openstack-node1 192.168.1.233

openstack-node2 192.168.1.234

openstack-package源配置

yum install centos-release-openstack-newton

yum install https://rdoproject.org/repos/rdo-release.rpm

yum upgrade

1、安装vim

yum install vim -y

2、安装时间同步

yum install chrony -y

vim /etc/chrony.conf

systemctl enable chronyd.service

systemctl start chronyd.service

设置时区

timedatectl set-timezone Asia/Shanghai

3、安装配置mysql

yum install -y mariadb mariadb-server MySQL-python

cp /usr/share/mysql/my-medium.cnf /etc/my.cnf

vi /etc/my.cnf

[mysqld]

default-storage-engine = innodb

innodb_file_per_table

collation-server= utf8_general_ci

init-connect = 'SET NAMES utf8'

character-set-server = utf8

systemctl enable mariadb.service

systemctl start mariadb.service

mysql_secure_installation

--create database

Keystone

mysql -u root -pcardinfolink -e "CREATE DATABASE keystone;"

mysql -u root -pcardinfolink -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';"

Glance

mysql -u root -pcardinfolink -e "CREATE DATABASE glance;"

mysql -u root -pcardinfolink -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'glance';"

Nova

mysql -u root -pcardinfolink -e "CREATE DATABASE nova;"

mysql -u root -pcardinfolink -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'nova';"

Neutron

mysql -u root -pcardinfolink -e "CREATE DATABASE neutron;"

mysql -u root -pcardinfolink -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';"

Cinder

mysql -u root -pcardinfolink -e "CREATE DATABASE cinder;"

mysql -u root -pcardinfolink -e "GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'cinder';"

RabbitMQ:

yum install rabbitmq-server

systemctl enable rabbitmq-server.service

systemctl start rabbitmq-server.service

rabbitmqctl add_user openstack openstack

rabbitmqctl set_permissions openstack ".*" ".*" ".*"

rabbitmq-plugins enable rabbitmq_management

systemctl restart rabbitmq-server.service

yum install net-tools

--Install Keystone

yum install openstack-keystone httpd mod_wsgi memcached python-memcached -y

rabbitmq-plugins enable rabbitmq_management

rabbitmq-plugins enable rabbitmq_management

配置keystone.conf文件

vim /etc/keystone/keystone.conf

##admin_token配置

随机生成一串字符

openssl rand -hex 10

b6235aa416ee61b32912

admin_token = b6235aa416ee61b32912

##database配置

connection = mysql://keystone:keystone@192.168.1.233/keystone

建表

su -s /bin/sh -c "keystone-manage db_sync" keystone

##memcache配置

servers = 192.168.1.233:11211

##token配置

provider = uuid

driver = memcache

##revoke

driver = sql

##打开debug开关

verbose = true

开启memcached

systemctl start memcached.service

systemctl enable memcached.service

配置httpd

vim /etc/httpd/conf.d/wsgi-keystone.conf

Listen 5000

Listen 35357

<VirtualHost *:5000>

WSGIDaemonProcesskeystone-public processes=5 threads=1 user=keystone group=keystonedisplay-name=%{GROUP}

WSGIProcessGroupkeystone-public

WSGIScriptAlias //usr/bin/keystone-wsgi-public

WSGIApplicationGroup %{GLOBAL}

WSGIPassAuthorization On

<IfVersion >= 2.4>

ErrorLogFormat "%{cu}t%M"

</IfVersion>

ErrorLog/var/log/httpd/keystone-error.log

CustomLog /var/log/httpd/keystone-access.logcombined

<Directory /usr/bin>

<IfVersion >= 2.4>

Require all granted

</IfVersion>

<IfVersion < 2.4>

Order allow,deny

Allow from all

</IfVersion>

</Directory>

</VirtualHost>

<VirtualHost *:35357>

WSGIDaemonProcesskeystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}

WSGIProcessGroup keystone-admin

WSGIScriptAlias //usr/bin/keystone-wsgi-admin

WSGIApplicationGroup %{GLOBAL}

WSGIPassAuthorization On

<IfVersion >= 2.4>

ErrorLogFormat "%{cu}t%M"

</IfVersion>

ErrorLog/var/log/httpd/keystone-error.log

CustomLog/var/log/httpd/keystone-access.log combined

<Directory /usr/bin>

<IfVersion >= 2.4>

Require all granted

</IfVersion>

<IfVersion < 2.4>

Order allow,deny

Allow from all

</IfVersion>

</Directory>

</VirtualHost>

vi /etc/httpd/conf/httpd.conf

ServerName 192.168.1.233:80

yum install openstack-selinux

systemctl  start httpd.service

export OS_TOKEN=b6235aa416ee61b32912

export OS_URL=http://192.168.1.233:35357/v3

export OS_IDENTITY_API_VERSION=3

export OS_TOKEN=b6235aa416ee61b32912

export OS_URL=http://192.168.1.233:35357/v3

export OS_IDENTITY_API_VERSION=3

export OS_AUTH_URL=http://192.168.1.233:35357/v3

openstack project create --domain default --description "Admin Project" admin