Openstack:ice-house安装过程

#apt-get install ntp
dpkg-reconfigure tzdata –> Asia –>Shuanghai

#apt-get install python-mysqldb mysql-server
Edit the /etc/mysql/my.cnf file:
[mysqld]

bind-address = 10.0.0.11
[mysqld]

default-storage-engine = innodb
innodb_file_per_table
collation-server = utf8_general_ci
init-connect = ‘SET NAMES utf8’
character-set-server = utf8

#service mysql restart

#mysql_install_db
#mysql_secure_installation


# apt-get install python-software-properties
# add-apt-repository cloud-archive:icehouse
# apt-get update
# apt-get dist-upgrade
# apt-get install linux-image-generic-lts-saucy
linux-headers-generic-lts-saucy
# reboot


# apt-get install rabbitmq-server
# rabbitmqctl change_password guest openstack


create database keystone default character set utf8;
grant all on keystone.* to ‘keystone’@’%’ identified by ‘openstack’;

#Install Identity
apt-get install keystone
rm /var/lib/keystone/keystone.db
vi /etc/keystone/keystone.conf
connection = mysql://keystone:openstack@keystone/keystone
su -s /bin/sh -c “keystone-manage db_sync” keystone
vi /etc/keystone/keystone.conf
[DEFAULT]
# A “shared secret” between keystone and other openstack services
admin_token = ADMIN_TOKEN
log_dir = /var/log/keystone
(crontab -l -u keystone 2>&1 | grep -q token_flush) || \
echo ‘@hourly /usr/bin/keystone-manage token_flush
>/var/log/keystone/keystone-tokenflush.log 2>&1’ >>
/var/spool/cron/crontabs/keystone


vi keystone-super
$ export OS_SERVICE_TOKEN=ADMIN_TOKEN
$ export OS_SERVICE_ENDPOINT=http://controller:35357/v2.0
keystone user-create –name=admin –pass=openstack
keystone role-create –name=admin
keystone tenant-create –name=admin –description=”Admin Tenant”
keystone user-role-add –user=admin –tenant=admin –role=admin

keystone user-role-add –user=admin –role=_member_ –tenant=admin

keystone tenant-create –name=service –description=”Service Tenant”

keystone user-create –name=demo –pass=openstack
keystone tenant-create –name=demo –description=”Demo Tenant”
keystone user-role-add –user=demo –role=_member_ –tenant=demo


keystone service-create –name=keystone –type=identity
–description=”OpenStack Identity”
keystone endpoint-create \
  –service-id=$(keystone service-list | awk ‘/ identity / {print $2}’)
\
  –publicurl=http://keystone:5000/v2.0 \
  –internalurl=http://keystone:5000/v2.0 \
  –adminurl=http://keystone:35357/v2.0


  apt-get install python-pip

#Instacll Image Service
apt-get install glance python-glanceclient
rm /var/lib/glance/glance.sqlite
vi /etc/glance/glance-api.conf
[database]
connection = mysql://glance:openstack@glance/glance
[keystone_authtoken]
auth_uri = http://keystone:5000
auth_host = keystone
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = openstack
[paste_deploy]

flavor = keystone

vi /etc/glance/glance-registry.conf
[database]
connection = mysql://glance:openstack@glance/glance
[keystone_authtoken]
auth_uri = http://keystone:5000
auth_host = keystone
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = openstack
[paste_deploy]

flavor = keystone

su -s /bin/sh -c “glance-manage db_sync” glance
keystone user-create –name=glance –pass=openstack
keystone user-role-add –user=glance –tenant=service –role=admin
keystone service-create –name=glance –type=image \
  –description=”OpenStack Image Service”
keystone endpoint-create \
  –service-id=$(keystone service-list | awk ‘/ image / {print $2}’)
\
  –publicurl=http://glance:9292 \
  –internalurl=http://glance:9292 \
  –adminurl=http://glance:9292

service glance-registry restart
service glance-api restart


mkdir /tmp/images
cd /tmp
wget
http://cdn.download.cirros-cloud.net/0.3.2/cirros-0.3.2-x86_64-disk.img

glance image-create –name=’cirros-0.3.2-x86_64′ –disk-format=qcow2
\
  –container-format=bare  –is-public=True –progress <
cirros-0.3.2-x86_64-disk.img


#Install Compute

  1. 创建DB
    create database nova;
    grant all on nova.* to ‘nova’@’%’ identified by ‘openstack’;

  2. 创建keystone帐号
    keystone user-create –name=nova –pass=openstack
    keystone user-role-add –user=nova –tenant=service –role=admin

  3. 安装
    apt-get install nova-api nova-cert nova-conductor nova-consoleauth \
      nova-novncproxy nova-scheduler python-novaclient

apt-get install nova-compute-qemu python-guestfs

rm /var/lib/nova/nova.sqlite

  1. 配置
    vi /etc/nova/nova.conf

[DEFAULT]

auth_strategy = keystone

rpc_backend = rabbit
rabbit_host = controller
rabbit_password = openstack

my_ip = 10.0.0.3
vnc_enabled = True
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = 10.0.0.3
novncproxy_base_url = http://nova:6080/vnc_auto.html

#glance
glance_host = glance
image_service = nova.image.glance.GlanceImageService
glance_api_servers = glance:9292

#livirt
libvirt_vif_driver=nova.virt.libvirt.vif.LibvirtHybridOVSBridgeDriver

#neutron
network_api_class = nova.network.neutronv2.api.API
neutron_url = http://neutron:9696
neutron_auth_strategy = keystone
neutron_admin_tenant_name = service
neutron_admin_username = neutron
neutron_admin_password = openstack
neutron_admin_auth_url = http://keystone:35357/v2.0
linuxnet_interface_driver =
nova.network.linux_net.LinuxOVSInterfaceDriver
firewall_driver = nova.virt.firewall.NoopFirewallDriver
security_group_api = neutron

#meta-secret
service_neutron_metadata_proxy = true
neutron_metadata_proxy_shared_secret = openstack

#至极关系
vif_plugging_timeout = 10
vif_plugging_is_fatal = False

[database]
connection = mysql://nova:openstack@controller/nova

[keystone_authtoken]

auth_uri = http://nova:5000
auth_host = controller
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = nova
admin_password = openstack


vi /etc/nova/nova-compute.conf
[libvirt]

virt_type = qemu

  1. 注册keystone服务
    keystone service-create –name=nova –type=compute
    –description=”OpenStack Compute”
    keystone endpoint-create \
      –service-id=$(keystone service-list | awk ‘/ compute / {print $2}’)
    \
     
    –publicurl=http://nova:8774/v2/%\(tenant_id\)s
    \
     
    –internalurl=http://nova:8774/v2/%\(tenant_id\)s
    \
     
    –adminurl=http://nova:8774/v2/%\(tenant_id\)s

  2. 联合数据库
    su -s /bin/sh -c “nova-manage db sync” nova

  3. 重启服务&验证
    service nova-api restart
    service nova-cert restart
    service nova-consoleauth restart
    service nova-scheduler restart
    service nova-conductor restart
    service nova-novncproxy restart
    service nova-compute restart

nova image-list


#Install Neutron

  1. 创建DB
    create database neutron;
    grant all on neutron.* to ‘neutron’@’%’ identified by ‘openstack’;

  2. 开创帐号
    keystone user-create –name neutron –pass openstack
    keystone user-role-add –user neutron –tenant service –role admin

  3. 安装neutron
    apt-get install neutron-server neutron-plugin-ml2
    rm /var/lib/neutron/neutron.sqlite

  4. 配置
    vi /etc/neutron/neutron.conf

[DEFAULT]
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True

auth_strategy=keystone
control_exchange = neutron

rpc_backend = neutron.openstack.common.rpc.impl_kombu
rabbit_host = controller
rabbit_password = openstack

[database]
connection = mysql://neutron:openstack@controller/neutron

[keystone_authtoken]
auth_uri = http://keystone:35357
auth_host = keystone
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = neutron

admin_password = openstack

vi /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]
type_drivers = gre
tenant_network_types = gre
mechanism_drivers = openvswitch

[ml2_type_gre]

tunnel_id_sqlite,ranges = 1:1000

[ovs]

local_ip = 10.0.0.3 #INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS
tunnel_type = gre
enable_tunneling = True

[securitygroup]

firewall_driver =
neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
enable_security_group = True


配置nova.conf
参见#与neutron关系

  1. 同步DB
    neutron不需要

  2. 注册服务
    keystone service-create –name neutron –type network –description
    “OpenStack Networking”
    keystone endpoint-create \
      –service-id $(keystone service-list | awk ‘/ network / {print $2}’)
    \
      –publicurl http://neutron:9696 \
      –adminurl http://neutron:9696 \
      –internalurl http://neutron:9696

  3. 重启服务&验证
    service neutron-server restart
    service nova-api restart
    service nova-scheduler restart
    service nova-conductor restart


#配置网络结点
apt-get install neutron-plugin-ml2 neutron-plugin-openvswitch-agent \
  neutron-l3-agent neutron-dhcp-agent

apt-get install neutron-common neutron-plugin-ml2
neutron-plugin-openvswitch-agent

  1. 配备基本
    vi /etc/sysctl.conf

net.ipv4.ip_forward=1
net.ipv4.conf.all.rp_filter=0
net.ipv4.conf.default.rp_filter=0

sysctl -p

  1. 配置L3
    vi /etc/neutron/l3_agent.ini
    [DEFAULT]

    interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
    use_namespaces = True
    verbose = True

  2. 配置DHCP
    vi /etc/neutron/dhcp_agent.ini
    [DEFAULT]

    interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver
    dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
    use_namespaces = True
    verbose = True
    dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf

vi /etc/neutron/dnsmasq-neutron.conf
dhcp-option-force=26,1454

killall dnsmasq

  1. 配置meta-data
    vi /etc/neutron/metadata_agent.ini
    [DEFAULT]

    auth_url = http://controller:5000/v2.0
    auth_region = regionOne
    admin_tenant_name = service
    admin_user = neutron
    admin_password = openstack
    nova_metadata_ip = nova
    metadata_proxy_shared_secret = openstack

vi /etc/nova/nova.conf
[DEFAULT]

service_neutron_metadata_proxy = true
neutron_metadata_proxy_shared_secret = openstack


#安排OVS, 关联在此以前的开行, 可能导致网络不通

  1. 安装网卡: 必须加2张NAT
    # This file describes the network interfaces available on your system
    # and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet manual
        up ifconfig eth0 0.0.0.0 promisc up
        down ifconfig eth0 down

auto br-eth0
iface br-eth0 inet static
        address 192.168.2.3
        netmask 255.255.255.0
        gateway 192.168.2.2
        dns-nameservers 192.168.2.2

auto eth1
iface eth1 inet manual
        up ifconfig eth1 0.0.0.0 promisc up
        down ifconfig eth1 down

auto br-eth1
iface br-eth1 inet static
        address 10.0.0.3
        netmastk 255.255.255.0

  1. 关闭gro
    ethtool -k eth0
    ethtool -K eth0 gro off
    ethtool -k eth1
    ethtool -K eth1 gro off

  2. 设置OVS
    service openvswitch-switch restart
    ovs-vsctl add-br br-eth0
    ovs-vsctl add-port br-eth0 eth0
    ovs-vsctl add-br br-eth1
    ovs-vsctl add-port br-eth1 eth1

===================================

#修改自动重启
root@ubuntu:/etc/init# ll keystone*
-rw-r–r– 1 root root 284 Aug 11 23:04 keystone.conf

root@ubuntu:/etc/init# ll glance-*
-rw-r–r– 1 root root 278 Aug 11 22:15 glance-api.conf
-rw-r–r– 1 root root 293 Aug 11 22:15 glance-registry.conf

root@ubuntu:/etc/init# ll nova*
-rw-r–r– 1 root root 391 Aug 13 21:18 nova-api.conf
-rw-r–r– 1 root root 386 Aug 13 21:18 nova-cert.conf
-rw-r–r– 1 root root 679 Aug 13 21:18 nova-compute.conf
-rw-r–r– 1 root root 395 Aug 13 21:18 nova-conductor.conf
-rw-r–r– 1 root root 412 Aug 13 21:18 nova-consoleauth.conf
-rw-r–r– 1 root root 416 Aug 13 21:18 nova-novncproxy.conf
-rw-r–r– 1 root root 396 Aug 13 21:18 nova-scheduler.conf

root@ubuntu:/etc/init# ll neutron-*
-rw-r–r– 1 root root 730 Aug 13 03:15 neutron-dhcp-agent.conf
-rw-r–r– 1 root root 772 Aug 13 03:15 neutron-l3-agent.conf
-rw-r–r– 1 root root 539 Aug 13 03:15 neutron-metadata-agent.conf
-rw-r–r– 1 root root 439 Aug 13 03:15 neutron-ovs-cleanup.conf
-rw-r–r– 1 root root 556 Aug 13 03:15
neutron-plugin-openvswitch-agent.conf
-rw-r–r– 1 root root 633 Aug 13 03:15 neutron-server.conf

=========================================
service mysql restart
service rabbitmq-server restart

#keystone
service keystone restart

#glance
service glance-registry restart
service glance-api restart

#nova
service nova-scheduler restart
service nova-cert restart
service nova-api restart
service nova-compute restart
service nova-conductor restart
service nova-consoleauth restart

#neutron
service neutron-plugin-openvswitch-agent restart
service neutron-server restart
service neutron-dhcp-agent restart
service neutron-metadata-agent restart
//service neutron-ovs-cleanup restart

{“message”: “Virtual Interface creation failed”, “code”: 500, “details”:
”  File \”/usr/lib/python2.7/dist-packages/nova/compute/manager.py\”,
line 290, in decorated_function |


#安装glance

[DEFAULT]
rabbit_host = controller
rabbit_port = 5672
rabbit_use_ssl = false
rabbit_userid = guest
rabbit_password = openstack
rabbit_virtual_host = /
rabbit_notification_exchange = glance
rabbit_notification_topic = notifications
rabbit_durable_queues = False

[keystone_authtoken]
auth_uri = http://keystone:5000
auth_host = keystone
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = openstack

[paste_deploy]

flavor = keystone


创造网络:

vi /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2_type_flat]
flat_networks = * 

[ovs]
network_vlan_ranges = br-eth0
bridge_mappings = br-eth0:br-eth0

neutron net-create NAME –tenant_id TENANT_ID –provider:network_type
flat –provider:physical_network br-eth0

neutron net-create eth0 \
–shared \
–router:external True \
–provider:network_type flat \
–provider:physical_network br-eth0

neutron net-create eth1 \
–shared \
–router:external True \
–provider:network_type flat \
–provider:physical_network br-eth1

neutron subnet-create eth0 –name eth0-subnet0 \
  –allocation-pool start=192.168.2.10,end=192.168.2.250 \
  –gateway 192.168.2.2 192.168.2.0/24

neutron subnet-create eth1 –name eth1-subnet0 \
  –allocation-pool start=10.0.0.10,end=10.0.0.250 \
  –gateway 10.0.0.1 10.0.0.0/24

nova secgroup-create admin “admin secgroup”
nova secgroup-add-rule admin icmp -1 -1 0.0.0.0/0
nova secgroup-add-rule admin tcp 22 22 0.0.0.0/0

nova boot \
–flavor 1 \
–image 96a1ab97-b954-4816-a004-2d2c95bd5a3d \
–key-name mykey \
–security-groups game \
–nic net-id=1fac7d39-601c-4b9b-b317-3ced11b19899 \
–nic net-id=871a5cdd-e15c-466d-a1ca-0394244862c1 \
cirros01

nova secgroup-create game “admin secgroup”
nova secgroup-add-rule game icmp -1 -1 0.0.0.0/0
nova secgroup-add-rule game tcp 22 22 0.0.0.0/0

网站地图xml地图