centos7安装openstack经典已实践.docx

Centos7安装openstack经典已实践三个节点ip信息controller:0network:0compute1:0修改各节点的/etc/hosts 文件测试各节点到的连通性controller node配置NTP服务yum install -y ntpvi /etc/ntp.conf 修改文件如下：serverNTP_SERVERiburst #此处未做修改，采用默认restrict -4 default kod notrap nomodifyrestrict -6 default kod notrap nomodifysystemctl enable ntpd.service #开机启动systemctl start ntpd.service其他节点同样安装yum install ntp修改/etc/ntp.conf文件如下：server controller iburst开机启动服务：systemctl enable ntpd.servicesystemctl start ntpd.serviceOpenStack packagesInstall the yum-plugin-priorities package to enable assignment of relative priorities within repositories:# yum install -y yum-plugin-prioritiesInstall the epel-release package to enable the EPEL repository:# yum install/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpmInstall the rdo-release-juno package to enable the RDO repository:#yum install/openstack-juno/rdo-release-juno.rpmUpgrade the packages on your system:# yum upgrade# rebootRHEL and CentOS enable SELinux by default. Install the openstack-selinux package to automatically manage security policies for OpenStack services:# yum install openstack-selinux安装如果报错，可通过下面安装：#yum install/repos/openstack/openstack-juno/epel-7/openstack-selinux-0.5.19-2.el7ost.noarch.rpmTo install and configure the database server# yum install mariadb mariadb-server MySQL-python修改/etc/fbind-address = default-storage-engine = innodbinnodb_file_per_tablecollation-server = utf8_general_ciinit-connect = SET NAMES utf8character-set-server = utf8# systemctl enable mariadb.service# systemctl start mariadb.serviceTo install the RabbitMQ message broker service# yum install rabbitmq-server# systemctl enable rabbitmq-server.service# systemctl start rabbitmq-server.service启动服务时出现如下错误：# rabbitmqctl change_password guest 123456执行时如果有报错Identity serviceInstall and configure# mysql create database keystone; grant all privileges on keystone.* to keystonelocalhost identified by test01; grant all privileges on keystone.* to keystone% identified by test01;# openssl rand -hex 1002456f17dc198d827a90 #值不一样# yum install openstack-keystone python-keystoneclient修改 /etc/keystone/keystone.confDEFAULT.admin_token=02456f17dc198d827a90verbose = Truedatabase.connection=mysql:/keystone:test01localhost/vider = viders.uuid.Providerdriver =keystone.token.persistence.backends.sql.Token# keystone-manage pki_setup -keystone-user keystone -keystone-group keystone# chown -R keystone:keystone /var/log/keystone# chown -R keystone:keystone /etc/keystone/ssl# chmod -R o-rwx /etc/keystone/ssl# su -s /bin/sh -c keystone-manage db_sync keystone 或者keystone-manage db_sync# systemctl enable openstack-keystone# systemctl start openstack-keystoneCreate tenants, users, and roles# export OS_SERVICE_TIOEN=02456f17dc198d827a90# export OS_SERVICE_ENDPOINT=http:/controller:35357/v2.0Create the admin tenant:# keystone tenant-create -name admin -description Admin TenantCreate the admin user:# keystone user-create -name admin -pass test01 -email Create the admin role:# keystone role-create -name adminAdd the admin role to the admin tenant and user:# keystone user-role-add -user admin -tenant admin -role adminCreate a demo tenant and user for typical operations in your environment:Create the demo tenant:# keystone tenant-create -name demo -description Demo TenantCreate the demo user under the demo tenant:# keystone user-create -name demo -tenant demo -pass test01 -email Create the service tenant:# keystone tenant-create -name service -description Service TenantCreate the service entity for the Identity service:# keystone service-create -name keystone -type identity -description Openstack IdentityCreate the Identity service API endpoints:# keystone endpoint-create -service-id $(keystone service-list | awk / identity / print $2) -publicurl http:/controller:5000/v2.0 -internalurl http:/controller:5000/v2.0 -adminurl http:/controller:35357/v2.0 -region regionOne# unset OS_SERVICE_TOKEN OS_SERVICE_ENDPOINT# keystone -os-tenant-name admin -os-username admin -os-password test01 -os-auth-url http:/controller:35357/v2.0 token-get# keystone -os-tenant-name admin -os-username admin -os-password test01 -os-auth-url http:/controller:35357/v2.0 tenant-list# keystone -os-tenant-name admin -os-username admin -os-password test01 -os-auth-url http:/controller:35357/v2.0 user-list# keystone -os-tenant-name admin -os-username admin -os-password test01 -os-auth-url http:/controller:35357/v2.0 role-list# keystone -os-tenant-name demo -os-username demo -os-password test01 -os-auth-url http:/controller:35357/v2.0 token-get# keystone -os-tenant-name demo -os-username demo -os-password test01 -os-auth-url http:/controller:35357/v2.0 user-listAdd the Image Service(in controller node)To configure prerequisites#mysql -u root create database glance; grant all privileges on glance.* to glancelocalhost identified by test01; grant all privileges on glance.* to glance% identified by test01;quit# source admin-openrc.sh# keystone user-create -name glance -pass test01 -email # keystone user-role-add -user glance -tenant service -role admin# keystone service-create -name glance -type image -description Openstack Image Service# keystone endpoint-create -service-id $(keystone service-list | awk / image / print $2) -publicurl http:/controller:9292 -internalurl http:/controller:9292 -adminurl http:/controller:9292 -region regionOneTo install and configure the Image Service components# yum install openstack-glance python-glanceclient# vi /etc/glance/glance-api.confDEFAULTverbose=Truedatabaseconnection=mysql:/glance:test01controller/glancekeystone_authtokenauth_uri = http:/controller:5000/v2.0identity_uri=http:/controller:35357admin_tenant_name=serviceadmin_user=glanceadmin_password=test02paste_deployflavor=keystonefilesystem_store_datadirs=/var/lib/glance/images/glance_storedefault_store = filefilesystem_store_datadir = /var/lib/glance/images/# vi /etc/glance/glance-registry.confDEFAULTverbose=Truepaste_deployflavor = keystonedatabaseconnection=mysql:/glance:test01controller/glancekeystone