Openstack
2018-03-20
什么是OpenStack?
OpenStack是一个由NASA（美国国家航空航天局）和Rackspace合作研发并发起的，以Apache许可证授权的自由软件和开放源代码的云计算管理平台项目
OpenStack的基本组成
OpenStack的核心项目
- Nova ——管理云主机
- Neutron ——管理云主机的网络（SDN,Software Defined Network）
- Cinder ——管理块存储（云硬盘）
- Swift ——对象存储
- Glance ——管理镜像与快照
- Keystone ——用户认证与租户管理、服务目录
2018-03-21
实验环境搭建
1.按照思维导图所示，部署相应虚拟机并配置
虚拟机部署流程
2.在Controller&Compute节点安装OpenStack发行版
yum upgrade
yum -y install centos-release-openstack-pike
yum -y install python-openstackclient
yum -y install openstack-selinux
3.Controller节点安装并配置MariaDB
yum -y install mariadb-server
yum -y install mariadb
yum -y install python2-PyMySQL
配置MariaDB
vim /etc/my.cnf.d/openstack.cnf
写入以下配置
[mysqld]
bind-address = 127.0.0.1 #controller节点
default-storage-engine = innodb
innodb_file_per_table
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8
启动MariaDB服务并设置为开机自启
systemctl start mariadb
mysql_secure_installation #安全相关配置
systemctl enable mariadb
4.Controller节点安装并配置消息队列
yum -y install rabbitmq-server
启动消息队列服务并将其配置为开机自启
systemctl enable rabbitmq-server
systemctl start rabbitmq-server
添加openstack用户、设置密码，并赋予相关权限
rabbitmqctl add_user openstack PASSWORD
rabbitmqctl set_permissions openstack ".*" ".*" ".*"
5.Controller节点安装并配置缓存服务
yum -y install memcached
yum -y install python-memcached
修改memcached配置文件
vi /etc/sysconfig/memcached
修改最后一行为
OPTIONS="-l 127.0.0.1,::1,controller40" #根据实际情况配置，controller40为我的主机名
启动缓存服务并设置为开机自启
systemctl start memcached
systemctl enable memcached
6.Controller节点安装并配置键值存储服务
yum -y install etcd
修改etcd配置文件
vi /etc/etcd/etcd.conf
清空并写入以下内容
ETCD_LISTEN_PEER_URLS="http://192.168.147.140:2380"
ETCD_LISTEN_CLIENT_URLS="http://192.168.147.140:2379"
ETCD_NAME="controller40"
ETCD_INITIAL_ADVERTISE_PEER_URLS="http://192.168.147.140:2380"
ETCD_ADVERTISE_CLIENT_URLS="http://192.168.147.140:2379"
ETCD_INITIAL_CLUSTER="controller40=http://192.168.147.140:2380"
ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-40"
启动键值存储服务并将其配置为开机自启
systemctl enable etcd
systemctl start etcd
安装keystone认证服务
1.创建keystone数据库
MariaDB [(none)]> create database keystone;
2.对keystone数据库授权
MariaDB [keystone]>GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'your passwd';
MariaDB [keystone]>GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'your passwd';
3.安装keystone
yum -y install openstack-keystone
yum -y install httpd
yum -y install mod_wsgi
4.配置数据库
vi /etc/keystone/keystone.conf
connection = mysql+pymysql://keystone:yourpassword@yourhostname/keystone
provider = fernet
5.初始化身份认证数据库
su -s /bin/sh -c "keystone-manage db_sync" keystone
#初始化完成后进入数据库查看keystone内是否生成数据表
6.初始化fernet
keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
7.创建第一个管理员账户
keystone-manage bootstrap --bootstrap-password fcc21042 --bootstrap-admin-url http://controller40:35357/v3/ --bootstrap-internal-url http://controller40:5000/v3 --bootstrap-public-url http://controller40:5000/v3/ --bootstrap-region-id regionone
8.配置Apache选项
vi /etc/httpd/conf/httpd.conf
ServerName controller40
9.将WSGI配置文件链接到Apache,以保证wsgi能被Apache正常启动
ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/
10.开启Apache服务并设置为开机自启
systemctl enable httpd
systemctl start httpd
2018-03-22
创建service租户
1.新建脚本bashrc并执行，将相关用户信息创建环境变量
export OS_USERNAME=admin
export OS_PASSWORD=fcc21042
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_DOMAIN_NAME=default
export OS_AUTH_URL=http://controller40:35357/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
2.创建租户
openstack project create --domain default --description "Server Project" service
执行后出现报错Missing value auth-url required for auth plugin password
解决方案：手动执行以下命令
export OS_PROJECT_DOMAIN_NAME=Default && export OS_USER_DOMAIN_NAME=Default && export OS_PROJECT_NAME=admin && export OS_USERNAME=admin && export OS_PASSWORD=fcc21042 && export OS_AUTH_URL=http://controller40:35357/v3/ && export OS_IDENTITY_API_VERSION=3 && export OS_IMAGE_API_VERSION=2
3.创建demo project
openstack project create --domain default --description "Demo Project" demo
4.创建角色user
openstack role create user
5.创建用户demo
openstack user create --domain default --password-prompt demo
6.将用户demo加入到demo租户中，角色是user
openstack role add --project demo --user demo user
7.新建脚本demorc并执行
export OS_USERNAME=demo
export OS_PASSWORD=123456
export OS_PROJECT_NAME=demo
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_DOMAIN_NAME=default
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
8.向keystone申请一个令牌
openstack token issue
9.查看demo用户的租户
openstack project list
10.查看所有租户列表
source adminrc
openstack project list
source adminrc或source demorc本质上为修改系统环境变量，可以理解为是一个切换身份（admin/demo）的过程
Glance镜像服务
1.创建glance数据库，并赋予相关权限
MariaDB [(none)]> CREATE DATABASE glance;
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'GLANCE_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%'IDENTIFIED BY 'GLANCE_DBPASS';
2.切换系统环境变量为admin
source adminrc
3.创建glance用户并添加进project
openstack user create --domain default --password-prompt glance
openstack role add --project service --user glance admin
4.创建镜像实例
openstack service create --name glance --description "OpenStack Image" image
5.创建镜像服务API端口
openstack endpoint create --region RegionOne image public http://controller:9292
openstack endpoint create --region RegionOne image internal http://controller:9292
openstack endpoint create --region RegionOne image admin http://controller:9292
6.安装Glance镜像服务
yum install openstack-glance
7.修改/etc/glance/glance-api.conf
[database]
# ...
connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance
[keystone_authtoken]
# ...
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = GLANCE_PASS
[paste_deploy]
# ...
flavor = keystone
[glance_store]
# ...
stores = file,http
default_store = file
filesystem_store_datadir = /var/lib/glance/images/
8.修改/etc/glance/glance-registry.conf
[database]
# ...
connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance
[keystone_authtoken]
# ...
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = glance
password = GLANCE_PASS
[paste_deploy]
# ...
flavor = keystone
9.填充镜像服务数据库
su -s /bin/sh -c "glance-manage db_sync" glance
10.启动镜像服务并设置为开机自启动
systemctl enable openstack-glance-api.service openstack-glance-registry.service
systemctl start openstack-glance-api.service openstack-glance-registry.service
验证镜像服务是否正常启动
1.切换身份为admin
source adminrc
2.下载测试镜像
wget http://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-disk.img
3.上传镜像
openstack image create "cirros" \
--file cirros-0.3.5-x86_64-disk.img \
--disk-format qcow2 --container-format bare \
--public
然后，就开始报HTTPERROR 500的错误了，这玩意折腾了我好几天一直没有办法解决，如果你也遇到这个问题并且解决的话，麻烦在评论区分享一下你的解决方案，万分感谢
NOVA的架构与部署（控制节点）
NOVA的架构
NOVA
橙色框中的组件是运行在计算节点Compute上的
NOVA的部署
1.创建数据库及用户
MariaDB [(none)]> CREATE DATABASE nova_api;
MariaDB [(none)]> CREATE DATABASE nova;
MariaDB [(none)]> CREATE DATABASE nova_cell0;
2.数据库给予相关授权
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' \
IDENTIFIED BY 'NOVA_DBPASS';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' \
IDENTIFIED BY 'NOVA_DBPASS';
3.在keystone中注册用户、服务、端点
source adminrc
openstack user create --domain default --password-prompt nova
openstack role add --project service --user nova admin
openstack service create --name nova --description "OpenStack Compute" compute
openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1
openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1
openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1
openstack user create --domain default --password-prompt placement
openstack role add --project service --user placement admin
openstack service create --name placement --description "Placement API" placement
openstack endpoint create --region RegionOne placement public http://controller:8778
openstack endpoint create --region RegionOne placement internal http://controller:8778
openstack endpoint create --region RegionOne placement admin http://controller:8778
4.安装NOVA相关软件包
yum install openstack-nova-api openstack-nova-conductor \
openstack-nova-console openstack-nova-novncproxy \
openstack-nova-scheduler openstack-nova-placement-api
5.修改/etc/nova/nova.conf配置文件
修改配置文件请参考官方文档
6.初始化数据库
su -s /bin/sh -c "nova-manage api_db sync" nova
su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
su -s /bin/sh -c "nova-manage db sync" nova
7.设置服务开机启动、运行服务
systemctl enable openstack-nova-api.service \
openstack-nova-consoleauth.service openstack-nova-scheduler.service \
openstack-nova-conductor.service openstack-nova-novncproxy.service
systemctl start openstack-nova-api.service \
openstack-nova-consoleauth.service openstack-nova-scheduler.service \
openstack-nova-conductor.service openstack-nova-novncproxy.service
NOVA的架构与部署（计算节点）
1.安装NOVA相关软件包
yum install openstack-nova-compute
2.修改/etc/nova/nova.conf配置文件
修改配置文件请参考官方文档
3.确认硬件虚拟化支持，修改virt_type
[libvirt]
# ...
virt_type = qemu
4.设置服务开机启动、运行服务
systemctl enable libvirtd.service openstack-nova-compute.service
systemctl start libvirtd.service openstack-nova-compute.service
5.将计算节点加到cell中
source adminrc
openstack compute service list --service nova-compute
su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova
至此，本文将不再更新部署OpenStack的相关命令，建议直接参照官方文档操作