Openstack-newton手动安装配置

Openstack-newon版本安装安装环境Centos7，vmware12.2单节点，单网卡安装准备工作NAT方式下的网络配置：1.找到需要的网络配置参数：打开网络设置具体步骤如下出现虚拟机创建双网卡选取NAT网络模式，详细网络配置见上图外网：内网：下面是本人的网络配置（此虚拟机图片与本人虚拟机不同）[root@localhost ~]# cat /etc/sysconfig/network-scripts/ifcfg-eno16777736 TYPE="Ethernet"BOOTPROTO=staticDEFROUTE="yes"IPV4_FAILURE_FATAL="no"IPV6INIT="yes"IPV6_AUTOCONF="yes"IPV6_DEFROUTE="yes"IPV6_FAILURE_FATAL="no"NAME="eno16777736"UUID="e52041f9-6cce-49f5-9f75-dced407765a4"DEVICE="eno16777736"ONBOOT="yes"IPADDR=192.168.174.222NETMASK=255.255.255.0GATEWAY=192.168.174.2PEERDNS="yes"DNS1=8.8.8.8IPV6_PEERDNS=yesIPV6_PEERROUTES=yes修改主机名：[root@localhost ~]# hostnamectl set-hostname controller--static –transient 修改hosts文件：[root@controller ~]# vi /etc/hosts192.168.174.222 controller安装NTP_SERVER[root@controller ~]# yum install chrony启动ntp：[root@controller ~]# systemctl enable chronyd.service[root@controller ~]# systemctl start chronyd.service检查ntp[root@controller ~]# chronyc sources效果如图：安装rdo源：[root@controller ~]# yum install centos-release-openstack-newton –y[root@controller ~]# yum install https:///repos/rdo-release.rpm -y 进行升级：[root@controller ~]# yum upgrade安装openstack客户端：[root@controller ~]# yum install python-openstackclient –y[root@controller ~]# yum install openstack-selinux -y安装mysql数据库：[root@controller ~]# yum install mariadb mariadb-server python2-PyMySQL –y配置mysql /etc/f.d/f[root@controller ~]# vim /etc/f.d/f[mysqld]bind-address = 0.0.0.0default-storage-engine = innodbinnodb_file_per_tablemax_connections = 4096collation-server = utf8_general_cicharacter-set-server = utf8完成安装：Start the database service and configure it to start when the system boots: [root@controller ~]# systemctl enable mariadb.service[root@controller ~]# systemctl start mariadb.service设置mysql用户root登陆密码：root[root@controller ~]# mysql_secure_installation安装消息队列：Install the package[root@controller ~]# yum install rabbitmq-server –y启动：[root@controller ~]# systemctl enable rabbitmq-server.service[root@controller ~]# systemctl start rabbitmq-server.service创建用户Add the openstack user:[root@controller ~]# rabbitmqctl add_user openstack RABBIT_PASS设置权限Permit configuration, write, and read access for the openstack user[root@controller ~]# rabbitmqctl set_permissions openstack ".*" ".*" ".*"安装memcached[root@controller ~]# yum install memcached python-memcached –y设置开机启动：[root@controller ~]# systemctl enable memcached.service[root@controller ~]# systemctl start memcached.service安装认证服务：keystone1.To create the database, complete the following actions:[root@controller ~]# mysql -u root -prootCreate the keystone database:MariaDB [(none)]> CREATE DATABASE keystone;Grant proper access to the keystone database:MariaDB [(none)]> G RANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \-> IDENTIFIED BY 'KEYSTONE_DBPASS';Query OK, 0 rows affected (0.00 sec)MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \-> IDENTIFIED BY 'KEYSTONE_DBPASS';Query OK, 0 rows affected (0.00 sec)1.Run the following command to install the packages:2．dit the /etc/keystone/keystone.conf file and complete the following actions: In the [database] section, configure database access:Replace KEYSTONE_DBPASS with the password you chose for the database.In the [token] section, configure the Fernet token provider:3.pulate the Identity service database:同步数据库# su -s /bin/sh -c "keystone-manage db_sync" keystone4.nitialize Fernet key repositories:# keystone-manage fernet_setup --keystone-user keystone --keystone-group 5.strap the Identity service:Replace ADMIN_PASS with a suitable password for an administrative user。

Configure the Apache HTTP server1.Edit the /etc/httpd/conf/httpd.conf file and configure the ServerName option toreference the controller node:2.Create a link to the /usr/share/keystone/wsgi-keystone.conf file:3.Start the Apache HTTP service and configure it to start when the system boots:4.Configure the administrative account.Create a domain, projects, users, and roles1.This guide uses a service project that contains a unique user for each service that youadd to your environment. Create the service project--description "Service Project" service2.Regular (non-admin) tasks should use an unprivileged project and user. As anexample, this guide creates the demo project and user.Create the demo project:--description "Demo Project" demoCreate the demo user:--password-prompt demo密码：demoCreate the user role:openstack role create userAdd the user role to the demo project and user:Verify operation1.For security reasons, disable the temporary authentication token mechanism:Edit the /etc/keystone/keystone-paste.ini file and remove admin_token_auth from the [pipeline:public_api],[pipeline:admin_api], and [pipeline:api_v3] sections.2.Unset the temporary OS_AUTH_URL and OS_PASSWORD environment variable:3.As the admin user, request an authentication token:--os-project-name admin --os-username admin token issueCreating the scripts1.Edit the admin-openrc file and add the following content:export OS_IMAGE_API_VERSION=2执行[root@controller ~]# . admin-openrc[root@controller~]# openstack --os-auth-url http://controller:35357/v3 --os-project-domain-name default --os-user-domain-name default --os-project-name admin --os-username admin token issueUsing the scripts1.Load the admin-openrc file to populate environment variables with the location of the Identity service and the admin project and user credentials:2.Request an authentication token:openstack token issueImage service1.To create the database, complete these steps:Use the database access client to connect to the database server as the root user:Create the glance database:Grant proper access to the glance database:3.To create the service credentials, complete these steps:$ openstack user create --domain default --password-prompt glance Add the admin role to the glance user and service project:Create the glance service entity:--description "OpenStack Image" imageCreate the Image service API endpoints:image public http://controller:9292image internal http://controller:9292openstack endpoint create --region RegionOne \image admin http://controller:9292安装glance：1.Edit the /etc/glance/glance-api.conf file and complete the following actions:In the [database] section, configure database access:In the [keystone_authtoken] and [paste_deploy] sections, configure Identity service access:In the [glance_store] section, configure the local file system store and location of image files:2.Edit the /etc/glance/glance-registry.conf file and complete the following actions: In the [database] section, configure database access:In the [keystone_authtoken] and [paste_deploy] sections, configure Identity serviceaccess:3.Populate the Image service database:Finalize installation2.Download the source image:4.format, and public visibility so all projects can access it:5.Confirm upload of the image and validate attributes:安装nova1.To create the databases, complete these steps:Use the database access client to connect to the database server as the root user:Create the nova_api and nova databases:Grant proper access to the databases:2.To create the service credentials, complete these steps:Create the nova user:密码：novaAdd the admin role to the nova user:Create the nova service entity:3.Create the Compute service API endpoints:openstack endpoint create --region RegionOne \ compute internal http://c ontroller:8774/v2.1/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ compute admin http://cont roller:8774/v2.1/%\(tenant_id\)sInstall and configure components1. Install and configure components2.it the /etc/nova/nova.conf file and complete the following actions:In the [DEFAULT] section, enable only the compute and metadata APIs:In the [api_database] and [database] sections, configure database access:In the [DEFAULT] section, configure RabbitMQ message queue access:In the [DEFAULT] and [keystone_authtoken] sections, configure Identity service access:In the [DEFAULT] section, configure the my_ip option to use the management interface IP address of the controller node:In the [DEFAULT] section, enable support for the Networking service:In the [vnc] section, configure the VNC proxy to use the management interface IP address of the controller node:In the [glance] section, configure the location of the Image service API:In the [oslo_concurrency] section, configure the lock path:Populate the Compute databases:Finalize installationInstall and configure a compute node（注：以下文件所需配置的大部分内容已经在上步骤已经完成，只需配置没有配置的即可）2. Edit the /etc/nova/nova.conf file and complete the following actions:In the [DEFAULT] section, enable only the compute and metadata APIs:In the [DEFAULT] section, configure RabbitMQ message queue access:In the [DEFAULT] and [keystone_authtoken] sections, configure Identity service access:In the [DEFAULT] section, configure the my_ip option:In the [DEFAULT] section, enable support for the Networking service:In the [vnc] section, enable and configure remote console access:In the [glance] section, configure the location of the Image service API:In the [oslo_concurrency] section, configure the lock path:Finalize installation1.Determine whether your compute node supports hardware acceleration for virtualmachines:If this command returns a value of one or greater, your compute node supports hardware acceleration which typically requires no additional configuration.If this command returns a value of zero, your compute node does not support hardware acceleration and you must configure libvirt to use QEMU instead of KVM.输出值大于2 libvirt 配置成KVMEdit the [libvirt] section in the /etc/nova/nova.conf file as follows:2.Start the Compute service including its dependencies and configure them to startautomatically when the system boots:3.List service components to verify successful launch and registration of each process:openstack compute service listNetworking servicePrerequisites1.To create the database, complete these steps:Use the database access client to connect to the database server as the root user:Create the neutron database:Grant proper access to the neutron database, replacing NEUTRON_DBPASS with a suitable password:2.To create the service credentials, complete these steps:Create the neutron user:密码：neutronAdd the admin role to the neutron user:Create the neutron service entity:3.Create the Networking service API endpoints:openstack endpoint create --region RegionOne \openstack endpoint create --region RegionOne \Configure the metadata agentNetworking Option 2: Self-service networksConfigure the server component1. Edit the /etc/neutron/neutron.conf file and complete the following actions:In the [database] section, configure database access:In the [DEFAULT] section, enable the Modular Layer 2 (ML2) plug-in, router service, and overlapping IP addresses:In the [DEFAULT] section, configure RabbitMQ message queue access:In the [DEFAULT] and [keystone_authtoken] sections, configure Identity service access:In the [DEFAULT] and [nova] sections, configure Networking to notify Compute of network topology changes:In the [oslo_concurrency] section, configure the lock path:Configure the Modular Layer 2 (ML2) plug-in1.Edit the /etc/neutron/plugins/ml2/ml2_conf.ini file and complete the followingactions:In the [ml2] section, enable flat, VLAN, and VXLAN networks:In the [ml2] section, enable VXLAN self-service networks:In the [ml2] section, enable the Linux bridge and layer-2 population mechanisms:In the [ml2] section, enable the port security extension driver:In the [ml2_type_flat] section, configure the provider virtual network as a flat network:In the [ml2_type_vxlan] section, configure the VXLAN network identifier range for self-service networks:rules:Configure the Linux bridge agentEdit the /etc/neutron/plugins/ml2/linuxbridge_agent.ini file and complete the following actions:In the [linux_bridge] section, map the provider virtual network to the provider physical network interface:In the [vxlan] section, enable VXLAN overlay networks, configure the IP address of the physical network interface that handles overlay networks, and enable layer-2 population:In the [securitygroup] section, enable security groups and configure the LinuxConfigure the layer-3 agentEdit the /etc/neutron/l3_agent.ini file and complete the following actions:In the [DEFAULT] section, configure the Linux bridge interface driver and external network bridge:Configure the DHCP agentEdit the /etc/neutron/dhcp_agent.ini file and complete the following actions:•In the [DEFAULT] section, configure the Linux bridge interface driver, Dnsmasq DHCP driver, and enable isolated metadata so instances on providernetworks can access metadata over the network:Install the componentsConfigure the common component Edit the /etc/neutron/neutron.conf file and complete the following actions:•In the [database] section, comment out any connection options because compute nodes do not directly access the database.•In the [DEFAULT] section, configure RabbitMQ message queue access:In the [DEFAULT] and [keystone_authtoken] sections, configure Identity service access:In the [oslo_concurrency] section, configure the lock path:Configure networking options Configure Compute to use NetworkingEdit the /etc/nova/nova.conf file and complete the following actions: •In the [neutron] section, configure access parameters:Finalize installationRestart the Compute service:Start the Linux bridge agent and configure it to start when the system boots:1. The Networking service initialization scripts expect a symboliclink /etc/neutron/plugin.ini pointing to the ML2 plug-in configurationfile, /etc/neutron/plugins/ml2/ml2_conf.ini. If this symbolic link does not exist, create it using the following command:2. Populate the database:3. Restart the Compute API service:4. Start the Networking services and configure them to start when the system boots.For both networking options:For networking option 2, also enable and start the layer-3 service:验证网络配置：the dashboard on the controller node1. Edit the /etc/openstack-dashboard/local_settings file and complete the following actions:•Configure the dashboard to use OpenStack services onthe controller node:•Allow all hosts to access the dashboard:•Configure the memcached session storage service:•Enable the Identity API version 3:•Enable support for domains:•Configure API versions:•Configure default as the default domain for users that you create via the dashboard:•Configure user as the default role for users that you create via the dashboard:•If you chose networking option 1, disable support for layer-3 networking services:•Optionally, configure the time zone:Finalize installationOK，安装完成可以使用啦刚开始进入的时候先创建网络网络创建完毕后创建云主机类型Ok可以创建虚拟机啦由于做的比较简单当下一步到网络的时候就可以直接点击创建云主机啦OK大功告成。