ipinco

openstack kilo 在ubuntu14.04的安装部署

在每个节点安装：

sudo apt-get update

apt-get install ntp -y

service ntp restart

安装ubuntu更新源

apt-get install ubuntu-cloud-keyring

echo "deb http://ubuntu-cloud.archive.canonical.com/ubuntu" \

"trusty-updates/kilo main" > /etc/apt/sources.list.d/cloudarchive-kilo.list

echo "deb http://ubuntu-cloud.archive.canonical.com/ubuntu" "trusty-updates/kilo main" > /etc/apt/sources.list.d/cloudarchive-kilo.list

更新系统：

apt-get update && apt-get dist-upgrade -y

安装数据库：

apt-get install mariadb-server python-mysqldb -y

cat <<EOF >/etc/mysql/conf.d/mysqld_openstack.cnf

[mysqld]

bind-address = 192.168.1.144

default-storage-engine = innodb

innodb_file_per_table

collation-server = utf8_general_ci

init-connect = 'SET NAMES utf8'

character-set-server = utf8

EOF

启动数据库：

service mysql restart

mysql_secure_installation

安装消息队列服务并创建用户：

apt-get install rabbitmq-server -y

rabbitmqctl add_user openstack openstack

rabbitmqctl set_permissions openstack ".*" ".*" ".*"

为keystone服务创建数据库帐号及远程连接

mysql -uroot -popenstack -e "CREATE DATABASE keystone;"

mysql -uroot -popenstack -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';"

mysql -uroot -popenstack -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';"

openssl rand -hex 10

禁用keystoneservice启动后自动安装：

echo "manual" > /etc/init/keystone.override

安装keystone软件包：

apt-get install keystone python-openstackclient apache2 libapache2-mod-wsgi memcached python-memcache -y

#在所有节点上安装ubuntu openstack 配置工具

#例子

#CONFIG_FILE=/etc/nova/nova.conf

#crudini --set $CONFIG_FILE DEFAULT verbose true

#apt-get -y install crudini

ADMIN_TOKEN=$(openssl rand -hex 10)

echo $ADMIN_TOKEN

crudini --set /etc/keystone/keystone.conf DEFAULT admin_token $ADMIN_TOKEN

crudini --set /etc/keystone/keystone.conf database connection mysql://keystone:keystone@controller/keystone

crudini --set /etc/keystone/keystone.conf memcache servers localhost:11211

crudini --set /etc/keystone/keystone.conf token provider keystone.token.providers.uuid.Provider

crudini --set /etc/keystone/keystone.conf token driver keystone.token.persistence.backends.memcache.Token

crudini --set /etc/keystone/keystone.conf DEFAULT verbose True

crudini --set /etc/keystone/keystone.conf revoke driver keystone.contrib.revoke.backends.sql.Revoke

su -s /bin/sh -c "keystone-manage db_sync" keystone

#vi /etc/apache2/sites-available/000-default.conf

#ServerName controller

sed -i 's/#ServerName www.example.com/ServerName controller/g' /etc/apache2/sites-available/000-default.conf

cat <<EOF >/etc/apache2/sites-available/wsgi-keystone.conf

Listen 5000

Listen 35357

WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone display-name=%{GROUP}

WSGIProcessGroup keystone-public

WSGIScriptAlias / /var/www/cgi-bin/keystone/main

WSGIApplicationGroup %{GLOBAL}

WSGIPassAuthorization On

ErrorLogFormat "%{cu}t %M"

</IfVersion>

LogLevel info

ErrorLog /var/log/apache2/keystone-error.log

CustomLog /var/log/apache2/keystone-access.log combined

</VirtualHost>

WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone display-name=%{GROUP}

WSGIProcessGroup keystone-admin

WSGIScriptAlias / /var/www/cgi-bin/keystone/admin

WSGIApplicationGroup %{GLOBAL}

WSGIPassAuthorization On

ErrorLogFormat "%{cu}t %M"

</IfVersion>

LogLevel info

ErrorLog /var/log/apache2/keystone-error.log

CustomLog /var/log/apache2/keystone-access.log combined

</VirtualHost>

EOF

ln -s /etc/apache2/sites-available/wsgi-keystone.conf /etc/apache2/sites-enabled

mkdir -p /var/www/cgi-bin/keystone

curl http://git.openstack.org/cgit/openstack/keystone/plain/httpd/keystone.py?h=stable/kilo \

| tee /var/www/cgi-bin/keystone/main /var/www/cgi-bin/keystone/admin

chown -R keystone:keystone /var/www/cgi-bin/keystone

chmod 755 /var/www/cgi-bin/keystone/*

service apache2 restart

rm -f /var/lib/keystone/keystone.db

#export OS_TOKEN=2a9cccb0105a68aa7baa

export OS_TOKEN=$ADMIN_TOKEN

export OS_URL=http://controller:35357/v2.0

openstack service create --name keystone --description "OpenStack Identity" identity

openstack endpoint create \

--publicurl http://controller:5000/v2.0 \

--internalurl http://controller:5000/v2.0 \

--adminurl http://controller:35357/v2.0 \

--region RegionOne \

identity

openstack project create --description "Admin Project" admin

openstack user create --password admin admin

openstack role create admin

openstack role add --project admin --user admin admin

openstack project create --description "Service Project" service

openstack project create --description "Demo Project" demo

openstack user create --password demo demo

openstack role create user

openstack role add --project demo --user demo user

unset OS_TOKEN OS_URL

#openstack --os-auth-url http://controller:35357 --os-project-name admin --os-username admin --os-auth-type password token issue

#openstack --os-auth-url http://controller:35357 --os-project-domain-id default --os-user-domain-id default --os-project-name admin --os-username admin --os-auth-type password token issue

#openstack --os-auth-url http://controller:35357 --os-project-name admin --os-username admin --os-auth-type password project list

#openstack --os-auth-url http://controller:35357 --os-project-name admin --os-username admin --os-auth-type password user list

#openstack --os-auth-url http://controller:35357 --os-project-name admin --os-username admin --os-auth-type password role list

#openstack --os-auth-url http://controller:5000 --os-project-domain-id default --os-user-domain-id default --os-project-name demo --os-username demo --os-auth-type password token issue

#openstack --os-auth-url http://controller:5000 --os-project-domain-id default --os-user-domain-id default --os-project-name demo --os-username demo --os-auth-type password user list

openstack --os-auth-url http://controller:35357 --os-project-name admin --os-username admin --os-password admin token issue

openstack --os-auth-url http://controller:35357 --os-project-domain-id default --os-user-domain-id default --os-project-name admin --os-username admin --os-password admin token issue

openstack --os-auth-url http://controller:35357 --os-project-name admin --os-username admin --os-password admin project list

openstack --os-auth-url http://controller:35357 --os-project-name admin --os-username admin --os-password admin user list

openstack --os-auth-url http://controller:35357 --os-project-name admin --os-username admin --os-password admin role list

openstack --os-auth-url http://controller:5000 --os-project-domain-id default --os-user-domain-id default --os-project-name demo --os-username demo --os-password demo token issue

openstack --os-auth-url http://controller:5000 --os-project-domain-id default --os-user-domain-id default --os-project-name demo --os-username demo --os-password demo user list

cat <<EOF >/root/admin-openrc.sh

export OS_PROJECT_DOMAIN_ID=default

export OS_USER_DOMAIN_ID=default

export OS_PROJECT_NAME=admin

export OS_TENANT_NAME=admin

export OS_USERNAME=admin

export OS_PASSWORD=admin

export OS_AUTH_URL=http://controller:35357/v3

EOF

cat <<EOF >/root/demo-openrc.sh

export OS_PROJECT_DOMAIN_ID=default

export OS_USER_DOMAIN_ID=default

export OS_PROJECT_NAME=demo

export OS_TENANT_NAME=demo

export OS_USERNAME=demo

export OS_PASSWORD=demo

export OS_AUTH_URL=http://controller:5000/v3

EOF

##################################################################################

###################在控制节点controller 安装glance服务############################

##################################################################################

境加glance image服务：

mysql -uroot -popenstack -e "CREATE DATABASE glance;"

mysql -uroot -popenstack -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';"

mysql -uroot -popenstack -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'glance';"

source /root/admin-openrc.sh

openstack user create --password glance glance

openstack role add --project service --user glance admin

openstack service create --name glance \

--description "OpenStack Image service" image

openstack endpoint create \

--publicurl http://controller:9292 \

--internalurl http://controller:9292 \

--adminurl http://controller:9292 \

--region RegionOne \

image

apt-get install glance python-glanceclient -y

crudini --set /etc/glance/glance-api.conf database connection mysql://glance:glance@controller/glance

crudini --set /etc/glance/glance-api.conf keystone_authtoken auth_uri http://controller:5000

crudini --set /etc/glance/glance-api.conf keystone_authtoken auth_url http://controller:35357

crudini --set /etc/glance/glance-api.conf keystone_authtoken auth_plugin password

crudini --set /etc/glance/glance-api.conf keystone_authtoken project_domain_id default

crudini --set /etc/glance/glance-api.conf keystone_authtoken user_domain_id default

crudini --set /etc/glance/glance-api.conf keystone_authtoken project_name service

crudini --set /etc/glance/glance-api.conf keystone_authtoken username glance

crudini --set /etc/glance/glance-api.conf keystone_authtoken password glance

crudini --set /etc/glance/glance-api.conf paste_deploy flavor keystone

crudini --set /etc/glance/glance-api.conf glance_store default_store file

crudini --set /etc/glance/glance-api.conf glance_store filesystem_store_datadir /var/lib/glance/images/

crudini --set /etc/glance/glance-api.conf DEFAULT notification_driver noop

crudini --set /etc/glance/glance-api.conf DEFAULT verbose True

################################################

crudini --set /etc/glance/glance-registry.conf database connection mysql://glance:glance@controller/glance

crudini --set /etc/glance/glance-registry.conf keystone_authtoken auth_uri http://controller:5000

crudini --set /etc/glance/glance-registry.conf keystone_authtoken auth_url http://controller:35357

crudini --set /etc/glance/glance-registry.conf keystone_authtoken auth_plugin password

crudini --set /etc/glance/glance-registry.conf keystone_authtoken project_domain_id default

crudini --set /etc/glance/glance-registry.conf keystone_authtoken user_domain_id default

crudini --set /etc/glance/glance-registry.conf keystone_authtoken project_name service

crudini --set /etc/glance/glance-registry.conf keystone_authtoken username glance

crudini --set /etc/glance/glance-registry.conf keystone_authtoken password glance

crudini --set /etc/glance/glance-registry.conf paste_deploy flavor keystone

crudini --set /etc/glance/glance-registry.conf DEFAULT notification_driver noop

crudini --set /etc/glance/glance-registry.conf DEFAULT verbose True

su -s /bin/sh -c "glance-manage db_sync" glance

service glance-registry restart

service glance-api restart

rm -f /var/lib/glance/glance.sqlite

echo "export OS_IMAGE_API_VERSION=2" | tee -a admin-openrc.sh demoopenrc.sh

source admin-openrc.sh

mkdir /tmp/images

wget -P /tmp/images http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img

glance image-create --name "cirros-0.3.4-x86_64" --file /tmp/images/cirros-0.3.4-x86_64-disk.img \

--disk-format qcow2 --container-format bare --visibility public --progress

glance image-list

增加计算服务

mysql -uroot -popenstack -e "CREATE DATABASE nova;"

mysql -uroot -popenstack -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';"

mysql -uroot -popenstack -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'nova';"

source admin-openrc.sh

openstack user create --password nova nova

openstack role add --project service --user nova admin

openstack service create --name nova \

--description "OpenStack Compute" compute

openstack endpoint create \

--publicurl http://controller:8774/v2/%$tenant_id$s \

--internalurl http://controller:8774/v2/%$tenant_id$s \

--adminurl http://controller:8774/v2/%$tenant_id$s \

--region RegionOne \

compute

apt-get install nova-api nova-cert nova-conductor nova-consoleauth nova-novncproxy nova-scheduler python-novaclient -y

crudini --set /etc/nova/nova.conf database connection mysql://nova:nova@controller/nova

crudini --set /etc/nova/nova.conf DEFAULT rpc_backend rabbit

crudini --set /etc/nova/nova.conf DEFAULT auth_strategy keystone

crudini --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_host controller

crudini --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_userid openstack

crudini --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_password openstack

crudini --set /etc/nova/nova.conf keystone_authtoken auth_uri http://controller:5000

crudini --set /etc/nova/nova.conf keystone_authtoken auth_url http://controller:35357

crudini --set /etc/nova/nova.conf keystone_authtoken auth_plugin password

crudini --set /etc/nova/nova.conf keystone_authtoken project_domain_id default

crudini --set /etc/nova/nova.conf keystone_authtoken user_domain_id default

crudini --set /etc/nova/nova.conf keystone_authtoken project_name service

crudini --set /etc/nova/nova.conf keystone_authtoken username nova

crudini --set /etc/nova/nova.conf keystone_authtoken password nova

crudini --set /etc/nova/nova.conf DEFAULT my_ip 192.168.1.144

crudini --set /etc/nova/nova.conf DEFAULT vncserver_listen 192.168.1.144

crudini --set /etc/nova/nova.conf DEFAULT vncserver_proxyclient_address 192.168.1.144

crudini --set /etc/nova/nova.conf glance host controller

crudini --set /etc/nova/nova.conf oslo_concurrency lock_path /var/lib/nova/tmp

crudini --set /etc/nova/nova.conf DEFAULT verbose True

su -s /bin/sh -c "nova-manage db sync" nova

service nova-api restart

service nova-cert restart

service nova-consoleauth restart

service nova-scheduler restart

service nova-conductor restart

service nova-novncproxy restart

rm -f /var/lib/nova/nova.sqlite

##################################################################################

###################在控制节点controller 安装glance服务############################

###################控制节点完成###################################################

##################################################################################

###################在计算节点compute 安装服务 nova 服务############################

##################################################################################

apt-get install nova-compute sysfsutils -y