ubuntu14.04安装openstack_mitaka
我已经帮你们脱了很多坑，别担心，可以安装成功
图片显示有问题，如果有意者想要图片，可以加我微信：patrickstar12358，我有图文
关于Ubuntu的安装需要注意两点；
1、设置LVM
2、设置/boot、/、Swap的大小
节点1：controller,用户名密码为haoyun,123456
参考http://jingpin.jikexueyuan.com/article/35461.html进行lvm分区！
节点2：compute 用户名密码为haoyun,123456
进入root:
Ubuntu系统,在Linux终端输入命令回车:
sudo su - root
210.72.145.44 (国家授时中心服务器IP地址)
关闭iptables防火墙: sudo ufw disable和selinux: selinux默认ubuntu不安装,iptables默认也是全开放的.？
MariaDB密码是123456
安装到sql database时:出现
那个三个点是不是要查看之前版本来进行配置?这里先忽略
重启mysql报错: Checking for corrupt, notcleanly closed and upgrade
needingtables,这个不知道要不要处理，网上说这个只是个提示，告诉你在做什么。不管它?查阅到貌似这指令不知道能不能处理: 经过几个小时的折腾，发现下面的这个命令有用：
dpkg-reconfigure mysql-server-5.1
配置数据库的时候,以下是配置过程,我总觉得对后面会有影响
root@controller:~#mysql_secure_installation
/usr/bin/mysql_secure_installation:379: /usr/bin/mysql_secure_installation: find_mysql_client: not found
NOTE: RUNNINGALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!
In order to loginto MariaDB to secure it, we'll need the current
password forthe root user. If you've just installedMariaDB, and
you haven't setthe root password yet, the password will be blank,
so you shouldjust press enter here.
Enter currentpassword for root (enter for none):
OK,successfully used password, moving on...
Setting theroot password ensures that nobody can log into the MariaDB
root userwithout the proper authorisation.
You alreadyhave a root password set, so you can safely answer 'n'.
Change the rootpassword? [Y/n] Y
... skipping.
By default, aMariaDB installation has an anonymous user, allowing anyone
to log intoMariaDB without having to have a user account created for
them. This is intended only for testing, and tomake the installation
go a bitsmoother. You should remove them beforemoving into a
productionenvironment.
Removeanonymous users? [Y/n]Y
... Success!
Normally, rootshould only be allowed to connect from 'localhost'. This
ensures thatsomeone cannot guess at the root password from the network.
Disallow rootlogin remotely? [Y/n] Y
... skipping.
By default,MariaDB comes with a database named 'test' that anyone can
access. This is also intended only for testing, andshould be removed
before movinginto a production environment.
Remove testdatabase and access to it? [Y/n] Y
... skipping.
Reloading theprivilege tables will ensure that all changes made so far
will takeeffect immediately.
Reloadprivilege tables now? [Y/n]
... Success!
Cleaning up...
All done! If you've completed all of the above steps,your MariaDB
installationshould now be secure.
Thanks forusing MariaDB!
NoSql服务我们不装,这个针对计费服务才要装的
Rabbit消息队列的密码是123456,用户为openstack
验证服务,建议开启防火墙.
装身份认证的时候，你肯定会遇到坑：
connection = mysql+pymysql://keystone:KEYSTONE_DBPASS@controller/keystone把controller改为你的管理网络即可！
身份服务:LDAP
三个组件：
提供身份验证服务的服务器
驱动：？
中间件模块：
When installing OpenStack Identityservice, you must register each service in your OpenStack installation.Identity service can then track which OpenStack services are installed, andwhere they are located on the network.
执行数据库操作，感觉没生效
GRANT ALL PRIVILEGES ON keystone.* TO'keystone'@'%' IDENTIFIED BY '123456';
Query OK, 0 rows affected (0.00 sec)
第一次的管理员token值：b765cd316d0385c24e33
This guide uses the Apache HTTPserver with mod_wsgi to serve Identity service requestson ports 5000 and 35357. By default, the keystone service still listens onthese ports. Therefore, this guide manually disables the keystone service.应该是keystone在安装过后占用了端口。
报错：
1. Each service that you add to yourOpenStack environment requires one or more service entities and three APIendpoint variants in the Identity service.
admin user密码为123456
demo密码123456
Any roles that you create must map to roles specified inthepolicy.json file in the configuration file directory of eachOpenStack service. The default policy for most services grants administrativeaccess to theadmin role. For more information, see theOperations Guide - Managing Projects and Users.
镜像文件路径：/var/lib/glance/images/
GLANCE_DBPASS密码123456
Create the glance user:密码123456
报错：怀疑是需要在装identic服务时要注册进去
When installing OpenStack Identity service,you must register each service in your OpenStack installation. Identity servicecan then track which OpenStack services are installed, and where they arelocated on the network.
这个就是下面的操作啊。
Before you install and configure the Image service, youmust create a database, service credentials, and API endpoints.
感觉有坑，我就建了admin-openrc.sh注意后缀
Comment out or remove any other options in the [keystone_authtoken] section.然而并没有
报错，原来自己不是root来执行。
This section describes how to install and configure theCompute service on a compute node
配置compute主机，我用的myip是compute的ip
By default, Compute uses an internal firewall service.Since Networking includes a firewall service, you must disable the Computefirewall service by using thenova.virt.firewall.NoopFirewallDriver firewall driver.
o In the[vnc] section, enable and configure remoteconsole access:
o [vnc]
o ...
o enabled = True
o vncserver_listen = 0.0.0.0
o vncserver_proxyclient_address = $my_ip
o novncproxy_base_url =http://controller:6080/vnc_auto.html
The servercomponent listens on all IP addresses and the proxy component only listens onthe management interface IP address of the compute node. The base URL indicatesthe location where you can use a web browser to access remote consoles ofinstances on this compute node.感觉有深度，好像说的是你可以使用代理url连接远程控制台。
neutron user密码123456
Replace PROVIDER_INTERFACE_NAME with the name of the underlying provider physical networkinterface. SeeHost networking for more information.我设置为PROVIDER,后来检查发现，如果你这里没配置正确，后面neutron agent-list会异常，所以这里的PROVIDER是指你的物理网卡！
Replace METADATA_SECRET with a suitable secret for the metadata proxy.我改为123456
验证网络1的时候：The output should indicate threeagents on the controller node and one agent on each compute node.
我缺乏了两项！怀疑是我主机网络问题！
如果配置UTC不正确，会导致dashboard500错误
o SESSION_ENGINE ='django.contrib.sessions.backends.cache'
o
o CACHES = {
o 'default': {
o 'BACKEND':'django.core.cache.backends.memcached.MemcachedCache',
o 'LOCATION': 'controller:11211',
o }
o }
这个本身是有的，CACHES开始，否则会报错