~]# vim /etc/etcd/etcd.conf
  2. #修改如下
  3. ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
  4. ETCD_LISTEN_PEER_URLS="http://10.10.10.10:2380"
  5. ETCD_LISTEN_CLIENT_URLS="http://10.10.10.10:2379"
  6. ETCD_NAME="controller"
  7. ETCD_INITIAL_ADVERTISE_PEER_URLS="http://10.10.10.10:2380"
  8. ETCD_ADVERTISE_CLIENT_URLS="http://10.10.10.10:2379"
  9. ETCD_INITIAL_CLUSTER="controller=http://10.10.10.10:2380"
  10. ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster"
  11. ETCD_INITIAL_CLUSTER_STATE="new"

（3）启动etcd服务并设置开机自启动

  1. [root@controller ~]# systemctl start etcd && systemctl enable etcd

七大组件

Keystone认证

（1）数据库创库授权

  1. #进入数据库
  2. [root@controller ~]# mysql -u root -p111111
  4. #创建keystone数据库
  5. MariaDB [(none)]> CREATE DATABASE keystone;
  7. #授权
  8. MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '111111';
  9. MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '111111';

（2）安装keystone软件包

  1. [root@controller ~]# dnf -y install openstack-keystone httpd python3-mod_wsgi

（3）编辑配置文件

  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/keystone/keystone.conf /etc/keystone/keystone.conf.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/keystone/keystone.conf.bak >/etc/keystone/keystone.conf
  5. #编辑
  6. [root@controller ~]# vim /etc/keystone/keystone.conf
  7. [database]
  8. connection = mysql+pymysql://keystone:111111@controller/keystone
  10. [token]
  11. provider = fernet

（4）数据库初始化

  1. [root@controller ~]# su -s /bin/sh -c "keystone-manage db_sync" keystone

（5）查看keystone数据库表信息

  1. [root@controller ~]# mysql -uroot -p111111
  3. MariaDB [(none)]> use keystone;
  4. MariaDB [keystone]> show tables;
  5. MariaDB [keystone]> quit

（6）初始化Fernet

  1. [root@controller ~]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
  2. [root@controller ~]# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

（7）引导身份认证

  1. [root@controller ~]# keystone-manage bootstrap --bootstrap-password 111111 --bootstrap-admin-url http://controller:5000/v3/ --bootstrap-internal-url http://controller:5000/v3/ --bootstrap-public-url http://controller:5000/v3/ --bootstrap-region-id RegionOne

（8）配置Apache HTTP服务

  1. #编辑httpd.conf文件
  2. [root@controller ~]# vim /etc/httpd/conf/httpd.conf
  3. ServerName controller		#添加这一行
  5. <Directory />
  6.     AllowOverride none
  7.     Require all granted				#这一行改成这样
  8. </Directory>
  10. #创建wsgi-keystone.conf文件链接
  11. [root@controller ~]# ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

（9）重启httpd服务并设置开机自启动

  1. [root@controller ~]# systemctl restart httpd && systemctl enable httpd

（10）创建admin环境变量脚本

  1. [root@controller ~]# vim /admin-openrc.sh
  2. export OS_USERNAME=admin
  3. export OS_PASSWORD=111111
  4. export OS_PROJECT_NAME=admin
  5. export OS_USER_DOMAIN_NAME=Default
  6. export OS_PROJECT_DOMAIN_NAME=Default
  7. export OS_AUTH_URL=http://controller:5000/v3
  8. export OS_IDENTITY_API_VERSION=3
  9. export OS_IMAGE_API_VERSION=2
  11. #可通过source /admin-openrc.sh命令来导入环境变量，或./admin-openrc.sh命令，如果不想每次手动导入，可以修改.bashrc配置文件实现开机启动导入
  12. [root@controller ~]# vim .bashrc 
  13. source /admin-openrc.sh			#添加这一行

（11）创建域，项目，用户和角色

  1. #创建域，已有默认域default，自己可随便创一个
  2. [root@controller ~]# openstack domain create --description "An Example Domain" example
  4. #创建service项目
  5. [root@controller ~]# openstack project create --domain default --description "Service Project" service
  7. #创建测试项目
  8. [root@controller ~]# openstack project create --domain default --description "Demo Project" myproject
  10. #创建用户，此命令执行会要求输入密码，输两次即可
  11. [root@controller ~]# openstack user create --domain default --password-prompt myuser
  13. #创建角色
  14. [root@controller ~]# openstack role create myrole
  16. #添加角色与项目，用户绑定
  17. [root@controller ~]# openstack role add --project myproject --user myuser myrole

（12）验证token令牌

  1. [root@controller ~]# openstack token issue

Glance镜像

(1) 数据库创库授权

  1. #进入数据库
  2. [root@controller ~]# mysql -u root -p111111
  4. #创建glance数据库
  5. MariaDB [(none)]> CREATE DATABASE glance;
  7. #授权
  8. MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '111111';
  9. MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '111111';

(2) 安装glance软件包

注：安装报错，修改CentOS-Stream-PowerTools.repo源为enable=1，重新安装

  1. [root@controller ~]# dnf install -y openstack-glance

(3) 编辑配置文件

  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/glance/glance-api.conf /etc/glance/glance-api.conf.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/glance/glance-api.conf.bak >/etc/glance/glance-api.conf
  6. #编辑
  7. [root@controller ~]# vim /etc/glance/glance-api.conf
  8. [database]
  9. connection = mysql+pymysql://glance:111111@controller/glance
  11. [keystone_authtoken]
  12. www_authenticate_uri  = http://controller:5000
  13. auth_url = http://controller:5000
  14. memcached_servers = controller:11211
  15. auth_type = password
  16. project_domain_name = Default
  17. user_domain_name = Default
  18. project_name = service
  19. username = glance
  20. password = 111111
  22. [paste_deploy]
  23. flavor = keystone
  25. [glance_store]
  26. stores = file,http
  27. default_store = file
  28. filesystem_store_datadir = /var/lib/glance/images/

(4) 数据库初始化

  1. [root@controller ~]# su -s /bin/sh -c "glance-manage db_sync" glance

(5) 查看glance数据库表信息

  1. [root@controller ~]# mysql -uroot -p111111
  3. MariaDB [(none)]> use glance;
  4. MariaDB [keystone]> show tables;
  5. MariaDB [keystone]> quit

(6) 创建glance用户和服务，关联admin角色

  1. #创建glance用户
  2. [root@controller ~]# openstack user create --domain default --password 111111 glance
  4. #关联admin角色
  5. [root@controller ~]# openstack role add --project service --user glance admin
  7. #创建glance服务
  8. [root@controller ~]# openstack service create --name glance --description "OpenStack Image" image

(7) 注册API接口

  1. #public
  2. [root@controller ~]# openstack endpoint create --region RegionOne image public http://controller:9292
  4. #internal
  5. [root@controller ~]# openstack endpoint create --region RegionOne image internal http://controller:9292
  7. #admin
  8. [root@controller ~]# openstack endpoint create --region RegionOne image admin http://controller:9292

(8) 查看服务端点

  1. [root@controller ~]# openstack endpoint list

(9) 启动glance服务并设置开机自启

  1. [root@controller ~]# systemctl start openstack-glance-api && systemctl enable openstack-glance-api

(10) 测试镜像功能

  1. #此次采用的镜像为cirros-0.5.1-x86_64-disk.img,创建命令如下
  2. [root@controller ~]# openstack image create "cirros" --file cirros-0.5.1-x86_64-disk.img --disk-format qcow2 --container-format bare --public
  4. #创建成功后可通过openstack命令查看
  5. [root@controller ~]# openstack image list
  7. #进入glance数据库查看，存放在images表中
  8. [root@controller ~]# mysql -uroot -p111111
  10. MariaDB [(none)]> use glance;
  11. MariaDB [glance]> select * from images\G;
  13. #在/var/lib/glance/images/目录下可以看到镜像文件，如果要删除此镜像需要删除数据库信息，再删除镜像文件
  14. [root@controller ~]# ls /var/lib/glance/images/

Placement放置

(1) 数据库创库授权

  1. #进入数据库
  2. [root@controller ~]# mysql -u root -p111111
  4. #创建placement数据库
  5. MariaDB [(none)]> CREATE DATABASE placement;
  7. #授权
  8. MariaDB [(none)]> GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '111111';
  9. MariaDB [(none)]> GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '111111';

(2) 安装placement软件包

  1. [root@controller ~]# dnf install -y openstack-placement-api

(3) 编辑配置文件

  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/placement/placement.conf /etc/placement/placement.conf.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/placement/placement.conf.bak >/etc/placement/placement.conf
  5. #编辑
  6. [root@controller ~]# vim /etc/placement/placement.conf
  7. [placement_database]
  8. connection = mysql+pymysql://placement:111111@controller/placement
  10. [api]
  11. auth_strategy = keystone
  13. [keystone_authtoken]
  14. auth_url = http://controller:5000/v3
  15. memcached_servers = controller:11211
  16. auth_type = password
  17. project_domain_name = Default
  18. user_domain_name = Default
  19. project_name = service
  20. username = placement
  21. password = 111111

(4) 数据库初始化

  1. [root@controller ~]# su -s /bin/sh -c "placement-manage db sync" placement

(5) 查看placement数据库表信息

  1. [root@controller ~]# mysql -uroot -p111111
  3. MariaDB [(none)]> use placement;
  4. MariaDB [keystone]> show tables;
  5. MariaDB [keystone]> quit

(6) 创建placement用户和服务，关联admin角色

  1. #创建placement用户
  2. [root@controller ~]# openstack user create --domain default --password 111111 placement
  4. #关联admin角色
  5. [root@controller ~]# openstack role add --project service --user placement admin
  7. #创建placement服务
  8. [root@controller ~]# openstack service create --name placement --description "Placement API" placement

(7) 注册API接口

  1. #public
  2. [root@controller ~]# openstack endpoint create --region RegionOne placement internal http://controller:8778
  4. #internal
  5. [root@controller ~]# openstack endpoint create --region RegionOne placement public http://controller:8778
  7. #admin
  8. [root@controller ~]# openstack endpoint create --region RegionOne placement admin http://controller:8778

(8) 查看服务端点

  1. [root@controller ~]# openstack endpoint list

(9) 重启httpd服务

  1. [root@controller ~]# systemctl restart httpd

检测placement服务状态

  1. [root@controller ~]# placement-status upgrade check

Nova计算

1,控制节点(1)

(1) 数据库创库授权
  1. #进入数据库
  2. [root@controller ~]# mysql -u root -p111111
  4. #创建nova_api，nova和nova_cell0数据库
  5. MariaDB [(none)]> CREATE DATABASE nova_api;
  6. MariaDB [(none)]> CREATE DATABASE nova;
  7. MariaDB [(none)]> CREATE DATABASE nova_cell0;
  9. #授权
  10. MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '111111';
  11. MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '111111';
  12. MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '111111';
  13. MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '111111';
  14. MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY '111111';
  15. MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '111111';
(2) 安装nova软件包
  1. [root@controller ~]# dnf install -y openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler
(3) 编辑配置文件
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/nova/nova.conf.bak >/etc/nova/nova.conf
  5. #编辑
  6. [root@controller ~]# vim /etc/nova/nova.conf
  7. [DEFAULT]
  8. enabled_apis = osapi_compute,metadata
  9. transport_url = rabbit://openstack:111111@controller:5672/
  10. my_ip = 10.10.10.10				#本机IP，如果将来换IP，这地方一定要改
  12. [api_database]
  13. connection = mysql+pymysql://nova:111111@controller/nova_api
  15. [database]
  16. connection = mysql+pymysql://nova:111111@controller/nova
  18. [api]
  19. auth_strategy = keystone
  21. [keystone_authtoken]
  22. www_authenticate_uri = http://controller:5000/
  23. auth_url = http://controller:5000/
  24. memcached_servers = controller:11211
  25. auth_type = password
  26. project_domain_name = Default
  27. user_domain_name = Default
  28. project_name = service
  29. username = nova
  30. password = 111111
  32. [vnc]
  33. enabled = true
  34. server_listen = $my_ip
  35. server_proxyclient_address = $my_ip
  37. [glance]
  38. api_servers = http://controller:9292
  40. [oslo_concurrency]
  41. lock_path = /var/lib/nova/tmp
  43. [placement]
  44. region_name = RegionOne
  45. project_domain_name = Default
  46. project_name = service
  47. auth_type = password
  48. user_domain_name = Default
  49. auth_url = http://controller:5000/v3
  50. username = placement
  51. password = 111111
(4) 数据库初始化
  1. # 同步nova_api数据库
  2. [root@controller ~]# su -s /bin/sh -c "nova-manage api_db sync" nova
  4. # 同步nova_cell0数据库
  5. [root@controller ~]# su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
  7. # 创建cell1
  8. [root@controller ~]# su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
  10. # 同步nova数据库
  11. [root@controller ~]# su -s /bin/sh -c "nova-manage db sync" nova
(5) 创建nova用户和服务，关联admin角色
  1. #创建nova用户
  2. [root@controller ~]# openstack user create --domain default --password 111111 nova
  4. #关联admin角色
  5. [root@controller ~]# openstack role add --project service --user nova admin
  7. #创建nova服务
  8. [root@controller ~]# openstack service create --name nova --description "OpenStack Compute" compute
(6) 注册API接口
  1. #public
  2. [root@controller ~]# openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1
  4. #internal
  5. [root@controller ~]# openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1
  7. #admin
  8. [root@controller ~]# openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1
(7) 查看服务端点
  1. [root@controller ~]# openstack endpoint list
(8) 验证nova_cell0和cell1是否添加成功
  1. [root@controller ~]# su -s /bin/sh -c "nova-manage cell_v2 list_cells" nova
(9) 启动nova所有服务并设为开机自启
  1. [root@controller ~]# systemctl enable --now openstack-nova-api openstack-nova-scheduler openstack-nova-conductor openstack-nova-novncproxy
(10) 查看nova服务是否启动
  1. [root@controller ~]# nova service-list
  3. #一般只会显示两个服务：nova-scheduler和nova-conductor，这是因为上面这条命令是由nova-api接收，而它控制着nova-scheduler和nova-conductor服务，如果nova-api未开启，那这两个服务也会down掉，nova-novncproxy服务则是通过查看端口号的形式，示例如下：
  4. [root@controller ~]# netstat -lntup | grep 6080
  5. tcp        0      0 0.0.0.0:6080            0.0.0.0:*               LISTEN      1456/python3   
  6. [root@controller ~]# ps -ef | grep 1456			
  7. nova        1456       1  0 18:29 ?        00:00:05 /usr/bin/python3 /usr/bin/nova-novncproxy --web /usr/share/novnc/
  8. root       27724   26054  0 20:51 pts/0    00:00:00 grep --color=auto 1456
(11) 如何通过web界面查看
  1. #如果不配置域名解析，就直接用ip
  2. http://10.10.10.10:6080
  4. #如果要配置域名解析，在电脑C:\Windows\System32\drivers\etc目录下里面的hosts文件里添加
  5. 10.10.10.10		controller
  6. 10.10.10.20 	compute
  7. #再访问
  8. http://controller:6080

2,计算节点

(1) 安装nova软件包
  1. [root@compute ~]# dnf install -y openstack-nova-compute
(2) 编辑配置文件
  1. #复制备份配置文件并去掉注释
  2. [root@compute ~]# cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
  3. [root@compute ~]# grep -Ev '^$|#' /etc/nova/nova.conf.bak >/etc/nova/nova.conf
  5. #编辑
  6. [root@compute ~]# vim /etc/nova/nova.conf
  7. [DEFAULT]
  8. enabled_apis = osapi_compute,metadata
  9. transport_url = rabbit://openstack:111111@controller
  10. my_ip = 10.10.10.20				#本机IP，如果将来换IP，这地方一定要改
  12. [api]
  13. auth_strategy = keystone
  15. [keystone_authtoken]
  16. www_authenticate_uri = http://controller:5000/
  17. auth_url = http://controller:5000/
  18. memcached_servers = controller:11211
  19. auth_type = password
  20. project_domain_name = Default
  21. user_domain_name = Default
  22. project_name = service
  23. username = nova
  24. password = 111111
  26. [vnc]
  27. enabled = true
  28. server_listen = 0.0.0.0
  29. server_proxyclient_address = $my_ip
  30. novncproxy_base_url = http://controller:6080/vnc_auto.html
  32. [glance]
  33. api_servers = http://controller:9292
  35. [oslo_concurrency]
  36. lock_path = /var/lib/nova/tmp
  38. [placement]
  39. region_name = RegionOne
  40. project_domain_name = Default
  41. project_name = service
  42. auth_type = password
  43. user_domain_name = Default
  44. auth_url = http://controller:5000/v3
  45. username = placement
  46. password = 111111
(3) 确定计算节点是否支持虚拟机的硬件加速
  1. #如果此命令返回值是别的数字，计算节点支持硬件加速；如果此命令返回值是0，计算节点不支持硬件加速，需要配置[libvirt]
  2. [root@compute ~]# egrep -c '(vmx|svm)' /proc/cpuinfo
  4. #配置[libvirt]
  5. [root@compute ~]# vim /etc/nova/nova.conf
  6. [libvirt]
  7. virt_type = qemu
(4) 启动计算节点nova服务并设置开机自启动
  1. [root@compute ~]# systemctl enable --now libvirtd.service openstack-nova-compute.service

控制节点（2）

(5) 将计算节点添加到单元数据库
  1. #确认数据库中存在计算主机
  2. [root@controller ~]# openstack compute service list --service nova-compute
  4. #控制节点发现计算节点
  5. [root@controller ~]# su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova
(6) 设置发现间隔
  1. [root@controller ~]# vim /etc/nova/nova.conf
  2. [scheduler]
  3. discover_hosts_in_cells_interval = 300

Neutron网络

(1) 数据库创库授权
  1. #进入数据库
  2. [root@controller ~]# mysql -u root -p111111
  4. #创建neutron数据库
  5. MariaDB [(none)] CREATE DATABASE neutron;
  7. #授权
  8. MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '111111';
  9. MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '111111';
(2) 创建neutron用户和服务，关联admin角色
  1. #创建neutron用户
  2. [root@controller ~]# openstack user create --domain default --password 111111 neutron
  4. #关联admin角色
  5. [root@controller ~]# openstack role add --project service --user neutron admin
  7. #创建neutron服务
  8. [root@controller ~]# openstack service create --name neutron --description "OpenStack Networking" network
(3) 注册API接口
  1. #public
  2. [root@controller ~]# openstack endpoint create --region RegionOne network public http://controller:9696
  4. #internal
  5. [root@controller ~]# openstack endpoint create --region RegionOne network internal http://controller:9696
  7. #admin
  8. [root@controller ~]# openstack endpoint create --region RegionOne network admin http://controller:9696
(4) 查看服务端点
  1. [root@controller ~]# openstack endpoint list

控制节点公有网络

(1) 安装neutron软件包
  1. [root@controller ~]# dnf -y install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables
(2) 编辑neutron配置文件
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/neutron.conf.bak >/etc/neutron/neutron.conf
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/neutron.conf
  7. [DEFAULT]
  8. core_plugin = ml2
  9. service_plugins =
  10. transport_url = rabbit://openstack:111111@controller
  11. auth_strategy = keystone
  12. notify_nova_on_port_status_changes = true
  13. notify_nova_on_port_data_changes = true
  15. [database]
  16. connection = mysql+pymysql://neutron:111111@controller/neutron
  18. [keystone_authtoken]
  19. www_authenticate_uri = http://controller:5000
  20. auth_url = http://controller:5000
  21. memcached_servers = controller:11211
  22. auth_type = password
  23. project_domain_name = default
  24. user_domain_name = default
  25. project_name = service
  26. username = neutron
  27. password = 111111
  29. [nova]								#如果配置文件没有这个参数，就直接加
  30. auth_url = http://controller:5000
  31. auth_type = password
  32. project_domain_name = default
  33. user_domain_name = default
  34. region_name = RegionOne
  35. project_name = service
  36. username = nova
  37. password = 111111
  39. [oslo_concurrency]
  40. lock_path = /var/lib/neutron/tmp
(3) 编辑ml2插件
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/plugins/ml2/ml2_conf.ini.bak >/etc/neutron/plugins/ml2/ml2_conf.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini
  7. [ml2]
  8. type_drivers = flat,vlan
  9. tenant_network_types =
  10. mechanism_drivers = linuxbridge
  11. extension_drivers = port_security
  13. [ml2_type_flat]
  14. flat_networks = provider
  16. [securitygroup]
  17. enable_ipset = true
(4) 配置Linux网桥代理
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
  7. [linux_bridge]
  8. physical_interface_mappings = provider:ens34		#这里选择提供给实例的net网卡
  10. [vxlan]
  11. enable_vxlan = false
  13. [securitygroup]
  14. enable_security_group = true
  15. firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
(5) 配置DHCP代理
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/dhcp_agent.ini.bak >/etc/neutron/dhcp_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/dhcp_agent.ini
  7. [DEFAULT]
  8. interface_driver = linuxbridge
  9. dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
  10. enable_isolated_metadata = true
(6) 设置网桥过滤器
  1. #修改系统参数配置文件
  2. [root@controller ~]# echo 'net.bridge.bridge-nf-call-iptables = 1
  3. net.bridge.bridge-nf-call-ip6tables = 1' >> /etc/sysctl.conf
  5. #加载br_netfilter模块
  6. [root@controller ~]# modprobe br_netfilter
  8. #检查
  9. [root@controller ~]# sysctl -p
  10. net.bridge.bridge-nf-call-iptables = 1			#出现这个则配置成功
  11. net.bridge.bridge-nf-call-ip6tables = 1			#出现这个则配置成功
(7) 配置元数据代理
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/metadata_agent.ini.bak >/etc/neutron/metadata_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/metadata_agent.ini
  7. [DEFAULT]
  8. nova_metadata_host = controller
  9. metadata_proxy_shared_secret = METADATA_SECRET		
  11. #'METADATA_SECRET'为密码，可自行定义。但要与后面配置nova中的元数据参数一致
(8) 配置计算服务以使用网络服务
  1. #在[neutron]部分，配置访问参数，启用元数据代理
  2. [root@controller ~]# vim /etc/nova/nova.conf
  3. [neutron]
  4. auth_url = http://controller:5000
  5. auth_type = password
  6. project_domain_name = default
  7. user_domain_name = default
  8. region_name = RegionOne
  9. project_name = service
  10. username = neutron
  11. password = 111111
  12. service_metadata_proxy = true
  13. metadata_proxy_shared_secret = METADATA_SECRET		#密码要一致
(9) 创建网络服务初始化脚本链接
  1. [root@controller ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
(10) 数据库初始化
  1. [root@controller ~]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
(11) 重启nova的API服务
  1. [root@controller ~]# systemctl restart openstack-nova-api.service
(12) 启动neutron服务并设置开机自启
  1. [root@controller ~]# systemctl enable --now neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service

计算节点公有网络

(1) 安装neutron软件包
  1. [root@compute ~]# dnf install -y openstack-neutron-linuxbridge ebtables ipset
(2) 编辑neutron配置文件
  1. #复制备份配置文件并去掉注释
  2. [root@compute ~]# cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
  3. [root@compute ~]# grep -Ev '^$|#' /etc/neutron/neutron.conf.bak >/etc/neutron/neutron.conf
  5. #编辑
  6. [root@compute ~]# vim /etc/neutron/neutron.conf
  7. [DEFAULT]
  8. transport_url = rabbit://openstack:111111@controller
  9. auth_strategy = keystone
  11. [keystone_authtoken]
  12. www_authenticate_uri = http://controller:5000
  13. auth_url = http://controller:5000
  14. memcached_servers = controller:11211
  15. auth_type = password
  16. project_domain_name = default
  17. user_domain_name = default
  18. project_name = service
  19. username = neutron
  20. password = 111111
  22. [oslo_concurrency]
  23. lock_path = /var/lib/neutron/tmp
(3) 配置Linux网桥代理
  1. #复制备份配置文件并去掉注释
  2. [root@compute ~]# cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
  3. [root@compute ~]# grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
  7. [linux_bridge]
  8. physical_interface_mappings = provider:ens34		#这里选择提供给实例的net网卡
  10. [vxlan]
  11. enable_vxlan = false
  13. [securitygroup]
  14. enable_security_group = true
  15. firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
(4) 设置网桥过滤器
  1. #修改系统参数配置文件
  2. [root@compute ~]# echo 'net.bridge.bridge-nf-call-iptables = 1
  3. net.bridge.bridge-nf-call-ip6tables = 1' >> /etc/sysctl.conf
  5. #加载br_netfilter模块
  6. [root@compute ~]# modprobe br_netfilter
  8. #检查
  9. [root@compute ~]# sysctl -p
  10. net.bridge.bridge-nf-call-iptables = 1			#出现这个则配置成功
  11. net.bridge.bridge-nf-call-ip6tables = 1			#出现这个则配置成功
(5) 配置计算服务以使用网络服务
  1. #在[neutron]部分，配置访问参数，启用元数据代理
  2. [root@compute ~]# vim /etc/nova/nova.conf
  3. [neutron]
  4. auth_url = http://controller:5000
  5. auth_type = password
  6. project_domain_name = default
  7. user_domain_name = default
  8. region_name = RegionOne
  9. project_name = service
  10. username = neutron
  11. password = 111111
(6) 重启nova的API服务
  1. [root@compute ~]# systemctl restart openstack-nova-api.service
(7) 启动Linux网桥服务并设置开机自启
  1. [root@compute ~]# systemctl enable neutron-linuxbridge-agent.service

公有网络服务是否正常运行

(8) 控制节点查看网络代理服务列表
  1. #控制节点查看网络代理服务列表
  2. [root@controller ~]# openstack network agent list
  4. #一般成功后会出现Metadata agent，DHCP agent,两个Linux bridge agent一共四个代理，一个Linux bridge agent属于controlller,另一个属于compute

控制节点私有网络

(1) 安装neutron软件包
  1. [root@controller ~]# dnf -y install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables
(2) 编辑neutron配置文件
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/neutron.conf.bak >/etc/neutron/neutron.conf
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/neutron.conf
  7. [DEFAULT]
  8. core_plugin = ml2
  9. service_plugins = router
  10. allow_overlapping_ips = true
  11. transport_url = rabbit://openstack:111111@controller
  12. auth_strategy = keystone
  13. notify_nova_on_port_status_changes = true
  14. notify_nova_on_port_data_changes = true
  16. [database]
  17. connection = mysql+pymysql://neutron:111111@controller/neutron
  19. [keystone_authtoken]
  20. www_authenticate_uri = http://controller:5000
  21. auth_url = http://controller:5000
  22. memcached_servers = controller:11211
  23. auth_type = password
  24. project_domain_name = default
  25. user_domain_name = default
  26. project_name = service
  27. username = neutron
  28. password = 111111
  30. [nova]								#如果配置文件没有这个参数，就直接加
  31. auth_url = http://controller:5000
  32. auth_type = password
  33. project_domain_name = default
  34. user_domain_name = default
  35. region_name = RegionOne
  36. project_name = service
  37. username = nova
  38. password = 111111
  40. [oslo_concurrency]
  41. lock_path = /var/lib/neutron/tmp
(3) 编辑ml2插件
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/plugins/ml2/ml2_conf.ini.bak >/etc/neutron/plugins/ml2/ml2_conf.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini
  7. [ml2]
  8. type_drivers = flat,vlan,vxlan
  9. tenant_network_types = vxlan
  10. mechanism_drivers = linuxbridge,l2population
  11. extension_drivers = port_security
  13. [ml2_type_flat]
  14. flat_networks = provider
  16. [ml2_type_vxlan]
  17. vni_ranges = 1:1000
  19. [securitygroup]
  20. enable_ipset = true
(4) 配置Linux网桥代理
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
  7. [linux_bridge]
  8. physical_interface_mappings = provider:ens34		#这里选择提供给实例的net网卡
  10. [vxlan]
  11. enable_vxlan = true
  12. local_ip = 10.10.10.10
  13. l2_population = true
  15. [securitygroup]
  16. enable_security_group = true
  17. firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
(5) 设置网桥过滤器
  1. #修改系统参数配置文件
  2. [root@controller ~]# echo 'net.bridge.bridge-nf-call-iptables = 1
  3. net.bridge.bridge-nf-call-ip6tables = 1' >> /etc/sysctl.conf
  5. #加载br_netfilter模块
  6. [root@controller ~]# modprobe br_netfilter
  8. #检查
  9. [root@controller ~]# sysctl -p
  10. net.bridge.bridge-nf-call-iptables = 1			#出现这个则配置成功
  11. net.bridge.bridge-nf-call-ip6tables = 1			#出现这个则配置成功
(6) 配置DHCP代理
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/dhcp_agent.ini.bak >/etc/neutron/dhcp_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/dhcp_agent.ini
  7. [DEFAULT]
  8. interface_driver = linuxbridge
  9. dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
  10. enable_isolated_metadata = true
(7) 配置第三层代理
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/l3_agent.ini /etc/neutron/l3_agent.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/l3_agent.ini.bak > /etc/neutron/l3_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/l3_agent.ini
  7. [DEFAULT]
  8. interface_driver = linuxbridge
(8) 配置元数据代理
  1. #复制备份配置文件并去掉注释
  2. [root@controller ~]# cp /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/neutron/metadata_agent.ini.bak >/etc/neutron/metadata_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/metadata_agent.ini
  7. [DEFAULT]
  8. nova_metadata_host = controller
  9. metadata_proxy_shared_secret = METADATA_SECRET		
  11. #'METADATA_SECRET'为密码，可自行定义。但要与后面配置nova中的元数据参数一致
(9) 配置计算服务以使用网络服务
  1. #在[neutron]部分，配置访问参数，启用元数据代理
  2. [root@controller ~]# vim /etc/nova/nova.conf
  3. [neutron]
  4. auth_url = http://controller:5000
  5. auth_type = password
  6. project_domain_name = default
  7. user_domain_name = default
  8. region_name = RegionOne
  9. project_name = service
  10. username = neutron
  11. password = 111111
  12. service_metadata_proxy = true
  13. metadata_proxy_shared_secret = METADATA_SECRET		#密码要一致
(10) 创建网络服务初始化脚本链接
  1. [root@controller ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
(11) 数据库初始化
  1. [root@controller ~]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
(12) 重启nova的API服务
  1. [root@controller ~]# systemctl restart openstack-nova-api.service
(13) 启动neutron服务并设置开机自启
  1. [root@controller ~]# systemctl enable --now neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service

计算节点私有网络

(1) 安装neutron软件包
  1. [root@compute ~]# dnf install -y openstack-neutron-linuxbridge ebtables ipset
(2) 编辑neutron配置文件
  1. #复制备份配置文件并去掉注释
  2. [root@compute ~]# cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
  3. [root@compute ~]# grep -Ev '^$|#' /etc/neutron/neutron.conf.bak >/etc/neutron/neutron.conf
  5. #编辑
  6. [root@compute ~]# vim /etc/neutron/neutron.conf
  7. [DEFAULT]
  8. transport_url = rabbit://openstack:111111@controller
  9. auth_strategy = keystone
  11. [keystone_authtoken]
  12. www_authenticate_uri = http://controller:5000
  13. auth_url = http://controller:5000
  14. memcached_servers = controller:11211
  15. auth_type = password
  16. project_domain_name = default
  17. user_domain_name = default
  18. project_name = service
  19. username = neutron
  20. password = 111111
  22. [oslo_concurrency]
  23. lock_path = /var/lib/neutron/tmp
(3) 配置Linux网桥代理
  1. #复制备份配置文件并去掉注释
  2. [root@compute ~]# cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
  3. [root@compute ~]# grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
  5. #编辑
  6. [root@controller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini
  7. [linux_bridge]
  8. physical_interface_mappings = provider:ens34		#这里选择提供给实例的net网卡
  10. [vxlan]
  11. enable_vxlan = true
  12. local_ip = 10.10.10.20
  13. l2_population = true
  15. [securitygroup]
  16. enable_security_group = true
  17. firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
(4) 设置网桥过滤器
  1. #修改系统参数配置文件
  2. [root@compute ~]# echo 'net.bridge.bridge-nf-call-iptables = 1
  3. net.bridge.bridge-nf-call-ip6tables = 1' >> /etc/sysctl.conf
  5. #加载br_netfilter模块
  6. [root@compute ~]# modprobe br_netfilter
  8. #检查
  9. [root@compute ~]# sysctl -p
  10. net.bridge.bridge-nf-call-iptables = 1			#出现这个则配置成功
  11. net.bridge.bridge-nf-call-ip6tables = 1			#出现这个则配置成功
(5) 配置计算服务以使用网络服务
  1. #在[neutron]部分，配置访问参数，启用元数据代理
  2. [root@compute ~]# vim /etc/nova/nova.conf
  3. [neutron]
  4. auth_url = http://controller:5000
  5. auth_type = password
  6. project_domain_name = default
  7. user_domain_name = default
  8. region_name = RegionOne
  9. project_name = service
  10. username = neutron
  11. password = 111111
(6) 重启nova的API服务
  1. [root@compute ~]# systemctl restart openstack-nova-api.service
(7) 启动Linux网桥服务并设置开机自启
  1. [root@compute ~]# systemctl enable neutron-linuxbridge-agent.service

私有网络服务是否正常运行

(8) 控制节点查看网络代理服务列表
  1. #控制节点查看网络代理服务列表
  2. [root@controller ~]# openstack network agent list
  4. #一般成功后会出现Metadata agent，DHCP agent,L3 agent,两个Linux bridge agent一共五个代理，一个Linux bridge agent属于controlller,另一个属于compute

Dashboard仪表盘

(1) 安装dashboard软件包

  1. [root@controller ~]# dnf install -y openstack-dashboard

(2) 编辑dashboard配置文件

  1. #此文件内所有选项与参数用命令模式搜索，有就修改，没有就添加
  2. [root@controller ~]# vim /etc/openstack-dashboard/local_settings
  4. OPENSTACK_HOST = "controller"
  6. #不配域名解析就要把IP写进去
  7. ALLOWED_HOSTS = ['controller'，'compute','10.10.10.10','10.10.10.20']
  9. SESSION_ENGINE = 'django.contrib.sessions.backends.cache'
  11. CACHES = {
  12.     'default': {
  13.          'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
  14.          'LOCATION': 'controller:11211',
  15.     },
  16. }
  18. OPENSTACK_KEYSTONE_URL = "http://%s/identity/v3" % OPENSTACK_HOST
  20. OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
  22. OPENSTACK_API_VERSIONS = {
  23.     "identity": 3,
  24.     "image": 2,
  25.     "volume": 3,
  26. }
  28. OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"
  31. OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"
  33. OPENSTACK_NEUTRON_NETWORK = {
  34.     'enable_router': False,
  35.     'enable_quotas': False,
  36.     'enable_distributed_router': False,
  37.     'enable_ha_router': False,
  38.     'enable_lb': False,
  39.     'enable_firewall': False,
  40.     'enable_vpn': False,
  41.     'enable_fip_topology_check': False,
  42. }
  44. TIME_ZONE = "Asia/Shanghai"

(3) 配置http服务

  1. [root@controller ~]# vi /etc/httpd/conf.d/openstack-dashboard.conf
  3. WSGIApplicationGroup %{GLOBAL}			#添加这行
  5. #编辑dashboard配置文件
  6. [root@controller ~]# vim /etc/openstack-dashboard/local_settings 
  8. WEBROOT = '/dashboard/'					#添加这行

(4) 重启http和缓存服务

  1. [root@controller ~]# systemctl restart httpd.service memcached.service

(5) 登录web界面

  1. #如果不配置域名解析，就直接用ip
  2. http://10.10.10.10/dashboard
  4. #如果要配置域名解析，在电脑C:\Windows\System32\drivers\etc目录下里面的hosts文件里添加
  5. 10.10.10.10		controller
  6. 10.10.10.20 	compute
  7. #再访问
  8. http://controller/dashboard

Cinder存储

控制节点

(1) 数据库创库授权
  1. #进入数据库
  2. [root@controller ~]# mysql -u root -p111111
  4. #创建cinder数据库
  5. MariaDB [(none)] CREATE DATABASE cinder;
  7. #授权
  8. MariaDB [(none)]> GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY '111111';
  9. MariaDB [(none)]> GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY '111111';
(2) 编辑配置文件
  1. #复制一份去掉注释
  2. [root@controller ~]# cp /etc/cinder/cinder.conf /etc/cinder/cinder.conf.bak
  3. [root@controller ~]# grep -Ev '^$|#' /etc/cinder/cinder.conf.bak > /etc/cinder/cinder.conf
  5. #编辑
  6. [root@controller ~]# vim /etc/cinder/cinder.conf
  7. [DEFAULT]
  8. transport_url = rabbit://openstack:111111@controller
  9. auth_strategy = keystone
  10. my_ip = 10.10.10.10
  12. [database]
  13. connection = mysql+pymysql://cinder:111111@controller/cinder
  15. [keystone_authtoken]
  16. www_authenticate_uri = http://controller:5000
  17. auth_url = http://controller:5000
  18. memcached_servers = controller:11211
  19. auth_type = password
  20. project_domain_name = default
  21. user_domain_name = default
  22. project_name = service
  23. username = cinder
  24. password = 111111
  26. [oslo_concurrency]
  27. lock_path = /var/lib/cinder/tmp
(3) 数据库初始化
  1. [root@controller ~]# su -s /bin/sh -c "cinder-manage db sync" cinder
(4) 查看cinder数据库表信息
  1. [root@controller ~]# mysql -uroot -p111111
  3. MariaDB [(none)]> use cinder;
  4. MariaDB [cinder]> show tables;
  5. MariaDB [cinder]> quit
(5) 创建cinder用户和服务，关联admin角色
  1. #创建cinder用户
  2. [root@controller ~]# openstack user create --domain default --password 111111 placement
  4. #关联admin角色
  5. [root@controller ~]# openstack role add --project service --user cinder admin
  7. #创建cinderv2,cinderv3服务
  8. [root@controller ~]# openstack service create --name cinderv2 \>   --description "OpenStack Block Storage" volumev2
  9. [root@controller ~]# openstack service create --name cinderv3 \>   --description "OpenStack Block Storage" volumev3
(6) 注册API接口
cinderv2的服务端点
  1. #public
  2. [root@controller ~]# openstack endpoint create --region RegionOne >   volumev2 public http://controller:8776/v2/%\(project_id\)s
  4. #internal
  5. [root@controller ~]# openstack endpoint create --region RegionOne >   volumev2 internal http://controller:8776/v2/%\(project_id\)s
  7. #admin
  8. [root@controller ~]# openstack endpoint create --region RegionOne >   volumev2 admin http://controller:8776/v2/%\(project_id\)s
cinderv3的服务端点
  1. #public
  2. [root@controller ~]# openstack endpoint create --region RegionOne >   volumev3 public http://controller:8776/v3/%\(project_id\)s
  4. #internal
  5. [root@controller ~]# openstack endpoint create --region RegionOne >   volumev3 internal http://controller:8776/v3/%\(project_id\)s
  7. #admin
  8. [root@controller ~]# openstack endpoint create --region RegionOne >   volumev3 admin http://controller:8776/v3/%\(project_id\)s
(7) 查看服务端点
  1. [root@controller ~]# openstack endpoint list
(8) 配置计算服务使用块存储
  1. #编辑nova配置文件
  2. [root@controller cinder]# vi /etc/nova/nova.conf
  3. [cinder]
  4. os_region_name = RegionOne
  6. #重启nova
  7. [root@controller ~]# systemctl restart openstack-nova-api.service
(9) 启动cinder服务并设置开机自启
  1. [root@controller ~]# systemctl enable --now openstack-cinder-api.service openstack-cinder-scheduler.service

计算节点（关闭虚拟机添加一块50G硬盘）

(1) 查看磁盘
  1. [root@compute ~]# fdisk --list
(2) 安装 LVM 包
  1. [root@compute ~]# dnf -y install lvm2 device-mapper-persistent-data
(3) 创建 LVM 物理卷/dev/sdb
  1. [root@compute ~]# pvcreate /dev/sdb
(4) 创建 LVM 卷组cinder-volumes
  1. [root@compute ~]# vgcreate cinder-volumes /dev/sdb
(5) 修改LVM配置
  1. #复制一份去掉注释
  2. [root@compute ~]# cp /etc/lvm/lvm.conf /etc/lvm/lvm.conf.bak
  3. [root@compute ~]# grep -Ev '^$|#' /etc/lvm/lvm.conf.bak > /etc/lvm/lvm.conf
  5. #编辑
  6. [root@compute ~]# vi /etc/lvm/lvm.conf
  7. devices {
  8.         filter = [ "a/sda/",a/sdb/", "r/.*/"]
  9. }
(6) 安装cinder相关软件包
  1. [root@compute ~]# dnf install -y openstack-cinder targetcli python3-keystone
(7) 编辑cinder配置文件
  1. #复制一份去掉注释
  2. [root@compute ~]# cp /etc/cinder/cinder.conf /etc/cinder/cinder.conf.bak
  3. [root@compute ~]# grep -Ev '^$|#' /etc/cinder/cinder.conf.bak > /etc/cinder/cinder.conf
  5. #编辑
  6. [root@compute ~]# vim /etc/cinder/cinder.conf
  7. [DEFAULT]
  8. transport_url = rabbit://openstack:111111@controller
  9. auth_strategy = keystone
  10. my_ip = 10.10.10.20
  11. enabled_backends = lvm
  12. glance_api_servers = http://controller:9292
  14. [database]
  15. connection = mysql+pymysql://cinder:111111@controller/cinder
  17. [keystone_authtoken]
  18. www_authenticate_uri = http://controller:5000
  19. auth_url = http://controller:5000
  20. memcached_servers = controller:11211
  21. auth_type = password
  22. project_domain_name = default
  23. user_domain_name = default
  24. project_name = service
  25. username = cinder
  26. password = 111111
  28. [lvm]					#没有就添加
  29. volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
  30. volume_group = cinder-volumes				#要与创建的卷组名对应
  31. target_protocol = iscsi
  32. target_helper = lioadm
  34. [oslo_concurrency]
  35. lock_path = /var/lib/cinder/tmp
(8) 启动cinder服务并设置开机自启
  1. [root@compute ~]# systemctl enable --now openstack-cinder-volume.service target.service
(9) 返回控制节点，查看服务列表
  1. [root@controller ~]# openstack volume service list
  2. #显示这样就行
  3. +------------------+-------------+------+---------+-------+----------------------------+
  4. | Binary           | Host        | Zone | Status  | State | Updated At                 |
  5. +------------------+-------------+------+---------+-------+----------------------------+
  6. | cinder-scheduler | controller  | nova | enabled | up    | 2023-05-11T08:12:03.000000 |
  7. | cinder-volume    | compute@lvm | nova | enabled | up    | 2023-05-11T08:12:02.000000 |
  8. +------------------+-------------+------+---------+-------+----------------------------+

至此，openstack云平台搭建V版已全部完成

原文链接：https://www.cnblogs.com/skyrainmom/p/17401818.html

 友情链接：直通硅谷 　点职佳 　北美留学生论坛

openstack热门文章

  • openstack简单部署流程
  • openstack删除僵尸卷
  • openstack系列文章（四）
  • OpenStack教程-01.在CentOS7.5上安装OpenStack-Rocky-系统环境准备-控制节点
  • 用OZ工具制作openstack镜像
  • Kolla-ansible部署openStack
  • Openstack部署踩坑
  • openstack 主机无法ping通instance，无法ssh到instance
  • 我的第二本译作《精通OpenStack》上架啦：书籍介绍和译者序
  • OpenStack教程-03.在CentOS7.5上安装OpenStack-Rocky-安装Keyston认证服务组件

    • openstack推荐文章

  • openStack核心组件的工作流程
  • Kolla-ansible部署openStack
  • OpenStack云平台部署
  • openstack 主机无法ping通instance，无法ssh到instance
  • OpenStack教程-01.在CentOS7.5上安装OpenStack-Rocky-系统环境准备-控制节点
  • OpenStack教程-03.在CentOS7.5上安装OpenStack-Rocky-安装Keyston认证服务组件
  • openstack系列文章（四）

    • 本站QQ群：前端 618073944 | Java 606181507 | Python 626812652 | C/C++ 612253063 | 微信 634508462 | 苹果 692586424 | C#/.net 182808419 | PHP 305140648 | 运维 608723728

    W3xue 的所有内容仅供测试，对任何法律问题及风险不承担任何责任。通过使用本站内容随之而来的风险与本站无关。
    关于我们  |  意见建议  |  捐助我们  |  报错有奖  |  广告合作、友情链接（目前9元/月）请联系QQ：27243702 沸活量
    皖ICP备17017327号-2　皖公网安备34020702000426号