openstack 扩容脚本修改

admin

扩容脚本：
#!/bin/bash
#
#修改hostname
MASTERHOSTNAME=`ip a|grep global|awk -F/ '{print $1}'|awk '{print $2}'|awk -F. '{print "-"$3"-"$4}'`;hostnamectl --static set-hostname compute$MASTERHOSTNAME.dev01-gonn0101.controller
9 J" O4 ]! @2 ~2 ?IPADDR=`ip a|grep -w inet|grep -w brd|awk '{print $2}'|awk -F/ '{print $1}'`
#gome yum 源
( b, X" J& {+ p% d1 ogomerepo init
gomerepo enable openstack_newton
gomerepo enable ovirt
7 k$ F  j7 |% a, \8 m#安装软件
yum install -y libvirt-daemon-driver-storage-2.0.0-10.el7_3.9.x86_64
- C4 W8 d, B, ]( w: g0 Tyum install -y libvirt-client-2.0.0-10.el7_3.9.x86_64
+ Z, h# c, c5 Pyum install -y libvirt-daemon-driver-qemu-2.0.0-10.el7_3.9.x86_64
+ g7 L2 C! w( o: O) o; a1 h$ Kyum install -y libvirt-daemon-driver-nodedev-2.0.0-10.el7_3.9.x86_64
yum install -y libvirt-daemon-2.0.0-10.el7_3.9.x86_64
yum install -y libvirt-daemon-driver-secret-2.0.0-10.el7_3.9.x86_64
yum install -y libvirt-python-2.0.0-2.el7.x86_64
6 O. V# i1 z% ?yum install -y libvirt-daemon-driver-network-2.0.0-10.el7_3.9.x86_64
yum install -y libvirt-daemon-driver-nwfilter-2.0.0-10.el7_3.9.x86_64
5 }$ F7 W' m9 x/ R+ Gyum install -y libvirt-daemon-kvm-2.0.0-10.el7_3.9.x86_64
yum install -y qemu-kvm-ev-2.6.0-27.1.el7.x86_64
4 R+ C: x- P: a8 l* \: u2 d" [yum install -y openvswitch-2.5.0-2.el7.x86_64
( W) B" C/ ~% \yum install -y python-openvswitch-2.5.0-2.el7.noarch
7 q' c( I! @, C& M1 ?yum install -y openstack-neutron-common-9.1.1-1.el7.noarch
; Q1 ?$ O: A7 }/ Y9 I: d: nyum install -y openstack-neutron-openvswitch-9.1.1-1.el7.noarch
yum install -y openstack-neutron-ml2-9.1.1-1.el7.noarch
yum install -y openstack-nova-compute-14.0.2-1.el7.noarch
yum install -y openstack-nova-common-14.0.2-1.el7.noarch
yum install -y openstack-utils-2017.1-1.el7.noarch
) P0 W3 j4 r$ @* W, t#配置文件
7 n! ^2 F; A- x, o! C' Mcat <<EOF> /etc/nova/nova.conf
[DEFAULT]
$ [  Y/ W3 Y! p" g% z! T8 Q! umy_ip = $IPADDR
log_dir = /var/log/nova
auth_strategy = keystone
debug = false
" a; A" t6 K7 r% t, Uworkers = 40
* t' K3 \& i! lmulti_host = true
" R8 t7 ~1 `, J3 |; f& C. N, _state_path = /data/openstack/nova
- e1 S9 H! {8 j5 o$ A9 yallow_resize_to_same_host = true
% `- X- z, U- t/ Q3 `' P7 lresume_guests_state_on_host_boot = true
; R4 b8 G, A+ S8 zvirt_type = kvm
cpu_allocation_ratio = 3.0
ram_allocation_ratio = 1.2
8 A- o0 v+ ]$ K/ s/ d0 K& |disk_allocation_ratio = 1.0
6 L' T, V. J' kmax_instances_per_host = 25
instance_usage_audit = True
) m0 m1 U+ r/ r  {4 ^7 |instance_usage_audit_period = hour
notify_on_state_change = vm_and_task_state
. b# D6 d' y3 u: y& e" `) D3 henabled_apis = osapi_compute,metadata
  I; C* g* M& E* N+ n, e% l8 \8 erunning_deleted_instance_action = reap
multi_instance_display_name_template = %(name)s-%(count)s
scheduler_driver = nova.scheduler.filter_scheduler.FilterScheduler
  M8 k8 e. ?" x  C( {, k#vcpu_pin_set = 8-39
7 b  _: w" z# B' h2 m4 C9 g) C9 Z#console_allowed_origins =
' ^! n/ w$ G+ L! m6 M+ U4 \. Lscheduler_default_filters = RetryFilter,AvailabilityZoneFilter,RamFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter,NumInstancesFilter
/ e+ g  S1 L0 o& xfirewall_driver = nova.virt.firewall.NoopFirewallDriver
use_neutron = true
5 q7 s: g( }8 d( o) W( y& Dosapi_compute_listen = $IPADDR
5 U! @1 x, l* o0 a' m4 c- r. H7 ^osapi_compute_listen_port = 8774
metadata_listen = $IPADDR
( T' h0 k# _- o6 O* |metadata_listen_port = 8775
default_log_levels = amqplib=WARN,sqlalchemy=WARN,boto=WARN,suds=INFO,qpid.messaging=INFO,iso8601.iso8601=INFO
1 B6 n* k5 q3 @) J8 e! Jmemcached_servers = controller-3-28:11211,controller-3-29:11211
rpc_backend = rabbit
0 T2 N- `  T8 g. `8 W6 |network_api_class = nova.network.neutronv2.api.API
* |/ c7 T% R* v! R! d5 d5 plinuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver
neutron_admin_tenant_name = service
neutron_auth_strategy = keystone
security_group_api = neutron
0 e/ h6 E7 Z; _0 }( gfirewall_driver = nova.virt.firewall.NoopFirewallDriver
force_config_drive = true
5 `1 N2 w- {3 T( S: ?# config_drive_skip_versions =
flat_injected = True
use_syslog = false
use_stderr = false
osapi_max_limit = 5000
[api_database]
connection = mysql+pymysql://nova:QVcQ6QJ0Pn1a@mysqlserver/nova_api
max_pool_size = 100
max_overflow = 200
[barbican]
( d, N6 \, m: ][cache]
[cells]
2 k, k0 J1 Q, _& C% D- H: Y[cinder]
- t7 g4 z0 j. u  `4 q[cloudpipe]
' h5 s4 W! ?9 {# P[conductor]
0 L8 p* W# Q" I[cors]
& A/ B. T; I# }9 W" N8 L( R7 I[cors.subdomain]
2 C  n- J, }( j" R& Q[crypto]
[database]
0 d3 x+ }7 m2 K4 l- d( |connection = mysql+pymysql://nova:QVcQ6QJ0Pn1a@mysqlserver/nova
max_pool_size = 100
3 l1 ?  e/ p4 }; m. P7 J$ U0 N9 Emax_overflow = 200
8 A2 q" i) o9 B" k" a2 R/ v/ S2 v[ephemeral_storage_encryption]
/ ]7 U5 r; M% p! j/ R6 _0 n* B[glance]
api_servers = http://controller:9292
$ R. Q3 L: I' \3 a[guestfs]
[hyperv]
6 V( Q( w! y6 A* r/ M5 Aconfig_drive_cdrom = true
9 i5 Q# l* u' N# C: ^# config_drive_inject_password = true
; F) D* d3 M( C( j% F[image_file_url]
& N7 a0 h& H( `[ironic]
[key_manager]
[keystone_authtoken]
# F" |7 ^, [  G9 ^1 w& W6 W; Kauth_uri = http://controller:5000/v3
auth_url = http://controller:35357/v3
/ t& s& s8 L0 n0 n4 g' c2 Zauth_type = password
project_domain_name = default
( g/ s& ?2 \9 O1 k" `' Tuser_domain_name = default
project_name = service
+ J. N; ]# p# b6 s! k& dusername = nova
password = newnovapass
+ j. P& T( {& p( o0 z! w* {[libvirt]
( R0 A: H; H% z- l/ Y[matchmaker_redis]
) }, ]/ v( u8 z  D& ], d7 `[metrics]
% z. [$ W, g! m2 @! |9 r4 |[mks]
  m1 a; L6 \/ X1 e9 V[neutron]
url = http://controller:9696
0 E; i2 C* O1 Cauth_uri = http://controller:5000/v3
0 @4 D6 O1 O/ Z7 z7 V* `auth_url = http://controller:35357/v3
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
7 J. X2 S  j) h$ jpassword = newneutronpass
service_metadata_proxy = false
3 O- V. b' O4 d* S% n[osapi_v21]
" T$ \+ p1 F8 c0 a( N[oslo_concurrency]
lock_path = /var/lib/nova/tmp
# D% \$ L: B& U1 w; P5 j. U[oslo_messaging_amqp]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
rabbit_hosts = controller-3-28:5672,controller-3-29:5672
rabbit_ha_queues = true
rabbit_userid = openstack
rabbit_password = h1Zg3IvdIiCx
heartbeat_timeout_threshold = 0
rabbit_max_retries = 3
[oslo_messaging_zmq]
[oslo_middleware]
$ O! `6 O& ~- B) Z, Y* T' U[oslo_policy]
[placement]
[placement_database]
[rdp]
  ]+ |+ A5 F  p# _2 L3 t+ y[remote_debug]
' z( h0 R# n9 S' t[serial_console]
[spice]
# g6 H- d3 b* r; n/ h& @) o[ssl]
: n  ]; N- v% ]9 A/ x9 i. ?( I[trusted_computing]
0 q( a4 p$ @: ]- l1 z[upgrade_levels]
+ ]9 j' K# Y+ c; o  l" o[vmware]
+ p  e' y; h  Q5 k' J+ }0 ~[vnc]
5 o8 X( V0 o1 _) \novncproxy_base_url=http://10.152.3.1:6080/vnc_auto.html
novncproxy_host = $IPADDR
( i" N4 J; N: ]! c, g) xvncserver_listen = $IPADDR
vncserver_proxyclient_address = $IPADDR
novncproxy_port = 6080
7 w7 F% C" y+ n[workarounds]
" m4 @( ^$ u& s/ o; E[wsgi]
* R7 o/ J5 J0 Z[xenserver]
9 u2 ?2 J4 a/ v2 z1 U[xvp]
4 Y; F/ ?; ?2 f$ LEOF
cat <<EOF> /etc/neutron/neutron.conf
; S  q2 ?9 Y: Q8 ~( ^. O6 q[DEFAULT]
bind_host = $IPADDR
: U5 s% _  C+ Vbind_port = 9696
core_plugin = ml2
debug = false
use_syslog = false
log_dir = /var/log/neutron
service_plugins = router,metering
auth_strategy = keystone
base_mac = fa:16:3f:00:00:00
- a8 _( Q0 m- R* h+ B2 O8 c) Lallow_overlapping_ips = true
; {0 J! K0 r2 U( {' S- R. Z: Tmac_generation_retries = 16
+ {* E/ Q; z% J4 Mauth_strategy = keystone
, {9 _2 [! ^; \9 ]" ], Onotify_nova_on_port_status_changes = true
notify_nova_on_port_data_changes = true
notification_driver = neutron.openstack.common.notifier.rpc_notifier
0 h3 R) T% ?9 u; A$ P" ]3 Lrpc_backend = rabbit
+ I, G  n7 l% g* k% O0 Y1 ^1 M% wagent_down_time = 75
* t( _" t1 D6 B! X3 lapi_workers = 40
rpc_workers = 40
send_events_interval = 2
; j' {3 |& j& j[agent]
# p1 i( E4 D& ~, ^) `4 Echeck_child_processes_interval = 30
! X1 p! h' T% ^0 Ocheck_child_processes_action = respawn
[cors]
) K1 ^! u7 W; F* {! H[cors.subdomain]
5 w$ G0 S: D  U5 c[database]
. I; \4 a1 N2 _  [connection = mysql+pymysql://neutron:Ol1fBhLMCFr7@mysqlserver/neutron
max_pool_size = 150
. M1 v' C, c  D+ d/ b' Gmax_overflow = 300
[keystone_authtoken]
auth_uri = http://controller:5000/v3
/ U# t2 ]1 Z$ i3 @2 L9 ?auth_url = http://controller:35357/v3
memcached_servers = controller-3-28:11211,controller-3-29:11211
auth_type = password
3 n' v$ p- Z. S. P/ Lproject_domain_name = default
0 ?/ G. y2 \  `; g2 t5 buser_domain_name = default
; W7 S: g& f1 O# u  C. Lproject_name = service
username = neutron
password = newneutronpass
[matchmaker_redis]
[nova]
3 u+ Q! ^% _0 c8 {. }% h" ~  Yurl = http://controller:8774/v2.1
auth_uri = http://controller:5000/v3
6 x) G2 y2 J2 E% o0 a$ dauth_url = http://controller:35357/v3
' l2 e" l) ~6 T# s- xauth_type = password
+ ?* S! n, X! s! ~  ^project_domain_name = default
user_domain_name = default
  _# B* t5 q1 z5 H+ Sregion_name = RegionOne
3 u# t0 |2 C* X( j$ L4 b  a& x* Vproject_name = service
  w% Z, P( C0 \, {8 W1 O- K) z4 ^0 Jusername = nova
9 j( T  \+ m* _4 ~' f: Ypassword = newnovapass
[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
# N+ \' Q) g1 l# u* F& e[oslo_messaging_amqp]
" c" n+ T  b, q* [. l0 z0 O) S, c[oslo_messaging_notifications]
[oslo_messaging_rabbit]
, v1 e/ a9 z8 t0 Xrabbit_hosts=controller-3-28:5672,controller-3-29:5672
) {; h2 Q; [1 o4 Nrabbit_ha_queues=true
% o" t8 ]/ W6 prabbit_userid = openstack
8 H* \2 }3 ^1 L6 G4 S, t$ S9 u. ]rabbit_password = h1Zg3IvdIiCx
heartbeat_timeout_threshold=0
; `- l' B! t$ p% S/ d+ Crabbit_max_retries=2
( D& r( L3 w. V8 K6 q0 f[oslo_messaging_zmq]
( [: n6 e, T% D, ^9 N[oslo_middleware]
' X4 m; [$ h9 |% ~; a2 {! ~; \/ ^[oslo_policy]
[qos]
[quotas]
[ssl]
8 [7 y2 ^# f. W# UEOF
% w. T+ ]7 [2 zcat <<EOF> /etc/neutron/plugins/ml2/ml2_conf.ini
[DEFAULT]
[ml2]
% P. w1 L" a+ ytype_drivers = vlan
. u1 l1 p: }' d1 d! i# T. \tenant_network_types = vlan
mechanism_drivers = openvswitch
[ml2_type_flat]
' _- o2 F# D. u  sflat_networks = physnet1
+ Q( z/ P' M+ [7 q[ml2_type_geneve]
[ml2_type_gre]
[ml2_type_vlan]
network_vlan_ranges = physnet1:1:4000
  R' n% K, Z7 v( d) f& t[ml2_type_vxlan]
[securitygroup]
enable_security_group = false
firewall_driver = neutron.agent.firewall.NoopFirewallDriver
EOF
cat <<EOF> /etc/neutron/plugins/ml2/openvswitch_agent.ini
$ Y3 A3 z4 N# O8 z0 W[DEFAULT]
[agent]
7 H$ F2 B1 x$ H+ t# f0 Tprevent_arp_spoofing = false
[ovs]
8 v' S* x4 P( c3 {% i5 U9 Y  _bridge_mappings = physnet1:br-bond0
[securitygroup]
enable_security_group = false
; Z" h4 s# Q. q0 N" |EOF
#修改nova权限
( Z# Y4 Y! u" B& i" Tsed -i '/^nova/d' /etc/passwd
  u. ^+ E8 B* `0 r$ T' Q3 Z, L8 ]echo "nova:x:162:162:OpenStack Nova Daemons:/var/lib/nova:/bin/sh" >> /etc/passwd
7 J' t( v! W4 q2 _( q#设置开机启动
systemctl enable openstack-nova-compute.service neutron-openvswitch-agent.service openvswitch.service
#启动服务
systemctl start openstack-nova-compute.service neutron-openvswitch-agent.service openvswitch.service
#设置
ovs-vsctl show
& L( r& t0 y6 movs-vsctl add-br br-int
ovs-vsctl add-br br-bond0
ovs-vsctl add-port br-bond0 bond0
4 ]7 ]* V/ |* m" J/ E#创建openstack目录并拷贝nova文件
mkdir -p /data/openstack ; cp -a /var/lib/nova /data/openstack/
#更改权限
echo "neutron ALL=(ALL)       NOPASSWD: ALL" >> /etc/sudoers
: x! I3 `; F! @4 W* qecho "nova ALL=(ALL)       NOPASSWD: ALL" >> /etc/sudoers
9 s, F; n+ W7 a. hcp -a /usr/share/nova/interfaces.template /usr/share/nova/interfaces.template_bak
cat /usr/lib/python2.7/site-packages/nova/virt/interfaces.template > /usr/share/nova/interfaces.template
8 b6 C+ @" B3 isystemctl restart openstack-nova-compute.service ; systemctl restart neutron-openvswitch-agent.service
#拷贝key文件
) H7 q* Q+ r7 H& S, z- D- G+ escp -r root@10.152.3.25:/var/lib/nova/.ssh /var/lib/nova/
#更改权限
chown -R nova:nova /var/lib/nova/.ssh
- v% z- O6 K5 d) G- s
# M" u/ X5 Y- _# Y- s* @