CentOS Stream8 基于 Packstack 搭建 OpenStack 云平台全流程实战

CentOS-Stream-8-packstack安装OpenStack-Victoria摘要本文详细介绍了在 CentOS Stream 8 环境下使用 packstack 自动化部署 OpenStack Victoria 的完整流程。主要内容包括1前期资源与环境准备虚拟机配置、网络拓扑规划2模板虚拟机准备yum源配置、基础软件安装、系统清理3OpenStack 节点准备克隆虚拟机、配置主机名、IP地址、NTP服务4packstack 安装与配置生成应答文件、修改关键参数、关闭 NetworkManager5安装完成后的测试与优化登录 Dashboard、开启 network 服务、配置命令补全。通过分步操作指南和详细命令示例帮助读者快速搭建可用的 OpenStack Victoria 环境。前期准备1、资源清单CentOS-Stream-8 (minimal安装) - CentOS-Stream-8-20240603.0-x86_64-dvd1.isovmware workstation17.5OpenStack-Victoria2、虚拟机硬件配置controller: 4CPU 8G内存 1张网卡:NAT 100G系统盘compute: 4CPU 8G内存 1张网卡:NAT 100G系统盘按照个人情况配置内存3、网络拓扑vmware网络设置NAT网络, 开启DHCP, 192.168.108.0/24, 网关192.168.108.2, DNS 192.168.108.2说明Windows环境vmware的NAT网络网关为192.168.108.2Linux环境vmware的NAT网络网关为192.168.108.1/etc/hosts:192.168.108.10 controller 192.168.108.11 compute步骤一准备模板虚拟机基于 CentOS-Stream-8 模板制作的模板克隆出一个虚拟机(openstack_template)作为 openstack模板虚拟机。配置yum源完整克隆克隆好后开机配置配置yum源[rootlocalhost ~]# rm -rf /etc/yum.repos.d/*[rootlocalhost ~]# cat EOF /etc/yum.repos.d/openstack.repo[centos-openstack-victoria]nameCentOS8- OpenStack victoriabaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/cloud/x86_64/openstack-victoria/gpgcheck0enabled1[highavailability]nameCentOS Stream8- HighAvailabilitybaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/HighAvailability/x86_64/os/gpgcheck0enabled1[nfV]nameCentOS Stream8- NFVbaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/NFV/x86_64/os/gpgcheck0enabled1[rt]nameCentOS Stream8- RTbaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/RT/x86_64/os/gpgcheck0enabled1[resilientstorage]nameCentOS Stream8- ResilientStoragebaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/ResilientStorage/x86_64/os/gpgcheck0enabled1[extras-common]nameCentOS Stream8- Extras packagesbaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/extras/x86_64/extras-common/gpgcheck0enabled1[extras]nameCentOS Stream$releasever- Extrasbaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/extras/x86_64/os/gpgcheck0enabled1[centos-ceph-pacific]nameCentOS - Ceph Pacificbaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/storage/x86_64/ceph-pacific/gpgcheck0enabled1[centos-rabbitmq-38]nameCentOS-8 - RabbitMQ38baseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/messaging/x86_64/rabbitmq-38/gpgcheck0enabled1[centos-nfv-openvswitch]nameCentOS Stream8- NFV Openvswitchbaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/nfv/x86_64/openvswitch-2/gpgcheck0enabled1[baseos]nameCentOS Stream8- BaseOSbaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/BaseOS/x86_64/os/gpgcheck0enabled1[appstream]nameCentOS Stream8- AppStreambaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/AppStream/x86_64/os/gpgcheck0enabled1[powertools]nameCentOS Stream8- PowerToolsbaseurlhttps://mirrors.aliyun.com/centos-vault/8-stream/PowerTools/x86_64/os/gpgcheck0enabled1EOF[rootlocalhost ~]# yum clean all[rootlocalhost ~]# yum makecache安装方便操作环境包及基础软件包[rootlocalhost ~]# yum install -y bash-completion vim open-vm-tools net-tools chrony.x86_64[rootlocalhost ~]# source /usr/share/bash-completion/bash_completion设置/etc/hosts[rootlocalhost ~]# echo 192.168.108.10 controller /etc/hosts[rootlocalhost ~]# echo 192.168.108.11 compute /etc/hosts关闭SELinux[rootlocalhost ~]# sed -i /^SELINUX/CSELINUXdisabled/ /etc/selinux/config编辑网卡信息[rootlocalhost ~]# cd /etc/sysconfig/network-scripts/[rootlocalhost network-scripts]# vim ifcfg-ens160配置内容TYPEEthernet BOOTPROTOdhcp NAMEens160 DEVICEens160 ONBOOTyes清除密钥信息[rootlocalhost ~]# cd /etc/ssh/[rootlocalhost ssh]# rm -rf ssh_host_*清除Machine ID[rootlocalhost ~]# cat /dev/null /etc/machine-id[rootlocalhost ~]# cat /etc/machine-id关闭操作系统并拍快照[rootlocalhost ~]# poweroff步骤二准备openstack节点克隆虚拟机并修改基础配置采用完全克隆方法克隆出其他2台虚拟机openstack_controlleropenstack_compute。同样的操作克隆计算节点注意2节点的CPU需要开启虚拟化支持。两节点配置不同的IP主机名两节点分别开机做以下配置。配置主机名controller:[rootlocalhost ~]# hostnamectl set-hostname controllercompute:[rootlocalhost ~]# hostnamectl set-hostname compute配置IP地址controller:[rootcontroller ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens160配置内容TYPEEthernet BOOTPROTOnone #这行从dhcp变更为none NAMEens160 DEVICEens160 ONBOOTyes IPADDR192.168.108.10 NETMASK255.255.255.0 GATEWAY192.168.108.2 DNS1192.168.108.2[rootcontroller ~]# nmcli connection reload ens160[rootcontroller ~]# nmcli connection up ens160compute:[rootcompute ~]# vim /etc/sysconfig/network-scripts/ifcfg-ens160配置内容TYPEEthernet BOOTPROTOnone #这行从dhcp变更为none NAMEens160 DEVICEens160 ONBOOTyes IPADDR192.168.108.11 NETMASK255.255.255.0 GATEWAY192.168.108.2 DNS1192.168.108.2[rootcompute ~]# nmcli connection reload ens160[rootcompute ~]# nmcli connection up ens160配置NTPcontroller:[rootcontroller ~]# vim /etc/chrony.conf修改配置3 # pool 2.centos.pool.ntp.org iburst 4 server ntp.aliyun.com iburst 22 # Allow NTP client access from local network. 23 #allow 192.168.0.0/16 24 allow 192.168.108.0/24启动服务[rootcontroller ~]# systemctl restart chronyd[rootcontroller ~]# systemctl enable chronydcompute:[rootcompute ~]# vim /etc/chrony.conf修改配置# pool 2.centos.pool.ntp.org iburst server controller iburst启动服务[rootcompute ~]# systemctl restart chronyd[rootcompute ~]# systemctl enable chronyd关闭操作系统拍摄快照controller:[rootcontroller ~]# poweroffcompute:[rootcompute ~]# poweroff步骤三安装OpenStack和测试控制节点安装packstackcontroller:[rootcontroller ~]# yum install -y openstack-packstack生成应答文件controller:[rootcontroller ~]# packstack --gen-answer-fileanswers.txtPackstack changed given value to required value /root/.ssh/id_rsa.pub Additional information: * Parameter CONFIG_NEUTRON_L2_AGENT: You have chosen OVN Neutron backend. Note that this backend does not support the VPNaaS plugin. Geneve will be used as the encapsulation methodfortenant networks更改应答文件controller:[rootcontroller ~]# vim answers.txt修改以下配置项60 CONFIG_HEAT_INSTALLy 97 CONFIG_COMPUTE_HOSTS192.168.108.10,192.168.108.11 909 CONFIG_NEUTRON_OVN_BRIDGE_IFACESbr-ex:ens160 1169 CONFIG_PROVISION_DEMOn修改密码示例为huawei[rootcontroller ~]# sed -i.bak -r s/(.PW)[0-9a-z]\\\/huawei/g answers.txt关闭NetworkManagerCentOS 8 版本默认使用 NetworkManager 管理网络但它会和 openstack 网络组件产生冲突从而导致告警或错误。controller:[rootcontroller ~]# systemctl stop NetworkManager; systemctl disable NetworkManager; systemctl mask NetworkManagercompute:[rootcompute ~]# systemctl stop NetworkManager; systemctl disable NetworkManager; systemctl mask NetworkManager根据应答文件配置安装openstackcontroller:[rootcontroller ~]# packstack --answer-fileanswers.txt注意安装过程中会在Testing if ...controller.pp步骤停留很长时间预计40-50分钟其他步骤很快。安装完成安装成功后会输出以下信息登录凭据存储在/root/keystoner_admin文件中。访问 OpenStack Dashboard 浏览http://192.168.108.10/dashboard安装日志文件位于/var/tmp/packstack/20240920-102825-faid5f5g/openstack-setup.log登录测试用户名admin密码huawei开启network服务controller:[rootcontroller ~]# systemctl start network[rootcontroller ~]# systemctl enable networkcompute:[rootcompute ~]# systemctl start network[rootcompute ~]# systemctl enable network配置OpenStack命令补全# 将命令写入到/etc/bash_completion.d/, 路径一定要写正确[rootcontroller ~]# openstack complete /etc/bash_completion.d/complete关机拍快照openstack_controller 和 openstack_compute 两个节点分别拍摄快照至此安装结束。