项目6-OpenStack计算服务

OpenStack计算服务项目6学习目标问题引导1.Nova是什么？2.创建虚拟机实例靠什么分配资源？3.Nova在OpenStack中提供什么服务？知识学习Iaas系统的主要部分是OpenStack计算服务，OpenStack云平台使用计算服务来托管和管理云计算系统。Nova是OpenStack云平台中的计算控制器。它支持OpenStack云中实例（instances）生命周期的所有活动都由Nova处理。这样就使得Nova成为一个负责管理计算资源、网络、认证、所需可扩展的平台。•因为认证，与OpenStack身份认证交互；•因为磁盘和服务器镜像，与镜像服务Glance交互；•因为提供图形化界面，与仪表盘Dashboard交互；•实现实例的生命周期的管理；•调用管理平台的网络、存储等资源；•支持KVM、VMeare等同名的hypervisor(虚拟化监视器)；•hypervisor提供软件来管理虚拟机对底层硬件的访问；•异步的一致性通信；1.Nova简介2.Nova的主要功能任务描述01Nova的部署02使用和管理计算服务03基于Web界面管理实例任务一：Nova的部署1.在控制节点安装和配置计算服务组件[root@controller~]#mysql-uroot-p000000//创建nova_api,nova,nova_cell0数据库MariaDB[(none)]> CREATEDATABASEnova_api;MariaDB[(none)]> CREATEDATABASEnova;MariaDB[(none)]> CREATEDATABASEnova_cell0;//创建nova_api，nova数据库用户，使其可以对nova_api,nova数据库有完全控制权限MariaDB[(none)]> GRANTALLPRIVILEGESONnova_api.*TO'nova'@'localhost'IDENTIFIEDBY'NOVA_DBPASS';MariaDB[(none)]> GRANTALLPRIVILEGESONnova_api.*TO'nova'@'%'IDENTIFIEDBY'NOVA_DBPASS';MariaDB[(none)]> GRANTALLPRIVILEGESONnova.*TO'nova'@'localhost'IDENTIFIEDBY'NOVA_DBPASS';MariaDB[(none)]> GRANTALLPRIVILEGESONnova.*TO'nova'@'%'IDENTIFIEDBY'NOVA_DBPASS';MariaDB[(none)]> GRANTALLPRIVILEGESONnova_cell0.*TO'nova'@'localhost'IDENTIFIEDBY'NOVA_DBPASS';MariaDB[(none)]> GRANTALLPRIVILEGESONnova_cell0.*TO'nova'@'%'IDENTIFIEDBY'NOVA_DBPASS';//退出数据库MariaDB[(none)]> exit任务一：Nova的部署在Keystone创建系统用户(glance、nova、neutron)关联角色[root@controller~]#openstackusercreate--domaindefault--passwordNOVA_PASSnova[root@controller~]#openstackroleadd--projectservice--usernovaadmin在Keystone上创建服务和注册API[root@controller~]#openstackservicecreate--namenova--description"OpenStackCompute"compute[root@controller~]#openstackendpointcreate--regionRegionOne\computepublichttp://controller:8774/v2.1[root@controller~]#openstackendpointcreate--regionRegionOne\computeinternalhttp://controller:8774/v2.1[root@controller~]#openstackendpointcreate--regionRegionOne\computeadminhttp://controller:8774/v2.1任务一：Nova的部署我们需要安装Nova服务相关的软件包；openstack-nova-conductor负责的是数据库openstack-nova-novncproxy负责的是云主机的连接openstack-nova-scheduler负责的是调度[root@controller~]#yuminstall-yopenstack-nova-apiopenstack-nova-conductoropenstack-nova-novncproxyopenstack-nova-scheduler任务一：Nova的部署接下开就是修改配置文件了修改/etc/nova/nova.conf[root@controller~]#cp/etc/nova/nova.conf{,.bak}[root@controller~]#grep'^[a-Z\[]'/etc/nova/nova.conf.bak>/etc/nova/nova.conf[root@controller~]#openstack-config--set/etc/nova/nova.confDEFAULTenabled_apisosapi_compute,metadata[root@controller~]#openstack-config--set/etc/nova/nova.confapi_databaseconnectionmysql+pymysql://nova:NOVA_DBPASS@controller/nova_api[root@controller~]#openstack-config--set/etc/nova/nova.confdatabaseconnectionmysql+pymysql://nova:NOVA_DBPASS@controller/nova[root@controller~]#openstack-config--set/etc/nova/nova.confDEFAULTtransport_urlrabbit://openstack:RABBIT_PASS@controller:5672/[root@controller~]#openstack-config--set/etc/nova/nova.confapiauth_strategykeystone[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenwww_authenticate_urihttp://controller:5000/[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenauth_urlhttp://controller:5000/[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenmemcached_serverscontroller:11211[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenauth_typepassword[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenproject_domain_nameDefault[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenuser_domain_nameDefault[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenproject_nameservice[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenusernamenova[root@controller~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenpasswordNOVA_PASS任务一：Nova的部署[root@controller~]#openstack-config--set/etc/nova/nova.confDEFAULTmy_ip0 ###替换自己的IP!!![root@controller~]#openstack-config--set/etc/nova/nova.confDEFAULTuse_neutronTrue[root@controller~]#openstack-config--set/etc/nova/nova.confDEFAULTfirewall_drivernova.virt.firewall.NoopFirewallDriver[root@controller~]#openstack-config--set/etc/nova/nova.confvncenabledtrue[root@controller~]#openstack-config--set/etc/nova/nova.confvncserver_listen'$my_ip'[root@controller~]#openstack-config--set/etc/nova/nova.confvncserver_proxyclient_address'$my_ip'[root@controller~]#openstack-config--set/etc/nova/nova.confglanceapi_servershttp://controller:9292[root@controller~]#openstack-config--set/etc/nova/nova.confoslo_concurrencylock_path/var/lib/nova/tmp[root@controller~]#openstack-config--set/etc/nova/nova.confplacementregion_nameRegionOne[root@controller~]#openstack-config--set/etc/nova/nova.confplacementproject_domain_nameDefault[root@controller~]#openstack-config--set/etc/nova/nova.confplacementproject_nameservice[root@controller~]#openstack-config--set/etc/nova/nova.confplacementauth_typepassword[root@controller~]#openstack-config--set/etc/nova/nova.confplacementuser_domain_nameDefault[root@controller~]#openstack-config--set/etc/nova/nova.confplacementauth_urlhttp://controller:5000/v3[root@controller~]#openstack-config--set/etc/nova/nova.confplacementusernameplacement[root@controller~]#openstack-config--set/etc/nova/nova.confplacementpasswordPLACEMENT_PASS任务一：Nova的部署[root@controller~]#su-s/bin/sh-c"nova-manageapi_dbsync"nova[root@controller~]#su-s/bin/sh-c"nova-managecell_v2map_cell0"nova[root@controller~]#su-s/bin/sh-c"nova-managecell_v2create_cell--name=cell1--verbose"nova[root@controller~]#su-s/bin/sh-c"nova-managedbsync"nova数据库同步：同步之后进入数据库查看Nova库是否有数据,忽略警告接下来验证novacell0和cell1是否正确注册[root@controller~]#su-s/bin/sh-c"nova-managecell_v2list_cells"nova+-------+--------------------------------------+------------------------------------------+-------------------------------------------------+----------+|Name|UUID|TransportURL|DatabaseConnection|Disabled|+-------+--------------------------------------+------------------------------------------+-------------------------------------------------+----------+|cell0|00000000-0000-0000-0000-000000000000|none:/|mysql+pymysql://nova:****@controller/nova_cell0|False||cell1|e9c5a4d7-880f-4783-958b-85d44bad22b1|rabbit://openstack:****@controller:5672/|mysql+pymysql://nova:****@controller/nova|False|+-------+--------------------------------------+------------------------------------------+-------------------------------------------------+----------+任务一：Nova的部署[root@controller~]#systemctlenable\openstack-nova-api.service\openstack-nova-scheduler.service\openstack-nova-conductor.service\openstack-nova-novncproxy.service[root@controller~]#systemctlstart\openstack-nova-api.service\openstack-nova-scheduler.service\openstack-nova-conductor.service\openstack-nova-novncproxy.service[root@controller~]#systemctlstatus\openstack-nova-api.service\openstack-nova-scheduler.service\openstack-nova-conductor.service\openstack-nova-novncproxy.service启动nova服务任务一：Nova的部署[root@compute~]#yum-yinstallopenstack-nova-computeopenstack-utils.noarch2.在计算节点安装和配置计算服务组件安装软件包修改配置文件，修改/etc/nova/nova.conf文件[root@compute~]#cp/etc/nova/nova.conf{,.bak}[root@compute~]#grep'^[a-Z\[]'/etc/nova/nova.conf.bak>/etc/nova/nova.conf[root@compute~]#openstack-config--set/etc/nova/nova.confDEFAULTenabled_apisosapi_compute,metadata[root@compute~]#openstack-config--set/etc/nova/nova.confDEFAULTtransport_urlrabbit://openstack:RABBIT_PASS@controller[root@compute~]#openstack-config--set/etc/nova/nova.confapiauth_strategykeystone[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenwww_authenticate_urihttp://controller:5000[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenauth_urlhttp://controller:5000/[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenmemcached_serverscontroller:11211[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtoken任务一：Nova的部署auth_typepassword[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenproject_domain_nameDefault[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenuser_domain_nameDefault[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenproject_nameservice[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenusernamenova[root@compute~]#openstack-config--set/etc/nova/nova.confkeystone_authtokenpasswordNOVA_PASS[root@compute~]#openstack-config--set/etc/nova/nova.confDEFAULTmy_ip0###替换自己computeIP[root@compute~]#openstack-config--set/etc/nova/nova.confDEFAULTuse_neutronTrue[root@compute~]#openstack-config--set/etc/nova/nova.confDEFAULTfirewall_drivernova.virt.firewall.NoopFirewallDriver[root@compute~]#openstack-config--set/etc/nova/nova.confvncenabledTrue[root@compute~]#openstack-config--set/etc/nova/nova.confvncvncserver_listen[root@compute~]#openstack-config--set/etc/nova/nova.confvncvncserver_proxyclient_address'$my_ip'[root@compute~]#openstack-config--set/etc/nova/nova.confvncnovncproxy_base_url0:6080/vnc_auto.html###服务器组件监听所有的IP地址，而代理组件仅仅监听计算节点管理网络接口的IP地址。基本的URL指示您可以使用Web浏览器访问位于该计算节点上实例的远程控制台的位置。[root@compute~]#openstack-config--set/etc/nova/nova.confglanceapi_servershttp://controller:9292[root@compute~]#openstack-config--set/etc/nova/nova.confoslo_concurrencylock_path/var/lib/nova/tmp[root@compute~]#openstack-config--set/etc/nova/nova.confplacementregion_nameRegionOne[root@compute~]#openstack-config--set/etc/nova/nova.confplacementproject_domain_nameDefault[root@compute~]#openstack-config--set/etc/nova/nova.confplacementproject_nameservice[root@compute~]#openstack-config--set/etc/nova/nova.confplacementauth_typepassword[root@compute~]#openstack-config--set/etc/nova/nova.confplacementuser_domain_nameDefault[root@compute~]#openstack-config--set/etc/nova/nova.confplacementauth_urlhttp://controller:5000/v3[root@compute~]#openstack-config--set/etc/nova/nova.confplacementusernameplacement任务一：Nova的部署确定您的计算节点是否支持虚拟机的硬件加速[root@compute~]#egrep-c'(vmx|svm)'/proc/cpuinfo//如不为0，则您的计算节点支持硬件加速，这通常不需要额外的配置//如果返回值为0，则您的计算节点不支持硬件加速，您必须配置libvirt为使用QEMU而不是KVM，执行以下命令！[root@compute~]#openstack-config--set/etc/nova/nova.conflibvirtvirt_typeqemu启动Nova服务[root@compute~]#systemctlenablelibvirtd.serviceopenstack-nova-compute.service[root@compute~]#systemctlstartlibvirtd.serviceopenstack-nova-compute.service返回控制节点查看[root@controller~]#openstackcomputeservicelist--servicenova-compute+----+--------------+---------+------+---------+-------+----------------------------+|ID|Binary|Host|Zone|Status|State|UpdatedAt|+----+--------------+---------+------+---------+-------+----------------------------+|10|nova-compute|compute|nova|enabled|up|2021-12-17T06:59:11.000000|+----+--------------+---------+------+---------+-------+----------------------------+任务一：Nova的部署发现计算节点主机：添加新的计算节点时，必须在控制节点上运行以注册这些新的计算节点[root@controller~]#su-s/bin/sh-c"nova-managecell_v2discover_hosts--verbose"novaFound2cellmappings.Skippingcell0sinceitdoesnotcontainhosts.Gettingcomputesfromcell'cell1':e9c5a4d7-880f-4783-958b-85d44bad22b1Checkinghostmappingforcomputehost'compute':b5a4c6b3-ad48-4e74-b5f4-76cb6f55f8d3Creatinghostmappingforcomputehost'compute':b5a4c6b3-ad48-4e74-b5f4-76cb6f55f8d3Found1unmappedcomputesincell:e9c5a4d7-880f-4783-958b-85d44bad22b1配置适当的间隔执行：我们这里配置的时300秒，可以自行设置[root@controller~]#openstack-config--set/etc/nova/nova.confschedulerdiscover_hosts_in_cells_interval300任务一：Nova的部署查看nova是否正常[root@controller~]#novaservice-list+--------------------------------------+----------------+------------+----------+---------+-------+----------------------------+-----------------+-------------+|Id|Binary|Host|Zone|Status|State|Updated_at|DisabledReason|Forceddown|+--------------------------------------+----------------+------------+----------+---------+-------+----------------------------+-----------------+-------------+|c606ddf6-2213-459e-b07e-e8219c9c24fc|nova-conductor|controller|internal|enabled|up|2021-12-17T07:13:17.000000|-|False||6608eb09-0130-4cdd-8311-f53082e14508|nova-scheduler|controller|internal|enabled|up|2021-12-17T07:13:18.000000|-|False||2012503b-9c09-4575-96e1-991b1f8dbf5e|nova-compute|compute|nova|enabled|up|2021-12-17T07:13:21.000000|-|False|+--------------------------------------+----------------+------------+----------+---------+-------+----------------------------+-----------------+-------------+任务二：使用和管理计算服务在默认的情况下，如果我们不指定一个项目，用户只能管理被分配的项目的实例，即便你是管理员，默认也就只能管理admin项目的实例。假如你要管理其他项目的实例，你就可以使用--project选项来指定项目，但是前提是你得先具备相对应的权限。还可以使用--all-projects选项来操作所有的项目，只有管理员admin才具有此权限。如果要操控其他项目的实例的话，就必须指定其实例的ID，而不是实例名称。列出实例列表：[root@controller~]#openstackserverlist查看实例类型的详情：[root@controller~]#openstackservershowprovider-instance#openstackservershow<实例的ID或者名称>启动实例：[root@controller~]#openstackserverstartprovider-instance#openstackserverstart<实例ID或者名称>任务二：使用和管理计算服务关闭实例：[root@controller~]#openstackserverpauseprovider-instance#暂停实例[root@controller~]#openstackserverlist+--------------------------------------+-------------------+--------+---------------------+--------+---------+|ID|Name|status|Networks|Image|Flavor|+--------------------------------------+-------------------+--------+---------------------+--------+---------+|6235538e-f3b2-43f7-87ed-1c54d1c7dae8|test|ACTIVE|XXX=21|cirros|m1.nano||a80564bd-1f07-47c3-b264-6c9cd43ec8d4|provider-instance|PAUsED|XXX=58|cirros|m1.nano|+--------------------------------------+-------------------+--------+---------------------+--------+---------+[root@controller~]#openstackserverunpauseprovider-instance#恢复实例后一样名称和ID都可以接[root@controller~]#openstackserverstop名称或者ID实例暂停及恢复：任务二：使用和管理计算服务[root@controller~]#openstackserverreboottest[root@controller~]#openstackserverlist+--------------------------------------+-------------------+---------+---------------------+--------+---------+|ID|Name|status|Networks|Image|Flavor|+--------------------------------------+-------------------+---------+---------------------+--------+---------+|6235538e-f3b2-43f7-87ed-1c54d1c7dae8|test|REBooT|XXX=21|cirros|m1.nano||a80564bd-1f07-47c3-b264-6c9cd43ec8d4|provider-instance|sHUToFF|XXX=58|cirros|m1.nano|+--------------------------------------+-------------------+---------+---------------------+--------+---------+重启实例[root@controller~]#openstackserverset--name666test#修改实例名称[root@controller~]#openstackserverlist+--------------------------------------+-------------------+---------+---------------------+--------+---------+|ID|Name|status|Networks|Image|Flavor|+--------------------------------------+-------------------+---------+---------------------+--------+-----