Openstack 多节点的企业私有云平台搭建

这里采用的是虚拟机做的一个Openstack 多节点的企业私有云平台测试，仅供参考

编号	系统	主机名–身份	IP
@1	centos7	ct–控制节点	NAT：eth0=192.168.11.51 主机：eth1=192.168.10.41
@2	centos7	c1–计算节点	NAT：eth0=192.168.11.52 主机：eth1=192.168.10.42

@1@1@1
[root@local ~]# hostnamectl set-hostname ct //修改主机名@1改为ct @2改为c1
[root@ct ~]# cat >> /etc/hosts <<EOF
192.168.10.41 ct
192.168.10.42 c1
192.168.10.11 b1
EOF
配置yum源
[root@ct ~]# yum -y install httpd //使用httpd共享
[root@ct ~]# sed -i ‘/#S/s/#//’ /etc/httpd/conf/httpd.conf
[root@ct ~]# vmware-hgfsclient //注意共享目录
html
[root@ct ~]# vmhgfs-fuse .host:/html /var/www/html/ -o subtype=vmhgfs-fuse,allow_other //注意目录挂载位置
[root@ct ~]# systemctl start httpd && systemctl enable httpd
[root@ct ~]# echo “.host:/html /var/www/html/ fuse.vmhgfs-fuse allow_other,defaults 0 0”>> /etc/fstab //写入开机自动挂载
[root@ct ~]# vim /etc/yum.repos.d/local.repo //编辑yum源文件

[base]
name=base
baseurl=http://192.168.11.51/base
enabled=1
gpgcheck=0
[centos-openstack-train]
name=centos-openstack-train
baseurl=http://192.168.11.51/centos-openstack-train
enabled=1
gpgcheck=0
[rdo-qemu-ev]
name=rdo-qemu-ev
baseurl=http://192.168.11.51/rdo-qemu-ev
enabled=1
gpgcheck=0
[centos-ceph-nautilus]
name=centos-ceph-nautilus
baseurl=http://192.168.11.51/centos-ceph-nautilus
enabled=1
gpgcheck=0
[extras]
name=extras
baseurl=http://192.168.11.51/extras
enabled=1
gpgcheck=0
[updates]
name=updates
baseurl=http://192.168.11.51/updates
enabled=1
gpgcheck=0

[root@ct ~]# scp /etc/yum.repos.d/local.repo c1:/etc/yum.repos.d/
[root@ct ~]# scp /etc/hosts c1:/etc/hosts
@1/@2@1/@2
@1/@2@1/@2
[root@ct ~]# date //时间要差不多，差得多就同步
[root@ct ~]# yum -y remove NetworkManager
[root@ct ~]# yum repolist
[root@ct ~]# yum -y update //升级版本
[root@ct ~]# cat /etc/redhat-release
CentOS Linux release 7.7.1908 (Core)
[root@ct ~]# rm -f /etc/yum.repos.d/C*
[root@ct ~]# yum repolist
[root@ct ~]# reboot
[root@ct ~]# yum -y install mariadb mariadb-server python2-PyMySQL
[root@ct ~]# vim /etc/my.cnf.d/openstack.cnf

[mysqld]
bind-address = 192.168.10.41
default-storage-engine = innodb
innodb_file_per_table = on
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8

[root@ct ~]# systemctl enable mariadb.service
[root@ct ~]# systemctl start mariadb.service
[root@ct ~]# mysql_secure_installation
回车后设置密码：110 一直回车
#安装消息队列服务
[root@ct ~]# yum -y install rabbitmq-server
[root@ct ~]# systemctl enable rabbitmq-server.service
[root@ct ~]# systemctl start rabbitmq-server.service
[root@ct ~]# rabbitmqctl add_user openstack RABBIT_PASS //创建用户
[root@ct ~]# rabbitmqctl set_permissions openstack “." ".” “.*” //赋予所有权限
[root@ct ~]# ss -tnl
安装好之后，使用 ss -tnl 查看，如果有侦听25672和5672端口，则表示安装成功。
安装memcache
[root@ct ~]# yum -y install memcached python-memcached
[root@ct ~]# vim /etc/sysconfig/memcached

//添加个,ct
OPTIONS="-l 127.0.0.1,::1,ct"

[root@ct ~]# systemctl enable memcached.service && systemctl start memcached.service
[root@ct ~]# ss -tnl //安装和启动好之后，查看端口情况，看到11211端口有程序在侦听则表示memcache安装成功注意前面的ip地址必须有一个是192.168.10.41
安装etcd
[root@ct ~]# yum -y install etcd
[root@ct ~]# vim /etc/etcd/etcd.conf //前面数字是行号(大致位置以内容为准)

  3 ETCD_DATA_DIR="/var/lib/etcd/default.etcd"5 ETCD_LISTEN_PEER_URLS="http://192.168.10.41:2380"6 ETCD_LISTEN_CLIENT_URLS="http://192.168.10.41:2379"9 ETCD_NAME="ct"20 ETCD_INITIAL_ADVERTISE_PEER_URLS="http://192.168.10.41:2380"21 ETCD_ADVERTISE_CLIENT_URLS="http://192.168.10.41:2379"26 ETCD_INITIAL_CLUSTER="ct=http://192.168.10.41:2380"27 ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01"28 ETCD_INITIAL_CLUSTER_STATE="new"

[root@ct ~]# systemctl enable etcd && systemctl start etcd
[root@ct ~]# ss -tnl //安装和启动好之后，查看端口情况，看到2379和2380端口有程序在侦听则表示etcd安装成功建立keystone数据库
[root@ct ~]# mysql -u root -p110
mysql> CREATE DATABASE keystone;
mysql> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone’@‘localhost’ IDENTIFIED BY ‘KEYSTONE_DBPASS’;
mysql> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone’@’%’ IDENTIFIED BY ‘KEYSTONE_DBPASS’;
mysql> exit
安装keystone软件包
[root@ct ~]# yum -y install openstack-keystone httpd mod_wsgi python2-openstackclient
[root@ct ~]# cp /etc/keystone/keystone.conf{,.bak}
[root@ct ~]# grep -Ev ‘^$|#’ /etc/keystone/keystone.conf.bak >/etc/keystone/keystone.conf //反转查找空行#>到文件内
[root@ct ~]# vim /etc/keystone/keystone.conf //[database]和[token]区域加入2行

[database]
connection = mysql+pymysql://keystone:KEYSTONE_DBPASS@ct/keystone[token]
provider = fernet

[root@ct ~]# su -s /bin/sh -c “keystone-manage db_sync” keystone //填充数据库
[root@ct ~]# mysql -p110
mysql> use keystone;
mysql> show tables;
48 rows in set
mysql> exit
初始化Fernet密钥存储库
这是新版本的OpenStack的新功能，在Train版本下，keystone不再使用简单的字符串作为临时token，而是使用下面创建的fernet的用户来运行keystone。同时，keystone也不再对管理员用户和普通用户的服务端点区分使用不同的端口5000和35357，而是只使用5000端口不再使用35357端口。
[root@ct ~]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
[root@ct ~]# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone
[root@ct ~]# keystone-manage bootstrap --bootstrap-password ADMIN_PASS --bootstrap-admin-url http://ct:5000/v3/ --bootstrap-internal-url http://ct:5000/v3/ --bootstrap-public-url http://ct:5000/v3/ --bootstrap-region-id RegionOne

比较长剩下的内容放到云笔记里了

文档：OS 多节点私有云平台.note
链接：点这里http://note.youdao.com/noteshare?id=0949af93daa38b9bc9a7f44816009806&sub=ACD7C54B32F541FDA75DBD63E90CD27C