Networking 服务之前的修改的配置不要删除配置私有网络控制节点[rootcontroller ~]# vim /etc/neutron/neutron.conf[database] ... connection mysqlpymysql://neutron:NEUTRON_DBPASScontroller/neutron使用你设置的数据库密码替换 NEUTRON_DBPASS[DEFAULT] ... core_plugin ml2 service_plugins router allow_overlapping_ips True[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password RABBIT_PASS用你在RabbitMQ中为openstack选择的密码替换 “RABBIT_PASS”[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username neutron password NEUTRON_PASS将 NEUTRON_PASS 替换为你在认证服务中为 neutron 用户选择的密码[DEFAULT] ... notify_nova_on_port_status_changes True notify_nova_on_port_data_changes True [nova] ... auth_url http://controller:35357 auth_type password project_domain_name default user_domain_name default region_name RegionOne project_name service username nova password NOVA_PASS使用你在身份认证服务中设置的nova 用户的密码替换NOVA_PASS[oslo_concurrency] ... lock_path /var/lib/neutron/tmp[rootcontroller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini[ml2] ... type_drivers flat,vlan,vxlan[ml2] ... tenant_network_types vxlan[ml2] ... mechanism_drivers linuxbridge,l2population[ml2] ... extension_drivers port_security[ml2_type_flat] ... flat_networks provider[ml2_type_vxlan] ... vni_ranges 1:1000[securitygroup] ... enable_ipset True[rootcontroller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge] physical_interface_mappings provider:PROVIDER_INTERFACE_NAME将PUBLIC_INTERFACE_NAME 替换为底层的物理公共网络接口[vxlan] enable_vxlan True local_ip OVERLAY_INTERFACE_IP_ADDRESS l2_population True将OVERLAY_INTERFACE_IP_ADDRESS 替换为处理覆盖网络的底层物理网络接口的IP地址[securitygroup] ... enable_security_group True firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver[rootcontroller ~]# vim /etc/neutron/l3_agent.ini[DEFAULT] ... interface_driver neutron.agent.linux.interface.BridgeInterfaceDriver external_network_bridge [rootcontroller ~]# vim /etc/neutron/dhcp_agent.ini[DEFAULT] ... interface_driver neutron.agent.linux.interface.BridgeInterfaceDriver dhcp_driver neutron.agent.linux.dhcp.Dnsmasq enable_isolated_metadata True修改完配置后重启对应服务[rootcontroller ~]# systemctl restart neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service计算节点[rootcompute1 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge] physical_interface_mappings provider:PROVIDER_INTERFACE_NAME将PUBLIC_INTERFACE_NAME 替换为底层的物理公共网络接口[vxlan] enable_vxlan True local_ip OVERLAY_INTERFACE_IP_ADDRESS l2_population True将OVERLAY_INTERFACE_IP_ADDRESS 替换为处理覆盖网络的底层物理网络接口的IP地址[securitygroup] ... enable_security_group True firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver[rootcompute1 ~]# systemctl restart neutron-linuxbridge-agent.serviceDashBoard支持3层网络服务[rootcontroller ~]# vim /etc/openstack-dashboard/local_settings创建网络admin用户demo用户创建云主机demo用户按照同样方式再创建一台云主机创建路由demo用户绑定浮动ip块存储服务安装并配置控制节点mysql -u root -pCREATE DATABASE cinder;GRANT ALL PRIVILEGES ON cinder.* TO cinderlocalhost \ IDENTIFIED BY CINDER_DBPASS; GRANT ALL PRIVILEGES ON cinder.* TO cinder% \ IDENTIFIED BY CINDER_DBPASS;用合适的密码替换 CINDER_DBPASS$ . admin-openrc$ openstack user create --domain default --password-prompt cinder$ openstack role add --project service --user cinder adminopenstack service create --name cinder \ --description OpenStack Block Storage volumeopenstack service create --name cinderv2 \ --description OpenStack Block Storage volumev2openstack endpoint create --region RegionOne \ volume public http://controller:8776/v1/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volume internal http://controller:8776/v1/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volume admin http://controller:8776/v1/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volumev2 public http://controller:8776/v2/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volumev2 internal http://controller:8776/v2/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volumev2 admin http://controller:8776/v2/%\(tenant_id\)syum install openstack-cinder[rootcontroller ~]# vim /etc/cinder/cinder.conf[database] ... connection mysqlpymysql://cinder:CINDER_DBPASScontroller/cinder用你为块设备存储数据库选择的密码替换 CINDER_DBPASS。[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password RABBIT_PASS用你在 “RabbitMQ” 中为 “openstack” 选择的密码替换 “RABBIT_PASS”。[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username cinder password CINDER_PASS将 CINDER_PASS 替换为你在认证服务中为 cinder 用户选择的密码[DEFAULT] ... my_ip 192.168.247.171[oslo_concurrency] ... lock_path /var/lib/cinder/tmp# su -s /bin/sh -c cinder-manage db sync cinder[rootcontroller ~]# vim /etc/nova/nova.conf[cinder] os_region_name RegionOne# systemctl restart openstack-nova-api.service# systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service # systemctl start openstack-cinder-api.service openstack-cinder-scheduler.service安装并配置一个存储节点[rootblock1 ~]# yum install lvm2[rootblock1 ~]# systemctl enable --now lvm2-lvmetad.service添加一块虚拟磁盘[rootblock1 ~]# pvcreate /dev/sdb[rootblock1 ~]# vgcreate cinder-volumes /dev/sdb[rootblock1 ~]# vim /etc/lvm/lvm.conf[rootblock1 ~]# yum install openstack-cinder targetcli python-keystone[rootblock1 ~]# vim /etc/cinder/cinder.conf[database] ... connection mysqlpymysql://cinder:CINDER_DBPASScontroller/cinder用你为块设备存储数据库选择的密码替换 CINDER_DBPASS。[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password RABBIT_PASS用你在 “RabbitMQ” 中为 “openstack” 选择的密码替换 “RABBIT_PASS”[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username cinder password CINDER_PASS将 CINDER_PASS 替换为你在认证服务中为 cinder 用户选择的密码[DEFAULT] ... my_ip MANAGEMENT_INTERFACE_IP_ADDRESS将其中的MANAGEMENT_INTERFACE_IP_ADDRESS替换为存储节点上的管理网络接口的IP 地址[lvm] ... volume_driver cinder.volume.drivers.lvm.LVMVolumeDriver volume_group cinder-volumes iscsi_protocol iscsi iscsi_helper lioadm[DEFAULT] ... enabled_backends lvm[DEFAULT] ... glance_api_servers http://controller:9292[oslo_concurrency] ... lock_path /var/lib/cinder/tmp# systemctl enable openstack-cinder-volume.service target.service # systemctl start openstack-cinder-volume.service target.service验证操作[rootcontroller ~]# . admin-openrc[rootcontroller ~]# cinder service-list创建云硬盘[rootblock1 ~]# lvs创建CentOS镜像配置yum源[rootdemo ~]# cd /etc/yum.repos.d/[rootdemo yum.repos.d]# rm -f *.repo[rootdemo yum.repos.d]# wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo关闭防火墙和SElinux[rootdemo yum.repos.d]# systemctl disable --now firewalld[rootdemo yum.repos.d]# sed -i s/^SELINUXenforcing/SELINUXdisabled/ /etc/selinux/config关闭NetworkManager[rootdemo ~]# systemctl disable --now NetworkManager配置时间同步[rootdemo yum.repos.d]# yum install -y chrony[rootdemo yum.repos.d]# vim /etc/chrony.conf开启串口终端Serial Console重定向[rootdemo ~]# vim /etc/default/grub[rootdemo ~]# grub2-mkconfig -o /boot/grub2/grub.cfg修改网卡名称[rootdemo yum.repos.d]# vim /boot/grub2/grub.cfg[rootdemo yum.repos.d]# vim /etc/sysconfig/network-scripts/ifcfg-eth0TYPEEthernet BOOTPROTOdhcp DEVICEeth0 ONBOOTyes重启使一些配置生效[rootdemo yum.repos.d]# reboot删除全部 SSH 主机密钥文件[rootdemo ~]# cd /etc/sshd[rootdemo ssh]# rm -f ssh_host_*关机并创建镜像[rootdemo ssh]# poweroff另开一台虚拟机操作将 VMware 导出的OVA 格式虚拟机镜像转换为适合KVM / QEMU平台使用的qcow2 格式镜像[rootdocker1 ~]# mkdir /opt/v2v[rootdocker1 ~]# yum install -y virt-v2v[rootdocker1 ~]# systemctl start libvirtd[rootdocker1 ~]# virt-v2v -i ova demo.ova -o local -of qcow2 -os /opt/v2v/使用virt-sparsify瘦身压缩[rootdocker1 v2v]# virt-sparsify --compress demo-sda demo.qcow2在openstack上创建镜像admin用户新建云主机类型admin用户新建云主机demo用户创建成功后绑定浮动ip
Networking 服务之前的修改的配置不要删除配置私有网络控制节点[rootcontroller ~]# vim /etc/neutron/neutron.conf[database] ... connection mysqlpymysql://neutron:NEUTRON_DBPASScontroller/neutron使用你设置的数据库密码替换 NEUTRON_DBPASS[DEFAULT] ... core_plugin ml2 service_plugins router allow_overlapping_ips True[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password RABBIT_PASS用你在RabbitMQ中为openstack选择的密码替换 “RABBIT_PASS”[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username neutron password NEUTRON_PASS将 NEUTRON_PASS 替换为你在认证服务中为 neutron 用户选择的密码[DEFAULT] ... notify_nova_on_port_status_changes True notify_nova_on_port_data_changes True [nova] ... auth_url http://controller:35357 auth_type password project_domain_name default user_domain_name default region_name RegionOne project_name service username nova password NOVA_PASS使用你在身份认证服务中设置的nova 用户的密码替换NOVA_PASS[oslo_concurrency] ... lock_path /var/lib/neutron/tmp[rootcontroller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini[ml2] ... type_drivers flat,vlan,vxlan[ml2] ... tenant_network_types vxlan[ml2] ... mechanism_drivers linuxbridge,l2population[ml2] ... extension_drivers port_security[ml2_type_flat] ... flat_networks provider[ml2_type_vxlan] ... vni_ranges 1:1000[securitygroup] ... enable_ipset True[rootcontroller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge] physical_interface_mappings provider:PROVIDER_INTERFACE_NAME将PUBLIC_INTERFACE_NAME 替换为底层的物理公共网络接口[vxlan] enable_vxlan True local_ip OVERLAY_INTERFACE_IP_ADDRESS l2_population True将OVERLAY_INTERFACE_IP_ADDRESS 替换为处理覆盖网络的底层物理网络接口的IP地址[securitygroup] ... enable_security_group True firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver[rootcontroller ~]# vim /etc/neutron/l3_agent.ini[DEFAULT] ... interface_driver neutron.agent.linux.interface.BridgeInterfaceDriver external_network_bridge [rootcontroller ~]# vim /etc/neutron/dhcp_agent.ini[DEFAULT] ... interface_driver neutron.agent.linux.interface.BridgeInterfaceDriver dhcp_driver neutron.agent.linux.dhcp.Dnsmasq enable_isolated_metadata True修改完配置后重启对应服务[rootcontroller ~]# systemctl restart neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service计算节点[rootcompute1 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge] physical_interface_mappings provider:PROVIDER_INTERFACE_NAME将PUBLIC_INTERFACE_NAME 替换为底层的物理公共网络接口[vxlan] enable_vxlan True local_ip OVERLAY_INTERFACE_IP_ADDRESS l2_population True将OVERLAY_INTERFACE_IP_ADDRESS 替换为处理覆盖网络的底层物理网络接口的IP地址[securitygroup] ... enable_security_group True firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver[rootcompute1 ~]# systemctl restart neutron-linuxbridge-agent.serviceDashBoard支持3层网络服务[rootcontroller ~]# vim /etc/openstack-dashboard/local_settings创建网络admin用户demo用户创建云主机demo用户按照同样方式再创建一台云主机创建路由demo用户绑定浮动ip块存储服务安装并配置控制节点mysql -u root -pCREATE DATABASE cinder;GRANT ALL PRIVILEGES ON cinder.* TO cinderlocalhost \ IDENTIFIED BY CINDER_DBPASS; GRANT ALL PRIVILEGES ON cinder.* TO cinder% \ IDENTIFIED BY CINDER_DBPASS;用合适的密码替换 CINDER_DBPASS$ . admin-openrc$ openstack user create --domain default --password-prompt cinder$ openstack role add --project service --user cinder adminopenstack service create --name cinder \ --description OpenStack Block Storage volumeopenstack service create --name cinderv2 \ --description OpenStack Block Storage volumev2openstack endpoint create --region RegionOne \ volume public http://controller:8776/v1/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volume internal http://controller:8776/v1/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volume admin http://controller:8776/v1/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volumev2 public http://controller:8776/v2/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volumev2 internal http://controller:8776/v2/%\(tenant_id\)sopenstack endpoint create --region RegionOne \ volumev2 admin http://controller:8776/v2/%\(tenant_id\)syum install openstack-cinder[rootcontroller ~]# vim /etc/cinder/cinder.conf[database] ... connection mysqlpymysql://cinder:CINDER_DBPASScontroller/cinder用你为块设备存储数据库选择的密码替换 CINDER_DBPASS。[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password RABBIT_PASS用你在 “RabbitMQ” 中为 “openstack” 选择的密码替换 “RABBIT_PASS”。[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username cinder password CINDER_PASS将 CINDER_PASS 替换为你在认证服务中为 cinder 用户选择的密码[DEFAULT] ... my_ip 192.168.247.171[oslo_concurrency] ... lock_path /var/lib/cinder/tmp# su -s /bin/sh -c cinder-manage db sync cinder[rootcontroller ~]# vim /etc/nova/nova.conf[cinder] os_region_name RegionOne# systemctl restart openstack-nova-api.service# systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service # systemctl start openstack-cinder-api.service openstack-cinder-scheduler.service安装并配置一个存储节点[rootblock1 ~]# yum install lvm2[rootblock1 ~]# systemctl enable --now lvm2-lvmetad.service添加一块虚拟磁盘[rootblock1 ~]# pvcreate /dev/sdb[rootblock1 ~]# vgcreate cinder-volumes /dev/sdb[rootblock1 ~]# vim /etc/lvm/lvm.conf[rootblock1 ~]# yum install openstack-cinder targetcli python-keystone[rootblock1 ~]# vim /etc/cinder/cinder.conf[database] ... connection mysqlpymysql://cinder:CINDER_DBPASScontroller/cinder用你为块设备存储数据库选择的密码替换 CINDER_DBPASS。[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password RABBIT_PASS用你在 “RabbitMQ” 中为 “openstack” 选择的密码替换 “RABBIT_PASS”[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username cinder password CINDER_PASS将 CINDER_PASS 替换为你在认证服务中为 cinder 用户选择的密码[DEFAULT] ... my_ip MANAGEMENT_INTERFACE_IP_ADDRESS将其中的MANAGEMENT_INTERFACE_IP_ADDRESS替换为存储节点上的管理网络接口的IP 地址[lvm] ... volume_driver cinder.volume.drivers.lvm.LVMVolumeDriver volume_group cinder-volumes iscsi_protocol iscsi iscsi_helper lioadm[DEFAULT] ... enabled_backends lvm[DEFAULT] ... glance_api_servers http://controller:9292[oslo_concurrency] ... lock_path /var/lib/cinder/tmp# systemctl enable openstack-cinder-volume.service target.service # systemctl start openstack-cinder-volume.service target.service验证操作[rootcontroller ~]# . admin-openrc[rootcontroller ~]# cinder service-list创建云硬盘[rootblock1 ~]# lvs创建CentOS镜像配置yum源[rootdemo ~]# cd /etc/yum.repos.d/[rootdemo yum.repos.d]# rm -f *.repo[rootdemo yum.repos.d]# wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-7.repo关闭防火墙和SElinux[rootdemo yum.repos.d]# systemctl disable --now firewalld[rootdemo yum.repos.d]# sed -i s/^SELINUXenforcing/SELINUXdisabled/ /etc/selinux/config关闭NetworkManager[rootdemo ~]# systemctl disable --now NetworkManager配置时间同步[rootdemo yum.repos.d]# yum install -y chrony[rootdemo yum.repos.d]# vim /etc/chrony.conf开启串口终端Serial Console重定向[rootdemo ~]# vim /etc/default/grub[rootdemo ~]# grub2-mkconfig -o /boot/grub2/grub.cfg修改网卡名称[rootdemo yum.repos.d]# vim /boot/grub2/grub.cfg[rootdemo yum.repos.d]# vim /etc/sysconfig/network-scripts/ifcfg-eth0TYPEEthernet BOOTPROTOdhcp DEVICEeth0 ONBOOTyes重启使一些配置生效[rootdemo yum.repos.d]# reboot删除全部 SSH 主机密钥文件[rootdemo ~]# cd /etc/sshd[rootdemo ssh]# rm -f ssh_host_*关机并创建镜像[rootdemo ssh]# poweroff另开一台虚拟机操作将 VMware 导出的OVA 格式虚拟机镜像转换为适合KVM / QEMU平台使用的qcow2 格式镜像[rootdocker1 ~]# mkdir /opt/v2v[rootdocker1 ~]# yum install -y virt-v2v[rootdocker1 ~]# systemctl start libvirtd[rootdocker1 ~]# virt-v2v -i ova demo.ova -o local -of qcow2 -os /opt/v2v/使用virt-sparsify瘦身压缩[rootdocker1 v2v]# virt-sparsify --compress demo-sda demo.qcow2在openstack上创建镜像admin用户新建云主机类型admin用户新建云主机demo用户创建成功后绑定浮动ip
