开源OpenStack实战

公有云

一个用户就是一个VPC虚拟私有云

在同一个VPC中的不同子网可以互通

不同VPC之间不能互通

一个VPC 就属于regin一个路由器

VPC不可以跨Regin

两个租户是不可以打通的

Regin:区域 代表一个数据中心 比如 北京 上海 广州 新加坡

数据中心之间不能互通

私网弹性ip绑定当了内部网络的路由器上

可用区:AZ

一个区域包含多个 可用区

每个AZ都拥有独立的供电和网络系统

同一个region的不同AZ之间内网是互通的

如果性能和延迟有要求,建议多个互访的业务放在同一个AZ中

Apache mysql

MySQL主备 建议放在同一个Regin

弹性IP就相当于一个公网地址

安全组的概念相当于防火墙规则

不同的VPC内IP地址可以重叠

管理员做的事

1.上传镜像 选共享和公有

2.云主机类型

3.网络 创建公有网络

4.创建项目 创建用户

用用户进来user1

1.设置私有网络 随便设 IP地址 可以不设网关 点激活DHCP

2.设置路由 设置网关public 添加接口(内部接口)

3.创建安全组 添加规则 创建秘钥对(私钥)申请浮动ip地址

4.创建云主机 关联的是私有网络 绑定浮动IP地址

删除 用户user

1.终止实例

2.删除秘钥对

3.释放弹性IP 删除安全组

删除路由

1.清除网关 2.删除接口 3.删除路由器 4.删除网络

删除admin

去identity删除项目再删除用户

[root@controller ~]# ip netns ls #查看路由器
qdhcp-609d8813-4efb-417a-b65f-d7dde64874d1
qrouter-4a0b6433-e7f4-487d-b15c-a8b3605aaaf7
qdhcp-9475de03-a228-4499-9d56-3a3805c06740
[root@controller ~]# ip netns delete qdhcp-9475de03-a228-4499-9d56-3a3805c06740 #删除路由器的DHCP

登录云主机

先把秘钥传给controller节点,再修改权限,最后登录
[root@controller ~]# chmod 400 key100.pem
[root@controller ~]# ll key100.pem
-r--------. 1 root root 1675 Aug 30 16:51 key100.pem
[root@controller ~]# ssh -i key100.pem cloud-user@192.168.100.12
Last login: Tue Aug 30 13:37:35 2022 from 192.168.100.50
[cloud-user@huawei-cloud ~]$
查询NAT路由表
[root@controller ~]#  netns exec qrouter-4a0b6433-e7f4-487d-b15c-a8b3605aaaf7 iptables -t nat -nL

创建云主机

查询云主机
[root@controller ~]# nova --os-username user1 --os-tenant-name hqy --os-auth-url=http://192.168.100.80:5000/v2.0/ list
[root@controller ~]# nova --os-username user1 --os-tenant-name hqy --os-auth-url=http://192.168.100.80:5000/v2.0/  --os-password redhat list
+--------------------------------------+--------------+--------+------------+-------------+-----------------------------------------+
| ID                                   | Name         | Status | Task State | Power State | Networks                                |
+--------------------------------------+--------------+--------+------------+-------------+-----------------------------------------+
| fcf51f41-fc75-47db-89c7-d82d7c4798f4 | huawei_cloud | ACTIVE | -          | Running     | IT_network=192.168.88.1, 192.168.100.12 |
+--------------------------------------+--------------+--------+------------+-------------+-----------------------------------------+
[root@controller ~(keystone_user1)]# nova list删除云主机
[root@controller ~(keystone_user1)]# nova delete huawei_cloud
Request to delete server huawei_cloud has been accepted.
设置变量
[root@controller ~]# cp keystonerc_admin keystonerc_user1
[root@controller ~]# vi keystonerc_user1
export OS_USERNAME=user1
export OS_TENANT_NAME=hqy
export OS_PASSWORD=redhat
export OS_AUTH_URL=http://192.168.100.80:5000/v2.0/
export OS_REGION_NAME=WuHan
export PS1='[\u@\h \W(keystone_user1)]\$ '[root@controller ~]# source keystonerc_user1
[root@controller ~(keystone_user1)]# echo $OS_USERNAME
user1
[root@controller ~(keystone_user1)]# nova list

NTP服务器查OpenStack界面

[root@controller ~(keystone_user1)]# scp keystonerc_user1 root@ntp:/root
[root@controller ~(keystone_user1)]# which nova
/usr/bin/nova
[root@controller ~(keystone_user1)]# rpm -qf /usr/bin/nova
python-novaclient-2.20.0-1.el7ost.noarch
[root@ntp ~(keystone_user1)]# yum -y install python-novaclient-2.20.0-1.el7ost.noarch  #安装OpenStack客户端
[root@ntp ~(keystone_user1)]# nova list
+--------------------------------------+--------------+--------+------------+-------------+-----------------------------------------+
| ID                                   | Name         | Status | Task State | Power State | Networks                                |
+--------------------------------------+--------------+--------+------------+-------------+-----------------------------------------+
| fcf51f41-fc75-47db-89c7-d82d7c4798f4 | huawei_cloud | ACTIVE | -          | Running     | IT_network=192.168.88.1, 192.168.100.12 |

Horizon

Nova

[root@controller ~]# cd /etc/nova/
[root@controller ~]#  source keystonerc_user1
[root@controller ~(keystone_user1)]# nova list
删除云主机
[root@controller ~(keystone_user1)]# nova delete huawei_cloud
Request to delete server huawei_cloud has been accepted.
删除秘钥对
[root@controller ~(keystone_user1)]# nova --help |grep key[root@controller ~(keystone_user1)]# nova keypair-list 查询秘钥对
+--------+-------------------------------------------------+
| Name   | Fingerprint                                     |
+--------+-------------------------------------------------+
| key100 | 88:48:bf:84:fc:f9:fc:3b:71:43:80:01:01:8f:22:8d |
+--------+-------------------------------------------------+
[root@controller ~(keystone_user1)]# nova keypair-delete key100

glance

[root@controller ~]# vi /etc/glance/glance-cache.conf
[root@controller ~]# cd /var/lib/glance/images/ #打开镜像存放的位置
[root@controller images]# ll -h  #查看镜像的大小和ID号
total 675M
-rw-r-----. 1 glance glance 341M Jun  5 05:10 081f5061-3ca3-403c-8578-bb23bea5c715
-rw-r-----. 1 glance glance 334M Aug 30 01:42 4a9ed2fe-afee-4162-8bbb-d45273870106[root@controller ~(keystone_user1)]# glance image-list #查glance镜像
+--------------------------------------+---------+-------------+------------------+-----------+--------+
| ID                                   | Name    | Disk Format | Container Format | Size      | Status |
+--------------------------------------+---------+-------------+------------------+-----------+--------+
| 4a9ed2fe-afee-4162-8bbb-d45273870106 | centos7 | qcow2       | bare             | 349966336 | active |
| 081f5061-3ca3-403c-8578-bb23bea5c715 | m1.web  | qcow2       | bare             | 356777984 | active |
+--------------------------------------+---------+-------------+------------------+-----------+--------+
[root@controller ~(keystone_user1)]#

neutron

[root@controller ~]# cd /etc/neutron/
查看路由信息
[root@controller ~(keystone_user1)]# neutron router-list
[root@controller ~(keystone_user1)]# neutron router-list| id                                   | name     | external_gateway_info                                                                                  |
+--------------------------------------+----------+-----------------------------
| 4a0b6433-e7f4-487d-b15c-a8b3605aaaf7 | my-route | {"network_id": "9475de03-a228-4499-9d56-3a3805c06740", "enable_snat": true, "external_fixed_ips": [{"subnet_id": "2ff64bab-b970-4e70-88f3-a285f3426d91", "ip_address": "192.168.100.11"}]} |
删除路由的网关
[root@controller ~(keystone_user1)]# neutron  router-gateway-clear my-route
删除接口
[root@controller ~(keystone_user1)]# neutron help router-interface-delete
[root@controller ~(keystone_user1)]# neutron subnet-list
+--------------------------------------+---------------+------------------+------------------------------------------------------+
| id                                   | name          | cidr             | allocation_pools                                     |
+--------------------------------------+---------------+------------------+------------------------------------------------------+
| 6f09a606-7a08-4819-992c-e9146df6dc41 | it_subnet01   | 192.168.88.0/24  | {"start": "192.168.88.1", "end": "192.168.88.253"}   |
| 2ff64bab-b970-4e70-88f3-a285f3426d91 | public-subnet | 192.168.100.0/24 | {"start": "192.168.100.10", "end": "192.168.100.20"} |
+--------------------------------------+---------------+------------------+------------------------------------------------------+
删除路由子接口
[root@controller ~(keystone_user1)]# neutron router-interface-delete my-route subnet=it_subnet01
[root@controller ~(keystone_user1)]# neutron router-delete my-route 路由接口删掉
Deleted router: my-route
[root@controller ~(keystone_user1)]# neutron subnet-delete  it_subnet01 删除子网
[root@controller ~(keystone_user1)]# neutron net-list
+--------------------------------------+------------+-------------------------------------------------------+
| id                                   | name       | subnets                                               |
+--------------------------------------+------------+-------------------------------------------------------+
| 9475de03-a228-4499-9d56-3a3805c06740 | public     | 2ff64bab-b970-4e70-88f3-a285f3426d91 192.168.100.0/24 |
| 609d8813-4efb-417a-b65f-d7dde64874d1 | IT_network |                                                       |
[root@controller ~(keystone_user1)]# neutron net-delete  IT_network 删除内部网络
[root@controller ~(keystone_user1)]# neutron --help |grep sec
[root@controller ~(keystone_user1)]# neutron security-group-list
+--------------------------------------+---------+-------------+
| id                                   | name    | description |
+--------------------------------------+---------+-------------+
| 1ca4701c-7636-4c3c-be41-9c99e0bc08a4 | default | default     |
| 93a1f7e1-57f4-4171-8841-a2ea2ac708e0 | sg01    | s01         |
删除安全组
[root@controller ~(keystone_user1)]# neutron security-group-delete sg01
删除浮动ip
[root@controller ~(keystone_user1)]# neutron help floatingip-delete 浮动IP地址需要删除ID
[root@controller ~(keystone_user1)]# neutron floatingip-delete 516e58e2-0628-4461-988b-867151c00b6b
删除

cinder

[root@controller ~]# cd /etc/cinder/
[root@controller nova]# cd /var/log/cinder/
[root@controller nova]# tail -f * |grep -iE '(err|warn)'
[root@controller nova]# tail -f * |grep -iE -A3 -B3 '(err|warn)'
[root@controller nova]# tail -f scheduler.log |grep -iE -A3 -B3 '(varn|err
[root@controller cinder]# lvdisplay
[root@controller cinder]# vgdisplay
查询cinder的磁盘信息
[root@controller ~]# cinder --os-username user1 --os-tenant-name hqy --os-auth-url=http://192.168.100.80:5000/v2.0/  --os-password redhat list
+--------------------------------------+--------+--------------+------+-------------+----------+--------------------------------------+
|                  ID                  | Status | Display Name | Size | Volume Type | Bootable |             Attached to              |
+--------------------------------------+--------+--------------+------+-------------+----------+--------------------------------------+
| cbf7e256-e571-471c-961d-c57e86bf13ee | in-use |     hat1     |  1   |     None    |  false   | fcf51f41-fc75-47db-89c7-d82d7c4798f4 |
+--------------------------------------+--------+--------------+------+-------------+----------+--------------------------------------+
[root@controller ~(keystone_user1)]# cinder list
+--------------------------------------+-----------+--------------+------+-------------+----------+-------------+
|                  ID                  |   Status  | Display Name | Size | Volume Type | Bootable | Attached to |
+--------------------------------------+-----------+--------------+------+-------------+----------+-------------+
| cbf7e256-e571-471c-961d-c57e86bf13ee | available |     hat1     |  1   |     None    |  false   |             |
+--------------------------------------+-----------+--------------+------+-------------+----------+-------------+
[root@controller ~(keystone_user1)]# cinder delete hat1
[root@controller ~(keystone_user1)]# cinder list
+----+--------+--------------+------+-------------+----------+-------------+
| ID | Status | Display Name | Size | Volume Type | Bootable | Attached to |
+----+--------+--------------+------+-------------+----------+-------------+

heat

ceilometer

keystone

swift

删除swift对象容器
[root@controller ~(keystone_user1)]# swift delete IT

在admin中的项目添加swift

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-ArCRGj29-1663149614800)(C:\Users\27119\AppData\Roaming\Typora\typora-user-images\image-20220830205821902.png)]

然后在user中选择对象存储,创建容器上传文件

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-5loA4FHg-1663149614801)(C:\Users\27119\AppData\Roaming\Typora\typora-user-images\image-20220830210133897.png)]

在admin中删除网络,镜像服务

删除网络
[root@controller ~(keystone_user1)]# source keystonerc_admin
[root@controller ~(keystone_admin)]# neutron net-list
+--------------------------------------+--------+-------------------------------------------------------+
| id                                   | name   | subnets                                               |
+--------------------------------------+--------+-------------------------------------------------------+
| 9475de03-a228-4499-9d56-3a3805c06740 | public | 2ff64bab-b970-4e70-88f3-a285f3426d91 192.168.100.0/24 |
+--------------------------------------+--------+-------------------------------------------------------+
[root@controller ~(keystone_admin)]# neutron net-delete public
删除镜像
[root@controller ~(keystone_admin)]# glance image-list
+--------------------------------------+---------+-------------+------------------+-----------+--------+
| ID                                   | Name    | Disk Format | Container Format | Size      | Status |
+--------------------------------------+---------+-------------+------------------+-----------+--------+
| 4a9ed2fe-afee-4162-8bbb-d45273870106 | centos7 | qcow2       | bare             | 349966336 | active |
| 081f5061-3ca3-403c-8578-bb23bea5c715 | m1.web  | qcow2       | bare             | 356777984 | active |
+--------------------------------------+---------+-------------+------------------+-----------+--------+
[root@controller ~(keystone_admin)]# glance image-delete  centos7
删除受保护的镜像
[root@controller ~(keystone_admin)]# glance image-show m1.web
[root@controller ~(keystone_admin)]# glance help image-update
[root@controller ~(keystone_admin)]# glance  image-update --is-protected false m1.web
+------------------+--------------------------------------+
| Property         | Value                                |
+------------------+--------------------------------------+
| checksum         | 0f3dbcece8ea9d9c5b256e7b274250f0     |
| container_format | bare                                 |
| created_at       | 2022-06-04T21:09:45                  |
| deleted          | False                                |
| deleted_at       | None                                 |
| disk_format      | qcow2                                |
| id               | 081f5061-3ca3-403c-8578-bb23bea5c715 |
| is_public        | True                                 |
| min_disk         | 10                                   |
| min_ram          | 2048                                 |
| name             | m1.web                               |
| owner            | f6d20b148bdc4aa881722fa17df0edb5     |
| protected        | True                              |
| size             | 356777984                            |
| status           | active                               |
| updated_at       | 2022-08-31T01:08:52                  |
| virtual_size     | None                                 |
+------------------+--------------------------------------+
[root@controller ~(keystone_admin)]# glance image-delete m1.web
删除规格
[root@controller ~(keystone_admin)]# nova --help |grep fla
[root@controller ~(keystone_admin)]# nova flavor-list
+--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+
| ID                                   | Name      | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public |
+--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+
| 1                                    | m1.tiny   | 512       | 1    | 0         |      | 1     | 1.0         | True      |
| 2                                    | m1.small  | 2048      | 20   | 0         |      | 1     | 1.0         | True      |
| 3                                    | m1.medium | 4096      | 40   | 0         |      | 2     | 1.0         | True      |
| 4                                    | m1.large  | 8192      | 80   | 0         |      | 4     | 1.0         | True      |
| 5                                    | m1.xlarge | 16384     | 160  | 0         |      | 8     | 1.0         | True      |
| da1b444e-01a3-411b-be6c-b4083f64c26e | w2.small  | 2048      | 10   | 0         |      | 1     | 1.0         | True      |
+--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+
[root@controller ~(keystone_admin)]# nova flavor-delete  w2.small
删除用户
[root@controller ~(keystone_admin)]# keystone user-list
+----------------------------------+------------+---------+----------------------+
|                id                |    name    | enabled |        email         |
+----------------------------------+------------+---------+----------------------+
| 90a3f71704324b6ebabe408b7710cc8c |   admin    |   True  |    root@localhost    |
| 4d9a9a5f0627466c85afc135024ca264 | ceilometer |   True  | ceilometer@localhost |
| f303370bf9ad44a7a1261838c53db79e |   cinder   |   True  |   cinder@localhost   |
| 57a25a11befd470bb08e4f849153807a |   glance   |   True  |   glance@localhost   |
| 9a076111970445d28c4d07fef201a08a |    hony    |   True  |                      |
| 1e1b06b236364e7a8313aabd6ca2441a |  neutron   |   True  |  neutron@localhost   |
| 67afebf91dfb45f6b29eba4ce301f9a9 |    nova    |   True  |    nova@localhost    |
| 4643f95bf6a047efb68b4bcfc56b86db |   swift    |   True  |   swift@localhost    |
| 5f89a7365fe94d7c96150bc3d870f9fc |   user1    |   True  |    user1@hqy.com     |
+----------------------------------+------------+---------+---------[root@controller ~(keystone_admin)]# keystone user-delete user1
删除项目/租户
[root@controller ~(keystone_admin)]# keystone tenant-list
+----------------------------------+----------+---------+
|                id                |   name   | enabled |
+----------------------------------+----------+---------+
| f6d20b148bdc4aa881722fa17df0edb5 |  admin   |   True  |
| 768bb44e5cb846cfa3abae5d98d43785 |   hqy    |   True  |
| dbc1b47a90b14d79aacdf10b8c5336de | services |   True  |
+----------------------------------+----------+---------+
[root@controller ~(keystone_admin)]# keystone tenant-delete hqy

OpenStack创建流程

管理员角色

一、创建租户、创建用户、用户关联用户

创建租户
[root@controller ~(keystone_admin)]# keystone --help |grep tenant
[root@controller ~(keystone_admin)]# keystone help tenant-create
[root@controller ~(keystone_admin)]# keystone tenant-create --name hqy
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |                                  |
|   enabled   |               True               |
|      id     | 0e36403b9e2a434ea9f6dd2db1066b1b |
|     name    |               hqy                |
+-------------+----------------------------------+
创建用户并关联
[root@controller ~(keystone_admin)]# keystone help user-create
[root@controller ~(keystone_admin)]# keystone user-create --name user1 --tenant hqy --pass redhat
+----------+----------------------------------+
| Property |              Value               |
+----------+----------------------------------+
|  email   |                                  |
| enabled  |               True               |
|    id    | 7accfbfd31634549b402e71b7f4b4850 |
|   name   |              user1               |
| tenantId | 0e36403b9e2a434ea9f6dd2db1066b1b |
| username |              user1               |
+----------+----------------------------------+
创建规格 <>必选项
[root@controller ~(keystone_admin)]# keystone help user-create
[root@controller ~(keystone_admin)]# nova flavor-create m1.web auto 1024 10 2
+--------------------------------------+--------+-----------+------+-----------+------+-------+-------------+-----------+
| ID                                   | Name   | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public |
+--------------------------------------+--------+-----------+------+-----------+------+-------+-------------+-----------+
| 4e78a9b5-346b-4720-9e66-12a20aa0ad78 | m1.web | 1024      | 10   | 0         |      | 2     | 1.0         | True      |
+--------------------------------------+--------+-----------+------+

二、上传镜像

先把镜像上传到虚拟机上
[root@controller ~(keystone_admin)]# ls
anaconda-ks.cfg  key100.pem        keystonerc_user1
answers.txt      keystonerc_admin  small.img
[root@controller ~(keystone_admin)]# glance --help |grep image
[root@controller ~(keystone_admin)]# glance help image-create
[root@controller ~(keystone_admin)]# glance image-create --name huawei_cloud --disk-format qcow2 --container-format bare --file /root/small.img --is-public True --progress
[=============================>] 100%
+------------------+--------------------------------------+
| Property         | Value                                |
+------------------+--------------------------------------+
| checksum         | 0f3dbcece8ea9d9c5b256e7b274250f0     |
| container_format | bare                                 |
| created_at       | 2022-08-31T02:08:11                  |
| deleted          | False                                |
| deleted_at       | None                                 |
| disk_format      | qcow2                                |
| id               | 84689ccc-1361-4012-8fbc-5b36aa8b2421 |
| is_public        | True                                 |
| min_disk         | 0                                    |
| min_ram          | 0                                    |
| name             | huawei_cloud                         |
| owner            | f6d20b148bdc4aa881722fa17df0edb5     |
| protected        | False                                |
| size             | 356777984                            |
| status           | active                               |
| updated_at       | 2022-08-31T02:08:13                  |
| virtual_size     | None                                 |
+------------------+--------------------------------------+

三、创建外部网络

[root@controller ~(keystone_admin)]# neutron net-create --tenant-id hqy public
[root@controller ~(keystone_admin)]# neutron net-list
+--------------------------------------+--------+---------+
| id                                   | name   | subnets |
+--------------------------------------+--------+---------+
| 27fed1dc-86d7-4302-a390-976e7f25428e | public |         |
+--------------------------------------+--------+---------+
[root@controller ~(keystone_admin)]# neutron help net-update
[root@controller ~(keystone_admin)]# neutron net-update --router:external=True public
[root@controller ~(keystone_admin)]# neutron net-update --shared=True public
[root@controller ~(keystone_admin)]# neutron net-show public
+---------------------------+--------------------------------------+
| Field                     | Value                                |
+---------------------------+--------------------------------------+
| admin_state_up            | True                                 |
| id                        | 2a68e561-d842-4a22-b289-4fb9de0db23b |
| name                      | public                               |
| provider:network_type     | vxlan                                |
| provider:physical_network |                                      |
| provider:segmentation_id  | 11                                   |
| router:external           | True                                 |
| shared                    | True                                 |
| status                    | ACTIVE                               |
| subnets                   |                                      |
| tenant_id                 | hqy                                  |
+---------------------------+--------------------------------------+
[root@controller ~(keystone_admin)]# neutron help subnet-create 
创建子网
[root@controller ~(keystone_admin)]# neutron subnet-create --name publicsubnet01 --allocation-pool start=192.168.100.61,end=192.168.100.70 --disable-dhcp public 192.168.100.0/24

租户角色

1.创建私有网络

[root@controller ~(keystone_admin)]# source keystonerc_user1
[root@controller ~(keystone_user1)]# neutron net-create private
[root@controller ~(keystone_user1)]# neutron help subnet-create
[root@controller ~(keystone_user1)]# neutron subnet-create --name subnet02 --enable-dhcp private 192.168.88.0/24
Created a new subnet:
+-------------------+----------------------------------------------------+
| Field             | Value                                              |
+-------------------+----------------------------------------------------+
| allocation_pools  | {"start": "192.168.88.2", "end": "192.168.88.254"} |
| cidr              | 192.168.88.0/24                                    |
| dns_nameservers   |                                                    |
| enable_dhcp       | True                                               |
| gateway_ip        | 192.168.88.1                                       |
| host_routes       |                                                    |
| id                | 975450b3-021d-4e92-bd4e-4a064eb855db               |
| ip_version        | 4                                                  |
| ipv6_address_mode |                                                    |
| ipv6_ra_mode      |                                                    |
| name              | subnet02                                           |
| network_id        | 98e09d62-a542-4c07-9ee4-f37031466f37               |
| tenant_id         | 0e36403b9e2a434ea9f6dd2db1066b1b                   |

2.创建路由

创建路由
[root@controller ~(keystone_user1)]# neutron router-create my_route
设置网关
[root@controller ~(keystone_user1)]# neutron router-gateway-set my_route public
添加路由接口
[root@controller ~(keystone_user1)]# neutron router-interface-add my_route subne=subnet02

3.创建安全组

创建安全组
[root@controller ~(keystone_user1)]# neutron security-group-create SG01
查询安全组规则
[root@controller ~(keystone_user1)]# neutron help security-group-rule-create
添加安全组规则
[root@controller ~(keystone_user1)]# neutron  security-group-rule-create    --direction=ingress --ethertype=IPv4  --protocol=tcp --port-range-min=22  --port-range-max=22 SG01
Created a new security_group_rule:
+-------------------+--------------------------------------+
| Field             | Value                                |
+-------------------+--------------------------------------+
| direction         | ingress                              |
| ethertype         | IPv4                                 |
| id                | 55ff8166-60d2-464d-b2a8-b25f6dee2856 |
| port_range_max    | 22                                   |
| port_range_min    | 22                                   |
| protocol          | tcp                                  |
| remote_group_id   |                                      |
| remote_ip_prefix  |                                      |
| security_group_id | b02e910d-74fc-4387-b77c-72b6420720b1 |
| tenant_id         | 0e36403b9e2a434ea9f6dd2db1066b1b     |
+-------------------+--------------------------------------+
放行80端口
[root@controller ~(keystone_user1)]# neutron  security-group-rule-create    --direction=ingress --ethertype=IPv4  --protocol=tcp --port-range-min=80  --port-range-max=80 SG01
放行ICMP协议
[root@controller ~(keystone_user1)]# neutron  security-group-rule-create    --direction=ingress --ethertype=IPv4  --protocol=icmp SG01

4.创建私钥

[root@controller ~(keystone_user1)]# nova keypair-add key888 > key888.pub
[root@controller ~(keystone_user1)]# mv key888.pub key888.pem
[root@controller ~(keystone_user1)]# chmod 400 key888.pem

5.创建浮动ip

[root@controller ~(keystone_user1)]# neutron floatingip-create public
Created a new floatingip:
+---------------------+--------------------------------------+
| Field               | Value                                |
+---------------------+--------------------------------------+
| fixed_ip_address    |                                      |
| floating_ip_address | 192.168.100.62                       |
| floating_network_id | 2a68e561-d842-4a22-b289-4fb9de0db23b |
| id                  | abe27c23-52e1-479c-b45d-6c1d16fee578 |
| port_id             |                                      |
| router_id           |                                      |
| status              | DOWN                                 |
| tenant_id           | 0e36403b9e2a434ea9f6dd2db1066b1b     |
+---------------------+--------------------------------------+

6.创建云主机

查询云主机
[root@controller ~(keystone_user1)]# nova --help |grep boot
创建云主机
[root@controller ~(keystone_user1)]# nova boot --flavor m1.web  --image huawei_cloud --nic net-id=98e09d62-a542-4c07-9ee4-f37031466f37  --key-name key888 --security-group SG01 1

7.绑定浮动ip

[root@controller ~(keystone_user1)]# neutron port-list
+--------------------------------------+------+-------------------+-------------------------------------------------------------------------------------+
| id                                   | name | mac_address       | fixed_ips                                                                           |
+--------------------------------------+------+-------------------+-------------------------------------------------------------------------------------+
| 49edecbd-9891-433a-b46b-e32de4336d45 |      | fa:16:3e:4e:6c:1d | {"subnet_id": "975450b3-021d-4e92-bd4e-4a064eb855db", "ip_address": "192.168.88.3"} |
| 6bf47749-3b75-4912-bbfe-22cb12193c4a |      | fa:16:3e:ac:b5:cf | {"subnet_id": "975450b3-021d-4e92-bd4e-4a064eb855db", "ip_address": "192.168.88.4"} |
| d23e7986-f024-439c-b781-7dc13c75a142 |      | fa:16:3e:2c:a9:e3 | {"subnet_id": "975450b3-021d-4e92-bd4e-4a064eb855db", "ip_address": "192.168.88.1"} |
[root@controller ~(keystone_user1)]#  neutron floatingip-associate  abe27c23-52e1-479c-b45d-6c1d16fee578 6bf47749-3b75-4912-bbfe-22cb12193c4a

8.登录云主机

[root@controller ~(keystone_user1)]# ssh -i key888.pem cloud-user@192.168.100.62

OpenStack基本命令

查询所有的服务
[root@controller ~]# openstack-service status
查看Nova配置
[root@controller ~]# vi /etc/nova/nova.conf
重启Nova服务
[root@controller ~]# systemctl restart openstack-nova-novncproxy.service
[root@controller ~]# systemctl restart nova
[root@controller ~]# cd /etc/libvirt/qemu
[root@controller qemu]# ls
instance-00000005.xml  networks

_address": “192.168.88.1”} |
[root@controller ~(keystone_user1)]# neutron floatingip-associate abe27c23-52e1-479c-b45d-6c1d16fee578 6bf47749-3b75-4912-bbfe-22cb12193c4a


#### 8.登录云主机

[root@controller ~(keystone_user1)]# ssh -i key888.pem cloud-user@192.168.100.62

## OpenStack基本命令

查询所有的服务
[root@controller ~]# openstack-service status
查看Nova配置
[root@controller ~]# vi /etc/nova/nova.conf
重启Nova服务
[root@controller ~]# systemctl restart openstack-nova-novncproxy.service
[root@controller ~]# systemctl restart nova
[root@controller ~]# cd /etc/libvirt/qemu
[root@controller qemu]# ls
instance-00000005.xml networks


OpenStack实战相关推荐

  1. 《OpenStack实战》——第1章 介绍OpenStack 1.1OpenStack是什么

    本节书摘来自异步社区<OpenStack实战>一书中的第1章,第1.1节,作者: [美]V. K. Cody Bumgardner(V. K. 科迪•布姆加德纳)著,更多章节内容可以访问云 ...

  2. 《OpenStack 实战》内容概览与作者采访

    <OpenStack 实战> 是曼宁新近出版的一本旨在为读者介绍用于云计算(IaaS)的 OpenStack平台.InfoQ 借新书发布的机会采访了本书的作者:V. K. Cody Bum ...

  3. 开源云平台Openstack实战部署实习报告

    毕业实习是一个大学生从大学校园生活到社会实践生活的一个过渡,让我们将校园里所学的理论知识和实际操作相结合,为进入社会务实基础.学校开设多种实习形式,考虑各个方面的因素,最终选择了高明老师的开源云平台O ...

  4. Openstack 实战讲解之-----06-计算节点配置

    一 控制节点服务状态 [root@linux-node1 ~]# nova service-list +----+------------------+-------------+---------- ...

  5. Openstack 实战讲解之-----------04-控制节点glance服务安装配置

    一.Glance介绍:  1.1 glance主要是由三部分组成: glance-api:接收云系统镜像的创建,删除,读取请求,类似nova-api,通过其他模块(glance-registry及im ...

  6. OpenStack实战分享:Kolla多节点部署加Ceph后端

    1.环境介绍 一台物理机ESXi系统,一个网口接的物理网络,ESXi上装3台虚拟机分别为kolla-1,kola-2,kola-3,每台虚拟机三个虚拟网卡,三个网口全部接入到esxi的标准交换机VM ...

  7. 小拍荐书 | 实战+详解,带你畅游云端运算世界——OpenStack

    文 | 半夏 学习是一个持续不断的过程,在互联网技术里畅游的程序员们,对学习的渴望更是难以穷尽,"小拍荐书"每周五为大家推荐与技术相关的书籍,方便大家在周末适时充电~ 小拍的推荐只 ...

  8. 2019最新老男孩JAVA架构师之路成长课程实战

    下载地址:百度网盘 |____43.高可用架构设计与实践           |____15.高可用架构设计之高性能数据提交与存储篇           |____14.高可用架构设计之基于堆栈分析篇 ...

  9. 零基础学习openstack【完整中级篇】及openstack资源汇总

    1.你是如何学习openstack的? 2.你对openstack的组件了解多少? 3.你认为openstack该如何学习? 一直想写关于openstack的方面的内容,今天终于整理完成.算是完成一桩 ...

最新文章

  1. ITK VTK CTK QT 跨平台联合开发之 一
  2. 百度搜索 带网页特效的关键词
  3. 梭子鱼邮件归档设备配置
  4. SAP Spartacus B2B Unit page convertListItem方法的工作原理
  5. 考研计算机专业介绍,2021考研:计算机专业考试科目简介
  6. 第四十六期:最近程序员频繁被抓,如何避免面向监狱编程?!
  7. java中能对属性封装吗_JAVA中的封装
  8. Redis07-对象结构体redisObject
  9. 大数据分析中常见的分析模型
  10. 硬件设计基础:32种EMC标准电路
  11. Python菜鸟教程学习笔记
  12. 考研没过线也能录取?13种特殊录取方式!
  13. 增强的字节码反编译工具:Enhanced Class Decompiler
  14. 拿下多家主机厂数百万前装定点,禾赛科技激光雷达量产进程加速
  15. leetcode:1000. 合并石头的最低成本(区间dp,困难)
  16. 更改qq服务器中文件夹权限,win10QQ提示安装路径无效您没有权限的两种解决办法...
  17. c语言把bit数据合为一个字节,C语言中怎么定义bit型数据
  18. Buzz 多用途 WordPress主题[v1.10]
  19. 184页10万字智慧城市公共服务中台:业务和数据中台建设方案
  20. 西门子SMART200 通过Modbus 读取温湿度传感器数据实例

热门文章

  1. Thinkpad x250安装Windows10后指纹识别的问题
  2. MySQL优化之执行计划
  3. UTC时间和CST时间
  4. 天下所有的事,都是为了利益,都是按利益逻辑规律在运行,发生的一切事情都可以用利益逻辑来解释
  5. flvplayer.swfnbsp;flv视频播放器…
  6. SpringSecurity自定义多Provider时提示No AuthenticationProvider found for问题的解决方案与原理(二)
  7. DALAO们好我是新手
  8. ZAFU_2021_1_26_2021寒假个人赛第二场题解
  9. 互联网巨头“赢家通吃”,会产生哪些严重后果?
  10. 尤雨溪:重头来过的 Vue 3 带来了什么?