openstack ussuri 安装脚本

admin

#!/bin/bash #Centos8最小化部署安装OpenStack Ussuri : q- L8 B+ K: M5 a5 R" O/ `$ K2 z! ` #共两台主机，分别是一台控制节点，一台计算节点 - s) ~3 O8 a8 H" T, g #1、控制节点内存4096M。双网卡，分别为eth0:10.0.0.11，eth1:10.0.0.12 ) P6 a9 o7 g! @ #2、计算节点内存4096M。双网卡，分别为eth0:10.0.0.31，eth1:10.0.0.32 2 ~$ ?$ b& }. c% L$ Z : n8 v" v0 e- f3 z #设置阿里云yum源   k& _- E+ C1 S curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo 5 q$ M8 i/ |. s0 \9 V3 _4 S rm -f /etc/yum.repos.d/CentOS-AppStream.repo /etc/yum.repos.d/CentOS-PowerTools.repo /etc/yum.repos.d/CentOS-centosplus.repo /etc/yum.repos.d/CentOS-Extras.repo && rm -rf /var/cache/yum && yum makecache && yum -y update && yum -y autoremove #关闭防火墙 systemctl stop firewalld && systemctl disable firewalld & k' j/ s7 V. ^7 z& c 4 u8 P" b/ y0 g% @0 L9 ~; `- V #关闭SELinux setenforce 0 sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config #关闭swap分区 2 c7 w  l( s6 G/ m swapoff -a 0 G5 v* V6 ?8 r. _ sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab 5 a! s9 U: Y' P0 H5 W7 ] 0 H! o: v6 C: F* N #设置内核 modprobe bridge 7 E/ _$ A# {: e; \/ e. Q modprobe br_netfilter cat > /etc/sysconfig/modules/neutron.modules <<EOF #!/bin/bash ) p+ b/ H9 l; C" @. }7 K2 v modprobe -- bridge 9 _4 @7 z! c; s5 F modprobe -- br_netfilter EOF $ z5 j6 ]) j  ?6 T6 \! t, ]5 Q chmod 755 /etc/sysconfig/modules/neutron.modules && bash /etc/sysconfig/modules/neutron.modules echo "vm.max_map_count=262144" >> /etc/sysctl.conf   z6 q0 }* M- j# s echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf ' j7 G/ X9 E$ ^7 }+ z echo "net.bridge.bridge-nf-call-iptables=1" >> /etc/sysctl.conf echo "net.bridge.bridge-nf-call-ip6tables=1" >> /etc/sysctl.conf . T6 T: ?, C  c* Y sysctl -p ) y1 J; P) ^# ^; v, b; J; a #设置时间同步 , W! c. l" A% ]1 p4 _ yum install -y chrony && yum -y autoremove ' i8 f; Z4 M7 r, ? sed -i '/^pool/d' /etc/chrony.conf sed -i '/^server/d' /etc/chrony.conf echo "pool ntp.aliyun.com iburst" >> /etc/chrony.conf 3 z3 U1 V; W  [' e9 ]2 h systemctl start chronyd.service && systemctl enable chronyd.service #控制节点 设置hostname hostnamectl set-hostname controller + t1 J+ V0 q$ y# l2 p5 g3 o #计算节点 设置hostname . I* _* x# v5 J9 T hostnamectl set-hostname compute1 : J2 t" x% R1 W5 q, G) E; T! d #添加host echo "10.0.0.11 controller" >> /etc/hosts echo "10.0.0.31 compute1" >> /etc/hosts : p) K' l% Q3 Z5 @/ I$ i; ? #安装基础组件 yum install -y centos-release-openstack-ussuri yum config-manager --set-enabled PowerTools yum upgrade -y yum install -y python3-openstackclient : `' g4 m+ J& K" w: V' O #控制节点 安装Mariadb yum install -y mariadb mariadb-server python2-PyMySQL tee /etc/my.cnf.d/openstack.cnf <<-'EOF' 8 X# `& H/ [8 C+ s( D [mysqld] ! D' `4 [$ P* m1 W bind-address = 10.0.0.11 default-storage-engine = innodb innodb_file_per_table = on max_connections = 4096 collation-server = utf8_general_ci character-set-server = utf8 EOF / z; O+ x  M7 H% B! ?( P systemctl enable mariadb.service && systemctl start mariadb.service echo -e "\nY\n123456\n123456\nY\nn\nY\nY\n" | mysql_secure_installation ; j- k* S& y* f- O, b* x5 M #控制节点 安装RabbitMQ 4 [1 Z; F' o4 t. S7 |- Y! J: N yum install -y rabbitmq-server systemctl enable rabbitmq-server.service && systemctl start rabbitmq-server.service ' H* a0 u# J: x rabbitmqctl add_user openstack 123456 rabbitmqctl set_permissions openstack ".*" ".*" ".*" #控制节点 安装Memcached yum install -y memcached python3-memcached sed -i "s/-l 127.0.0.1,::1/-l 127.0.0.1,::1,controller/g" /etc/sysconfig/memcached ! r! q0 O7 l. G$ |  @  v& T7 m% T systemctl enable memcached.service && systemctl start memcached.service #控制节点 安装Etcd yum install -y etcd ; r) j5 F3 c5 s4 W, G0 g3 Y rm -f /etc/etcd/etcd.conf tee /etc/etcd/etcd.conf <<-'EOF' 5 [; T* t7 B' z' X6 E #[Member] ' G; z* b& Q: }- ? ETCD_DATA_DIR="/var/lib/etcd/default.etcd" ETCD_LISTEN_PEER_URLS=" http://10.0.0.11:2380 " , l& J2 H: Z" I ETCD_LISTEN_CLIENT_URLS=" http://10.0.0.11:2379 " . M. b' h* k& K% @8 K ETCD_NAME="controller" #[Clustering] $ U! }" D2 U5 i$ t8 F; ^8 R1 x2 b ETCD_INITIAL_ADVERTISE_PEER_URLS=" http://10.0.0.11:2380 " 5 E3 P: H. u& R# B ETCD_ADVERTISE_CLIENT_URLS=" http://10.0.0.11:2379 " ETCD_INITIAL_CLUSTER="controller= http://10.0.0.11:2380 " ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01" ETCD_INITIAL_CLUSTER_STATE="new" ! P5 k+ i* V* E& ^- q2 K EOF systemctl enable etcd && systemctl start etcd 9 e- `* k7 x9 {  ~: l #控制节点 安装Identity service mysql -uroot -p123456 -e "CREATE DATABASE keystone" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '123456'" # u% Y1 a% `9 L) ^# b' E9 Z0 {) a. [ mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456'" yum install -y openstack-keystone httpd python3-mod_wsgi sed -i "556c connection = mysql+ pymysql://keystone:123456@controller/keystone " /etc/keystone/keystone.conf " D  G! c1 J4 m$ ]! R9 } sed -i "2418c provider = fernet" /etc/keystone/keystone.conf su -s /bin/sh -c "keystone-manage db_sync" keystone keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone keystone-manage credential_setup --keystone-user keystone --keystone-group keystone keystone-manage bootstrap --bootstrap-password 123456 \ 1 p5 B) C' T8 s2 s3 B; } --bootstrap-admin-url http://controller:5000/v3/ \ --bootstrap-internal-url http://controller:5000/v3/ \ --bootstrap-public-url http://controller:5000/v3/ \ --bootstrap-region-id RegionOne echo "ServerName controller" >> /etc/httpd/conf/httpd.conf 4 ^4 @1 U, \$ ?( F  U ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/ & P7 W, q. y! l  J systemctl enable httpd.service && systemctl start httpd.service echo "export OS_USERNAME=admin" >> /etc/profile echo "export OS_PASSWORD=123456" >> /etc/profile echo "export OS_PROJECT_NAME=admin" >> /etc/profile echo "export OS_USER_DOMAIN_NAME=Default" >> /etc/profile : E% W/ I# U  L! ^, S echo "export OS_PROJECT_DOMAIN_NAME=Default" >> /etc/profile echo "export OS_AUTH_URL= http://controller:5000/v3 " >> /etc/profile echo "export OS_IDENTITY_API_VERSION=3" >> /etc/profile # q  h1 U; L, b  L0 D. u+ M# \ source /etc/profile ) {2 D; z+ t6 ~$ p4 Q openstack project create --domain default --description "Service Project" service . y4 s5 N" j" d7 _ #控制节点 安装Image service mysql -uroot -p123456 -e "CREATE DATABASE glance" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '123456'" ! S: W( T/ Y, D9 J! P" U mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '123456'" 7 f; y/ \- `2 D) T4 }, Y openstack user create --domain default --password 123456 glance openstack role add --project service --user glance admin ! d; s5 F( j8 [& n4 y7 @, j openstack service create --name glance --description "OpenStack Image" image 9 ]9 H9 [+ `0 ~# Q4 }9 T. z9 a openstack endpoint create --region RegionOne image public http://controller:9292 ; K0 C$ W- X4 I openstack endpoint create --region RegionOne image internal http://controller:9292 openstack endpoint create --region RegionOne image admin http://controller:9292 ( L7 L& p+ L$ X( S yum install -y openstack-glance sed -i "2062c connection = mysql+ pymysql://glance:123456@controller/glance " /etc/glance/glance-api.conf sed -i "5034c www_authenticate_uri = http://controller:5000 " /etc/glance/glance-api.conf sed -i "5035c auth_url = http://controller:5000 " /etc/glance/glance-api.conf 1 I# y) y; ^  ~( n0 g; o0 Z* O sed -i "5036c memcached_servers = controller:11211" /etc/glance/glance-api.conf 7 d! v/ K# Z) L( e0 n6 }7 [0 y sed -i "5037c auth_type = password" /etc/glance/glance-api.conf ; ~! h% l% i6 c% w8 ~* E; v& C" k sed -i "5038c project_domain_name = Default" /etc/glance/glance-api.conf : k, J- ?/ F4 @3 _9 r+ M3 @ sed -i "5039c user_domain_name = Default" /etc/glance/glance-api.conf 4 C- z8 l) w& u: }& g% t sed -i "5040c project_name = service" /etc/glance/glance-api.conf sed -i "5041c username = glance" /etc/glance/glance-api.conf sed -i "5042c password = 123456" /etc/glance/glance-api.conf sed -i "5678c flavor = keystone" /etc/glance/glance-api.conf sed -i "3413c stores = file,http" /etc/glance/glance-api.conf ( K$ S6 K' @6 p4 w* o. M4 Y& I sed -i "3414c default_store = file" /etc/glance/glance-api.conf sed -i "3415c filesystem_store_datadir = /var/lib/glance/images/" /etc/glance/glance-api.conf su -s /bin/sh -c "glance-manage db_sync" glance - G' a/ {- Y1 Q8 b* j* S( X- J systemctl enable openstack-glance-api.service && systemctl start openstack-glance-api.service 8 R+ U: v7 c* ~, r$ M #控制节点 安装Placement service mysql -uroot -p123456 -e "CREATE DATABASE placement" 6 q  \% U' _6 D# [# N5 _& W mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '123456'" + g$ U: ]4 x) W) }# D5 f0 ` mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '123456'" 6 q4 D: a( i9 L5 d+ N. W8 f openstack user create --domain default --password 123456 placement openstack role add --project service --user placement admin openstack service create --name placement --description "Placement API" placement : [5 R# {  L  l" l openstack endpoint create --region RegionOne placement public http://controller:8778 7 c& v! B) I% e5 o6 O$ B4 }( H openstack endpoint create --region RegionOne placement internal http://controller:8778 openstack endpoint create --region RegionOne placement admin http://controller:8778 , \* @5 t9 h8 b; R1 A/ P+ D yum install -y openstack-placement-api sed -i "507c connection = mysql+ pymysql://placement:123456@controller/placement " /etc/placement/placement.conf sed -i "192c auth_strategy = keystone" /etc/placement/placement.conf sed -i "241c auth_url = http://controller:5000/v3 " /etc/placement/placement.conf 0 L! ?0 J( ?! a% w! [5 u4 u, E sed -i "242c memcached_servers = controller:11211" /etc/placement/placement.conf sed -i "243c auth_type = password" /etc/placement/placement.conf 3 U$ j' P" i0 D4 N+ |! O% k sed -i "244c project_domain_name = Default" /etc/placement/placement.conf * {4 s: C7 o6 o% S' T2 i- p sed -i "245c user_domain_name = Default" /etc/placement/placement.conf ; ]! C0 a# K/ j% a$ z sed -i "246c project_name = service" /etc/placement/placement.conf sed -i "247c username = placement" /etc/placement/placement.conf * ]3 B& x# J$ j8 K1 ^ sed -i "248c password = 123456" /etc/placement/placement.conf : q. {/ d4 l& { su -s /bin/sh -c "placement-manage db sync" placement * C2 i9 j! C6 L$ l- } systemctl restart httpd 0 m! E5 X: ]  H9 b. F #控制节点 安装Compute service ' d6 M4 G$ j; v! @, M mysql -uroot -p123456 -e "CREATE DATABASE nova_api" mysql -uroot -p123456 -e "CREATE DATABASE nova" mysql -uroot -p123456 -e "CREATE DATABASE nova_cell0" 0 [- m% L* y" ?# O. i3 X+ O) ~5 ~ mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" 3 ]4 @( l# R% i- c% P- _$ n mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '123456'" 8 \+ I2 D% A& U% u% O mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '123456'" : d  y3 \" h$ a9 Q6 Z& v  k" N mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" # T6 H" S$ N, p9 y mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '123456'" ; n  A1 M- [# K$ _1 p7 _% u8 p( N openstack user create --domain default --password 123456 nova openstack role add --project service --user nova admin openstack service create --name nova --description "OpenStack Compute" compute ( C7 ?5 y* ?; x openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1 4 u9 b5 |% [: K* \ openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1 openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1 + C, [9 @! C5 B# Z1 \# p6 \ yum install -y openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler * Z2 k/ \" M; b+ |6 v: w' W sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf - P' j/ T  i' F  m: Q# c& D sed -i "3c transport_url = rabbit://openstack:123456@controller:5672/ " /etc/nova/nova.conf $ o2 B, d( I+ g% K, H  H' j sed -i "4c my_ip = 10.0.0.11" /etc/nova/nova.conf 4 \" u% G+ i( ~, P5 n6 | sed -i "1079c connection = mysql+ pymysql://nova:123456@controller/nova_api " /etc/nova/nova.conf ' z4 D! K' q  Q8 p: K- f( X sed -i "1622c connection = mysql+ pymysql://nova:123456@controller/nova " /etc/nova/nova.conf sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf 1 ~4 E3 ^6 c- `$ c sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf sed -i "2564c auth_type = password" /etc/nova/nova.conf sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf sed -i "2567c project_name = service" /etc/nova/nova.conf 2 n+ C- A, R) J+ a! b, ^ sed -i "2568c username = nova" /etc/nova/nova.conf 3 X% |3 n' r1 g4 \% ~: h sed -i "2569c password = 123456" /etc/nova/nova.conf ( L# r* @0 T) s+ k- C8 b. `' Y: W sed -i "5171c enabled = true" /etc/nova/nova.conf sed -i '5172c server_listen = $my_ip' /etc/nova/nova.conf sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf ) c. v& o9 A# n! s0 [$ B sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf sed -i "4095c project_name = service" /etc/nova/nova.conf sed -i "4096c auth_type = password" /etc/nova/nova.conf , k5 P$ D/ \+ t4 _/ [ sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf ' l* j& B: f. _+ D" o2 l sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf sed -i "4099c username = placement" /etc/nova/nova.conf * q7 ~% T; G9 C6 U sed -i "4100c password = 123456" /etc/nova/nova.conf sed -i "4509c discover_hosts_in_cells_interval = 300" /etc/nova/nova.conf su -s /bin/sh -c "nova-manage api_db sync" nova 1 l  b" J/ Y% u8 e* \" ^% J0 z su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova 6 ]" ?, t) j) ?+ C1 [" q su -s /bin/sh -c "nova-manage db sync" nova systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service && systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service #计算节点 安装Compute service yum install -y openstack-nova-compute / H$ v; v4 T' ]; z& T0 _3 {$ R sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf & F2 O9 {" y% m# ` sed -i "3c transport_url = rabbit://openstack:123456@controller " /etc/nova/nova.conf : n8 B$ N8 x. E* y$ t1 V8 ` sed -i "4c my_ip = 10.0.0.31" /etc/nova/nova.conf sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf , Q. K  j; W4 P  V8 q3 I sed -i "2564c auth_type = password" /etc/nova/nova.conf sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf 3 E) `" N) U, ]4 p sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf sed -i "2567c project_name = service" /etc/nova/nova.conf sed -i "2568c username = nova" /etc/nova/nova.conf sed -i "2569c password = 123456" /etc/nova/nova.conf sed -i "5171c enabled = true" /etc/nova/nova.conf & w. w6 }6 @; ^  g3 ?4 ]3 [ sed -i "5172c server_listen = 0.0.0.0" /etc/nova/nova.conf sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf sed -i "5174c novncproxy_base_url = http://controller:6080/vnc_auto.html " /etc/nova/nova.conf 1 g6 m1 q! Z5 G+ U# X. U sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf & d" W* q0 x: _4 k- ^ sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf : z+ C( m# u6 o sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf sed -i "4095c project_name = service" /etc/nova/nova.conf sed -i "4096c auth_type = password" /etc/nova/nova.conf sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf   i4 f7 b' W3 p sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf sed -i "4099c username = placement" /etc/nova/nova.conf - J6 l( \7 h6 P) A9 h0 n sed -i "4100c password = 123456" /etc/nova/nova.conf #执行命令，查看是否支持CPU虚拟化，如果大于0则支持。 egrep -c '(vmx|svm)' /proc/cpuinfo 8 V; i- Q" \' A+ q6 P7 V; v9 d #如果不支持的话还需要执行下面的命令 sed -i "2722c virt_type = qemu" /etc/nova/nova.conf   o8 B. T2 w4 Q7 T6 o , D' G  b' f1 L. m systemctl enable libvirtd.service openstack-nova-compute.service && systemctl start libvirtd.service openstack-nova-compute.service . k9 f/ ~$ u' f" q* H5 Y* s #控制节点 计算节点从注册到发现会有延迟，根据discover_hosts_in_cells_interval 配置轮询发现时间，可以执行下面命令手动发现计算节点 su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova #控制节点 安装Networking service 0 O8 S" [/ f* r mysql -uroot -p123456 -e "CREATE DATABASE neutron" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456'"   r! f! X; Y* N" p# f mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456'" openstack user create --domain default --password 123456 neutron 7 ?, k, R( a% S" A+ W openstack role add --project service --user neutron admin 1 x8 {" L2 H& m/ l openstack service create --name neutron --description "OpenStack Networking" network openstack endpoint create --region RegionOne network public http://controller:9696 openstack endpoint create --region RegionOne network internal http://controller:9696 8 T, c2 _7 j) M+ W: m openstack endpoint create --region RegionOne network admin http://controller:9696 0 Y" T  V. p7 w  F0 G! t$ o, z- b6 q yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables #配置服务器组件 % ~9 s" K: F# \! Z. S sed -i "2c core_plugin = ml2" /etc/neutron/neutron.conf $ s8 ]: F/ u3 Q2 s* V sed -i "3c service_plugins = router" /etc/neutron/neutron.conf sed -i "4c allow_overlapping_ips = true" /etc/neutron/neutron.conf sed -i "5c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf sed -i "6c auth_strategy = keystone" /etc/neutron/neutron.conf sed -i "7c notify_nova_on_port_status_changes = true" /etc/neutron/neutron.conf % E, D# I5 o% I* h1 J+ W7 u2 C sed -i "8c notify_nova_on_port_data_changes = true" /etc/neutron/neutron.conf ) f& q) ?9 r% O6 O) G% w! b sed -i "254c connection = mysql+ pymysql://neutron:123456@controller/neutron " /etc/neutron/neutron.conf , O& f# p# [5 \, _- q* _ sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf ( l+ R+ Y2 C! C2 e; p9 Y$ l( \  k8 X sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf sed -i "362c auth_type = password" /etc/neutron/neutron.conf sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf : W0 n) A2 l! E% I* Q sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf ( `) S; d% f, c" P5 \ sed -i "365c project_name = service" /etc/neutron/neutron.conf # L8 L$ J* i. Z6 y8 d' w1 r9 e8 _ sed -i "366c username = neutron" /etc/neutron/neutron.conf + n8 G. [% e$ B# l0 B sed -i "367c password = 123456" /etc/neutron/neutron.conf sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf   Y8 c: c" ]( T; W echo "[nova]" >> /etc/neutron/neutron.conf echo "auth_url = http://controller:5000 " >> /etc/neutron/neutron.conf & W: a$ ?& L% j' G! \ echo "auth_type = password" >> /etc/neutron/neutron.conf ) F6 Z2 P0 b* _" \  m echo "project_domain_name = default" >> /etc/neutron/neutron.conf echo "user_domain_name = default" >> /etc/neutron/neutron.conf echo "region_name = RegionOne" >> /etc/neutron/neutron.conf % g  O0 ~* N! L: W. ]+ {7 c echo "project_name = service" >> /etc/neutron/neutron.conf echo "username = nova" >> /etc/neutron/neutron.conf echo "password = 123456" >> /etc/neutron/neutron.conf #配置Modular Layer 2 (ML2) plug-in echo "[ml2]" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "type_drivers = flat,vlan,vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini , O0 e& a/ j/ d3 e, S8 w2 s$ f. [ echo "tenant_network_types = vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini / s, F! C: [0 z% e# ?6 K, w, u echo "mechanism_drivers = linuxbridge,l2population" >> /etc/neutron/plugins/ml2/ml2_conf.ini ! w# ?" I' P+ y' L$ f echo "extension_drivers = port_security" >> /etc/neutron/plugins/ml2/ml2_conf.ini ; E% e7 w( n  S3 z! i1 i echo "[ml2_type_flat]" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "flat_networks = provider" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "vni_ranges = 1:1000" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "[securitygroup]" >> /etc/neutron/plugins/ml2/ml2_conf.ini 5 V1 V. ^3 p. ^, v; D5 p echo "enable_ipset = true" >> /etc/neutron/plugins/ml2/ml2_conf.ini #配置Linux bridge agent echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 1 e4 E, b8 g) t( O$ _ #eth1为另外第二张网卡 echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 2 f% Q9 M3 L8 M; k# a5 B% l. ?  o echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #10.0.0.12为第二张网卡的IP 3 L( V6 }2 E1 [* D echo "local_ip = 10.0.0.12" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini * u# d& D' _& R% { echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 7 l" b6 j' Q5 E1 Q echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini $ n( T3 L8 {7 k3 G #配置layer-3 agent - [  Q$ l1 [- n  c; j1 g" u2 q sed -i "2c interface_driver = linuxbridge" /etc/neutron/l3_agent.ini #配置DHCP agent sed -i "2c interface_driver = linuxbridge" /etc/neutron/dhcp_agent.ini sed -i "3c dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq" /etc/neutron/dhcp_agent.ini # T; t) w$ e) c  n# j2 M9 F sed -i "4c enable_isolated_metadata = true" /etc/neutron/dhcp_agent.ini / }3 B3 i4 w: |3 H #配置metadata agent 8 y3 J: Z  r) A- z sed -i "2c nova_metadata_host = controller" /etc/neutron/metadata_agent.ini sed -i "3c metadata_proxy_shared_secret = 123456" /etc/neutron/metadata_agent.ini # a& l% k) j3 @  | #配置计算服务使用网络服务 sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf sed -i " 3335c auth_type = password" /etc/nova/nova.conf sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf 8 H2 {  @3 I8 K' D  ] sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf sed -i " 3339c project_name = service" /etc/nova/nova.conf sed -i " 3340c username = neutron" /etc/nova/nova.conf , O9 m* j' _$ [3 T) L% u sed -i " 3341c password = 123456" /etc/nova/nova.conf sed -i " 3342c service_metadata_proxy = true" /etc/nova/nova.conf 4 u% f) H; M$ d& l" O5 M& T sed -i " 3343c metadata_proxy_shared_secret = 123456" /etc/nova/nova.conf ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini * x& A( }+ ~5 }" N8 {0 N' H5 w; j9 ` su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron ! l0 ]7 j7 ^) r; L2 b3 L7 ~; y systemctl restart openstack-nova-api.service systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service && systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service systemctl enable neutron-l3-agent.service && systemctl start neutron-l3-agent.service #计算节点 安装Networking service yum install -y openstack-neutron-linuxbridge ebtables ipset 3 K4 m2 a; @9 n' X sed -i "2c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf sed -i "3c auth_strategy = keystone" /etc/neutron/neutron.conf sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf / x: s$ A" g  \6 N# g' \ sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf sed -i "362c auth_type = password" /etc/neutron/neutron.conf sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf 3 l4 e0 `) e+ v+ }/ Y5 ~# k sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf sed -i "365c project_name = service" /etc/neutron/neutron.conf sed -i "366c username = neutron" /etc/neutron/neutron.conf sed -i "367c password = 123456" /etc/neutron/neutron.conf sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #eth1为另外第二张网卡 1 J* `  D! `% w* f: Y6 u echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 5 w& U% y9 H% P, ?) S: ? #10.0.0.32为第二张网卡的IP * N, L; w, C8 `' o- w8 d1 x1 ` echo "local_ip = 10.0.0.32" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini + g( P: t2 Z* u8 z echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 3 I, p. n3 D5 l( A* h% F1 s echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 1 }+ F* w; Y2 W* P) u/ ^" B% d echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini , m& J% p/ `  Q7 z$ }% W #配置计算服务使用网络服务 sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf sed -i " 3335c auth_type = password" /etc/nova/nova.conf sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf 6 O$ r5 d# g# ]  ?3 ]2 _; ] sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf : {3 `6 `/ V5 {7 w9 l sed -i " 3339c project_name = service" /etc/nova/nova.conf sed -i " 3340c username = neutron" /etc/nova/nova.conf sed -i " 3341c password = 123456" /etc/nova/nova.conf . D& R; w' C/ G- v; n systemctl restart openstack-nova-compute.service / F( q& ]# u' j% A6 n* Z systemctl enable neutron-linuxbridge-agent.service && systemctl start neutron-linuxbridge-agent.service % a" z% T7 w; a/ a3 E4 C #控制节点 安装Dashboard yum install -y openstack-dashboard sed -i '118c OPENSTACK_HOST = "controller"' /etc/openstack-dashboard/local_settings % T  X9 G# V+ b5 q7 f7 s6 t  M sed -i "39c ALLOWED_HOSTS = ['*']" /etc/openstack-dashboard/local_settings ' V, f  Q7 T  A  A sed -i "104c SESSION_ENGINE = 'django.contrib.sessions.backends.cache'" /etc/openstack-dashboard/local_settings 1 X1 M5 w% K2 |  w5 C& v sed -i "94c CACHES = {" /etc/openstack-dashboard/local_settings 6 F( h( q4 Q  U2 o, Y sed -i "95c 'default': {" /etc/openstack-dashboard/local_settings ; z; i0 b2 b1 _0 Y* Q! a sed -i "96c 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache'," /etc/openstack-dashboard/local_settings sed -i "97c 'LOCATION': 'controller:11211'," /etc/openstack-dashboard/local_settings sed -i "98c }" /etc/openstack-dashboard/local_settings 5 o- u, i2 I# O7 R5 z! K+ l1 n" [ sed -i "99c }" /etc/openstack-dashboard/local_settings sed -i '119c OPENSTACK_KEYSTONE_URL = " http://%s:5000/v3 " % OPENSTACK_HOST' /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True' >> /etc/openstack-dashboard/local_settings % k+ s8 z/ R3 y echo 'OPENSTACK_API_VERSIONS = {' >> /etc/openstack-dashboard/local_settings 6 |& O# M. x0 d3 d$ u$ _& l echo '  "identity": 3,' >> /etc/openstack-dashboard/local_settings echo '  "image": 2,' >> /etc/openstack-dashboard/local_settings 6 k( }$ U# p1 v) G! D! b* ?8 S echo '  "volume": 3' >> /etc/openstack-dashboard/local_settings 4 q# w1 {& x4 `$ m4 W echo '}' >> /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"' >> /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"' >> /etc/openstack-dashboard/local_settings sed -i '123c TIME_ZONE = "Asia/Shanghai"' /etc/openstack-dashboard/local_settings 1 s6 v! U+ Z. V9 Q! z echo "WEBROOT = '/dashboard/'" >> /etc/openstack-dashboard/local_settings echo 'WSGIApplicationGroup %{GLOBAL}' >> /etc/httpd/conf.d/openstack-dashboard.conf 4 F" I5 u7 ]9 V. K6 ~: }, [1 `5 V systemctl restart httpd.service memcached.service ' F1 L/ @; ?; K& Z( c #安装完成，可访问 http://10.0.0.11/dashboard/ 查看 0 Y- S  J7 Z7 ~4 p, }$ t" C

% m2 c* `8 u" z1 @$ u6 q/ l$ M8 H
, g6 K7 K6 W; {) ~3 S$ \8 p

总结

到此这篇关于Centos8最小化部署安装OpenStack Ussuri的详细教程的文章就介绍到这了,更多相关Centos8最小化部署安装OpenStack Ussuri内容请搜索脚本之家以前的文章或继续浏览下面