OpenStack Kilo版本安装教程指南（Ubuntu Server 14.04 + OVS）

本教程参考官网相关资料整理，不安装Swift和Cinder，安装前保证物理主机双网卡，其中一个可以连接外网，分别连在两个交换机。操作系统采用Ubuntu Server14.04，由于之前用U盘刻录启动盘不能使用，转而使用CD刻录，终于可以使用了（泪奔）。具体刻录教程请自行解决。当然也可以使用虚拟机安装体验OpenStack。安装完系统后网卡名字可能不是常见的eth0、eth1，具体修改方案可参见。文档中未说明的都安装在控制节点

一、基本环境配置

在搭建环境，安装系统，修改网卡名完成之后，开始配置系统。
具体IP配置见下图：
Alt text
图上的下标对应的是IP最后一个字段

1.1 修改IP地址

编辑/etc/network/interfaces修改为：

1
2
3
4
5
6
7
8
9
10
11
12
13
14
auto lo
iface lo inet loopback
auto eth0
iface eth0 inet static
address 192.168.1.170
netmask 255.255.255.0
gateway 192.168.1.1
dns-nameservers 202.197.64.6 222.246.129.80
auto eth1
iface eth1 inet static
address 10.0.0.170
netmask 255.255.255.0

对应其他节点IP设置跟此相似。修改完成之后，在修改hosts文件，如下：

1
2
3
4
5
6
7
8
9
#127.0.1.1	controler
#controller
192.168.1.170 controller
#compute01
192.168.1.171 compute01
#compute02
192.168.1.172 compute02
#compute03
192.168.1.173 compute03

注意 注释或删掉127.0.1.1 ，然后相互ping一下验证是否相同，以及是否能连接外网

1.2 修改系统源

配置完成之后修改系统源为阿里云的镜像源，将以下替换/etc/apt/source.list文件中的内容：

1
2
3
cp /etc/apt/sources.list /etc/apt/sources.list.bak
echo '' > /etc/apt/sources.list
vim /etc/apt/sources.list

1
2
3
4
5
6
7
8
9
10
deb http://mirrors.aliyun.com/ubuntu/ trusty main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ trusty-security main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ trusty-updates main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ trusty-proposed main restricted universe multiverse
deb http://mirrors.aliyun.com/ubuntu/ trusty-backports main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty-security main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty-updates main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty-proposed main restricted universe multiverse
deb-src http://mirrors.aliyun.com/ubuntu/ trusty-backports main restricted universe multiverse
1.3 升级更新

升级更新系统

1
2
3
apt-get update
apt-get upgrade -y
apt-get dist-upgrade -y

记得更新完成之后重启系统

1.4 安装ntp服务

所有节点安装ntp服务：

1
apt-get install ntp -y

1.4.1 控制节点配置

编辑/etc/ntp.conf

1
2
3
4
server 0.cn.pool.ntp.org iburst
server 1.cn.pool.ntp.org iburst
restrict -4 default kod notrap nomodify
restrict -6 default kod notrap nomodify

注意 注释或删除掉其他server ，对于restrict删除nopeer noquery 选项
如果存在/var/lib/ntp/ntp.conf.dhcp 文件删除

之后重启ntp服务service ntp restart

1.4.2 其他节点配置

编辑/etc/ntp.conf

1
server controller iburst

注意 删除或注释其他server选项

之后重启ntp服务service ntp restart

1.4.3 验证
  • 控制节点上运行ntpq -c peers，会有相应的ntp服务节点显示
  • 控制节点运行ntpq -c assoc，其中condition字段中sys.peer值必须要有一个
  • 其他节点上运行ntpq -c peers，remote字段会指向controller节点
  • 其他节点运行ntpq -c assoc，其中condition字段中sys.peer值必须要有一个
1.5 启用OpenStack Kilo版本库

所有节点安装软件包以及相关配置

1
2
3
apt-get install ubuntu-cloud-keyring
echo "deb http://ubuntu-cloud.archive.canonical.com/ubuntu" \
  "trusty-updates/kilo main" > /etc/apt/sources.list.d/cloudarchive-kilo.list

安装配置完成之后，重新更新系统，更新完成如果又内核更新，记得重启系统

1
apt-get update && apt-get dist-upgrade -y

1.6 安装数据库

控制节点安装mariaDB数据库，记得配置数据库的密码

1
apt-get install mariadb-server python-mysqldb -y

然后创建一个/etc/mysql/conf.d/mysqld_openstack.cnf的配置文件，内容如下：

1
2
3
4
5
6
7
[mysqld]
bind-address = 192.168.1.170
default-storage-engine = innodb
innodb_file_per_table
collation-server = utf8_general_ci
init-connect = 'SET NAMES utf8'
character-set-server = utf8

配置完成之后重启数据库服务

1
service mysql restart

最后执行一下命令配置mysql

1
mysql_secure_installation

首先会询问你是否要重置root密码，可以选择N，之后一路Y。

1.7 安装消息队列服务
1
2
3
apt-get install rabbitmq-server -y  # 安装软件包
rabbitmqctl add_user openstack RABBIT_PASS # 配置openstack用户
rabbitmqctl set_permissions openstack ".*" ".*" ".*" # 配置权限

二、Keystone安装

2.1 首先配置数据库
1
2
3
4
5
6
7
8
9
10
mysql -u root -p
CREATE DATABASE keystone;
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \
  IDENTIFIED BY 'KEYSTONE_DBPASS';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \
  IDENTIFIED BY 'KEYSTONE_DBPASS';
exit
2.2 安装配置认证服务组件
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
# 禁止keystone自动启动
echo "manual" > /etc/init/keystone.override
# 安装软件包
apt-get install keystone python-openstackclient apache2 libapache2-mod-wsgi memcached python-memcache
# 编辑 /etc/keystone/keystone.conf 文件
cp /etc/keystone/keystone.conf /etc/keystone/keystone.conf.bak
cat /etc/keystone/keystone.conf.bak | egrep -v '#|^$' > /etc/keystone/keystone.conf
vim /etc/keystone/keystone.conf
[DEFAULT]
verbose = True
admin_token = ADMIN_TOKEN
[database]
connection = mysql://keystone:KEYSTONE_DBPASS@controller/keystone
[memcache]
servers = localhost:11211
[token]
provider = keystone.token.providers.uuid.Provider
driver = keystone.token.persistence.backends.memcache.Token
[revoke]
driver = keystone.contrib.revoke.backends.sql.Revoke
# 同步数据库
su -s /bin/sh -c "keystone-manage db_sync" keystone
2.3 配置apache服务器
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
# 编辑 /etc/apache2/apache2.conf 配置文件增加：
ServerName controller
# 创建 /etc/apache2/sites-available/wsgi-keystone.conf 增加以下内容：
Listen 5000
Listen 35357
<VirtualHost *:5000>
    WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone display-name=%{GROUP}
    WSGIProcessGroup keystone-public
    WSGIScriptAlias / /var/www/cgi-bin/keystone/main
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    LogLevel info
    ErrorLog /var/log/apache2/keystone-error.log
    CustomLog /var/log/apache2/keystone-access.log combined
</VirtualHost>
<VirtualHost *:35357>
    WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone display-name=%{GROUP}
    WSGIProcessGroup keystone-admin
    WSGIScriptAlias / /var/www/cgi-bin/keystone/admin
    WSGIApplicationGroup %{GLOBAL}
    WSGIPassAuthorization On
    <IfVersion >= 2.4>
      ErrorLogFormat "%{cu}t %M"
    </IfVersion>
    LogLevel info
    ErrorLog /var/log/apache2/keystone-error.log
    CustomLog /var/log/apache2/keystone-access.log combined
</VirtualHost>
# 启用认证服务虚拟主机
ln -s /etc/apache2/sites-available/wsgi-keystone.conf /etc/apache2/sites-enabled
# 为WSGI组件创建目录结构
mkdir -p /var/www/cgi-bin/keystone
# 拷贝WSGI配置文件从远端数据库
curl http://git.openstack.org/cgit/openstack/keystone/plain/httpd/keystone.py?h=stable/kilo \
  | tee /var/www/cgi-bin/keystone/main /var/www/cgi-bin/keystone/admin
> **注意** 此处有大坑，我踩了半天才走出来，远端没有kilo版本的文件资源，下下来的是一堆html错误的文件，可以上网查找此处配置文件，自己配置，以下是我找的配置文件
# /var/www/cgi-bin/keystone/main  /var/www/cgi-bin/keystone/admin 配置文件相同，都是以下内容：
	# Copyright 2013 OpenStack Foundation
	#
	#    Licensed under the Apache License, Version 2.0 (the "License"); you may
	#    not use this file except in compliance with the License. You may obtain
	#    a copy of the License at
	#
	#         http://www.apache.org/licenses/LICENSE-2.0
	#
	#    Unless required by applicable law or agreed to in writing, software
	#    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
	#    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
	#    License for the specific language governing permissions and limitations
	#    under the License.
	
	import os
	
	from keystone.server import wsgi as wsgi_server
	
	
	name = os.path.basename(__file__)
	
	# NOTE(ldbragst): 'application' is required in this context by WSGI spec.
	# The following is a reference to Python Paste Deploy documentation
	# http://pythonpaste.org/deploy/
	application = wsgi_server.initialize_application(name)
# 对目录增加权限
chown -R keystone:keystone /var/www/cgi-bin/keystone
chmod 755 /var/www/cgi-bin/keystone/*
# 重启apache2服务
service apache2 restart
# 删除sqllite数据库文件
rm -f /var/lib/keystone/keystone.db
2.4 创建认证服务实体以及API
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
# 配置认证token以及URL
export OS_TOKEN=ADMIN_TOKEN
export OS_URL=http://controller:35357/v2.0
# 创建服务实体以及API
openstack service create \
  --name keystone --description "OpenStack Identity" identity
openstack endpoint create \
  --publicurl http://controller:5000/v2.0 \
  --internalurl http://controller:5000/v2.0 \
  --adminurl http://controller:35357/v2.0 \
  --region RegionOne \
  identity
# 创建租户、用户、角色
# 创建admin项目
openstack project create --description "Admin Project" admin
# 创建admin用户
openstack user create --password-prompt admin
# 创建admin角色
openstack role create admin
# 关联租户、用户、角色
openstack role add --project admin --user admin admin
# 创建service项目
openstack project create --description "Service Project" service
# 创建user角色
openstack role create user
2.5 验证

编辑 /etc/keystone/keystone-paste.ini 文件，移除[pipeline:public_api], [pipeline:admin_api], 和 [pipeline:api_v3]中的admin_token_auth 字段

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
# 删除环境变量
unset OS_TOKEN OS_URL
# admin用户token获取
openstack --os-auth-url http://controller:35357 \
  --os-project-name admin --os-username admin --os-auth-type password \
  token issue
# 用版本3API获取token
openstack --os-auth-url http://controller:35357 \
  --os-project-domain-id default --os-user-domain-id default \
  --os-project-name admin --os-username admin --os-auth-type password \
  token issue
# 列出项目
openstack --os-auth-url http://controller:35357 \
  --os-project-name admin --os-username admin --os-auth-type password \
  project list
# 列出用户
openstack --os-auth-url http://controller:35357 \
  --os-project-name admin --os-username admin --os-auth-type password \
  user list
# 列出角色
openstack --os-auth-url http://controller:35357 \
  --os-project-name admin --os-username admin --os-auth-type password \
  role list
# 创建环境变量脚本admin-openrc.sh,替换admin密码
export OS_PROJECT_DOMAIN_ID=default
export OS_USER_DOMAIN_ID=default
export OS_PROJECT_NAME=admin
export OS_TENANT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=ADMIN_PASS
export OS_AUTH_URL=http://controller:35357/v3

三、Glance安装

3.1 配置数据库
1
2
3
4
5
6
7
mysql -u root -p
CREATE DATABASE glance;
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' \
  IDENTIFIED BY 'GLANCE_DBPASS';
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' \
  IDENTIFIED BY 'GLANCE_DBPASS';
exit
3.2 创建glance服务
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
# 创建glance用户
openstack user create --password-prompt glance
# 给glance用户增加admin角色
openstack role add --project service --user glance admin
# 创建glance服务实体
openstack service create --name glance \
  --description "OpenStack Image service" image
# 创建glance API
openstack endpoint create \
  --publicurl http://controller:9292 \
  --internalurl http://controller:9292 \
  --adminurl http://controller:9292 \
  --region RegionOne \
  image
3.3 安装配置服务组件
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
# 安装软件包
apt-get install glance python-glanceclient
# 编辑 /etc/glance/glance-api.conf 文件
cp /etc/glance/glance-api.conf /etc/glance/glance-api.conf.bak
cat /etc/glance/glance-api.conf.bak | egrep -v '#|^$' > /etc/glance/glance-api.conf
vim /etc/glance/glance-api.conf
[DEFAULT]
verbose = True
# 禁用glance通知服务，针对ceilometer
notification_driver = noop
[database]
connection = mysql://glance:GLANCE_DBPASS@controller/glance
# 注释或移除[keystone_authtoken]原来下的任何其他选项，替换glance密码
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = glance
password = GLANCE_PASS
 
[paste_deploy]
flavor = keystone
# 使用本地文件系统存储镜像文件
[glance_store]
default_store = file
filesystem_store_datadir = /var/lib/glance/images/
# 编辑  /etc/glance/glance-registry.conf 文件
cp /etc/glance/glance-registry.conf /etc/glance/glance-registry.conf.bak
cat /etc/glance/glance-registry.conf.bak | egrep -v '#|^$' > /etc/glance/glance-registry.conf
vim /etc/glance/glance-registry.conf
[DEFAULT]
verbose = True
notification_driver = noop
[database]
connection = mysql://glance:GLANCE_DBPASS@controller/glance
# 注释或移除[keystone_authtoken]原来下的任何其他选项，替换glance密码
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = glance
password = GLANCE_PASS
 
[paste_deploy]
flavor = keystone
# 同步glance数据库
su -s /bin/sh -c "glance-manage db_sync" glance
# 重启服务
service glance-registry restart
service glance-api restart
# 删除sqllite数据库
rm -f /var/lib/glance/glance.sqlite
3.4 验证glance服务
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
# 配置镜像服务api脚本
echo "export OS_IMAGE_API_VERSION=2" | tee -a admin-openrc.sh
# 启用环境变量
source admin-openrc.sh
# 创建临时目录
mkdir /tmp/images
# 下载镜像
wget -P /tmp/images http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img
# 上传镜像到glance
glance image-create --name "cirros-0.3.4-x86_64" --file /tmp/images/cirros-0.3.4-x86_64-disk.img \
  --disk-format qcow2 --container-format bare --visibility public --progress
# 验证
glance image-list
# 删除下载文件
rm -r /tmp/images

四、Nova安装

4.1 控制节点安装
4.1.1 配置数据库
1
2
3
4
5
6
7
mysql -u root -p
CREATE DATABASE nova;
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \
  IDENTIFIED BY 'NOVA_DBPASS';
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \
  IDENTIFIED BY 'NOVA_DBPASS';
exit
4.1.2 创建服务以及API
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
# 启用环境变量
source admin-openrc.sh
# 创建nova用户
openstack user create --password-prompt nova
# 给nova用户增加admin角色
openstack role add --project service --user nova admin
# 创建nova服务实体
openstack service create --name nova \
  --description "OpenStack Compute" compute
# 创建nova服务API
openstack endpoint create \
  --publicurl http://controller:8774/v2/%\(tenant_id\)s \
  --internalurl http://controller:8774/v2/%\(tenant_id\)s \
  --adminurl http://controller:8774/v2/%\(tenant_id\)s \
  --region RegionOne \
  compute
4.1.3 配置nova组件
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
# 安装软件包
apt-get install nova-api nova-cert nova-conductor nova-consoleauth \
  nova-novncproxy nova-scheduler python-novaclient
# 编辑 /etc/nova/nova.conf 文件
cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
cat /etc/nova/nova.conf.bak | egrep -v '#|^$' > /etc/nova/nova.conf
vim /etc/nova/nova.conf
[DEFAULT]
verbose = True
rpc_backend = rabbit
auth_strategy = keystone
my_ip = 192.168.1.170
vncserver_listen = 192.168.1.170
vncserver_proxyclient_address = 192.168.1.170
 
[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS
[database]
connection = mysql://nova:NOVA_DBPASS@controller/nova
# 注释或移除[keystone_authtoken]原来的选项，修改nova密码
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = nova
password = NOVA_PASS
[glance]
host = controller
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
# 同步数据库
su -s /bin/sh -c "nova-manage db sync" nova
# 重启服务
service nova-api restart
service nova-cert restart
service nova-consoleauth restart
service nova-scheduler restart
service nova-conductor restart
service nova-novncproxy restart
# 删除sqllite数据库
rm -f /var/lib/nova/nova.sqlite
4.2 计算节点安装
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
# 安装软件包
apt-get install nova-compute sysfsutils
# 编辑 /etc/nova/nova.conf 文件
cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
cat /etc/nova/nova.conf.bak | egrep -v '#|^$' > /etc/nova/nova.conf
vim /etc/nova/nova.conf
[DEFAULT]
verbose = True
rpc_backend = rabbit
auth_strategy = keystone
# 此处的IP为管理接口的IP，以171为例
my_ip = 192.168.1.171
vnc_enabled = True
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = 192.168.1.171
novncproxy_base_url = http://controller:6080/vnc_auto.html
 
[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS
# 注释或移除[keystone_authtoken]原来的选项，替换nova密码
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = nova
password = NOVA_PASS
[glance]
host = controller
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
# 查看物理主机是否支持虚拟机的硬件加速
egrep -c '(vmx|svm)' /proc/cpuinfo
# 如果上述指令返回值是1或更大，则支持硬件加速，如果返回值是0，则不支持硬件加速，需要配置libvirt使用QEMU取代KVM，具体需要编辑/etc/nova/nova-compute.conf文件
[libvirt]
virt_type = qemu
# 重启nova服务
service nova-compute restart
# 删除sqllite数据库
rm -f /var/lib/nova/nova.sqlite
4.3 验证
1
2
3
4
5
6
7
8
# 在控制节点验证操作，启用环境变量
source admin-openrc.sh
# 查看nova服务组件，如果能够看个每个nova服务正常启动，则成功
nova service-list
# 列出API，验证与认证服务的连接
nova endpoints
# 列出镜像，验证与镜像服务的连接
nova image-list

五、Neutron安装

5.1 控制节点安装
5.1.1 配置数据库
1
2
3
4
5
6
7
mysql -u root -p
CREATE DATABASE neutron;
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' \
  IDENTIFIED BY 'NEUTRON_DBPASS';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' \
  IDENTIFIED BY 'NEUTRON_DBPASS';
exit
5.1.2 创建服务实体以及API
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
# 启用环境变量
source admin-openrc.sh
# 创建neutron用户
openstack user create --password-prompt neutron
# 给neutron用户增加admin角色
openstack role add --project service --user neutron admin
# 创建neutron服务实体
openstack service create --name neutron \
  --description "OpenStack Networking" network
# 创建neutron服务API
openstack endpoint create \
  --publicurl http://controller:9696 \
  --adminurl http://controller:9696 \
  --internalurl http://controller:9696 \
  --region RegionOne \
  network
5.1.3 安装配置neutron
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
# 安装软件包
apt-get install neutron-server neutron-plugin-ml2 python-neutronclient \
neutron-plugin-openvswitch-agent neutron-l3-agent neutron-dhcp-agent neutron-metadata-agent conntrack
# 编辑 /etc/sysctl.conf 文件，控制节点也作为网络节点，需要支持转发
net.ipv4.ip_forward=1
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0
# 使改变生效
sysctl -p
# 编辑 /etc/neutron/neutron.conf 文件
cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
cat /etc/neutron/neutron.conf.bak | egrep -v '#|^$' > /etc/neutron/neutron.conf
vim /etc/neutron/neutron.conf
[DEFAULT]
verbose = True
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
rpc_backend = rabbit
auth_strategy = keystone
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
nova_url = http://controller:8774/v2
[database]
connection = mysql://neutron:NEUTRON_DBPASS@controller/neutron
[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS
# 注释或移除[keystone_authtoken]原来的选项，替换neutron密码
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = NEUTRON_PASS
# 替换nova密码
[nova]
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
region_name = RegionOne
project_name = service
username = nova
password = NOVA_PASS
# 编辑 /etc/neutron/plugins/ml2/ml2_conf.ini 文件
cp /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.bak
cat /etc/neutron/plugins/ml2/ml2_conf.ini.bak | egrep -v '#|^$' > /etc/neutron/plugins/ml2/ml2_conf.ini
vim /etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
type_drivers = flat,vlan,vxlan
tenant_network_types = vxlan
mechanism_drivers = openvswitch
extension_drivers = port_security
[ml2_type_flat]
flat_networks = external
[ml2_type_vxlan]
vni_ranges = 65537:69999
[securitygroup]
enable_security_group = True
enable_ipset = True
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
# 此处local_ip是数据接口的IP
[ovs]
local_ip = 10.0.0.170 
bridge_mappings = external:br-ex
tunnel_bridge = br-tun
integration_bridge = br-int
tunnel_id_ranges = 65537:69999
tenant_network_type = vxlan
enable_tunneling = True
tunnel_types = vxlan
[agent]
tunnel_types = vxlan
vxlan_udp_port = 4789
l2_population = False
# 编辑  /etc/nova/nova.conf 文件，配置nova使用neutron网络
[DEFAULT]
network_api_class = nova.network.neutronv2.api.API
security_group_api = neutron
linuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver
firewall_driver = nova.virt.firewall.NoopFirewallDriver
# 替换neutron密码
[neutron]
url = http://controller:9696
auth_strategy = keystone
admin_auth_url = http://controller:35357/v2.0
admin_tenant_name = service
admin_username = neutron
admin_password = NEUTRON_PASS
# 编辑 /etc/neutron/l3_agent.ini 文件
cp /etc/neutron/l3_agent.ini /etc/neutron/l3_agent.ini.bak
cat /etc/neutron/l3_agent.ini.bak | egrep -v '#|^$' > /etc/neutron/l3_agent.ini
vim /etc/neutron/l3_agent.ini
[DEFAULT]
verbose = True
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
external_network_bridge =
router_delete_namespaces = True
# 编辑 /etc/neutron/dhcp_agent.ini 文件
cp /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini.bak
cat /etc/neutron/dhcp_agent.ini.bak | egrep -v '#|^$' > /etc/neutron/dhcp_agent.ini
vim /etc/neutron/dhcp_agent.ini
[DEFAULT]
verbose = True
interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
dhcp_delete_namespaces = True
enable_isolated_metadata = True
dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf
# 创建 /etc/neutron/dnsmasq-neutron.conf 文件
dhcp-option-force=26,1400
# 杀掉当前的dnsmasq进程
pkill dnsmasq
# 编辑 /etc/neutron/metadata_agent.ini 文件
cp /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini.bak
cat /etc/neutron/metadata_agent.ini.bak | egrep -v '#|^$' > /etc/neutron/metadata_agent.ini
vim /etc/neutron/metadata_agent.ini
[DEFAULT]
# 替换neutron密码
verbose = True
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_region = RegionOne
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = NEUTRON_PASS
nova_metadata_ip = controller
metadata_proxy_shared_secret = METADATA_SECRET
# 编辑 /etc/nova/nova.conf 文件，启用metadata代理以及配置密码
[neutron]
service_metadata_proxy = True
metadata_proxy_shared_secret = METADATA_SECRET
# 同步数据库
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \
  --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
# 配置openvswitch服务
# 重启
service openvswitch-switch restart
# 增加外部网桥
ovs-vsctl add-br br-ex
# 增加外网端口，此处管理接口与外网端口是同一端口，即eth0
ovs-vsctl add-port br-ex eth0
# 增加之后重新配置IP
auto eth0
iface eth0 inet manual
    up ip link set dev $IFACE up
    down ip link set dev $IFACE down
auto br-ex
iface br-ex inet static
address 192.168.1.170
netmask 255.255.255.0
gateway 192.168.1.1
dns-nameservers 202.197.64.6 222.246.129.80
# 配置完成之后需要重启计算机
# 重启服务
service neutron-plugin-openvswitch-agent restart
service neutron-l3-agent restart
service neutron-dhcp-agent restart
service neutron-metadata-agent restart
service nova-api restart
service neutron-server restart
# 删除sqllite数据库文件
rm -f /var/lib/neutron/neutron.sqlite
5.1.4 验证
1
2
3
4
5
6
# 启用环境变量
source admin-openrc.sh
# 列出加载的扩展，验证neutron-server是否启动成功
neutron ext-list
# 列出neutron的代理查看是否启动成功
neutron agent-list
5.2 计算节点安装
5.2.1 配置前准备
1
2
3
4
5
6
7
8
# 编辑 /etc/sysctl.conf 文件
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0
net.bridge.bridge-nf-call-iptables=1
net.bridge.bridge-nf-call-ip6tables=1
# 使改变生效
sysctl -p
5.2.2 安装配置
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
# 安装软件包
apt-get install neutron-plugin-ml2 neutron-plugin-openvswitch-agent
# 编辑 /etc/neutron/neutron.conf 文件
cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
cat /etc/neutron/neutron.conf.bak | egrep -v '#|^$' > /etc/neutron/neutron.conf
vim /etc/neutron/neutron.conf
# 注释或删除 [database] 下面的选项
[DEFAULT]
verbose = True
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
rpc_backend = rabbit
auth_strategy = keystone
[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS
# 替换neutron密码
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://controller:35357
auth_plugin = password
project_domain_id = default
user_domain_id = default
project_name = service
username = neutron
password = NEUTRON_PASS
# 编辑  /etc/neutron/plugins/ml2/ml2_conf.ini 文件
cp /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.bak
cat /etc/neutron/plugins/ml2/ml2_conf.ini.bak | egrep -v '#|^$' > /etc/neutron/plugins/ml2/ml2_conf.ini
vim /etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
type_drivers = flat,vlan,vxlan
tenant_network_types = vxlan
mechanism_drivers = openvswitch
extension_drivers = port_security
[ml2_type_vxlan]
vni_ranges = 65537:69999
[securitygroup]
enable_security_group = True
enable_ipset = True
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
# 此处以171为例，local_ip是数据接口的IP
[ovs]
local_ip = 10.0.0.171
tunnel_type = vxlan
tunnel_bridge = br-tun
integration_bridge = br-int
tunnel_id_ranges = 65537:69999
tenant_network_type = vxlan
enable_tunneling = True
tunnel_types = vxlan
[agent]
tunnel_types = vxlan
vxlan_udp_port = 4789
l2_population = False
# 配置OpenvSwitch服务，重启
service openvswitch-switch restart
# 编辑 /etc/nova/nova.conf ，配置nova使用neutron服务
vim /etc/nova/nova.conf
[DEFAULT]
network_api_class = nova.network.neutronv2.api.API
security_group_api = neutron
linuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver
firewall_driver = nova.virt.firewall.NoopFirewallDriver
# 替换neutron密码
[neutron]
url = http://controller:9696
auth_strategy = keystone
admin_auth_url = http://controller:35357/v2.0
admin_tenant_name = service
admin_username = neutron
admin_password = NEUTRON_PASS
# 重启服务
service nova-compute restart
service neutron-plugin-openvswitch-agent restart
5.2.3 验证
1
2
3
4
# 在控制节点启用环境变量
source admin-openrc.sh
# 列出所有的neutron的agent,查看计算节点的agent是否启动成功
neutron agent-list
5.3 启用防火墙服务

默认安装完成之后是不会启用防火墙服务的，需要自己在控制节点进行配置

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
# 编辑 /etc/neutron/neutron.conf 文件
[DEFAULT]
# 增加firewall
service_plugins = router,firewall
[service_providers]
service_provider = FIREWALL:Iptables:neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver:default
# 编辑 /etc/neutron/fwaas_driver.ini 文件
[fwaas]
driver = neutron_fwaas.services.firewall.drivers.linux.iptables_fwaas.IptablesFwaasDriver
enabled = True
# 同步数据库
neutron-db-manage --service fwaas upgrade head
# horizon面板启用(稍后介绍安装)，编辑/etc/openstack_dashboard/local_settings.py文件
OPENSTACK_NEUTRON_NETWORK = {
    ...
    'enable_firewall' = True,
    ...
}
# 重启服务
service neutron-l3-agent restart
service neutron-server restart

5.4 创建初始外部网络

其实也可以安装完horizon之后，通过admin用户在web界面创建

1
2
3
4
5
6
7
8
9
# 启用环境变量
source admin-openrc.sh
# 创建网络
neutron net-create ext-net --router:external \
  --provider:physical_network external --provider:network_type flat
# 创建子网，由于没有外部网络，使用eth0网段作为外部网络
neutron subnet-create ext-net 192.168.1.0/24 --name ext-subnet \
  --allocation-pool start=192.168.1.40,end=192.168.1.90 \
  --disable-dhcp --gateway 192.168.1.1

六、Horizon安装

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# 安装软件包
apt-get install openstack-dashboard
# 编辑 /etc/openstack-dashboard/local_settings.py 文件
OPENSTACK_HOST = "controller"
ALLOWED_HOSTS = ['*', ]
CACHES = {
   'default': {
       'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',
       'LOCATION': '127.0.0.1:11211',
   }
}
OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"
# 可以选择配置时区 参见https://en.wikipedia.org/wiki/List_of_tz_database_time_zones
TIME_ZONE = "*****"
# 可以选择移除ubuntu主题包
apt-get remove -y --purge openstack-dashboard-ubuntu-theme
# 重启apache服务
service apache2 reload
# 验证
# 使用admin或其他用户名登陆http://controller/horizon

七、Ceilometer安装

7.1 在控制节点安装配置mongodb
1
2
3
4
5
6
7
8
9
10
11
12
13
14
# 安装软件包
apt-get install mongodb-server mongodb-clients python-pymongo
# 编辑 /etc/mongodb.conf 文件
bind_ip = 192.168.1.170
smallfiles = true
# 停止mongodb服务，删除日志文件，再启动
service mongodb stop
rm /var/lib/mongodb/journal/prealloc.*
service mongodb start
# 重启服务
service mongodb restart
7.2 控制节点配置ceilometer数据库以及服务实体和API
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
# 创建ceilometer数据库
mongo --host controller --eval '
  db = db.getSiblingDB("ceilometer");
  db.addUser({user: "ceilometer",
  pwd: "CEILOMETER_DBPASS",
  roles: [ "readWrite", "dbAdmin" ]})'
# 启用环境变量
source admin-openrc.sh
# 创建ceilometer用户
openstack user create --password-prompt ceilometer
# 给ceilometer用户增加admin角色
openstack role add --project service --user ceilometer admin
# 创建ceilometer服务实体
openstack service create --name ceilometer \
  --description "Telemetry" metering
# 创建ceilometer服务API
openstack endpoint create \
  --publicurl http://controller:8777 \
  --internalurl http://controller:8777 \
  --adminurl http://controller:8777 \
  --region RegionOne \
  metering
7.3 控制节点安装配置ceilometer
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
# 安装软件包
apt-get install ceilometer-api ceilometer-collector ceilometer-agent-central \
  ceilometer-agent-notification ceilometer-alarm-evaluator ceilometer-alarm-notifier \
  python-ceilometerclient
# 编辑 /etc/ceilometer/ceilometer.conf 文件
cp /etc/ceilometer/ceilometer.conf /etc/ceilometer/ceilometer.conf.bak
cat /etc/ceilometer/ceilometer.conf.bak | egrep -v '#|^$' > /etc/ceilometer/ceilometer.conf
vim /etc/ceilometer/ceilometer.conf
[DEFAULT]
verbose = True
rpc_backend = rabbit
auth_strategy = keystone
[database]
connection = mongodb://ceilometer:CEILOMETER_DBPASS@controller:27017/ceilometer
[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS
# 注释或删除[keystone_authtoken]原来的选项，替换ceilometer密码
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = ceilometer
admin_password = CEILOMETER_PASS
# 替换ceilometer密码
[service_credentials]
os_auth_url = http://controller:5000/v2.0
os_username = ceilometer
os_tenant_name = service
os_password = CEILOMETER_PASS
os_endpoint_type = internalURL
os_region_name = RegionOne
[publisher]
telemetry_secret = TELEMETRY_SECRET
# 重启服务
service ceilometer-agent-central restart
service ceilometer-agent-notification restart
service ceilometer-api restart
service ceilometer-collector restart
service ceilometer-alarm-evaluator restart
service ceilometer-alarm-notifier restart
7.4 计算节点安装配置ceilometer相关服务
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
# 安装软件包
apt-get install ceilometer-agent-compute
# 编辑 /etc/ceilometer/ceilometer.conf 文件
cp /etc/ceilometer/ceilometer.conf /etc/ceilometer/ceilometer.conf.bak
cat /etc/ceilometer/ceilometer.conf.bak | egrep -v '#|^$' > /etc/ceilometer/ceilometer.conf
vim /etc/ceilometer/ceilometer.conf
[DEFAULT]
verbose = True
rpc_backend = rabbit
[publisher]
telemetry_secret = TELEMETRY_SECRET
[oslo_messaging_rabbit]
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS
# 注释或删除[keystone_authtoken]原来的选项，替换ceilometer密码
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = service
admin_user = ceilometer
admin_password = CEILOMETER_PASS
# 替换ceilometer密码
[service_credentials]
os_auth_url = http://controller:5000/v2.0
os_username = ceilometer
os_tenant_name = service
os_password = CEILOMETER_PASS
os_endpoint_type = internalURL
os_region_name = RegionOne
# 编辑 /etc/nova/nova.conf 文件，配置nova服务发送通知给消息队列
[DEFAULT]
instance_usage_audit = True
instance_usage_audit_period = hour
notify_on_state_change = vm_and_task_state
notification_driver = messagingv2
# 重启服务
service ceilometer-agent-compute restart
service nova-compute restart

七、大功告成

经过以上的安装，到此基本上安装完毕，还有其他服务没有安装（Swift、Cinder），具体可以参考其他相关资料。
另外由于以上配置比较繁琐，安装完成之后有些配置文件比较长，很多都是注释文档，可以使用以下几条命令进行简化配置：

1
2
3
4
5
6
# 先备份
cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
# 去除注释以及空行填回到原来的额文件
cat /etc/neutron/neutron.conf.bak | egrep -v '#|^$' > /etc/neutron/neutron.conf
# 最后再配置
vim /etc/neutron/neutron.conf

参考

[1] http://www.linuxdiyf.com/linux/18588.html
[2] http://docs.openstack.org/kilo/install-guide/install/apt/content/
[3] https://henulwj.github.io/2016/02/27/openstack-liberty-ml2-ovs-vxlan-install/

赏

谢谢你请我吃糖果

支付宝
微信

扫一扫，分享到微信

微信分享二维码

tag:

    缺失模块。
    1、请确保node版本大于6.2
    2、在博客根目录（注意不是yilia根目录）执行以下命令：
    npm i hexo-generator-json-content --save

    3、在根目录_config.yml里添加配置： 

      jsonContent:
    meta: false
    pages: false
    posts:
      title: true
      date: true
      path: true
      text: false
      raw: false
      content: false
      slug: false
      updated: false
      comments: false
      link: false
      permalink: false
      excerpt: false
      categories: false
      tags: true

哈哈哈哈