1、系统初始化

init.sh

  1. #!/usr/bin/bash
  2. echo "关闭防火墙:firewalld"
  3. systemctl disable firewalld && systemctl stop firewalld
  4. echo "关闭selinux"
  5. setenforce 0 && sed -i 's/^SELINUX=.*/SELINUX=disabled/' /etc/selinux/config
  6. echo "设置主机名"
  7. read -p "Enter hostname(`hostname`):" hostname
  8. if [[ $hostname ]];then
  9.         hostnamectl set-hostname $hostname
  10. fi

(需要手动配置域名映射)

2、安装前准备

2.1、提前配置好yum源

2.2、安装时间同步服务

2.2.1、控制节点

chrony-install-controller.sh

  1. #!/usr/bin/bash
  2. echo "安装chrony"
  3. yum install chrony -y 
  4. #注释掉其他的时间同步服务器，以自己为服务器进行时间同步
  5. echo "修改配置文件/etc/chronyc.conf"
  6. sed -ri 's/(^server.*)/#\1/' /etc/chrony.conf
  7. #匹配最后一行，在后面加入server controller iburst
  8. endrow=`sed -rn  '/^#server.*/=' /etc/chrony.conf |sed -n "$"p`
  9. sed -ri "$endrow"a"server controller iburst" /etc/chrony.conf
  10. #设置允许同步的服务器   (客户端不需要这行)
  11. sed -ri /^#allow.*/a"allow 192.100.0.0/16" /etc/chrony.conf
  12. #(客户端不需要这行)
  13. sed -ri /^#local.*/a"local stratum 10" /etc/chrony.conf
  14. #启动
  15. systemctl enable chronyd.service && systemctl restart chronyd.service
  16. #手动同步
  17. #ntpdate controller
  18. #验证
  19. echo "验证"
  20. chronyc sources
  21. #配置openstack源
  22. #yum install centos-release-openstack-train -y && yum upgrade -y
  23. yum install openstack-selinux -y

2.2.2、其他节点

chrony-install-other.sh

  1. #!/usr/bin/bash
  2. echo "安装chrony"
  3. yum install chrony -y 
  4. #注释掉其他的时间同步服务器，以自己为服务器进行时间同步
  5. sed -ri 's/(^server.*)/#\1/' /etc/chrony.conf
  6. #匹配最后一行，在后面加入server controller iburst
  7. endrow=`sed -rn  '/^#server.*/=' /etc/chrony.conf |sed -n "$"p`
  8. sed -ri "$endrow"a"server controller iburst" /etc/chrony.conf
  9. #启动
  10. systemctl enable chronyd.service && systemctl restart chronyd.service
  11. #验证
  12. echo "验证"
  13. chronyc sources
  14. #配置openstack源
  15. #yum install centos-release-openstack-train -y && yum upgrade -y
  16. yum install openstack-selinux -y

3、安装基础组件：mariadb、rabbitmq、memcached

mariadb-rabbitmq-memcached-install.sh

  1. #!/bin/bash
  2. echo "================安装SQL数据库:mariadb=================="
  3. yum install mariadb mariadb-server python2-PyMySQL -y
  4. cp /etc/my.cnf /etc/my.cnf.bak
  5. sed  -ri '/^\[mysqld\]/'a"bind-address = 0.0.0.0\n\
  6. default-storage-engine = innodb\n\
  7. innodb_file_per_table = on\n\
  8. max_connections = 4096\n\
  9. collation-server = utf8_general_ci\n\
  10. character-set-server = utf8" /etc/my.cnf
  11. echo "================启动mariadb服务=================="
  12. systemctl enable mariadb.service && systemctl restart mariadb.service && systemctl status mariadb.service
  13. echo "================rabbitma安装=================="
  14. yum install rabbitmq-server -y
  15. systemctl enable rabbitmq-server.service && systemctl start rabbitmq-server.service && systemctl status rabbitmq-server.service
  16. rabbitmqctl add_user openstack openstack
  17. rabbitmqctl set_permissions openstack ".*" ".*" ".*"
  18. rabbitmqctl status
  19. yum install memcached python-memcached -y
  20. sed -ri 's/-l 127.0.0.1,::1/-l 127.0.0.1,::1,controller/g' /etc/sysconfig/memcached 
  21. systemctl enable memcached.service && systemctl start memcached.service
  22. systemctl status memcached
  23. echo "================mysql_secure_installation 进行数据库设置=================="

安装完需要mysql_secure_installation 进行数据库设置

4、glance安装

glance-install-controller.sh

  1. #!/bin/bash
  3. #创建glance数据库
  4. mysql -uroot -p123456 -e "CREATE DATABASE IF NOT EXISTS glance;GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'glance';"
  5. mysql -uroot -p123456 -e "show databases;"
  7. #创建用户、服务、端点"
  8. #模拟登录
  9. source /root/admin-openrc.sh
  10. echo "创建glance用户"
  11. openstack user create --domain default --password glance glance
  12. echo "给glance用户添加角色权限"
  13. openstack role add --project service --user glance admin
  14. echo "创建glance image服务"
  15. openstack service create --name glance --description "OpenStack Image" image
  16. echo "添加public、internal和admin endpoint"
  17. openstack endpoint create --region RegionOne image public http://controller:9292
  18. openstack endpoint create --region RegionOne image internal http://controller:9292
  19. openstack endpoint create --region RegionOne image admin http://controller:9292
  21. #安装
  22. yum install openstack-glance -y
  23. cp /etc/glance/glance-api.conf /etc/glance/glance-api.conf.bak
  24. #sed -ri '/^[ \t]*(#|$)/d' /etc/glance/glance-api.conf
  25. tee /etc/glance/glance-api.conf <<-EOF
  26. [database]
  27. # ...
  28. connection = mysql+pymysql://glance:glance@controller/glance
  29. [keystone_authtoken]
  30. # ...
  31. www_authenticate_uri  = http://controller:5000
  32. auth_url = http://controller:5000
  33. memcached_servers = controller:11211
  34. auth_type = password
  35. project_domain_name = Default
  36. user_domain_name = Default
  37. project_name = service
  38. username = glance
  39. password = glance
  41. [paste_deploy]
  42. # ...
  43. flavor = keystone
  44. [glance_store]
  45. # ...
  46. stores = file,http
  47. default_store = file
  48. filesystem_store_datadir = /var/lib/glance/images/
  49. EOF
  51. #同步数据库
  52. su -s /bin/sh -c "glance-manage db_sync" glance
  53. #启动
  54. systemctl enable openstack-glance-api.service && systemctl restart openstack-glance-api.service

5、placement安装

placement-install-controller.sh

  1. #!/bin/bash
  3. #创建placement数据库
  4. mysql -uroot -p123456 -e "CREATE DATABASE IF NOT EXISTS placement;GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY 'placement';GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY 'placement';"
  5. mysql -uroot -p123456 -e "show databases;"
  7. #创建用户、服务、端点"
  8. #模拟登录
  9. source /root/admin-openrc.sh
  10. echo "创建用户"
  11. openstack user create --domain default --password placement placement
  12. echo "添加role"
  13. openstack role add --project service --user placement admin
  14. echo "创建placement服务"
  15. openstack service create --name placement --description "Placement API" placement
  16. echo "创建endpoint"
  17. openstack endpoint create --region RegionOne placement public http://controller:8778
  18. openstack endpoint create --region RegionOne placement internal http://controller:8778
  19. openstack endpoint create --region RegionOne placement admin http://controller:8778
  21. #安装
  22. echo "开始openstack-placement-api"
  23. yum install openstack-placement-api -y
  24. cp /etc/placement/placement.conf /etc/placement/placement.conf.bak
  25. echo "修改配置文件"
  26. tee /etc/placement/placement.conf <<-EOF
  27. [placement_database]
  28. # ...
  29. connection = mysql+pymysql://placement:placement@controller/placement
  30. [api]
  31. # ...
  32. auth_strategy = keystone
  34. [keystone_authtoken]
  35. # ...
  36. auth_url = http://controller:5000/v3
  37. memcached_servers = controller:11211
  38. auth_type = password
  39. project_domain_name = Default
  40. user_domain_name = Default
  41. project_name = service
  42. username = placement
  43. password = placement
  44. EOF
  46. #同步数据库
  47. echo "同步数据库"
  48. su -s /bin/sh -c "placement-manage db sync" placement
  49. #重启http服务
  50. echo "重启http服务"
  51. systemctl restart httpd
  52. echo "验证"
  53. placement-status upgrade check

6、nova安装

6.1、控制节点

nova-install-controller.sh
注意：**/etc/nova/nova.conf 修改myip**

  1. #!/bin/bash
  3. echo "创建数据库"
  4. mysql -uroot -p123456 -e "CREATE DATABASE IF NOT EXISTS nova_api;CREATE DATABASE IF NOT EXISTS nova;CREATE DATABASE IF NOT EXISTS nova_cell0;GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY 'nova';GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'nova';GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY 'nova';"
  5. mysql -uroot -p123456 -e "show databases;"
  7. echo "模拟登录"
  8. source /root/admin-openrc.sh
  9. echo "创建用户"
  10. openstack user create --domain default --password nova nova
  11. echo "添加role"
  12. openstack role add --project service --user nova admin
  13. echo "创建compute服务"
  14. openstack service create --name nova --description "OpenStack Compute" compute
  15. echo "创建endpoint"
  16. openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1
  17. openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1
  18. openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1
  20. echo "安装nova-api、nova-conductor、nova-novncproxy、nova-scheduler"
  21. yum install openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler -y
  23. cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
  24. tee /etc/nova/nova.conf <<-EOF
  25. [DEFAULT]
  26. # ...
  27. enabled_apis = osapi_compute,metadata
  28. my_ip = 192.100.5.137
  29. transport_url = rabbit://openstack:openstack@controller:5672/
  30. use_neutron = true
  31. firewall_driver = nova.virt.firewall.NoopFirewallDriver
  32. [api_database]
  33. # ...
  34. connection = mysql+pymysql://nova:nova@controller/nova_api
  36. [database]
  37. # ...
  38. connection = mysql+pymysql://nova:nova@controller/nova
  39. [api]
  40. # ...
  41. auth_strategy = keystone
  43. [keystone_authtoken]
  44. # ...
  45. www_authenticate_uri = http://controller:5000/
  46. auth_url = http://controller:5000/
  47. memcached_servers = controller:11211
  48. auth_type = password
  49. project_domain_name = Default
  50. user_domain_name = Default
  51. project_name = service
  52. username = nova
  53. password = nova
  54. [vnc]
  55. enabled = true
  56. # ...
  57. server_listen = \$my_ip
  58. server_proxyclient_address = \$my_ip
  59. [glance]
  60. # ...
  61. api_servers = http://controller:9292
  62. [oslo_concurrency]
  63. # ...
  64. lock_path = /var/lib/nova/tmp
  65. [placement]
  66. # ...
  67. region_name = RegionOne
  68. project_domain_name = Default
  69. project_name = service
  70. auth_type = password
  71. user_domain_name = Default
  72. auth_url = http://controller:5000/v3
  73. username = placement
  74. password = placement
  75. EOF
  77. echo "同步数据库"
  78. su -s /bin/sh -c "nova-manage api_db sync" nova
  79. su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
  80. su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
  81. su -s /bin/sh -c "nova-manage db sync" nova
  83. echo "验证"
  84. su -s /bin/sh -c "nova-manage cell_v2 list_cells" nova
  86. echo "启动"
  87. systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
  88. systemctl restart openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
  89. systemctl status openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service

6.2、计算节点

nova-install-computer.sh

  1. #!/bin/bash
  3. echo "安装"
  4. yum install openstack-nova-compute -y
  5. if [[ ! -f /etc/nova/nova.conf.bak ]];then
  6.         cp /etc/nova/nova.conf /etc/nova/nova.conf.bak
  7. fi
  8. tee /etc/nova/nova.conf <<-EOF
  9. [DEFAULT]
  10. # ...
  11. enabled_apis = osapi_compute,metadata
  12. transport_url = rabbit://openstack:openstack@controller
  13. my_ip = 192.100.5.138
  14. use_neutron = true
  15. firewall_driver = nova.virt.firewall.NoopFirewallDriver
  16. [api]
  17. # ...
  18. auth_strategy = keystone
  20. [keystone_authtoken]
  21. # ...
  22. www_authenticate_uri = http://controller:5000/
  23. auth_url = http://controller:5000/
  24. memcached_servers = controller:11211
  25. auth_type = password
  26. project_domain_name = Default
  27. user_domain_name = Default
  28. project_name = service
  29. username = nova
  30. password = nova
  31. [vnc]
  32. # ...
  33. enabled = true
  34. server_listen = 0.0.0.0
  35. server_proxyclient_address = \$my_ip
  36. novncproxy_base_url = http://controller:6080/vnc_auto.html
  37. [glance]
  38. # ...
  39. api_servers = http://controller:9292
  40. [oslo_concurrency]
  41. # ...
  42. lock_path = /var/lib/nova/tmp
  43. [placement]
  44. # ...
  45. region_name = RegionOne
  46. project_domain_name = Default
  47. project_name = service
  48. auth_type = password
  49. user_domain_name = Default
  50. auth_url = http://controller:5000/v3
  51. username = placement
  52. password = placement
  53. EOF
  55. echo "判断是否支持硬件加速"
  56. core=`egrep -c '(vmx|svm)' /proc/cpuinfo`
  57. if [[ $core == 0 ]]; then
  58. tee -a /etc/nova/nova.conf <<-EOF
  59. [libvirt]
  60. virt_type = qemu
  61. EOF
  62. fi
  63. echo "启动"
  64. systemctl enable libvirtd.service openstack-nova-compute.service
  65. systemctl restart libvirtd.service openstack-nova-compute.service
  66. systemctl status libvirtd.service openstack-nova-compute.service
  67. #解决 nova-status upgrade check 403问题
  68. #tee -a /etc/httpd/conf.d/00-placement-api.conf <<-EOF
  69. #    <Directory /usr/bin>
  70. #       <IfVersion >= 2.4>
  71. #          Require all granted
  72. #       </IfVersion>
  73. #       <IfVersion < 2.4>
  74. #          Order allow,deny
  75. #          Allow from all
  76. #       </IfVersion>
  77. #    </Directory>
  78. #EOF
  80. echo "控制器节点上运行:openstack compute service list --service nova-compute"
  81. echo "控制器节点上运行:su -s /bin/sh -c 'nova-manage cell_v2 discover_hosts --verbose' nova"
  82. echo "验证：openstack compute service list"
  83. echo "验证：nova-status upgrade check"

7、neutron安装

7.1、控制节点

neutron-install-controller.sh

  1. #!/bin/bash
  3. echo "创建数据库"
  4. mysql -uroot -p123456 -e "CREATE DATABASE IF NOT EXISTS neutron;GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';show databases;"
  6. echo "创建用户"
  7. openstack user create --domain default --password neutron neutron
  8. echo "添加角色"
  9. openstack role add --project service --user neutron admin
  10. echo "创建network服务"
  11. openstack service create --name neutron --description "OpenStack Networking" network
  12. echo "创建endpoint"
  13. openstack endpoint create --region RegionOne network public http://controller:9696
  14. openstack endpoint create --region RegionOne network internal http://controller:9696
  15. openstack endpoint create --region RegionOne network admin http://controller:9696
  17. echo "选择：自助网络配置"
  18. echo "安装"
  19. yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables -y
  20. if [[ ! -f /etc/neutron/neutron.conf.bak ]];then
  21.     cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
  22. fi
  23. tee /etc/neutron/neutron.conf <<-EOF
  24. [database]
  25. # ...
  26. connection = mysql+pymysql://neutron:neutron@controller/neutron
  28. [DEFAULT]
  29. # ...
  30. core_plugin = ml2
  31. service_plugins = router
  32. allow_overlapping_ips = true
  33. transport_url = rabbit://openstack:openstack@controller
  34. auth_strategy = keystone
  35. notify_nova_on_port_status_changes = true
  36. notify_nova_on_port_data_changes = true
  37. [keystone_authtoken]
  38. # ...
  39. www_authenticate_uri = http://controller:5000
  40. auth_url = http://controller:5000
  41. memcached_servers = controller:11211
  42. auth_type = password
  43. project_domain_name = default
  44. user_domain_name = default
  45. project_name = service
  46. username = neutron
  47. password = neutron
  48. [nova]
  49. # ...
  50. auth_url = http://controller:5000
  51. auth_type = password
  52. project_domain_name = default
  53. user_domain_name = default
  54. region_name = RegionOne
  55. project_name = service
  56. username = nova
  57. password = nova
  58. [oslo_concurrency]
  59. # ...
  60. lock_path = /var/lib/neutron/tmp
  61. EOF
  63. echo "模块化第 2 层 （ML2） 插件"
  64. if [[ ! -f /etc/neutron/plugins/ml2/ml2_conf.ini.bak ]];then
  65.     cp /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.bak
  66. fi
  67. tee /etc/neutron/plugins/ml2/ml2_conf.ini <<-EOF
  68. [ml2]
  69. # ...
  70. type_drivers = flat,vlan,vxlan
  71. tenant_network_types = vxlan
  72. mechanism_drivers = linuxbridge,l2population
  73. extension_drivers = port_security
  74. [ml2_type_flat]
  75. # ...
  76. flat_networks = provider
  77. [ml2_type_vxlan]
  78. # ...
  79. vni_ranges = 1:1000
  80. [securitygroup]
  81. # ...
  82. enable_ipset = true
  83. EOF
  85. echo "Linux 网桥代理"
  86. if [[ ! -f /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak ]];then
  87.     cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
  88. fi
  89. tee /etc/neutron/plugins/ml2/linuxbridge_agent.ini <<-EOF
  90. [linux_bridge]
  91. physical_interface_mappings = provider:ens32
  92. [vxlan]
  93. enable_vxlan = true
  94. local_ip = 管理接口ip
  95. l2_population = true
  96. [securitygroup]
  97. # ...
  98. enable_security_group = true
  99. firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
  100. EOF
  102. echo "启用网络网桥支持"
  103. modprobe br_netfilter
  104. echo "查看net.bridge.bridge-nf-call-iptables和net.bridge.bridge-nf-call-ip6tables的值是否为1"
  105. sysctl net.bridge.bridge-nf-call-iptables=1
  106. sysctl net.bridge.bridge-nf-call-ip6tables=1
  108. echo "配置第3层代理"
  109. if [[ ! -f /etc/neutron/l3_agent.ini.bak ]];then
  110.     cp /etc/neutron/l3_agent.ini /etc/neutron/l3_agent.ini.bak
  111. fi
  112. tee /etc/neutron/l3_agent.ini <<-EOF
  113. [DEFAULT]
  114. # ...
  115. interface_driver = linuxbridge
  116. EOF
  118. echo "配置 DHCP 代理"
  119. if [[ ! -f /etc/neutron/dhcp_agent.ini.bak ]];then
  120.     cp /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini.bak
  121. fi
  122. tee /etc/neutron/dhcp_agent.ini <<-EOF
  123. [DEFAULT]
  124. # ...
  125. interface_driver = linuxbridge
  126. dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq
  127. enable_isolated_metadata = True
  128. EOF
  130. echo "配置元数据代理"
  131. if [[ ! -f /etc/neutron/metadata_agent.ini.bak ]];then
  132.     cp /etc/neutron/metadata_agent.ini /etc/neutron/metadata_agent.ini.bak
  133. fi
  134. tee /etc/neutron/metadata_agent.ini <<-EOF
  135. [DEFAULT]
  136. # ...
  137. nova_metadata_host = controller
  138. metadata_proxy_shared_secret = METADATA_SECRET
  139. EOF
  141. echo "将计算服务配置为使用网络服务"
  142. tee -a /etc/nova/nova.conf <<-EOF
  143. [neutron]
  144. # ...
  145. auth_url = http://controller:5000
  146. auth_type = password
  147. project_domain_name = default
  148. user_domain_name = default
  149. region_name = RegionOne
  150. project_name = service
  151. username = neutron
  152. password = neutron
  153. service_metadata_proxy = true
  154. metadata_proxy_shared_secret = METADATA_SECRET
  155. EOF
  157. echo "数据库同步"
  158. if [[ ! -f /etc/neutron/plugin.ini ]];then 
  159.     ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
  160. fi
  161. su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron
  163. echo "启动"
  164. systemctl restart openstack-nova-api.service && systemctl status openstack-nova-api.service
  165. systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
  166. systemctl restart neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
  167. systemctl status neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service
  168. echo "网络选项 2，还启用和启动第 3 层服务"
  169. systemctl enable neutron-l3-agent.service
  170. systemctl restart neutron-l3-agent.service
  171. systemctl status neutron-l3-agent.service

7.2、计算节点

neutron-install-computer.sh

  1. #!/bin/bash
  3. echo "安装"
  4. yum install openstack-neutron-linuxbridge ebtables ipset -y
  5. if [[ ! -f /etc/neutron/neutron.conf.bak ]];then
  6.         cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bak
  7. fi
  8. tee /etc/neutron/neutron.conf <<-EOF
  9. [DEFAULT]
  10. # ...
  11. transport_url = rabbit://openstack:openstack@controller
  12. auth_strategy = keystone
  14. [keystone_authtoken]
  15. # ...
  16. www_authenticate_uri = http://controller:5000
  17. auth_url = http://controller:5000
  18. memcached_servers = controller:11211
  19. auth_type = password
  20. project_domain_name = default
  21. user_domain_name = default
  22. project_name = service
  23. username = neutron
  24. password = neutron
  25. [oslo_concurrency]
  26. # ...
  27. lock_path = /var/lib/neutron/tmp
  28. EOF
  30. echo "选择：自助网络"
  31. if [[ ! -f /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak ]];then
  32.         cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
  33. fi
  34. tee /etc/neutron/plugins/ml2/linuxbridge_agent.ini <<-EOF
  35. [linux_bridge]
  36. physical_interface_mappings = provider:ens33
  37. [vxlan]
  38. enable_vxlan = true
  39. local_ip = 管理接口ip
  40. l2_population = true
  41. [securitygroup]
  42. # ...
  43. enable_security_group = true
  44. firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver
  45. EOF
  47. echo "启用网桥支持"
  48. modprobe br_netfilter
  49. echo "查看net.bridge.bridge-nf-call-iptables和net.bridge.bridge-nf-call-ip6tables的值是否为1"
  50. sysctl net.bridge.bridge-nf-call-iptables=1
  51. sysctl net.bridge.bridge-nf-call-ip6tables=1
  53. echo "将计算服务配置为使用网络服务"
  54. tee -a /etc/nova/nova.conf <<-EOF
  55. [neutron]
  56. # ...
  57. auth_url = http://controller:5000
  58. auth_type = password
  59. project_domain_name = default
  60. user_domain_name = default
  61. region_name = RegionOne
  62. project_name = service
  63. username = neutron
  64. password = neutron
  65. EOF
  67. echo "启动"
  68. systemctl restart openstack-nova-compute.service && systemctl status openstack-nova-compute.service
  69. systemctl enable neutron-linuxbridge-agent.service && systemctl restart neutron-linuxbridge-agent.service && systemctl status neutron-linuxbridge-agent.service
  71. echo "验证：openstack extension list --network"
  72. echo "验证提供商网络：openstack network agent list"

8、cinder安装

8.1.控制节点

cinder-install-controller.sh

  1. #!/bin/bash
  3. echo "数据库配置"
  4. mysql -uroot -p123456 -e "CREATE DATABASE IF NOT EXISTS cinder;GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY 'cinder';GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'cinder';"
  5. mysql -uroot -p123456 -e "show databases;"
  7. echo "模拟登录"
  8. source /root/admin-openrc.sh
  9. echo "创建用户"
  10. openstack user create --domain default --password cinder cinder
  11. echo "添加role"
  12. openstack role add --project service --user cinder admin
  13. echo "创建cinderv2服务"
  14. openstack service create --name cinderv2 --description "OpenStack Block Storage" volumev2
  15. echo "创建cinderv3服务"
  16. openstack service create --name cinderv3 --description "OpenStack Block Storage" volumev3
  17. echo "创建endpoint"
  18. openstack endpoint create --region RegionOne volumev2 public http://controller:8776/v2/%\(project_id\)s
  19. openstack endpoint create --region RegionOne volumev2 internal http://controller:8776/v2/%\(project_id\)s
  20. openstack endpoint create --region RegionOne volumev2 admin http://controller:8776/v2/%\(project_id\)s
  21. openstack endpoint create --region RegionOne volumev3 public http://controller:8776/v3/%\(project_id\)s
  22. openstack endpoint create --region RegionOne volumev3 internal http://controller:8776/v3/%\(project_id\)s
  23. openstack endpoint create --region RegionOne volumev3 admin http://controller:8776/v3/%\(project_id\)s
  25. echo "安装"
  26. yum install openstack-cinder -y
  27. if [[ ! -f /etc/cinder/cinder.conf.bak ]];then
  28.     cp /etc/cinder/cinder.conf /etc/cinder/cinder.conf.bak
  29. fi
  30. tee /etc/cinder/cinder.conf <<-EOF
  31. [database]
  32. # ...
  33. connection = mysql+pymysql://cinder:cinder@controller/cinder
  34. [DEFAULT]
  35. # ...
  36. transport_url = rabbit://openstack:openstack@controller
  37. auth_strategy = keystone
  38. my_ip = 192.100.5.137
  39. [keystone_authtoken]
  40. # ...
  41. www_authenticate_uri = http://controller:5000
  42. auth_url = http://controller:5000
  43. memcached_servers = controller:11211
  44. auth_type = password
  45. project_domain_name = default
  46. user_domain_name = default
  47. project_name = service
  48. username = cinder
  49. password = cinder
  50. [oslo_concurrency]
  51. # ...
  52. lock_path = /var/lib/cinder/tmp
  53. EOF
  55. echo "同步数据库"
  56. su -s /bin/sh -c "cinder-manage db sync" cinder
  58. echo "将计算配置为使用块存储"
  59. tee -a /etc/nova/nova.conf <<-EOF
  60. [cinder]
  61. os_region_name = RegionOne
  62. EOF
  64. echo "启动"
  65. systemctl restart openstack-nova-api.service
  66. systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service && systemctl restart openstack-cinder-api.service openstack-cinder-scheduler.service
  67. systemctl status openstack-cinder-api.service openstack-cinder-scheduler.service

8.2.卷存储节点

需要准备好磁盘并创建好卷组
cinder-install-block.sh

  1. #!/bin/bash
  2. echo "安装cinder"
  3. yum install openstack-cinder targetcli python-keystone -y
  4. if [[ ! -f /etc/cinder/cinder.conf.bak ]];then
  5.     cp /etc/cinder/cinder.conf /etc/cinder/cinder.conf.bak
  6. fi
  7. tee /etc/cinder/cinder.conf <<-EOF
  8. [database]
  9. # ...
  10. connection = mysql+pymysql://cinder:cinder@controller/cinder
  11. [DEFAULT]
  12. # ...
  13. transport_url = rabbit://openstack:openstack@controller
  14. auth_strategy = keystone
  15. my_ip = 192.168.189.153
  16. enabled_backends = lvm
  17. glance_api_servers = http://controller:9292
  18. [keystone_authtoken]
  19. # ...
  20. www_authenticate_uri = http://controller:5000
  21. auth_url = http://controller:5000
  22. memcached_servers = controller:11211
  23. auth_type = password
  24. project_domain_name = default
  25. user_domain_name = default
  26. project_name = service
  27. username = cinder
  28. password = cinder
  29. [lvm]
  30. volume_driver = cinder.volume.drivers.lvm.LVMVolumeDriver
  31. volume_group = cinder-volumes
  32. target_protocol = iscsi
  33. target_helper = lioadm
  34. [oslo_concurrency]
  35. # ...
  36. lock_path = /var/lib/cinder/tmp
  37. EOF
  39. echo "启动"
  40. systemctl enable openstack-cinder-volume.service target.service && systemctl restart openstack-cinder-volume.service target.service
  41. systemctl status openstack-cinder-volume.service target.service