openstack ussuri 安装脚本

admin

#!/bin/bash $ q1 w5 ~+ p1 g #Centos8最小化部署安装OpenStack Ussuri ) L* L% X0 \7 k: b7 `8 v4 [ #共两台主机，分别是一台控制节点，一台计算节点 #1、控制节点内存4096M。双网卡，分别为eth0:10.0.0.11，eth1:10.0.0.12 0 L7 L$ v- i* B5 `1 D2 W #2、计算节点内存4096M。双网卡，分别为eth0:10.0.0.31，eth1:10.0.0.32 7 V3 K3 ^! a$ H3 L, G+ V #设置阿里云yum源 9 b( z7 J. Z2 ~ curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo rm -f /etc/yum.repos.d/CentOS-AppStream.repo /etc/yum.repos.d/CentOS-PowerTools.repo /etc/yum.repos.d/CentOS-centosplus.repo /etc/yum.repos.d/CentOS-Extras.repo && rm -rf /var/cache/yum && yum makecache && yum -y update && yum -y autoremove 1 c/ n0 n( v) p( R 1 G# ~! y' }% m! s. s2 F$ Q# A2 H #关闭防火墙 systemctl stop firewalld && systemctl disable firewalld #关闭SELinux $ ^6 G* Y1 e4 Z9 _/ d setenforce 0 1 e3 j$ `- K5 H; Y8 M sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config / k/ Z) T9 u  x- s/ I #关闭swap分区 swapoff -a sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab #设置内核 , T9 _! e" ]7 p4 z1 J modprobe bridge modprobe br_netfilter cat > /etc/sysconfig/modules/neutron.modules <<EOF ; B$ Q0 p* h+ H; `* w+ c4 Z; z #!/bin/bash modprobe -- bridge $ p* r+ `8 |: X" j) W. }/ ~3 `/ v modprobe -- br_netfilter 3 T/ z( s- m5 b' L; S EOF 5 @2 M& i9 m+ H1 h! D" U chmod 755 /etc/sysconfig/modules/neutron.modules && bash /etc/sysconfig/modules/neutron.modules + z+ l/ [& {' W7 ^# D4 d echo "vm.max_map_count=262144" >> /etc/sysctl.conf echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf echo "net.bridge.bridge-nf-call-iptables=1" >> /etc/sysctl.conf echo "net.bridge.bridge-nf-call-ip6tables=1" >> /etc/sysctl.conf 8 E9 N% N1 V5 U, y* D sysctl -p #设置时间同步 , I, M$ s, b6 y/ x( `" q, h' O3 w yum install -y chrony && yum -y autoremove , O  D' E& B1 n, h sed -i '/^pool/d' /etc/chrony.conf ' c! C: j' \" c" w8 q sed -i '/^server/d' /etc/chrony.conf 9 W7 X) Q" r9 t8 Z3 l2 O echo "pool ntp.aliyun.com iburst" >> /etc/chrony.conf ) _' \" P: g+ u* A- T systemctl start chronyd.service && systemctl enable chronyd.service 8 t' Z! Z- ]2 F# [% a #控制节点 设置hostname hostnamectl set-hostname controller 4 w- _" h- X% y! P1 G #计算节点 设置hostname 9 M) @' r9 @, z- F( V/ t$ r+ S) N hostnamectl set-hostname compute1 # `- n/ e, O* z' \0 S/ ~ #添加host : b# b  |' I' {7 i! O* W& ^ echo "10.0.0.11 controller" >> /etc/hosts echo "10.0.0.31 compute1" >> /etc/hosts 8 Z: b5 m2 Y6 [9 V; l #安装基础组件 yum install -y centos-release-openstack-ussuri : T. z+ u6 p; q/ `; h8 k" ^ yum config-manager --set-enabled PowerTools yum upgrade -y yum install -y python3-openstackclient . L; |9 h% M" H 9 N6 W/ I% c& g #控制节点 安装Mariadb yum install -y mariadb mariadb-server python2-PyMySQL / R- h0 C9 W9 B0 K0 r9 w( ~ tee /etc/my.cnf.d/openstack.cnf <<-'EOF' [mysqld] bind-address = 10.0.0.11 default-storage-engine = innodb innodb_file_per_table = on ; J3 w! {4 j$ D1 H5 m; U max_connections = 4096 collation-server = utf8_general_ci character-set-server = utf8 " z0 ]1 l+ E' ^5 u, ]! ?2 y EOF systemctl enable mariadb.service && systemctl start mariadb.service echo -e "\nY\n123456\n123456\nY\nn\nY\nY\n" | mysql_secure_installation # i$ Q. T: K- C  X* q" `2 O #控制节点 安装RabbitMQ yum install -y rabbitmq-server ' g# U: N+ y9 V  E3 Z3 U systemctl enable rabbitmq-server.service && systemctl start rabbitmq-server.service 5 u# e+ P: s3 o; p) D rabbitmqctl add_user openstack 123456 ( j) C1 {) d+ ?" [5 _" W rabbitmqctl set_permissions openstack ".*" ".*" ".*" , T3 p; b; ^( Z6 ^; X7 c #控制节点 安装Memcached + o" b( {: R9 G* h6 v yum install -y memcached python3-memcached ; H2 w7 z/ y2 a4 t sed -i "s/-l 127.0.0.1,::1/-l 127.0.0.1,::1,controller/g" /etc/sysconfig/memcached $ M% S! t! A: l: G$ v systemctl enable memcached.service && systemctl start memcached.service 6 `; ?% J$ R& }: _4 @2 `/ _ #控制节点 安装Etcd yum install -y etcd % {7 D7 C$ ^( w/ k# d3 {- z rm -f /etc/etcd/etcd.conf tee /etc/etcd/etcd.conf <<-'EOF' #[Member] ETCD_DATA_DIR="/var/lib/etcd/default.etcd" ETCD_LISTEN_PEER_URLS=" http://10.0.0.11:2380 " ETCD_LISTEN_CLIENT_URLS=" http://10.0.0.11:2379 " ETCD_NAME="controller" 6 c: }" E+ `! s1 T7 { #[Clustering] ETCD_INITIAL_ADVERTISE_PEER_URLS=" http://10.0.0.11:2380 " 7 p% F& b0 Q0 s* n9 ^ ETCD_ADVERTISE_CLIENT_URLS=" http://10.0.0.11:2379 " ETCD_INITIAL_CLUSTER="controller= http://10.0.0.11:2380 " ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01" + E3 Z: o/ s! e' P6 L ETCD_INITIAL_CLUSTER_STATE="new" EOF systemctl enable etcd && systemctl start etcd 3 H0 B" b9 @# F4 |+ Q9 u #控制节点 安装Identity service mysql -uroot -p123456 -e "CREATE DATABASE keystone" ; L  h& X" |7 A mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '123456'" / d% i! e+ E" P mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456'" 1 l+ A  m7 a4 w yum install -y openstack-keystone httpd python3-mod_wsgi % i4 [) f4 _( S/ m/ r& n* @% n$ E+ X sed -i "556c connection = mysql+ pymysql://keystone:123456@controller/keystone " /etc/keystone/keystone.conf sed -i "2418c provider = fernet" /etc/keystone/keystone.conf 1 {( s  l* ~8 } su -s /bin/sh -c "keystone-manage db_sync" keystone keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone keystone-manage credential_setup --keystone-user keystone --keystone-group keystone - Z8 {- v# h# E) l, b6 ]4 d3 D keystone-manage bootstrap --bootstrap-password 123456 \ --bootstrap-admin-url http://controller:5000/v3/ \ ; j' v/ t" _3 \2 E2 N3 C3 I- Q, d. c0 S --bootstrap-internal-url http://controller:5000/v3/ \ 8 I5 {& P- L* s- z+ e; ~' e --bootstrap-public-url http://controller:5000/v3/ \ --bootstrap-region-id RegionOne 1 z8 i3 r: W1 d8 Z# `% _ echo "ServerName controller" >> /etc/httpd/conf/httpd.conf " C4 x  z( \9 ~, P ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/ systemctl enable httpd.service && systemctl start httpd.service 1 e: J# r: x7 Z1 [ echo "export OS_USERNAME=admin" >> /etc/profile echo "export OS_PASSWORD=123456" >> /etc/profile 4 m2 G- A  ]: Z( m/ c echo "export OS_PROJECT_NAME=admin" >> /etc/profile echo "export OS_USER_DOMAIN_NAME=Default" >> /etc/profile echo "export OS_PROJECT_DOMAIN_NAME=Default" >> /etc/profile & h8 }* i/ H1 Q9 { echo "export OS_AUTH_URL= http://controller:5000/v3 " >> /etc/profile echo "export OS_IDENTITY_API_VERSION=3" >> /etc/profile 4 _) _& p: N* C, p) L$ L source /etc/profile ; s; g3 T/ [& P% q( \. b openstack project create --domain default --description "Service Project" service - S" J# m- y  }$ p7 K% f# ` #控制节点 安装Image service % _" l8 u; u4 H4 V mysql -uroot -p123456 -e "CREATE DATABASE glance" 3 Q2 m; v9 \- o  l! A; D0 ^ mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '123456'" : I, F# w* ^, e' y. u9 W mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '123456'" openstack user create --domain default --password 123456 glance 4 k: B, p' w* F% }6 B8 `! |) ^' L5 B% A openstack role add --project service --user glance admin openstack service create --name glance --description "OpenStack Image" image . X5 v( }2 g, k openstack endpoint create --region RegionOne image public http://controller:9292 8 e$ G+ p5 G! N' R7 A openstack endpoint create --region RegionOne image internal http://controller:9292 $ l- r- S' f: J& O) `8 n4 j openstack endpoint create --region RegionOne image admin http://controller:9292 $ g* t3 c1 C7 D% {* l yum install -y openstack-glance sed -i "2062c connection = mysql+ pymysql://glance:123456@controller/glance " /etc/glance/glance-api.conf 1 D6 r: u5 [# o" g. b6 M+ j) W sed -i "5034c www_authenticate_uri = http://controller:5000 " /etc/glance/glance-api.conf sed -i "5035c auth_url = http://controller:5000 " /etc/glance/glance-api.conf sed -i "5036c memcached_servers = controller:11211" /etc/glance/glance-api.conf 9 h% u3 x$ `- O, B sed -i "5037c auth_type = password" /etc/glance/glance-api.conf $ T& M- P& q/ W( Z0 ?5 \ sed -i "5038c project_domain_name = Default" /etc/glance/glance-api.conf sed -i "5039c user_domain_name = Default" /etc/glance/glance-api.conf sed -i "5040c project_name = service" /etc/glance/glance-api.conf sed -i "5041c username = glance" /etc/glance/glance-api.conf sed -i "5042c password = 123456" /etc/glance/glance-api.conf 8 W+ {% S0 s5 I sed -i "5678c flavor = keystone" /etc/glance/glance-api.conf 1 A0 I4 Z5 j+ F& h sed -i "3413c stores = file,http" /etc/glance/glance-api.conf ; i& i2 _: p. }4 |/ S sed -i "3414c default_store = file" /etc/glance/glance-api.conf sed -i "3415c filesystem_store_datadir = /var/lib/glance/images/" /etc/glance/glance-api.conf su -s /bin/sh -c "glance-manage db_sync" glance systemctl enable openstack-glance-api.service && systemctl start openstack-glance-api.service * c7 u- q* ~  }/ l* O: O , q' R" Z+ y4 t( p& k #控制节点 安装Placement service mysql -uroot -p123456 -e "CREATE DATABASE placement" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '123456'" " u0 l, V$ h1 p, j! g3 x openstack user create --domain default --password 123456 placement openstack role add --project service --user placement admin   m% }$ V/ V$ r8 i7 ?. X; T openstack service create --name placement --description "Placement API" placement openstack endpoint create --region RegionOne placement public http://controller:8778 openstack endpoint create --region RegionOne placement internal http://controller:8778 3 H& a2 J# D' J! g openstack endpoint create --region RegionOne placement admin http://controller:8778   x) K% z, _- W2 w" F5 `! G yum install -y openstack-placement-api # _7 z5 l  K6 J/ H sed -i "507c connection = mysql+ pymysql://placement:123456@controller/placement " /etc/placement/placement.conf * q' n& Z- D) } sed -i "192c auth_strategy = keystone" /etc/placement/placement.conf 1 H9 Z/ ^! R8 @- X2 q9 k6 w! q9 F sed -i "241c auth_url = http://controller:5000/v3 " /etc/placement/placement.conf " i  @4 k- b4 w( D' x0 S  |4 R1 { sed -i "242c memcached_servers = controller:11211" /etc/placement/placement.conf ( f% H- P* ?: w0 L0 H0 P# q& T% R sed -i "243c auth_type = password" /etc/placement/placement.conf ) B: e. ^7 `. l; A sed -i "244c project_domain_name = Default" /etc/placement/placement.conf sed -i "245c user_domain_name = Default" /etc/placement/placement.conf % L5 A8 R8 C4 `! @: b sed -i "246c project_name = service" /etc/placement/placement.conf 7 ]3 J5 v& `' b* }# w sed -i "247c username = placement" /etc/placement/placement.conf + X, K8 q+ i7 O sed -i "248c password = 123456" /etc/placement/placement.conf su -s /bin/sh -c "placement-manage db sync" placement systemctl restart httpd 4 ^  Z+ H: K5 b. l2 P ; k  k: y% \# d" g/ y #控制节点 安装Compute service 5 x% v& Z: r1 p( } mysql -uroot -p123456 -e "CREATE DATABASE nova_api" # C& ]# Y. Q! d( Z mysql -uroot -p123456 -e "CREATE DATABASE nova" , T9 g/ N6 y- m& C5 M1 x; q6 ]- h mysql -uroot -p123456 -e "CREATE DATABASE nova_cell0" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" 5 W/ A. h& a8 Y  V- i* t mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" ; l0 }1 e7 W5 G7 R, Q& W mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '123456'" : v' [  \8 e; B openstack user create --domain default --password 123456 nova . A3 L* D9 }; P* p8 h4 Y' B! R: g' M openstack role add --project service --user nova admin 9 K3 q1 k* u9 w5 m5 h1 w openstack service create --name nova --description "OpenStack Compute" compute openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1 9 f' @7 _( n* Z9 Q6 o( t openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1 openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1 6 J( A: |! ~) Y0 G- d yum install -y openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler * I) A1 C: Z! S" L) k' M5 U' G9 @8 x sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf " x& X5 Z* y7 R/ _ sed -i "3c transport_url = rabbit://openstack:123456@controller:5672/ " /etc/nova/nova.conf sed -i "4c my_ip = 10.0.0.11" /etc/nova/nova.conf 9 E& t1 w7 @- P) \) x% I4 c sed -i "1079c connection = mysql+ pymysql://nova:123456@controller/nova_api " /etc/nova/nova.conf   E, D, ^! J" z- Y6 g sed -i "1622c connection = mysql+ pymysql://nova:123456@controller/nova " /etc/nova/nova.conf sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf sed -i "2564c auth_type = password" /etc/nova/nova.conf sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf sed -i "2567c project_name = service" /etc/nova/nova.conf & i5 \5 e! D& Y8 `; F sed -i "2568c username = nova" /etc/nova/nova.conf sed -i "2569c password = 123456" /etc/nova/nova.conf sed -i "5171c enabled = true" /etc/nova/nova.conf sed -i '5172c server_listen = $my_ip' /etc/nova/nova.conf : R6 E. _. q. y# V8 p sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf ' u$ X* c7 d! T" P3 i" o# H, r sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf sed -i "4095c project_name = service" /etc/nova/nova.conf sed -i "4096c auth_type = password" /etc/nova/nova.conf sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf # f. E  Q( E6 Y+ {' S sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf / m( ^! l( {7 O. h$ p$ U% N sed -i "4099c username = placement" /etc/nova/nova.conf sed -i "4100c password = 123456" /etc/nova/nova.conf sed -i "4509c discover_hosts_in_cells_interval = 300" /etc/nova/nova.conf   U. [+ g! Z7 ~ su -s /bin/sh -c "nova-manage api_db sync" nova su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova 9 ]- b9 V7 f2 Q* K5 \ su -s /bin/sh -c "nova-manage db sync" nova ( n- S+ y6 g9 q systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service && systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service 6 `$ U: A" P/ J# L1 C2 @( y% n #计算节点 安装Compute service yum install -y openstack-nova-compute sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf sed -i "3c transport_url = rabbit://openstack:123456@controller " /etc/nova/nova.conf sed -i "4c my_ip = 10.0.0.31" /etc/nova/nova.conf sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf ; N. [0 ]1 h" o sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf sed -i "2564c auth_type = password" /etc/nova/nova.conf $ g2 k/ Q2 D& Z' S sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf / W( y' m/ Z% |  b& d5 Q+ y4 T sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf 7 |3 s3 K3 O' {# z( T sed -i "2567c project_name = service" /etc/nova/nova.conf 2 \/ Q5 i: Q) a1 f3 @& | sed -i "2568c username = nova" /etc/nova/nova.conf sed -i "2569c password = 123456" /etc/nova/nova.conf sed -i "5171c enabled = true" /etc/nova/nova.conf sed -i "5172c server_listen = 0.0.0.0" /etc/nova/nova.conf , {: q4 \% R0 F; F6 y" Y* { sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf   {0 A, N2 w4 h: `& M3 ~ sed -i "5174c novncproxy_base_url = http://controller:6080/vnc_auto.html " /etc/nova/nova.conf / `8 q$ R7 \% F+ v. n0 A sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf & v, Z2 t/ M9 [* d; ~ sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf 1 |. t. q  }; g% ^ sed -i "4095c project_name = service" /etc/nova/nova.conf sed -i "4096c auth_type = password" /etc/nova/nova.conf 8 V0 e; x: D6 B9 k$ S' d2 D' h sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf 9 W2 j8 p  X. F7 K7 n sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf + r- C' y# T% o" x8 W3 t! u# d  Q sed -i "4099c username = placement" /etc/nova/nova.conf # }# T! |+ R8 [* x% _; C sed -i "4100c password = 123456" /etc/nova/nova.conf , q& S/ |* E* D #执行命令，查看是否支持CPU虚拟化，如果大于0则支持。 egrep -c '(vmx|svm)' /proc/cpuinfo #如果不支持的话还需要执行下面的命令 " K5 O3 a# L! \. Y. H1 Z sed -i "2722c virt_type = qemu" /etc/nova/nova.conf ) f( m2 s, O; a" g! c systemctl enable libvirtd.service openstack-nova-compute.service && systemctl start libvirtd.service openstack-nova-compute.service #控制节点 计算节点从注册到发现会有延迟，根据discover_hosts_in_cells_interval 配置轮询发现时间，可以执行下面命令手动发现计算节点 su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova ) Z3 [2 q5 s' E3 P' L* F7 H5 A + d, `3 _. F& a! t #控制节点 安装Networking service mysql -uroot -p123456 -e "CREATE DATABASE neutron" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456'" openstack user create --domain default --password 123456 neutron 4 @; t0 S5 ]! }: i openstack role add --project service --user neutron admin openstack service create --name neutron --description "OpenStack Networking" network : |1 N2 F/ e6 Q$ e0 t openstack endpoint create --region RegionOne network public http://controller:9696 openstack endpoint create --region RegionOne network internal http://controller:9696 openstack endpoint create --region RegionOne network admin http://controller:9696 ( k7 X- o: n0 O4 {; v yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables #配置服务器组件 4 o* y: J4 q/ K7 D sed -i "2c core_plugin = ml2" /etc/neutron/neutron.conf sed -i "3c service_plugins = router" /etc/neutron/neutron.conf * F3 n* d# i: r/ u& O) O sed -i "4c allow_overlapping_ips = true" /etc/neutron/neutron.conf # _3 y9 w3 p2 k7 v. X3 T% z sed -i "5c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf sed -i "6c auth_strategy = keystone" /etc/neutron/neutron.conf " ?. V7 y7 J; T9 R sed -i "7c notify_nova_on_port_status_changes = true" /etc/neutron/neutron.conf & m- @! B0 q2 E7 _8 e, q7 N sed -i "8c notify_nova_on_port_data_changes = true" /etc/neutron/neutron.conf sed -i "254c connection = mysql+ pymysql://neutron:123456@controller/neutron " /etc/neutron/neutron.conf sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf sed -i "362c auth_type = password" /etc/neutron/neutron.conf sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf 2 G! W' a7 y- x& f6 P3 W: e sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf sed -i "365c project_name = service" /etc/neutron/neutron.conf sed -i "366c username = neutron" /etc/neutron/neutron.conf 0 A3 Z  ~+ ?2 U% h+ n sed -i "367c password = 123456" /etc/neutron/neutron.conf sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf . f9 V  [2 W! ?6 m, j) A echo "[nova]" >> /etc/neutron/neutron.conf echo "auth_url = http://controller:5000 " >> /etc/neutron/neutron.conf 2 V- ~% E0 v/ }7 v5 W echo "auth_type = password" >> /etc/neutron/neutron.conf 3 x4 B  a/ i" a" Q1 G3 L echo "project_domain_name = default" >> /etc/neutron/neutron.conf , u% u! S: G+ j3 N echo "user_domain_name = default" >> /etc/neutron/neutron.conf echo "region_name = RegionOne" >> /etc/neutron/neutron.conf " k) ]; f* V9 E% _$ _$ o echo "project_name = service" >> /etc/neutron/neutron.conf 2 N, {; Z( _9 c# Q8 ?0 J echo "username = nova" >> /etc/neutron/neutron.conf " i+ m6 E0 p$ }. x3 H$ H echo "password = 123456" >> /etc/neutron/neutron.conf 3 W3 V3 F; W% e6 ?, P #配置Modular Layer 2 (ML2) plug-in * K9 u* B# D8 l' Q echo "[ml2]" >> /etc/neutron/plugins/ml2/ml2_conf.ini 4 p2 C, ?! D. d) g echo "type_drivers = flat,vlan,vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "tenant_network_types = vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "mechanism_drivers = linuxbridge,l2population" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "extension_drivers = port_security" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "[ml2_type_flat]" >> /etc/neutron/plugins/ml2/ml2_conf.ini ; \) O; A6 t" B4 G" C0 Y, } echo "flat_networks = provider" >> /etc/neutron/plugins/ml2/ml2_conf.ini + j- ?. Y$ B( W: C% p) e3 } echo "vni_ranges = 1:1000" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "[securitygroup]" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "enable_ipset = true" >> /etc/neutron/plugins/ml2/ml2_conf.ini + @) q9 Y4 Z0 a& L #配置Linux bridge agent echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 8 i3 F1 `9 e1 o* f. u #eth1为另外第二张网卡 echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini + v! J4 }8 c; f" m echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 1 @# S' n% Y( n, ]. P #10.0.0.12为第二张网卡的IP : I1 g% L& W, |" M1 \3 z echo "local_ip = 10.0.0.12" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #配置layer-3 agent sed -i "2c interface_driver = linuxbridge" /etc/neutron/l3_agent.ini #配置DHCP agent sed -i "2c interface_driver = linuxbridge" /etc/neutron/dhcp_agent.ini sed -i "3c dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq" /etc/neutron/dhcp_agent.ini ' v) P! N0 N  E6 z% J  i2 y sed -i "4c enable_isolated_metadata = true" /etc/neutron/dhcp_agent.ini / P# U/ S0 z2 ]6 @* a1 y #配置metadata agent sed -i "2c nova_metadata_host = controller" /etc/neutron/metadata_agent.ini sed -i "3c metadata_proxy_shared_secret = 123456" /etc/neutron/metadata_agent.ini #配置计算服务使用网络服务 sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf sed -i " 3335c auth_type = password" /etc/nova/nova.conf 7 {8 ~: F2 [* g, w sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf # [7 f4 Q! n7 G1 d7 B3 K( k  O sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf 9 L1 F0 B' J% ?( I: ?6 ~/ }& x  H3 O sed -i " 3339c project_name = service" /etc/nova/nova.conf sed -i " 3340c username = neutron" /etc/nova/nova.conf - x, K5 Y! j. Q* Y( H sed -i " 3341c password = 123456" /etc/nova/nova.conf sed -i " 3342c service_metadata_proxy = true" /etc/nova/nova.conf sed -i " 3343c metadata_proxy_shared_secret = 123456" /etc/nova/nova.conf ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron systemctl restart openstack-nova-api.service systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service && systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service systemctl enable neutron-l3-agent.service && systemctl start neutron-l3-agent.service #计算节点 安装Networking service yum install -y openstack-neutron-linuxbridge ebtables ipset sed -i "2c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf sed -i "3c auth_strategy = keystone" /etc/neutron/neutron.conf ) J& R% a% G( S, O' g sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf * }% J* o6 T# M5 v sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf 5 d. g! F+ N8 b3 g7 M sed -i "362c auth_type = password" /etc/neutron/neutron.conf sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf sed -i "365c project_name = service" /etc/neutron/neutron.conf / J6 g" H' F$ O1 H6 _% F sed -i "366c username = neutron" /etc/neutron/neutron.conf 7 u8 l$ q3 g# R sed -i "367c password = 123456" /etc/neutron/neutron.conf 0 Z- \8 [% N' j7 U2 |* u2 p3 H sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini & W, \& G; V- Q& Z' S+ w3 Y! | #eth1为另外第二张网卡 2 b! l, O6 H% h" X. R echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini " l9 U- f/ [6 c+ J/ {, n echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini % Y0 ~3 z- L4 D: f echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #10.0.0.32为第二张网卡的IP echo "local_ip = 10.0.0.32" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini % X1 |. u  f& n+ W' C echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini " K1 Q) {% j: C$ b( N #配置计算服务使用网络服务 sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf sed -i " 3335c auth_type = password" /etc/nova/nova.conf sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf ! h3 p6 A; k' \. r7 n* w sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf 3 I9 R$ w4 d: J8 e9 d5 \) [' n sed -i " 3339c project_name = service" /etc/nova/nova.conf sed -i " 3340c username = neutron" /etc/nova/nova.conf sed -i " 3341c password = 123456" /etc/nova/nova.conf systemctl restart openstack-nova-compute.service 9 T6 p5 ?6 J2 Z systemctl enable neutron-linuxbridge-agent.service && systemctl start neutron-linuxbridge-agent.service 2 W1 S) t, ~$ T3 N ( F. S* j( |$ O7 R #控制节点 安装Dashboard 2 k' f* s* }/ F) _ yum install -y openstack-dashboard 5 d' p, X, r$ d sed -i '118c OPENSTACK_HOST = "controller"' /etc/openstack-dashboard/local_settings 7 I$ q/ ?0 ?. c2 U! j7 ^ sed -i "39c ALLOWED_HOSTS = ['*']" /etc/openstack-dashboard/local_settings sed -i "104c SESSION_ENGINE = 'django.contrib.sessions.backends.cache'" /etc/openstack-dashboard/local_settings % q" p+ T1 M- n sed -i "94c CACHES = {" /etc/openstack-dashboard/local_settings sed -i "95c 'default': {" /etc/openstack-dashboard/local_settings sed -i "96c 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache'," /etc/openstack-dashboard/local_settings 7 a6 H6 @& Z7 x5 Y' B/ O sed -i "97c 'LOCATION': 'controller:11211'," /etc/openstack-dashboard/local_settings sed -i "98c }" /etc/openstack-dashboard/local_settings + }7 C& J1 q& m3 {2 X sed -i "99c }" /etc/openstack-dashboard/local_settings # e8 |" m7 M7 z: N sed -i '119c OPENSTACK_KEYSTONE_URL = " http://%s:5000/v3 " % OPENSTACK_HOST' /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True' >> /etc/openstack-dashboard/local_settings % @7 v* h$ a( f, X echo 'OPENSTACK_API_VERSIONS = {' >> /etc/openstack-dashboard/local_settings echo '  "identity": 3,' >> /etc/openstack-dashboard/local_settings echo '  "image": 2,' >> /etc/openstack-dashboard/local_settings echo '  "volume": 3' >> /etc/openstack-dashboard/local_settings echo '}' >> /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"' >> /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"' >> /etc/openstack-dashboard/local_settings - ^+ X* b8 a1 i2 B  R: a6 \ sed -i '123c TIME_ZONE = "Asia/Shanghai"' /etc/openstack-dashboard/local_settings 6 B! {) v+ z: r' l echo "WEBROOT = '/dashboard/'" >> /etc/openstack-dashboard/local_settings echo 'WSGIApplicationGroup %{GLOBAL}' >> /etc/httpd/conf.d/openstack-dashboard.conf systemctl restart httpd.service memcached.service 1 E. ?% m/ Q8 V #安装完成，可访问 http://10.0.0.11/dashboard/ 查看

0 N; {# Q! E) t/ `+ Z' e3 _" J2 S) a
, _8 X- r6 l' P8 b0 n, ^% \

; \. O& s! W" M( r6 x

总结

到此这篇关于Centos8最小化部署安装OpenStack Ussuri的详细教程的文章就介绍到这了,更多相关Centos8最小化部署安装OpenStack Ussuri内容请搜索脚本之家以前的文章或继续浏览下面