openstack ussuri 安装脚本

admin

#!/bin/bash #Centos8最小化部署安装OpenStack Ussuri #共两台主机，分别是一台控制节点，一台计算节点 #1、控制节点内存4096M。双网卡，分别为eth0:10.0.0.11，eth1:10.0.0.12 ( |2 g: n5 q! x. V# @7 m #2、计算节点内存4096M。双网卡，分别为eth0:10.0.0.31，eth1:10.0.0.32 & @! ^8 F  H/ H# u# d2 k! ` #设置阿里云yum源 curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo ! P+ h$ d7 A5 W0 @ rm -f /etc/yum.repos.d/CentOS-AppStream.repo /etc/yum.repos.d/CentOS-PowerTools.repo /etc/yum.repos.d/CentOS-centosplus.repo /etc/yum.repos.d/CentOS-Extras.repo && rm -rf /var/cache/yum && yum makecache && yum -y update && yum -y autoremove & y: p4 g8 z- e/ O9 `! j . D6 r& S0 S" B" G9 v #关闭防火墙 systemctl stop firewalld && systemctl disable firewalld ' R; i7 x) m9 G; ]/ z& x/ K6 |' [ " B6 Z( |# i0 l* L: `5 ^) M& K1 { #关闭SELinux setenforce 0 3 |" e0 a9 ^$ t1 M" b+ \ sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config #关闭swap分区   U9 {$ e- o$ e. M swapoff -a ; k8 J" A) L; A- B3 [6 b" B7 R5 e- X7 f sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab #设置内核 modprobe bridge modprobe br_netfilter cat > /etc/sysconfig/modules/neutron.modules <<EOF #!/bin/bash modprobe -- bridge - m) l# k: i7 w' B$ d" K% P modprobe -- br_netfilter ; @) k& T, T, @. j EOF chmod 755 /etc/sysconfig/modules/neutron.modules && bash /etc/sysconfig/modules/neutron.modules echo "vm.max_map_count=262144" >> /etc/sysctl.conf 6 Y  }# D2 A( t4 z2 t' _ echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf echo "net.bridge.bridge-nf-call-iptables=1" >> /etc/sysctl.conf echo "net.bridge.bridge-nf-call-ip6tables=1" >> /etc/sysctl.conf sysctl -p   [! e- K* x6 v' l0 T. \0 ~6 x #设置时间同步 yum install -y chrony && yum -y autoremove sed -i '/^pool/d' /etc/chrony.conf sed -i '/^server/d' /etc/chrony.conf   m6 q4 ~5 k* B+ L, L% V& g$ O4 N echo "pool ntp.aliyun.com iburst" >> /etc/chrony.conf / |" ^9 L' p8 X2 M; F4 Y systemctl start chronyd.service && systemctl enable chronyd.service $ `5 f+ e2 \1 |+ r9 j$ P #控制节点 设置hostname hostnamectl set-hostname controller : H# q" {: N, `$ m+ t# ~/ d ' f3 Q! L' b( ^  r- s* P #计算节点 设置hostname ! o% e5 l* c- m3 _ hostnamectl set-hostname compute1 7 _% m! p" ]- T# H& h1 m6 m) B #添加host echo "10.0.0.11 controller" >> /etc/hosts 2 o' g2 A) _3 g5 C! C' |( R echo "10.0.0.31 compute1" >> /etc/hosts % B. T/ ^. `5 N0 ^, i  } : X3 S! K2 {# L1 M3 f/ _( H #安装基础组件 yum install -y centos-release-openstack-ussuri $ a4 ^" S& W! C9 X! {4 z% P yum config-manager --set-enabled PowerTools % d6 R* V1 b% o yum upgrade -y 1 g7 [6 K7 ?/ v$ i1 U* N yum install -y python3-openstackclient ( G% x/ ~, Y. i6 J) ^8 m& f #控制节点 安装Mariadb 9 o- W' F# a) m2 F+ p yum install -y mariadb mariadb-server python2-PyMySQL tee /etc/my.cnf.d/openstack.cnf <<-'EOF' : }: W6 b" f* Y; | [mysqld] bind-address = 10.0.0.11 default-storage-engine = innodb innodb_file_per_table = on max_connections = 4096 9 k  J& o8 n4 k3 h4 C' b+ b7 x collation-server = utf8_general_ci ( J; t/ O4 h* p- @& n7 N character-set-server = utf8 ) d: E; {9 l# r! _* P$ b3 D; ^& I EOF systemctl enable mariadb.service && systemctl start mariadb.service . T  G& }7 \0 O: C, a! d echo -e "\nY\n123456\n123456\nY\nn\nY\nY\n" | mysql_secure_installation 0 S) d& @3 n2 t! f #控制节点 安装RabbitMQ yum install -y rabbitmq-server systemctl enable rabbitmq-server.service && systemctl start rabbitmq-server.service % a& d& @; y# P; Q7 r rabbitmqctl add_user openstack 123456 ) B% D4 g# a6 r" L2 q rabbitmqctl set_permissions openstack ".*" ".*" ".*" / T3 ^: l) J$ D6 V 6 W6 G/ H4 h# O- |8 J #控制节点 安装Memcached 7 b1 S- x$ ]4 Q7 L3 O6 Y. T yum install -y memcached python3-memcached 2 ^/ [) N1 S0 o sed -i "s/-l 127.0.0.1,::1/-l 127.0.0.1,::1,controller/g" /etc/sysconfig/memcached 7 f( T0 n8 |/ O' D, L3 h  ?  K systemctl enable memcached.service && systemctl start memcached.service . O+ S8 ^; t- u. i* g8 V #控制节点 安装Etcd yum install -y etcd ) y! E9 q% k8 o rm -f /etc/etcd/etcd.conf tee /etc/etcd/etcd.conf <<-'EOF' 8 E: P" Q" T$ K) w% q: T #[Member] ETCD_DATA_DIR="/var/lib/etcd/default.etcd" + g) S8 K& f! _; e; y9 q1 \ ETCD_LISTEN_PEER_URLS=" http://10.0.0.11:2380 " ETCD_LISTEN_CLIENT_URLS=" http://10.0.0.11:2379 " + I9 M% t8 j' [" i6 v% k% E# Y ETCD_NAME="controller" 1 B7 M1 b! e* w) N6 t8 V1 p0 X #[Clustering] * o5 U) Q0 L) ^5 m, j# Y- l2 V6 E% a ETCD_INITIAL_ADVERTISE_PEER_URLS=" http://10.0.0.11:2380 " ETCD_ADVERTISE_CLIENT_URLS=" http://10.0.0.11:2379 " ETCD_INITIAL_CLUSTER="controller= http://10.0.0.11:2380 " ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01"   @( o; [6 f- K+ F2 s1 e ETCD_INITIAL_CLUSTER_STATE="new" , l# }6 f3 o. g/ C EOF   R. L4 ?6 W; h4 V0 p, Q, l systemctl enable etcd && systemctl start etcd ! Q+ c! J/ `* G0 ^& ?; u$ G #控制节点 安装Identity service + W; W6 l" [0 z" G) D, a mysql -uroot -p123456 -e "CREATE DATABASE keystone" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '123456'" ) J4 o* a; g) m! k' b3 t0 ?5 ~3 X' a mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456'" yum install -y openstack-keystone httpd python3-mod_wsgi ! \" D# {' s0 P# F. r3 I2 @ sed -i "556c connection = mysql+ pymysql://keystone:123456@controller/keystone " /etc/keystone/keystone.conf $ ]; R- x* x+ L sed -i "2418c provider = fernet" /etc/keystone/keystone.conf - H1 q- g) v# Z7 u" N su -s /bin/sh -c "keystone-manage db_sync" keystone keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone keystone-manage credential_setup --keystone-user keystone --keystone-group keystone keystone-manage bootstrap --bootstrap-password 123456 \ --bootstrap-admin-url http://controller:5000/v3/ \ --bootstrap-internal-url http://controller:5000/v3/ \ --bootstrap-public-url http://controller:5000/v3/ \ --bootstrap-region-id RegionOne 4 e- l" Y+ B# p8 l echo "ServerName controller" >> /etc/httpd/conf/httpd.conf # w/ l3 s* h$ G$ a2 w ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/ systemctl enable httpd.service && systemctl start httpd.service echo "export OS_USERNAME=admin" >> /etc/profile # F+ P) s# p8 Y* z9 }5 z5 T- u echo "export OS_PASSWORD=123456" >> /etc/profile echo "export OS_PROJECT_NAME=admin" >> /etc/profile * Y8 r$ O5 w! S0 Q2 u6 v- n' s echo "export OS_USER_DOMAIN_NAME=Default" >> /etc/profile * [' w* Z  i+ K( H. {: V+ L1 y" P# M echo "export OS_PROJECT_DOMAIN_NAME=Default" >> /etc/profile , U) z0 t2 b: c  A: A; q echo "export OS_AUTH_URL= http://controller:5000/v3 " >> /etc/profile echo "export OS_IDENTITY_API_VERSION=3" >> /etc/profile ) H  C7 t  G5 E- l source /etc/profile 9 t: d8 d$ [: a8 d openstack project create --domain default --description "Service Project" service ) d" V0 @* F0 C7 l #控制节点 安装Image service 3 p7 r5 n# F2 i mysql -uroot -p123456 -e "CREATE DATABASE glance" ; l$ m4 r- v- M5 V# v mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '123456'" openstack user create --domain default --password 123456 glance ; y: e5 ?- t# C$ g- c openstack role add --project service --user glance admin openstack service create --name glance --description "OpenStack Image" image ; q: h+ `) K6 E6 q0 u1 Q/ ? openstack endpoint create --region RegionOne image public http://controller:9292 openstack endpoint create --region RegionOne image internal http://controller:9292 ; ?5 u# @) O7 q; `! O openstack endpoint create --region RegionOne image admin http://controller:9292 5 |) O: ^7 R2 p& e! @( H; \3 R/ K0 n yum install -y openstack-glance 2 v! B& s: @" Y% O2 q. D sed -i "2062c connection = mysql+ pymysql://glance:123456@controller/glance " /etc/glance/glance-api.conf 4 ?" t# B0 U7 I1 j sed -i "5034c www_authenticate_uri = http://controller:5000 " /etc/glance/glance-api.conf sed -i "5035c auth_url = http://controller:5000 " /etc/glance/glance-api.conf sed -i "5036c memcached_servers = controller:11211" /etc/glance/glance-api.conf : u$ ]1 k% ~* W5 P- {) l- V sed -i "5037c auth_type = password" /etc/glance/glance-api.conf 4 }1 A- n# z; L sed -i "5038c project_domain_name = Default" /etc/glance/glance-api.conf sed -i "5039c user_domain_name = Default" /etc/glance/glance-api.conf 5 `9 f" o+ g  ` sed -i "5040c project_name = service" /etc/glance/glance-api.conf sed -i "5041c username = glance" /etc/glance/glance-api.conf 6 T9 n( h3 D) Q2 L" @# I% T/ B sed -i "5042c password = 123456" /etc/glance/glance-api.conf 1 h! v! y# F) t' \% q$ D sed -i "5678c flavor = keystone" /etc/glance/glance-api.conf 6 B" x7 j# |  V: E" W sed -i "3413c stores = file,http" /etc/glance/glance-api.conf sed -i "3414c default_store = file" /etc/glance/glance-api.conf sed -i "3415c filesystem_store_datadir = /var/lib/glance/images/" /etc/glance/glance-api.conf su -s /bin/sh -c "glance-manage db_sync" glance systemctl enable openstack-glance-api.service && systemctl start openstack-glance-api.service #控制节点 安装Placement service : n( b6 u: F: y# ~- B9 t0 o mysql -uroot -p123456 -e "CREATE DATABASE placement" 8 B+ A6 f" W& ~. M5 J; `6 L mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '123456'" " p8 J" X! M% [) L: K$ x7 [- @ mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '123456'" openstack user create --domain default --password 123456 placement " j0 I* E1 T, v2 V  A" @ openstack role add --project service --user placement admin openstack service create --name placement --description "Placement API" placement - O" l& D: X9 w& d openstack endpoint create --region RegionOne placement public http://controller:8778 2 h$ Z/ c' l# u, p openstack endpoint create --region RegionOne placement internal http://controller:8778 openstack endpoint create --region RegionOne placement admin http://controller:8778 # v0 V4 T: O6 c! `4 c3 d yum install -y openstack-placement-api sed -i "507c connection = mysql+ pymysql://placement:123456@controller/placement " /etc/placement/placement.conf sed -i "192c auth_strategy = keystone" /etc/placement/placement.conf 3 h& C/ Q" V# `  v! ^4 ?7 i: p sed -i "241c auth_url = http://controller:5000/v3 " /etc/placement/placement.conf : A, F3 Y! W) j+ W5 p0 r sed -i "242c memcached_servers = controller:11211" /etc/placement/placement.conf 1 T2 |8 a$ A9 E3 | sed -i "243c auth_type = password" /etc/placement/placement.conf sed -i "244c project_domain_name = Default" /etc/placement/placement.conf / y! l- J8 A# c; ^ sed -i "245c user_domain_name = Default" /etc/placement/placement.conf - y4 i$ Y0 P7 [6 m/ L sed -i "246c project_name = service" /etc/placement/placement.conf sed -i "247c username = placement" /etc/placement/placement.conf sed -i "248c password = 123456" /etc/placement/placement.conf su -s /bin/sh -c "placement-manage db sync" placement systemctl restart httpd + h8 Y/ c! {' J0 ^$ M# o2 i! E #控制节点 安装Compute service # L$ b3 |7 A$ {( M" [: Y5 a mysql -uroot -p123456 -e "CREATE DATABASE nova_api" ( D+ B& @. r) G) v  r1 u mysql -uroot -p123456 -e "CREATE DATABASE nova" mysql -uroot -p123456 -e "CREATE DATABASE nova_cell0" ! m1 Q; f. n* B9 b0 n mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '123456'" ' r) {& W; t" m$ s mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '123456'" / R) |( Z9 l; U7 O* I1 @9 b openstack user create --domain default --password 123456 nova 1 H1 Y0 a8 S' q) @; N5 d openstack role add --project service --user nova admin openstack service create --name nova --description "OpenStack Compute" compute 9 P$ g* O+ g6 a openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1 openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1 ) Y0 J- u, E9 f' O* `1 f5 t8 c+ K5 k openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1 yum install -y openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf sed -i "3c transport_url = rabbit://openstack:123456@controller:5672/ " /etc/nova/nova.conf # H* [( L- j; r8 S: M sed -i "4c my_ip = 10.0.0.11" /etc/nova/nova.conf sed -i "1079c connection = mysql+ pymysql://nova:123456@controller/nova_api " /etc/nova/nova.conf 3 |# |8 z' o' @- K; B8 D sed -i "1622c connection = mysql+ pymysql://nova:123456@controller/nova " /etc/nova/nova.conf sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf 9 t- Q/ r5 P1 F0 L- B sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf ( C( A9 x9 }$ v sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf 4 a: Z+ f/ S- P& l" ]4 e) l: O sed -i "2564c auth_type = password" /etc/nova/nova.conf , q1 L3 B  S: k% F+ N; [9 l sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf sed -i "2567c project_name = service" /etc/nova/nova.conf sed -i "2568c username = nova" /etc/nova/nova.conf , W+ x2 C2 L% N: v" p2 P sed -i "2569c password = 123456" /etc/nova/nova.conf 0 y# Y2 a' m4 `6 z1 z5 u. y sed -i "5171c enabled = true" /etc/nova/nova.conf ( s7 L! R. ~. f4 ~ sed -i '5172c server_listen = $my_ip' /etc/nova/nova.conf sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf , D- `2 o/ ]+ N sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf ( O7 i! e% g2 R# K4 X5 q( p sed -i "4095c project_name = service" /etc/nova/nova.conf + O! w* |  `6 h# g9 h- ]& q sed -i "4096c auth_type = password" /etc/nova/nova.conf sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf sed -i "4099c username = placement" /etc/nova/nova.conf sed -i "4100c password = 123456" /etc/nova/nova.conf 0 n" a) S4 ]( ]; B3 \/ a3 L: u sed -i "4509c discover_hosts_in_cells_interval = 300" /etc/nova/nova.conf / O% j6 t1 S$ j" F! t su -s /bin/sh -c "nova-manage api_db sync" nova ' a, k7 e: [0 d# U- Z; L su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova su -s /bin/sh -c "nova-manage db sync" nova systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service && systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service #计算节点 安装Compute service yum install -y openstack-nova-compute , {" V& {5 C8 U( {: o) E  E0 M sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf sed -i "3c transport_url = rabbit://openstack:123456@controller " /etc/nova/nova.conf 7 n- y* {/ A- }0 Y) e9 W sed -i "4c my_ip = 10.0.0.31" /etc/nova/nova.conf 2 `+ P( @9 j: m6 Y( t# J0 ` sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf 6 C4 A3 W5 Z$ `# v  _1 V sed -i "2564c auth_type = password" /etc/nova/nova.conf sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf : U1 @5 f5 @) y# \4 F sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf sed -i "2567c project_name = service" /etc/nova/nova.conf sed -i "2568c username = nova" /etc/nova/nova.conf sed -i "2569c password = 123456" /etc/nova/nova.conf sed -i "5171c enabled = true" /etc/nova/nova.conf sed -i "5172c server_listen = 0.0.0.0" /etc/nova/nova.conf sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf " x4 ~# T  ?+ O+ z* k sed -i "5174c novncproxy_base_url = http://controller:6080/vnc_auto.html " /etc/nova/nova.conf sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf ' Z2 ~- D3 |1 n sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf 5 K* k/ i+ z9 ^0 k9 F& |( o8 V sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf sed -i "4095c project_name = service" /etc/nova/nova.conf ) }0 n* J4 a" [, j6 t) z8 T sed -i "4096c auth_type = password" /etc/nova/nova.conf 4 l3 k" n3 a# X sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf 5 m! Q5 }! O9 N  B5 l9 i" E3 G3 j sed -i "4099c username = placement" /etc/nova/nova.conf 8 {% s/ s5 U5 M- b sed -i "4100c password = 123456" /etc/nova/nova.conf " S) {! _3 h1 I6 i$ w& b  d1 j* {  h & K5 _8 I% a; P0 h #执行命令，查看是否支持CPU虚拟化，如果大于0则支持。 egrep -c '(vmx|svm)' /proc/cpuinfo #如果不支持的话还需要执行下面的命令 sed -i "2722c virt_type = qemu" /etc/nova/nova.conf : @; q6 J: V* l( |: u % W, C8 k* U; G systemctl enable libvirtd.service openstack-nova-compute.service && systemctl start libvirtd.service openstack-nova-compute.service #控制节点 计算节点从注册到发现会有延迟，根据discover_hosts_in_cells_interval 配置轮询发现时间，可以执行下面命令手动发现计算节点 1 X$ a5 ?1 @5 F- r/ F su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova $ L) W' t3 @& ~3 _% c ; j  _9 A1 B+ }# ] #控制节点 安装Networking service 3 d2 D1 w* Q3 v5 L3 e8 x+ A mysql -uroot -p123456 -e "CREATE DATABASE neutron" ( M/ E# S4 |& |; Y* v" d1 w. c5 g mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456'" & F5 ^+ v0 h' S) W. |, T0 d mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456'" ; C2 g4 P- F0 g! a5 X1 ~6 G openstack user create --domain default --password 123456 neutron openstack role add --project service --user neutron admin $ H( A8 h& S; V. k9 A openstack service create --name neutron --description "OpenStack Networking" network openstack endpoint create --region RegionOne network public http://controller:9696 openstack endpoint create --region RegionOne network internal http://controller:9696 openstack endpoint create --region RegionOne network admin http://controller:9696 yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables #配置服务器组件 sed -i "2c core_plugin = ml2" /etc/neutron/neutron.conf sed -i "3c service_plugins = router" /etc/neutron/neutron.conf sed -i "4c allow_overlapping_ips = true" /etc/neutron/neutron.conf $ y' x6 [) P5 O# { sed -i "5c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf ) w* u/ E! q, v$ t; A sed -i "6c auth_strategy = keystone" /etc/neutron/neutron.conf sed -i "7c notify_nova_on_port_status_changes = true" /etc/neutron/neutron.conf 0 C  b( f0 d: D: E, r sed -i "8c notify_nova_on_port_data_changes = true" /etc/neutron/neutron.conf sed -i "254c connection = mysql+ pymysql://neutron:123456@controller/neutron " /etc/neutron/neutron.conf sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf 5 x: i$ v+ a# c: @$ I, K! @ sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf sed -i "362c auth_type = password" /etc/neutron/neutron.conf sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf ! a6 L7 X' y! T; ^ sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf   i2 M: E0 f5 Z, g" z8 |1 q; f" Q sed -i "365c project_name = service" /etc/neutron/neutron.conf   t% }, K: B' X8 X" u6 I8 t sed -i "366c username = neutron" /etc/neutron/neutron.conf sed -i "367c password = 123456" /etc/neutron/neutron.conf 8 R  ^7 B% Y: ^: D9 C sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf echo "[nova]" >> /etc/neutron/neutron.conf echo "auth_url = http://controller:5000 " >> /etc/neutron/neutron.conf 5 C3 \$ }) b  {$ z  h+ k" {2 r$ v echo "auth_type = password" >> /etc/neutron/neutron.conf " }6 C/ G9 d! W( o0 |4 B. V echo "project_domain_name = default" >> /etc/neutron/neutron.conf % N8 F! q$ ^& f" [% @7 ~ echo "user_domain_name = default" >> /etc/neutron/neutron.conf echo "region_name = RegionOne" >> /etc/neutron/neutron.conf 4 T& {: v- J( A8 R echo "project_name = service" >> /etc/neutron/neutron.conf - D4 E9 \0 \  S. r$ H3 @/ k! y echo "username = nova" >> /etc/neutron/neutron.conf echo "password = 123456" >> /etc/neutron/neutron.conf #配置Modular Layer 2 (ML2) plug-in $ f5 M; @  Z% t echo "[ml2]" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "type_drivers = flat,vlan,vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini 3 ~, `( p  s1 Z: u( { echo "tenant_network_types = vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini $ N+ s* H5 W4 q, O2 c5 n6 ] echo "mechanism_drivers = linuxbridge,l2population" >> /etc/neutron/plugins/ml2/ml2_conf.ini / t1 ?2 A2 ]5 ?2 _" q6 _3 q% z echo "extension_drivers = port_security" >> /etc/neutron/plugins/ml2/ml2_conf.ini " v% y+ B) W! h, G. r echo "[ml2_type_flat]" >> /etc/neutron/plugins/ml2/ml2_conf.ini   ^/ Q$ O8 |6 O. g# d7 w echo "flat_networks = provider" >> /etc/neutron/plugins/ml2/ml2_conf.ini . B; J. x! Z% ], @- n( {- k2 l echo "vni_ranges = 1:1000" >> /etc/neutron/plugins/ml2/ml2_conf.ini : }1 J( w4 E% O$ W3 \ echo "[securitygroup]" >> /etc/neutron/plugins/ml2/ml2_conf.ini % l5 H, h3 R8 ^3 U' i3 c& H8 h" l echo "enable_ipset = true" >> /etc/neutron/plugins/ml2/ml2_conf.ini , H* h2 X! D  @& [' Q1 D$ W #配置Linux bridge agent 5 C1 C7 G. _! J# H6 h' y echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #eth1为另外第二张网卡 echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 2 b! C, }- I8 } echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 2 K5 Y2 U5 F/ J& M  |# i  t) \ echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini . h0 m2 a+ j' S$ {$ n" l' f( Z6 E #10.0.0.12为第二张网卡的IP / C6 @, y. N. B/ e( c- w( f$ P& A echo "local_ip = 10.0.0.12" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 0 y+ I9 b+ e, R$ _6 e" a echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini ) R! V+ W% o6 x, ^ echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 2 T! O0 E1 F" L, M echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini + G8 ^& o& _! W. Q echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini ; P" Q3 o/ s6 z1 @' x( `- D% @ #配置layer-3 agent $ g: Z+ }0 U- a$ N( f3 ` sed -i "2c interface_driver = linuxbridge" /etc/neutron/l3_agent.ini #配置DHCP agent sed -i "2c interface_driver = linuxbridge" /etc/neutron/dhcp_agent.ini sed -i "3c dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq" /etc/neutron/dhcp_agent.ini / x8 d- y7 o; _1 X3 q5 e sed -i "4c enable_isolated_metadata = true" /etc/neutron/dhcp_agent.ini #配置metadata agent , w1 ]! O+ J) {' [# p& L( C sed -i "2c nova_metadata_host = controller" /etc/neutron/metadata_agent.ini : H7 ?, ^0 Q! { sed -i "3c metadata_proxy_shared_secret = 123456" /etc/neutron/metadata_agent.ini $ m8 t) V. f- ], q2 m- C #配置计算服务使用网络服务 sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf 9 s$ h1 G; \, s/ ` sed -i " 3335c auth_type = password" /etc/nova/nova.conf 3 w& J2 @7 N9 B$ m sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf + k! t; m- n- o7 q6 v sed -i " 3339c project_name = service" /etc/nova/nova.conf 3 T! H2 w. c2 c' s( e. e sed -i " 3340c username = neutron" /etc/nova/nova.conf sed -i " 3341c password = 123456" /etc/nova/nova.conf ; ^6 c8 o% E- j* J7 x sed -i " 3342c service_metadata_proxy = true" /etc/nova/nova.conf sed -i " 3343c metadata_proxy_shared_secret = 123456" /etc/nova/nova.conf ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron ' W' N) f" M& j; r+ |2 A, R systemctl restart openstack-nova-api.service systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service && systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service systemctl enable neutron-l3-agent.service && systemctl start neutron-l3-agent.service % L$ M5 ]0 O5 t7 w8 b #计算节点 安装Networking service 9 E3 R7 M. P: V) ] yum install -y openstack-neutron-linuxbridge ebtables ipset sed -i "2c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf ( O# f6 l) ]$ ~# [  u$ }' ] sed -i "3c auth_strategy = keystone" /etc/neutron/neutron.conf * a0 B7 T! x0 r4 z7 H  M3 T/ i. E, y. _ sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf 2 P' e) v  E/ X, q2 N sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf * f9 I; W& R$ l% N& P. b sed -i "362c auth_type = password" /etc/neutron/neutron.conf sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf sed -i "365c project_name = service" /etc/neutron/neutron.conf 6 M4 \# T/ I7 p' `: r) b0 O/ W- R8 ^ sed -i "366c username = neutron" /etc/neutron/neutron.conf sed -i "367c password = 123456" /etc/neutron/neutron.conf ; ?+ e1 C7 z  [1 O" ?/ E; G sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf ' s0 U- C0 \2 f; k/ q! U; ~8 c! p echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini - [( p" Q) }& ?: N #eth1为另外第二张网卡 - _* j+ p5 ~6 E4 Z echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #10.0.0.32为第二张网卡的IP 8 G: p" b6 C' J( \. L  f echo "local_ip = 10.0.0.32" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini : `0 Q8 {2 u" [; ]0 A9 I6 s* z+ A echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #配置计算服务使用网络服务 $ @; j# f* Z3 D" U sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf % B8 o" _9 K! [7 t# O: H sed -i " 3335c auth_type = password" /etc/nova/nova.conf sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf # @9 S2 P/ a2 R) J  k& T: u1 p sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf - s+ \: x/ {/ i sed -i " 3339c project_name = service" /etc/nova/nova.conf 0 b/ L. b$ m' d# }& c sed -i " 3340c username = neutron" /etc/nova/nova.conf sed -i " 3341c password = 123456" /etc/nova/nova.conf systemctl restart openstack-nova-compute.service $ s: w9 f1 D. M6 P: Y) ` systemctl enable neutron-linuxbridge-agent.service && systemctl start neutron-linuxbridge-agent.service #控制节点 安装Dashboard ( ?" x1 p9 T" p! h+ I3 ] yum install -y openstack-dashboard sed -i '118c OPENSTACK_HOST = "controller"' /etc/openstack-dashboard/local_settings ; r) G  c. r9 d8 l5 b: h6 t sed -i "39c ALLOWED_HOSTS = ['*']" /etc/openstack-dashboard/local_settings $ p9 r. y. @3 u9 i) q, d sed -i "104c SESSION_ENGINE = 'django.contrib.sessions.backends.cache'" /etc/openstack-dashboard/local_settings   u; l0 u7 x! A3 V sed -i "94c CACHES = {" /etc/openstack-dashboard/local_settings + V; g5 R6 s- p; p7 Z* ]" a4 G sed -i "95c 'default': {" /etc/openstack-dashboard/local_settings sed -i "96c 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache'," /etc/openstack-dashboard/local_settings sed -i "97c 'LOCATION': 'controller:11211'," /etc/openstack-dashboard/local_settings sed -i "98c }" /etc/openstack-dashboard/local_settings sed -i "99c }" /etc/openstack-dashboard/local_settings sed -i '119c OPENSTACK_KEYSTONE_URL = " http://%s:5000/v3 " % OPENSTACK_HOST' /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True' >> /etc/openstack-dashboard/local_settings - m7 B4 g5 J# q3 g2 i8 y echo 'OPENSTACK_API_VERSIONS = {' >> /etc/openstack-dashboard/local_settings echo '  "identity": 3,' >> /etc/openstack-dashboard/local_settings " v+ t- A2 J9 z5 Y echo '  "image": 2,' >> /etc/openstack-dashboard/local_settings echo '  "volume": 3' >> /etc/openstack-dashboard/local_settings echo '}' >> /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"' >> /etc/openstack-dashboard/local_settings - n" X/ w! m6 L$ o! \ echo 'OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"' >> /etc/openstack-dashboard/local_settings 4 Y) A0 E7 `" W- c: c9 g! P sed -i '123c TIME_ZONE = "Asia/Shanghai"' /etc/openstack-dashboard/local_settings # f9 i6 T! r: v echo "WEBROOT = '/dashboard/'" >> /etc/openstack-dashboard/local_settings : e8 S6 v# W, n/ b7 R. q( N echo 'WSGIApplicationGroup %{GLOBAL}' >> /etc/httpd/conf.d/openstack-dashboard.conf systemctl restart httpd.service memcached.service #安装完成，可访问 http://10.0.0.11/dashboard/ 查看 , n! o% \+ ^; L1 ^3 `8 e

' i9 z; a$ k2 I7 f8 r7 y% }

9 D; ~1 z" ~9 ]) a0 D1 R" y; f

总结

到此这篇关于Centos8最小化部署安装OpenStack Ussuri的详细教程的文章就介绍到这了,更多相关Centos8最小化部署安装OpenStack Ussuri内容请搜索脚本之家以前的文章或继续浏览下面