openstack安装和使用

分手后的思念是犯贱 2023-03-14 13:17 9阅读 0赞

前言

本篇文章会介绍openstack的安装、openstack各组件的配置和功能、还会演示openstack云主机的创建流程，整篇文章花费一天时间完成，万字长文，需要的可以关注，相互学习，本篇文章总体分为三个部分：

第一部分讲解openstack安装

第二部分讲解openstack组件，包括：

keystone
    glance
    nova
    neutron
    dashboard

第三部分讲解openstack使用，如：

创建云主机
    创建公网
    创建子网
    配置路由
    配置防火墙
    配置安全策略
    创建云主机存储卷等

openstack简介

Openstack是一个开源的云平台管理项目，可以用于构建公有云或者私有云平台，提供了基础设施及服务（Iaas）的解决方案，OpenStack是一个云操作系统，通过数据中心可控制计算、存储、网络等资源池,OpenStack覆盖了网络、虚拟化、操作系统、服务器等各个方面，通过openstack可以启动，分配和管理虚拟机资源,所有的管理也都可以通过前端界面就可以完成。我们部署openstack之后，可以通过这个平台创建各个不同版本的虚拟机，如centos，windows等系统，可以按需分配cpu，内存，磁盘给这些虚拟机，同时还可以提供网络支持。

**第一部分：openstack安装篇**

操作系统版本选择centos7.6或者更高版本

controller节点：三个60G硬盘 ，8G内存/4核CPU，两块桥接网卡

computer节点：两个60G硬盘 ，6G内存/4核CPU/，两块桥接网卡

机器规划

**controller节点****：**

ens33：192.168.0.100，提供浮动ip的，也就是出网地址（能访问baidu.com）
    ens37：192.168.0.200，内网之间通信用

**computer****节点：**

ens33：192.168.0.110，提供浮动ip的，也就是出网地址
    ens37：192.168.0.210，内网之间通信用

**修改虚拟机的ip变成静态ip，controller节点的配置如下所示：**

cat /etc/sysconfig/network-scripts/ifcfg-ens33

TYPE=Ethernet

PROXY\_METHOD=none

BROWSER\_ONLY=no

BOOTPROTO=static

DEFROUTE=yes

IPV4\_FAILURE\_FATAL=no

IPV6INIT=yes

IPV6\_AUTOCONF=yes

IPV6\_DEFROUTE=yes

IPV6\_FAILURE\_FATAL=no

IPV6\_ADDR\_GEN\_MODE=stable-privacy

NAME=ens33

DEVICE=ens33

ONBOOT=yes

IPADDR=192.168.0.100

NETMASK=255.255.255.0

GATEWAY=192.168.0.1

DNS1=8.8.8.8

cat /etc/sysconfig/network-scripts/ifcfg-ens37

TYPE=Ethernet

PROXY\_METHOD=none

BROWSER\_ONLY=no

BOOTPROTO=static

DEFROUTE=yes

IPV4\_FAILURE\_FATAL=no

IPV6INIT=yes

IPV6\_AUTOCONF=yes

IPV6\_DEFROUTE=yes

IPV6\_FAILURE\_FATAL=no

IPV6\_ADDR\_GEN\_MODE=stable-privacy

NAME=ens37

DEVICE=ens37

ONBOOT=yes

IPADDR=192.168.0.200

NETMASK=255.255.255.0

GATEWAY=192.168.0.1

DNS1=8.8.8.8

**修改配置文件之后需要重启网络服务才能使配置生效，重启网络服务命令如下：**

service network restart

** **

**注：**ifcfg-ens33文件配置解释：

IPADDR=192.168.0.100

\#ip地址，需要跟自己电脑所在网段一致

NETMASK=255.255.255.0

\#子网掩码，需要跟自己电脑所在网段一致

GATEWAY=192.168.0.1

\#网关，在自己电脑打开cmd，输入ipconfig /all可看到

DNS1=192.168.0.1

\#DNS，在自己电脑打开cmd，输入ipconfig /all可看到

配置hosts文件，各个节点保持一致

**cat /etc/hosts  **

**在最后一行添加如下内容**

192.168.0.200 controller

192.168.0.210 computer

配置yum源，各个节点操作

（1）备份原来的yum源

mv /etc/yum.repos.d/CentOS-Base.repo  /etc/yum.repos.d/CentOS-Base.repo.backup

（2）下载阿里的yum源

wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo

（3）生成新的yum缓存

yum makecache fast

（4）清理yum缓存

yum clean all

（5）更新yum源

yum -y update

初始化，各个节点操作

yum -y install wget net-tools nfs-utils lrzsz gccgcc-c++ make cmake libxml2-devel openssl-devel curl curl-devel unzip sudo ntplibaio-devel wget vim ncurses-devel autoconf automake zlib-devel python-devel epel-release lrzsz openssh-server telnet

关闭防火墙、networkmanager，iptables，各个节点操作

systemctl stop firewalld && systemctl disable firewalld && systemctl stop NetworkManager && systemctl disable NetworkManager && systemctl  stop  iptables &&  systemctl disable  iptables

关闭selinux，各个节点操作

关闭selinux，设置永久关闭，这样重启机器selinux也处于关闭状态

修改/etc/sysconfig/selinux和/etc/selinux/config文件，把

SELINUX=enforcing变成SELINUX=disabled，也可用下面方式修改：

sed -i  's/SELINUX=enforcing/SELINUX=disabled/' /etc/sysconfig/selinux

sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

配置主机名

192.168.0.100上操作

hostnamectl set-hostname controller

192.168.0.110上操作

hostnamectl set-hostname computer

做时间同步，各个节点操作

ntpdate cn.pool.ntp.org

配置无密码登陆，各个节点操作

ssh-keygen -t rsa

\#一直回车即可

ssh-copy-id -i .ssh/id\_rsa.pub controller

ssh-copy-id -i .ssh/id\_rsa.pub computer

开始安装openstack

**openstack软件包在百度网盘，链接如下：**

链接：https://pan.baidu.com/s/1dHDF4WxvNoqcJd90mDxrbA 
    提取码：yz56

**（1）上传openstack离线软件包到root目录下（在controller和computer节点操作）**

在root下创建一个目录openstack，然后把软件包解压到这个目录下

mkdir /root/openstack && cd openstack && tar zxvf /root/openstack\_N.tar.gz

**（2）解压之后会出现一个openstack目录，把openstack目录整体移动到/下（controller和computer节点操作）**

mv openstack /

**（3）重新配置yum源（controller和computer节点都操作）**

cd /etc/yum.repos.d/ && mkdir bak && mv CentOS-\* bak/ && mv epel\* bak/

cp bak/CentOS-Base.repo  ./

**（4）生成一个新的openstack的yum源**

cat <<EOF > /etc/yum.repos.d/openstack.repo

\[openstack\]

enable=1

gpgcheck=0

baseurl=file:///openstack

EOF

yum makecache

安装openstack应答文件（controller节点操作）

yum install centos-release-openstack-newton -y

**在controller和computer节点执行如下一条命令**

cd /etc/yum.repos.d && mv \*.repo bak/ && mv bak/openstack.repo ./ && cp bak/CentOS-Base.repo ./

**这样在/etc/yum.repos.d下只有如下两个repo文件，这样才可以确保后面安装成功：**

CentOS-Base.repo 
    openstack.repo

**接下来的操作继续在controller节点执行**

yum makecache

yum install openstack-packstack -y

cd /root

packstack --gen-answer-file=openstack.txt

\#这样会生成一个应答文件openstack.txt

**（1）查看openstack应答文件内容**

grep -vE '^$|^\#' openstack.txt

\[general\]

CONFIG\_SSH\_KEY=/root/.ssh/id\_rsa.pub

CONFIG\_DEFAULT\_PASSWORD=

CONFIG\_SERVICE\_WORKERS=%\{::processorcount\}

CONFIG\_MARIADB\_INSTALL=y

CONFIG\_GLANCE\_INSTALL=y

CONFIG\_CINDER\_INSTALL=y

CONFIG\_MANILA\_INSTALL=n

CONFIG\_NOVA\_INSTALL=y

CONFIG\_NEUTRON\_INSTALL=y

CONFIG\_HORIZON\_INSTALL=y

CONFIG\_SWIFT\_INSTALL=y

CONFIG\_CEILOMETER\_INSTALL=y

CONFIG\_AODH\_INSTALL=y

CONFIG\_GNOCCHI\_INSTALL=y

CONFIG\_SAHARA\_INSTALL=n

CONFIG\_HEAT\_INSTALL=n

CONFIG\_TROVE\_INSTALL=n

CONFIG\_IRONIC\_INSTALL=n

CONFIG\_CLIENT\_INSTALL=y

CONFIG\_NTP\_SERVERS=

CONFIG\_NAGIOS\_INSTALL=y

EXCLUDE\_SERVERS=

CONFIG\_DEBUG\_MODE=n

CONFIG\_CONTROLLER\_HOST=192.168.0.100

CONFIG\_COMPUTE\_HOSTS=192.168.0.100

CONFIG\_NETWORK\_HOSTS=192.168.0.100

CONFIG\_VMWARE\_BACKEND=n

CONFIG\_UNSUPPORTED=n

CONFIG\_USE\_SUBNETS=n

CONFIG\_VCENTER\_HOST=

CONFIG\_VCENTER\_USER=

CONFIG\_VCENTER\_PASSWORD=

CONFIG\_VCENTER\_CLUSTER\_NAMES=

CONFIG\_STORAGE\_HOST=192.168.0.100

CONFIG\_SAHARA\_HOST=192.168.0.100

CONFIG\_USE\_EPEL=n

CONFIG\_REPO=

CONFIG\_ENABLE\_RDO\_TESTING=n

CONFIG\_RH\_USER=

CONFIG\_SATELLITE\_URL=

CONFIG\_RH\_SAT6\_SERVER=

CONFIG\_RH\_PW=

CONFIG\_RH\_OPTIONAL=y

CONFIG\_RH\_PROXY=

CONFIG\_RH\_SAT6\_ORG=

CONFIG\_RH\_SAT6\_KEY=

CONFIG\_RH\_PROXY\_PORT=

CONFIG\_RH\_PROXY\_USER=

CONFIG\_RH\_PROXY\_PW=

CONFIG\_SATELLITE\_USER=

CONFIG\_SATELLITE\_PW=

CONFIG\_SATELLITE\_AKEY=

CONFIG\_SATELLITE\_CACERT=

CONFIG\_SATELLITE\_PROFILE=

CONFIG\_SATELLITE\_FLAGS=

CONFIG\_SATELLITE\_PROXY=

CONFIG\_SATELLITE\_PROXY\_USER=

CONFIG\_SATELLITE\_PROXY\_PW=

CONFIG\_SSL\_CACERT\_FILE=/etc/pki/tls/certs/selfcert.crt

CONFIG\_SSL\_CACERT\_KEY\_FILE=/etc/pki/tls/private/selfkey.key

CONFIG\_SSL\_CERT\_DIR=~/packstackca/

CONFIG\_SSL\_CACERT\_SELFSIGN=y

CONFIG\_SSL\_CERT\_SUBJECT\_C=--

CONFIG\_SSL\_CERT\_SUBJECT\_ST=State

CONFIG\_SSL\_CERT\_SUBJECT\_L=City

CONFIG\_SSL\_CERT\_SUBJECT\_O=openstack

CONFIG\_SSL\_CERT\_SUBJECT\_OU=packstack

CONFIG\_SSL\_CERT\_SUBJECT\_CN=controller

CONFIG\_SSL\_CERT\_SUBJECT\_MAIL=admin@controller

CONFIG\_AMQP\_BACKEND=rabbitmq

CONFIG\_AMQP\_HOST=192.168.0.100

CONFIG\_AMQP\_ENABLE\_SSL=n

CONFIG\_AMQP\_ENABLE\_AUTH=n

CONFIG\_AMQP\_NSS\_CERTDB\_PW=PW\_PLACEHOLDER

CONFIG\_AMQP\_AUTH\_USER=amqp\_user

CONFIG\_AMQP\_AUTH\_PASSWORD=PW\_PLACEHOLDER

CONFIG\_MARIADB\_HOST=192.168.0.100

CONFIG\_MARIADB\_USER=root

CONFIG\_MARIADB\_PW=790d13b37c5d4256

CONFIG\_KEYSTONE\_DB\_PW=d00c51216f0d407e

CONFIG\_KEYSTONE\_DB\_PURGE\_ENABLE=True

CONFIG\_KEYSTONE\_REGION=RegionOne

CONFIG\_KEYSTONE\_ADMIN\_TOKEN=1929401395424bbfae56e4f5d3d14470

CONFIG\_KEYSTONE\_ADMIN\_EMAIL=root@localhost

CONFIG\_KEYSTONE\_ADMIN\_USERNAME=admin

CONFIG\_KEYSTONE\_ADMIN\_PW=98bb8a18d3b44d5b

CONFIG\_KEYSTONE\_DEMO\_PW=3a1c3aa52f714ce7

CONFIG\_KEYSTONE\_API\_VERSION=v2.0

CONFIG\_KEYSTONE\_TOKEN\_FORMAT=UUID

CONFIG\_KEYSTONE\_IDENTITY\_BACKEND=sql

CONFIG\_KEYSTONE\_LDAP\_URL=ldap://192.168.0.100

CONFIG\_KEYSTONE\_LDAP\_USER\_DN=

CONFIG\_KEYSTONE\_LDAP\_USER\_PASSWORD=

CONFIG\_KEYSTONE\_LDAP\_SUFFIX=

CONFIG\_KEYSTONE\_LDAP\_QUERY\_SCOPE=one

CONFIG\_KEYSTONE\_LDAP\_PAGE\_SIZE=-1

CONFIG\_KEYSTONE\_LDAP\_USER\_SUBTREE=

CONFIG\_KEYSTONE\_LDAP\_USER\_FILTER=

CONFIG\_KEYSTONE\_LDAP\_USER\_OBJECTCLASS=

CONFIG\_KEYSTONE\_LDAP\_USER\_ID\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_USER\_NAME\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_USER\_MAIL\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_USER\_ENABLED\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_USER\_ENABLED\_MASK=-1

CONFIG\_KEYSTONE\_LDAP\_USER\_ENABLED\_DEFAULT=TRUE

CONFIG\_KEYSTONE\_LDAP\_USER\_ENABLED\_INVERT=n

CONFIG\_KEYSTONE\_LDAP\_USER\_ATTRIBUTE\_IGNORE=

CONFIG\_KEYSTONE\_LDAP\_USER\_DEFAULT\_PROJECT\_ID\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_USER\_ALLOW\_CREATE=n

CONFIG\_KEYSTONE\_LDAP\_USER\_ALLOW\_UPDATE=n

CONFIG\_KEYSTONE\_LDAP\_USER\_ALLOW\_DELETE=n

CONFIG\_KEYSTONE\_LDAP\_USER\_PASS\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_USER\_ENABLED\_EMULATION\_DN=

CONFIG\_KEYSTONE\_LDAP\_USER\_ADDITIONAL\_ATTRIBUTE\_MAPPING=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_SUBTREE=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_FILTER=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_OBJECTCLASS=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_ID\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_NAME\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_MEMBER\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_DESC\_ATTRIBUTE=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_ATTRIBUTE\_IGNORE=

CONFIG\_KEYSTONE\_LDAP\_GROUP\_ALLOW\_CREATE=n

CONFIG\_KEYSTONE\_LDAP\_GROUP\_ALLOW\_UPDATE=n

CONFIG\_KEYSTONE\_LDAP\_GROUP\_ALLOW\_DELETE=n

CONFIG\_KEYSTONE\_LDAP\_GROUP\_ADDITIONAL\_ATTRIBUTE\_MAPPING=

CONFIG\_KEYSTONE\_LDAP\_USE\_TLS=n

CONFIG\_KEYSTONE\_LDAP\_TLS\_CACERTDIR=

CONFIG\_KEYSTONE\_LDAP\_TLS\_CACERTFILE=

CONFIG\_KEYSTONE\_LDAP\_TLS\_REQ\_CERT=demand

CONFIG\_GLANCE\_DB\_PW=8d1d5db7e0ea4b0e

CONFIG\_GLANCE\_KS\_PW=4373de2ce59c4282

CONFIG\_GLANCE\_BACKEND=file

CONFIG\_CINDER\_DB\_PW=f17a2c40c2a34d3d

CONFIG\_CINDER\_DB\_PURGE\_ENABLE=True

CONFIG\_CINDER\_KS\_PW=6e37e28106a34dcb

CONFIG\_CINDER\_BACKEND=lvm

CONFIG\_CINDER\_VOLUMES\_CREATE=y

CONFIG\_CINDER\_VOLUMES\_SIZE=20G

CONFIG\_CINDER\_GLUSTER\_MOUNTS=

CONFIG\_CINDER\_NFS\_MOUNTS=

CONFIG\_CINDER\_NETAPP\_LOGIN=

CONFIG\_CINDER\_NETAPP\_PASSWORD=

CONFIG\_CINDER\_NETAPP\_HOSTNAME=

CONFIG\_CINDER\_NETAPP\_SERVER\_PORT=80

CONFIG\_CINDER\_NETAPP\_STORAGE\_FAMILY=ontap\_cluster

CONFIG\_CINDER\_NETAPP\_TRANSPORT\_TYPE=http

CONFIG\_CINDER\_NETAPP\_STORAGE\_PROTOCOL=nfs

CONFIG\_CINDER\_NETAPP\_SIZE\_MULTIPLIER=1.0

CONFIG\_CINDER\_NETAPP\_EXPIRY\_THRES\_MINUTES=720

CONFIG\_CINDER\_NETAPP\_THRES\_AVL\_SIZE\_PERC\_START=20

CONFIG\_CINDER\_NETAPP\_THRES\_AVL\_SIZE\_PERC\_STOP=60

CONFIG\_CINDER\_NETAPP\_NFS\_SHARES=

CONFIG\_CINDER\_NETAPP\_NFS\_SHARES\_CONFIG=/etc/cinder/shares.conf

CONFIG\_CINDER\_NETAPP\_VOLUME\_LIST=

CONFIG\_CINDER\_NETAPP\_VFILER=

CONFIG\_CINDER\_NETAPP\_PARTNER\_BACKEND\_NAME=

CONFIG\_CINDER\_NETAPP\_VSERVER=

CONFIG\_CINDER\_NETAPP\_CONTROLLER\_IPS=

CONFIG\_CINDER\_NETAPP\_SA\_PASSWORD=

CONFIG\_CINDER\_NETAPP\_ESERIES\_HOST\_TYPE=linux\_dm\_mp

CONFIG\_CINDER\_NETAPP\_WEBSERVICE\_PATH=/devmgr/v2

CONFIG\_CINDER\_NETAPP\_STORAGE\_POOLS=

CONFIG\_CINDER\_SOLIDFIRE\_LOGIN=

CONFIG\_CINDER\_SOLIDFIRE\_PASSWORD=

CONFIG\_CINDER\_SOLIDFIRE\_HOSTNAME=

CONFIG\_IRONIC\_DB\_PW=PW\_PLACEHOLDER

CONFIG\_IRONIC\_KS\_PW=PW\_PLACEHOLDER

CONFIG\_NOVA\_DB\_PURGE\_ENABLE=True

CONFIG\_NOVA\_DB\_PW=9a58820d437a4602

CONFIG\_NOVA\_KS\_PW=146383d19ded4bf3

CONFIG\_NOVA\_MANAGE\_FLAVORS=y

CONFIG\_NOVA\_SCHED\_CPU\_ALLOC\_RATIO=16.0

CONFIG\_NOVA\_SCHED\_RAM\_ALLOC\_RATIO=1.5

CONFIG\_NOVA\_COMPUTE\_MIGRATE\_PROTOCOL=tcp

CONFIG\_NOVA\_COMPUTE\_MANAGER=nova.compute.manager.ComputeManager

CONFIG\_VNC\_SSL\_CERT=

CONFIG\_VNC\_SSL\_KEY=

CONFIG\_NOVA\_PCI\_ALIAS=

CONFIG\_NOVA\_PCI\_PASSTHROUGH\_WHITELIST=

CONFIG\_NOVA\_LIBVIRT\_VIRT\_TYPE=%\{::default\_hypervisor\}

CONFIG\_NOVA\_COMPUTE\_PRIVIF=

CONFIG\_NOVA\_NETWORK\_MANAGER=nova.network.manager.FlatDHCPManager

CONFIG\_NOVA\_NETWORK\_PUBIF=eth0

CONFIG\_NOVA\_NETWORK\_PRIVIF=

CONFIG\_NOVA\_NETWORK\_FIXEDRANGE=192.168.32.0/22

CONFIG\_NOVA\_NETWORK\_FLOATRANGE=10.3.4.0/22

CONFIG\_NOVA\_NETWORK\_AUTOASSIGNFLOATINGIP=n

CONFIG\_NOVA\_NETWORK\_VLAN\_START=100

CONFIG\_NOVA\_NETWORK\_NUMBER=1

CONFIG\_NOVA\_NETWORK\_SIZE=255

CONFIG\_NEUTRON\_KS\_PW=9977d7bd457c4981

CONFIG\_NEUTRON\_DB\_PW=f41058185ba84956

CONFIG\_NEUTRON\_L3\_EXT\_BRIDGE=br-ex

CONFIG\_NEUTRON\_METADATA\_PW=5c098167b4f941a8

CONFIG\_LBAAS\_INSTALL=n

CONFIG\_NEUTRON\_METERING\_AGENT\_INSTALL=y

CONFIG\_NEUTRON\_FWAAS=n

CONFIG\_NEUTRON\_VPNAAS=n

CONFIG\_NEUTRON\_ML2\_TYPE\_DRIVERS=vxlan

CONFIG\_NEUTRON\_ML2\_TENANT\_NETWORK\_TYPES=vxlan

CONFIG\_NEUTRON\_ML2\_MECHANISM\_DRIVERS=openvswitch

CONFIG\_NEUTRON\_ML2\_FLAT\_NETWORKS=\*

CONFIG\_NEUTRON\_ML2\_VLAN\_RANGES=

CONFIG\_NEUTRON\_ML2\_TUNNEL\_ID\_RANGES=

CONFIG\_NEUTRON\_ML2\_VXLAN\_GROUP=

CONFIG\_NEUTRON\_ML2\_VNI\_RANGES=10:100

CONFIG\_NEUTRON\_L2\_AGENT=openvswitch

CONFIG\_NEUTRON\_ML2\_SUPPORTED\_PCI\_VENDOR\_DEVS=\['15b3:1004','8086:10ca'\]

CONFIG\_NEUTRON\_ML2\_SRIOV\_AGENT\_REQUIRED=n

CONFIG\_NEUTRON\_ML2\_SRIOV\_INTERFACE\_MAPPINGS=

CONFIG\_NEUTRON\_LB\_INTERFACE\_MAPPINGS=

CONFIG\_NEUTRON\_OVS\_BRIDGE\_MAPPINGS=

CONFIG\_NEUTRON\_OVS\_BRIDGE\_IFACES=

CONFIG\_NEUTRON\_OVS\_BRIDGES\_COMPUTE=

CONFIG\_NEUTRON\_OVS\_TUNNEL\_IF=

CONFIG\_NEUTRON\_OVS\_TUNNEL\_SUBNETS=

CONFIG\_NEUTRON\_OVS\_VXLAN\_UDP\_PORT=4789

CONFIG\_MANILA\_DB\_PW=PW\_PLACEHOLDER

CONFIG\_MANILA\_KS\_PW=PW\_PLACEHOLDER

CONFIG\_MANILA\_BACKEND=generic

CONFIG\_MANILA\_NETAPP\_DRV\_HANDLES\_SHARE\_SERVERS=false

CONFIG\_MANILA\_NETAPP\_TRANSPORT\_TYPE=https

CONFIG\_MANILA\_NETAPP\_LOGIN=admin

CONFIG\_MANILA\_NETAPP\_PASSWORD=

CONFIG\_MANILA\_NETAPP\_SERVER\_HOSTNAME=

CONFIG\_MANILA\_NETAPP\_STORAGE\_FAMILY=ontap\_cluster

CONFIG\_MANILA\_NETAPP\_SERVER\_PORT=443

CONFIG\_MANILA\_NETAPP\_AGGREGATE\_NAME\_SEARCH\_PATTERN=(.\*)

CONFIG\_MANILA\_NETAPP\_ROOT\_VOLUME\_AGGREGATE=

CONFIG\_MANILA\_NETAPP\_ROOT\_VOLUME\_NAME=root

CONFIG\_MANILA\_NETAPP\_VSERVER=

CONFIG\_MANILA\_GENERIC\_DRV\_HANDLES\_SHARE\_SERVERS=true

CONFIG\_MANILA\_GENERIC\_VOLUME\_NAME\_TEMPLATE=manila-share-%s

CONFIG\_MANILA\_GENERIC\_SHARE\_MOUNT\_PATH=/shares

CONFIG\_MANILA\_SERVICE\_IMAGE\_LOCATION=https://www.dropbox.com/s/vi5oeh10q1qkckh/ubuntu\_1204\_nfs\_cifs.qcow2

CONFIG\_MANILA\_SERVICE\_INSTANCE\_USER=ubuntu

CONFIG\_MANILA\_SERVICE\_INSTANCE\_PASSWORD=ubuntu

CONFIG\_MANILA\_NETWORK\_TYPE=neutron

CONFIG\_MANILA\_NETWORK\_STANDALONE\_GATEWAY=

CONFIG\_MANILA\_NETWORK\_STANDALONE\_NETMASK=

CONFIG\_MANILA\_NETWORK\_STANDALONE\_SEG\_ID=

CONFIG\_MANILA\_NETWORK\_STANDALONE\_IP\_RANGE=

CONFIG\_MANILA\_NETWORK\_STANDALONE\_IP\_VERSION=4

CONFIG\_MANILA\_GLUSTERFS\_SERVERS=

CONFIG\_MANILA\_GLUSTERFS\_NATIVE\_PATH\_TO\_PRIVATE\_KEY=

CONFIG\_MANILA\_GLUSTERFS\_VOLUME\_PATTERN=

CONFIG\_MANILA\_GLUSTERFS\_TARGET=

CONFIG\_MANILA\_GLUSTERFS\_MOUNT\_POINT\_BASE=

CONFIG\_MANILA\_GLUSTERFS\_NFS\_SERVER\_TYPE=gluster

CONFIG\_MANILA\_GLUSTERFS\_PATH\_TO\_PRIVATE\_KEY=

CONFIG\_MANILA\_GLUSTERFS\_GANESHA\_SERVER\_IP=

CONFIG\_HORIZON\_SSL=n

CONFIG\_HORIZON\_SECRET\_KEY=a0158fbb560a411dbe29ebca9a3d2f66

CONFIG\_HORIZON\_SSL\_CERT=

CONFIG\_HORIZON\_SSL\_KEY=

CONFIG\_HORIZON\_SSL\_CACERT=

CONFIG\_SWIFT\_KS\_PW=af2c0e6494874e79

CONFIG\_SWIFT\_STORAGES=

CONFIG\_SWIFT\_STORAGE\_ZONES=1

CONFIG\_SWIFT\_STORAGE\_REPLICAS=1

CONFIG\_SWIFT\_STORAGE\_FSTYPE=ext4

CONFIG\_SWIFT\_HASH=1c92f9123f994595

CONFIG\_SWIFT\_STORAGE\_SIZE=2G

CONFIG\_HEAT\_DB\_PW=PW\_PLACEHOLDER

CONFIG\_HEAT\_AUTH\_ENC\_KEY=15f6ef4aad554643

CONFIG\_HEAT\_KS\_PW=PW\_PLACEHOLDER

CONFIG\_HEAT\_CLOUDWATCH\_INSTALL=n

CONFIG\_HEAT\_CFN\_INSTALL=y

CONFIG\_HEAT\_DOMAIN=heat

CONFIG\_HEAT\_DOMAIN\_ADMIN=heat\_admin

CONFIG\_HEAT\_DOMAIN\_PASSWORD=PW\_PLACEHOLDER

CONFIG\_PROVISION\_DEMO=y

CONFIG\_PROVISION\_TEMPEST=n

CONFIG\_PROVISION\_DEMO\_FLOATRANGE=172.24.4.224/28

CONFIG\_PROVISION\_IMAGE\_NAME=cirros

CONFIG\_PROVISION\_IMAGE\_URL=http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86\_64-disk.img

CONFIG\_PROVISION\_IMAGE\_FORMAT=qcow2

CONFIG\_PROVISION\_IMAGE\_SSH\_USER=cirros

CONFIG\_PROVISION\_UEC\_IMAGE\_NAME=cirros-uec

CONFIG\_PROVISION\_UEC\_IMAGE\_KERNEL\_URL=http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86\_64-kernel

CONFIG\_PROVISION\_UEC\_IMAGE\_RAMDISK\_URL=http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86\_64-initramfs

CONFIG\_PROVISION\_UEC\_IMAGE\_DISK\_URL=http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86\_64-disk.img

CONFIG\_TEMPEST\_HOST=

CONFIG\_PROVISION\_TEMPEST\_USER=

CONFIG\_PROVISION\_TEMPEST\_USER\_PW=PW\_PLACEHOLDER

CONFIG\_PROVISION\_TEMPEST\_FLOATRANGE=172.24.4.224/28

CONFIG\_PROVISION\_TEMPEST\_REPO\_URI=https://github.com/openstack/tempest.git

CONFIG\_PROVISION\_TEMPEST\_REPO\_REVISION=master

CONFIG\_RUN\_TEMPEST=n

CONFIG\_RUN\_TEMPEST\_TESTS=smoke

CONFIG\_PROVISION\_OVS\_BRIDGE=y

CONFIG\_GNOCCHI\_DB\_PW=de94d43493ee4f22

CONFIG\_GNOCCHI\_KS\_PW=851d3c2e0dfb4733

CONFIG\_CEILOMETER\_SECRET=fd8180f8741b4577

CONFIG\_CEILOMETER\_KS\_PW=4ecf716db75d4df8

CONFIG\_CEILOMETER\_SERVICE\_NAME=httpd

CONFIG\_CEILOMETER\_COORDINATION\_BACKEND=redis

CONFIG\_CEILOMETER\_METERING\_BACKEND=database

CONFIG\_MONGODB\_HOST=192.168.0.100

CONFIG\_REDIS\_HOST=192.168.0.100

CONFIG\_REDIS\_PORT=6379

CONFIG\_AODH\_KS\_PW=aa05a4e252aa4d8b

CONFIG\_TROVE\_DB\_PW=PW\_PLACEHOLDER

CONFIG\_TROVE\_KS\_PW=PW\_PLACEHOLDER

CONFIG\_TROVE\_NOVA\_USER=trove

CONFIG\_TROVE\_NOVA\_TENANT=services

CONFIG\_TROVE\_NOVA\_PW=PW\_PLACEHOLDER

CONFIG\_SAHARA\_DB\_PW=PW\_PLACEHOLDER

CONFIG\_SAHARA\_KS\_PW=PW\_PLACEHOLDER

CONFIG\_NAGIOS\_PW=3df8622a70e64edf

**（2）修改openstack.txt文件，需要修改的内容如下，大家按照你们自己规划ens33和ens37网段的ip进行修改：**

CONFIG\_DEFAULT\_PASSWORD=123456

CONFIG\_SWIFT\_INSTALL=n

CONFIG\_NAGIOS\_INSTALL=n

CONFIG\_CINDER\_VOLUMES\_SIZE=2G

CONFIG\_PROVISION\_DEMO=n

CONFIG\_LBAAS\_INSTALL=y

CONFIG\_NEUTRON\_FWAAS=y

CONFIG\_NEUTRON\_VPNAAS=y

CONFIG\_CONTROLLER\_HOST=192.168.0.200

\#controller节点的ens37网卡的ip

CONFIG\_COMPUTE\_HOSTS=192.168.0.210

\#computer节点的ens37网卡的ip

CONFIG\_NETWORK\_HOSTS=192.168.0.210

\#computer节点的ens37网卡的ip

**（3）查看修改之后的openstack.txt文件中安装哪些**

**grep -vE '^$|^\#' openstack.txt |grep y**

CONFIG\_MARIADB\_INSTALL=y

CONFIG\_GLANCE\_INSTALL=y

CONFIG\_CINDER\_INSTALL=y

CONFIG\_NOVA\_INSTALL=y

CONFIG\_NEUTRON\_INSTALL=y

CONFIG\_HORIZON\_INSTALL=y

CONFIG\_CEILOMETER\_INSTALL=y

CONFIG\_AODH\_INSTALL=y

CONFIG\_GNOCCHI\_INSTALL=y

CONFIG\_CLIENT\_INSTALL=y

CONFIG\_RH\_OPTIONAL=y

CONFIG\_SSL\_CACERT\_KEY\_FILE=/etc/pki/tls/private/selfkey.key

CONFIG\_SSL\_CACERT\_SELFSIGN=y

CONFIG\_SSL\_CERT\_SUBJECT\_L=City

CONFIG\_CINDER\_VOLUMES\_CREATE=y

CONFIG\_NOVA\_MANAGE\_FLAVORS=y

CONFIG\_NOVA\_LIBVIRT\_VIRT\_TYPE=%\{::default\_hypervisor\}

CONFIG\_LBAAS\_INSTALL=y

CONFIG\_NEUTRON\_METERING\_AGENT\_INSTALL=y

CONFIG\_NEUTRON\_FWAAS=y

CONFIG\_NEUTRON\_VPNAAS=y

CONFIG\_HEAT\_CFN\_INSTALL=y

CONFIG\_PROVISION\_OVS\_BRIDGE=y

看到y的表示是需要安装的组件

安装openstack组件-controller节点操作

基于应答文件安装openstack组件，按如下命令操作：

packstack--answer-file=openstack.txt

上面命令执行成功之后再回到conputer节点执行如下操作：

cd /etc/yum.repos.d && mv CentOS-Ceph-Jewel.repo CentOS-OpenStack-newton.repo CentOS-QEMU-EV.repo CentOS-Storage-common.repo bak/

**（1）安装过程需要查看iptables状态，在controller和computer节点**

systemctl status iptables

如果发现iptables处于active状态，需要停掉

systemctl stop iptables

**（2）看到如下说明安装成功**

192.168.124.200_controller.pp:                       [ DONE ]            
    Applying 192.168.124.201_network.pp
    192.168.124.201_network.pp:                          [ DONE ]         
    Applying 192.168.124.201_compute.pp
    192.168.124.201_compute.pp:                          [ DONE ]         
    Applying Puppet manifests                            [ DONE ]
    Finalizing                                           [ DONE ]
    
    
     **** Installation completed successfully ******

配置rabbitmq：

**（1）启动rabbitmq的管理界面，controller节点操作**

rabbitmq-plugins enable rabbitmq\_management

**（2）在浏览器访问**

192.168.0.200:15672

账号：guest

密码：guest

出现如下界面

![format_png][]

## 技术交流群    ##

为了大家更快速的学习知识，掌握技术，随时沟通问题，特组建了技术交流群，大家在群里可以分享自己的技术栈，抛出日常问题，群里会有很多大佬及时解答，这样我们就会结识很多志同道合的人，群里还有很多关于kubernetes/docker/devops/openstack/openshift/linux/IaaS/PaaS的免费文章和视频，长按下图可加我微信，备注运维或者k8s或者devops即可进群，让我们共同努力，向着美好的未来出发吧~~~

![format_png 1][]

**微信：**luckylucky421302

## 微信公众号    ##

长按如下指纹可关注公众号·

![format_png 2][]

**第二部分：openstack组件介绍**

访问openstack的dashboard界面

在浏览器输入：

192.168.0.200

账号：admin

密码：16e424911af144ca

\#密码获取方式参考后文内容

登陆之后显示如下界面

![format_png 3][]

获取密码的方法，在controller节点上操作：

cd  /root

[format_png]: /images/20230312/a3d2dacc9e7743a3b16d9b78ed868307.png
[format_png 1]: /images/20230312/e27b94cdeac645ae90aa2dc5da3d25ad.png
[format_png 2]: /images/20230312/c2521cd225d94f4db182d9a1bad6a150.png
[format_png 3]: /images/20230312/db3eb58f96f148e6ac4b0c5550f71b90.png