openstack ussuri 安装脚本

admin

#!/bin/bash ) D( |) I' o9 u * z( r: c/ @- W' T" d #Centos8最小化部署安装openstack Ussuri 1 ~2 o9 S* L. R #共两台主机，分别是一台控制节点，一台计算节点 * q* F. Y1 _( i #1、控制节点内存4096M。双网卡，分别为eth0:10.0.0.11，eth1:10.0.0.12 9 Q; q5 h/ X1 f# M* v! o1 g #2、计算节点内存4096M。双网卡，分别为eth0:10.0.0.31，eth1:10.0.0.32 - w2 s/ b* i3 I2 |: v. i ; r+ o* q3 j& c" r% R #设置阿里云yum源 curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo 9 v' l' ^1 ]0 b. U+ s rm -f /etc/yum.repos.d/CentOS-AppStream.repo /etc/yum.repos.d/CentOS-PowerTools.repo /etc/yum.repos.d/CentOS-centosplus.repo /etc/yum.repos.d/CentOS-Extras.repo && rm -rf /var/cache/yum && yum makecache && yum -y update && yum -y autoremove ' }0 K0 ~! J" _( q9 a #关闭防火墙 % x) d: L( y7 w; ^  e9 B! d4 k9 ?/ ?1 n systemctl stop firewalld && systemctl disable firewalld 1 x& H# H' \4 p% T ' N- b! X$ R0 I$ R4 v/ ~2 b #关闭SELinux setenforce 0 sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config . d$ d; c3 w, r5 _3 t #关闭swap分区 swapoff -a 2 ]1 c" I6 D  I1 k, A& r sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab #设置内核 modprobe bridge modprobe br_netfilter cat > /etc/sysconfig/modules/neutron.modules <<EOF #!/bin/bash 8 u* t* ^% q5 }8 j! ^! n2 v modprobe -- bridge " k# i' h! W- e modprobe -- br_netfilter EOF * ?# ^) @; m$ y, w$ ?& x+ q chmod 755 /etc/sysconfig/modules/neutron.modules && bash /etc/sysconfig/modules/neutron.modules echo "vm.max_map_count=262144" >> /etc/sysctl.conf . n% _( n" I( `5 ?# b0 G) o echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf & E! T6 z: u, W, O5 o echo "net.bridge.bridge-nf-call-iptables=1" >> /etc/sysctl.conf echo "net.bridge.bridge-nf-call-ip6tables=1" >> /etc/sysctl.conf 8 C+ V+ c8 N+ e. X4 y sysctl -p # a3 d- U. t3 s 8 x0 w4 @( ^1 Y4 ]# r #设置时间同步 9 g7 D% \( _( z6 _& s- ~  ^ yum install -y chrony && yum -y autoremove sed -i '/^pool/d' /etc/chrony.conf sed -i '/^server/d' /etc/chrony.conf 2 }, t- ?0 A0 C( S; z8 @; i7 a; G7 _ echo "pool ntp.aliyun.com iburst" >> /etc/chrony.conf ' t4 \% j* E* F, _; q; m systemctl start chronyd.service && systemctl enable chronyd.service #控制节点 设置hostname , p5 G5 y% g7 v+ Z- E hostnamectl set-hostname controller 2 \, g+ B6 m5 h! j, |7 z #计算节点 设置hostname * r" Q. ?8 y2 O: N# `1 W6 J hostnamectl set-hostname compute1 #添加host echo "10.0.0.11 controller" >> /etc/hosts . w9 @  E0 ^7 i7 t9 @  A echo "10.0.0.31 compute1" >> /etc/hosts / U' P- p% u/ w6 T/ `2 L #安装基础组件 . v& x/ g; d8 Q6 \! U yum install -y centos-release-openstack-ussuri yum config-manager --set-enabled PowerTools $ S/ @8 r- U5 { yum upgrade -y yum install -y python3-openstackclient $ p! @7 L! ~. W5 B" i, @0 T #控制节点 安装Mariadb yum install -y mariadb mariadb-server python2-PyMySQL 4 k, c8 ?5 Y& V" o tee /etc/my.cnf.d/openstack.cnf <<-'EOF' [mysqld] & @  c" o/ D$ z7 w bind-address = 10.0.0.11 + E+ V% N( i1 Z. E3 D default-storage-engine = innodb innodb_file_per_table = on max_connections = 4096 9 n9 e7 V. d8 g, l* K/ v3 @ collation-server = utf8_general_ci character-set-server = utf8 EOF systemctl enable mariadb.service && systemctl start mariadb.service echo -e "\nY\n123456\n123456\nY\nn\nY\nY\n" | mysql_secure_installation #控制节点 安装RabbitMQ yum install -y rabbitmq-server systemctl enable rabbitmq-server.service && systemctl start rabbitmq-server.service rabbitmqctl add_user openstack 123456 ( H. T, D" A$ G& O( t4 r5 m rabbitmqctl set_permissions openstack ".*" ".*" ".*" #控制节点 安装Memcached yum install -y memcached python3-memcached 8 l& @+ U* u8 C: `) m4 A1 M sed -i "s/-l 127.0.0.1,::1/-l 127.0.0.1,::1,controller/g" /etc/sysconfig/memcached systemctl enable memcached.service && systemctl start memcached.service 6 T( y* g5 {8 t #控制节点 安装Etcd , j6 c. z" G8 G0 I5 c6 O1 j) [ yum install -y etcd , F' [  m9 o3 {( b4 T8 w2 a6 U rm -f /etc/etcd/etcd.conf tee /etc/etcd/etcd.conf <<-'EOF' #[Member] # h. y0 Z/ L: P4 i% ?8 P ETCD_DATA_DIR="/var/lib/etcd/default.etcd" ETCD_LISTEN_PEER_URLS=" http://10.0.0.11:2380 " ! }2 C# R) M& O0 h, @/ R6 w ETCD_LISTEN_CLIENT_URLS=" http://10.0.0.11:2379 " ( ?) U$ @' ~' Q/ m ETCD_NAME="controller" #[Clustering] ETCD_INITIAL_ADVERTISE_PEER_URLS=" http://10.0.0.11:2380 " % U; Z6 D& l# @) f4 f ETCD_ADVERTISE_CLIENT_URLS=" http://10.0.0.11:2379 " ETCD_INITIAL_CLUSTER="controller= http://10.0.0.11:2380 " ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01" 4 W0 _# b" |$ O) u) w% _; R1 i* X ETCD_INITIAL_CLUSTER_STATE="new" ! r, x0 ^$ B* W+ f: D EOF systemctl enable etcd && systemctl start etcd #控制节点 安装Identity service mysql -uroot -p123456 -e "CREATE DATABASE keystone" - B8 r# h. K4 r* J8 t( C6 l0 _3 | mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456'" " d0 e3 d# j+ A) E yum install -y openstack-keystone httpd python3-mod_wsgi sed -i "556c connection = mysql+ pymysql://keystone:123456@controller/keystone " /etc/keystone/keystone.conf sed -i "2418c provider = fernet" /etc/keystone/keystone.conf su -s /bin/sh -c "keystone-manage db_sync" keystone 7 J* n* t& y1 d& x1 {! A" I keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone keystone-manage credential_setup --keystone-user keystone --keystone-group keystone keystone-manage bootstrap --bootstrap-password 123456 \ --bootstrap-admin-url http://controller:5000/v3/ \ --bootstrap-internal-url http://controller:5000/v3/ \ --bootstrap-public-url http://controller:5000/v3/ \ 0 V6 ~$ f2 X9 ~3 F( @4 N$ Z --bootstrap-region-id RegionOne , ?7 V" v: f" e( Y echo "ServerName controller" >> /etc/httpd/conf/httpd.conf ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/ : t: O" b; @; Y systemctl enable httpd.service && systemctl start httpd.service echo "export OS_USERNAME=admin" >> /etc/profile " M; f( e  Q. d8 L echo "export OS_PASSWORD=123456" >> /etc/profile : L) x8 d: i* \ echo "export OS_PROJECT_NAME=admin" >> /etc/profile echo "export OS_USER_DOMAIN_NAME=Default" >> /etc/profile echo "export OS_PROJECT_DOMAIN_NAME=Default" >> /etc/profile 6 P) O2 w, G, a; e( V echo "export OS_AUTH_URL= http://controller:5000/v3 " >> /etc/profile echo "export OS_IDENTITY_API_VERSION=3" >> /etc/profile 8 i) W4 m/ r! ]" y3 i source /etc/profile openstack project create --domain default --description "Service Project" service * u1 A) h9 v6 j5 S* R/ I4 ~ #控制节点 安装Image service . N' T6 M/ n9 u- P( _! b8 _ mysql -uroot -p123456 -e "CREATE DATABASE glance" . M" K. |: D1 r- Q$ Q mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '123456'" openstack user create --domain default --password 123456 glance ( n* U. v  W( Z* @ openstack role add --project service --user glance admin 6 `# k9 w# y1 Z2 n openstack service create --name glance --description "OpenStack Image" image openstack endpoint create --region RegionOne image public http://controller:9292 openstack endpoint create --region RegionOne image internal http://controller:9292 " j) `+ i1 F( r$ I openstack endpoint create --region RegionOne image admin http://controller:9292 : O: F9 G6 r0 ~! H5 r yum install -y openstack-glance - U5 P+ g: D; @. j% x, ]) p$ t sed -i "2062c connection = mysql+ pymysql://glance:123456@controller/glance " /etc/glance/glance-api.conf sed -i "5034c www_authenticate_uri = http://controller:5000 " /etc/glance/glance-api.conf sed -i "5035c auth_url = http://controller:5000 " /etc/glance/glance-api.conf $ b, q7 g7 h1 G" j0 L5 R) ?' S sed -i "5036c memcached_servers = controller:11211" /etc/glance/glance-api.conf ! Q. j3 t. o! s3 m; d. H' W2 K sed -i "5037c auth_type = password" /etc/glance/glance-api.conf sed -i "5038c project_domain_name = Default" /etc/glance/glance-api.conf sed -i "5039c user_domain_name = Default" /etc/glance/glance-api.conf 4 u1 a# p: d9 u! d; b6 s% g  u sed -i "5040c project_name = service" /etc/glance/glance-api.conf sed -i "5041c username = glance" /etc/glance/glance-api.conf sed -i "5042c password = 123456" /etc/glance/glance-api.conf sed -i "5678c flavor = keystone" /etc/glance/glance-api.conf 2 h  c  e, E! H1 y0 I$ N# d4 M, g sed -i "3413c stores = file,http" /etc/glance/glance-api.conf , \; G: _7 Z3 O sed -i "3414c default_store = file" /etc/glance/glance-api.conf sed -i "3415c filesystem_store_datadir = /var/lib/glance/images/" /etc/glance/glance-api.conf # m+ c! g( u1 p. I, n su -s /bin/sh -c "glance-manage db_sync" glance systemctl enable openstack-glance-api.service && systemctl start openstack-glance-api.service 2 I1 w9 [% m3 w5 M) Q ( g( x* A" G% Z% } #控制节点 安装Placement service mysql -uroot -p123456 -e "CREATE DATABASE placement" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '123456'" ! c7 r  Q) y9 u: g. c openstack user create --domain default --password 123456 placement openstack role add --project service --user placement admin 4 ]' o5 F: E8 }3 L9 U5 \1 m0 p openstack service create --name placement --description "Placement API" placement openstack endpoint create --region RegionOne placement public http://controller:8778 openstack endpoint create --region RegionOne placement internal http://controller:8778 openstack endpoint create --region RegionOne placement admin http://controller:8778 , z  |* I2 T7 ?2 b$ B yum install -y openstack-placement-api sed -i "507c connection = mysql+ pymysql://placement:123456@controller/placement " /etc/placement/placement.conf 0 R! A+ y) G2 k' s sed -i "192c auth_strategy = keystone" /etc/placement/placement.conf # i7 Q8 N# k& [4 D' w: j2 H sed -i "241c auth_url = http://controller:5000/v3 " /etc/placement/placement.conf 6 F) _" {; u9 u2 Y. ~0 i% \ sed -i "242c memcached_servers = controller:11211" /etc/placement/placement.conf 4 D' l/ F, t& Y: `- }0 m6 o sed -i "243c auth_type = password" /etc/placement/placement.conf sed -i "244c project_domain_name = Default" /etc/placement/placement.conf sed -i "245c user_domain_name = Default" /etc/placement/placement.conf sed -i "246c project_name = service" /etc/placement/placement.conf $ J5 ^7 a# L2 C% R: y* b/ l sed -i "247c username = placement" /etc/placement/placement.conf & ~# U8 Q9 }4 A- A" F& w( j sed -i "248c password = 123456" /etc/placement/placement.conf 6 ~& s8 [5 `! D+ C0 y5 ?" D su -s /bin/sh -c "placement-manage db sync" placement systemctl restart httpd 3 \. m" h9 Z# M #控制节点 安装Compute service & \) r" n9 }3 P6 h0 U. i mysql -uroot -p123456 -e "CREATE DATABASE nova_api" mysql -uroot -p123456 -e "CREATE DATABASE nova" 9 [# R1 }0 E! V5 y; u mysql -uroot -p123456 -e "CREATE DATABASE nova_cell0" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '123456'" ) j+ I" x2 Y* s$ [+ z3 Q mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" 6 t7 @2 \+ B' N* R7 G  m" x mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '123456'" 6 W+ S# d- }$ x% } mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '123456'" - a4 ]+ ?" }" U! L' u0 P openstack user create --domain default --password 123456 nova 3 X; W: j" @* Y3 x  b( W( g* E openstack role add --project service --user nova admin openstack service create --name nova --description "OpenStack Compute" compute openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1 4 q' _9 u. w9 e7 B: k1 t openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1 openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1 yum install -y openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler , S+ D8 X2 n$ E/ R, H. T sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf 8 D, d! L1 e5 D8 [ sed -i "3c transport_url = rabbit://openstack:123456@controller:5672/ " /etc/nova/nova.conf : I+ l5 W8 A: B, K" {5 v sed -i "4c my_ip = 10.0.0.11" /etc/nova/nova.conf sed -i "1079c connection = mysql+ pymysql://nova:123456@controller/nova_api " /etc/nova/nova.conf - T3 [8 [( {: p- C. _6 I sed -i "1622c connection = mysql+ pymysql://nova:123456@controller/nova " /etc/nova/nova.conf 5 L& v: G8 W8 `4 F# y( h sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf ; Z& Q$ b  @$ W9 f7 h! f' e) n sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf & R0 l3 n; o- U) O# {2 ?3 ~; B+ Z sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf 3 \& {1 h3 Q8 X( W1 a sed -i "2564c auth_type = password" /etc/nova/nova.conf & }5 s0 ^, n5 \2 u sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf ; b' Z# E# J$ A sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf ; ~, v4 Q0 Q1 e* z5 `2 C sed -i "2567c project_name = service" /etc/nova/nova.conf * w% Q1 Z8 O! k: w5 D sed -i "2568c username = nova" /etc/nova/nova.conf sed -i "2569c password = 123456" /etc/nova/nova.conf   s, {' B  {0 b3 A% t sed -i "5171c enabled = true" /etc/nova/nova.conf 3 h3 H3 a5 p. M sed -i '5172c server_listen = $my_ip' /etc/nova/nova.conf ! d- N& a# I1 K& X sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf " G8 s5 @  z  b: R. C2 q2 B sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf # O3 b6 ?  {" p& m sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf sed -i "4095c project_name = service" /etc/nova/nova.conf " T( \2 b7 @9 M( L& n+ J( a sed -i "4096c auth_type = password" /etc/nova/nova.conf sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf , x3 }2 d6 L% Z- ~  w2 O6 z sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf sed -i "4099c username = placement" /etc/nova/nova.conf $ H' V( k9 G3 j  y sed -i "4100c password = 123456" /etc/nova/nova.conf sed -i "4509c discover_hosts_in_cells_interval = 300" /etc/nova/nova.conf su -s /bin/sh -c "nova-manage api_db sync" nova " E/ \# v+ F. G- l. v5 g- L su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova ' B  @% h; U2 r  C4 ^8 M  j5 x3 P su -s /bin/sh -c "nova-manage db sync" nova systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service && systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service #计算节点 安装Compute service , [+ {5 K# J# ], O yum install -y openstack-nova-compute . u# }0 j2 l& e* K, G' K% K5 u sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf   z5 v/ |2 n; ]9 x9 B+ Q5 _ sed -i "3c transport_url = rabbit://openstack:123456@controller " /etc/nova/nova.conf sed -i "4c my_ip = 10.0.0.31" /etc/nova/nova.conf + k; z0 |& t8 b! \0 [9 z$ [ sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf 6 z% g9 j+ q, h" p& s& Z sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf $ C- Z0 i' V9 v7 C9 S" a# F sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf : M( y( q& m  M2 d- _( m8 j$ H sed -i "2564c auth_type = password" /etc/nova/nova.conf sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf sed -i "2567c project_name = service" /etc/nova/nova.conf 5 K: E5 h' ~) V3 `% V9 |3 v sed -i "2568c username = nova" /etc/nova/nova.conf sed -i "2569c password = 123456" /etc/nova/nova.conf 0 r7 ]& l; ^& g7 a$ f$ _3 q sed -i "5171c enabled = true" /etc/nova/nova.conf sed -i "5172c server_listen = 0.0.0.0" /etc/nova/nova.conf : Z$ Y! ~, P# x sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf sed -i "5174c novncproxy_base_url = http://controller:6080/vnc_auto.html " /etc/nova/nova.conf 0 ^" e: v3 ]3 L3 U2 e2 K9 x* o sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf 8 Q' c- t  i$ a8 ~) y sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf 0 D* A/ A0 ~* x* ~; U sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf . `  e* G+ Y2 D1 Y sed -i "4095c project_name = service" /etc/nova/nova.conf sed -i "4096c auth_type = password" /etc/nova/nova.conf sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf sed -i "4099c username = placement" /etc/nova/nova.conf sed -i "4100c password = 123456" /etc/nova/nova.conf $ c3 ?" T  c+ v& V! a 5 g, [/ [8 ^. T* K #执行命令，查看是否支持CPU虚拟化，如果大于0则支持。 egrep -c '(vmx|svm)' /proc/cpuinfo #如果不支持的话还需要执行下面的命令 sed -i "2722c virt_type = qemu" /etc/nova/nova.conf systemctl enable libvirtd.service openstack-nova-compute.service && systemctl start libvirtd.service openstack-nova-compute.service #控制节点 计算节点从注册到发现会有延迟，根据discover_hosts_in_cells_interval 配置轮询发现时间，可以执行下面命令手动发现计算节点 su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova 2 V; s2 E% q" f  F# h) s. | #控制节点 安装Networking service mysql -uroot -p123456 -e "CREATE DATABASE neutron" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456'" * I  b7 R  Y, U7 y& a5 K; ? mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456'" 1 \. @3 l) U8 V+ G openstack user create --domain default --password 123456 neutron " \/ D; ]8 r% w5 a8 b8 {& q; \ openstack role add --project service --user neutron admin openstack service create --name neutron --description "OpenStack Networking" network . E; L9 ^# P  s) F5 [% } openstack endpoint create --region RegionOne network public http://controller:9696 & u' }$ C3 m  Z  h) o4 o+ E openstack endpoint create --region RegionOne network internal http://controller:9696 openstack endpoint create --region RegionOne network admin http://controller:9696 yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables #配置服务器组件 * M& `& H0 ?% c$ p& v sed -i "2c core_plugin = ml2" /etc/neutron/neutron.conf $ k! ?7 r5 J8 M& M+ @5 Q sed -i "3c service_plugins = router" /etc/neutron/neutron.conf ' x" p" F4 s: T1 L; P# k+ ~+ S" L sed -i "4c allow_overlapping_ips = true" /etc/neutron/neutron.conf sed -i "5c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf sed -i "6c auth_strategy = keystone" /etc/neutron/neutron.conf : ?+ M) J+ D* x- Z, |* v sed -i "7c notify_nova_on_port_status_changes = true" /etc/neutron/neutron.conf sed -i "8c notify_nova_on_port_data_changes = true" /etc/neutron/neutron.conf 9 v3 s4 ?+ O6 j* y2 u: ?6 P sed -i "254c connection = mysql+ pymysql://neutron:123456@controller/neutron " /etc/neutron/neutron.conf sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf ) A# X6 z$ B6 X5 ?: T# B sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf * ]" R. e( Z0 `' m3 c# ` sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf ) I$ Y5 a5 A9 S sed -i "362c auth_type = password" /etc/neutron/neutron.conf sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf sed -i "365c project_name = service" /etc/neutron/neutron.conf sed -i "366c username = neutron" /etc/neutron/neutron.conf sed -i "367c password = 123456" /etc/neutron/neutron.conf & v, A" T4 Y9 s/ c/ G2 a; U' m( ~ sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf echo "[nova]" >> /etc/neutron/neutron.conf echo "auth_url = http://controller:5000 " >> /etc/neutron/neutron.conf 0 @9 R1 U1 Y& D; m; z echo "auth_type = password" >> /etc/neutron/neutron.conf 6 m9 p& T3 c* ~9 e0 H+ m echo "project_domain_name = default" >> /etc/neutron/neutron.conf echo "user_domain_name = default" >> /etc/neutron/neutron.conf echo "region_name = RegionOne" >> /etc/neutron/neutron.conf echo "project_name = service" >> /etc/neutron/neutron.conf   r& A) E& w- c echo "username = nova" >> /etc/neutron/neutron.conf ( l) {! W5 Q. s9 p echo "password = 123456" >> /etc/neutron/neutron.conf #配置Modular Layer 2 (ML2) plug-in echo "[ml2]" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "type_drivers = flat,vlan,vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini : G; F& d. ]0 M. F; Q" _* \" M; A& i echo "tenant_network_types = vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini ! H) n# N- D* K/ p! {7 { echo "mechanism_drivers = linuxbridge,l2population" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "extension_drivers = port_security" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "[ml2_type_flat]" >> /etc/neutron/plugins/ml2/ml2_conf.ini ! v4 K$ }8 P3 D& R* s7 ?$ C/ M echo "flat_networks = provider" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "vni_ranges = 1:1000" >> /etc/neutron/plugins/ml2/ml2_conf.ini 3 C% m8 A' |4 a! ~% d* o3 ` echo "[securitygroup]" >> /etc/neutron/plugins/ml2/ml2_conf.ini & Q. @1 g! d# {+ P' I% O; J! x echo "enable_ipset = true" >> /etc/neutron/plugins/ml2/ml2_conf.ini #配置Linux bridge agent echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #eth1为另外第二张网卡 ! p' C0 R, n* J9 | echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini ' T* }# P2 F3 J3 ]0 @: u #10.0.0.12为第二张网卡的IP echo "local_ip = 10.0.0.12" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini # L  O. `8 T" V% h  o: A+ j% Q echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini " L+ w2 O2 @3 W% a echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini $ S  H* e* [0 k7 E* z echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #配置layer-3 agent sed -i "2c interface_driver = linuxbridge" /etc/neutron/l3_agent.ini #配置DHCP agent 3 I# H$ ~' e" N. }* v1 h2 d sed -i "2c interface_driver = linuxbridge" /etc/neutron/dhcp_agent.ini 0 s* G# j( f) W# E/ ~ sed -i "3c dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq" /etc/neutron/dhcp_agent.ini sed -i "4c enable_isolated_metadata = true" /etc/neutron/dhcp_agent.ini #配置metadata agent sed -i "2c nova_metadata_host = controller" /etc/neutron/metadata_agent.ini sed -i "3c metadata_proxy_shared_secret = 123456" /etc/neutron/metadata_agent.ini #配置计算服务使用网络服务 # d' K7 j$ G/ u- _ sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf $ r6 o% f( a. G& T sed -i " 3335c auth_type = password" /etc/nova/nova.conf $ h- q9 F" Q( O' V' V) m5 x3 P sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf 6 a: l2 A+ K- h/ h4 E( d! h+ f2 O sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf sed -i " 3339c project_name = service" /etc/nova/nova.conf sed -i " 3340c username = neutron" /etc/nova/nova.conf   A; Q( K; s: i  R9 e( ] sed -i " 3341c password = 123456" /etc/nova/nova.conf sed -i " 3342c service_metadata_proxy = true" /etc/nova/nova.conf sed -i " 3343c metadata_proxy_shared_secret = 123456" /etc/nova/nova.conf ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini 4 P8 P. h. K+ B' d$ a1 L; d/ F% Y% y su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron / M; U0 K4 A" Q4 D3 N, z2 D9 ] systemctl restart openstack-nova-api.service ) F% t2 E# q" Q2 r9 y8 D" B systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service && systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service systemctl enable neutron-l3-agent.service && systemctl start neutron-l3-agent.service - m8 @& h4 B5 d4 ]0 k! h #计算节点 安装Networking service yum install -y openstack-neutron-linuxbridge ebtables ipset & c0 ^1 ?6 T9 d, j9 F sed -i "2c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf * s/ U- A, h/ i8 M0 K4 V6 j& W  Q sed -i "3c auth_strategy = keystone" /etc/neutron/neutron.conf sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf * Y9 m5 b/ ]1 o; w0 T sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf 7 m# Y% I4 ^: \4 o sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf sed -i "362c auth_type = password" /etc/neutron/neutron.conf 1 a/ B( x7 Y7 ]' p+ f9 n/ i sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf sed -i "365c project_name = service" /etc/neutron/neutron.conf 5 J; f) M! @& ?; K5 O4 I sed -i "366c username = neutron" /etc/neutron/neutron.conf sed -i "367c password = 123456" /etc/neutron/neutron.conf sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #eth1为另外第二张网卡 " q. f) J8 z4 G) e" a# Z& j% j" x$ _ echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini / U  @, P* n- D, _- J! Y7 q5 U echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 1 x& l: M2 Q7 R" H1 s& u #10.0.0.32为第二张网卡的IP echo "local_ip = 10.0.0.32" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 2 p/ b- O" \  A0 ?- M# V" s1 E echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini ' ]7 Z6 v$ Q! `5 {6 a echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #配置计算服务使用网络服务 sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf sed -i " 3335c auth_type = password" /etc/nova/nova.conf sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf sed -i " 3339c project_name = service" /etc/nova/nova.conf + {: i8 y# g& _ sed -i " 3340c username = neutron" /etc/nova/nova.conf 7 i9 S0 e5 b6 ? sed -i " 3341c password = 123456" /etc/nova/nova.conf # J; t) p/ D* o" T& X systemctl restart openstack-nova-compute.service systemctl enable neutron-linuxbridge-agent.service && systemctl start neutron-linuxbridge-agent.service 8 P$ |0 R/ }/ b; O* } #控制节点 安装Dashboard 8 D  u2 q* f8 k6 q/ @9 f yum install -y openstack-dashboard - a$ s- b" K7 ^* \ sed -i '118c OPENSTACK_HOST = "controller"' /etc/openstack-dashboard/local_settings sed -i "39c ALLOWED_HOSTS = ['*']" /etc/openstack-dashboard/local_settings sed -i "104c SESSION_ENGINE = 'django.contrib.sessions.backends.cache'" /etc/openstack-dashboard/local_settings sed -i "94c CACHES = {" /etc/openstack-dashboard/local_settings 3 n" l9 B2 n. p! |0 V sed -i "95c 'default': {" /etc/openstack-dashboard/local_settings 9 ~* ~& t6 t1 f$ Z7 K8 a8 z sed -i "96c 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache'," /etc/openstack-dashboard/local_settings / P/ c9 U& I  d) Q sed -i "97c 'LOCATION': 'controller:11211'," /etc/openstack-dashboard/local_settings sed -i "98c }" /etc/openstack-dashboard/local_settings sed -i "99c }" /etc/openstack-dashboard/local_settings sed -i '119c OPENSTACK_KEYSTONE_URL = " http://%s:5000/v3 " % OPENSTACK_HOST' /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True' >> /etc/openstack-dashboard/local_settings , @: J( f; R( v* d2 m9 G) u) a* ] echo 'OPENSTACK_API_VERSIONS = {' >> /etc/openstack-dashboard/local_settings echo '  "identity": 3,' >> /etc/openstack-dashboard/local_settings ( B! i/ @- L! O/ _+ G echo '  "image": 2,' >> /etc/openstack-dashboard/local_settings , B5 g2 P5 z" ?0 v5 b) q# R! o+ p; }8 x echo '  "volume": 3' >> /etc/openstack-dashboard/local_settings + n* w& \. o7 v+ J echo '}' >> /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"' >> /etc/openstack-dashboard/local_settings + P% b5 i0 Y2 Y" z0 c! Q( G# K echo 'OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"' >> /etc/openstack-dashboard/local_settings ; ^1 a0 r* l) d6 s. C* W$ ~, B% ~ sed -i '123c TIME_ZONE = "Asia/Shanghai"' /etc/openstack-dashboard/local_settings echo "WEBROOT = '/dashboard/'" >> /etc/openstack-dashboard/local_settings 5 o& W* ?$ B3 | echo 'WSGIApplicationGroup %{GLOBAL}' >> /etc/httpd/conf.d/openstack-dashboard.conf . c1 Y) [1 x; y6 O systemctl restart httpd.service memcached.service #安装完成，可访问 http://10.0.0.11/dashboard/ 查看 ' _8 _- b8 D3 W5 r( j- j1 b $ H/ ?' {- f3 _1 _8 Z1 ~

  ?; p  X  d0 N6 v- w0 `9 F; M

. L' e& |9 c( {

总结

到此这篇关于Centos8最小化部署安装OpenStack Ussuri的详细教程的文章就介绍到这了,更多相关Centos8最小化部署安装OpenStack Ussuri内容请搜索脚本之家以前的文章或继续浏览下面