【云原生系列】openstack搭建过程及使用

一时失言乱红尘 2024-03-22 21:04 108阅读 0赞

**目录**

搭建步骤

准备工作

正式部署OpenStack

安装的过程

安装组件如下

登录页面

进入首页

创建实例步骤

上传镜像

配置网络

服务器配置

dashboard配置

密钥配置免密登录

创建实例

绑定浮动ip

免密登录实例

--------------------

## 搭建步骤 ##

### 准备工作 ###

1.关闭防火墙和网关

systemctl disable NetworkManager
    
    systemctl disable firewalld
    
    systemctl stop NetworkManager
    
    systemctl stop firewalld

2.更换yum源

bash <(curl -sSL https://gitee.com/SuperManito/LinuxMirrors/raw/main/ChangeMirrors.sh)

![183875f08703429192a223834f842367.png][]

1.  选择中科大镜像源。
2.  注意不要安装EPEL扩展源因为会导致稍后安装packstack失败，建议只更换基础源不要更换OpenStack相关的源避免后续在获取某些软件包时超时失败。
3.  使用HTTP协议
4.  更新软件包
5.  清空已下载软件包缓存

最好就是选择“更新软件包”完成之后再执行一次

yum makecache

3.安装openstack-train源

yum install centos-release-openstack-train

4.安装packstack

yum install openstack-packstack

5.修改主机名

hostnamectl set-hostname packstack
    
    exec bash

6.修改/etc/selinux/config禁用selinux

vi /etc/selinux/config

修改标红处

![2b2c0fb06198479395e035c64f2bda4a.png][]

7.临时关闭selinux

setenforce 0

8.重启及创建快照

reboot

### 正式部署OpenStack ###

packstack --allinone

### 安装的过程 ###

Clean Up [ DONE ]
    
    Discovering ip protocol version [ DONE ]
    
    Setting up ssh keys [ DONE ]
    
    Preparing servers [ DONE ]
    
    Pre installing Puppet and discovering hosts' details [ DONE ]
    
    Preparing pre-install entries [ DONE ]
    
    Setting up CACERT [ DONE ]
    
    Preparing AMQP entries [ DONE ]
    
    Preparing MariaDB entries [ DONE ]
    
    Fixing Keystone LDAP config parameters to be undef if empty[ DONE ]
    
    Preparing Keystone entries [ DONE ]
    
    Preparing Glance entries [ DONE ]  Shared Services共享服务
    
    Checking if the Cinder server has a cinder-volumes vg[ DONE ]Storage 存储
    
    Preparing Cinder entries [ DONE ]
    
    Preparing Nova API entries [ DONE ]
    
    Creating ssh keys for Nova migration [ DONE ]
    
    Gathering ssh host keys for Nova migration [ DONE ]
    
    Preparing Nova Compute entries [ DONE ]
    
    Preparing Nova Scheduler entries [ DONE ]
    
    Preparing Nova VNC Proxy entries [ DONE ]
    
    Preparing OpenStack Network-related Nova entries [ DONE ]
    
    Preparing Nova Common entries [ DONE ]Compute计算
    
    Preparing Neutron LBaaS Agent entries [ DONE ]
    
    Preparing Neutron API entries [ DONE ]Networking网络
    
    Preparing Neutron L3 entries [ DONE ]
    
    Preparing Neutron L2 Agent entries [ DONE ]
    
    Preparing Neutron DHCP Agent entries [ DONE ]
    
    Preparing Neutron Metering Agent entries [ DONE ]
    
    Checking if NetworkManager is enabled and running [ DONE ]
    
    Preparing OpenStack Client entries [ DONE ]
    
    Preparing Horizon entries [ DONE ]Web frontends 网路的前端
    
    Preparing Swift builder entries [ DONE ]
    
    Preparing Swift proxy entries [ DONE ]
    
    Preparing Swift storage entries [ DONE ] Storage存储
    
    Preparing Gnocchi entries [ DONE ]
    
    Preparing MongoDB entries [ DONE ]
    
    Preparing Redis entries [ DONE ]
    
    Preparing Ceilometer entries [ DONE ]
    
    Preparing Aodh entries [ DONE ]
    
    Preparing Puppet manifests [ DONE ]
    
    Copying Puppet modules and manifests [ DONE ]
    
    Applying 192.168.0.120_controller.pp
    
    192.168.0.120_controller.pp: [ DONE ]
    
    Applying 192.168.0.120_network.pp
    
    192.168.0.120_network.pp: [ DONE ] 网络
    
    Applying 192.168.0.120_compute.pp  计算
    
    192.168.0.120_compute.pp: [ DONE ]
    
    Applying Puppet manifests [ DONE ]
    
    Finalizing [ DONE ]

如下图所示表示安装成功

![format_png][]

### 安装组件如下 ###

![9f94b11d42624992af080ecb46598271.png][]

![9b357f75c9734efcae06d058dd44afec.png][]

## 登录页面 ##

访问openstack服务所部署的ip地址，自动跳转到登录页

![b41a4143584c4022bbf01fb6d34c3507.png][]

用户名有两个，admin和demo

初始密码在安装目录下

![407d33042cdb4fb0bcdd7a746b4e6af4.png][]

cat keystonerc_admin

![a289fe2bac4b417480d6eccdbae2d783.png][]

### 进入首页 ###

![77fe45012312466d904dea7b83f7a61f.png][]

## 创建实例步骤 ##

### 上传镜像 ###

选用CentOS7的这个镜像，你可以使用admin账号上传镜像并将“可见性”设置成“公有”

镜像下载地址：

> \# centos7  
> http://cloud.centos.org/centos/7/images/
> 
> \# ubuntu  
> http://cloud-images.ubuntu.com/focal/20220213/
> 
> \# windows  
> https://cloudbase.it/windows-cloud-images/\#download

![edbf392c994f4eaba89078495aaf5bb6.png][]

等待的时间可能较长，成功后如下

![48a405a38c5143c98a4eb75200696505.png][]

### **配置网络** ###

#### 服务器配置 ####

网络的配置部分，我们需要修改网卡的配置还有桥接网桥的配置实现OpenStack实例访问外网

我的网卡是ens33，有的可能是ens192，与自己的保持一致即可

vi /etc/sysconfig/network-scripts/ifcfg-ens33
    
    #ifcfg-ens33
    TYPE=OVSPort
    BOOTPROTO=none
    NAME=ens33
    DEVICE=ens33
    ONBOOT=yes
    DEVICETYPE=ovs
    OVS_BRIDGE=br-ex

vi /etc/sysconfig/network-scripts/ifcfg-br-ex
    
    
    TYPE=OVSBridge
    PROXY_METHOD=none
    BROWSER_ONLY=no
    BOOTPROTO=none
    DEFROUTE=yes
    IPV4_FAILURE_FATAL=no
    IPV6INIT=no
    NAME=br-ex
    DEVICE=br-ex
    ONBOOT=yes
    IPADDR=192.168.25.24  #本机地址
    GATEWAY=192.168.25.254  #服务器的网关，使用vmware的话在网络配置器可以看到
    PREFIX=24
    DNS1=8.8.8.8
    DEVICETYPE=ovs

配置后重启网络

systemctl restart network

使用 ip addr命令检查网桥是否成功设置IP地址并能连通外网

![59e297563f5b4b669ac331b93f652afe.png][]

#### dashboard配置 ####

**直接以admin身份登录**

来到管理员选项卡中的网络-网络可以看到当前有两个项目，admin项目是外网，demo项目是其自有的私网，目前外网的子网网段不符合实际情况需要进行重新创建![50c5ae30a5ac428c9359576e5c89fc4a.png][]

来到管理员选项卡中的网络-路由可以看到默认demo项目已经有了一个路由绑定了外部网络，需要先对其删除才能重新创建public中的子网

![e9853e66a18c47eaaedf99f940a9bfd4.png][]

回到管理员选项卡中的网络-网络，直接点击蓝色public进行子网的重新创建![cf5cfcbe0a3444638b6e5dca5e50fdec.png][]

先删除原子网![4fc5e9b7bf3b411c9930d04dfb8f4833.png][]

再点击创建子网

![4cf05186162441c5bc9d1826f14e8023.png][]

![5f6f50a253f04a139b060e8116b637a3.png][]

子网创建完成

![1b83ad89ff3a4dc0a369bcdc4f9b9f54.png][]

重新创建demo项目的路由

![568993900cc34c1388c1af4023404087.png][]

退出当前账户，**使用demo账户登录**

![ad733a2920e04401a50a6312579b4adf.png][]

进入网络-路由，点击刚刚重新创建的demo路由,给其添加一个接口用于私网用于连接外部网络

![04a8462d5ada4b3f9d7e13e0b1e5d446.png][]

添加成功列表

![53497f1de1044a4d8882d27323aa7415.png][]

进入网络-网络拓扑查看网络拓扑，检查是否内外网通过demo路由连接到一起,此为配置完成

![09e8a2200c454a34b390454f6eeffbb6.png][]

为了Ping通和能够使用SSH登录到实例需要修改默认安全组规则

![f5448f54ef7d4b628820e74367d9e266.png][]![481b1f7d93db4c418c28f66f8b6b6f03.png][]

![4071f6e42f83495cadf4e66120849bdb.png][]

添加一个浮动IP用于绑定实例，通过这个浮动IP可以和实例进行关联，通过浮动ip进入该实例

名字尽量和实例对应

![bc2cbd6122a343e6821660ba42487155.png][]

### 密钥配置免密登录 ###

在计算选项卡导入宿主机的公钥/终端模拟软件生成的密钥用于SSH连接实例

这里导入宿主机的公钥，安装packstack时应该默认就已经自动生成了一个公钥，可以直接使用这个公钥

![f6988d5764b242bc99ff51715e1ca062.png][]

点击导入密钥，第一次导入的话不会报错，我之前已经导入过一次了。

![34896fcf90a34cc4be4869fe46ef5063.png][]

### 创建实例 ###

在计算-实例页面创建实例

![24606083919d46e8ba4a2afd7ec32866.png][]![f4a5501bb68a4fac929942fb054bda11.png][]![de00186cee91490097388bbc6aef7f6b.png][]点击创建实例完成创建。创建成功后列表如下

![05566f8489374782bb2b140cc72fc15e.png][]

### 绑定浮动ip ###

![304504ea9c4345e5bbbcb2be57aae2c6.png][]

选择当时创建的浮动ip，端口选择默认的。然后点击关联

![3edf843d3505455893f9f15f0485463a.png][]

列表如下，已经绑定浮动IP

![675c51202d254c49a5d7b3d445c58795.png][]

## 免密登录实例 ##

在openstack服务器中，通过ssh命令进入

ssh centos@192.168.25.133

![d14e4eab811a4e98b096242777376200.png][]

![image2023-7-26_11-22-54.png_version_1_modificationDate_1690341775042_api_v2][]

[183875f08703429192a223834f842367.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/1ffd319500a04768af5f48de300bf1d6.png
[2b2c0fb06198479395e035c64f2bda4a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/8c569732299f4fad9d2119ccce8b1581.png
[format_png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/e3ae726de56247bb8fdde205d3f635e5.png
[9f94b11d42624992af080ecb46598271.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/ff9f6381eca743978478849220dfbe7c.png
[9b357f75c9734efcae06d058dd44afec.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/8cfebb0cf6614a239b02130637aabad0.png
[b41a4143584c4022bbf01fb6d34c3507.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/e7e5067501ef4376a99a729d750bc601.png
[407d33042cdb4fb0bcdd7a746b4e6af4.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/e7f91c9bd4ab4a80b9d0c8094d618739.png
[a289fe2bac4b417480d6eccdbae2d783.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/94da17b9d681409798ac40a0a03c51ab.png
[77fe45012312466d904dea7b83f7a61f.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/aa37edc57cb54c51bd3b3609acfe27a2.png
[edbf392c994f4eaba89078495aaf5bb6.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/723aa8f892254ab49ab52d30bcfe8649.png
[48a405a38c5143c98a4eb75200696505.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/ee0033786f58454892ae2e86d3faf52e.png
[59e297563f5b4b669ac331b93f652afe.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/1c6496730c0f4d3192ca668019edd59d.png
[50c5ae30a5ac428c9359576e5c89fc4a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/e0c7e40fb59f4a4eaf58a7f40d4bbdf3.png
[e9853e66a18c47eaaedf99f940a9bfd4.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/c5ede6fc2c244737ac00656c2512550a.png
[cf5cfcbe0a3444638b6e5dca5e50fdec.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/30c44a0f0f6d4268aec4dc59a9ca8085.png
[4fc5e9b7bf3b411c9930d04dfb8f4833.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/5d036dcdf700415ca5548cde8f1676a2.png
[4cf05186162441c5bc9d1826f14e8023.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/3916d5db00554ecfa9b89b22db9224d9.png
[5f6f50a253f04a139b060e8116b637a3.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/ee1088e64ee34b999befbd1f4802e4fd.png
[1b83ad89ff3a4dc0a369bcdc4f9b9f54.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/9109363ed618406db8a6b5014f6099a8.png
[568993900cc34c1388c1af4023404087.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/a908992da00840bb9c1130008b16f823.png
[ad733a2920e04401a50a6312579b4adf.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/2480704c6a734db1bcb6bc2436e63e61.png
[04a8462d5ada4b3f9d7e13e0b1e5d446.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/198f78d8517842c09dbdae6687f43c0c.png
[53497f1de1044a4d8882d27323aa7415.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/9897757197364745904ff5acf1fb882d.png
[09e8a2200c454a34b390454f6eeffbb6.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/dcf41c2f69c8499db11c94ad3ecc3138.png
[f5448f54ef7d4b628820e74367d9e266.png]: https://img-blog.csdnimg.cn/f5448f54ef7d4b628820e74367d9e266.png
[481b1f7d93db4c418c28f66f8b6b6f03.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/8fe005acc4dc41ac8db6e4b9ce305dcc.png
[4071f6e42f83495cadf4e66120849bdb.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/e00c00e0823943479d7c15e2c52a735e.png
[bc2cbd6122a343e6821660ba42487155.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/469cf30b4b794e289eb6b5fb0663356d.png
[f6988d5764b242bc99ff51715e1ca062.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/c9e542886e024be98b786690c9b312ce.png
[34896fcf90a34cc4be4869fe46ef5063.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/3366b81f09b6473c96f868ce2e4e448f.png
[24606083919d46e8ba4a2afd7ec32866.png]: https://img-blog.csdnimg.cn/24606083919d46e8ba4a2afd7ec32866.png
[f4a5501bb68a4fac929942fb054bda11.png]: https://img-blog.csdnimg.cn/f4a5501bb68a4fac929942fb054bda11.png
[de00186cee91490097388bbc6aef7f6b.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/6c9c43fa21864acc8a38e3a641184386.png
[05566f8489374782bb2b140cc72fc15e.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/bc92a08eb7f349f69946c9055ab4b0f2.png
[304504ea9c4345e5bbbcb2be57aae2c6.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/03fcc6636500436abc3ee92ab7298783.png
[3edf843d3505455893f9f15f0485463a.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/e4653887ed0e4d64b561e69e1fda3e28.png
[675c51202d254c49a5d7b3d445c58795.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/c27eb577ccbf44dd9cfdd683a3760631.png
[d14e4eab811a4e98b096242777376200.png]: https://image.dandelioncloud.cn/pgy_files/images/2024/03/14/412ff7f4f7f14e048c5c628aa977ce56.png
[image2023-7-26_11-22-54.png_version_1_modificationDate_1690341775042_api_v2]: http://192.168.25.233:8090/download/attachments/2425086/image2023-7-26_11-22-54.png?version=1&modificationDate=1690341775042&api=v2