Openstack实验手册.doc

计算机新技术综合实践计算机新技术综合实践研究生实验手册课程名称： 计算机新技术综合实践 实验名称： 安装部署OpenStack 实验地点： 专 业： 班 级： 指导教师： 吴含前 实验时间： 年 月 日实验一 64位Linux下手动安装OpenStack Icehouse版本【实验内容】学习VMware workstation虚拟机的使用，在 CentOS 64位环境下安装搭建OpenStack环境，熟悉Linux基本操作，锻炼同学学习能力、动手能力和分析问题能力。【实验目的】1、熟悉VMware workstation虚拟机使用2、了解OpenStack整体架构3、了解OpenStack各组件功能4、能够在Linux下手动搭建OpenStack云计算环境【实验环境】计算机实验室VMware workstation虚拟机【实验步骤】一、VMware workstation下安装CentOS 6.5 x64操作系统1、 首先安装VMware Workstation2、 创建OpenStack控制节点，文件 新建虚拟机3、 选择 典型（推荐） 下一步4、 稍后安装操作系统5、 选择操作系统和版本6、 输入虚拟机名称和安装路径7、 设置磁盘大小8、 自定义硬件9、 选择CentOS安装镜像文件10、 点击完成11、 启动虚拟机12、 选择第一项，安装全新操作系统或升级现有操作系统13、 Tab键进行选择，选择Skip，退出检测14、 点击Next15、 选择语言，这里选择的是中文简体16、 选择键盘样式17、 选择存储设备18、 输入主机名19、 配置网络20、 设置时区，勾选使用UTC时间21、 输入根用户（root）的密码22、 根据此Linux具体功能，选择不同的方式23、 选择现在自定义，自定义安装需要的软件，如桌面配置24、 点击下一步，开始安装25、 安装完成后，点击重新导引26、 点击前进按钮27、 点击是，同意许可，再点击前进按钮28、 创建用户29、 设置日期和时间，如果可以上网，勾选在网上同步日期和时间二、OpenStack环境预配置1、 设置OpenStack网络，一块NAT网卡，一块仅主机网卡2、 同理创建另外两台虚拟机，一台计算节点，一台网络节点3、 配置虚拟机网络环境，如下表服务器网卡配置主机名管理节点(ControllerNode)eth0:30eth1:30controller计算节点(ComputeNode)eth0:31eth1:31compute1网络节点(NetworkNode)eth0:32eth1:32eth2:(onboot=”yes”, bootproto=”none”)network三、OpenStack环境搭建1、 安装部署控制节点(1) 首先配置Linux能上网，可以ping通(2) 安装MySQL数据库如下执行命令# yum install ntp# service ntpd start# chkconfig ntpd on# yum install mysql mysql-server MySQL-python编辑 /etc/f 文件:# vi /etc/fmysqld.bind-address = 30 #添加这句mysqld.default-storage-engine = innodb #添加这句innodb_file_per_table #添加这句collation-server = utf8_general_ci#添加这句init-connect = SET NAMES utf8#添加这句character-set-server = utf8#添加这句保存退出# service mysqld start# chkconfig mysqld on# mysql_install_db# mysql_secure_installation(3) 安装OpenStack软件源包# yum install yum-plugin-priorities# yum install /repos/openstack/openstack-icehouse/rdo-release-icehouse-3.noarch.rpm# yum install /pub/epel/6/x86_64/epel-release-6-8.noarch.rpm# yum install openstack-utils# yum install openstack-selinux# yum upgrade# reboot(4) 安装qpid# yum install qpid-cpp-server编辑/etc/qpidd.conf文件# vi /etc/qpidd.confauth=no#修改为no保存退出# service qpidd start# chkconfig qpidd on(5) 安装keystone组件# yum install openstack-keystone python-keystoneclient# openstack-config -set /etc/keystone/keystone.conf database connection mysql:/keystone:keystonecontroller/keystone$ mysql -u root -pmysql CREATE DATABASE keystone;mysql GRANT ALL PRIVILEGES ON keystone.* TO keystonelocalhost IDENTIFIED BY keystone;mysql GRANT ALL PRIVILEGES ON keystone.* TO keystone% IDENTIFIED BY keystone;mysql exit# su -s /bin/sh -c keystone-manage db_sync keystone# ADMIN_TOKEN=$(openssl rand -hex 10)# echo $ADMIN_TOKEN# openstack-config -set /etc/keystone/keystone.conf DEFAULT admin_token $ADMIN_TOKEN# keystone-manage pki_setup -keystone-user keystone -keystone-group keystone# chown -R keystone:keystone /etc/keystone/ssl# chmod -R o-rwx /etc/keystone/ssl# service openstack-keystone start# chkconfig openstack-keystone on# (crontab -l -u keystone 2&1 | grep -q token_flush) | echo hourly /usr/bin/keystone-manage token_flush /var/log/keystone/keystone-tokenflush.log 2&1 /var/spool/cron/keystone编辑/.bash_profile文件，在最后添加export OS_USERNAME=adminexport OS_PASSWORD=adminexport OS_TENANT_NAME=adminexport OS_AUTH_URL=http:/controller:35357/v2.0export ADMIN_TOKEN=223e5aa00e1401925a5d【注意此值与ADMIN_TOKEN值一样】export SERVICE_TOKEN=$ADMIN_TOKENexport SERVICE_ENDPOINT=http:/controller:35357/v2.0export OS_SERVICE_TOKEN=$ADMIN_TOKENexport OS_SERVICE_ENDPOINT=http:/controller:35357/v2.0保存退出#source /.bash_profile$ keystone user-create -name=admin -pass=admin -email=$ keystone role-create -name=admin$ keystone tenant-create -name=admin -description=Admin Tenant$ keystone user-role-add -user=admin -tenant=admin -role=admin$ keystone user-role-add -user=admin -role=_member_ -tenant=admin$ keystone user-create -name=demo -pass=demo -email=$ keystone tenant-create -name=demo -description=Demo Tenant$ keystone user-role-add -user=demo -role=_member_ -tenant=demo$ keystone tenant-create -name=service -description=Service Tenant$ keystone service-create -name=keystone -type=identity -description=OpenStack Identity$ keystone endpoint-create -service-id=$(keystone service-list | awk / identity / print $2) -publicurl=http:/controller:5000/v2.0 -internalurl=http:/controller:500key0/v2.0 -adminurl=http:/controller:35357/v2.0(6) 安装glance组件# yum install openstack-glance python-glanceclient# openstack-config -set /etc/glance/glance-api.conf database connection mysql:/glance:glancecontroller/glance# openstack-config -set /etc/glance/glance-registry.conf database connection mysql:/glance:glancecontroller/glance$ mysql -u root -pmysql CREATE DATABASE glance;mysql GRANT ALL PRIVILEGES ON glance.* TO glancelocalhost IDENTIFIED BY glance;mysql GRANT ALL PRIVILEGES ON glance.* TO glance% IDENTIFIED BY glance;mysql exit;# openstack-db -init -service glance # keystone user-create -name=glance -pass=glance -email=# keystone user-role-add -user=glance -tenant=service -role=admin# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken auth_host controller# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken admin_user glance# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken admin_password glance# openstack-config -set /etc/glance/glance-api.conf paste_deploy flavor keystone# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken auth_host controller# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken admin_user glance# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken admin_password glance# openstack-config -set /etc/glance/glance-registry.conf paste_deploy flavor keystone# keystone service-create -name=glance -type=image -description=OpenStack Image Service# keystone endpoint-create -service-id=$(keystone service-list | awk / image / print $2) -publicurl=http:/controller:9292 -internalurl=http:/controller:9292 -adminurl=http:/controller:9292# service openstack-glance-api restart# service openstack-glance-registry restart# chkconfig openstack-glance-api on# chkconfig openstack-glance-registry on(7) 安装Nova组件# yum install openstack-nova-api openstack-nova-cert openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler python-novaclient# openstack-config -set /etc/nova/nova.conf database connection mysql:/nova:novacontroller/nova# openstack-config -set /etc/nova/nova.conf DEFAULT rpc_backend qpid# openstack-config -set /etc/nova/nova.conf DEFAULT qpid_hostname controller# openstack-config -set /etc/nova/nova.conf DEFAULT my_ip 30# openstack-config -set /etc/nova/nova.conf DEFAULT vncserver_listen 30# openstack-config -set /etc/nova/nova.conf DEFAULT vncserver_proxyclient_address 30（控制节点Controller IP地址）$ mysql -u root -pmysql CREATE DATABASE nova;mysql GRANT ALL PRIVILEGES ON nova.* TO novalocalhost IDENTIFIED BY nova;mysql GRANT ALL PRIVILEGES ON nova.* TO nova% IDENTIFIED BY nova;mysql exit;# su -s /bin/sh -c nova-manage db sync nova# keystone user-create -name=nova -pass=nova -email=# keystone user-role-add -user=nova -tenant=service -role=admin# openstack-config -set /etc/nova/nova.conf DEFAULT auth_strategy keystone# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_host controller# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_user nova# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_password nova# keystone service-create -name=nova -type=compute -description=OpenStack Compute# keystone endpoint-create -service-id=$(keystone service-list | awk / compute / print $2) -publicurl=http:/controller:8774/v2/%(tenant_id)s -internalurl=http:/controller:8774/v2/%(tenant_id)s -adminurl=http:/controller:8774/v2/%(tenant_id)s# service openstack-nova-api restart# service openstack-nova-cert restart# service openstack-nova-consoleauth restart# service openstack-nova-scheduler restart# service openstack-nova-conductor restart# service openstack-nova-novncproxy restart# chkconfig openstack-nova-api on# chkconfig openstack-nova-cert on# chkconfig openstack-nova-consoleauth on# chkconfig openstack-nova-scheduler on# chkconfig openstack-nova-conductor on# chkconfig openstack-nova-novncproxy on(8) 安装Neutron组件# yum install openstack-neutron openstack-neutron-ml2 python-neutronclient$ mysql -u root -pmysql CREATE DATABASE neutron;mysql GRANT ALL PRIVILEGES ON neutron.* TO neutronlocalhost IDENTIFIED BY neutron;mysql GRANT ALL PRIVILEGES ON neutron.* TO neutron% IDENTIFIED BY neutron;mysql exit;$ keystone user-create -name neutron -pass neutron -email $ keystone user-role-add -user neutron -tenant service -role admin$ keystone service-create -name=neutron -type=network -description=OpenStack Networking$ keystone endpoint-create -service-id $(keystone service-list | awk / network / print $2) -publicurl http:/controller:9696 -adminurl http:/controller:9696 -internalurl http:/controller:9696# openstack-config -set /etc/neutron/neutron.conf database connection mysql:/neutron:neutroncontroller/neutron# openstack-config -set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_host controller# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken admin_user neutron# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken admin_password neutron# openstack-config -set /etc/neutron/neutron.conf DEFAULT rpc_backend mon.rpc.impl_qpid# openstack-config -set /etc/neutron/neutron.conf DEFAULT qpid_hostname controller# openstack-config -set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_status_changes True# openstack-config -set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_data_changes True# openstack-config -set /etc/neutron/neutron.conf DEFAULT nova_url http:/controller:8774/v2# openstack-config -set /etc/neutron/neutron.conf DEFAULT nova_admin_username nova# openstack-config -set /etc/neutron/neutron.conf DEFAULT nova_admin_tenant_id $(keystone tenant-list | awk / service / print $2 )# openstack-config -set /etc/neutron/neutron.conf DEFAULT nova_admin_password nova# openstack-config -set /etc/neutron/neutron.conf DEFAULT nova_admin_auth_url http:/controller:35357/v2.0# openstack-config -set /etc/neutron/neutron.conf DEFAULT core_plugin ml2# openstack-config -set /etc/neutron/neutron.conf DEFAULT service_plugins router# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers gre# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types gre# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers openvswitch# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_gre tunnel_id_ranges 1:1000# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_security_group True# openstack-config -set /etc/nova/nova.conf DEFAULT network_api_class work.neutronv2.api.API# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_url http:/controller:9696# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_auth_strategy keystone# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_admin_tenant_name service# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_admin_username neutron# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_admin_password neutron# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_admin_auth_url http:/controller:35357/v2.0# openstack-config -set /etc/nova/nova.conf DEFAULT linuxnet_interface_driver work.linux_net.LinuxOVSInterfaceDriver# openstack-config -set /etc/nova/nova.conf DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver# openstack-config -set /etc/nova/nova.conf DEFAULT security_group_api neutron security_group_api neutron# ln -s plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini# service openstack-nova-api restart# service openstack-nova-scheduler restart# service openstack-nova-conductor restart# service neutron-server restart# chkconfig neutron-server on2、 安装部署计算节点(1) 首先配置Linux能上网，可以ping通(2) 安装OpenStack软件包源# yum install yum-plugin-priorities# yum install /repos/openstack/openstack-icehouse/rdo-release-icehouse-3.noarch.rpm# yum install /pub/epel/6/x86_64/epel-release-6-8.noarch.rpm# yum install openstack-utils# yum install openstack-selinux# yum upgrade# reboot(3) 安装Nova组件# yum install openstack-nova-compute# openstack-config -set /etc/nova/nova.conf database connection mysql:/nova:novacontroller/nova# openstack-config -set /etc/nova/nova.conf DEFAULT auth_strategy keystone# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_host controller# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_user nova# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_password nova# openstack-config -set /etc/nova/nova.conf DEFAULT rpc_backend qpid# openstack-config -set /etc/nova/nova.conf DEFAULT qpid_hostname controller# openstack-config -set /etc/nova/nova.conf DEFAULT my_ip 31# openstack-config -set /etc/nova/nova.conf DEFAULT vnc_enabled True# openstack-config -set /etc/nova/nova.conf DEFAULT vncserver_listen # openstack-config -set /etc/nova/nova.conf DEFAULT vncserver_proxyclient_address 31# openstack-config -set /etc/nova/nova.conf DEFAULT novncproxy_base_url http:/controller:6080/vnc_auto.html# openstack-config -set /etc/nova/nova.conf DEFAULT glance_host controller# egrep -c (vmx|svm) /proc/cpuinfo（如果返回0，执行下面这句，否则不执行）# openstack-config -set /etc/nova/nova.conf libvirt virt_type qemu# service libvirtd start# service messagebus start# service openstack-nova-compute start# chkconfig libvirtd on# chkconfig messagebus on# chkconfig openstack-nova-compute on(4) 安装Neutron组件编辑 /etc/sysctl.conf文件# vi /etc/sysctl.confnet.ipv4.conf.all.rp_filter=0net.ipv4.conf.default.rp_filter=0保存退出# modprobe bridge# sysctl -p# yum install openstack-neutron-ml2 openstack-neutron-openvswitch# openstack-config -set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_host controller# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken aut