Centos 7 搭建OpenStack 私有云——基础环境配置

Posted 2020-09-14 Bourbon.Tian

1.简介：

    OpenStack是一个由NASA（美国国家航空航天局）和Rackspace合作研发并发起的，以Apache许可证授权的自由软件和开放源代码项目。
　 OpenStack是一个开源的云计算管理平台项目，由几个主要的组件组合起来完成具体工作。OpenStack支持几乎所有类型的云环境，项目目标是提供实施简单、可大规模扩展、丰富、标准统一的云计算管理平台。OpenStack通过各种互补的服务提供了基础设施即服务（IaaS）的解决方案，每个服务提供API以进行集成。

2.环境准备：

openstack-node1 172.30.10.9
openstack-node2 172.30.10.11

域名解析:
/etc/hosts
172.30.10.9 openstack-node1
172.30.10.11 openstack-node2

关闭selinux：
vi /etc/sysconfig/selinux
SELINUX=disabled

setenforce 0

关闭iptables：
systemctl stop firewalld.service
systemctl disable firewalld.service

3.安装配置OpenStack：

3.1 安装软件包

openstack-node1

*****************************************************************************************

# Base
yum install -y http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-9.noarch.rpm
yum install -y centos-release-openstack-liberty
yum install -y python-openstackclient

# mysql
# 在Centos7中mysql改名为mariadb
yum install -y mariadb mariadb-server MySQL-python

# RabbitMQ
yum install -y rabbitmq-server

# Keystone
yum install -y openstack-keystone httpd mod_wsgi memcached python-memcached

# Glance
yum install -y openstack-glance python-glance python-glanceclient

# Nova
yum install -y openstack-nova-api openstack-nova-cert openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler python-novaclient

# Neutron
yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge python-neutronclient ebtables ipset

# Dashboard
yum install -y openstack-dashboard

# Cinder
yum install -y openstack-cinder python-cinderclient

openstack-node2

*****************************************************************************************

# Base
yum install -y http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-9.noarch.rpm
yum install centos-release-openstack-liberty
yum install python-openstackclient
		
# Nova 
yum install -y openstack-nova-compute sysfsutils
		
# Neutron 
yum install -y openstack-neutron openstack-neutron-linuxbridge ebtables ipset
		
# Cinder
yum install -y openstack-cinder python-cinderclient targetcli python-oslo-policy

3.2 时间同步

在openstack-node1上配置：（centos7用chrony，centos6用ntp）

# 安装chrony
[root@openstack-node1 ~]#yum install -y chrony
		
# 配置chrony
[root@openstack-node1 ~]#vi /etc/chrony.conf
# 允许哪些服务器和自己同步
allow 172.30/16 
		
# 设置服务开机启动
[root@openstack-node1 ~]#systemctl enable chronyd.service
[root@openstack-node1 ~]#systemctl start chronyd.service
[root@openstack-node1 ~]#timedatectl set-timezone Asia/Shanghai
[root@openstack-node1 ~]#timedatectl status

在openstack-node2上配置：

# 安装chrony
[root@openstack-node2 ~]#yum install -y chrony
		
# 配置chrony
[root@openstack-node2 ~]#vi /etc/chrony.conf
#只保留一行
server 172.30.10.9 iburst 
		
# 设置服务开机启动
[root@openstack-node2 ~]#systemctl enable chronyd.service
[root@openstack-node2 ~]#systemctl start chronyd.service
[root@openstack-node2 ~]#timedatectl set-timezone Asia/Shanghai
[root@openstack-node2 ~]#chronyc sources

3.3 配置mysql

修改配置文件，并初始化mysql

[root@openstack-node1 ~]#cp /usr/share/mariadb/my-medium.cnf /etc/my.cnf
[root@openstack-node1 ~]#vi /etc/my.cnf
# 在[mysqld]下添加下面的参数
[mysqld]
default-storage-engine = innodb
innodb_file_per_table
collation-server = utf8_general_ci
init-connect = \'SET NAMES utf8\'
character-set-server = utf8

# 设置开机启动
[root@openstack-node1 ~]#systemctl enable mariadb.service
[root@openstack-node1 ~]#ln -s \'/usr/lib/systemd/system/mariadb.service\' \'/etc/systemd/system/multi-user.target.wants/mariadb.service\'

# 初始化数据库
[root@openstack-node1 ~]#mysql_install_db --datadir="/var/lib/mysql" --user="mysql"
# 启动mysql
[root@openstack-node1 ~]#systemctl start mariadb.service
# 设置密码及初始化
[root@openstack-node1 ~]#mysql_secure_installation

创建数据库

[root@openstack-node1 ~]#mysql -u root -p
# 创建keystone库，并授权
MariaDB [(none)]> create database keystone;
MariaDB [(none)]> grant all privileges on keystone.* to \'keystone\'@\'172.30.10.9\' identified by \'keystone\'；
MariaDB [(none)]> grant all privileges on keystone.* to \'keystone\'@\'%\' identified by \'keystone\';
	
# 创建glance库，并授权
MariaDB [(none)]> create database glance;
MariaDB [(none)]> grant all privileges on glance.* to \'glance\'@\'172.30.10.9\' identified by \'glance\';  
MariaDB [(none)]> grant all privileges on glance.* to \'glance\'@\'%\' identified by \'glance\';
	
# 创建nova库，并授权 
MariaDB [(none)]> create database nova; 
MariaDB [(none)]> grant all privileges on nova.* to \'nova\'@\'%\' identified by \'nova\';
MariaDB [(none)]> grant all privileges on nova.* to \'nova\'@\'172.30.10.9\' identified by \'nova\';
	
# 创建neutron库，并授权
MariaDB [(none)]> create database neutron;
MariaDB [(none)]> grant all privileges on neutron.* to \'neutron\'@\'172.30.10.9\' identified by \'neutron\';
MariaDB [(none)]> grant all privileges on neutron.* to \'neutron\'@\'%\' identified by \'neutron\';

# 创建cinder库，并授权
MariaDB [(none)]> create database cinder;
MariaDB [(none)]> grant all privileges on cinder.* to \'cinder\'@\'%\' identified by \'cinder\';
MariaDB [(none)]> grant all privileges on cinder.* to \'cinder\'@\'172.30.10.9\' identified by \'cinder\';

# 刷新数据库
MariaDB [(none)]> flush privileges;
# 查看数据库列表  
MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| cinder             |
| glance             |
| information_schema |
| keystone           |
| mysql              |
| neutron            |
| nova               |
| performance_schema |
+--------------------+
8 rows in set (0.00 sec)

3.4 安装配置rabbitmq

MQ 全称 Message Queue，消息队列（MQ）是一种应用程序对应用程序的通信方法。应用程序通过读写出入队列的消息（针对应用程序的数据）来通信，而无需专用连接来链接它们。消息传递指的是程序之间通过在消息中发送数据进行通信，而不是通过直接调用彼此来通信，直接调用通常是用于诸如远程过程调用的技术。排队指的是应用程序通过队列来通信。队列的使用出去了接收和发送应用程序同时执行的要求。RabbitMQ是一个在AMQP基础上完整的，可复用的企业消息系统。他遵循Mozilla Public License开源协议。

启动rabbitmq，端口5672，添加openstack用户

# 启动rabbitmq，端口5672，添加openstack用户
[root@openstack-node1 lib]# systemctl enable rabbitmq-server.service
Created symlink from /etc/systemd/system/multi-user.target.wants/rabbitmq-server.service to /usr/lib/systemd/system/rabbitmq-server.service.
[root@openstack-node1 lib]# ln -s \'/usr/lib/systemd/system/rabbitmq-server.service\'\'/etc/systemd/system/multi-user.target.wants/rabbitmq-server.service\'
[root@openstack-node1 lib]# systemctl start rabbitmq-server.service 

# 添加用户名和密码
[root@openstack-node1 lib]# rabbitmqctl add_user openstack openstack
Creating user "openstack" ...
# 允许openstack用户配置、写、读访问
[root@openstack-node1 lib]# rabbitmqctl set_permissions openstack ".*" ".*" ".*"
Setting permissions for user "openstack" in vhost "/" ...

# 查看支持的插件
[root@openstack-node1 lib]# rabbitmq-plugins list
 Configured: E = explicitly enabled; e = implicitly enabled
 | Status:   * = running on rabbit@openstack-node1
 |/
[  ] amqp_client                       3.6.5
[  ] cowboy                            1.0.3
[  ] cowlib                            1.0.1
[  ] mochiweb                          2.13.1
[  ] rabbitmq_amqp1_0                  3.6.5
[  ] rabbitmq_auth_backend_ldap        3.6.5
[  ] rabbitmq_auth_mechanism_ssl       3.6.5
[  ] rabbitmq_consistent_hash_exchange 3.6.5
[  ] rabbitmq_event_exchange           3.6.5
[  ] rabbitmq_federation               3.6.5
[  ] rabbitmq_federation_management    3.6.5
[  ] rabbitmq_jms_topic_exchange       3.6.5
[  ] rabbitmq_management               3.6.5
[  ] rabbitmq_management_agent         3.6.5
[  ] rabbitmq_management_visualiser    3.6.5
[  ] rabbitmq_mqtt                     3.6.5
[  ] rabbitmq_recent_history_exchange  1.2.1
[  ] rabbitmq_sharding                 0.1.0
[  ] rabbitmq_shovel                   3.6.5
[  ] rabbitmq_shovel_management        3.6.5
[  ] rabbitmq_stomp                    3.6.5
[  ] rabbitmq_top                      3.6.5
[  ] rabbitmq_tracing                  3.6.5
[  ] rabbitmq_trust_store              3.6.5
[  ] rabbitmq_web_dispatch             3.6.5
[  ] rabbitmq_web_stomp                3.6.5
[  ] rabbitmq_web_stomp_examples       3.6.5
[  ] sockjs                            0.3.4
[  ] webmachine                        1.10.3

# 使用此插件实现web管理
[root@openstack-node1 lib]# rabbitmq-plugins enable rabbitmq_management
The following plugins have been enabled:
  mochiweb
  webmachine
  rabbitmq_web_dispatch
  amqp_client
  rabbitmq_management_agent
  rabbitmq_management
Applying plugin configuration to rabbit@openstack-node1... started 6 plugins.

# 重启rabbitmq服务
[root@openstack-node1 lib]# systemctl restart rabbitmq-server.service
[root@openstack-node1 lib]# lsof -i:15672
COMMAND   PID     USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
beam    33692 rabbitmq   49u  IPv4  80606      0t0  TCP *:15672 (LISTEN)

访问rabbitMQ，访问地址http://172.30.10.9:15672 默认用户名密码都是guest
1.点击Admin，创建openstack用户密码
2.点击用户名openstack，在“Update this user”菜单中输入密码及标签（administrator）
3.登出当前用户，使用openstack登录，测试是否创建成功

* 如何使用zabbix监控，可以点击左下角HTTP API的介绍

到这所有基础环境的配置就算完成了，接下来开始安装openstack组件。