Openstack實(shí)驗(yàn)手冊(cè)

1、【精品文檔】如有侵權(quán)，請(qǐng)聯(lián)系網(wǎng)站刪除，僅供學(xué)習(xí)與交流Openstack實(shí)驗(yàn)手冊(cè).精品文檔.計(jì)算機(jī)新技術(shù)綜合實(shí)踐研究生實(shí)驗(yàn)手冊(cè)課程名稱： 計(jì)算機(jī)新技術(shù)綜合實(shí)踐 實(shí)驗(yàn)名稱： 安裝部署OpenStack 實(shí)驗(yàn)地點(diǎn)： 專 業(yè)： 班 級(jí)： 指導(dǎo)教師： 吳含前 實(shí)驗(yàn)時(shí)間： 年 月 日實(shí)驗(yàn)一 64位Linux下手動(dòng)安裝OpenStack Icehouse版本【實(shí)驗(yàn)內(nèi)容】學(xué)習(xí)VMware workstation虛擬機(jī)的使用，在 CentOS 64位環(huán)境下安裝搭建OpenStack環(huán)境，熟悉Linux基本操作，鍛煉同學(xué)學(xué)習(xí)能力、動(dòng)手能力和分析問題能力?！緦?shí)驗(yàn)?zāi)康摹?、熟悉VMware workstation虛擬

2、機(jī)使用2、了解OpenStack整體架構(gòu)3、了解OpenStack各組件功能4、能夠在Linux下手動(dòng)搭建OpenStack云計(jì)算環(huán)境【實(shí)驗(yàn)環(huán)境】計(jì)算機(jī)實(shí)驗(yàn)室VMware workstation虛擬機(jī)【實(shí)驗(yàn)步驟】一、VMware workstation下安裝CentOS 6.5 x64操作系統(tǒng)1、 首先安裝VMware Workstation2、 創(chuàng)建OpenStack控制節(jié)點(diǎn)，文件 新建虛擬機(jī)3、 選擇 典型（推薦） 下一步4、 稍后安裝操作系統(tǒng)5、 選擇操作系統(tǒng)和版本6、 輸入虛擬機(jī)名稱和安裝路徑7、 設(shè)置磁盤大小8、 自定義硬件9、 選擇CentOS安裝鏡像文件10、 點(diǎn)擊完成11、 啟

3、動(dòng)虛擬機(jī)12、 選擇第一項(xiàng)，安裝全新操作系統(tǒng)或升級(jí)現(xiàn)有操作系統(tǒng)13、 Tab鍵進(jìn)行選擇，選擇Skip，退出檢測(cè)14、 點(diǎn)擊Next15、 選擇語言，這里選擇的是中文簡(jiǎn)體16、 選擇鍵盤樣式17、 選擇存儲(chǔ)設(shè)備18、 輸入主機(jī)名19、 配置網(wǎng)絡(luò)20、 設(shè)置時(shí)區(qū)，勾選使用UTC時(shí)間21、 輸入根用戶（root）的密碼22、 根據(jù)此Linux具體功能，選擇不同的方式23、 選擇現(xiàn)在自定義，自定義安裝需要的軟件，如桌面配置24、 點(diǎn)擊下一步，開始安裝25、 安裝完成后，點(diǎn)擊重新導(dǎo)引26、 點(diǎn)擊前進(jìn)按鈕27、 點(diǎn)擊是，同意許可，再點(diǎn)擊前進(jìn)按鈕28、 創(chuàng)建用戶29、 設(shè)置日期和時(shí)間，如果可以上網(wǎng)，勾選在網(wǎng)

4、上同步日期和時(shí)間二、OpenStack環(huán)境預(yù)配置1、 設(shè)置OpenStack網(wǎng)絡(luò)，一塊NAT網(wǎng)卡，一塊僅主機(jī)網(wǎng)卡2、 同理創(chuàng)建另外兩臺(tái)虛擬機(jī)，一臺(tái)計(jì)算節(jié)點(diǎn)，一臺(tái)網(wǎng)絡(luò)節(jié)點(diǎn)3、 配置虛擬機(jī)網(wǎng)絡(luò)環(huán)境，如下表服務(wù)器網(wǎng)卡配置主機(jī)名管理節(jié)點(diǎn)(ControllerNode)eth0:30eth1:30controller計(jì)算節(jié)點(diǎn)(ComputeNode)eth0:31eth1:31compute1網(wǎng)絡(luò)節(jié)點(diǎn)(NetworkNode)eth0:32eth1:32eth2:(onboot=”ye

5、s”, bootproto=”none”)network三、OpenStack環(huán)境搭建1、 安裝部署控制節(jié)點(diǎn)(1) 首先配置Linux能上網(wǎng)，可以ping通(2) 安裝MySQL數(shù)據(jù)庫(kù)如下執(zhí)行命令# yum install ntp# service ntpd start# chkconfig ntpd on# yum install mysql mysql-server MySQL-python編輯 /etc/f 文件:# vi /etc/fmysqldbind-address = 30 #添加這句mysqlddefault-storage-engine = innodb #

6、添加這句innodb_file_per_table #添加這句collation-server = utf8_general_ci#添加這句init-connect = 'SET NAMES utf8'#添加這句character-set-server = utf8#添加這句保存退出# service mysqld start# chkconfig mysqld on# mysql_install_db# mysql_secure_installation(3) 安裝OpenStack軟件源包# yum install yum-plugin-priorities# yum in

7、stall /repos/openstack/openstack-icehouse/rdo-release-icehouse-3.noarch.rpm# yum install /pub/epel/6/x86_64/epel-release-6-8.noarch.rpm# yum install openstack-utils# yum install openstack-selinux# yum upgrade# reboot(4) 安裝qpid# yum install qpid-c

8、pp-server編輯/etc/qpidd.conf文件# vi /etc/qpidd.confauth=no#修改為no保存退出# service qpidd start# chkconfig qpidd on(5) 安裝keystone組件# yum install openstack-keystone python-keystoneclient# openstack-config -set /etc/keystone/keystone.conf database connection mysql:/keystone:keystonecontroller/keystone$ mysql -

9、u root -pmysql> CREATE DATABASE keystone;mysql> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone''localhost' IDENTIFIED BY 'keystone'mysql> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone''%' IDENTIFIED BY 'keystone'mysql> exit# su -s /bin/s

10、h -c "keystone-manage db_sync" keystone# ADMIN_TOKEN=$(openssl rand -hex 10)# echo $ADMIN_TOKEN# openstack-config -set /etc/keystone/keystone.conf DEFAULT admin_token $ADMIN_TOKEN# keystone-manage pki_setup -keystone-user keystone -keystone-group keystone# chown -R keystone:keystone /etc/k

11、eystone/ssl# chmod -R o-rwx /etc/keystone/ssl# service openstack-keystone start# chkconfig openstack-keystone on# (crontab -l -u keystone 2>&1 | grep -q token_flush) | echo 'hourly /usr/bin/keystone-manage token_flush >/var/log/keystone/keystone-tokenflush.log 2>&1' >>

12、 /var/spool/cron/keystone編輯/.bash_profile文件，在最后添加export OS_USERNAME=adminexport OS_PASSWORD=adminexport OS_TENANT_NAME=adminexport OS_AUTH_URL=http:/controller:35357/v2.0export ADMIN_TOKEN=223e5aa00e1401925a5d【注意此值與ADMIN_TOKEN值一樣】export SERVICE_TOKEN=$ADMIN_TOKENexport SERVICE_ENDPOINT=http:/control

13、ler:35357/v2.0export OS_SERVICE_TOKEN=$ADMIN_TOKENexport OS_SERVICE_ENDPOINT=http:/controller:35357/v2.0保存退出#source /.bash_profile$ keystone user-create -name=admin -pass=admin -email=admin$ keystone role-create -name=admin$ keystone tenant-create -name=admin -description="Admin Tenant"$ k

14、eystone user-role-add -user=admin -tenant=admin -role=admin$ keystone user-role-add -user=admin -role=_member_ -tenant=admin$ keystone user-create -name=demo -pass=demo -email=demo$ keystone tenant-create -name=demo -description="Demo Tenant"$ keystone user-role-add -user=demo -role=_membe

15、r_ -tenant=demo$ keystone tenant-create -name=service -description="Service Tenant"$ keystone service-create -name=keystone -type=identity -description="OpenStack Identity"$ keystone endpoint-create -service-id=$(keystone service-list | awk '/ identity / print $2') -publi

16、curl=http:/controller:5000/v2.0 -internalurl=http:/controller:500key0/v2.0 -adminurl=http:/controller:35357/v2.0(6) 安裝glance組件# yum install openstack-glance python-glanceclient# openstack-config -set /etc/glance/glance-api.conf database connection mysql:/glance:glancecontroller/glance# openstack-con

17、fig -set /etc/glance/glance-registry.conf database connection mysql:/glance:glancecontroller/glance$ mysql -u root -pmysql> CREATE DATABASE glance;mysql> GRANT ALL PRIVILEGES ON glance.* TO 'glance''localhost' IDENTIFIED BY 'glance'mysql> GRANT ALL PRIVILEGES ON glan

18、ce.* TO 'glance''%' IDENTIFIED BY 'glance'mysql> exit;# openstack-db -init -service glance # keystone user-create -name=glance -pass=glance -email=glance# keystone user-role-add -user=glance -tenant=service -role=admin# openstack-config -set /etc/glance/glance-api.conf key

19、stone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken auth_host controller# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken auth_p

20、rotocol http# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken admin_user glance# openstack-config -set /etc/glance/glance-api.conf keystone_authtoken admin_password glance# openstack-

21、config -set /etc/glance/glance-api.conf paste_deploy flavor keystone# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken auth_host controller# openstack-config -set /etc/g

22、lance/glance-registry.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/glance/glance-r

23、egistry.conf keystone_authtoken admin_user glance# openstack-config -set /etc/glance/glance-registry.conf keystone_authtoken admin_password glance# openstack-config -set /etc/glance/glance-registry.conf paste_deploy flavor keystone# keystone service-create -name=glance -type=image -description="

24、;OpenStack Image Service"# keystone endpoint-create -service-id=$(keystone service-list | awk '/ image / print $2') -publicurl=http:/controller:9292 -internalurl=http:/controller:9292 -adminurl=http:/controller:9292# service openstack-glance-api restart# service openstack-glance-registr

25、y restart# chkconfig openstack-glance-api on# chkconfig openstack-glance-registry on(7) 安裝Nova組件# yum install openstack-nova-api openstack-nova-cert openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler python-novaclient# openstack-config -set /etc/nova/n

26、ova.conf database connection mysql:/nova:novacontroller/nova# openstack-config -set /etc/nova/nova.conf DEFAULT rpc_backend qpid# openstack-config -set /etc/nova/nova.conf DEFAULT qpid_hostname controller# openstack-config -set /etc/nova/nova.conf DEFAULT my_ip 30# openstack-config -set /et

27、c/nova/nova.conf DEFAULT vncserver_listen 30# openstack-config -set /etc/nova/nova.conf DEFAULT vncserver_proxyclient_address 30（控制節(jié)點(diǎn)Controller IP地址）$ mysql -u root -pmysql> CREATE DATABASE nova;mysql> GRANT ALL PRIVILEGES ON nova.* TO 'nova''localhost' IDENTI

28、FIED BY 'nova'mysql> GRANT ALL PRIVILEGES ON nova.* TO 'nova''%' IDENTIFIED BY 'nova'mysql> exit;# su -s /bin/sh -c "nova-manage db sync" nova# keystone user-create -name=nova -pass=nova -email=nova# keystone user-role-add -user=nova -tenant=service -r

29、ole=admin# openstack-config -set /etc/nova/nova.conf DEFAULT auth_strategy keystone# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_host controller# openstack-config -set /etc/nova/nova.co

30、nf keystone_authtoken auth_protocol http# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_user nova# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_tenant_name service# openstack-conf

31、ig -set /etc/nova/nova.conf keystone_authtoken admin_password nova# keystone service-create -name=nova -type=compute -description="OpenStack Compute"# keystone endpoint-create -service-id=$(keystone service-list | awk '/ compute / print $2') -publicurl=http:/controller:8774/v2/%(te

32、nant_id)s -internalurl=http:/controller:8774/v2/%(tenant_id)s -adminurl=http:/controller:8774/v2/%(tenant_id)s# service openstack-nova-api restart# service openstack-nova-cert restart# service openstack-nova-consoleauth restart# service openstack-nova-scheduler restart# service openstack-nova-conduc

33、tor restart# service openstack-nova-novncproxy restart# chkconfig openstack-nova-api on# chkconfig openstack-nova-cert on# chkconfig openstack-nova-consoleauth on# chkconfig openstack-nova-scheduler on# chkconfig openstack-nova-conductor on# chkconfig openstack-nova-novncproxy on(8) 安裝Neutron組件# yum

34、 install openstack-neutron openstack-neutron-ml2 python-neutronclient$ mysql -u root -pmysql> CREATE DATABASE neutron;mysql> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron''localhost' IDENTIFIED BY 'neutron'mysql> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'

35、'%' IDENTIFIED BY 'neutron'mysql> exit;$ keystone user-create -name neutron -pass neutron -email neutron$ keystone user-role-add -user neutron -tenant service -role admin$ keystone service-create -name=neutron -type=network -description="OpenStack Networking"$ keystone e

36、ndpoint-create -service-id $(keystone service-list | awk '/ network / print $2') -publicurl http:/controller:9696 -adminurl http:/controller:9696 -internalurl http:/controller:9696# openstack-config -set /etc/neutron/neutron.conf database connection mysql:/neutron:neutroncontroller/neutron#

37、openstack-config -set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_uri http:/controller:5000# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_host controller# openstack-config -set /etc/neutr

38、on/neutron.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken

39、admin_user neutron# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken admin_password neutron# openstack-config -set /etc/neutron/neutron.conf DEFAULT rpc_backend mon.rpc.impl_qpid# openstack-config -set /etc/neutron/neutron.conf DEFAULT qpid_hostname controller# openstack-config -se

40、t /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_status_changes True# openstack-config -set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_data_changes True# openstack-config -set /etc/neutron/neutron.conf DEFAULT nova_url http:/controller:8774/v2# openstack-config -set /etc/neutron/ne

41、utron.conf DEFAULT nova_admin_username nova# openstack-config -set /etc/neutron/neutron.conf DEFAULT nova_admin_tenant_id $(keystone tenant-list | awk '/ service / print $2 ')# openstack-config -set /etc/neutron/neutron.conf DEFAULT nova_admin_password nova# openstack-config -set /etc/neutro

42、n/neutron.conf DEFAULT nova_admin_auth_url http:/controller:35357/v2.0# openstack-config -set /etc/neutron/neutron.conf DEFAULT core_plugin ml2# openstack-config -set /etc/neutron/neutron.conf DEFAULT service_plugins router# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_driver

43、s gre# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types gre# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers openvswitch# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_gre tunnel_id_ranges 1:1000# openstack-

44、config -set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_security_group True# openstack-config -set /etc/nova/nova.conf DEFAU

45、LT network_api_class work.neutronv2.api.API# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_url http:/controller:9696# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_auth_strategy keystone# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_admin_tenant_name service# ope

46、nstack-config -set /etc/nova/nova.conf DEFAULT neutron_admin_username neutron# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_admin_password neutron# openstack-config -set /etc/nova/nova.conf DEFAULT neutron_admin_auth_url http:/controller:35357/v2.0# openstack-config -set /etc/nova/nova.

47、conf DEFAULT linuxnet_interface_driver work.linux_net.LinuxOVSInterfaceDriver# openstack-config -set /etc/nova/nova.conf DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver# openstack-config -set /etc/nova/nova.conf DEFAULT security_group_api neutron security_group_api neutron# ln -s plugi

48、ns/ml2/ml2_conf.ini /etc/neutron/plugin.ini# service openstack-nova-api restart# service openstack-nova-scheduler restart# service openstack-nova-conductor restart# service neutron-server restart# chkconfig neutron-server on2、 安裝部署計(jì)算節(jié)點(diǎn)(1) 首先配置Linux能上網(wǎng)，可以ping通(2) 安裝OpenStack軟件包源# yum install yum-plug

49、in-priorities# yum install /repos/openstack/openstack-icehouse/rdo-release-icehouse-3.noarch.rpm# yum install /pub/epel/6/x86_64/epel-release-6-8.noarch.rpm# yum install openstack-utils# yum install openstack-selinux# yum upgrade# reboot(3) 安裝Nov

50、a組件# yum install openstack-nova-compute# openstack-config -set /etc/nova/nova.conf database connection mysql:/nova:novacontroller/nova# openstack-config -set /etc/nova/nova.conf DEFAULT auth_strategy keystone# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_uri http:/controller:500

51、0# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_host controller# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/nova/nova.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/nova/nova.conf keystone_auth

52、token admin_user nova# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_tenant_name service# openstack-config -set /etc/nova/nova.conf keystone_authtoken admin_password nova# openstack-config -set /etc/nova/nova.conf DEFAULT rpc_backend qpid# openstack-config -set /etc/nova/nova.co

53、nf DEFAULT qpid_hostname controller# openstack-config -set /etc/nova/nova.conf DEFAULT my_ip 31# openstack-config -set /etc/nova/nova.conf DEFAULT vnc_enabled True# openstack-config -set /etc/nova/nova.conf DEFAULT vncserver_listen # openstack-config -set /etc/nova/nova.conf DEFAULT

54、vncserver_proxyclient_address 31# openstack-config -set /etc/nova/nova.conf DEFAULT novncproxy_base_url http:/controller:6080/vnc_auto.html# openstack-config -set /etc/nova/nova.conf DEFAULT glance_host controller# egrep -c '(vmx|svm)' /proc/cpuinfo（如果返回0，執(zhí)行下面這句，否則不執(zhí)行）# openstack-co

55、nfig -set /etc/nova/nova.conf libvirt virt_type qemu# service libvirtd start# service messagebus start# service openstack-nova-compute start# chkconfig libvirtd on# chkconfig messagebus on# chkconfig openstack-nova-compute on(4) 安裝Neutron組件編輯 /etc/sysctl.conf文件# vi /etc/sysctl.confnet.ipv4.conf.all.

56、rp_filter=0net.ipv4.conf.default.rp_filter=0保存退出# modprobe bridge# sysctl -p# yum install openstack-neutron-ml2 openstack-neutron-openvswitch# openstack-config -set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_uri h

57、ttp:/controller:5000# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_host controller# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_protocol http# openstack-config -set /etc/neutron/neutron.conf keystone_authtoken auth_port 35357# openstack-config -set /etc/neutron/n