小辣椒lllll

linux——（4）openstack安装配置手册

Openstack havana版安装

环境

物理数量	1台
主机名	Controller
网卡数量	1
ip地址	192.168.205.177
Dns	202.106.196.115
Cpu个数	1
内存	6GB
硬盘容量	1TB
操作系统版本	redhat6.3

组件整体结构

$说明: C:\Users\hp\AppData\Roaming\Tencent\Users\598307248\QQ\WinTemp\RichOle\(``]~J1VIIE$ZP98DZIE2ZU.jpg$

PS：在本环境中由于只有一台物理机，所以主机要即当管理节点又提供计算服务，所以除了以上controller中上述组件还要安装nova-compute，nova-network服务。

环境准备

网卡配置

Vi /etc/sysconfig/network-scripts/ifcfg-eth0

# Internal Network

DEVICE=eth0

TYPE=Ethernet

BOOTPROTO=static

IPADDR=192.168.205.177

NETMASK=255.255.255.0

DEFROUTE=yes

# service network restartONBOOT=yes

# service NetworkManager stop

# service network start

# chkconfig NetworkManager off

# chkconfig network on

修改主机名

Vi /etc/sysconfig/network

HOSTNAME=controller

Vi/etc/hosts

127.0.0.1 localhost

192.168.205.177 controller

安装mysql数据库

#yum install mysql mysql-server MySQL-python

Vi/etc/my.cnf

[mysqld]

...

bind-address = 192.168.205.177

启动mysql

# service mysqld start

# chkconfig mysqld on

初次创建时删除anonymous user

# mysql_install_db

# mysql_secure_installation

# yum install mysql MySQL-python

安装openstack包

下载并安装http://repos.fedorapeople.org/repos/openstack/openstack-havana/

rdo-release-havana-6.noarch.rpm

http://dl.fedoraproject.org/pub/epel/6/x86_64/epel-release-6-8.

noarch.rpm这两个包，这两个包安装后会自动配置安装openstack的外网yum源

安装openstack单元包

yum install openstack-utils

yum install openstack-selinux

yum upgrade

reboot

PS：外网环境十分不稳定，安装可能会经常失败，安装失败后清除安装失败的包，后则后期如果安装时由于安装包没有装全或者装好会带来意想不到麻烦。

安装Messaging server

yum install qpid-cpp-server memcached

vi /etc/qpidd.conf

auth=no

# service qpidd start

# chkconfig qpidd on

安装keystone认证服务

# yum install openstack-keystonepython-keystoneclient

修改配置文件

# openstack-config --set/etc/keystone/keystone.conf \

sql connectionmysql://keystone:KEYSTONE_DBPASS@controller/keystone

创建openstack keystone与数据库的连接

# openstack-db --init --service keystone--password KEYSTONE_DBPASS

定义一个授权令牌

# ADMIN_TOKEN=$(openssl rand -hex 10)

# echo $ADMIN_TOKEN

# openstack-config --set/etc/keystone/keystone.conf DEFAULT \

admin_token $ADMIN_TOKEN

配置创建密钥与证书

# keystone-manage pki_setup --keystone-userkeystone --keystone-group

keystone

# chown -R keystone:keystone/etc/keystone/* /var/log/keystone/keystone.

log

启动keystone

# service openstack-keystone start

# chkconfig openstack-keystone on

定义用户租客和roles

导出环境变量

# export OS_SERVICE_TOKEN=ADMIN_TOKEN

# exportOS_SERVICE_ENDPOINT=http://controller:35357/v2.0

PS：这里的ADMIN_TOKEN是上面定义授权令牌时候生成的一串数字

可以将上述编辑成以后文件之后source这个文件

创建admin租客

# keystone tenant-create --name=admin--description="Admin Tenant"

+-------------+----------------------------------+

| Property | Value |

+-------------+----------------------------------+

| description| Admin Tenant |

| enabled | True |

| id | 17d0aac7259c4f308c5ed81904e267f2 |

| name | admin |

+-------------+----------------------------------+

# keystone tenant-create --name=service--description="Service Tenant"

+-------------+----------------------------------+

| Property | Value |

+-------------+----------------------------------+

| description | Service Tenant |

| enabled | True |

| id |54a02d2556c1423eaee8a514da372e0f |

| name | service |

+-------------+----------------------------------+

PS：这里很有可能会报错，提示租户无法创建，重启keystone会解决问题

Service openstack-keystone restart

keystone user-create --name=admin--pass=ADMIN_PASS\

[email protected]

ADMIN_PASS是你设置的秘密

keystone user-create --name=admin --pass=PASSWORD\

[email protected]

创建服务与定义API endpoint

keystone service-create --name=keystone--type=identity \

--description="Keystone IdentityService"

+-------------+----------------------------------+

| Property | Value |

+-------------+----------------------------------+

| description | Keystone Identity Service |

| id |7711a2a72fb34caea36782f7cd669e03 |

| name | keystone |

| type | identity

定义API

keystone endpoint-create \

--service-id=7711a2a72fb34caea36782f7cd669e03\

--publicurl=http://controller:5000/v2.0 \

--internalurl=http://controller:5000/v2.0 \

--adminurl=http://controller:35357/v2.0

+-------------+----------------------------------+

| Property | Value |

+-------------+----------------------------------+

| adminurl | http://controller:35357/v2.0 |

| id |e153f3c72b2544cf8f7f0bd557a62cad |

| internalurl | http://controller:5000/v2.0 |

| publicurl | http://controller:5000/v2.0 |

| region | regionOne |

| service_id | 7711a2a72fb34caea36782f7cd669e03 |

Vi一个文件，包含以下内容

export OS_USERNAME=admin

export OS_PASSWORD=PASSWORD

export OS_TENANT_NAME=admin

export OS_AUTH_URL=http://controller:35357/v2.0

source这个文件

校验服务

keystone user-list

+----------------------------------+---------+--------------------+--------+

+----------------------------------+---------+--------------------+--------+

说明配置正确

出过出现报错，请查看/var/log/kestone下的详细内容

配置glance

安装glance组建

# yum install openstack-glance

修改配置文件

openstack-config --set/etc/glance/glance-api.conf \

DEFAULT sql_connectionmysql://glance:PASSWORD@controller/glance

openstack-config --set/etc/glance/glance-registry.conf \

DEFAULT sql_connectionmysql://glance:PASSWORD@controller/glance

创建glance数据连接

openstack-db --init --service glance--password PASSWORD

keystone下定义名为glance的用户

keystone user-create --name=glance--pass=PASSWORD --[email protected]

添加roles

keystone user-role-add --user=glance--tenant=service --role=admin

添加glance roles

keystone user-role-add --user=glance--tenant=service --role=admin

配置imgae的服务的身份验证

openstack-config --set/etc/glance/glance-api.conf keystone_authtoken \

auth_uri http://controller:5000

openstack-config --set/etc/glance/glance-api.conf keystone_authtoken \

auth_host controller

openstack-config --set/etc/glance/glance-api.conf keystone_authtoken \

admin_tenant_name service

openstack-config --set/etc/glance/glance-api.conf keystone_authtoken \

admin_user glance

openstack-config --set/etc/glance/glance-api.conf keystone_authtoken \

admin_password PASSWORD

openstack-config --set/etc/glance/glance-api.conf paste_deploy \

flavor keystone