kolla安装openstack

admin

Quick Start
. U9 v$ }  a4 q2 `5 D- p

[url=https://bugs.launchpad.net/kolla-ansible/+filebug?field.title=Quick%20Start%20in%20kolla-ansible&field.tags=&field.comment=%0A%0A%0AThis%20bug%20tracker%20is%20for%20errors%20with%20the%20documentation,%20use%20the%20following%20as%20a%20template%20and%20remove%20or%20add%20fields%20as%20you%20see%20fit.%20Convert%20[%20]%20into%20[x]%20to%20check%20boxes:%0A%0A-%20[%20]%20This%20doc%20is%20inaccurate%20in%20this%20way:%20______%0A-%20[%20]%20This%20is%20a%20doc%20addition%20request.%0A-%20[%20]%20I%20have%20a%20fix%20to%20the%20document%20that%20I%20can%20paste%20below%20including%20example:%20input%20and%20output.%20%0A%0AIf%20you%20have%20a%20troubleshooting%20or%20support%20issue,%20use%20the%20following%20%20resources:%0A%0A%20-%20Ask%20OpenStack:%20http://ask.openstack.org%0A%20-%20The%20mailing%20list:%20http://lists.openstack.org%0A%20-%20IRC:%20%27openstack%27%20channel%20on%20Freenode%0A%0A-----------------------------------%0ARelease:%209.3.2.dev22%20on%202020-05-28%2020:43:03%0ASHA:%20437c6a1e30182462308903c98c95bbee7b6e001a%0ASource:%20https://opendev.org/openstack/ko ... start.rst%0AURL:%20[/url]][/url]

5 s$ |6 V. w3 A
THIS PAGE LAST UPDATED: 2020-05-28 20:43:03

. |- F/ g! \9 y) W* e7 U$ d

This guide provides step by step instructions to deploy OpenStack using Kolla Ansible on bare metal servers or virtual machines.

Recommended reading¶

It’s beneficial to learn basics of both Ansible and Docker before running Kolla-Ansible.

Host machine requirements¶

The host machine must satisfy the following minimum requirements:

• 2 network interfaces
• 8GB main memory
• 40GB disk space
  
  

See the support matrix for details of supported host Operating Systems.

, U# J/ Z, q3 D3 \; ?Install dependencies¶

Typically commands that use the system package manager in this section must be run with root privileges.

It is generally recommended to use a virtual environment to install Kolla Ansible and its dependencies, to avoid conflicts with the system site packages. Note that this is independent from the use of a virtual environment for remote execution, which is described in Virtual Environments.

• For Ubuntu, update the package index.
  sudo apt-get update
  ) f+ }) l- u" A. G
  + T+ ?7 W; h8 j5 L. C, Y7 E
• Install Python build dependencies:
  For CentOS or RHEL 7, run:
  sudo yum install python-devel libffi-devel gcc openssl-devel libselinux-python
  
  : d( E- ~% Q$ n
  For CentOS or RHEL 8, run:
  sudo dnf install python3-devel libffi-devel gcc openssl-devel python3-libselinux
  
  
  For Ubuntu, run:
  sudo apt-get install python-dev libffi-dev gcc libssl-dev python-selinux python-setuptools
  
  
  : K% R% Q4 a: v4 w7 \% B

Install dependencies using a virtual environment¶

If not installing Kolla Ansible in a virtual environment, skip this section.

• Install the virtualenv package.
  For CentOS or RHEL 7, run:
  sudo yum install python-virtualenv
  
  
  For CentOS or RHEL 8, run:
  sudo dnf install python3-virtualenv
  
  * d/ M2 k) z7 x3 \
  For Ubuntu, run:
  sudo apt-get install python-virtualenv
  
  / W0 q( _# G" j/ V
• Create a virtual environment and activate it:
  virtualenv /path/to/virtualenvsource /path/to/virtualenv/bin/activate
  - x7 L9 y: v( |* G
  
  The virtual environment should be activated before running any commands that depend on packages installed in it.
• Ensure the latest version of pip is installed:
  pip install -U pip
  ! e& E% M6 s$ r% t2 U: d
  
• Install Ansible. Currently, Kolla Ansible requires Ansible 2.6 to 2.9.
  pip install 'ansible<2.10'
  
  # O# [. [) k9 t8 B6 Z( ]
  + U0 Z( l, Z9 J1 K9 O: i/ n$ ~/ R

Install dependencies not using a virtual environment¶

If installing Kolla Ansible in a virtual environment, skip this section.

• Install pip.
  For CentOS or RHEL, run:
  sudo easy_install pip
  
  ) t' Q' M% }$ ]9 {) P# f! U
  For Ubuntu, run:
  sudo apt-get install python-pip
  
  3 L5 O4 i9 G# q5 _
• Ensure the latest version of pip is installed:
  sudo pip install -U pip
  2 p+ K' s9 b5 \! l4 S8 R
  " Y. n" q  V, x2 V
• Install Ansible. Currently, Kolla Ansible requires Ansible 2.6 to 2.9.
  For CentOS or RHEL, run:
  sudo yum install ansible
  
  
  For Ubuntu, run:
  sudo apt-get install ansible
  ! y( N" s" ]4 E1 s# o
  
• If the version of Ansible provided by the distribution does not meet the above version requirements, install it via pip.
  sudo pip install 'ansible<2.10'
  / @* l- q) [, J  P3 f
  & R' A, q1 _/ V' s7 c  l; x& a
    ]* f% b( j" v" d* w; e( W

Install Kolla-ansible¶Install Kolla-ansible for deployment or evaluation¶

• Install kolla-ansible and its dependencies using pip.
  If using a virtual environment:
  pip install kolla-ansible
  
  / ^% M3 a. l6 I) u! g
  If not using a virtual environment:
  sudo pip install kolla-ansible
  
  % F3 s3 ?  E  r. n! }8 o
• Create the /etc/kolla directory.
  sudo mkdir -p /etc/kollasudo chown $USER:$USER /etc/kolla
  
  2 \: A7 d+ P5 y) I6 D& C
• Copy globals.yml and passwords.yml to /etc/kolla directory.
  If using a virtual environment:
  cp -r /path/to/virtualenv/share/kolla-ansible/etc_examples/kolla/* /etc/kolla
  " R5 Q$ w9 h3 d& o; Y% O
  
  If not using a virtual environment on CentOS or RHEL, run:
  cp -r /usr/share/kolla-ansible/etc_examples/kolla/* /etc/kolla
  
  
  If not using a virtual environment on Ubuntu, run:
  cp -r /usr/local/share/kolla-ansible/etc_examples/kolla/* /etc/kolla
  ' M; U& m6 K* W$ u% [0 H. t
  2 R/ k5 ?8 w# ^# q2 B
• Copy all-in-one and multinode inventory files to the current directory.
  If using a virtual environment:
  cp /path/to/virtualenv/share/kolla-ansible/ansible/inventory/* .
  
  1 Z  I; Y7 i9 U% M( H+ g- A
  If not using a virtual environment on CentOS or RHEL, run:
  cp /usr/share/kolla-ansible/ansible/inventory/* .
  
  $ O3 ^1 y$ [9 `7 u" A0 E
  If not using a virtual environment on Ubuntu, run:
  cp /usr/local/share/kolla-ansible/ansible/inventory/* .
  
  : B+ |3 a& V0 @* [4 _2 d
  

  |: M  P, p) wInstall Kolla for development¶

• Clone kolla and kolla-ansible repositories from git.
  git clone https://github.com/openstack/kollagit clone https://github.com/openstack/kolla-ansible
  
  
• Install requirements of kolla and kolla-ansible:
  If using a virtual environment:
  pip install ./kollapip install ./kolla-ansible
  
  
  If not using a virtual environment:
  sudo pip install ./kollasudo pip install ./kolla-ansible
  
  % {! D% g5 G$ J- V# O9 A) Z
• Create the /etc/kolla directory.
  sudo mkdir -p /etc/kollasudo chown $USER:$USER /etc/kolla
  
  
• Copy the configuration files to /etc/kolla directory. kolla-ansible holds the configuration files ( globals.yml andpasswords.yml) in etc/kolla.
  cp -r kolla-ansible/etc/kolla/* /etc/kolla
    c( m1 z) e6 J6 E+ I
  7 [% s& z% h! L3 r$ a7 P: f& [, k
• Copy the inventory files to the current directory. kolla-ansible holds inventory files ( all-in-one and multinode) in theansible/inventory directory.
  cp kolla-ansible/ansible/inventory/* .
  
  
  

* ~' m: v8 L) l/ M) }- i: ~
Configure Ansible¶

For best results, Ansible configuration should be tuned for your environment. For example, add the following options to the Ansible configuration file /etc/ansible/ansible.cfg:

[defaults]host_key_checking=Falsepipelining=Trueforks=100
5 e$ F7 t2 T7 T+ D6 Q

Further information on tuning Ansible is available here.

Prepare initial configuration¶Inventory¶

The next step is to prepare our inventory file. An inventory is an Ansible file where we specify hosts and the groups that they belong to. We can use this to define node roles and access credentials.

Kolla-Ansible comes with all-in-one and multinode example inventory files. The difference between them is that the former is ready for deploying single node OpenStack on localhost. If you need to use separate host or more than one node, edit multinode inventory:

• Edit the first section of multinode with connection details of your environment, for example:
  [control]10.0.0.[10:12] ansible_user=ubuntu ansible_password=foobar ansible_become=true# Ansible supports syntax like [10:12] - that means 10, 11 and 12.# Become clause means "use sudo".[network:children]control# when you specify group_name:children, it will use contents of group specified.[compute]10.0.0.[13:14] ansible_user=ubuntu ansible_password=foobar ansible_become=true[monitoring]10.0.0.10# This group is for monitoring node.# Fill it with one of the controllers' IP address or some others.[storage:children]compute[deployment]localhost       ansible_connection=local become=true# use localhost and sudo
  9 |' x' s! D! Y6 x3 R2 |4 V4 K
  
  To learn more about inventory files, check Ansible documentation.
• Check whether the configuration of inventory is correct or not, run:
  ansible -i multinode all -m ping
  9 ?$ g7 \4 V  O7 n! H
  
  ) z- c9 j$ \. F# e
  Note
  
  Ubuntu might not come with python pre-installed. That will cause errors in ping module. To quickly install python with ansible you can run ansible -i multinode all -m raw -a "apt-get -y install python-dev"
  
  / [+ {; l! Z' I9 S
  

( Y4 K- b7 K" w8 R  p, m6 GKolla passwords¶

Passwords used in our deployment are stored in /etc/kolla/passwords.yml file. All passwords are blank in this file and have to be filled either manually or by running random password generator:

For deployment or evaluation, run:

kolla-genpwd

  k# ~+ N% y  _% T8 ^

For development, run:

cd kolla-ansible/tools./generate_passwords.py
% D" {& c1 ~+ l
# R& f7 o! J8 t; f
Kolla globals.yml¶

globals.yml is the main configuration file for Kolla-Ansible. There are a few options that are required to deploy Kolla-Ansible:

• Image options
  User has to specify images that are going to be used for our deployment. In this guide DockerHub provided pre-built images are going to be used. To learn more about building mechanism, please refer Building Container Images.
  Kolla provides choice of several Linux distributions in containers:
  • CentOS
  • Ubuntu
  • Debian
  • RHEL
    
    9 U2 @+ o7 |* J
  For newcomers, we recommend to use CentOS 7, CentOS 8 or Ubuntu 18.04.
  kolla_base_distro: "centos"
  1 ^, P0 C7 W/ n+ N- s
  
  Next “type” of installation needs to be configured. Choices are:
  binary
  using repositories like apt or yum
  source
  using raw source archives, git repositories or local source directory
  
  % W5 `3 g+ W$ R# ?0 v
  7 W- _+ T) v0 P' n/ J5 s# pNote
  , C1 T- R& H% S" G# f4 Z
  This only affects OpenStack services. Infrastructure services like Ceph are always “binary”.
  
  4 t6 S5 s. q8 v) B* w  Y* L; w8 R
  ( P* x* g: g0 M& O2 w  Q. t% P5 j7 G6 c
  & Y8 q4 U9 L9 m) K. [Note
  
  Source builds are proven to be slightly more reliable than binary.
  
  kolla_install_type: "source"
  3 t+ ]7 r/ y3 }; Q/ v3 Q
  / i# e; h% P3 B. j+ `! y) T0 _
• Networking
  Kolla-Ansible requires a few networking options to be set. We need to set network interfaces used by OpenStack.
  First interface to set is “network_interface”. This is the default interface for multiple management-type networks.
  network_interface: "eth0"
  $ s$ g8 S8 m0 x# a- Z# W
  ; _# \5 Y: Z( U. ?" C4 q
  Second interface required is dedicated for Neutron external (or public) networks, can be vlan or flat, depends on how the networks are created. This interface should be active without IP address. If not, instances won’t be able to access to the external networks.
  neutron_external_interface: "eth1"
  
  ' x: R: H# z# t" n1 y
  To learn more about network configuration, refer Network overview.
  Next we need to provide floating IP for management traffic. This IP will be managed by keepalived to provide high availability, and should be set to be not used address in management network that is connected to our network_interface.
  kolla_internal_vip_address: "10.1.0.250"
  
  : v0 b" a4 s3 s( L; f- T
• Enable additional services
  By default Kolla-Ansible provides a bare compute kit, however it does provide support for a vast selection of additional services. To enable them, set enable_* to “yes”. For example, to enable Block Storage service:
  enable_cinder: "yes"
  - I; S0 V; R  x" l" n* F9 w
  
  Kolla now supports many OpenStack services, there is a list of available services. For more information about service configuration, Please refer to the Services Reference Guide.
• Virtual environment
  It is recommended to use a virtual environment to execute tasks on the remote hosts. This is covered Virtual Environments.
  
  : v# l$ N% e' e$ V

/ a$ Q- O5 w$ Y% R" H, y) j& s, K4 s
Deployment¶

After configuration is set, we can proceed to the deployment phase. First we need to setup basic host-level dependencies, like docker.

Kolla-Ansible provides a playbook that will install all required services in the correct versions.

The following assumes the use of the multinode inventory. If using a different inventory, such as all-in-one, replace the -i argument accordingly.

• For deployment or evaluation, run:
  • Bootstrap servers with kolla deploy dependencies:
    kolla-ansible -i ./multinode bootstrap-servers
    4 L, O3 r9 J5 n0 |! }8 O
    $ V/ p4 a7 X/ z* ~" C* ]! a
  • Do pre-deployment checks for hosts:
    kolla-ansible -i ./multinode prechecks
    
    
  • Finally proceed to actual OpenStack deployment:
    kolla-ansible -i ./multinode deploy
    - P5 E) u" ?" i  q
    
    : N" m, W/ _" Y6 D* D. x# N
• For development, run:
  • Bootstrap servers with kolla deploy dependencies:
    cd kolla-ansible/tools./kolla-ansible -i ../../multinode bootstrap-servers
    9 N# N2 y" C) X! `! e
    2 N2 x2 o! u* i
  • Do pre-deployment checks for hosts:
    ./kolla-ansible -i ../../multinode prechecks
    6 {; Z5 r! s2 M: o9 J& T
    
  • Finally proceed to actual OpenStack deployment:
    ./kolla-ansible -i ../../multinode deploy
    / F; t( r5 V1 G* q& V! @
    
    
  
  " e+ ?9 ]) z! V5 O9 ~

When this playbook finishes, OpenStack should be up, running and functional! If error occurs during execution, refer to troubleshooting guide.

: o  Z1 @! D. n& LUsing OpenStack¶

• Install the OpenStack CLI client:
  pip install python-openstackclient
  
  ( R. T9 B0 \- [! I4 H
• OpenStack requires an openrc file where credentials for admin user are set. To generate this file:
  • For deployment or evaluation, run:
    kolla-ansible post-deploy. /etc/kolla/admin-openrc.sh
    
    
  • For development, run:
    cd kolla-ansible/tools./kolla-ansible post-deploy. /etc/kolla/admin-openrc.sh
    
    
    
• Depending on how you installed Kolla-Ansible, there is a script that will create example networks, images, and so on.
  • For deployment or evaluation, run init-runonce script on CentOS or RHEL:
    /usr/share/kolla-ansible/init-runonce
    ; n6 Y# e% W: V/ V* V7 s$ j' G
    - i, W, Y: o1 `2 u0 g( ?
    Run init-runonce script on Ubuntu:
    /usr/local/share/kolla-ansible/init-runonce
    # ]: A8 J0 ^: U1 O
    3 A, [* I6 f( N8 i
  • For development, run:
    kolla-ansible/tools/init-runonce
    ' W, E3 D9 B2 O7 N" q' S+ Y
    ) T2 }2 n. ?7 b& t) n3 y) G6 T
  • 
    9 {: \2 f  k8 ]! O
    
    
  
    m; |! W! p1 n7 e

) f, V  N/ z$ p$ I7 O


1 o3 U# D3 K4 d! H2 x! C: h  Y

& n5 R8 g; ?6 d* z$ a; v/ k- w

admin

安装环境准备
官方部署文档：
( `! ^1 N- b# g4 Qhttps://docs.openstack.org/kolla ... ser/quickstart.html

本次部署train版all-in-one单节点，使用一台centos7.8 minimal节点进行部署，该节点同时作为控制节点、计算节点、网络节点和cinder存储节点使用，同时也是kolla ansible的部署节点。
8 X6 i6 F+ E; Y9 d8 `$ n' z
kolla安装节点要求：

2 network interfaces
0 L' Y4 G3 w) j& L6 s, U3 M7 P: v8GB main memory
40GB disk space
如果是vmware workstation环境，勾选处理器选项的虚拟化引擎相关功能，否则后面需要配置nova_compute_virt_type=qemu参数，这里选择勾选，跳过以下步骤。
7 D  M+ s: w4 a- x: {) D
# cat /etc/kolla/globals.yml
nova_compute_virt_type: "qemu"
& N; P0 I' u  j! T% l
#或者部署完成后手动调整
  \1 _9 N, F* }! _7 K7 }# h: A[root@kolla ~]# cat /etc/kolla/nova-compute/nova.conf |grep virt_type
#virt_type = kvm
virt_type = qemu
5 n* e6 w5 d; [
[root@kolla ~]# docker restart nova_compute
1
8 g8 a/ R; T0 P; Y( M# b2
3
4 `+ M; q) Q, S6 K4
5
6
7
8
9
0 M8 B2 V, E. ?5 `. h+ N% fkolla的安装要求目标机器至少两块网卡，本次安装使用2块网卡对应管理网络和外部网络两个网络平面，在vmware workstation虚拟机新增一块网卡ens37：
. d9 }2 }7 }( Y  w6 z
ens33，NAT模式，管理网络，正常配置静态IP即可。租户网络与该网络复用，租户vm网络不单独创建网卡
ens37，桥接模式，外部网络，无需配置IP地址，这个其实是让neutron的br-ex 绑定使用，虚拟机通过这块网卡访问外网。
ens37网卡配置参考：
$ A" ]! g, h; G& L" ^: Whttps://docs.openstack.org/insta ... ing-controller.html

cat > /etc/sysconfig/network-scripts/ifcfg-ens37 <<EOF
4 @1 ^4 j8 q' i% `% L7 ENAME=ens37
# q6 g, c7 f0 c' a6 D5 JDEVICE=ens37
TYPE=Ethernet
; b1 S2 k# g: H9 |1 yONBOOT="yes"
6 b( {2 c& r% E, O* H- M8 u( \BOOTPROTO="none"
- P' I& [% z% B2 E% XEOF
' D  T0 r" A( u" x
! |& w4 h% I8 d, T# t9 `#重新加载en37网卡设备
nmcli con reload && nmcli con up ens37
% H* @5 ]  c5 Q( f) s1
2
3
4
5
6
" I. g7 w( I7 p' o7
7 G0 R" Q: m+ a0 S3 b6 |8
9
10
. y4 `4 Q) ^; W" d1 I+ D4 t如果启用cinder还需要额外添加磁盘，这里以添加一块/dev/sdb磁盘为例，创建为物理卷并加入卷组。
$ G. b8 Z# i" y1 V3 a, M* o4 C* v7 |! `
3 ^2 a5 w& `& J# apvcreate /dev/sdb
7 Y, X( Q# N# A- d) yvgcreate cinder-volumes /dev/sdb
1
2
注意卷组名称为cinder-volumes，默认与后面的globals.yml中定义一致。
2 F% C, t/ m; j
[root@kolla ~]# cat /etc/kolla/globals.yml | grep cinder_volume_group
#cinder_volume_group: "cinder-volumes"
4 ?% q- h5 A; ^, U- ], z1
5 z$ J2 J: O  x& K# [% W2
4 X  m/ z6 p4 Y; O, |7 U部署kolla ansible
: F1 z* v- k! g1 j9 v+ @7 e2 R配置主机名,kolla预检查时rabbitmq可能需要能够进行主机名解析

( I$ _5 s3 _, i8 V$ R, Thostnamectl set-hostname kolla
. g2 ~8 f) j* Z, Y  R1 u6 H' r1
安装依赖

6 D) j( {% t; B. a: o* r- _4 syum install -y python-devel libffi-devel gcc openssl-devel libselinux-python
4 t2 q4 u6 D" I( v1
+ \, a. P7 T- P安装 Ansible，注意版本，默认2.9应该可以满足要求
( w# o1 ?6 X3 O( E' v6 T/ U% |
yum install -y ansible
1
配置阿里云pip源，否则pip安装时会很慢
* ^! o& V; d8 [4 J$ c+ U& {
mkdir ~/.pip
cat > ~/.pip/pip.conf << EOF
[global]
trusted-host=mirrors.aliyun.com
index-url=https://mirrors.aliyun.com/pypi/simple/
EOF
1
2
  ]* Q& S% i+ E( D% q* A3
4
5
0 k: v) X0 L# n$ R7 A4 w* r2 X6
* e" Z: p8 Y% p" v安装 kolla-ansible

kolla版本与openstack版本对应关系：https://releases.openstack.org/teams/kolla.html
) E6 @% W, Q) Q' [- h5 O% m8 Y
1 r) J3 ~: A! k  `8 D! Xyum install -y epel-release
yum install -y python-pip
; K. o# Z: O! W6 J' o% c4 \+ Hpip install -U pip
pip install kolla-ansible==9.1.0 --ignore-installed PyYAML
$ Y" i" p" W& g1
+ l: _  K7 n2 {$ c) Z2
& ]8 B( x; z/ g' i2 F3 ]: C3
# h2 u8 x; E% y" ~+ Q) }- Y4
复制 kolla-ansible配置文件到当前环境
' Y6 [# Z) y& T
mkdir -p /etc/kolla
. j) L: k7 \5 p. @6 cchown $USER:$USER /etc/kolla
2 s8 R( T' f% g; M" V& D
##Copy globals.yml and passwords.yml
cp -r /usr/share/kolla-ansible/etc_examples/kolla/* /etc/kolla

##Copy all-in-one and multinode inventory files
cp /usr/share/kolla-ansible/ansible/inventory/* .
1
# G) W+ e* }/ r# ]- T2
$ G( L5 |! y; s8 M9 b3
$ @, s. s: H( J. D" P* T9 g1 r6 z/ r! J% ?4
+ \5 Y' s# \# X! Q% F5
6 I: W$ Y. E. H$ Z6
6 A4 n+ ?' y& H5 H, z0 E7
5 A$ \8 C6 J; L) p8 ?8
) g1 {4 I! b1 E; h- {4 l) Y修改ansible配置文件

* s% V+ [0 G: p  T2 n$ t7 i1 [cat << EOF | sed -i '/^\[defaults\]$/ r /dev/stdin' /etc/ansible/ansible.cfg
host_key_checking=False
pipelining=True
forks=100
2 x# m& {/ o6 H3 t1 mEOF
! X. M9 d' w# B7 r) }: _1
2
. w% ~; h. \  z0 I3
: J; J; ~; ^# [! e' d3 |; u8 p4
8 [) D3 |7 g5 e- v5
默认有all-in-one和multinode两个inventory文件，这里使用all-in-one，来规划集群角色，配置默认即可
5 J& S% ^1 ]* c8 q) Q7 a
% N/ h! u3 y# ^( ]( a5 S  W[root@kolla ~]# cat all-in-one | more
) t1 C2 m* I+ u8 |/ A3 u& e' z! W8 e# These initial groups are the only groups required to be modified. The
# additional groups are for more control of the environment.
: ]1 m- f8 E# A$ a[control]
localhost       ansible_connection=local

[network]
; e! q$ _) C& j5 F$ F* s. zlocalhost       ansible_connection=local
7 h4 t6 E/ \$ \
3 n% I  b$ H3 X5 G7 t4 O[compute]
localhost       ansible_connection=local
/ L, k& V5 ]2 ?1 c6 T7 i4 O
[storage]
2 i) U. N& I5 n- n. l/ q+ c5 [3 k; Ulocalhost       ansible_connection=local
/ b9 B; J9 p" ~
6 q0 d. M* K$ H$ B' r( F[monitoring]
localhost       ansible_connection=local
$ V) p9 I0 v  `& H: D! j
[deployment]
localhost       ansible_connection=local
+ g# v% e- Y; |...
1
2
3
, D' y, d, h# P, C2 n4
5
6
7
8
, k5 b5 k8 p! [+ n& z* i2 X9
10
11
12
13
1 h' q& S5 q/ s# K% d9 n. l14
( {. K1 X# S: p+ l' x" Z15
16
/ k) ^& S: G2 s8 I/ [17
6 U9 b1 [( F# L  \$ y18
5 G6 \7 x9 l( {3 Q4 l19
  D$ b; {5 r: q20
21
检查inventory配置是否正确，执行：

ansible -i all-in-one all -m ping
8 E' v/ X. G& s5 s. s6 y+ W7 i+ ^1
生成openstack组件用到的密码，该操作会填充/etc/kolla/passwords.yml，该文件中默认参数为空。
1 L9 x  e. M5 X7 ^/ R. f
kolla-genpwd
& }8 t* R- B' K2 N1
. g- l& O7 O$ m; v  u修改keystone_admin_password，可以修改为自定义的密码方便后续horizon登录，这里改为kolla。

$ sed -i 's#keystone_admin_password:.*#keystone_admin_password: kolla#g' /etc/kolla/passwords.yml
! [3 x/ @, ~$ b1 F; s% h" n8 g7 S
4 R$ i% n! q5 W! F% e$ J6 M4 v( f$ cat /etc/kolla/passwords.yml | grep keystone_admin_password
  S2 t( U7 o2 x# gkeystone_admin_password: kolla
& H+ P/ F. o8 f6 a$ w8 r9 X7 f1
2
/ E" I! b# P4 H3
4
修改全局配置文件globals.yml，该文件用来控制安装哪些组件，以及如何配置组件，由于全部是注释，这里直接追加进去，也可以逐个找到对应项进行修改。

- s- z# ?$ e. ]- {: o6 M% Gcp /etc/kolla/globals.yml{,.bak}

  R& L# v$ a3 U  Lcat >> /etc/kolla/globals.yml <<EOF
9 A0 U8 o/ K+ ~" R. S/ ]( ?
# Kolla options
! w0 z2 N' \: i' fkolla_base_distro: "centos"
9 d! Z4 ]5 n- d" t6 V$ `: D9 x# nkolla_install_type: "binary"
openstack_release: "train"
kolla_internal_vip_address: "192.168.93.200"
  \+ g+ K7 c6 h4 d+ U* D+ D
# Docker options
docker_registry: "registry.cn-shenzhen.aliyuncs.com"
docker_namespace: "kollaimage"
# ^: N; y& P) b2 Y
) m# ~; x* _9 I* h# Neutron - Networking Options
2 O+ Z7 [) M5 ~' a: C$ R0 Znetwork_interface: "ens33"
% c) f$ O2 j0 @# kneutron_external_interface: "ens37"
neutron_plugin_agent: "openvswitch"
enable_neutron_provider_networks: "yes"
; {. g* x: b7 C  J* b/ J
# OpenStack services
enable_cinder: "yes"
1 ^  g; ?; M& m- a' B- ~enable_cinder_backend_lvm: "yes"
) g  r! _$ u& B0 [3 ?, ]0 i" l! jEOF
1
2
" A4 Y& L+ T9 s4 W- X0 S1 V3
4
5
# f3 @* D6 Y1 u( g* H% @6 i6
7
1 C9 b" I3 d9 R( s( a/ u3 O5 O8
9
1 f, M% p5 E" K1 C6 ^1 V4 Y( {10
& v1 ?: K. {* l5 s9 J11
- n6 A# X' A' h, S( _+ L12
2 h( Y) }8 S5 b/ H7 R13
14
15
3 i, m! N% D( f1 i$ O16
4 Q  ^4 i3 |! n' F5 d% A" ~$ y: |17
18
  z& f  ]; x6 N2 d8 e  ]8 y8 x7 H+ t) ~19
20
- V* x# x* H. q% A/ P* j1 A6 w21
22
) g7 q$ i8 _$ [( l9 _23
1 ~" t% B) L" g& ~# }24
9 \. G8 h% S  q% W. `; _' Y: f  b- p参数说明：
3 W( s/ m8 W# I& @% m9 a) k
kolla_base_distro: kolla镜像基于不同linux发型版构建，主机使用centos这里对应使用centos类型的docker镜像即可。
kolla_install_type: kolla镜像基于binary二进制和source源码两种类型构建，实际部署使用binary即可。
; ^: x6 M9 r& ^openstack_release: openstack版本可自定义，会从dockerhub拉取对应版本的镜像
, ~7 g( R/ e( k$ h9 okolla_internal_vip_address: 单节点部署kolla也会启用haproxy和keepalived，方便后续扩容为高可用集群，该地址是ens33网卡网络中的一个可用IP。
docker_registry: 默认从dockerhub拉取镜像，这里使用阿里云镜像仓库，也可以本地搭建仓库，提前推送镜像上去。但该仓库目前只有train和ussuri版本的镜像，如何自己推送镜像参考该博客的其他文章。
docker_namespace: 阿里云kolla镜像仓库所在的命名空间，dockerhub官网默认是kolla。
2 m6 R) Y! w3 Knetwork_interface: 管理网络的网卡
neutron_external_interface: 外部网络的网卡
6 U( z& |  Y* K/ z0 A3 u7 lneutron_plugin_agent: 默认启用openvswitch
enable_neutron_provider_networks: 启用外部网络
enable_cinder: 启用cinder
enable_cinder_backend_lvm: 指定cinder后端存储为lvm
- ]. q' v/ l: N" x8 C修改docker官方yum源为阿里云yum源，另外配置docker镜像加速，指定使用阿里云镜像加速。
6 }3 _8 v% a& F8 w. A
  U* {; L/ y$ A; b1 y( ised -i 's/^docker_yum_url/#&/' /usr/share/kolla-ansible/ansible/roles/baremetal/defaults/main.yml
0 R8 a" q  U  T2 [& b% S" ssed -i 's/^docker_custom_config/#&/' /usr/share/kolla-ansible/ansible/roles/baremetal/defaults/main.yml

; X" ?; B0 c  S4 M4 |' }/ z: Scat >> /usr/share/kolla-ansible/ansible/roles/baremetal/defaults/main.yml <<EOF
docker_yum_url: "https://mirrors.aliyun.com/docker-ce/linux/{{ ansible_distribution | lower }}"
3 H" ~" H. Y4 [. k0 V# n" Jdocker_custom_config: {"registry-mirrors": ["https://uyah70su.mirror.aliyuncs.com"]}
EOF
9 q* y6 t3 U, ^* t9 ~1
2
3
+ ?" r! p8 j/ M- `9 b# u# P4
5
6 u# {' K7 g+ Y: D3 O' R% V6
7
部署openstack组件
部署openstack
0 f/ r( d7 y; _# c1 Q
#预配置，安装docker、docker sdk、关闭防火墙、配置时间同步等
0 w+ S" g- M7 qkolla-ansible -i ./all-in-one bootstrap-servers
$ E- ~2 v$ X& q. m# p& B
' e7 d1 ]* u# t#部署前环境检查
kolla-ansible -i ./all-in-one prechecks
# N0 R$ \3 U+ D1 b- }8 q
. n* h6 s4 s' \5 o# v- r#拉取镜像，也可省略该步骤，默认会自动拉取
kolla-ansible -i ./all-in-one pull

% C8 Z4 k+ b  n: W0 |# [  O& K#执行实际部署，拉取镜像，运行对应组件容器
" f5 E+ @+ c+ W  C# W( xkolla-ansible -i ./all-in-one deploy

1 e7 ]6 J/ ]- ~#生成openrc文件
& t: n! j* O/ [" L4 u- V( _kolla-ansible post-deploy
1
2
3
# h9 X# n' E# ]" i# ?% m! ]: q4
1 G& K" ~8 t" U9 W# H5 i0 W$ W; @) N5
  u0 m0 A. ~4 f- g! S6
7
, C) H+ r, Q2 y  d2 [, a8
0 f" Z0 c$ ~7 }; v. f9
5 m" p( ]5 b9 w4 E: j10
11
3 Y! ^' s# \5 q" @- c/ g+ v, s12
13
14
以上部署没有报错中断说明部署成功，所有openstack组件以容器方式运行，查看容器
* T- T2 @; x! J3 O! s
[root@kolla ~]# docker ps -a
  U- E/ X( ^' W; [1 c8 g4 gCONTAINER ID        IMAGE                                                                                        COMMAND                  CREATED             STATUS              PORTS               NAMES
325c17a52c79        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-chrony:train                      "dumb-init --single-…"   36 hours ago        Up 25 hours                             chrony
$ G( T7 d5 J$ T3 _# l9 U, J5 Y6218d98755ee        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cron:train                        "dumb-init --single-…"   36 hours ago        Up 25 hours                             cron
02b6598c1089        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-kolla-toolbox:train               "dumb-init --single-…"   36 hours ago        Up 25 hours                             kolla_toolbox
  V% u% V6 c% p- L+ ?8572e445abad        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-fluentd:train                     "dumb-init --single-…"   36 hours ago        Up 25 hours                             fluentd
0 o" q+ a- e' G8 X" Sf11a103c5ade        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-openstack-base:train              "dumb-init --single-…"   44 hours ago        Up 25 hours                             client
( q0 E. V! S8 ?* ]5c91def3c963        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-horizon:train                     "dumb-init --single-…"   44 hours ago        Up 25 hours                             horizon
e024bd4f5dd3        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-heat-engine:train                 "dumb-init --single-…"   44 hours ago        Up 25 hours                             heat_engine
2d1491bd9e1a        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-heat-api-cfn:train                "dumb-init --single-…"   44 hours ago        Up 25 hours                             heat_api_cfn
8 d5 S" h* J. C. m9 eeeefcfb31a61        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-heat-api:train                    "dumb-init --single-…"   44 hours ago        Up 25 hours                             heat_api
% v( K- ~6 f! p7 ^; L9 x# U9b51b53448fc        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-metadata-agent:train      "dumb-init --single-…"   44 hours ago        Up 25 hours                             neutron_metadata_agent
9f88a6c0cf31        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-l3-agent:train            "dumb-init --single-…"   44 hours ago        Up 25 hours                             neutron_l3_agent
. R$ G7 ~8 W$ R& C; s  O( \5 S3 La419cb3270a6        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-dhcp-agent:train          "dumb-init --single-…"   44 hours ago        Up 25 hours                             neutron_dhcp_agent
* Y4 d8 I7 h8 q959f6faba972        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-openvswitch-agent:train   "dumb-init --single-…"   44 hours ago        Up 25 hours                             neutron_openvswitch_agent
cc1b081cf876        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-server:train              "dumb-init --single-…"   44 hours ago        Up 25 hours                             neutron_server
$ U/ a' Y1 `8 A2 \eea1a87feb43        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-openvswitch-vswitchd:train        "dumb-init --single-…"   44 hours ago        Up 25 hours                             openvswitch_vswitchd
% ?- d% I/ \" w' U376f81bf75a2        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-openvswitch-db-server:train       "dumb-init --single-…"   44 hours ago        Up 25 hours                             openvswitch_db
c68fd9a92d73        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-compute:train                "dumb-init --single-…"   44 hours ago        Up 25 hours                             nova_compute
2492e2a32c80        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-libvirt:train                "dumb-init --single-…"   44 hours ago        Up 25 hours                             nova_libvirt
: ?" L5 b7 s- G3802d199b29f        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-ssh:train                    "dumb-init --single-…"   44 hours ago        Up 25 hours                             nova_ssh
1281c311ecd4        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-novncproxy:train             "dumb-init --single-…"   44 hours ago        Up 25 hours                             nova_novncproxy
6 z9 I: |2 V1 d* Q1 o2e8c8478116b        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-conductor:train              "dumb-init --single-…"   44 hours ago        Up 25 hours                             nova_conductor
) K3 V2 T! K2 p8 k4 v- Z! \950feb59b549        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-api:train                    "dumb-init --single-…"   44 hours ago        Up 25 hours                             nova_api
7 r# b, `' I/ z$ a" Y0 Y) g6 k49497e664922        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-scheduler:train              "dumb-init --single-…"   44 hours ago        Up 25 hours                             nova_scheduler
. R. h9 N% @! q) P$ Kf5eb37b48f7d        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-placement-api:train               "dumb-init --single-…"   44 hours ago        Up 25 hours                             placement_api
6 O) k2 {3 d) w6 X* M0 m54cd0e3be101        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cinder-backup:train               "dumb-init --single-…"   44 hours ago        Up 25 hours                             cinder_backup
b4efa4449e7f        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cinder-volume:train               "dumb-init --single-…"   44 hours ago        Up 25 hours                             cinder_volume
159b669d2fd3        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cinder-scheduler:train            "dumb-init --single-…"   44 hours ago        Up 25 hours                             cinder_scheduler
- h# ?4 |* W% M  X4 y9fc7e6a4cb25        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cinder-api:train                  "dumb-init --single-…"   44 hours ago        Up 25 hours                             cinder_api
, {6 ?& \& n, ~5 i; p2 Sb3f8f711f2b1        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-glance-api:train                  "dumb-init --single-…"   44 hours ago        Up 25 hours                             glance_api
4 I- J; P8 V1 J  F0 L1 D760e92d698e2        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-keystone-fernet:train             "dumb-init --single-…"   44 hours ago        Up 25 hours                             keystone_fernet
95f235c4ac10        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-keystone-ssh:train                "dumb-init --single-…"   44 hours ago        Up 25 hours                             keystone_ssh
4 m$ ~3 q2 `5 l$ p. r: p03306334ce19        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-keystone:train                    "dumb-init --single-…"   44 hours ago        Up 25 hours                             keystone
5173d4191567        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-rabbitmq:train                    "dumb-init --single-…"   44 hours ago        Up 25 hours                             rabbitmq
1 E: S5 n0 F5 B' G% Y8 Deb6bca26f6ce        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-tgtd:train                        "dumb-init --single-…"   44 hours ago        Up 25 hours                             tgtd
79fac2ca1b19        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-iscsid:train                      "dumb-init --single-…"   44 hours ago        Up 25 hours                             iscsid
4a3fcefc7009        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-memcached:train                   "dumb-init --single-…"   44 hours ago        Up 25 hours                             memcached
* M& @4 y0 W5 [' [+ L0773eaf446e4        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-mariadb:train                     "dumb-init -- kolla_…"   44 hours ago        Up 25 hours                             mariadb
/ c0 m* h* K: C  B$ K77f0beaa28e5        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-keepalived:train                  "dumb-init --single-…"   44 hours ago        Up 25 hours                             keepalived
b02b744d2da3        registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-haproxy:train                     "dumb-init --single-…"   44 hours ago        Up 25 hours                             haproxy
) P+ s+ r; O0 R- m- w. ~6 _$ B1
2
3
4
# @0 d7 \/ N5 F: q# x& g5
6
1 K8 q! G. T5 T7
8
9
10
8 `4 H: j" X8 [! o9 J. U) @11
/ s6 M1 v. r2 G. B* E+ L6 ?) i12
13
14
15
16
17
! Q/ A# A# E) Q. D' V18
0 W0 V* ~3 ^* _" l19
* c, t, w2 J5 M* k20
, |. U: E6 d4 q( R) J! x9 }21
22
23
24
25
26
, L0 @2 P8 h' k+ b27
28
+ j' l. b$ z/ N, X! r# A/ T' x29
30
4 {0 {0 K3 n' E  M: x* h- l31
$ e+ a$ E7 p2 `32
33
% t" F; C+ \! R5 o, ?9 o34
1 I3 ^8 S' q/ A+ n. r! X+ v35
" w  n/ I6 t) T; V8 p! Y36
37
4 S) Q, `7 J7 @+ \* n38
39
0 h, w4 k  C5 ?8 g* e% ]5 l40
41
确认没有Exited等异常状态的容器

4 W/ w2 i8 p7 B- G. I5 i! k- U1 U, g: T[root@kolla ~]# docker ps -a  | grep -v Up
1
本次部署运行了39个容器

[root@localhost kolla-env]# docker ps -a | wc -l
/ W) N4 ^1 J' K3 l6 F39
& C* U! p; U- V1
8 D3 G) A7 Q; d2
- ~2 l1 k& |9 Y查看拉取的镜像，发现镜像数量与容器数量是一致的。
6 J2 c0 e/ u6 `' A0 \: N" _# M; s
7 Z: l! T0 `0 {9 f1 e[root@kolla ~]# docker images
* _- i' w; y# A+ M" a+ UREPOSITORY                                                                             TAG                 IMAGE ID            CREATED             SIZE
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-glance-api                  train               aec757c5908a        2 days ago          1.05GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-keystone-ssh                train               2c95619322ed        2 days ago          1.04GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-keystone-fernet             train               918564aa9c01        2 days ago          1.04GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-keystone                    train               8d5f3ca2a73c        2 days ago          1.04GB
, A/ r3 i$ b4 Uregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cinder-api                  train               500910236e85        2 days ago          1.19GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cinder-volume               train               f76ebe1e133d        2 days ago          1.14GB
' ~% G- O5 o9 a; C9 w# \registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cinder-backup               train               19342786a92c        2 days ago          1.13GB
; F1 h. A8 ?( e( r1 _# oregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cinder-scheduler            train               920630f0ea6c        2 days ago          1.11GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-heat-api                    train               517f6a0643ee        2 days ago          1.07GB
$ u( P' s5 f% L9 oregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-heat-api-cfn                train               2d46b91d44ef        2 days ago          1.07GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-heat-engine                 train               ab570c135dbc        2 days ago          1.07GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-horizon                     train               a00ddb359ea5        2 days ago          1.2GB
% {3 @% R, e0 U, c" Pregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-fluentd                     train               6a5b7be2551b        2 days ago          697MB
) i7 x, P$ z& V2 G5 V! v" vregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-cron                        train               0f784cd532e2        2 days ago          408MB
: {- F( l  \8 Fregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-chrony                      train               374dabc62868        2 days ago          408MB
, t0 K, Q5 d- m! ^registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-iscsid                      train               575873f9e4b8        2 days ago          413MB
% R7 x1 @. C4 w2 }registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-haproxy                     train               9cf840548535        2 days ago          433MB
: F& w6 a) u  A* ?  K, l# Dregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-keepalived                  train               b2a20ccd7d6a        2 days ago          414MB
9 ]" Z, {6 G5 Dregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-openstack-base              train               c35001fb182b        3 days ago          920MB
' x; V( @6 \8 s! |registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-compute                train               93be43a73a3e        5 days ago          1.85GB
2 H- m; a- A0 G8 U8 \registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-placement-api               train               26f8c88c3c50        5 days ago          1.05GB
  r* ]" x" Z1 I- d. P/ [registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-api                    train               2a9d3ea95254        5 days ago          1.08GB
: B3 G. l+ [" K! Rregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-novncproxy             train               e6acfbe47b2b        5 days ago          1.05GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-conductor              train               836a9f775263        5 days ago          1.05GB
, o% g3 ^, W6 H; j" |2 Iregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-ssh                    train               f89a813f3902        5 days ago          1.05GB
0 O9 h6 p. r2 U* z$ z5 L, {registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-scheduler              train               8061eaa33d21        5 days ago          1.05GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-openvswitch-vswitchd        train               2b780c8075c6        5 days ago          425MB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-openvswitch-db-server       train               86168147b086        5 days ago          425MB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-rabbitmq                    train               19cd34b4f503        5 days ago          487MB
4 L. p- a3 h6 v! j2 d: h3 Yregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-mariadb                     train               882472a192b5        6 days ago          593MB
4 L, l2 w% r5 i& n: I' t* wregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-dhcp-agent          train               a007b53f0507        7 days ago          1.04GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-metadata-agent      train               8bcff22221bd        7 days ago          1.04GB
0 Y/ G( }+ T! H9 l# ?/ v6 Qregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-nova-libvirt                train               539673da5c25        7 days ago          1.25GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-kolla-toolbox               train               a18a474c65ea        7 days ago          842MB
: t, b( P* @: O& Sregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-tgtd                        train               ad5380187ca9        7 days ago          383MB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-memcached                   train               1fcf18645254        7 days ago          408MB
! n7 [+ ~/ x6 S. A# x0 eregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-server              train               539cfb7c1fd2        8 days ago          1.08GB
, \) w( M9 [9 h, v; P) a! @+ Qregistry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-openvswitch-agent   train               95113c0f5b8c        8 days ago          1.08GB
registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-neutron-l3-agent            train               fbe9385f49ca        8 days ago          1.08GB
, ?& @8 |1 r3 Q* g( F! X1
2
3
4
5
7 f$ k* w9 H0 j  O5 l  f9 B! w6
7
8
$ {4 B  i: [* {( R& y9
$ i- T/ S* ^; x( C. g0 t' l: n10
11
12
7 J' w+ @2 c( \13
3 [  x) c8 y* e3 Q8 N2 _8 S, r14
15
16
17
18
  z7 Q( M  Z- S" Q19
20
21
22
* J( ]; t1 d' @% [/ P+ ?! `23
8 U3 i* W( h1 d0 C; M3 t" T/ I( b5 c24
25
26
27
, k, M2 h+ N) A& q8 B1 w' ?- ?28
# f' x- \- L- F' O4 r9 Y29
30
31
32
33
: @" e0 G& D( `8 j8 O34
! R6 w) C$ L- @# ]35
36
9 V- D, @" j8 b37
/ d& }- g" R0 n7 X) H( _38
39
) e4 |3 x$ t1 U8 m% H40
6 E% \% b/ ^# X8 |9 \/ i! `1 ~; V6 M41
查看cinder使用的卷，自动创建了lvm
- F( ^: H0 i9 S  Q1 S! j( Q: G
2 }& w+ ~( \' m[root@kolla ~]# lsblk | grep cinder
├─cinder--volumes-cinder--volumes--pool_tmeta 253:3    0   20M  0 lvm  
% ]; N$ j3 Z5 y7 p* ^6 E: N│ └─cinder--volumes-cinder--volumes--pool     253:5    0   19G  0 lvm  
└─cinder--volumes-cinder--volumes--pool_tdata 253:4    0   19G  0 lvm  
  └─cinder--volumes-cinder--volumes--pool     253:5    0   19G  0 lvm  

1 L$ g2 \, [8 k[root@kolla ~]# lvs | grep cinder
1 L# z; q  G. `3 p' r1 r; S- a  cinder-volumes-pool cinder-volumes twi-a-tz--  19.00g             0.00   10.55
1
2
3
% d0 m3 T! }% A1 u4
5
" h' P# A: M' S' X* S6
7
( l6 I+ N; J- z. F' v( o8
查看网卡状态
, s4 b, P8 J4 ~6 z
[root@kolla ~]# ip a
0 q2 K$ l! k' ]- I; ~1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    inet 127.0.0.1/8 scope host lo
4 F# x8 k0 y3 x1 \' I2 S, D7 c' y% U       valid_lft forever preferred_lft forever
. k" @. l/ S% r; a5 c: p2 ^    inet6 ::1/128 scope host
, D; A8 H8 w: s       valid_lft forever preferred_lft forever
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    link/ether 00:0c:29:0c:4e:fe brd ff:ff:ff:ff:ff:ff
1 @/ ?& V( `; H" b! P0 w2 e    inet 192.168.93.30/24 brd 192.168.93.255 scope global noprefixroute ens33
7 c% h! U: W+ S6 b* w3 f       valid_lft forever preferred_lft forever
6 I0 n9 q5 @( I: [8 w% x    inet 192.168.93.100/32 scope global ens33
       valid_lft forever preferred_lft forever
7 o* Q- z5 J2 @1 N    inet6 fe80::7a6c:d06c:ee49:4cd5/64 scope link noprefixroute
       valid_lft forever preferred_lft forever
3: ens37: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master ovs-system state UP group default qlen 1000
# S: R/ d9 l. I/ k; W7 q0 k    link/ether 00:0c:29:0c:4e:08 brd ff:ff:ff:ff:ff:ff
9 X, v8 L7 L+ k4 Q. r    inet6 fe80::20c:29ff:fe0c:4e08/64 scope link
. w: C/ d+ _+ @7 i. U4 S$ Q( ~       valid_lft forever preferred_lft forever
2 D! h8 p$ w1 p4: docker0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default
3 \. \1 L; o+ p0 L8 s; ]" T7 \    link/ether 02:42:2a:d9:93:52 brd ff:ff:ff:ff:ff:ff
    inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0
9 p$ |7 s( O; `" N       valid_lft forever preferred_lft forever
9 Q( u8 U2 o3 z( E+ D6 F    inet6 fe80::42:2aff:fed9:9352/64 scope link
; N; x) R& d7 t5 e! [       valid_lft forever preferred_lft forever
6: veth0c46c6a@if5: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue master docker0 state UP group default
    link/ether 1a:ce:d7:61:d0:cc brd ff:ff:ff:ff:ff:ff link-netnsid 0
. o: E7 D, H- }- O    inet6 fe80::18ce:d7ff:fe61:d0cc/64 scope link
7 B) F0 Z/ u. K& w       valid_lft forever preferred_lft forever
; d) L9 \7 B1 h7 m7: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
! l6 Y0 C! z& M: U/ |; \5 G    link/ether de:e5:b7:4d:e8:b8 brd ff:ff:ff:ff:ff:ff
+ A# Y' i* Y8 r! O11: br-int: <BROADCAST,MULTICAST> mtu 1450 qdisc noop state DOWN group default qlen 1000
    link/ether 52:14:05:ba:ce:4c brd ff:ff:ff:ff:ff:ff
13: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
3 v# d& F% a& f- ^9 }/ i    link/ether d2:5b:76:f5:01:49 brd ff:ff:ff:ff:ff:ff
2 M" h/ b+ _# u# a9 k& b5 U4 {14: br-ex: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN group default qlen 1000
  W" |& K, a+ w5 m    link/ether 00:0c:29:0c:4e:08 brd ff:ff:ff:ff:ff:ff
22: qbr2749f64b-1f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP group default qlen 1000
    link/ether 3a:0d:ad:56:9d:9d brd ff:ff:ff:ff:ff:ff
23: qvo2749f64b-1f@qvb2749f64b-1f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master ovs-system state UP group default qlen 1000
, C  g) s* v8 o7 k    link/ether c2:c5:8b:a6:72:8b brd ff:ff:ff:ff:ff:ff
2 w; W/ {8 e4 }9 s& [8 k    inet6 fe80::c0c5:8bff:fea6:728b/64 scope link
       valid_lft forever preferred_lft forever
6 J3 K1 P: P5 B/ p. Z# W24: qvb2749f64b-1f@qvo2749f64b-1f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master qbr2749f64b-1f state UP group default qlen 1000
    link/ether 3a:0d:ad:56:9d:9d brd ff:ff:ff:ff:ff:ff
8 `  Q  P, l/ ~# a" c& K% R$ e    inet6 fe80::380d:adff:fe56:9d9d/64 scope link
       valid_lft forever preferred_lft forever
8 Z3 i  ]/ Y1 [0 M25: tap2749f64b-1f: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc pfifo_fast master qbr2749f64b-1f state UNKNOWN group default qlen 1000
( g+ e6 B1 Y% a* ^3 M    link/ether fe:16:3e:94:b5:71 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::fc16:3eff:fe94:b571/64 scope link
7 _4 f' U1 ?9 M; @* ^8 ]& G       valid_lft forever preferred_lft forever
26: qbr0a14e63d-2e: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UP group default qlen 1000
: I( |+ z& Y0 s  k    link/ether 02:f9:32:c0:f4:b7 brd ff:ff:ff:ff:ff:ff
27: qvo0a14e63d-2e@qvb0a14e63d-2e: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master ovs-system state UP group default qlen 1000
    link/ether 76:86:46:4c:4f:61 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::7486:46ff:fe4c:4f61/64 scope link
. ]+ b: c) ~+ ~% e5 R6 C) u       valid_lft forever preferred_lft forever
$ j: V$ f+ |- F, v& C9 y- Z9 o28: qvb0a14e63d-2e@qvo0a14e63d-2e: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue master qbr0a14e63d-2e state UP group default qlen 1000
    link/ether 02:f9:32:c0:f4:b7 brd ff:ff:ff:ff:ff:ff
    inet6 fe80::f9:32ff:fec0:f4b7/64 scope link
+ |: R' P$ W2 C1 L8 b       valid_lft forever preferred_lft forever
29: tap0a14e63d-2e: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc pfifo_fast master qbr0a14e63d-2e state UNKNOWN group default qlen 1000
    link/ether fe:16:3e:ee:08:6b brd ff:ff:ff:ff:ff:ff
    inet6 fe80::fc16:3eff:feee:86b/64 scope link
       valid_lft forever preferred_lft forever
! J/ X) {  `% n# v4 f! c* T1
2 ^: y7 N& f( |# J9 K- w2
6 x: l+ |4 J: m+ c) x3
4
5
+ A# E; X! n' l. f- O6 `6
7
( A& f9 F& `# w" m' L; V3 A8
9
10
, m) j# \4 S  }' B, {11
0 N% `' l$ f2 W0 _0 Q8 ?# B12
13
, J6 a1 z1 ~) D3 M7 k' Z/ X14
15
: E# X* K0 h" m" {3 k16
17
3 W; h# N" J7 v3 o) C" e; y7 [% N18
' h9 c  n0 H9 @% J19
20
5 H8 O2 d5 N+ O0 B; V21
! T! }" z1 h% I) z0 h* {" z% \) e22
23
24
25
2 F; b4 D6 }) S# _" d26
27
28
9 [2 F% n5 K- ?! C& A29
30
31
32
33
; }( i. Y  P" y# p5 t: o* Z34
7 Z, {6 S" Z, R# n35
36
37
/ u5 t5 M. o, m; x8 f: Q38
( j  L$ x3 H% f+ a0 K. M$ ]2 k+ T. E39
40
# \4 }4 i- m9 |4 g41
42
3 K! s' S4 G5 n1 v43
# \; ]$ v! T, m! e" R44
3 ?$ T% W( x0 k45
46
47
9 n5 D- O0 M0 @" \# A  a; ~48
, S& Y' b7 u1 l/ M& L+ `49
( F& h. P( z  c& J, O50
9 d3 p$ S0 ]0 g3 R0 D  Z  k51
52
* B1 N* |8 O" P- D53
) ]! @" Q3 Y5 Q. D  I54
0 d9 x  B2 o/ b  v; z1 E' S55
" C% O) U; b9 q2 q56
57
& j6 C) d3 Q4 J) t58
59
60
61
62
9 n# Y# f9 `4 o3 W- S  n2 n63
1 ?" m6 w" }" d64
65
另外需要注意，不要在该节点安装libvirt等工具，这些工具安装后可能会启用libvirtd和iscsid.sock等服务，kolla已经在容器中运行了这些服务，这些服务会调用节点上的sock文件，如果节点上也启用这些服务去抢占这些文件，会导致容器异常。默认kolla在预配置时也会主动禁用节点上的相关服务。

安装OpenStack客户端
" y7 n3 \9 R9 G5 C0 Iyum安装openstack客户端

/ S, @) q$ H9 c% m1 Z6 {#启用openstack存储库
5 F0 {1 z1 H- _2 }+ [' p! W- oyum install -y centos-release-openstack-train

#安装openstack客户端
yum install -y python-openstackclient

#启用selinux,安装openstack-selinux软件包以自动管理OpenStack服务的安全策略
yum install -y openstack-selinux
9 u6 F# O; `. J9 h' i& U
' r! A: u0 l/ [; ^; h! Y6 _#报错处理
  x+ v: o* b8 `; \pip uninstall urllib3
yum install -y python2-urllib3
1
2
3
4
5
- _9 R3 R5 j7 A6
2 a7 Z! K( O1 S7
9 e4 Z0 m+ e' ]# ]9 b8
9
10
3 Y1 G$ i. `# }; R( a. o5 c+ T11
: T* N( v7 Q8 K* T$ h12
kolla ansible提供了一个快速创建cirros demo实例的脚本/usr/share/kolla-ansible/init-runonce。

脚本需要cirros镜像，如果网络较慢可以使用浏览器下载放在/opt/cache/files目录下：
3 s5 U, H4 F8 E. b% L4 J
wget https://github.com/cirros-dev/ci ... 4.0-x86_64-disk.img
mkdir -p /opt/cache/files/
mv cirros-0.4.0-x86_64-disk.img /opt/cache/files/
1
2
0 _$ \4 Q# N3 b' U7 |+ A3 e  M3
定义init-runonce示例脚本外部网络配置：

+ g' J5 G0 ~4 X& x) C% T#定义init-runonce示例脚本外部网络配置
2 A6 e1 ?; h( z4 texport EXT_NET_CIDR='192.168.1.0/24'
/ H- ^( K8 x0 x- Yexport EXT_NET_RANGE='start=192.168.1.200,end=192.168.1.250'
export EXT_NET_GATEWAY='192.168.1.1'

#执行脚本，上传镜像到glance，创建内部网络、外部网络、flavor、ssh key，并运行一个实例
source /etc/kolla/admin-openrc.sh
/usr/share/kolla-ansible/init-runonce
1
2
3
4
5
6
! t! M9 W1 U1 s; x" S4 r1 b( p7
8
参数说明：

EXT_NET_CIDR 指定外部网络，由于使用桥接模式，直接桥接到了电脑的无线网卡，所以这里网络就是无线网卡的网段。
EXT_NET_RANGE 指定从外部网络取出一个地址范围，作为外部网络的地址池
EXT_NET_GATEWAY 外部网络网关，这里与wifi网络使用的网关一致
根据最终提示运行实例

# R3 k1 J6 H8 I2 c9 Kopenstack server create \
8 K5 {1 F. G! p; ?" o) t3 S+ F    --image cirros \
0 ~+ G$ J+ q* R    --flavor m1.tiny \
    --key-name mykey \
    --network demo-net \
; \, X# M( s2 }+ D& W: u    demo1
1
5 U7 r* t. Z3 r7 ~2
3
; m) X; V4 u# |) X& s: o* [4
5
6
$ \% H! f+ \; S) \" w9 o& `' ^也可以使用docker容器作为客户端
4 a, {4 Q8 |  S7 i, c
* z  {9 R6 n2 Edocker run -d --name client \
7 K2 u' E% b+ I( x1 A  --restart always \
, K! \2 S% y  A4 g  -v /etc/kolla/admin-openrc.sh:/admin-openrc.sh:ro \
  -v /usr/share/kolla-ansible/init-runonce:/init-runonce:rw \
7 N8 ~# i* m5 P8 t$ m3 w8 p) j  registry.cn-shenzhen.aliyuncs.com/kollaimage/centos-binary-openstack-base:train sleep infinity
( h+ g8 [& e0 B0 ]. S
docker exec -it client bash
source /admin-openrc.sh
openstack service list
1
5 t% ^1 U$ j* _2
8 L) _2 k& P. R) j3 a  O3
' M5 V& g% F; ]7 ]  H4 N0 ^4 T4
5
6
' V' G; f7 K: y' `6 O- T7
8
9
访问openstack horizon
0 }/ Q, w# J( h: u  P访问openstack horizon需要使用vip地址，节点上可以看到由keepalived容器生成的vip

# B" L6 m5 Q- J/ Z& f[root@kolla ~]# ip a |grep ens33
2: ens33: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000
    inet 192.168.93.30/24 brd 192.168.93.255 scope global ens33
    inet 192.168.93.100/32 scope global ens33
1
2
* O( W; F& [8 g9 G. N* ]3
" }2 g# J9 i( ^) ^, e& s' k0 a4
0 r2 c$ m( N) D; f浏览器直接访问该地址即可登录到horizon

! {5 c" m' h$ K3 P' k2 Zhttp://192.168.93.100

我这里的用户名密码为admin/kolla，信息可以从admin-openrc.sh中获取

[root@kolla ~]# cat /etc/kolla/admin-openrc.sh
# Clear any old environment that may conflict.
1 W1 M; W" N  l: j6 X" f) B1 U# O2 Ffor key in $( set | awk '{FS="="}  /^OS_/ {print $1}' ); do unset $key ; done
export OS_PROJECT_DOMAIN_NAME=Default
, g! Z% Y' R; Z* @' ^  \. d7 T6 ]export OS_USER_DOMAIN_NAME=Default
& W# s5 @$ p8 lexport OS_PROJECT_NAME=admin
export OS_TENANT_NAME=admin
9 v5 Q2 j& {8 _: v0 @export OS_USERNAME=admin
export OS_PASSWORD=kolla
export OS_AUTH_URL=http://192.168.93.100:35357/v3
1 A+ u$ L/ Z* y, Hexport OS_INTERFACE=internal
; y& C" n7 y& I6 r; B5 j7 Bexport OS_ENDPOINT_TYPE=internalURL
' f- c- D2 `  r/ a3 d* E  y+ Dexport OS_IDENTITY_API_VERSION=3
" i6 `/ i/ X' p; f' s4 b3 K3 k: Xexport OS_REGION_NAME=RegionOne
3 \( c5 |& s8 c0 N# Gexport OS_AUTH_PLUGIN=password
3 k% D) T0 k. h# U1
2
3
4
5
0 l1 y. @* |* z2 X* x) [' p6 E6
  z3 h4 q$ F( J* h) l/ o% \. c7
5 L( ^: }" Y. P/ A' C, {: U8
7 {3 g# c, s, L! V4 g- ~9
) L! ]2 r1 s* j2 q8 p9 p' c10
1 @2 U2 f2 j% ^" x8 D8 |% a7 d8 M11
$ A4 ^' Y" s- a4 W9 |12
+ z) j: j# E3 O# K: G; d13
14
. d, \; o! v) I' _0 z& U; b15
默认登录后如下

( r; c% S$ Z8 O$ n  w
) B) [4 U. w; R: y在horizion查看创建的网络和实例
# Z( p5 s* q7 m* |
$ `$ L7 ~* ~9 b; M+ [: ~登录实例控制台，验证实例与外网的连通性，cirros用户密码在初次登录时有提示：

$ A4 u" u- C+ a4 d5 Y为实例绑定浮动IP地址，方便从外部ssh远程连接到实例
6 L) }! B, o( P$ x" J
点击+随机分配一个浮动IP


在kolla节点上ssh连接实例浮动IP，cirros镜像默认用户密码为cirros/gocubsgo，该镜像信息官网有介绍：
6 P- K2 V% o9 Q- f3 k0 @/ N) ehttps://docs.openstack.org/image ... es.html#cirros-test

[root@kolla ~]# ssh cirros@192.168.1.248
cirros@192.168.1.248's password:
+ T6 p& _, p5 \3 _3 ~$
2 }0 a% Y/ f* C' q$
" j  m; F, F; q1
1 e) Y$ Z* D3 a9 F2
, @) h+ e5 v% ^2 x. `3
4
或者在集群外部使用SecureCRT连接到实例。
( F% t4 e4 |& E* A
3 l$ d  V1 d% L: M, L
; a& a  W# Z' e运行CentOS实例
centos官方维护有相关cloud image，如果不需要进行定制，可以直接下载来运行实例。

参考：https://docs.openstack.org/image-guide/obtain-images.html
, ]  w4 p' y1 S; {( s
CentOS官方维护的镜像下载地址：
- o0 N, L& w: d1 r9 J, @http://cloud.centos.org/centos/7/images/
% b( e6 a; u9 e: S0 z, O
也可以使用命令直接下载镜像，但是下载可能较慢，建议下载好在进行上传。以centos7.8为例：

1 i2 z2 T: b1 }( pwget http://cloud.centos.org/centos/7 ... icCloud-2003.qcow2c
0 Q8 }% F) F2 X# n1
: c6 M& e0 b6 N4 C' l下载完成后上传镜像到openstack，直接在horizon上传即可。也可以使用命令上传。

注意：默认该镜像运行的实例只能使用ssh key以centos用户身份登录，如果需要使用root远程ssh连接到实例需要在上传前为镜像配置root免密并开启ssh访问。
( Y6 a' L, y, T7 F" a5 f0 a: G/ v# u
参考：https://blog.csdn.net/networken/article/details/106713658
7 d7 k$ t! T/ K6 e8 v; k
另外我们的命令客户端在容器中，所有这里有些不方便，首先要将镜像复制到容器中，然后使用openstack命令上传。
6 x" W. Q$ V. S. S3 U9 z/ O$ ^  f
* k" w8 Q, h6 p3 n6 R! u这里复制到client容器的根目录下。

, h6 Q/ y* X8 H5 l[root@kolla ~]# docker cp CentOS-7-x86_64-GenericCloud-2003.qcow2c client:/
4 b8 w- M! N. K8 Y+ a& t
/ |: g7 `( }9 }% X" }  `[root@kolla ~]# docker exec -it client bash
()[root@f11a103c5ade /]#
0 p; {1 m: m* N()[root@f11a103c5ade /]# source /admin-openrc.sh

1 C, F1 U# S9 M8 G()[root@f11a103c5ade /]# ls | grep CentOS
; \$ Y: l* Z; ^CentOS-7-x86_64-GenericCloud-2003.qcow2c
5 G) m+ O! m" g8 \  j) C+ |1
6 y6 S* b: E" Q7 i1 X8 z# f2
2 x6 \( w* I1 q) s) S1 t" A& q  n& C3
- w8 w' Z4 b9 m" s6 V4 z! n  ]& E  D4
5
8 F7 J' R8 L) Z( @6
7
2 n( n+ {0 V: p: U+ g# x  w7 m4 `8
执行以下openstack命令上传镜像
" v6 `0 _: g; p' g" a' N
7 J. k1 r" B. J' b( sopenstack image create "CentOS78-image" \
  --file CentOS-7-x86_64-GenericCloud-2003.qcow2c \
2 T  _% h: t8 n6 S  --disk-format qcow2 --container-format bare \
0 ?; ?! a1 ]6 B6 B; m3 a. n  o  --public
1
& |% U5 F$ m8 ]( P2
8 p: Y+ z( Q( p9 |& t9 p) `8 M2 w* C3
4
" o, w) `0 d% X/ z; p; W命令执行结果
+ N1 t# X3 }, {5 O1 g! |
()[root@f11a103c5ade ~]# openstack image create "CentOS78-image" \
>   --file CentOS-7-x86_64-GenericCloud-2003.qcow2c \
>   --disk-format qcow2 --container-format bare \
>   --public
9 v* P9 G/ V  V+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
! Z9 f9 A7 _" k7 e8 k( a$ x* A| Field            | Value                                                                                                                                                                                      |
% |2 u* i! Z/ F9 n$ z4 l. B0 g' w9 h+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| checksum         | 362d1e07d42bcbc61b839fb4269b173b                                                                                                                                                           |
' F2 X2 m9 n- L$ y' x  p* x; N| container_format | bare                                                                                                                                                                                       |
| created_at       | 2020-06-13T03:23:16Z                                                                                                                                                                       |
| disk_format      | qcow2                                                                                                                                                                                      |
; |9 W/ H5 @) c% a| file             | /v2/images/2d95d8a0-6fba-4ca8-9dde-8696eb7ebdbf/file                                                                                                                                       |
| id               | 2d95d8a0-6fba-4ca8-9dde-8696eb7ebdbf                                                                                                                                                       |
| min_disk         | 0                                                                                                                                                                                          |
| min_ram          | 0                                                                                                                                                                                          |
. f/ |* P) r7 r4 o- I6 s+ C| name             | CentOS78-image                                                                                                                                                                           |
| owner            | 65850af146fe478ab13f59f7edf838ec                                                                                                                                                           |
! m$ r! t- s- k# D+ H5 x  U* l| properties       | os_hash_algo='sha512', os_hash_value='aefa398f69e1746b420c44e5650f0dcf15926fb6f8c75f746bb2f48a04f7b140fdc745090f3d06b68fa0fe711ded7d822150765414e2a23f351efd2e181eb7b9', os_hidden='False' |
. ^' ?; x+ |: A5 q$ h  g8 S5 p3 R| protected        | False                                                                                                                                                                                      |
| schema           | /v2/schemas/image                                                                                                                                                                          |
5 U/ W& S+ z2 ]0 g: t| size             | 385941504                                                                                                                                                                                  |
| status           | active                                                                                                                                                                                     |
| tags             |                                                                                                                                                                                            |
1 K& s% \7 D4 a' \4 F| updated_at       | 2020-06-13T03:23:20Z                                                                                                                                                                       |
| virtual_size     | None                                                                                                                                                                                       |
| visibility       | public                                                                                                                                                                                     |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
" t( B; v7 I- z4 S9 ]1
2
  Q; s$ n: |# S" D9 c- R1 Q% k3
4
, X, e% O/ p& |5
1 F' I( X7 T% U6 z  Z6
! X6 ?3 F3 a/ B2 y" c7
9 N0 j  d9 ?  Z. o  f  u8
9
10
11
% w) [) U  Z2 P' }/ h( i, J12
5 x& j3 V  G. y9 M( I+ t4 [13
14
15
. m: J( O3 m; m+ }& l16
17
18
+ q" m6 A& N4 K$ H" i19
$ ?' L  ?6 s% F) ]5 }. Z, a20
21
6 B0 L* q4 Q1 S22
23
24
+ p! s4 _& L! f2 i# l- g; _9 a25
/ f! K+ X7 U+ A: K6 V- j0 g26
27
* B8 l, v- [' c/ R/ y) ~在horizon中使用该镜像创建实例，其他信息直接使用之前demo创建的资源即可。创建完成后为实例绑定浮动IP。

如果实例创建失败可以查看相关组件报错日志
1 F  {: D9 x$ w$ J
[root@kolla ~]# tail -100f /var/log/kolla/nova/nova-compute.log
1
未配置root密码连接实例
如果没有提前定制镜像修改root密码，只能使用centos用户及sshkey登录，由于是在容器中运行的demo示例，ssh私钥也保存在容器的默认目录下，在容器中连接实例浮动IP测试

/ u' ~' e  O3 ~9 L& m[root@kolla ~]# docker exec -it client bash
* U9 z4 U; K5 g! G+ ]()[root@f11a103c5ade /]#  ssh -i /root/.ssh/id_rsa centos@192.168.1.105
. Q/ I. X. n  B6 }Last login: Sat Jun 13 05:47:49 2020 from 192.168.1.100
  y9 T% _8 o8 L4 f[centos@centos78 ~]$
[centos@centos78 ~]$
1
4 z* L  V+ m8 R0 N3 w' s2
3
# ^7 i' b( c1 S6 D, ?( k0 Z4
$ v, Z* P6 d/ ^5
或者取出该id_rsa私钥，使用SecureCRT登录：
' |* c- S9 P) Y' K6 ^
3 Y# M! H" T: X0 I/ _3 s: o配置root密码连接实例

1 L- s$ ]0 @1 J! L+ t7 g6 }如果提前修改了镜像配置root密码，直接使用root用户密码登录实例即可，

[root@kolla ~]# ssh root@192.168.1.105
- o" e' _: v" y% @+ X  troot@192.168.1.105's password:
Last login: Sat Jun 13 05:51:53 2020 from 192.168.1.100
[root@centos78 ~]#
[root@centos78 ~]# ip a
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
" r6 r" l% R9 e+ j! M( C  C6 z9 ~    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
- J% n, q7 S- s    inet 127.0.0.1/8 scope host lo
       valid_lft forever preferred_lft forever
    inet6 ::1/128 scope host
+ p8 ^% |$ f: ]6 U7 h       valid_lft forever preferred_lft forever
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc pfifo_fast state UP group default qlen 1000
    link/ether fa:16:3e:94:b5:71 brd ff:ff:ff:ff:ff:ff
2 }: ?5 e: s0 J2 N1 R$ x8 a    inet 10.0.0.193/24 brd 10.0.0.255 scope global dynamic eth0
% N! T! u! P! M: d       valid_lft 84215sec preferred_lft 84215sec
    inet6 fe80::f816:3eff:fe94:b571/64 scope link
  a7 Y) h8 T" p. J. p+ I0 G( {       valid_lft forever preferred_lft forever
[root@centos78 ~]#
[root@centos78 ~]# cat /etc/redhat-release
+ D" o/ Y% D2 cCentOS Linux release 7.8.2003 (Core)
1
2
3
( N/ u, i' E0 K1 e& }8 ~1 c4
5
6
# v( f4 t$ V0 I7
8
2 V  B) z5 R" c' D3 C2 l9
10
2 w1 y& T+ e1 b( Y% T$ {, z11
9 f5 b/ T/ o4 Y& j+ g12
" l: L- c( r, f1 t1 O) G3 x0 V0 [13
14
15
16
17
& L% X( B; R; E  [  D8 X5 e9 }18
8 b9 i& X5 _% ~: w19
+ l* n+ @( u( e( M' e+ x% b' A0 ?5 l20
( x6 d  o! i9 M+ r" O& P运行Ubuntu实例
* S7 t" f% u" F! z+ J" z5 h# N下载镜像

wget https://cloud-images.ubuntu.com/ ... -cloudimg-amd64.img
1
上传镜像
8 K- a  J/ }! L# e: S7 B
openstack image create "Ubuntu1804" \
0 o# _; r6 Y2 i+ Y7 A8 m  --file bionic-server-cloudimg-amd64.img \
0 V9 Y# q5 u! N6 Z; V, a8 W7 O  --disk-format qcow2 --container-format bare \
- r$ @0 l0 t4 L+ N9 e  --public
1
' p, J- H/ ^& ?) E, ~2
3
4
4 R3 K8 X6 b; L' y, J/ G按照正常流程创建实例即可，ubuntu镜像默认用户为ubuntu，首次登陆使用sshkey方式，然后执行以下命令即可直接切换到root用户（centos无法使用该方式）
1 f' Q& w1 Q5 I8 s& X- l  h9 Q
5 X; i9 q" _! C" R- L$ sudo -i
" i- ~: O( b* E! H3 U9 q1
) G" J' `4 Z8 B9 ^调整集群配置
集群部署完成后需要开启新的组件或者扩容，可以修改/etc/kolla/global.yml调整参数。
或者在/etc/kolla/config目录下创建自定义配置文件，例如
/ f0 I* D- j1 Q) \
# mkdir -p /etc/kolla/config/nova

# vim /etc/kolla/config/nova/nova.conf
3 i+ J, g8 m7 p- g- C[DEFAULT]
2 L# u2 l( i- e* J3 N% p( rblock_device_allocate_retries = 300
- N6 i& l; p* ?- c# _block_device_allocate_retries_interval = 3
1
2
2 A; k, W4 O* y3
4
& A4 \- c0 f: r; o; J8 A1 R% W' M5
6
/ {. q$ S! e& r& N! y2 D重新配置openstack，kolla会自动重建配置变动的容器组件。
+ g8 U" ^, O* Q* c
kolla-ansible -i all-in-one reconfigure -t nova
6 V6 m+ p# o* D1 B1
) q8 K6 W1 c9 w" h  l- p% qkolla配置和日志文件
. C; {# q+ A: m/ ~各个组件配置文件目录： /etc/kolla/
各个组件日志文件目录：/var/log/kolla/
6 f( q$ Q3 X, E- ~+ @' V* L清理kolla ansilbe集群
kolla-ansible destroy --include-images --yes-i-really-really-mean-it
7 u  [1 I2 B9 H
$ l) w( B. a* O5 E4 x2 \' _/ T#或者
0 N4 ?" A8 l+ Y' k* |; e[root@kolla ~]# cd /usr/share/kolla-ansible/tools/
. Q2 _7 _7 W' Q8 H! [' X' v[root@all tools]# ./cleanup-containers
0 r" a) e1 P& d$ d: o7 P  M[root@all tools]# ./cleanup-host

#重置cinder卷，谨慎操作
# R& y8 d- ~3 s$ l5 i* Dvgremove cinder-volume
/ f3 T4 S4 `: N& |# A% [4 Z" D————————————————
; c( ]2 t$ @5 t- J7 @, F: F
: e! S$ O- [7 I8 }8 ^& H