利用openstack建设适合中小型互联网企业的私有云(六)

配置控制节点ssh相互认证，配置rabbitmq高可用：

一、配置控制节点ssh相互认证

控制节点controller1和controller2:

ssh-keygen -t rsa      

控制节点controller1：

scp ~/.ssh/id_rsa.pub controller2:~/.ssh/authorized_keys

控制节点controller2：

scp ~/.ssh/id_rsa.pub controller1:~/.ssh/authorized_keys

控制节点controller1和controller2:

chmod 600 ~/.ssh/authorized_keys

验证：

控制节点controller1：

ssh controller2      #无需输入密码

控制节点controller2：

ssh controller1      #无需输入密码

二、配置rabbitmq高可用

控制节点controller1和controller2:

yum install rabbitmq-server -y
systemctl enable rabbitmq-server.service
systemctl start rabbitmq-server.service
rabbitmqctl add_user openstack RABBIT_PASS
rabbitmqctl set_permissions openstack ".*" ".*" ".*"
rabbitmq-plugins enable rabbitmq_management
systemctl restart rabbitmq-server.service
rabbitmqctl add_user admin admin
rabbitmqctl set_user_tags admin administrator
rabbitmqctl set_permissions -p / admin ".*" ".*" ".*"

控制节点controller1：

scp /var/lib/rabbitmq/.erlang.cookie controller2:/var/lib/rabbitmq/.erlang.cookie

控制节点controller2：

systemctl restart rabbitmq-server.service
rabbitmqctl stop_app
rabbitmqctl join_cluster --ram rabbit@controller1
rabbitmqctl start_app
rabbitmqctl set_policy ha-all '^(?!amq\.).*' '{"ha-mode": "all"}'

验证：

控制节点controller1和controller2:

rabbitmqctl cluster_status