手动安装 openstack并配置虚拟化集成 VM
云计算含义：
弹性质
可以随便增加内存和 cpu，硬盘
对用户是透明的
对数据进行去重

应用，数据，跑的时间，中间件，系统
虚拟机，服务器，存储，网络

计算分层
云计算绝不等于虚拟化
云计算用到虚拟化的技术

nova负责计算节点
quantum 负责虚拟网络
swift 负责云存储 ‘
libvirt 负责虚拟机管理，虚拟机设备管理远程过程

目录：
安装先决要求
1.环境
2.域名解析和关闭防火墙
3.配置时间同步服务器（NTP）
4.安装软件包
5.安装数据库
6.验证数据库
7.安装 rabbitmq服务
8.安装 Memcached

安装目录：
1.安装配置 keystone身份认证服务
2.镜像服务
3.（nova）的安装及配置
4.网络服务 neutron服务器端的安装及配置
5.安装 dashboard组件
6.安装 cinder
7.EXSI集成 VM虚拟化
8.安装 VMware vCenter Appliance 的的 OVF
9.集成 vmware

1.环境
手动安装 openstack
openstack-newton版
192.168.2.34 **
192.168.2.35 compute1
CentOS 7.3系统 2 台
**即作为控制节点，也作为计算节点 .
compute1 就只是计算节点
拓扑图
wKioL1noBlHioxx0AAD5E3T6voU200.png
在 ESXI里面创建虚拟交换机
现在我们开始在 ESXI上部署网络
ESXI创建两个虚拟交换机，一个命名为 fuel_pxe，一个命名为 fuel_storage，加上原有的 vm network总共三个交换机。
wKiom1noCViDHmRfAABkTZnRwOA978.png
wKioL1noBqOCdDNGAABV3rxaYkU331.png

创建虚拟机，内存 8G以上，硬盘 100G以上，创建三个网卡。
wKiom1noCbeh7t7uAACLQ6I8sYg567.png

控制节点去操控计算节点，计算节点上可以创建虚拟机
** 192.168.2.34 网卡 NAT ens160
(ens160是内网网卡，下面 neutron配置文件里会设置到 )
compute1 192.168.2.35 网卡 NAT ens160
wKioL1noBC2DMCDHAACBWZySfhE364.png
2.域名解析和关闭防火墙（控制节点和计算节点都做）
/etc/hosts#主机名一开始设置好
后面就无法更改了，否则就会出问题！这里设置好 ip与主机名的对应关系
192.168.2.34 **
192.168.2.35 compute1
setenforce 0
systemctl start firewalld.service
systemctl stop firewalld.service
systemctl disable firewalld.service
3.配置时间同步服务器（NTP）
控制节点
yum install chrony -y

安装服务

sed -i ‘s/#allow 192.168\/2/allow 192.168\/2/g’ /etc/chrony.conf
cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime

更改时区

启动 NTP服务
systemctl enable chronyd.service
systemctl start chronyd.service
配置计算节点
yum install chrony -y
sed -i ‘s/^server.*$//g’ /etc/chrony.conf
sed -i “N;2aserver ** iburst” /etc/chrony.conf
cp /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
更改时区
systemctl enable chronyd.service
systemctl start chronyd.servic

4.安装软件包
sudo yum install -y centos-release-openstack-newton
sudo yum update -y
sudo yum install -y openstack-packstack
yum install python-openstackclient openstack-selinux -y
wKiom1noCr3gRep2AACNDDypctg003.png
5.安装数据库
控制节点下操作
yum install mariadb mariadb-server python2-PyMySQL -y
[root@** openstack]# vim /etc/my.cnf.d/openstack.cnf
[mysqld]
bind-address = 192.168.2.34 #本服务器的 ip
default-storage-engine = innodb
innodb_file_per_table
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8

启动数据库
systemctl enable mariadb.service
systemctl start mariadb.service
5.初始化数据库

mysql_secure_installation

数据库密码为 123456
6.验证数据库
[root@** openstack]# mysql -uroot -p123456
Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 8
Server version: 10.1.20-MariaDB MariaDB Server
Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others.
Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the current input statement.
MariaDB [(none)]>
wKioL1noB_LAddPlAAAi6FWc8nA162.png
wKioL1noB_OAO0AfAAFe_Xqdcso802.png
wKiom1noCqnTYPUVAABdW8SoQSc191.png

7.消息队列
openstack使用一个消息队列的服务之间进行协调的操作和状态的信息。消息队列服务通常在控制器节点上运行。OpenStack的支持多种消息队列服务，包括 RabbitMQ的， Qpid和 ZeroMQ。
8.安装 rabbitmq
yum install rabbitmq-server -y

9.启动 rabbitmq服务
systemctl enable rabbitmq-server.service
systemctl start rabbitmq-server.service

9.创建 openstack用户这里使用 RABBIT_PASS做 openstack用户的密码
[root@** ~]# rabbitmqctl add_user openstack RABBIT_PASS

Creating user “openstack” …
10.允许 openstack用户的配置，写入和读取的访问

rabbitmqctl set_permissions openstack “.” “.” “.*”
Setting permissions for user “openstack” in vhost “/” …

11.安装 Memcached
yum install memcached python-memcached -y

12.启动服务
systemctl enable memcached.service
systemctl start memcached.service

安装配置 keystone身份认证服务
[root@** ~]# mysql -uroot -p123456

创建 keystone数据库

MariaDB [(none)]> CREATE DATABASE keystone;
Query OK, 1 row affected (0.00 sec)

授予数据库访问权限

MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone’@’localhost’ IDENTIFIED BY ‘123456’;
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone’@’%’ IDENTIFIED BY ‘123456’;

Query OK, 0 rows affected (0.00 sec)

用合适的密码替换 KEYSTONE_DBPASS。

2.安装软件包
[root@** ~]# yum install openstack-keystone httpd mod_wsgi -y

3.编辑 /etc/keystone/keystone.conf文件
[root@** ~]# cd /etc/keystone/
[root@** keystone]# cp keystone.conf keystone.conf.bak
[root@** keystone]# egrep -v “^#|^$” keystone.conf.bak > keystone.conf
[root@** keystone]# vim keystone.conf
添加如下内容
[database]
connection = mysql+pymysql://keystone:123456@**/keystone
[token]
provider = fernet

4.导入数据库
su -s /bin/sh -c “keystone-manage db_sync” keystone

5.初始化存储库
[root@** ~]# keystone-manage fernet_setup –keystone-user keystone –keystone-group keystone
[root@** ~]# keystone-manage credential_setup –keystone-user keystone –keystone-group keystone

6.引导身份认证
keystone-manage bootstrap –bootstrap-password admin –bootstrap-admin-url http://*/v3/ –bootstrap-internal-url http://*/v3/ –bootstrap-public-url http://**/v3/ –bootstrap-region-id RegionOne

7.配置 http
[root@* ~]# sed -i ‘s/#ServerName www.example.com:80/ServerName */g’ /etc/httpd/conf/httpd.conf
[root@** ~]# ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

systemctl enable httpd.service
systemctl start httpd.service
netstat -lntp |grep http

Oct 11 22:26:28 ** systemd[1]: Failed to start The Apache HTTP Server.
Oct 11 22:26:28 ** systemd[1]: Unit httpd.service entered failed state.
Oct 11 22:26:28 ** systemd[1]: httpd.service failed.

[root@localhost conf.d]# vi/etc/httpd/conf/httpd.conf
353行是这一行，我们把它注释掉。
353 IncludeOptional conf.d/*.conf
systemctl start httpd.service
9.配置管理用户
export OS_USERNAME=admin
export OS_PASSWORD=admin
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://**/v3
export OS_IDENTITY_API_VERSION=3

10.创建用户、域、角色
openstack project create –domain default –description “Service Project” service
[root@** ~]# openstack project create –domain default –description “Service Project” service
Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
Unable to establish connection to http://*/v3/auth/tokens: HTTPConnectionPool(host=’*‘, port=35357): Max retries exceeded with url: /v3/auth/tokens (Caused by NewConnectionError(‘

. admin-openrc

3.创建服务
创建 nova用户
[root@** openstack]# openstack user create –domain default –password-prompt nova
User Password:123456
Repeat User Password:123456
+———————+———————————-+
| Field | Value |
+———————+———————————-+
| domain_id | default |
| enabled | True |
| id | b0c274d46433459f8048cf5383d81e91 |
| name | nova |
| password_expires_at | None |
+———————+———————————-+
将 admin角色添加到 nova用户
openstack role add –project service –user nova admin
创建 nova服务实体
openstack service create –name nova –description “OpenStack Compute” compute
4.创建 API
openstack endpoint create –region RegionOne compute public http://**/v2.1/%(tenant_id)s
[root@* openstack]# openstack endpoint create –region RegionOne compute public http://*/v2.1/%(tenant_id)s
+————–+——————————————-+
| Field | Value |
+————–+——————————————-+
| enabled | True |
| id | c73837b6665a4583a1885b70e2727a2e |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | e511923b761e4103ac6f2ff693c68639 |
| service_name | nova |
| service_type | compute |
| url | http://**/v2.1/%(tenant_id)s |
+————–+——————————————-+
[root@** openstack]#
openstack endpoint create –region RegionOne compute internal http://**/v2.1/%(tenant_id)s
openstack endpoint create –region RegionOne compute admin http://**/v2.1/%(tenant_id)s

安装软件包
yum install openstack-nova-api openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler -y
6.编辑 /etc/nova/nova.conf
[root@** ~]# cd /etc/nova/
[root@** nova]# cp nova.conf nova.conf.bak
[root@** nova]# egrep -v “^$|^#” nova.conf.bak > nova.conf
[root@** nova]# vim nova.conf
添加如下内容
[DEFAULT]
enabled_apis = osapi_compute,metadata
transport_url = rabbit://openstack:RABBIT_PASS@**
auth_strategy = keystone
my_ip = 192.168.2.34
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[api_database]
connection = mysql+pymysql://nova:123456@**/nova_api
[database]
connection = mysql+pymysql://nova:123456@**/nova
[keystone_authtoken]
auth_uri = http://**
auth_url = http://**
memcached_servers = **:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = 123456
[vnc]
vncserver_listen = myipvncserverproxyclientaddress=my_ip vncserver_proxyclient_address = my_ip
[glance]
api_servers = http://**/var/lib/nova/tmp

7.导入数据库
su -s /bin/sh -c “nova-manage api_db sync” nova
su -s /bin/sh -c “nova-manage db sync” nova
忽略此输出的任何弃用消息

8.开启服务
systemctl enable openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
systemctl start openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service

验证
[root@** nova]# nova service-list
+—-+——————+————+———-+———+——-+————+—————–+
| Id | Binary | Host | Zone | Status | State | Updated_at | Disabled Reason |
+—-+——————+————+———-+———+——-+————+—————–+
| 1 | nova-consoleauth | ** | internal | enabled | up | - | - |
| 2 | nova-conductor | ** | internal | enabled | up | - | - |
| 5 | nova-scheduler | ** | internal | enabled | up | - | - |
+—-+——————+————+———-+———+——-+————+—————–+

9d7a3478f985520d61e01b54aa4d1de3.png
72221efc1c68869e0e0cc4b1550b416e.png

nova计算节点服务安装
安装配置计算节点
yum install openstack-nova-compute -y
2.编辑 /etc/nova/nova.conf
[root@compute1 ~]# cd /etc/nova/
[root@compute1 nova]# cp nova.conf nova.conf.bak
[root@compute1 nova]# egrep -v “^#|^$” nova.conf.bak > nova.conf
[root@compute1 nova]# vim nova.conf
[DEFAULT]
…
enabled_apis = osapi_compute,metadata
transport_url = rabbit://openstack:RABBIT_PASS@**
auth_strategy = keystone
my_ip = 192.168.2.35
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[keystone_authtoken]
…
auth_uri = http://**
auth_url = http://**
memcached_servers = **:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = 123456
[vnc]
…
enabled = True
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = $my_ip
novncproxy_base_url = http://**/vnc_auto.html
[glance]
…
api_servers = http://**/var/lib/nova/tmp

3.确定计算节点是否支持虚拟化。

egrep -c ‘(vmx|svm)’ /proc/cpuinfo

假如返回值大于 1表态支持虚拟化
0
假如不支持请更改 /etc/nova/nova.conf
[libvirt]
…
virt_type = qemu
systemctl enable libvirtd.service openstack-nova-compute.service
systemctl start libvirtd.service openstack-nova-compute.service

启动报错
2017-10-11 16:13:04.611 15074 ERROR nova AccessRefused: (0, 0): (403) ACCESS_REFUSED - Login was refused using authentication mechanism AMQPLAIN. For details see the broker logfile.

rabbitmqctl add_user openstack RABBIT_PASS
rabbitmqctl set_permissions openstack “.” “.” “.*”
systemctl restart rabbitmq-server.service
重启所有 nova服务在控制节点上

[root@** openstack]# systemctl stop openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
[root@** openstack]# systemctl start openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
[root@** openstack]# openstack compute service list
+—-+——————+————+———-+———+——-+—————————-+
| ID | Binary | Host | Zone | Status | State | Updated At |
+—-+——————+————+———-+———+——-+—————————-+
| 1 | nova-consoleauth | ** | internal | enabled | up | 2017-10-11T08:27:57.000000 |
| 2 | nova-conductor | ** | internal | enabled | up | 2017-10-11T08:27:57.000000 |
| 5 | nova-scheduler | ** | internal | enabled | up | 2017-10-11T08:27:57.000000 |
+—-+——————+————+———-+———+——-+—————————-+
[root@** openstack]# nova service-list
+—-+——————+————+———-+———+——-+—————————-+—————–+
| Id | Binary | Host | Zone | Status | State | Updated_at | Disabled Reason |
+—-+——————+————+———-+———+——-+—————————-+—————–+
| 1 | nova-consoleauth | ** | internal | enabled | up | 2017-10-11T08:28:57.000000 | - |
| 2 | nova-conductor | ** | internal | enabled | up | 2017-10-11T08:28:57.000000 | - |
| 5 | nova-scheduler | ** | internal | enabled | up | 2017-10-11T08:28:57.000000 | - |
| 9 | nova-compute | compute1 | nova | enabled | up | 2017-10-11T08:29:03.000000 | - |
+—-+——————+————+———-+———+——-+—————————-+—————–+
[root@** openstack]#

网络服务 neutron服务器端的安装及配置
mysql -u root -p123456
CREATE DATABASE neutron;
GRANT ALL PRIVILEGES ON neutron.* TO ‘neutron’@’localhost’ IDENTIFIED BY ‘123456’;
GRANT ALL PRIVILEGES ON neutron.* TO ‘neutron’@’%’ IDENTIFIED BY ‘123456’;
2.获取 admin权限

. admin-openrc

3.创建 neutron服务

openstack user create –domain default –password-prompt neutron

4.创建网络服务 API端点
openstack endpoint create –region RegionOne network public http://**/span>
openstack endpoint create –region RegionOne network internal http://**/span>
openstack endpoint create –region RegionOne network admin http://**/span>
[root@* openstack]# openstack endpoint create –region RegionOne network public http://*//**:9696 |
+————–+———————————-+
[root@* openstack]# openstack endpoint create –region RegionOne network internal http://*//**:9696 |
+————–+———————————-+
[root@* openstack]# openstack endpoint create –region RegionOne network admin http://*//**:9696 |
+————–+———————————-+

网络选择网络 1模式：Provider networks
yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables -y
5.编辑 /etc/neutron/neutron.conf
[root@** ~]# cd /etc/neutron/
[root@** neutron]# cp neutron.conf neutron.conf.bak
[root@** neutron]# egrep -v “^$|^#” neutron.conf.bak > neutron.conf
[root@** neutron]# vim neutron.conf
[database]
…
connection = mysql+pymysql://neutron:123456@**/neutron
[keystone_authtoken]
…
auth_uri = http://**
auth_url = http://**
memcached_servers = **:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = neutron
password = 123456
[nova]
…
auth_url = http://**
auth_type = password
project_domain_name = Default
user_domain_name = Default
region_name = RegionOne
project_name = service
username = nova
password = 123456
[oslo_concurrency]
…
lock_path = /var/lib/neutron/tmp
[DEFAULT]
core_plugin = ml2
service_plugins =
transport_url = rabbit://openstack:RABBIT_PASS@**
auth_strategy = keystone
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
6.编辑 /etc/neutron/plugins/ml2/ml2_conf.ini

[root@** ~]# cd /etc/neutron/plugins/ml2/
[root@** ml2]# cp ml2_conf.ini ml2_conf.ini.bak
[root@** ml2]# egrep -v “^$|^#” ml2_conf.ini.bak > ml2_conf.ini
[root@** ml2]# vim ml2_conf.ini
[ml2]
…
type_drivers = flat,vlan
tenant_network_types =
mechanism_drivers = linuxbridge
extension_drivers = port_security
[ml2_type_flat]
…
flat_networks = provider
[securitygroup]
…
enable_ipset = True

6.编辑 /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[root@** ~]# cd /etc/neutron/plugins/ml2/
[root@controller ml2]# cp linuxbridge_agent.ini linuxbridge_agent.ini.bak
[root@** ml2]# egrep -v “^$|^#” linuxbridge_agent.ini.bak >linuxbridge_agent.ini
[root@** ml2]# vim linuxbridge_agent.ini
7.编辑 /etc/neutron/dhcp_agent.ini
[linux_bridge]
physical_interface_mappings = provider:eth0
[vxlan]
enable_vxlan = False
[securitygroup]
…
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
[root@** ~]# cd /etc/neutron/
[root@** neutron]# cp dhcp_agent.ini dhcp_agent.ini.bak
[root@** neutron]# egrep -v “^$|^#” dhcp_agent.ini.bak > dhcp_agent.ini
[root@** neutron]# vim dhcp_agent.ini
[DEFAULT]
…
interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriver
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
enable_isolated_metadata = True

8.修改 /etc/neutron/metadata_agent.ini
[root@** ~]# cd /etc/neutron/
[root@** neutron]# cp metadata_agent.ini metadata_agent.ini.bak
[root@** neutron]# egrep -v “^$|^#” metadata_agent.ini.bak metadata_agent.ini
[root@** neutron]# egrep -v “^$|^#” metadata_agent.ini.bak > metadata_agent.ini
[root@** neutron]# vim metadata_agent.ini
[DEFAULT]
…
nova_metadata_ip = **
metadata_proxy_shared_secret = mate

8.编辑 /etc/nova/nova.conf
[root@** ~]# cd /etc/nova/
[root@** nova]# cp nova.conf nova.conf.nova
[root@** nova]# vim nova.conf
[neutron]
…
url = http://*//*
auth_type = password
project_domain_name = Default
user_domain_name = Default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS
service_metadata_proxy = True
metadata_proxy_shared_secret = mate

9.创建链接
ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
10.导入数据库
su -s /bin/sh -c “neutron-db-manage –config-file /etc/neutron/neutron.conf –config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head” neutron
INFO [alembic.runtime.migration] Running upgrade 89ab9a816d70 -> c879c5e1ee90, Add segment_id to subnet
INFO [alembic.runtime.migration] Running upgrade c879c5e1ee90 -> 8fd3918ef6f4, Add segment_host_mapping table.
INFO [alembic.runtime.migration] Running upgrade 8fd3918ef6f4 -> 4bcd4df1f426, Rename ml2_dvr_port_bindings
INFO [alembic.runtime.migration] Running upgrade 4bcd4df1f426 -> b67e765a3524, Remove mtu column from networks.
INFO [alembic.runtime.migration] Running upgrade b67e765a3524 -> a84ccf28f06a, migrate dns name from port
INFO [alembic.runtime.migration] Running upgrade a84ccf28f06a -> 7d9d8eeec6ad, rename tenant to project
INFO [alembic.runtime.migration] Running upgrade 7d9d8eeec6ad -> a8b517cff8ab, Add routerport bindings for L3 HA
INFO [alembic.runtime.migration] Running upgrade a8b517cff8ab -> 3b935b28e7a0, migrate to pluggable ipam
INFO [alembic.runtime.migration] Running upgrade 3b935b28e7a0 -> b12a3ef66e62, add standardattr to qos policies
INFO [alembic.runtime.migration] Running upgrade b12a3ef66e62 -> 97c25b0d2353, Add Name and Description to the networksegments table
INFO [alembic.runtime.migration] Running upgrade 97c25b0d2353 -> 2e0d7a8a1586, Add binding index to RouterL3AgentBinding
INFO [alembic.runtime.migration] Running upgrade 2e0d7a8a1586 -> 5c85685d616d, Remove availability ranges.
INFO [alembic.runtime.migration] Running upgrade 67daae611b6e -> 6b461a21bcfc, uniq_floatingips0floating_network_id0fixed_port_id0fixed_ip_addr
INFO [alembic.runtime.migration] Running upgrade 6b461a21bcfc -> 5cd92597d11d, Add ip_allocation to port
OK

11.重启 nova-api服务
systemctl restart openstack-nova-api.service
12.启动服务
systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
systemctl enable neutron-l3-agent.service
systemctl start neutron-l3-agent.service

[root@cntroller ~]#
网络服务计算节点的安装及配置
1.安装服务

yum install openstack-neutron-linuxbridge ebtables ipset -y

2.修改 /etc/neutron/neutron.conf
[database]
…
connection = mysql+pymysql://neutron:123456@**/neutron
[keystone_authtoken]
…
auth_uri = http://**
auth_url = http://**
memcached_servers = **:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = neutron
password = 123456
[nova]
…
auth_url = http://**
auth_type = password
project_domain_name = Default
user_domain_name = Default
region_name = RegionOne
project_name = service
username = nova
password = 123456
[oslo_concurrency]
…
lock_path = /var/lib/neutron/tmp
[DEFAULT]
core_plugin = ml2
service_plugins =
transport_url = rabbit://openstack:RABBIT_PASS@**
auth_strategy = keystone
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True

3.修改 /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[linux_bridge]
physical_interface_mappings = provider:ens160
[vxlan]
enable_vxlan = False
[securitygroup]
…
enable_security_group = True
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

4.修改 /etc/nova/nova.conf
[neutron]
…
url = http://*//*
auth_type = password
project_domain_name = Default
user_domain_name = Default
region_name = RegionOne
project_name = service
username = neutron
password = 123456
5.重启 nova-compute服务
systemctl restart openstack-nova-compute.service
6.启动服务
systemctl enable neutron-linuxbridge-agent.service
systemctl start neutron-linuxbridge-agent.service
7.验证
openstack network agent list
[root@** ~]# openstack network agent list
+————————————–+——————–+————+——————-+——-+——-+—————————+
| ID | Agent Type | Host | Availability Zone | Alive | State | Binary |
+————————————–+——————–+————+——————-+——-+——-+—————————+
| 0207fffa-ae6b-4e06-a901-cc6ccb6c1404 | Linux bridge agent | ** | None | True | UP | neutron-linuxbridge-agent |
| 5d6eb39f-5a04-41e3-9403-20319ef8c816 | DHCP agent | ** | nova | True | UP | neutron-dhcp-agent |
| 70fbc282-4dd1-4cd5-9af5-2434e8de9285 | Metadata agent | ** | None | True | UP | neutron-metadata-agent |
| ab7efa23-4957-475a-8c80-58b786e96cdd | Linux bridge agent | compute1 | None | True | UP | neutron-linuxbridge-agent |
+————————————–+——————–+————+——————-+——-+——-+—————————+
安装 dashboard组件
yum install openstack-dashboard httpd mod_wsgi memcached python-memcached
WEBROOT = ‘/dashboard/’
配置 dashboard
编辑文件 /etc/openstack-dashboard/local_settings 完成下面内容
a.配置 dashboard使用 OpenStack服务【控制节点】
OPENSTACK_HOST = “192.168.2.34”
b.允许 hosts 访问 dashboard
ALLOWED_HOSTS = [‘*’]
c.配置缓存会话存储服务：
CACHES = {
‘default’: {
‘BACKEND’: ‘django.core.cache.backends.memcached.MemcachedCache’,
‘LOCATION’: ‘192.168.2.34:11211’,
}
}

注意：
注释掉其它 session存储配置
d.配置 user为默认角色
OPENSTACK_KEYSTONE_DEFAULT_ROLE = “user”
e.配置时区
TIME_ZONE = “Asia/Shanghai”
完成安装

1.CentOS，配置 SELinux允许 web server 连接 to OpenStack 服务 :
setsebool -P httpd_can_network_connect on
2.可能包 bug,dashboard CSS 加载失败，运行下面命令解决
chown -R apache:apache /usr/share/openstack-dashboard/static
3.启动服务，并设置开机启动
systemctl enable httpd.service memcached.service
systemctl restart httpd.service memcached.service

http://**/dashboard/
输入管理员的用户名和密码
0285f8389babba86f2f5c536d74cec69.png
d3bb6a1dee9f189a72f07526116adc57.png
f040a7081df020e3cbf2b4a1f3b6369e.png
[root@compute1 ~]# curl -I http://**/dashboard/
HTTP/1.1 500 Internal Server Error
Date: Thu, 12 Oct 2017 12:16:13 GMT
Server: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5
Connection: close
Content-Type: text/html; charset=iso-8859-1
vim /etc/httpd/conf.d/openstack-dashboard.conf
添加 WSGIApplicationGroup %{GLOBAL}

Not Found
The requested URL /auth/login/ was not found on this server.
[:error] [pid 16188] WARNING:py.warnings:RemovedInDjango19Warning: The use of the language code ‘zh-cn’ is deprecated. Please use the ‘zh-hans’ translation instead.
修改 vim /etc/httpd/conf.d/openstack-dashboard.conf
WEBROOT = ‘/dashboard/’

安装 cinder
CREATE DATABASE cinder;
GRANT ALL PRIVILEGES ON cinder.* TO ‘cinder’@’localhost’ IDENTIFIED BY ‘123456’;
GRANT ALL PRIVILEGES ON cinder.* TO ‘cinder’@’%’ IDENTIFIED BY ‘123456’;
GRANT ALL PRIVILEGES ON root.* TO ‘root’@’%’ IDENTIFIED BY ‘123456’;

[root@** neutron]#
[root@** ~]# openstack service create –name admin –description “OpenStack Block Storage” volumev2
+————-+———————————-+
| Field | Value |
+————-+———————————-+
| description | OpenStack Block Storage |
| enabled | True |
| id | 12eaeb14115548b09688bd64bfee0af2 |
| name | admin |
| type | volumev2 |
+————-+———————————-+
You have new mail in /var/spool/mail/root
[root@** ~]# openstack service create –name public –description “OpenStack Block Storage” volumev2
+————-+———————————-+
| Field | Value |
+————-+———————————-+
| description | OpenStack Block Storage |
| enabled | True |
| id | b1dfc4b8c3084d9789c0b0731e0f4a2a |
| name | public |
| type | volumev2 |
+————-+———————————-+
[root@** ~]# openstack service create –name internal –description “OpenStack Block Storage” volumev2
+————-+———————————-+
| Field | Value |
+————-+———————————-+
| description | OpenStack Block Storage |
| enabled | True |
| id | b8d90f1e658e402f9871a2fbad1d21b0 |
| name | internal |
| type | volumev2 |
openstack service create –name cinderv2 –description “OpenStack Block Storage” volumev2
openstack endpoint create –region RegionOne volume public http://**:8776/v1/%(tenant_id)s
openstack endpoint create –region RegionOne volume internal http://**:8776/v1/%(tenant_id)s
openstack endpoint create –region RegionOne volume admin http://**:8776/v1/%(tenant_id)s
openstack endpoint create –region RegionOne volumev2 public http://**:8776/v2/%(tenant_id)s
openstack endpoint create –region RegionOne volumev2 internal http://**:8776/v2/%(tenant_id)s
openstack endpoint create –region RegionOne volumev2 admin http://**:8776/v2/%(tenant_id)s

安装
yum install openstack-cinder -y
cd /etc/cinder/
cp cinder.conf cinder.conf.bak
egrep -v “^$|^#” cinder.conf.bak > cinder.conf
vim cinder.conf
[DEFAULT]
transport_url = rabbit://openstack:RABBIT_PASS@**
auth_strategy = keystone
my_ip = 192.168.2.34
[database]
connection = mysql://cinder:123456@**:3306/cinder
[keystone_authtoken]
auth_uri = http://**
auth_url = http://**
memcached_servers = **:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = cinder
password = 123456
[oslo_concurrency]
lock_path = /var/lib/cinder/tmp
[cinder]
os_region_name = RegionOne
su -s /bin/sh -c “cinder-manage db sync” cinder

[root@** cinder]# systemctl restart openstack-nova-api.service
[root@** cinder]# systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service
Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-cinder-api.service to /usr/lib/systemd/system/openstack-cinder-api.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-cinder-scheduler.service to /usr/lib/systemd/system/openstack-cinder-scheduler.service.
[root@** cinder]# systemctl restart openstack-cinder-api.service openstack-cinder-scheduler.service

安装 cinder节点（本人真实机不足以开启三个节点，cinder节点安装在 compute上）
compute
安装 LVM作为后端存储
compute#
yum install lvm2 -y
配置 LVM（须要在各个使用 LVM的服务节点上配置 LVM，让其显示，能被扫描到）
（本人的计算节点自带 LVM，所以须要加上之前的 LVM信息 sda）
compute#
vi /etc/lvm/lvm.conf file
devices {
…
filter = [ “a/sda/”,”a/sdb/”, “r/.*/”]
假如存储节点上本身自带 LVM（节点操作系统在 sda盘的 LVM上），则须要加上 sda的配置。
cinder#
filter = [ “a/sda/”, “a/sdb/”, “r/.*/”]
假如计算节点上本身自带 LVM（节点操作系统在 sda盘的 LVM上），则须要配置 sda的配置。
compute#
filter = [ “a/sda/”, “r/.*/”]
}

systemctl enable lvm2-lvmetad.service
systemctl restart lvm2-lvmetad.service
yum install openstack-cinder targetcli python-keystone -y

建立物理卷和逻辑组
compute#
pvcreate /dev/sdb
vgcreate cinder-volumes /dev/sdb
[root@compute1 ~]# pvcreate /dev/sdb
Physical volume “/dev/sdb” successfully created.
[root@compute1 ~]# vgcreate cinder-volumes /dev/sdb
Volume group “cinder-volumes” successfully created
yum install openstack-cinder targetcli python-keystone -y

配置 cinder各个组件的配置文件（备份配置文件，删除配置文件里的所有数据，使用提供的配置）：
vi /etc/cinder/cinder.conf
[database]
connection = mysql+pymysql://cinder:123456@**:3306/cinder
[DEFAULT]
transport_url = rabbit://openstack:RABBIT_PASS@**
auth_strategy = keystone
my_ip = 192.168.2.35
enabled_backends = lvm
glance_api_servers = http://**:9292
[keystone_authtoken]
auth_uri = http://**
auth_url = http://**
memcached_servers = **:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = cinder
password = cinder
[lvm]
volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
volume_group = cinder-volumes
iscsi_protocol = iscsi
iscsi_helper = lioadm
[oslo_concurrency]
lock_path = /var/lib/cinder/tmp
systemctl enable openstack-cinder-volume.service target.service
systemctl restart openstack-cinder-volume.service target.service
[root@** cinder]# openstack volume service list
+——————+————–+——+———+——-+—————————-+
| Binary | Host | Zone | Status | State | Updated At |
+——————+————–+——+———+——-+—————————-+
| cinder-scheduler | ** | nova | enabled | up | 2017-10-12T10:02:31.000000 |
| cinder-volume | compute1@lvm | nova | enabled | up | 2017-10-12T10:03:32.000000 |
+——————+————–+——+———+——-+—————————-+
[root@** cinder]#

9f4c5b9cdeb4acecd0348ea3aad9a723.png

在 192.168.2.53 VMEXSI主机上操作
集成 VM虚拟化

vi /etc/vmware/config

libdir = “/usr/lib/vmware”
authd.proxy.vim = “vmware-hostd:hostd-vmdb”
authd.proxy.nfc = “vmware-hostd:ha-nfc”
authd.proxy.nfcssl = “vmware-hostd:ha-nfcssl”
authd.proxy.vpxa-nfcssl = “vmware-vpxa:vpxa-nfcssl”
authd.proxy.vpxa-nfc = “vmware-vpxa:vpxa-nfc”
authd.fullpath = “/sbin/authd”
authd.soapServer = “TRUE”
vmauthd.server.alwaysProxy = “TRUE”
vhv.enable = “TRUE”
安装 VMware vCenter Appliance 的的 OVF
点进 login设置网卡

c647a17b1ad90b915629d8d1884d5ca5.png
f7d67957dbb707f88c011b7c534fc229.png
4eb78af0cc96c5e644bd59eea0f0f651.png
9391233dfc74d830a116c7cbec9cb00c.png
688185febac4a738f3df4321948b72b4.png
632752780fe36dfcbbcadde3bfdfe558.png
5c7085440e36b4d491d9d43b81c33eb1.png
8eb3fa6daa4893743966a11f14cd7a91.png
729b4658b156ec029840e77ff264ffcd.png
526d43e42c6ae41224ef4fc0c3bc2408.png
f98ecd379676c4170dd6e598a5f6c1a6.png
cbb083e7c0420cb57c98916df534f4e9.png
Service network restart
安装 VMware vCenter
浏览器打开 https://192.168.2.38:5480，登录 root 密码 vmware

集成 vmware
（1）在控制节点安装 nova-compute。
yum install openstack-nova-compute python-suds
（2）备份 nova.conf
cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
（3）修改 nova.conf 集成 VMware vCenter。
vi /etc/nova/nova.conf
添加以下配置：
在 [DEFAULT] 段落添加：
compute_driver = vmwareapi.VMwareVCDriver
在 [vmware] 段落添加：
vif_driver = nova.virt.baremetal.vif_driver.BareMetalVIFDriver
host_ip = 192.168.2.38 # vCenter 的 IP 地址
host_username = root # vCenter 用户名
host_password = vmware # vCenter 密码
datastore_regex = datastore5 # ESXi 存储
cluster_name = openstack # vCenter 群集
api_retry_count = 10
integration_bridge = VM Network # ESXi 虚拟机网络端口组
vlan_interface = vmnic5 # ESXi 网卡
fbac20c505dd5b68c1d54d934d5d1a88.png
（4）将 nova-compute 服务设置为自动启动，重新启动控制节点。
chkconfig openstack-nova-compute on
shutdown -r now
或将以下服务重启：
service openstack-nova-api restart
service openstack-nova-cert restart
service openstack-nova-consoleauth restart
service openstack-nova-scheduler restart
service openstack-nova-conductor restart
service openstack-nova-novncproxy restart
service openstack-nova-compute restart
（5）检查 OpenStack 是否已集成 VMware vCenter。
nova connectionError: HTTPSConnectionPool(host=’192.168.2.38’, port=443): Max retries exceeded with url: /sdk/vimService.wsdl (Caused by NewConnectionError(‘

self.verify = cacert if cacert else not insecure

并修改 self.verify的值为 False，如下所示：
[python] view plain copy
class RequestsTransport(transport.Transport):
def init(self, cacert=None, insecure=True, pool_maxsize=10):
transport.Transport.init(self)
# insecure flag is used only if cacert is not
# specified.
#self.verify = cacert if cacert else not insecure
self.verify = False

1fbed381bb1b44b634204a15b0bcde9c.png
到此实验结束，开始学习云计算
以上是我安装笔记。

手动安装openstack并配置虚拟化集成VM相关推荐

ubuntu20.04手动安装Openstack YOGA版本（双节点）
目录想说的话双节点手动安装openstack yoga版本环境准备网络配置 hostname解析测试网络连通性 NTP时间同步所有节点安装openstack包 controller节点安装 ...
Centos7手动安装OpenStack Mitaka版本--KeyStone安装
按照官方文档手动安装的话,基本上是复制粘贴的过程,小心点的话基本上能安装成功!如果报错我基本上干掉重来,我使用的是VM,有快照的... 创建Keystne数据库 [root@openstack-3 ~ ...
Centos7手动安装OpenStack（Stein版）
文章目录准备基础服务网络库数据库 Too many connections memcache 消息队列rabbitmq keystone 创建域.项目,用户和角色验证脚本 glance ...
MinGW 和 MSYS 的手动安装与环境配置
[2010-11-18 注] 目前MinGW已经提供了自动安装包.尽管如此,这篇文章的内容依然有效.如果需要查看关于MinGW和MSYS自动安装的内容,请移步: http://www.swingwor ...
Ubuntu 20.04 手动安装OpenStack
官网文档官方文档开始看的时候,感觉琳琅满目,不知道从哪里下手按照固有的思路,安装总是去找安装包(packages),所以,经过一大圈观光之后,最后,确定从这里开始 OpenStack packag ...
windows下手动安装composer并配置环境变量
转载地址: https://my.oschina.net/7sites/blog/209997 之前发表过一篇如何为composer设置代理的文章(请点这里),但是现在很多人用composer的win ...
Linux手动安装JDK并配置多个版本JDK--JDK配置和Jenv的配置使用
前言使用第一次使用Linux的用户,往往不知道如何配置JDK:不配置JDK,就无法运行Minecraft服务器或者是Apache Tomcat服务器等基于Java虚拟机的应用程序. 一般用户会使用: ...
elasticsearch系列一：elasticsearch（ES简介、安装amp；配置、集成Ikanalyzer）
一.ES简介 1.ES是什么? Elasticsearch 是一个开源的搜索引擎,建立在全文搜索引擎库 Apache Lucene 基础之上用 Java 编写的,它的内部使用 Lucene 做索引与 ...
Ubuntu 20.04集群手动安装OpenStack Yoga
文章目录基础配置基础中的基础软件配置 OpenStack keystone X11转发 Glance 控制节点 Placement 控制节点 Nova 控制节点计算节点 Neuron 控制节点 ...

手动安装openstack并配置虚拟化集成VM

安装服务

更改时区

mysql_secure_installation

创建 keystone数据库

授予数据库访问权限

用合适的密码替换 KEYSTONE_DBPASS。

. admin-openrc

egrep -c ‘(vmx|svm)’ /proc/cpuinfo

. admin-openrc

openstack user create –domain default –password-prompt neutron

yum install openstack-neutron-linuxbridge ebtables ipset -y

vi /etc/vmware/config

self.verify = cacert if cacert else not insecure

手动安装openstack并配置虚拟化集成VM相关推荐

最新文章

热门文章

手动安装openstack并配置虚拟化集成VM

安 装 服 务

更 改 时 区

mysql_secure_installation

创 建 keystone数 据 库

授 予 数 据 库 访 问 权 限

用 合 适 的 密 码 替 换 KEYSTONE_DBPASS。

. admin-openrc

egrep -c ‘(vmx|svm)’ /proc/cpuinfo

. admin-openrc

openstack user create –domain default –password-prompt neutron

yum install openstack-neutron-linuxbridge ebtables ipset -y

vi /etc/vmware/config

self.verify = cacert if cacert else not insecure

手动安装openstack并配置虚拟化集成VM相关推荐

最新文章

热门文章

安装服务

更改时区

创建 keystone数据库

授予数据库访问权限

用合适的密码替换 KEYSTONE_DBPASS。