Ansible部署OpenStack平台

1. 规划节点

Ansible服务的节点规划，见表2。

IP	主机名	节点
172.128.11.33	ansible	Ansible节点
172.128.11.21	controller	Controller控制节点
172.128.11.20	compute	Compute计算节点

表2 规划节点

2. 基础准备

使用三台虚拟机进行实验，虚拟机镜像使用CentOS_7.9镜像，虚拟机类型均为4vcpu、12G内存，40G磁盘+20G磁盘。节点规划表中的IP地址为作者的IP地址，在进行实操的时候，按照自己的环境规划网络与IP地址（虚拟机需要使用两块网卡）。Ansible节点安装好Ansible服务。然后做好Ansible节点对Controller和Compute节点的无秘钥访问操作

需要使用fdisk /dev/vdb命令在第compute节点进行分区，三个大小为6G的分区。

[root@compute ~]# fdisk /dev/vdb
...
[root@compute ~]# lsblk 
NAME   MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
vda    253:0    0  40G  0 disk 
└─vda1 253:1    0  40G  0 part /
vdb    253:16   0  20G  0 disk 
├─vdb1 253:17   0   6G  0 part 
├─vdb2 253:18   0   6G  0 part 
└─vdb3 253:19   0   6G  0 part 
vdc    253:32   0   1M  0 disk

（2）Ansible安装FTP、Ansible服务

在Ansible节点上传所需的软件包，配置本地镜像源，安装Ansible服务。把Ansible节点的防火墙和SELinux关闭。

[root@ansible ~]# curl -O http://mirrors.douxuedu.com/competition/CentOS-7-x86_64-DVD-2009.iso
[root@ansible ~]# curl -O http://mirrors.douxuedu.com/competition/ansible.tar.gz
[root@ansible ~]# curl -O http://mirrors.douxuedu.com/competition/openstack_ansible_train.tar.gz
[root@ansible ~]# curl -O http://mirrors.douxuedu.com/competition/chinaskills_cloud_iaas_v2.0.1.iso
[root@ansible ~]# mkdir /opt/{centos,iaas}
[root@ansible ~]# mount -o loop CentOS-7-x86_64-DVD-2009.iso /opt/centos/
[root@ansible ~]# mount -o loop chinaskills_cloud_iaas_v2.0.1.iso /opt/iaas/
[root@ansible ~]# tar -zxvf ansible.tar.gz -C /opt/
[root@ansible ~]# mv /etc/yum.repos.d/* /home/
[root@ansible ~]# vi /etc/yum.repos.d/ansible.repo
[ansible]
name=ansible
baseurl=file:///opt/ansible
gpgcheck=0
enabled=1
[centos]
name=centos
baseurl=file:///opt/centos
gpgcheck=0
enabled=1
[root@ansible ~]# yum install vsftpd -y
[root@ansible ~]# echo "anon_root=/opt" >> /etc/vsftpd/vsftpd.conf
[root@ansible ~]# systemctl  restart vsftpd
[root@ansible ~]# setenforce 0
[root@ansible ~]# yum install ansible -y

（3）配置无秘钥登录

配置Ansible节点无秘钥登录Controller和Compute节点。配置完无秘钥登录后，使用Ansible节点SSH连接测试。（若云主机已是无秘钥访问的，则不用配置无秘钥）

[root@ansible ~]# ssh-keygen 
Generating public/private rsa key pair.
Enter file in which to save the key (/root/.ssh/id_rsa): 
Enter passphrase (empty for no passphrase): 
Enter same passphrase again: 
Your identification has been saved in /root/.ssh/id_rsa.
Your public key has been saved in /root/.ssh/id_rsa.pub.
The key fingerprint is:
SHA256:zOl0NDjrN697yRTmHmLXYpj2n4ijS+yxHUS3OhRG3ew root@ansible
The key's randomart image is:
+---[RSA 2048]----+
|          .. o   |
|         o  . o  |
|        o * ..   |
|       o B +o.E  |
|        S +=.o   |
|       = +*.B .  |
|        *o*O +   |
|       o =.**. . |
|        =o==o.o  |
+----[SHA256]-----+
[root@ansible ~]# scp -p .ssh/id_rsa.pub 172.128.11.21:/root/.ssh/authorized_keys     //输入密码Abc@1234
[root@ansible ~]# scp -p .ssh/id_rsa.pub 172.128.11.20:/root/.ssh/authorized_keys     //输入密码Abc@1234

2. 目录结构