安装openstack基础服务

1：改ip
vim /etc/sysconfig/network-scripts/ifcfg-eth0
IPADDR=10.0.0.31
GATEWAY=10.0.0.254
systemctl restart network

2：修改主机名
hostnamectl set-hostname compute1
重新登陆生效

3：修改hosts解析
vim /etc/hosts
增加2行
10.0.0.11 controller
10.0.0.31 compute1

mount /dev/cdrom /mnt
rz 上传openstack_rpm.tar.gz到/opt，并解压

生成repo配置文件
echo '[local]
name=local
baseurl=file:///mnt
gpgcheck=0
[openstack]
name=openstack
baseurl=file:///opt/repo
gpgcheck=0' >/etc/yum.repos.d/local.repo

yum makecache
echo 'mount /dev/cdrom /mnt' >>/etc/rc.local
chmod +x /etc/rc.d/rc.local

控制节点：
vim /etc/chrony.conf
修改第26行为
allow 10.0.0.0/24
systemctl restart chronyd

计算节点：
vim /etc/chrony.conf
修改第3行为
server 10.0.0.11 iburst

systemctl restart chronyd

所有节点都需要执行

yum install python-openstackclient openstack-selinux -y

仅控制节点
yum install mariadb mariadb-server python2-PyMySQL -y

echo '[mysqld]
bind-address = 10.0.0.11
default-storage-engine = innodb
innodb_file_per_table
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8'  >/etc/my.cnf.d/openstack.cnf

systemctl start mariadb
systemctl enable mariadb
mysql_secure_installation

控制节点：
yum install rabbitmq-server -y
systemctl start rabbitmq-server.service 
systemctl enable rabbitmq-server.service

rabbitmqctl add_user openstack RABBIT_PASS
rabbitmqctl set_permissions openstack ".*" ".*" ".*"

rabbitmq-plugins enable rabbitmq_management

yum install memcached python-memcached -y

sed -i 's#127.0.0.1#10.0.0.11#g’ /etc/sysconfig/memcached

systemctl restart memcached.service
systemctl enable memcached.service

安装keystone认证服务
keystone的主要功能：认证管理，授权管理和服务目录

认证：也可以理解成账号管理，openstack所有的用户，都是在keystone上注册的。

授权: glance,nova,neutron,cinder等其他服务都统一使用keystone的账号管理，就像现在很多网站支持qq登陆是一样的。

服务目录：每增加一个服务，都需要在keystone上做注册登记，用户通过keystone可以知道由有那些服务，这么服务的url地址是多少，然后用户就可以直接访问这些服务。

安装配置keystone
a:创库授权
CREATE DATABASE keystone;
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \
  IDENTIFIED BY 'KEYSTONE_DBPASS';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \
  IDENTIFIED BY 'KEYSTONE_DBPASS’;
b：安装keystone相关软件包
yum install openstack-keystone httpd mod_wsgi -y
c:修改keystone配置文件
\cp /etc/keystone/keystone.conf{,.bak}
grep -Ev '^$|#' /etc/keystone/keystone.conf.bak >/etc/keystone/keystone.conf
yum install openstack-utils -y
openstack-config --set /etc/keystone/keystone.conf DEFAULT admin_token  ADMIN_TOKEN
openstack-config --set /etc/keystone/keystone.conf database connection  mysql+pymysql://keystone:KEYSTONE_DBPASS@controller/keystone
openstack-config --set /etc/keystone/keystone.conf token provider  fernet

d：同步数据库
su -s /bin/sh -c "keystone-manage db_sync" keystone
e：初始化fernet
keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
f：配置httpd
echo "ServerName controller" >>/etc/httpd/conf/httpd.conf
vi /etc/httpd/conf.d/wsgi-keystone.conf
略

g:启动httpd
systemctl enable httpd.service
systemctl start httpd.service

声明变量
export OS_USERNAME=admin
export OS_PASSWORD=123456
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://controller:35357/v3
export OS_IDENTITY_API_VERSION=3
export OS_IDENTITY_API _VERSION=2
验证keystone是否正常
openstack user list
创建service的项目
openstack project create --domain default \
--description "Service Project" service
验证service项目
openstack project list
修改/root/.bashrc文件
声明变量
export OS_USERNAME=admin
export OS_PASSWORD=123456
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://controller:35357/v3
export OS_IDENTITY_API_VERSION=3
export OS_IDENTITY_API_VERSION=2

安装glance服务
功能：管理镜像模板机
openstack通用服务安装步骤：
1：创库授权
create database glance
grant all privileges on glance.* to 'glance'@'localhost' \
    -> identified by '1232456';
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '123456';

2：keystone上创建用户，关联角色
openstack user create --domain default --password 123456 glance
openstack role add --project service --user glance admin

3：keystone上创建服务，http访问地址（apl地址）
openstack service create --name glance \
  --description "OpenStack Image" image
openstack endpoint create --region RegionOne \
  image public http://controller:9292
openstack endpoint create --region RegionOne \
  image internal http://controller:9292
openstack endpoint create --region RegionOne \
  image admin http://controller:9292

4：安装服务软件包
yum -y install openstack-glance

5：修改配置文件（连接数据库，keystone授权）
##glance-api 上传下载删除
##glance-registry 修改镜像的属性  x86  根分区大小
##修改glance-api文件
cp /etc/glance/glance-api.conf{,.bak}
grep -Ev '^$|#' /etc/glance/glance-api.conf.bak >/etc/glance/glance-api.conf
vi /etc/glance/glance-api.conf
[DEFAULT]
[cors]
[cors.subdomain]
[database]
connection = mysql+pymysql://glance:123456@controller/glance
[glance_store]
[keystone_authtoken]
stores = file,http
default_store = file 
filesystem_store_datadir = /var/1ib/glance/images/
[image_format]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = 123456
[matchmaker_redis]
[oslo_concurrency]
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_messaging_zmq]
[oslo_middleware]
[oslo_policy]
[paste_deploy]
flavor = keystone
[profiler]
[store_type_location_strategy]
[task]
[taskflow_executor]
##校验
md5sum /etc/glance/glance-api.conf

cp /etc/glance/glance-registry.conf{,.bak}
grep -Ev '^$|#' /etc/glance/glance-registry.conf.bak >/etc/glance/glance-registry.conf
vi /etc/glance/glance-registry.conf
[DEFAULT]
[database]
connection = mysql+pymysql://glance:123456@controller/glance
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = 123456
[matchmaker_redis]
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_messaging_zmq]
[oslo_policy]
[paste_deploy]
flavor = keystone
[profiler]
##校验
md5sum /etc/glance/glance-registry.conf

6：同步数据库（创表）
su -s /bin/sh -c "glance-manage db_sync" glance
mysql glance -e 'show tables;'|wc -l

7：启动服务
调用api，很多时候就是发起一个http请求
systemctl enable openstack-glance-api.service \
  openstack-glance-registry.service 
systemctl start openstack-glance-api.service \
  openstack-glance-registry.service
验证
netstat -lntup|grep -E '9191|9292'

openstack image create "cirros" --file cirros-0.4.0-x86_64-disk.img --disk-format qcow2 --container-format bare --public

8、上传镜像
wget http://download.cirros-cloud.net/0.4.0cirros-0.4.0-×86_64-disk.img
openstack image create "cirros"--file cirros-0.4.0-×86_64-disk.img --disk-format qcow2 --container-format bare --public
##验证
ls /var/lib/glance/images/  或者  openstack image list


安装nova服务
控制节点安装nova服务
1：创库授权
CREATE DATABASE nova_api;
CREATE DATABASE nova;
CREATE DATABASE nova_cell0;
REVOKE ALL PRIVILEGES ON nova_api.* FROM ' nova'@' localhost' \
  IDENTIFIED BY '123456'; 
GRANT ALL PRIVILEGES ON nova_api.* To 'nova'@'%' \
  IDENTIFIED BY '123456'; 
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \
  IDENTIFIED BY '123456'; 
GRANT ALL PRIVILEGES ON nova.* To 'nova'@'%' \
  IDENTIFIED BY '123456'; 
GRANT ALL PRIVILEGES ON nova_cell0.* To 'nova'@'localhost' \
  IDENTIFIED BY '123456'; 
GRANT ALL PRIVILEGES ON nova_cell0.* To 'nova'@'%' \
IDENTIFIED BY '123456';

2：keystone上创建用户，关联角色
openstack user create --domain default --password 123456 nova openstack role add --project service --user nova admin
#placement追踪云主机的资源使用具体情况
openstack user create --domain default --password 123456 placement
openstack role add --project service --user placement admin

3：keystone上创建服务，http访问地址（api地址）
openstack user create --domain default --password 123456 nova
openstack role add --project service --user nova admin
openstack service create --name nova \
>   --description "OpenStack Compute" compute
openstack endpoint create --region RegionOne \
>   compute public http://controller:8774/v2.1
openstack endpoint create --region RegionOne \
>   compute internal http://controller:8774/v2.1
openstack endpoint create --region RegionOne \
>   compute admin http://controller:8774/v2.1
##校验
openstack user list

openstack service create --name placement --description "Placement API" placement
openstack endpoint create --region RegionOne placement public http://controller:8778
openstack endpoint create --region RegionOne placement internal http://controller:8778
openstack endpoint create --region RegionOne placement admin http://controller:8778

4：安装服务软件包
yum install openstack-nova-api openstack-nova-conductor \
openstack-nova-console openstack-nova-novncproxy \
openstack-nova-scheduler openstack-nova-placement-api -y

5：修改配置文件（连接数据库，keystone授权）
cp /etc/nova/nova.conf{,.bak}
grep -Ev '^$|#' /etc/nova/nova.conf.bak >/etc/nova/nova.conf
enabled_apis = osapi_compute,metadata
vi /etc/nova/nova.conf
[DEFAULT]
#启动nova服务api和metadata的api
enabled_apis = osapi_compute,metadata
#连接消息队列rabbit
transport_url = rabbit://openstack:123456@controller
my_ip = 10.0.0.11
#启动neutron网络服务，禁用nova内置防火墙
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[api]
auth_strategy = keystone
[api_database]
connection = mysql+pymysql://nova:123456@controller/nova_api
[barbican]
[cache]
[cells]
[cinder]
[cloudpipe]
[conductor]
[console]
[consoleauth]
[cors]
[cors.subdomain]
[crypto]
[database]
connection = mysql+pymysql://nova:123456@controller/nova
[ephemeral_storage_encryption]
[filter_scheduler]
[glance]
api_servers = http://controller:9292
[guestfs]
[healthcheck]
[hyperv]
[image_file_url]
[ironic]
[key_manager]
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = 123456
[libvirt]
[matchmaker_redis]
[metrics]
[mks]
[neutron]
[notifications]
[osapi_v21]
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_messaging_zmq]
[oslo_middleware]
[oslo_policy]
[pci]
#追踪虚拟机使用资源情况
[placement]
os_region _name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:35357/v3
username = placement
password = 123456
[quota]
[rdp]
[remote_debug]
[scheduler]
[serial_console]
[service_user]
[spice]
[ssl]
[trusted_computing]
[upgrade_levels]
[vendordata_dynamic_auth]
[vmware]
#vnc的连接信息
[vnc]
enabled = true
vncserver_listen = $my_ip
vncserver_proxyclient_address = $my_ip
[workarounds]
[wsgi]
[xenserver]
[xvp]

#修改httpd配置文件
vim /etc/httpd/conf.d/00-nova-placement-api.conf在</VirtualHost>上添加以下内容
<Directory /usr/bin>
  <IfVersion >= 2.4>
    Require all granted
  </IfVersion>
  <IfVersion < 2.4>
    Order allow,deny 
    Allow from all
  </IfVersion>
</Directory>
#重启httpd服务
systemctl restart httpd

6：同步数据库（创表）
su -s /bin/sh -c "nova-manage api_db sync" nova 
su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova 
su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
su -s /bin/sh -c "nova-manage db sync" nova
检查
nova-manage cell_v2 list_cells

7：启动服务
systemctl enable openstack-nova-api.service \
  openstack-nova-consoleauth.service openstack-nova-scheduler.service \
  openstack-nova-conductor.service openstack-nova-novncproxy.service 
systemctl start openstack-nova-api.service \
  openstack-nova-consoleauth.service openstack-nova-scheduler.service \
  openstack-nova-conductor.service openstack-nova-novncproxy.service
#检验
openstack compute service list



计算节点上安装nova服务
1：安装
yum -y install openstack-nova-compute

2：配置
vi /etc/nova/nova.conf
[DEFAULT]
auth_strategy = keystone
enabled_apis = osapi_compute,metadata
transport_url = rabbit://openstack:123456@controller
my_ip = 10.0.0.31
use_neutron = True 
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = 123456
[vnc] 
enabled = True 
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = $my_ip 
novncproxy_base_url = http://controller:6080/vnc_auto.html
[glance]
api_servers = http://controller:9292
[oslo_concurrency]
1ock_path = /var/lib/nova/tmp
[placement]
os_region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:35357/v3
username = placement
password = 123456
#验证
md5sum /etc/nova/nova.conf

确定您的计算节点是否支持虚拟机的硬件加速
egrep -c '(vwx|svm)' /proc/cpuinfo
如果这个命令返回了one or greater的值，那么你的计算节点支持硬件加速且不需要额外的配置
如果这个命令返回了zero值，那么你的计算节点不支持硬件加速。你必须配置1ibvirt 来使用QEMU去替代KVM
在/etc/nova/nova.conf文件的[libvirt]区域做出如下的编辑
[libvirt]
virt_type = qemu


3：启动
systemctl enable libvirtd.service openstack-nova-compute.service 
systemctl start libvirtd.service openstack-nova-compute.service


安装neutron服务
在控制节点上安装neutron服务
1：创库授权
create database neutron；
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' \
  IDENTIFIED BY 'NEUTRON_DBPASS'; 
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' \
  IDENTIFIED BY 'NEUTRON_DBPASS';

2：keystone上创建用户，关联角色
openstack user create --domain default --password NEUTRON_PASS neutron
openstack role add --project service --user neutron admin

3：keystone上创建服务，http访问地址（api地址）
openstack service create --name neutron \
  --description "OpenStack Networking" network
openstack endpoint create --region RegionOne \
  network public http://controller:9696
openstack endpoint create --region RegionOne \
  network internal http://controller:9696
openstack endpoint create --region RegionOne \
  network admin http://controller:9696

4：安装服务软件包
#安装网络选项1
yum install openstack-neutron openstack-neutron-ml2 \
openstack-neutron-linuxbridge ebtables -y

主配置
neutron.conf core_plugin = ml2
service_plugins =
配置ml2配置文件
type_drivers = flat，vlan 
mechanism_drivers = linuxbridge
#网络虚拟化的方案
mechanism_drivers = openvswitch
配置Linuxbridge 
physical_interface_mappings = provider:ene33
配置dhcp 
interface_driver = linuxbridge dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq 
enable_isolated_metadata = true

5：修改配置文件（连接数据库，keystone授权）
cp //etc/neutron/neutron.conf{,.bak}
grep -Ev '^$|#' //etc/neutron/neutron.conf.bak >/etc/neutron/neutron.conf

vi /etc/neutron/neutron.conf
[DEFAULT]
core_plugin = ml2
service_plugins =
transport_url = rabbit://openstack:123456@controller
auth_strategy = keystone
notify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true
[agent]
[cors]
[cors.subdomain]
[database]
connection = mysql+pymysql://neutron:NEUTRON_DBPASS@controller/neutron
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS
[matchmaker_redis]
[nova]
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = 123456
[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_messaging_zmq]
[oslo_middleware]
[oslo_policy]
[qos]
[quotas]
[ssl]
#检验
md5sum /etc/neutron/neutron.conf

#编辑ml2_conf.ini
cp /etc/neutron/plugins/ml2/ml2_conf.ini{,.bak}
grep -Ev '^$|#' /etc/neutron/plugins/ml2/ml2_conf.ini.bak >/etc/neutron/plugins/ml2/ml2_conf.ini
vi /etc/neutron/plugins/ml2/ml2_conf.ini
[DEFAULT]
[ml2]
type_drivers = flat,vlan 
tenant_network_types = vxlan
mechanism_drivers = linuxbridge 
extension_drivers = port_security
[ml2_type_flat]
flat_networks = provider
[ml2_type_geneve]
[ml2_type_gre]
[ml2_type_vlan]
[ml2_type_vxlan]
[securitygroup]

#编辑linuxbridge_agent.ini（这个配置错误可能导致neutron-server服务起不来）
cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini{,.bak}
grep -Ev '^$|#' /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak >/etc/neutron/plugins/ml2/linuxbridge_agent.ini
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[DEFAULT]
[agent]
[linux_bridge]
physical_interface_mappings = provider:ens33
[securitygroup]
enable_security_group = true 
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
[vxlan]
enable_vxlan = false

#编辑dhcp_agent.ini 
vi /etc/neutron/dhcp_agent.ini 
[DEFAULT]
interface_driver = linuxbridge 
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq 
enable_isolated_metadata = true

#编辑metadata_agent.ini
vi /etc/neutron/metadata_agent.ini
[DEFAULT]
nova_metadata_ip = controller
metadata_proxy_shared_secret = METADATA_SECRET

###编辑控制节点/etc/nova/nova.conf配置文件
vi /etc/nova/nova.conf
[neutron]
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS
service_metadata_proxy = true
metadata_proxy_shared_secrft = METADATA_SECRET

6：同步数据库（创表）
ln -s /etc/neutron/plugins/m12/ml2_conf.ini /etc/neutron/plugin.ini
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

7：启动服务
调用api，很多时候就是发起一个http请求
systemctl restart openstack-nova-api.service
systemctl enable neutron-server.service \
  neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
  neutron-metadata-agent.service 
systemctl start neutron-server.service \
  neutron-linuxbridge-agent.service neutron-dhcp-agent.service \
  neutron-metadata-agent.service

##验证
openstack network agent list

在计算节点上安装neutron服务
1：安装
yum install -y openstack-neutron-linuxbridge ebtables ipset

2：配置
cp //etc/neutron/neutron.conf{,.bak}
grep -Ev '^$|#' //etc/neutron/neutron.conf.bak >/etc/neutron/neutron.conf

vi /etc/neutron/neutron.conf
[DEFAULT]
transport_url = rabbit://openstack:123456@controller
auth_strategy = keystone
[agent]
[cors]
[cors.subdomain]
[database]
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS
[matchmaker_redis]
[nova]
[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_messaging_zmq]
[oslo_middleware]
[oslo_policy]
[qos]
[quotas]
[ssl]
#检验
md5sum /etc/neutron/neutron.conf

#Linux_agent
scp -rp  10.0.0.11:/etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.inil
#在计算节点上，再次修放nova.conf vim/etc/nova/nova.conf
[neutron]
url = http://controller：9696
auth_url = http://controller：35357
auth_type = password 
project_domain_name = default 
user_domain_name = default 
region_name = Regionone 
project_name = service 
username = neutron 
Password = NEUTRON_PASS
3：启动
systenctl restart openstack-nova-compute.service  //重启计算服务

安装dashboard服务
#计算节点安装dashboard
1：安装
yum -y install openstack-dashboard 
systenctl enable neutron-linuxbridge-agent.service 
systenctl start neutran-linuxbridge-agent.service

2：配置
rz 上传local_settings文件
cat local_settings >/etc/openstack-dashboard/local_settings

3：启动
systemctl start httpd

4:访问dashboard
http：//ip地址/dashboard
账号admin
密码123456


启动一台云主机
#创建网络
neutron net-create --shared --provider: physical_network provider --provider:network_type flat WAN 
neutron subnet-create --name subnet-wan --allocation-pool \
start=10.0.0.100, end=10.0.0.200 --dns-nameserver 223.5.5.5 \
--gateway 10.0.0.254 WAN10.0.0.0/24
#创建硬件配置方案
openstack flavor create --id 0--vcpus 1 --ram 64 --disk 1 m1.nano
#上传秘钥对
ssh-keygen -q -N "" -f ~/.ssh/id_rsa openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey
#安全组开放ping和ssh
openstack security group rule create --proto icmp default
openstack security group rule create --proto tcp --dst-port 22 default

#实例
创建实例