分类导航

CentOS 发布时间：2022-04-02 发布网站：大佬教程 code.js-code.com

大佬教程收集整理的这篇文章主要介绍了Centos7.3 Openstack-liberty安装部署记录，大佬教程大佬觉得挺不错的，现在分享给大家，也给大家做个参考。

概述

一、环境 1.1 安全本指南会告诉你如何使用 Red Hat Enterprise Linux 7和其衍生的EPEL仓库安装openStack。说明：目前统一采用Centos7.3版本进行Openstack-liberty版本的安装。测试实验了KVM环境下的创建安装使用虚拟机。 1.2 主机网络 1. 控制节点/计算节点关闭防火墙和SELinux systemctl stop ipt

一、环境

1.1 安全

本指南会告诉你如何使用 Red Hat Enterprise Linux 7和其衍生的EPEL仓库安装openStack。
说明：目前统一采用Centos7.3版本进行Openstack-liberty版本的安装。测试实验了KVM环境下的创建安装使用虚拟机。

1.2 主机网络

1. 控制节点/计算节点关闭防火墙和SELinux

systemctl stop iptables
systemctl stop firewalld
systemctl disable firewalld
setenforce 0
sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/sysconfig/selinux

yum install vim net-tools

2. 配置hosts文件

控制节点/计算节点配置hosts
echo "192.168.0.231 controller" >> /etc/hosts
echo "192.168.0.232 compute1" >> /etc/hosts

1.3 设置时间同步

1) 控制节点

# yum install -y chrony
# vim /etc/chrony.conf
allow 192.168/16 #允许那些服务器和自己同步时间

# systemctl enable chronyd.service #开机启动
# systemctl start chronyd.service
# timedatectl set-timezone Asia/Shanghai #设置时区
# timedatectl status

2）计算节点

# yum install -y chrony
# vim /etc/chrony.conf
server 192.168.1.17 iburst #只留一行

# systemctl enable chronyd.service
# systemctl start chronyd.service
# timedatectl set-timezone Asia/Shanghai
# chronyc sources

1.4 安装openstack软件包

1. 准备OpenStack安装包 yum源

# vi CentOS-OpenStack-liberty.repo

[centos-openstack-liberty]
name=CentOS-7 - OpenStack liberty
baseurl=http://mirrors.aliyun.com/centos/7/cloud/$basearch/openstack-liberty/
gpgcheck=0
enabled=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Centos-7

[centos-openstack-liberty-test]
name=CentOS-7 - OpenStack liberty TesTing
baseurl=http://buildlogs.centos.org/centos/7/cloud/$basearch/openstack-liberty/
gpgcheck=0
enabled=0

# 或采用 CentOS7安装openStack提供的epel源

# yum install -y centos-release-openstack-liberty

2. 安装openstack

1) 控制节点安装 openstack

#Base
yum install -y http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-8.noarch.rpm
yum install -y centos-release-openstack-liberty
yum install -y python-openstackclient

##MysqL
yum install -y mariadb mariadb-server MysqL-python

##RabbitMQ
yum install -y rabbitmq-server

##Keystone
yum install -y openstack-keystone httpd mod_wsgi memcached python-memcached

##Glance
yum install -y openstack-glance python-glance python-glanceclient

##Nova
yum install -y openstack-nova-api openstack-nova-cert openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler python-novaclient

##Neutron linux-node1.example.com
yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge python-neutronclient ebtables ipset

##Dashboard
yum install -y openstack-dashboard

##Cinder
yum install -y openstack-cinder python-cinderclient

2）计算节点安装 openstack

##Base
yum install -y http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-8.noarch.rpm
yum install centos-release-openstack-liberty
yum install python-openstackclient

##Nova
yum install -y openstack-nova-compute sysfsutils

##Neutron
yum install -y openstack-neutron openstack-neutron-linuxbridge ebtables ipset

##Cinder
yum install -y openstack-cinder python-cinderclient targetcli python-oslo-policy

1.5 安装sql 数据库

1. 安装数据库

[root@controller ~]# yum install mariadb mariadb-server MysqL-python
[root@controller ~]# vi /etc/my.cnf.d/mariadb_openstack.cnf

[MysqLd]
bind-address = 192.168.0.231
default-storage-ENGIne = innodb
innodb_file_per_table
collation-server = utf8_general_ci
init-connect = 'SET NAMES utf8'
character-set-server = utf8 @H_164_19@max_connections=1000

[root@controller ~]# systemctl enable mariadb.service
[root@controller ~]# systemctl start mariadb.service

2. 创建密码: openstack

[root@controller ~]# MysqL_secure_installation

3. 调整数据库最大连接数：

[root@controller ~]# vi /usr/lib/systemd/system/mariadb.service

[service]新添加两行如下参数：
LimitNOFILE=10000
LimitNPROC=10000

systemctl --system daemon-reload
systemctl restart mariadb.service

MysqL -uroot -popenstack
sql> show variables like 'max_connections';

4. 创建数据库

# MysqL -u root -p

CREATE DATABASE keystone;
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'openstack';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'openstack';

CREATE DATABASE glance;
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'openstack';
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'openstack';

CREATE DATABASE nova;
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'openstack';
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'openstack';

CREATE DATABASE neutron;
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'openstack';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'openstack';

CREATE DATABASE cinder;
GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY 'cinder';
GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'openstack';

FLUSH PRIVILEGES;
SHOW DATABASES;

1.6 消息队列 rabbitmq支持集群。

1）在控制节点上安装与启动rabbitmq,监听5672端口

yum install rabbitmq-server

systemctl enable rabbitmq-server.service
systemctl start rabbitmq-server.service

# netstat -tunlp | grep 5672
tcp 0 0 0.0.0.0:15672 0.0.0.0:* LISTEN 1694/beam.smp
tcp 0 0 0.0.0.0:25672 0.0.0.0:* LISTEN 1694/beam.smp
tcP6 0 0 :::5672 :::* LISTEN 1694/beam.smp

2) 添加 openstack 用户:

# rabbitmqctl add_user openstack openstack

3) 授权用户 openstack 读、写、配置的权限

# rabbitmqctl set_permissions openstack ".*" ".*" ".*"

4) 查看安装插件

# rabbitmq-plugins list

5) 启用管理插件

# rabbitmq-plugins enable rabbitmq_management

The following plugins have been enabled:
mochiweb
webmachine
rabbitmq_web_dispatch
amqp_client
rabbitmq_management_agent
rabbitmq_management
Applying plugin configuration to rabbit@controller... started 6 plugins.

# rabbitmq-plugins list

#会启用如下服务：
Configured: E = explicitly enabled; e = implicitly enabled
| Status: * = running on rabbit@controller
|/
[e*] amqp_client 3.6.5
[e*] mochiweb 2.13.1
[E*] rabbitmq_management 3.6.5
[e*] rabbitmq_management_agent 3.6.5
[e*] rabbitmq_web_dispatch 3.6.5
[e*] webmachine 1.10.3

6）重启

# systemctl start rabbitmq-server.service

会启动15672端口的web界面

7) 登录以及添加openstack为administrator

http://192.168.0.231:15672

guest/guest 默认密码,也为管理员

注：配置openstack/openstack为tags为administrator

二、配置keystone

keystone 安装在 controller 节点，为了提高服务性能，使用 apache 提供WEB请求，由 memcached 来保存 Token 信息

2.1 安装keystone软件包

# yum install openstack-keystone httpd mod_wsgi memcached python-memcached

2.2 配置 keystone

注意：不@R_901_11197@号的keystone，其默认配置可能会有所不同

openssl rand -hex 10

c885b63d0ce5760ff23e

随机一个值。改成admin_token值

cat /etc/keystone/keystone.conf |grep -v "^#" | grep -v "^$"

[DEFAULT]
admin_token = c885b63d0ce5760ff23e

[database]
connection = MysqL://keystone:openstack@192.168.0.231/keystone

[memcache]
servers = 192.168.0.231:11211

[revoke]
driver = sql

[token]
provider = uuid
driver = memcache

2.3 初始化数据库

1）初始化数据库

# chown -R keystone:keystone /var/log/keystone
# su -s /bin/sh -c "keystone-manage db_sync" keystone

##############################################################################
会在/var/log/keystone/ 下生成一个keystone.log日志，keystone在启动时会写该文件。
##############################################################################

2）验证数据库

# MysqL -h 192.168.0.231 -ukeystone -popenstack -e "use keystone;show tables;"

3）启动memcache

systemctl enable memcached.service
systemctl start memcached.service

# netstat -tunlp | grep 11211
tcp 0 0 127.0.0.1:11211 0.0.0.0:* LISTEN 3288/memcached
tcP6 0 0 ::1 :11211 :::* LISTEN 3288/memcached
udp 0 0 127.0.0.1:11211 0.0.0.0:* 3288/memcached
udP6 0 0 ::1 :11211 :::* 3288/memcached

2.4 配置http服务器

1) 修改服务器名

# vi /etc/httpd/conf/httpd.conf
ServerName 192.168.0.231:80

2) 添加 keystone 的服务

# vi /etc/httpd/conf.d/wsgi-keystone.conf

Listen 5000
Listen 35357

<VirtualHost *:5000>
WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-public
WSGIScriptAlias / /usr/bin/keystone-wsgi-public
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
<IfVersion >= 2.4>
ErrorLogFormat "%{Cu}t %M"
</IfVersion>
ErrorLog /var/log/httpd/keystone-error.log
CustomLog /var/log/httpd/keystone-access.log combined

<Directory /usr/bin>
<IfVersion >= 2.4>
require all granted
</IfVersion>
<IfVersion < 2.4>
Order allow,deny
Allow from all
</IfVersion>
</Directory>
</VirtualHost>

<VirtualHost *:35357>
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-admin
WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
<IfVersion >= 2.4>
ErrorLogFormat "%{Cu}t %M"
</IfVersion>
ErrorLog /var/log/httpd/keystone-error.log
CustomLog /var/log/httpd/keystone-access.log combined

<Directory /usr/bin>
<IfVersion >= 2.4>
require all granted
</IfVersion>
<IfVersion < 2.4>
Order allow,deny
Allow from all
</IfVersion>
</Directory>
</VirtualHost>

3) 启动http服务器

systemctl enable httpd.service
systemctl start httpd.service

验证:

[root@controller ~]# ss -ntl | grep -E "5000|35357"
LISTEN 0 128 *:35357 *:*
LISTEN 0 128 *:5000 *:*

2.5 注册服务实体及API

2.5.1 配置环境变量

[root@controller ~]#

export OS_TOKEN=c885b63d0ce5760ff23e
export OS_URL=http://192.168.0.231:35357/v3
export OS_IDENTITY_API_VERSION=3

2.5.2 keystone服务注册

[root@controller ~]# openstack service create --name keystone --description "OpenStack Identity" identity

2.5.3 keystone API注册admin 管理的、public公共的、internal内部的

[root@controller ~]# openstack endpoint create --region RegionOne identity public http://192.168.0.231:5000/v2.0
[root@controller ~]# openstack endpoint create --region RegionOne identity internal http://192.168.0.231:5000/v2.0
[root@controller ~]# openstack endpoint create --region RegionOne identity admin http://192.168.0.231:35357/v2.0

[root@controller ~]# openstack endpoint list

2.6 创建项目、用户及规则

2.6.1 创建 admin 项目\admin 用户\ admin 角色并把 admin 项目、admin 角色、admin 用户关联起来

[root@controller ~]# openstack project create --domain default --description "Admin Project" admin
[root@controller ~]# openstack user create --domain default --password=openstack admin
[root@controller ~]# openstack role create admin
[root@controller ~]# openstack role add --project admin --user admin admin

[root@controller ~]# openstack user list
+----------------------------------+-------+
| ID | Name |
+----------------------------------+-------+
| e2bae88d31b54e4ab1a4cb2251da8a6a | admin |
+----------------------------------+-------+

2.6.2 创建 demo 项目\创建 demo 用户\创建 user 角色\ 并把 demo 项目、user 角色、demo 用户关联起来

[root@controller ~]# openstack project create --domain default --description "Demo Project" demo
[root@controller ~]# openstack user create --domain default --password=openstack demo
[root@controller ~]# openstack role create user
[root@controller ~]# openstack role add --project demo --user demo user

2.6.3 创建 service 项目

[root@controller ~]# openstack project create --domain default --description "service Project" service

[root@linux-node1 ~]# openstack endpoint delete ID

2.7 密码验证keystone正确性

为了验证，临时改环境变量,要使用用户名密码验证，不需要token验证，要去掉环境变量。

[root@controller ~]# unset OS_TOKEN OS_URL

为 admin 用户请求 token

[root@controller ~]# openstack --os-auth-url http://192.168.0.231:35357/v3 \
--os-project-domain-id default --os-user-domain-id default \
--os-project-name admin --os-username admin --os-auth-type password token issue
password:
+------------+----------------------------------+
| Field | Value |
+------------+----------------------------------+
| expires | 2017-05-10T03:12:15.764769Z |
| id | b28410f9c6314cd8aebeca0beb478bf9 |
| project_id | 79d295e81e5a4255a02a8ea26ae4606a |
| user_id | 4015e1151aee4ab7811f320378ce6031 |
+------------+----------------------------------+

2.8 使用环境变量脚本

1.创建 admin 用户的环境脚本

[root@controller ~]# vim admin-openrc.sh
export OS_PROjeCT_DOMAIN_ID=default
export OS_user_DOMAIN_ID=default
export OS_PROjeCt_name=admin
export OS_TENANt_name=admin
export OS_USERNAME=admin
export OS_password=openstack
export OS_AUTH_URL=http://192.168.0.231:35357/v3
export OS_IDENTITY_API_VERSION=3

2.创建 demo 用户的环境脚本

[root@controller ~]# vim demo-openrc.sh
export OS_PROjeCT_DOMAIN_ID=default
export OS_user_DOMAIN_ID=default
export OS_PROjeCt_name=demo
export OS_TENANt_name=demo
export OS_USERNAME=demo
export OS_password=openstack
export OS_AUTH_URL=http://192.168.0.231:5000/v3
export OS_IDENTITY_API_VERSION=3

3. 使用脚本测试
[root@controller ~]# source admin-openrc.sh
[root@controller ~]# openstack token issue
+------------+----------------------------------+
| Field | Value |
+------------+----------------------------------+
| expires | 2017-05-10T03:19:08.928697Z |
| id | df25646c15cb433ab7251dcd0308ecbf |
| project_id | 79d295e81e5a4255a02a8ea26ae4606a |
| user_id | 4015e1151aee4ab7811f320378ce6031 |
+------------+----------------------------------+

三、安装镜像服务(glancE)

glance为用户提供虚拟机镜像的发现、注册和取回服务。默认把镜像存放在 /var/lib/glance/images/ 目录下

3.1 环境准备

使用 admin 权限

[root@controller ~]# source admin-openrc.sh

1) 创建 glance 用户\把 service 项目、admin角色、glance 用户关联起来

[root@controller ~]# openstack user create --domain default --password=openstack glance
[root@controller ~]# openstack role add --project service --user glance admin

2) 注册名为image的服务

[root@controller ~]# openstack service create --name glance --description "OpenStack Image service" image

3) 注册API端点

[root@controller ~]# openstack endpoint create --region RegionOne image public http://192.168.0.231:9292
[root@controller ~]# openstack endpoint create --region RegionOne imagE internal http://192.168.0.231:9292
[root@controller ~]# openstack endpoint create --region RegionOne image admin http://192.168.0.231:9292

3.2 安装与配置

3.2.1 安装程序包

[root@controller ~]# yum install openstack-glance python-glance python-glanceclient

3.2.2 修改glance配置

1. 配置镜像的创建删除回收服务

cat /etc/glance/glance-api.conf |grep -v "^#" | grep -v "^$"

[DEFAULT]
verbose=True
notification_driver = noop

[database]
connection = MysqL://glance:openstack@192.168.0.231/glance

[glance_store]
default_store=file
filesystem_store_datadir=/var/lib/glance/images/

[paste_deploy]
flavor=keystone

2. 配置云系统的镜像注册服务

cat /etc/glance/glance-registry.conf |grep -v "^#" | grep -v "^$"

[DEFAULT]
verbose=True
notification_driver = noop

[database]
connection = MysqL://glance:openstack@192.168.0.231/glance

[paste_deploy]
flavor=keystone

3.2.3 导入数据

1）初始化数据库

[root@controller ~]# su -s /bin/sh -c "glance-manage db_sync" glance

No handlers Could be found for logger "oslo_config.cfg"
/usr/lib64/python2.7/site-packages/sqlalchemy/ENGIne/default.py:450: Warning: Duplicate index `ix_image_properties_image_id_name`. This is deprecated and will be disallowed in a future release.
cursor.execute(statement,parameters)

这个错误可以忽略,可以用MysqL测试数据库登录与创建是否成功。

2）验证数据库

# MysqL -h 192.168.0.231 -uglance -popenstack -e "use glance;show tables;"

3.3 启动openstack-glance服务

# systemctl enable openstack-glance-api.service openstack-glance-registry.service
# systemctl start openstack-glance-api.service openstack-glance-registry.service

验证:

[root@controller ~]# ss -ntl | grep -E "9191|9292"
LISTEN 0 128 *:9292 *:*
LISTEN 0 128 *:9191 *:*

3.4 glance安装验证

我们使用一个非常小的系统镜像来验证 glance 是否成功部署

1. 修改环境变量脚本

[root@controller ~]# echo "export OS_IMAGE_API_VERSION=2" | tee -a admin-openrc.sh demo-openrc.sh
[root@controller ~]# source admin-openrc.sh
[root@controller ~]# wget http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud.qcow2

2. 上传镜像给 glance

[root@controller ~]# glance image-create --name "CentOS-7-x86_64" --file CentOS-7-x86_64-GenericCloud.qcow2 --disk-format qcow2 --container-format bare \
--visibility public --progress

3. 查看已上传的镜像

[root@controller ~]# glance image-list
+--------------------------------------+-----------------+
| ID | Name |
+--------------------------------------+-----------------+
| 2ac90c0c-b923-43ff-8f99-294195a64ced | CentOS-7-x86_64 |
+--------------------------------------+-----------------+

查看磁盘上的文件：
[root@controller ~]# ll /var/lib/glance/images/
总用量 12980
-rw-r-----. 1 glance glance 1569390592 Aug 26 12:50 2ac90c0c-b923-43ff-8f99-294195a64ced

四、安装计算服务(nova)

4.1 安装及配置控制节点(controller)

这一部分讲述的是 nova 在控制节点（compute）上的部署

4.2 控制节点创建 nova 用户才及注册

1. 使用 admin 用户权限

[root@controller ~]# source admin-openrc.sh

2. 创建 nova 用户\角色\服务

[root@controller ~]# openstack user create --domain default --password=openstack nova
[root@controller ~]# openstack role add --project service --user nova admin
[root@controller ~]# openstack service create --name nova --description "OpenStack Compute" compute

3. 注册API

[root@controller ~]# openstack endpoint create --region RegionOne compute public http://192.168.0.231:8774/v2/%$tenant_id$s
[root@controller ~]# openstack endpoint create --region RegionOne computE internal http://192.168.0.231:8774/v2/%$tenant_id$s
[root@controller ~]# openstack endpoint create --region RegionOne compute admin http://192.168.0.231:8774/v2/%$tenant_id$s

4.3 控制节点安装以及配置组件

4.3.1 安装组件

# yum install openstack-nova-api openstack-nova-cert \
openstack-nova-conductor openstack-nova-console \
openstack-nova-novncproxy openstack-nova-scheduler \
python-novaclient

4.3.2 修改nova配置

cat /etc/nova/nova.conf|grep -v "^#" | grep -v "^$"

[DEFAULT] @H_164_19@my_ip=192.168.0.231
enabled_apis=osapi_compute,Metadata
auth_strategy=keystone
allow_resize_to_same_host=True
network_api_class=nova.network.neutronv2.api.API
linuxnet_interface_driver=nova.network.linux_net.NeutronLinuxBridgeInterfaceDriver
security_group_api=neutron
scheduler_default_filters=RetryFilter,AvailabilityZoneFilter,RamFilter,DiskFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter
firewall_driver=nova.virt.firewall.NoopFirewallDriver
verbose=true
rpc_BACkend=rabbit

[database]
connection=MysqL://nova:openstack@192.168.0.231/nova

[glance]
host=192.168.0.231

[libvirt]
virt_type=kvm

[neutron]
url=http://192.168.0.231:9696
auth_url=http://192.168.0.231:35357
auth_plugin=password
project_domain_id=default
user_domain_id=default
region_name=RegionOne
project_name=service
username=neutron
password=openstack
service_Metadata_proxy=true
Metadata_proxy_shared_secret=MetaDATA_SECRET
lock_path=/var/lib/nova/tmp

[oslo_concurrency]
lock_path=/var/lib/nova/tmp

[oslo_messaging_rabbit]
rabbit_host=192.168.0.231
rabbit_port=5672
rabbit_userid=openstack
rabbit_password=openstack

[vnc]
vncserver_listen=$my_ip
vncserver_proxyclient_address=$my_ip

4.3.3 数据导入

[root@controller ~]# su -s /bin/sh -c "nova-manage db sync" nova

No handlers Could be found for logger "oslo_config.cfg"
/usr/lib64/python2.7/site-packages/sqlalchemy/ENGIne/default.py:450: Warning: Duplicate index `block_device_mapping_instance_uuid_virtual_name_device_name_idx`. This is deprecated and will be disallowed in a future release.
cursor.execute(statement,parameters)
/usr/lib64/python2.7/site-packages/sqlalchemy/ENGIne/default.py:450: Warning: Duplicate index `uniq_instances0uuid`. This is deprecated and will be disallowed in a future release.
cursor.execute(statement,parameters)

# MysqL -h 192.168.0.231 -unova -popenstack -e "use nova;show tables;"

4.3.4 完成安装

# systemctl enable openstack-nova-api.service \
openstack-nova-cert.service openstack-nova-consoleauth.service \
openstack-nova-scheduler.service openstack-nova-conductor.service \
openstack-nova-novncproxy.service

# systemctl start openstack-nova-api.service \
openstack-nova-cert.service openstack-nova-consoleauth.service \
openstack-nova-scheduler.service openstack-nova-conductor.service \
openstack-nova-novncproxy.service

4.4 安装及配置计算节点(computE)

这一部分讲述的是 nova 在计算节点（compute）上的部署

4.4.1 安装计算节点安装

[root@compute1 ~]# yum install openstack-nova-compute sysfsutils

4.4.2 拷贝控制节点nova.conf并编辑 /etc/nova/nova.conf

[DEFAULT] @H_164_19@my_ip=192.168.0.232

[vnc]
enabled = True
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = $my_ip
novncproxy_base_url = http://192.168.0.231:6080/vnc_auto.html
keymap=en-us

[glance]
host = 192.168.0.231

[libvirt]
virt_type=kvm

查看配置文件是否正常：

[root@compute1 ~]# cat /etc/nova/nova.conf |grep -v "^#" | grep -v "^$"

[DEFAULT] @H_164_19@my_ip=192.168.0.232
enabled_apis=osapi_compute,ServerGroupAffinityFilter
firewall_driver=nova.virt.firewall.NoopFirewallDriver
verbose=true
rpc_BACkend=rabbit

[database]
connection=MysqL://nova:openstack@192.168.0.231/nova

[glance]
host=192.168.0.231

[libvirt]
virt_type=kvm
inject_password =true
inject_key = true

[oslo_concurrency]
lock_path=/var/lib/nova/tmp

[oslo_messaging_rabbit]
rabbit_host=192.168.0.231
rabbit_port=5672
rabbit_userid=openstack
rabbit_password=openstack

[vnc]
novncproxy_base_url=http://192.168.0.231:6080/vnc_auto.html
vncserver_listen=0.0.0.0
vncserver_proxyclient_address=$my_ip
enabled=true

检查服务器是否支持硬件虚拟化:

[root@compute1 ~]# egrep -c '(vmx|svm)' /proc/cpuinfo
4

如果显示的数字是0，则表示不支持硬件虚拟化.

4.4.3 完成安装启动服务

[root@compute1 ~]# systemctl enable libvirtd.service openstack-nova-compute.service
[root@compute1 ~]# systemctl start libvirtd.service openstack-nova-compute.service

4.4.4 验证,拉取环境变量配置脚本

[root@compute1 ~]# scp controller:~/*openrc.sh .
root@controller's password:
admin-openrc.sh 100% 289 0.3KB/s 00:00
demo-openrc.sh 100% 285 0.3KB/s 00:00

[root@compute1 ~]# source admin-openrc.sh

1. 安装是否成功并注册测试与glance是否正常

2. 查看 nova 服务组件

[root@compute1 ~]# nova service-list
+----+------------------+------------+----------+---------+-------+----------------------------+-----------------+
| Id | Binary | Host | Zone | Status | State | updated_at | Disabled Reason |
+----+------------------+------------+----------+---------+-------+----------------------------+-----------------+
| 1 | nova-consoleauth | controller | internal | enabled | up | 2017-05-10T09:17:29.000000 | - |
| 2 | nova-conductor | controller | internal | enabled | up | 2017-05-10T09:17:31.000000 | - |
| 4 | nova-cert | controller | internal | enabled | up | 2017-05-10T09:17:29.000000 | - |
| 5 | nova-scheduler | controller | internal | enabled | up | 2017-05-10T09:17:29.000000 | - |
| 6 | nova-compute | compute1 | nova | enabled | up | 2017-05-10T09:17:33.000000 | - |
+----+------------------+------------+----------+---------+-------+----------------------------+-----------------+

3. 查看API端点（可以忽 WARNING 级别的信息）

[root@compute1 ~]# nova endpoints

五、安装网络组件（neutron）

5.1 安装及配置 controller 节点

1. 使用 admin 权限

[root@controller ~]# source admin-openrc.sh
[root@controller ~]# openstack user create --domain default --password=openstack neutron
[root@controller ~]# openstack role add --project service --user neutron admin
[root@controller ~]# openstack service create --name neutron --description "OpenStack Networking" network
[root@controller ~]# openstack endpoint create --region RegionOne network public http://192.168.0.231:9696
[root@controller ~]# openstack endpoint create --region RegionOne network internal http://192.168.0.231:9696
[root@controller ~]# openstack endpoint create --region RegionOne network admin http://192.168.0.231:9696

2. 配置网络,本例采用扁平网络

（1）安装相关组件

[root@controller ~]# yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge python-neutronclient ebtables ipset

（2）配置 neutron 服务端组件

服务端组件配置包含数据库、认证、消息队列、拓朴变化通知、插件

vi /etc/neutron/neutron.conf

[DEFAULT]
state_path = /var/lib/neutron
core_plugin = ml2
service_plugins = router
rpc_BACkend=rabbit
auth_strategy=keystone
notify_nova_on_port_status_changes=True
notify_nova_on_port_data_changes=True
nova_url=http://192.168.0.231:8774/v2
verbose=True

[database]
connection = MysqL://neutron:openstack@192.168.0.231/neutron

[oslo_messaging_rabbit]
rabbit_host = 192.168.0.231
rabbit_port = 5672
rabbit_userid = openstack
rabbit_password = openstack

[oslo_concurrency]
lock_path = $state_path/lock

[keystone_authtoken]
auth_uri=http://192.168.0.231:5000
auth_url=http://192.168.0.231:35357
auth_plugin=password
project_domain_id=default
user_domain_id=default
project_name=service
username=neutron
password=openstack
admin_tenant_name = %sERVICE_TENANt_name%
admin_user = %sERVICE_USER%
admin_password = %sERVICE_password%

[nova]
auth_url=http://192.168.0.231:35357
auth_plugin=password
project_domain_id=default
user_domain_id=default
region_name=RegionOne
project_name=service
username=nova
password=openstack

（3）配置 ML2 plug-in （二层网络插件）

vi /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]
# 注意：启用ML2后，如果删除了type_drivers的值将导致数据库异常
type_drivers = flat,vlan,gre,vxlan,geneve
tenant_network_types = vlan,geneve @H_164_19@mechanism_drivers = openvswitch,linuxbridge
extension_drivers = port_security

[ml2_type_flat]
flat_networks = physnet1

[securitygroup]
enable_ipset = True

（4）配置 Linux bridge agent

vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]
physical_interface_mappings = physnet1:eth0

[vxlan]
enable_vxlan = false

[agent]
prevent_arp_spoofing = True

[securitygroup]
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.iptablesFirewallDriver

（5）配置 DHCP Agent

vi /etc/neutron/dhcp_agent.ini

[DEFAULT]
interface_driver = neutron.agent.linux.interface.bridgeInterfaceDriver
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_Metadata = True

（6）配置 Metadata agent

vi /etc/neutron/Metadata_agent.ini

[DEFAULT]
auth_uri = http://192.168.0.231:5000
auth_url = http://192.168.0.231:35357
auth_region = RegionOne
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = openstack
nova_Metadata_ip = 192.168.0.231
Metadata_proxy_shared_secret = MetaDATA_SECRET
verbose = True
admin_tenant_name = %sERVICE_TENANt_name%
admin_user = %sERVICE_USER%
admin_password = %sERVICE_password%

（7）完成安装,建立链接

[root@controller ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

同步数据

[root@controller ~]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

重启nova-api服务

[root@controller ~]# systemctl restart openstack-nova-api.service

启动及配置开机启动

[root@controller ~]# systemctl enable neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-Metadata-agent.service

[root@controller ~]# systemctl start neutron-server.service \
neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
neutron-Metadata-agent.service

[root@controller ~]# source admin-openrc.sh
[root@controller ~]# neutron agent-list

5.2 安装及配置 compute 节点

1. 组件安装

# yum install openstack-neutron openstack-neutron-linuxbridge ebtables ipset

2. 公共组件配置

网络公共组件配置包含认证、消息队列和插件，直接从控制节点上拷贝。

[root@controller ~]# scp /etc/neutron/neutron.conf 192.168.0.232:/etc/neutron/
[root@controller ~]# scp /etc/neutron/plugins/ml2/linuxbridge_agent.ini 192.168.0.232:/etc/neutron/plugins/ml2/
[root@controller ~]# scp /etc/neutron/plugins/ml2/ml2_conf.ini 192.168.0.232:/etc/neutron/plugins/ml2/

完成安装,建立链接

[root@compute1 ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

[root@compute1 ~]# vi /etc/neutron/neutron.conf

[database]
# 注释掉该模块的所有配置，因不需要 compute 节点直接连接数据库

重启compute服务:

[root@compute1 ~]# systemctl restart openstack-nova-compute.service

启动Linux bridge agent并设置开机自启动

[root@compute1 ~]# systemctl enable neutron-linuxbridge-agent.service
[root@compute1 ~]# systemctl start neutron-linuxbridge-agent.service

5.3 验证

以下命令在controller节点上执行

下面这个应该能看到4个agent,3个在controller节点，1个在compute1节点

六、创建虚拟机实例

6.1 创建虚拟网络

6.1.1 创建共享网络

[root@controller ~]# source admin-openrc.sh
[root@controller ~]# neutron net-create public --shared --provider:physical_network physnet1 --provider:network_type flat

6.1.2 创建子网

[root@controller ~]# neutron subnet-create public 192.168.0.0/24 --name public-subunet --alLOCATIOn-pool start=192.168.0.200,end=192.168.0.210\
--dns-nameserver 202.100.192.68 --gateway 192.168.0.253

Created a new subnet:
+-------------------+----------------------------------------------------+
| Field | Value |
+-------------------+----------------------------------------------------+
| alLOCATIOn_pools | {"start": "192.168.0.200","end": "192.168.0.210"} |
| cidr | 192.168.0.0/24 |
| dns_nameservers | 202.100.192.68 |
| enable_dhcp | True |
| gateway_ip | 192.168.0.253 |
| host_routes | |
| id | da75b2db-56f4-45d2-b3f3-2ccf172f8798 |
| ip_version | 4 |
| ipv6_address_mode | |
| ipv6_ra_mode | |
| name | public-subunet |
| network_id | 2e098da8-70f9-40bc-a393-868ed9a446cf |
| subnetpool_id | |
| tenant_id | be420231d13848809da36178cBAC4d22 |
+-------------------+----------------------------------------------------+

6.1.3 查看子网

[root@controller ~]# neutron net-list

+--------------------------------------+--------+-----------------------------------------------------+
| id | name | subnets |
+--------------------------------------+--------+-----------------------------------------------------+
| 2e098da8-70f9-40bc-a393-868ed9a446cf | public | da75b2db-56f4-45d2-b3f3-2ccf172f8798 192.168.0.0/24 |
+--------------------------------------+--------+-----------------------------------------------------+

[root@controller ~]# neutron subnet-list
+--------------------------------------+----------------+----------------+----------------------------------------------------+
| id | name | cidr | alLOCATIOn_pools |
+--------------------------------------+----------------+----------------+----------------------------------------------------+
| da75b2db-56f4-45d2-b3f3-2ccf172f8798 | public-subunet | 192.168.0.0/24 | {"start": "192.168.0.200","end": "192.168.0.210"} |
+--------------------------------------+----------------+----------------+----------------------------------------------------+

6.2 生成密钥对

6.2.1 使用admin权限

[root@controller ~]# source admin-openrc.sh

6.2.2 生成密钥对

如果已有密钥，则可以不使用 ssh-keygen 重新生成

[root@controller ~]# ssh-keygen -q -N ""
Enter file in which to save the key (/root/.ssh/id_rsa):
[root@controller ~]# nova keypair-add --pub-key ~/.ssh/id_rsa.pub mykey

6.2.3 查看有哪些可用的密钥

6.3 添加安全规则组

默认情况下，安全规则组 default 会应用到所有的实例当中，它会通过防火墙规则来拒绝所有的远程访问。一般来说，我们通常会放行 ICMP 和 SSH 这两种协议的访问。

[root@controller ~]# nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0
[root@controller ~]# nova secgroup-add-rule default tcp 22 22 0.0.0.0/0

七、控制面板（horizon）

7.1 通过虚拟控制台访问实例基于WEB的管理界面一般安装在 controller 节点上。

[root@controller ~]# yum install openstack-dashboard

7.2 配置dashboard参数

[root@controller ~]# vi /etc/openstack-dashboard/local_setTings

OPENSTACK_HOST = "controller"
ALLOWED_HOSTS = ['*',]
CACHES = {
'default': {
'BACKEND': 'django.core.cache.BACkends.memcached.MemcachedCache',
'LOCATION': '127.0.0.1:11211',
}
}
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
OPENSTACK_API_VERSIONS = {
"identity": 3,
"volume": 2,
}
OPENSTACK_NEUTRON_NETWORK = {
...
'enable_router': false,
'enable_quotas': false,
'enable_di@R_616_10495@buted_router': false,
'enable_ha_router': false,
'enable_lb': false,
'enable_firewall': false,
'enable_vpn': false,
'enable_fip_topology_check': false,
}
#时区设置
TIME_ZONE = "Asia/Shanghai"

#创建虚拟机的时候可以修改密码

OPENSTACK_HYPERVISOR_FEATURES = {
'can_set_mount_point': True,
'can_set_password': True,
'requires_keypair': True,
}

7.3 配置开机启动

[root@controller ~]# systemctl enable httpd.service memcached.service
[root@controller ~]# systemctl restart httpd.service memcached.service

7.4 验证安装是否成功

用浏览器打开：http://192.168.0.231/dashboard

域： default
用户： admin 或 demo 密码为自己创建的密码。

7.5 创建虚拟机实例

7.5.1 创建虚拟机实例过程

说明：官方下载的centos7镜像。不知道密码，需要在创建指定一个密码，默认是centos7 可以SSH登录，但是无法默认让root直接ssh登录，需要在创建虚拟机实例时取消root ssh登录。

如果你希望SSH可以使用密码登录。那么你需要用脚本修改ssh root登录设置，不推荐用那个cirros镜像测试。
#!/bin/sh
sed -i 's/passwordAuthentication no/passwordAuthentication yes/g' /etc/ssh/sshd_config
systemctl restart sshd

7.5.2 虚拟机控制台登录

测试SSH登录

7.5.1 小节

通过安装openstack的过程理解openstack各个组件的工作原理以及具体实现方式，@L_489_281@个基础上可以扩展其它内容。

大佬总结

以上是大佬教程为你收集整理的Centos7.3 Openstack-liberty安装部署记录全部内容，希望文章能够帮你解决Centos7.3 Openstack-liberty安装部署记录所遇到的程序开发问题。

如果觉得大佬教程网站内容还不错，欢迎将大佬教程推荐给程序员好友。

本图文内容来源于网友网络收集整理提供，作为学习参考使用，版权属于原作者。
如您有任何意见或建议可联系处理。小编QQ：384754419，请注明来意。

标签：3 7 centos centos7.3 liberty openstack 安装记录部署

上一篇: 基于CentOS7.3构建企业级Vsftpd文... 下一篇:CentOS 7.2 bond实现网卡聚合链路...

猜你在找的CentOS相关文章

Linux（CentOS 5.5）安装Apache 2.2.3 2022-05-09
ContOS7切换国内源 2019-10-31
在阿里云Centos下LNMP环境搭建 2019-10-31
CentOS7.x的DNS服务的基础配置 2019-10-31
安装VMwareTools时出错：What is the location of the directory of C header files t... 2019-10-31
CentOS的启动方式和语言设置 2019-10-31
centos，fedora 如何开机自动联网？？？ 2019-10-31
CentOS 5.5使用yum安装LAMP环境（sohu源） 2019-10-31
CentOS 6.0安装图解教程 2019-10-31
Apache与PHP的整合(编译安装)，不涉及MySQL数据库的整合 2019-10-31

Centos7.3 Openstack-liberty安装部署记录

概述

一、环境

1.1 安全

1.2 主机网络

1. 控制节点/计算节点 关闭防火墙和SELinux

2. 配置hosts文件

1.3 设置时间同步

1) 控制节点

2）计算节点

1.4 安装openstack软件包

1. 准备OpenStack安装包 yum源

2. 安装openstack

1) 控制节点安装 openstack

2）计算节点安装 openstack

1.5 安装sql数据库

1. 安装数据库

2. 创建密码: openstack

3. 调整数据库最大连接数：

4. 创建数据库

1.6 消息队列 rabbitmq支持集群。

1）在控制节点上安装与启动rabbitmq,监听5672端口

2) 添加 openstack 用户:

3) 授权用户 openstack 读、写、配置的权限

4) 查看安装插件

5) 启用管理插件

6）重启

7) 登录以及添加openstack为administrator

二、 配置keystone

2.1 安装keystone软件包

2.2 配置 keystone

2.3 初始化数据库

1）初始化数据库

2）验证数据库

3）启动memcache

2.4 配置http服务器

1) 修改服务器名

2) 添加 keystone 的服务

3) 启动http服务器

2.5 注册服务实体及API

2.5.1 配置环境变量

2.5.2 keystone服务注册

2.6 创建项目、用户及规则

2.6.1 创建 admin 项目\admin 用户\ admin 角色并把 admin 项目、admin 角色、admin 用户关联起来

2.6.2 创建 demo 项目\创建 demo 用户\创建 user 角色\ 并把 demo 项目、user 角色、demo 用户关联起来

2.6.3 创建 service 项目

2.7 密码验证keystone正确性

2.8 使用环境变量脚本

1.创建 admin 用户的环境脚本

2.创建 demo 用户的环境脚本

三、安装镜像服务(glancE)

3.1 环境准备

使用 admin 权限

1) 创建 glance 用户\把 service 项目、admin角色、glance 用户关联起来

2) 注册名为image的服务

3) 注册API端点

3.2 安装与配置

3.2.1 安装程序包

3.2.2 修改glance配置

1. 配置镜像的创建删除回收服务

2. 配置云系统的镜像注册服务

3.2.3 导入数据

1）初始化数据库

2）验证数据库

3.3 启动openstack-glance服务

3.4 glance安装验证

1. 修改环境变量脚本

2. 上传镜像给 glance

3. 查看已上传的镜像

四、安装计算服务(nova)

4.1 安装及配置控制节点(controller)

4.2 控制节点创建 nova 用户才及注册

1. 使用 admin 用户权限

2. 创建 nova 用户\角色\服务

3. 注册API

4.3 控制节点安装以及配置组件

4.3.1 安装组件

4.3.2 修改nova配置

4.3.3 数据导入

4.3.4 完成安装

1. 控制节点/计算节点关闭防火墙和SELinux

1.5 安装sql 数据库

二、配置keystone

4.4.3 完成安装启动服务