openstack的安装（二） 安装nova服务同时建立计算节点

nova的安装

准备网络

1.启用网络接口的promisc功能

ip link set eth0 promisc on

确认开启primisc功能

ip link show eth0

2.创建桥接接口br100

yum -y install bridge-utils

yum -y install libvirt

service libvirtd restart

chkconfig libvirtd on

virsh iface-bridge eth0 br100

创建桥接设备 方法二

禁用NetworkManager

创建桥接设备

创建一个名为br100的桥接设置，并将其桥接在eth0网卡上，两步即可完成：首先创建一个桥接类型的设备，为其制定地址的获取方式、ip地址等属性，类似于管理一个正常的网络接口，只是类型为brige，其次，为eth0接口指定其桥接至刚刚定义的桥接设备即可，eth0此接口不再需要配置ip地址等属性

vim /etc/sysconfig/network-scripts/ifcfg-br100

DEVICE=br100

BOOTPROTO=none

DNS1=192.168.253.1

GATEWAY=192.168.253.1

IPADDR=192.168.253.139

NETMASK=255.255.255.0

NM_CONTROLLED=no

ONBOOT=yes

TYPE=Brige

USERCTL=no

DELAY=0

vim /etc/sysconfig/network-scripts/ifcfg-eth0

DEVICE="eth0"

BOOTPROTO="none"

NM_CONTROLLED="no"

ONBOOT="yes"

TYPE=Ethernet

HWADDR=00:0C:29:83:A4:B5

IPV6INIT=no

USERCTL=no

BRIDGE=br100

重启启动网络服务

brctl show

bridge name     bridge id          STP enabled     interfaces

br100          8000.000c2983a4b5     yes          eth0

virbr0          8000.5254003986f3     yes          virbr0-nic

启动messagebus服务

service messagebus start

chkconfig messagebus on

安装nova

yum -y install openstack-utils memcached qpid-cpp-server

yum -y install openstack-nova

初始化nova数据库，同时建立用户、密码

openstack-db --init --service nova --password nova

为nova创建数据库的相关的用户

grant all privileges on nova.* to nova@localhost identified by 'nova';

grant all privileges on nova.* to nova@'%' identified by 'nova';

flush privileges;

配置nova连接数据库

vim /etc/nova/nova.conf

# AUTHENTICATION

auth_strategy=keystone

# LOGS/STATE

verbose=True

logdir=/var/log/nova

state_path=/var/lib/nova

lock_path=/var/lock/nova

rootwrap_config=/etc/nova/rootwrap.conf

# SCHEDULER

compute_scheduler_driver=nova.scheduler.filter_scheduler.FilterScheduler

# VOLUMES

volume_driver=nova.volume.driver.ISCSIDriver

volume_group=nova-volume

volume_name_template=volume-%08x

iscsi_helper=tgtadm

# DATABASE

sql_connection=mysql://nova:[email protected]/nova

# COMPUTE

libvirt_type=qemu

compute_driver=libvirt.LibvirtDriver

instance_name_template=instance-%08x

api_paste_config=/etc/nova/api-paste.ini

# set the instances path

# instances_path=/nova/instances

# New add

libvirt_nonblocking = True

libvirt_inject_partition = -1

# COMPUTE/APIS: if you have separate configs for separate services

# this flag is required for both nova-api and nova-compute

allow_resize_to_same_host=True

# APIS

osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions

ec2_dmz_host=192.168.0.100

s3_host=192.168.0.100

# Qpid

rpc_backend = nova.openstack.common.rpc.impl_qpid

qpid_hostname = 192.168.0.100

# GLANCE

image_service=nova.image.glance.GlanceImageService

glance_api_servers=192.168.0.100:9292

# NETWORK

network_manager=nova.network.manager.FlatDHCPManager

force_dhcp_release=True

dhcpbridge_flagfile=/etc/nova/nova.conf

# New Add

dhcpbridge = /usr/bin/nova-dhcpbridge

firewall_driver=nova.virt.libvirt.firewall.IptablesFirewallDriver

# Change my_ip to match each Compute host

my_ip=192.168.0.100

public_interface=eth0

vlan_interface=eth0

flat_network_bridge=br100

flat_interface=eth0

fixed_range=192.168.0.0/24

# NOVNC CONSOLE

novncproxy_base_url=http://192.168.0.100:6080/vnc_auto.html

# Change vncserver_proxyclient_address and vncserver_listen to match each compute host

vncserver_proxyclient_address=192.168.0.100

vncserver_listen=192.168.0.100

[keystone_authtoken]

auth_host = 192.168.0.100

auth_port = 35357

auth_protocol = http

admin_tenant_name = service

admin_user = nova

admin_password = nova

signing_dirname = /tmp/keystone-signing-nova

安装libguestfs-tools

yum -y instrall libguestfs-tools

设置livirt类型为qemu

openstack-config --set /etc/nova/nova.conf DEFAULT libvirt_type qemu

为qemu-kvm创建所需要的连接

ln -sv /usr/libexec/qemu-kvm /usr/bin/qemu

重启libvirtd服务

service libvirtd restart

导入或迁移nova数据库

nova-manage db sync

安装配置qpid队列服务

vim /etc/qpidd.conf

auth=no

service qpidd restart

chkconfig qpidd on

启动nova服务

首先创建nova所文件目录

mkdir /var/lock/nova

chown -R nova.nova /var/lo

ck/nova/

启动nova相关服务，并设置开机自启

compute、api、network、scheduler、console、cert

for svc in api compute network scheduler cert console;do service openstack-nova-$svc restart;chkconfig openstack-nova-$svc on; done

查看服务运行状态

nova-manage service list

查看日志

grep -i error /var/log/nova/*

创建nova网络

nova-manage network create  --label=private --multi_host=T --fixed_range_v4=192.168.0.0/24 --bridge_interface=eth0 --bridge=br100 --num_networks=1 --network_size=256

nova-manage network list

在keystone中注册nova  compute API（要以keystone的管理员admin身份运行，所以执行环境变量）

keystone service-create --name=nova --type=compute --description="Nova Compute Service"

+-------------+----------------------------------+

|   Property  |              Value               |

+-------------+----------------------------------+

| description |       Nova Compute Service       |

|      id     | 875164c08b7c43b0b0d3116007655942 |

|     name    |               nova               |

|     type    |             compute              |

+-------------+----------------------------------+

创建端点

keystone endpoint-create --service-id 875164c08b7c43b0b0d3116007655942 --publicurl "http://192.168.0.100:8774/v1.1/\$(tenant_id)s" --adminurl "http://192.168.0.100:8774/v1.1/\$(tenant_id)s" --internalurl "http://192.168.0.100:8774/v1.1/\$(tenant_id)s"

+-------------+----------------------------------------------+

|   Property  |                    Value                     |

+-------------+----------------------------------------------+

|   adminurl  | http://192.168.0.100:8774/v1.1/$(tenant_id)s |

|      id     |       cbac1b85c41349c8ac49a819e43385a7       |

| internalurl | http://192.168.0.100:8774/v1.1/$(tenant_id)s |

|  publicurl  | http://192.168.0.100:8774/v1.1/$(tenant_id)s |

|    region   |                  regionOne                   |

|  service_id |       875164c08b7c43b0b0d3116007655942       |

+-------------+----------------------------------------------+

运行vm实例

安全组default

nova secgroup-list 查看安全组

nova secgroup-list

+---------+-------------+

| Name    | Description |

+---------+-------------+

| default | default     |

+---------+-------------+

nova secgroup-add-rule 可用于安全组定义访问规则，下面命令就实现了允许所有ip地址通过tcp协议的22端口访问关联的vm实例

nova secgroup-add-rule default tcp 22 22 0.0.0.0/0

+-------------+-----------+---------+-----------+--------------+

| IP Protocol | From Port | To Port | IP Range  | Source Group |

+-------------+-----------+---------+-----------+--------------+

| tcp         | 22        | 22      | 0.0.0.0/0 |              |

+-------------+-----------+---------+-----------+--------------+

允许所有主机发起ping请求，开放icmp协议

nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0

+-------------+-----------+---------+-----------+--------------+

| IP Protocol | From Port | To Port | IP Range  | Source Group |

+-------------+-----------+---------+-----------+--------------+

| icmp        | -1        | -1      | 0.0.0.0/0 |              |

+-------------+-----------+---------+-----------+--------------+

ssh公钥注入

nova-keypair-add命令生成一对密钥，并将其公钥保存在compute服务

ssh-keygen -t rsa -P ''

nova keypair-add  --pub-key /root/.ssh/id_rsa.pub testkey

显示添加的密钥信息

nova keypair-list

+---------+-------------------------------------------------+

| Name    | Fingerprint                                     |

+---------+-------------------------------------------------+

| testkey | 7a:34:18:49:1d:60:30:29:18:66:69:d2:c4:c6:c0:2b |

+---------+-------------------------------------------------+

查看本地的密钥文件

ssh-keygen -l -f /root/.ssh/id_rsa.pub

确保每个节点都正常运行

查看虚拟机实例

nova flavor-list

创建一个虚拟机实例

nova flavor-create --swap 256 flavor.cirros 6 128 2 2

查看image映像文件

nova image-list

+--------------------------------------+---------------------+--------+--------+

| ID                                   | Name                | Status | Server |

+--------------------------------------+---------------------+--------+--------+

| b8964ced-5702-4be1-9644-32b14d9ebc25 | cirros-0.3.0-i386   | ACTIVE |        |

| edc31b1b-d3bf-4c76-885c-1f56a9eee3bc | cirros-0.3.0-x86_64 | ACTIVE |        |

+--------------------------------------+---------------------+--------+--------+

加载映像文件，启动一个实例

nova boot --flavor 1 --image edc31b1b-d3bf-4c76-885c-1f56a9eee3bc --key_name testkey --security_group default cirros1

查看所启动的虚拟机的状态

+--------------------------------------+---------+--------+---------------------+

| ID                                   | Name    | Status | Networks            |

+--------------------------------------+---------+--------+---------------------+

| 1a09d053-ea12-4b16-ace0-e1ec8d842360 | cirros1 | ACTIVE | private=192.168.0.2 |

+--------------------------------------+---------+--------+---------------------+

登录测试

nova console-log cirros1

wget: server returned error: HTTP/1.1 404 Not Found

cloud-userdata: failed to read user data url: http://169.254.169.254/2009-04-04/user-data

WARN: /etc/rc3.d/S99-cloud-userdata failed

 ____               ____  ____

/ __/ __ ____ ____ / __ \/ __/

/ /__ / // __// __// /_/ /\ \

\___//_//_/  /_/   \____/___/

http://launchpad.net/cirros

login as 'cirros' user. default password: 'cubswin:)'. use 'sudo' for root.

cirros login:

会闪退，使用以下方式登录

ssh -l cirros 192.168.0.2

注意事项

brctl not found

解决办法：yum install bridge-utils