OpenStack 部署

Posted on Edited on In Word count in article: 7.6k Reading time ≈ 7 mins.

零、 节点信息描述

主机 ip 系统 配置
controller 192.168.100.109 CentOS 7.9 4c8g 20GB
computer1 192.168.100.110 CentOS 7.9 2c4g 20GB
compute2 192.168.100.111 CentOS 7.9 2c4g 20GB

一、 基础环境配置

  • 关闭 Selinux
    setenforce 0
    sed -i 's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config

  • 关闭防火墙
    systemctl stop firewalld && systemctl disable firewalld

  • 主机名配置
    hostnamectl set-hostname --static <youre_hostname>

  • host 文件修改

    cat << EOF >> /etc/hosts
    192.168.100.109 controller
    192.168.100.110 compute1
    192.168.100.111 compute2
    EOF

  • 时间同步

    cp -r /usr/share/zoneinfo/Asia/Shanghai /etc/localtime
    yum install ntpdate -y
    systemctl enable chronyd --now
    ntpdate cn.pool.ntp.org

  • 配置 OpenStack 仓库

    cat << EOF >> openstack-train.repo 
    [openstack]
    name=openstack
    enable=1
    gpgcheck=0
    baseurl=https://mirrors.nju.edu.cn/centos-vault/7.9.2009/cloud/x86_64/openstack-train/

  • 基础包安装
    yum upgrade
    yum install -y wget vim net-tools yum-utils device-mapper-persistent-data lvm2 python-devel libffi-devel openssl-devel gcc
    yum install -y openstack-selinux

二、 Controller 节点配置 (192.168.100.109)

2.1 Mariadb 配置

  • 安装
    yum install -y mariadb-server python2-PyMySQL
    systemctl enable mariadb --now

  • 初始化 mariadb-server
    mysql_secure_installation

    按照提示配置, 建议复杂密码

  • 配置 openstack 用户

    [root@controller ~]# mysql -u root -p
    MariaDB [(none)]> CREATE DATABASE keystone;
    Query OK, 0 rows affected (0.000 sec)
    MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'KESTONE_DBPASS';
    Query OK, 0 rows affected (0.000 sec)
    MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'KESTONE_DBPASS';
    Query OK, 0 rows affected (0.000 sec)
    MariaDB [(none)]> FLUSH PRIVILEGES;
    Query OK, 0 rows affected (0.000 sec)
    MariaDB [(none)]> \q
    Bye

2.2 RabbitMQ 部署

  • 安装
    yum install -y rabbitmq-server
    systemctl enable rabbitmq-server --now

  • 创建OpenStack用户

    rabbitmqctl add_user openstack P@ssw0rd
    rabbitmqctl set_permissions openstack ".*" ".*" ".*"

2.3 Memcached 部署

  • 安装
    yum install -y memcached python-memcached

  • 配置(在 OPTIONS 后加上主机名和ip地址)

    sed -i 's/OPTIONS="-l 127.0.0.1,::1"/OPTIONS="-l 127.0.0.1,::1,192.168.100.109,controller"/g' /etc/sysconfig/memcached

  • 开机自启
    systemctl enable memcached --now

2.4 Etcd 部署

  • 安装
    yum install -y etcd

  • 配置

    注意: ip 地址均为 controller 的ip地址

    cat << EOF > /etc/etcd/etcd.conf
    #[Member]
    ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
    ETCD_LISTEN_PEER_URLS="http://192.168.100.109:2380"
    ETCD_LISTEN_CLIENT_URLS="http://192.168.100.109:2379,http://127.0.0.1:2379"
    ETCD_NAME="controller"
    #[Clustering]
    ETCD_INITIAL_ADVERTISE_PEER_URLS="http://192.168.100.109:2380"
    ETCD_ADVERTISE_CLIENT_URLS="http://192.168.100.109:2379"
    ETCD_INITIAL_CLUSTER="controller=http://192.168.100.109:2380"
    ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01"
    ETCD_INITIAL_CLUSTER_STATE="new"
    EOF

  • 开机启动
    systemctl enable etcd --now

2.5 Keystone 配置（身份认证服务）

这步操作之前, 关闭或者删除 yum remove -y epel-release

yum install -y openstack-keystone httpd mod_wsgi

  • 修改 /etc/keystone/keystone.conf

    • 配置数据库连接

      sed -i 's/#connection = <None>/connection = mysql+pymysql:\/\/keystone:P@ssw0rd@controller\/keystone/g' /etc/keystone/keystone.conf
      sed -i 's/#provider = fernet/provider = fernet/g' /etc/keystone/keystone.conf

    • 初始化Fernet密钥

      keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
      keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

  • 同步数据库
    su -s /bin/sh -c "keystone-manage db_sync" keystone

  • 引导Keystone服务

    keystone-manage bootstrap --bootstrap-password P@ssw0rd \
      --bootstrap-admin-url http://controller:5000/v3/ \
      --bootstrap-internal-url http://controller:5000/v3/ \
      --bootstrap-public-url http://controller:5000/v3/ \
      --bootstrap-region-id RegionOne
      #替换 P@ssw0rd 为适合管理用户的密码。

  • 配置Apache

    sed -i 's/#ServerName www.example.com:80/ServerName controller/g' /etc/httpd/conf/httpd.conf
    ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/
    systemctl enable httpd --now

  • 设置环境变量（后续 OpenStack 客户端使用）

    cat << EOF > ~/admin-openrc
    export OS_PROJECT_DOMAIN_NAME=Default
    export OS_USER_DOMAIN_NAME=Default
    export OS_PROJECT_NAME=admin
    export OS_USERNAME=admin
    export OS_PASSWORD=P@ssw0rd
    export OS_AUTH_URL=http://controller:5000/v3
    export OS_IDENTITY_API_VERSION=3
    export OS_IMAGE_API_VERSION=2
    EOF

  • 加载环境变量
    source ~/admin-openrc

  • 安装 python-openstackclient
    yum install python-openstackclient

  • 创建service项目、用户和角色

    openstack project create --domain default --description "Service Project" service
    openstack role create user

2.6 Glance (镜像服务) 部署

在安装和配置 Image 服务之前，您必须创建数据库、服务凭证和 API 端点

  • 配置 mariadb

    [root@controller ~]# mysql -u root -p
    MariaDB [(none)]> CREATE DATABASE glance;
    MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'P@ssw0rd';
    MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'P@ssw0rd';
    MariaDB [(none)]> FLUSH PRIVILEGES;

  • 创建服务用户

    source ~/admin-openrc
    openstack user create --domain default --password P@ssw0rd glance
    openstack role add --project service --user glance admin
    openstack service create --name glance --description "OpenStack Image" image

  • 创建API端点

    openstack endpoint create --region RegionOne image public http://controller:9292
    openstack endpoint create --region RegionOne image internal http://controller:9292
    openstack endpoint create --region RegionOne image admin http://controller:9292

  • 安装 Glance
    yum install -y openstack-glance

  • /etc/glance/glance-api.conf 配置

    [database]
    connection = mysql+pymysql://glance:P@ssw0rd@controller/glance
    [keystone_authtoken]
    www_authenticate_uri = http://controller:5000
    auth_url = http://controller:5000
    memcached_servers = controller:11211
    auth_type = password
    project_domain_name = Default
    user_domain_name = Default
    project_name = service
    username = glance
    password = P@ssw0rd
    [paste_deploy]
    flavor = keystone
    [glance_store]
    stores = file,http
    default_store = file
    filesystem_store_datadir = /var/lib/glance/images

  • 同步数据库
    su -s /bin/sh -c "glance-manage db_sync" glance

  • /etc/glance/glance-registry.conf 配置

    [database]
    connection = mysql+pymysql://glance:P@ssw0rd@controller/glance
    [keystone_authtoken]
    www_authenticate_uri = http://controller:5000
    auth_url = http://controller:5000
    memcached_servers = controller:11211
    auth_type = password
    project_domain_name = Default
    user_domain_name = Default
    project_name = service
    username = glance
    password = P@ssw0rd
    [paste_deploy]
    flavor = keystone

  • 启动 Image 服务并将它们配置为在系统启动时启动
    systemctl enable openstack-glance-api.service --now
    systemctl enable openstack-glance-registry.service --now

2.7 Placement 部署

  • 配置 mariadb

    [root@controller ~]# mysql -u root -p
    MariaDB [(none)]> CREATE DATABASE placement;
    MariaDB [(none)]> GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY 'P@ssw0rd';
    MariaDB [(none)]> GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY 'P@ssw0rd';
    MariaDB [(none)]> FLUSH PRIVILEGES;
    MariaDB [(none)]> \q

  • 创建服务用户

    source ~/admin-openrc
    openstack user create --domain default --password P@ssw0rd placement
    openstack role add --project service --user placement admin
    openstack service create --name placement --description "Placement API" placement

  • 创建API端点

    openstack endpoint create --region RegionOne placement public http://controller:8778
    openstack endpoint create --region RegionOne placement internal http://controller:8778
    openstack endpoint create --region RegionOne placement admin http://controller:8778

  • 安装 Placement
    yum install -y openstack-placement-api

  • 编辑 /etc/placement/placement.conf 文件:

    [keystone_authtoken]
    auth_url = http://controller:5000/v3
    memcached_servers = controller:11211
    auth_type = password
    project_domain_name = Default
    user_domain_name = Default
    project_name = service
    username = placement
    password = P@ssw0rd
    [placement_database]
    connection = mysql+pymysql://placement:P@ssw0rd@controller/placement

  • 同步数据库
    su -s /bin/sh -c "placement-manage db sync" placement

  • 重启httpd服务:
    systemctl restart httpd