Ubuntu 安装openstack （stein）,超详细

最新推荐文章于 2024-03-04 16:07:14 发布
最新推荐文章于 2024-03-04 16:07:14 发布
阅读量2.6k 收藏 23
点赞数 1
分类专栏： linux 文章标签： openstack linux docker 数据库 ubuntu
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/bennett_doris/article/details/108821536
版权

Ubuntu 安装openstack （stein）

host解析和IP设置

# 修改主机名
hostnamectl set-hostname controller
# host 解析
vi /etc/hosts
# 添加内容
10.0.0.11 controller
10.0.0.22 compute01

NTP网络时间协议

# 安装chrony软件包
apt install chrony
vi /etc/chorny/chront.conf
# 添加内容（控制节点）
server ntp1.aliyun.com iburst
allow 10.0.0.0/24
# 添加内容（计算节点）
server 10.0.0.11 iburst

# 重启服务
service chrony restart
# 验证
netstat -lntup	# 查看是否开启了123和323两个端口,计算节点只有323一个端口

openstack软件包

# 下载openstack服务基础软件包
add-apt-repository cloud-archive:stein
apt update && apt dist-upgrade
# 安装openstack客户端
apt install python3-openstackclient

SQL数据库安装

# 安装数据库服务以及python连接数据库的模块
apt install mariadb-server python-pymysql
# 创建并编辑
vi /etc/mysql/mariadb.conf.d/99-openstack.cnf
# 添加内容
[mysqld]
bind-address = 10.0.0.11

default-storage-engine = innodb
innodb_file_per_table = on
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8

# 重启服务
service mysql restart
# 安全初始化
mysql_secure_installation

消息队列（RabbitMQ）

# 安装消息队列服务
apt install rabbitmq-server
# 添加用户
rabbitmqctl add_user openstack RABBIT_PASS
# 允许用户配置，写入和读取访问权限 openstack
rabbitmqctl set_permissions openstack ".*" ".*" ".*"

缓存（memcached）

# 安装缓存token服务
apt install memcached python-memcache
vi /etc/memcached.conf
# 修改内容
-l 10.0.0.11

# 重启服务
service memcached restart

keystone 安装

# 创库建表 授权
mysql -u root -p
CREATE DATABASE keystone;
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \
IDENTIFIED BY 'KEYSTONE_DBPASS';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \
IDENTIFIED BY 'KEYSTONE_DBPASS';

# 安装keystone 软件包
apt install keystone
# 将配置文件的注释删除方便修改
cp /etc/keystone/keystone.conf /etc/keystone/keystone.conf.bak
grep -Ev '^$|#' /etc/keystone/keystone.conf.bak > /etc/keystone/keystone.conf
vi /etc/keystone/keystone.conf
# 配置以下内容
[database]
# ...
connection = mysql+pymysql://keystone:KEYSTONE_DBPASS@controller/keystone
[token]
# ...
provider = fernet

# 创建keystone数据库
su -s /bin/sh -c "keystone-manage db_sync" keystone
# 初始化Fernet密钥存储库
keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
keystone-manage credential_setup --keystone-user keystone --keystone-group keystone
# 引导身份认证
keystone-manage bootstrap --bootstrap-password ADMIN_PASS \
  --bootstrap-admin-url http://controller:5000/v3/ \
  --bootstrap-internal-url http://controller:5000/v3/ \
  --bootstrap-public-url http://controller:5000/v3/ \
  --bootstrap-region-id RegionOne

配置Apache HTTP服务器

vi /etc/apache2/apache2.conf
# 添加内容
ServerName controller

# 启动服务
service apache2 restart
# 配置管理账户
export OS_USERNAME=admin
export OS_PASSWORD=ADMIN_PASS
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3

创建域、项目、用户和角色

# 创建新域
openstack domain create --description "An Example Domain" example
# 创建service 项目
openstack project create --domain default --description "Service Project" service
# 创建myproject项目和myuser 用户
openstack project create --domain default --description "Demo Project" myproject
openstack user create --domain default --password-prompt myuser
# 创建myrole角色
openstack role create myrole
# 将myrole角色添加到myproject项目和myuser用户
openstack role add --project myproject --user myuser myrole

验证

# 取消设置临时 变量OS_AUTH_URL和OS_PASSWORD环境变量
unset OS_AUTH_URL OS_PASSWORD
# 以admin用户身份请求身份验证令牌
openstack --os-auth-url http://controller:5000/v3 \
  --os-project-domain-name Default --os-user-domain-name Default \
  --os-project-name admin --os-username admin token issue
# myuser与前面创建的用户一样，请求身份验证令牌
openstack --os-auth-url http://controller:5000/v3 \
  --os-project-domain-name Default --os-user-domain-name Default \
  --os-project-name myproject --os-username myuser token issue

创建openstack客户端环境脚本

# 创建和编辑admin-openrc文件，并添加以下内容
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=ADMIN_PASS
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

# 创建和编辑demo-openrc文件并添加以下内容
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=myproject
export OS_USERNAME=myuser
export OS_PASSWORD=MYUSER_PASS
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

# 加载admin-openrc文件以使用身份服务的位置以及admin项目和用户凭据填充环境变量
. admin-openrc
# 请求身份验证令牌
openstack token issue

配置 glance 服务

# 创库建表授权
mysql -u root -p
CREATE DATABASE glance;
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' \
  IDENTIFIED BY 'GLANCE_DBPASS';
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' \
  IDENTIFIED BY 'GLANCE_DBPASS';

# 生成环境变量
. admin-openrc

# 创建glance用户
openstack user create --domain default --password-prompt glance
# 将admin角色添加到glance用户和 service项目
openstack role add --project service --user glance admin
# 创建glance服务实体
openstack service create --name glance --description "OpenStack Image" image
# 创建图像服务API端点
openstack endpoint create --region RegionOne image public http://controller:9292
openstack endpoint create --region RegionOne image internal http://controller:9292
openstack endpoint create --region RegionOne image admin http://controller:9292

# 安装glance
apt install glance
# 编辑/etc/glance/glance-api.conf
cp /etc/glance/glance-api.conf /etc/glance/glance-api.conf.bak
grep -Ev '^$|#' /etc/glance/glance-api.conf.bak > /etc/glance/glance-api.conf
vi /etc/glance/glance-api.conf
# 添加以下内容
[database]
# ...
connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance

# 配置身份服务访问
[keystone_authtoken]
# ...
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = GLANCE_PASS

[paste_deploy]
# ...
flavor = keystone

# 配置本地文件系统存储和图像文件的位置
[glance_store]
stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/


# 编辑/etc/glance/glance-registry.conf
cp /etc/glance/glance-registry.conf /etc/glance/glance-registry.conf.bak
grep -Ev '^$|#' /etc/glance/glance-registry.conf.bak > /etc/glance/glance-registry.conf
vi /etc/glance/glance-registry.conf

# 添加以下内容
[database]
# ...
connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance

[keystone_authtoken]
# ...
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = GLANCE_PASS

[paste_deploy]
# ...
flavor = keystone

# 同步数据库数据
su -s /bin/sh -c "glance-manage db_sync" glance

# 重启服务
service glance-registry restart		# S之后的版本已经弃用
service glance-api restart

验证

# 使用CirrOS（一个小型Linux映像，可帮助测试OpenStack部署）验证Image Service的运行 

. admin-openrc
# 下载源镜像
wget http://download.cirros-cloud.net/0.4.0/cirros-0.4.0-x86_64-disk.img
# 使用QCOW2磁盘格式，裸 容器格式和公共可见性将图像上传到图像服务
openstack image create "cirros" \
  --file cirros-0.4.0-x86_64-disk.img \
  --disk-format qcow2 --container-format bare \
  --public
# 确认上传图片并验证属性
openstack image list

安装Placement

# 创库建表授权
CREATE DATABASE placement;
GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' \
  IDENTIFIED BY 'PLACEMENT_DBPASS';
GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' \
  IDENTIFIED BY 'PLACEMENT_DBPASS';
# 生成管理员环境
. admin-openrc
# 创建用户
openstack user create --domain default --password-prompt placement
# 将用户添加到项目
openstack role add --project service --user placement admin
# 创建PlacementAPI服务
openstack service create --name placement \
  --description "Placement API" placement
# 创建Placement API服务端点
openstack endpoint create --region RegionOne \
  placement public http://controller:8778
openstack endpoint create --region RegionOne \
  placement internal http://controller:8778
openstack endpoint create --region RegionOne \
  placement admin http://controller:8778
# 安装软件包
apt install placement-api
# 编辑/etc/placement/placement.conf
cp /etc/placement/placement.conf /etc/placement/placement.conf.bak
grep -Ev '^$|#' /etc/placement/placement.conf.bak > /etc/placement/placement.conf
vi /etc/placement/placement.conf
# 添加以下内容
[placement_database]
# ...
connection = mysql+pymysql://placement:PLACEMENT_DBPASS@controller/placement

[api]
# ...
auth_strategy = keystone

[keystone_authtoken]
# ...
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = placement
password = PLACEMENT_PASS

# 同步palcement数据库
su -s /bin/sh -c "placement-manage db sync" placement
# 重启web服务器
service apache2 restart

验证

. admin-openrc
# 执行状态检查
placement-status upgrade check
# 安装osc-placement插件
pip install osc-placement
# 列出可用的资源类和特征
openstack --os-placement-api-version 1.2 resource class list --sort-column name
openstack --os-placement-api-version 1.6 trait list --sort-column name

安装Nova

# 控制节点
# 创库建表授权
CREATE DATABASE nova_api;
CREATE DATABASE nova;
CREATE DATABASE nova_cell0;
GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';
GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';
  
# 管理员环境
. admin-openrc
# 创建nova用户
openstack user create --domain default --password-prompt nova
# admin向nova用户添加角色
openstack role add --project service --user nova admin
# 创建nova服务实体
openstack service create --name nova \
  --description "OpenStack Compute" compute
# 创建Compute API服务端点
openstack endpoint create --region RegionOne \
  compute public http://controller:8774/v2.1
openstack endpoint create --region RegionOne \
  compute internal http://controller:8774/v2.1
openstack endpoint create --region RegionOne \
  compute admin http://controller:8774/v2.1
# 安装软件包
apt install nova-api nova-conductor nova-consoleauth \
  nova-novncproxy nova-scheduler
# 编辑/etc/nova/nova.conf
cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
grep -Ev '^$|#' /etc/nova/nova.conf.bak > /etc/nova/nova.conf
vi /etc/nova/nova.conf
# 添加内容如下
[api_database]
# ...
connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova_api

[database]
# ...
connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova

[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller

[api]
# ...
auth_strategy = keystone

[keystone_authtoken]
# ...
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = NOVA_PASS

[DEFAULT]
# ...
my_ip = 10.0.0.11

[DEFAULT]
# ...
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver

# 配置[neutron]
[neutron]
# ...
url = http://controller:9696
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS
service_metadata_proxy = true
metadata_proxy_shared_secret = METADATA_SECRET

[vnc]
enabled = true
# ...
server_listen = $my_ip
server_proxyclient_address = $my_ip

[glance]
# ...
api_servers = http://controller:9292

[oslo_concurrency]
# ...
lock_path = /var/lib/nova/tmp

[placement]
# ...
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = PLACEMENT_PASS

# 同步nova-api数据库
su -s /bin/sh -c "nova-manage api_db sync" nova
# 同步cell0数据库
su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
# 同步cell1数据库
su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
# 同步nova数据库
su -s /bin/sh -c "nova-manage db sync" nova
# 验证是否正确注册
su -s /bin/sh -c "nova-manage cell_v2 list_cells" nova

# 启动
service nova-api restart
service nova-consoleauth restart
service nova-scheduler restart
service nova-conductor restart
service nova-novncproxy restart

# 计算节点
apt install nova-compute
# 编辑/etc/nova/nova.conf
cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
grep -Ev '^$|#' /etc/nova/nova.conf.bak > /etc/nova/nova.conf
vi /etc/nova/nova.conf
# 添加以下内容
[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller

[api]
# ...
auth_strategy = keystone

[keystone_authtoken]
# ...
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = NOVA_PASS

[DEFAULT]
# ...
my_ip = MANAGEMENT_INTERFACE_IP_ADDRESS

[DEFAULT]
# ...
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver

[vnc]
# ...
enabled = true
server_listen = 0.0.0.0
server_proxyclient_address = $my_ip
novncproxy_base_url = http://controller:6080/vnc_auto.html

[glance]
# ...
api_servers = http://controller:9292

[oslo_concurrency]
# ...
lock_path = /var/lib/nova/tmp

[placement]
# ...
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = PLACEMENT_PASS

# 确定计算节点是否支持虚拟机的硬件加速
egrep -c '(vmx|svm)' /proc/cpuinfo
# 编辑文件中的[libvirt]部分，/etc/nova/nova-compute.conf
[libvirt]
# ...
virt_type = qemu
# 重新启动计算服务
service nova-compute restart

# 将计算节点添加到单元数据库中（控制节点执行）
openstack compute service list --service nova-compute
su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova
# 编辑 nova-manage cell_v2 discover_hosts/etc/nova/nova.conf，设置时间间隔
[scheduler]
discover_hosts_in_cells_interval = 300
# 验证
# 列出服务组件以验证每个进程的成功启动和注册
openstack compute service list
# 列出身份服务中的API端点以验证与身份服务的连接性
openstack catalog list
# 列出图像服务中的图像以验证与图像服务的连接性
openstack image list
# 检查单元格和展示位置API是否正常运行
nova-status upgrade check

安装 neuture

# 创库建表授权
CREATE DATABASE neutron;
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' \
  IDENTIFIED BY 'NEUTRON_DBPASS';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' \
  IDENTIFIED BY 'NEUTRON_DBPASS';
# 管理员环境
. admin-openrc
# 创建neuture用户
openstack user create --domain default --password-prompt neutron
# admin向neutron用户添加角色
openstack role add --project service --user neutron admin
# 创建neutron服务实体
openstack service create --name neutron \
  --description "OpenStack Networking" network
# 创建网络服务API端点
openstack endpoint create --region RegionOne \
  network public http://controller:9696
openstack endpoint create --region RegionOne \
  network internal http://controller:9696
openstack endpoint create --region RegionOne \
  network admin http://controller:9696
  
# 公网配置
apt install neutron-server neutron-plugin-ml2 \
  neutron-linuxbridge-agent neutron-dhcp-agent \
  neutron-metadata-agent
# 编辑/etc/neutron/neutron.conf
cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
grep -Ev '^$|#' /etc/neutron/neutron.conf.bak > /etc/neutron/neutron.conf
vi /etc/neutron/neutron.conf
# 添加以下内容
[database]
# ...
connection = mysql+pymysql://neutron:NEUTRON_DBPASS@controller/neutron

[DEFAULT]
# ...
core_plugin = ml2
service_plugins =

[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller

[DEFAULT]
# ...
auth_strategy = keystone

[keystone_authtoken]
# ...
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS

[DEFAULT]
# ...
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true

[nova]
# ...
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = NOVA_PASS

[oslo_concurrency]
# ...
lock_path = /var/lib/neutron/tmp

# 编辑/etc/neutron/plugins/ml2/ml2_conf.ini
cp /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.bak
grep -Ev '^$|#' /etc/neutron/plugins/ml2/ml2_conf.ini.bak > /etc/neutron/plugins/ml2/ml2_conf.ini
vi /etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
# ...
type_drivers = flat,vlan
[ml2]
# ...
tenant_network_types =
[ml2]
# ...
mechanism_drivers = linuxbridge
[ml2]
# ...
extension_drivers = port_security
[ml2_type_flat]
# ...
flat_networks = provider
[securitygroup]
# ...
enable_ipset = true

# 编辑/etc/neutron/plugins/ml2/linuxbridge_agent.ini
cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]
physical_interface_mappings = provider:PROVIDER_INTERFACE_NAME
[vxlan]
enable_vxlan = false
[securitygroup]:
# ...
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
# 验证
net.bridge.bridge-nf-call-iptables
net.bridge.bridge-nf-call-ip6tables
# 编辑/etc/neutron/dhcp_agent.ini
[DEFAULT]
# ...
interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = true

# 配置元数据代理
# 编辑/etc/neutron/metadata_agent.ini
cp /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini.bak
grep -Ev '^$|#' /etc/neutron/metadata_agent.ini.bak > /etc/neutron/metadata_agent.ini
vi /etc/neutron/metadata_agent.ini

[DEFAULT]
# ...
nova_metadata_host = controller
metadata_proxy_shared_secret = METADATA_SECRET

# 同步数据库
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
  --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

# 重新启动Compute API服务
service nova-api restart

# 重新启动网络服务
service neutron-server restart
service neutron-linuxbridge-agent restart
service neutron-dhcp-agent restart
service neutron-metadata-agent restart


# 计算节点
apt install neutron-linuxbridge-agent
# 编辑/etc/neutron/neutron.conf
cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
grep -Ev '^$|#' /etc/neutron/neutron.conf.bak > /etc/neutron/neutron.conf
vi /etc/neutron/neutron.conf

[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller
[DEFAULT]
# ...
auth_strategy = keystone

[keystone_authtoken]
# ...
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS

[oslo_concurrency]
# ...
lock_path = /var/lib/neutron/tmp

# 配置网桥代理
cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak > /etc/neutron/plugins/ml2/linuxbridge_agent.ini
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
# 添加内容
[linux_bridge]
physical_interface_mappings = ens33
[vxlan]
enable_vxlan = false
[securitygroup]
# ...
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
# 验证
net.bridge.bridge-nf-call-iptables
net.bridge.bridge-nf-call-ip6tables
# 列出已加载的扩展，以验证该neutron-server过程是否成功启动
openstack extension list --network
# 列出成功启动的代理列表
openstack network agent list

安装UI服务

apt install openstack-dashboard
# 编辑 /etc/openstack-dashboard/local_settings.py
OPENSTACK_HOST = "controller"
ALLOWED_HOSTS = ['one.example.com', 'two.example.com']
SESSION_ENGINE = 'django.contrib.sessions.backends.cache'

CACHES = {
    'default': {
         'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
         'LOCATION': 'controller:11211',
    }
}
OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST
OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
OPENSTACK_API_VERSIONS = {
    "identity": 3,
    "image": 2,
    "volume": 3,
}
OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"
OPENSTACK_NEUTRON_NETWORK = {
    ...
    'enable_router': False,
    'enable_quotas': False,
    'enable_ipv6': False,
    'enable_distributed_router': False,
    'enable_ha_router': False,
    'enable_lb': False,
    'enable_firewall': False,
    'enable_vpn': False,
    'enable_fip_topology_check': False,
}
TIME_ZONE = "Asia/Shanghai"
# 重新加载Web服务器配置
service apache2 reload
# 验证
curl http://controller/horizon

安装 cinder

# 创库建表授权
CREATE DATABASE cinder;
GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' \
  IDENTIFIED BY 'CINDER_DBPASS';
GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' \
  IDENTIFIED BY 'CINDER_DBPASS';
# admin管理员环境
. admin-openrc
# 创建一个cinder用户
openstack user create --domain default --password-prompt cinder
# admin向cinder用户添加角色
openstack role add --project service --user cinder admin
# 创建cinderv2和cinderv3服务实体
openstack service create --name cinderv2 \
  --description "OpenStack Block Storage" volumev2
openstack service create --name cinderv3 \
  --description "OpenStack Block Storage" volumev3
# 创建块存储服务API端点
openstack endpoint create --region RegionOne \
  volumev2 public http://controller:8776/v2/%\(project_id\)s
openstack endpoint create --region RegionOne \
  volumev2 internal http://controller:8776/v2/%\(project_id\)s
openstack endpoint create --region RegionOne \
  volumev2 admin http://controller:8776/v2/%\(project_id\)s
openstack endpoint create --region RegionOne \
  volumev3 public http://controller:8776/v3/%\(project_id\)s
openstack endpoint create --region RegionOne \
  volumev3 internal http://controller:8776/v3/%\(project_id\)s
openstack endpoint create --region RegionOne \
  volumev3 admin http://controller:8776/v3/%\(project_id\)s
# 安装组件
apt install cinder-api cinder-scheduler
# 编辑/etc/cinder/cinder.conf
cp /etc/cinder/cinder.conf /etc/cinder/cinder.conf.bak
grep -Ev '^$|#' /etc/cinder/cinder.conf.bak > /etc/cinder/cinder.conf
vi /etc/cinder/cinder.conf
# 添加内容
[database]
# ...
connection = mysql+pymysql://cinder:CINDER_DBPASS@controller/cinder
[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller
[DEFAULT]
# ...
auth_strategy = keystone
[keystone_authtoken]
# ...
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = cinder
password = CINDER_PASS
[DEFAULT]
# ...
my_ip = 10.0.0.11
[oslo_concurrency]
# ...
lock_path = /var/lib/cinder/tmp
# 同步数据库
su -s /bin/sh -c "cinder-manage db sync" cinder
# 配置计算服务以使用块存储
# 编辑/etc/nova/nova.conf
[cinder]
os_region_name = RegionOne
# 重启服务
service nova-api restart
service cinder-scheduler restart
service apache2 restart

安装和配置存储节点

apt install lvm2 thin-provisioning-tools
# 添加两块硬盘
# 扫描
echo '---' > /sys/class/scsi_host/host0/scan
# 创建LVM物理卷/dev/sdb
pvcreate /dev/sdb
pvcreate /dev/sdc
# 创建LVM卷组cinder-volumes
vgcreate cinder-volumes /dev/sdb
vgcreate cinder-ssd /dev/sdc
# 编辑 /etc/lvm/lvm.conf
cp /etc/lvm/lvm.conf /etc/lvm/lvm.conf.bak
grep -Ev '^$|#' /etc/lvm/lvm.conf.bak > /etc/lvm/lvm.conf
vi /etc/lvm/lvm.conf
devices {
...
filter = [ "a/sdb/", "r/.*/"]
# 如果存储节点在操作系统磁盘上使用LVM，则还必须将关联的设备添加到过滤器中。例如，如果/dev/sda设备包含操作系统
filter = [ "a/sda/", "a/sdb/", "r/.*/"]
# 如果您的计算节点在操作系统磁盘上使用LVM，则还必须/etc/lvm/lvm.conf在这些节点上的文件中修改过滤器， 使其仅包括操作系统磁盘。例如，如果/dev/sda 设备包含操作系统
filter = [ "a/sda/", "r/.*/"]
# 安装和配置的部件
apt install cinder-volume
# 编辑/etc/cinder/cinder.conf
[database]
# ...
connection = mysql+pymysql://cinder:CINDER_DBPASS@controller/cinder
[DEFAULT]
# ...
transport_url = rabbit://openstack:RABBIT_PASS@controller
[DEFAULT]
# ...
auth_strategy = keystone

[keystone_authtoken]
# ...
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = cinder
password = CINDER_PASS
[DEFAULT]
# ...
my_ip = 10.0.0.22
[lvm]
# ...
volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
volume_group = cinder-volumes
target_protocol = iscsi
target_helper = tgtadm
[DEFAULT]
# ...
enabled_backends = lvm
[DEFAULT]
# ...
glance_api_servers = http://controller:9292
[oslo_concurrency]
# ...
lock_path = /var/lib/cinder/tmp
# 重新启动块存储卷服务:w
service tgt restart
service cinder-volume restart
# 验证
openstack volume service list
Bennett_Doris
关注
  • 1
    点赞
  • 踩
  • 23
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
专栏目录
Ubuntu 18.04上单机安装OpenStack Stein（非脚本方式）：前置准备
weixin_45227872的博客
09-08 1150
Ubuntu 18.04上单节点安装OpenStack Queens（非脚本方式）：前置准备硬盘分区 硬盘分区 我在电脑里装了双系统，安装Ubuntu系统时在硬盘上划出四个分区sda9~sda12： sda9：系统分区 sda10：swap分区 sda11：未使用，将用于Cinder块存储服务 sda12：未使用，将用于Swift对象存储服务 ...
第三章 预配置
weixin_30625691的博客
08-23 153
　　以下配置在所有节点进行，为后面的openstack安装做好准备。 1、配置主机网络 因为我个人使用的是桌面版，系统存在两套网络管理服务，为了避免冲突，在此禁用NetworkManager服务，保留systemd-networkd服务。 systemctl stop NetworkManager # 关闭桌面版的网络管理服务 systemctl disable Netw...
OpenStack搭建部署
最新发布
2301_76635480的博客
03-04 774
键盘输入“win + R”呼出运行并输入cmd回车，输入命令ssh 用户名@ubuntu虚拟机的ip地址，之后输入yes和密码，记得sudo -i进入编辑模式。这一步需要先输入键盘“⬆”，修改镜像地址为https://repo.huaweicloud.com/ubuntu，修改后输入键盘“⬇”选择Done回车。输入命令 mv /home/xiapeng/stack3_without_data.tar.gz /opt/将上传的压缩包复制到/opt目录下。输入键盘“⬇”选择Done回车。
【OpenStack】在ubuntu20.04上部署openstack（Ussuri版）
God_WZH的博客
06-24 5824
【OpenStack】在ubuntu20.04上部署openstack（Ussuri版）
Ubuntu20.04 搭建W版本OpenStack平台
qq_45843048的博客
04-03 1753
将节点的主机名设置为controller、compute.controller节点配置rabbitmq消息队列。controller节点完成neutron服务搭建。1、OpenStack 服务的所有节点上完成。controller完成Nova服务搭建。compute节点搭建Neutron服务。2、controller节点配置数据库。compute节点完成Nova服务搭建。点击Launch Instance。7、Neutron网络服务搭建见。controller节点。Dashboard搭建。
一文通关物理机Ubuntu22.04融合部署OpenStack（适用虚拟机）
qq_72569959的博客
11-30 1879
因为博主笔记本是amd的，就最近搞了个小主机，就想装个云平台玩玩，搞了三四天才正儿八经弄完，摸了一大堆错误出来，在文章前面我会将这些需要注意的点列举出来。
超详细ubuntu20安装搭建openstack
热门推荐
qq_53348314的博客
02-19 1万+
我做的大创项目是基于openstack的，找了好多方法，参考了许多资料，最后总结出来一份成功率比较高的安装方法。
基于ubuntu22.04手动安装openstack——2023.2版本（最新版）的问题汇总
m0_57776598的博客
11-11 1584
基于ubuntu22.04搭建openstack——2023.2版本（最新版）问题总结
ubuntu安装openstack需要的所有资源
02-26
ubuntu安装openstack需要的所有资源 包直接解压到根目录/ 进入/opt/devstack 执行./install.sh 等待安装完成
openstack在ubuntu16.04安装最详细教程
06-07
openstack在ubuntu16.04安装最详细教程，配置了Openvswitch作为新的provider。
Ubuntu 14.04 下安装Openstack kilo 官方手册
07-06
Ubuntu下14.04官方安装手册，值得拥有。
使用openshit在ubuntu14上一键部署openstack
09-29
使用openshit在ubuntu14上一键部署openstack
详解Openstack使用ubuntu镜像启动虚拟机实例
09-30
主要介绍了详解Openstack使用ubuntu镜像启动虚拟机实例，具有一定的参考价值，感兴趣的小伙伴们可以参考一下。
CentOS 一键安装Openstack详细介绍
09-30
主要介绍了CentOS 一键安装Openstack详细介绍的相关资料,需要的朋友可以参考下
OpenStack怎样安装详细解答
10-18
OpenStack怎样安装详细解答
Ubuntu 20.04 手动安装OpenStack
哈哈虎的博客
11-19 1608
Ubuntu 20.04 手动安装OpenStack， 来回失败的尝试，死活 ping 不通 route 的地址 （203.0.113.XX） 惯性的以为 Networking 部分（neutron）配置不对，于是在 neutron 设置 OVN 这里打转转 无奈又无聊的时候，翻看文档，直到看到原文 Provider on 203.0.113.0/24 with gateway 203.0.113.1 This network requires a gateway to provide Internet a
Ubuntu22 使用devstack一键部署OpenStack
顺其自然~专栏
11-03 335
这里vim没有安装（使用固定ip没有联网），vi命令有问题，所以是通过添加文件写权限，用编辑器完成的编辑，在ubuntu中gateway4已经弃用，使用routes的方式配置网关。（主要是因为上次安装稀里糊涂找的教程，后来有问题了哈哈，这次仔细看了油管教程还有官网教程，记录一下后面要是出问题了方便重装哈哈）输入/PermitRootLogin进行匹配查找，回车结束查找，再按i进行编辑（当然也可以自己找）解决：apt-get install openssh-server。2、设置stack用户。
Ubuntu 20.04集群手动安装OpenStack Yoga
RBK的博客
04-28 3505
文章目录基础基础中的基础基础OpenStack 基础 基础中的基础 我这里用的是Ubuntu 20.04，开局白板啥都没有。 好像已经使用netplan和NetworkManager管理网络，但是因为centos不用NM，而且为了方便，我这里使用network管理网络。 首先需要安装几个软件，分别是networking服务、网桥工具以及网络工具（比如ifconfig）。 只有有了网桥工具才能正常创建网桥，不然会报错 apt install ifupdown bridge-utils net-tools --
ubuntu22.04按组件安装openstack yoga版
w975121565的博客
10-22 2613
ubuntu22.04按组件安装openstack yoga版
ubuntu 安装 openstack
09-20
要在Ubuntu上安装OpenStack，你需要按照以下步骤操作： 1. 首先，将OpenStack的安装包解压到根目录(/)。你可以直接将包解压到根目录，或者进入/opt/devstack目录，执行./install.sh来完成安装。请耐心等待安装过程完成。 2. 在安装之前，请确保已经在Ubuntu上安装了VMware和ubuntu20.04.3。 3. 安装所需的Python包。你可以使用以下命令来安装必要的包： ``` sudo apt-get install bridge-utils git python3-pip -y ``` 以上是在Ubuntu上安装OpenStack的一般步骤。请注意，这只是一个简要概述，具体的安装过程可能因你的环境和需求而有所不同。建议你参考更详细的文档和指南来进行安装。

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值