美文网首页
奥特虾的课堂笔记之《OpenStack》

奥特虾的课堂笔记之《OpenStack》

作者: 奥特虾 | 来源:发表于2018-03-21 11:28 被阅读0次
    Openstack

    2018-03-20

    什么是OpenStack?

    OpenStack是一个由NASA（美国国家航空航天局）和Rackspace合作研发并发起的，以Apache许可证授权的自由软件和开放源代码的云计算管理平台项目

    OpenStack的基本组成

    OpenStack的核心项目

    • Nova ——管理云主机
    • Neutron ——管理云主机的网络（SDN,Software Defined Network）
    • Cinder ——管理块存储（云硬盘）
    • Swift ——对象存储
    • Glance ——管理镜像与快照
    • Keystone ——用户认证与租户管理、服务目录

    2018-03-21

    实验环境搭建

    1.按照思维导图所示，部署相应虚拟机并配置
    虚拟机部署流程
    2.在Controller&Compute节点安装OpenStack发行版
    yum upgrade
yum -y install centos-release-openstack-pike
yum -y install python-openstackclient
yum -y install openstack-selinux
    3.Controller节点安装并配置MariaDB
    yum -y install mariadb-server
yum -y install mariadb
yum -y install python2-PyMySQL

    配置MariaDB

    vim /etc/my.cnf.d/openstack.cnf

    写入以下配置

    [mysqld]
bind-address = 127.0.0.1    #controller节点
default-storage-engine = innodb
innodb_file_per_table
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8

    启动MariaDB服务并设置为开机自启

    systemctl start mariadb
mysql_secure_installation    #安全相关配置
systemctl enable mariadb
    4.Controller节点安装并配置消息队列
    yum -y install rabbitmq-server

    启动消息队列服务并将其配置为开机自启

    systemctl enable rabbitmq-server
systemctl start rabbitmq-server

    添加openstack用户、设置密码，并赋予相关权限

    rabbitmqctl add_user openstack PASSWORD
rabbitmqctl set_permissions openstack ".*" ".*" ".*"
    5.Controller节点安装并配置缓存服务
    yum -y install memcached
yum -y install python-memcached

    修改memcached配置文件

    vi /etc/sysconfig/memcached
修改最后一行为
OPTIONS="-l 127.0.0.1,::1,controller40"    #根据实际情况配置，controller40为我的主机名

    启动缓存服务并设置为开机自启

    systemctl start memcached
systemctl enable memcached
    6.Controller节点安装并配置键值存储服务
    yum -y install etcd

    修改etcd配置文件

    vi /etc/etcd/etcd.conf

    清空并写入以下内容

    ETCD_LISTEN_PEER_URLS="http://192.168.147.140:2380"
ETCD_LISTEN_CLIENT_URLS="http://192.168.147.140:2379"
ETCD_NAME="controller40"
ETCD_INITIAL_ADVERTISE_PEER_URLS="http://192.168.147.140:2380"
ETCD_ADVERTISE_CLIENT_URLS="http://192.168.147.140:2379"
ETCD_INITIAL_CLUSTER="controller40=http://192.168.147.140:2380"
ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-40"

    启动键值存储服务并将其配置为开机自启

    systemctl enable etcd
systemctl start etcd

    安装keystone认证服务

    1.创建keystone数据库

    MariaDB [(none)]> create database keystone;

    2.对keystone数据库授权

    MariaDB [keystone]>GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost'  IDENTIFIED BY 'your passwd';
MariaDB [keystone]>GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%'  IDENTIFIED BY 'your passwd';

    3.安装keystone

    yum -y install openstack-keystone
yum -y install httpd
yum -y install mod_wsgi

    4.配置数据库

    vi /etc/keystone/keystone.conf

connection = mysql+pymysql://keystone:yourpassword@yourhostname/keystone
provider = fernet

    5.初始化身份认证数据库

    su -s /bin/sh -c "keystone-manage db_sync" keystone 
#初始化完成后进入数据库查看keystone内是否生成数据表

    6.初始化fernet

    keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone

    7.创建第一个管理员账户

    keystone-manage bootstrap --bootstrap-password fcc21042 --bootstrap-admin-url http://controller40:35357/v3/ --bootstrap-internal-url http://controller40:5000/v3 --bootstrap-public-url http://controller40:5000/v3/ --bootstrap-region-id regionone

    8.配置Apache选项

    vi /etc/httpd/conf/httpd.conf
ServerName controller40

    9.将WSGI配置文件链接到Apache,以保证wsgi能被Apache正常启动

    ln -s /usr/share/keystone/wsgi-keystone.conf  /etc/httpd/conf.d/

    10.开启Apache服务并设置为开机自启

    systemctl enable httpd
systemctl start httpd

    2018-03-22

    创建service租户

    1.新建脚本bashrc并执行，将相关用户信息创建环境变量

    export OS_USERNAME=admin
export OS_PASSWORD=fcc21042
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_DOMAIN_NAME=default
export OS_AUTH_URL=http://controller40:35357/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

    2.创建租户

    openstack project create --domain default --description "Server Project" service

    执行后出现报错Missing value auth-url required for auth plugin password
    解决方案：手动执行以下命令

    export OS_PROJECT_DOMAIN_NAME=Default && export OS_USER_DOMAIN_NAME=Default && export OS_PROJECT_NAME=admin && export OS_USERNAME=admin && export OS_PASSWORD=fcc21042 && export OS_AUTH_URL=http://controller40:35357/v3/ && export OS_IDENTITY_API_VERSION=3 && export OS_IMAGE_API_VERSION=2

    3.创建demo project

    openstack project create --domain default   --description "Demo Project" demo

    4.创建角色user

    openstack role create user

    5.创建用户demo

    openstack user create --domain default  --password-prompt demo

    6.将用户demo加入到demo租户中，角色是user

    openstack role add --project demo --user demo user

    7.新建脚本demorc并执行

    export OS_USERNAME=demo
export OS_PASSWORD=123456
export OS_PROJECT_NAME=demo
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_DOMAIN_NAME=default
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

    8.向keystone申请一个令牌

    openstack token issue

    9.查看demo用户的租户

    openstack project list

    10.查看所有租户列表

    source adminrc
openstack project list

    source adminrc或source demorc本质上为修改系统环境变量，可以理解为是一个切换身份（admin/demo）的过程

    Glance镜像服务

    1.创建glance数据库，并赋予相关权限

    MariaDB [(none)]> CREATE DATABASE glance;
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'GLANCE_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%'IDENTIFIED BY 'GLANCE_DBPASS';

    2.切换系统环境变量为admin

    source adminrc

    3.创建glance用户并添加进project

    openstack user create --domain default --password-prompt glance
openstack role add --project service --user glance admin

    4.创建镜像实例

    openstack service create --name glance --description "OpenStack Image" image

    5.创建镜像服务API端口

    openstack endpoint create --region RegionOne image public http://controller:9292
openstack endpoint create --region RegionOne image internal http://controller:9292
openstack endpoint create --region RegionOne image admin http://controller:9292

    6.安装Glance镜像服务

    yum install openstack-glance

    7.修改/etc/glance/glance-api.conf

    [database]
# ...
connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance

[keystone_authtoken]
# ...
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = GLANCE_PASS

[paste_deploy]
# ...
flavor = keystone

[glance_store]
# ...
stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/

    8.修改/etc/glance/glance-registry.conf

    [database]
# ...
connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance

[keystone_authtoken]
# ...
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = GLANCE_PASS

[paste_deploy]
# ...
flavor = keystone

    9.填充镜像服务数据库

    su -s /bin/sh -c "glance-manage db_sync" glance

    10.启动镜像服务并设置为开机自启动

    systemctl enable openstack-glance-api.service openstack-glance-registry.service
systemctl start openstack-glance-api.service openstack-glance-registry.service
    验证镜像服务是否正常启动

    1.切换身份为admin

    source adminrc

    2.下载测试镜像

    wget http://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-disk.img

    3.上传镜像

    openstack image create "cirros" \
  --file cirros-0.3.5-x86_64-disk.img \
  --disk-format qcow2 --container-format bare \
  --public

    然后，就开始报HTTPERROR 500的错误了，这玩意折腾了我好几天一直没有办法解决，如果你也遇到这个问题并且解决的话，麻烦在评论区分享一下你的解决方案，万分感谢

    NOVA的架构与部署（控制节点）

    NOVA的架构

    NOVA
    橙色框中的组件是运行在计算节点Compute上的

    NOVA的部署

    1.创建数据库及用户

    MariaDB [(none)]> CREATE DATABASE nova_api;
MariaDB [(none)]> CREATE DATABASE nova;
MariaDB [(none)]> CREATE DATABASE nova_cell0;

    2.数据库给予相关授权

    MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';

    3.在keystone中注册用户、服务、端点

    source adminrc
openstack user create --domain default --password-prompt nova
openstack role add --project service --user nova admin
openstack service create --name nova --description "OpenStack Compute" compute
openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1
openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1
openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1
openstack user create --domain default --password-prompt placement
openstack role add --project service --user placement admin
openstack service create --name placement --description "Placement API" placement
openstack endpoint create --region RegionOne placement public http://controller:8778
openstack endpoint create --region RegionOne placement internal http://controller:8778
openstack endpoint create --region RegionOne placement admin http://controller:8778

    4.安装NOVA相关软件包

    yum install openstack-nova-api openstack-nova-conductor \
  openstack-nova-console openstack-nova-novncproxy \
  openstack-nova-scheduler openstack-nova-placement-api

    5.修改/etc/nova/nova.conf配置文件
    修改配置文件请参考官方文档
    6.初始化数据库

    su -s /bin/sh -c "nova-manage api_db sync" nova
su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
su -s /bin/sh -c "nova-manage db sync" nova

    7.设置服务开机启动、运行服务

    systemctl enable openstack-nova-api.service \
  openstack-nova-consoleauth.service openstack-nova-scheduler.service \
  openstack-nova-conductor.service openstack-nova-novncproxy.service
systemctl start openstack-nova-api.service \
  openstack-nova-consoleauth.service openstack-nova-scheduler.service \
  openstack-nova-conductor.service openstack-nova-novncproxy.service

    NOVA的架构与部署（计算节点）

    1.安装NOVA相关软件包

    yum install openstack-nova-compute

    2.修改/etc/nova/nova.conf配置文件
    修改配置文件请参考官方文档
    3.确认硬件虚拟化支持，修改virt_type

    [libvirt]
# ...
virt_type = qemu

    4.设置服务开机启动、运行服务

    systemctl enable libvirtd.service openstack-nova-compute.service
systemctl start libvirtd.service openstack-nova-compute.service

    5.将计算节点加到cell中

    source adminrc
openstack compute service list --service nova-compute
su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova

    至此，本文将不再更新部署OpenStack的相关命令，建议直接参照官方文档操作

    相关文章

      网友评论

          本文标题：奥特虾的课堂笔记之《OpenStack》

          本文链接：https://www.haomeiwen.com/subject/qikwqftx.html

          延伸阅读

          深度阅读

          • 您也可以注册成为美文阅读网的作者，发表您的原创作品、分享您的心情！

          栏目导航

          热点阅读

          关于我们|服务条款|联系我们|奥特虾的课堂笔记之《OpenStack》|投稿指南|网站地图|RSS订阅|排版工具|手机版

          提供经典美文摘抄,优美散文欣赏,现代诗歌精选,短篇小说,心情随笔,表白情书范文,故事会在线阅读欣赏

          Copyright © 2014-2023 Haomeiwen.com All Rights Reserved. 好美文阅读网 版权所有

          备案信息：桂公网安备 45052102000051号 · 桂ICP备13007215号-3

          本站所收录作品、热点评论等信息部分来源互联网，目的只是为了系统归纳学习和传递资讯

          所有作品版权归原创作者所有，与本站立场无关，如不慎侵犯了你的权益，请联系我们告知，我们将做删除处理！