install openstack liberty in ubuntu 14.04 server
来源：互联网 发布：小学语文教学视频软件 编辑：程序博客网 时间：2024/06/13 02:13
我安装的拓扑如下：
为了简便我每个节点只用了一个nic。使用provide network和Linux bridge的方式
注：A. vi编辑文本时没有的要加上去。不要改动原文件里的内容，除非我注明要把之前的【**】下面的东西删掉再加
B.10.0.0.11是controller的interface
C.参考官网文章http://docs.openstack.org/liberty/install-guide-ubuntu/
个人密码设置：
Glance用户密码是glance
Demo用户密码是demo
Nova 用户密码是nova
Neutron用户密码是neutron
其他密码按照官网的
开始
在每个节点上编辑/etc/hosts
# controller10.0.0.11 controller# compute110.0.0.31 compute1# object110.0.0.51 object1# object210.0.0.52 object2确保ping外网和openstack.org可以ping通
# ping -c 4 openstack.orgPING openstack.org (174.143.194.225) 56(84) bytes of data.64 bytes from 174.143.194.225: icmp_seq=1 ttl=54 time=18.3 ms64 bytes from 174.143.194.225: icmp_seq=2 ttl=54 time=17.5 ms64 bytes from 174.143.194.225: icmp_seq=3 ttl=54 time=17.5 ms64 bytes from 174.143.194.225: icmp_seq=4 ttl=54 time=17.4 ms--- openstack.org ping statistics ---4 packets transmitted, 4 received, 0% packet loss, time 3022msrtt min/avg/max/mdev = 17.489/17.715/18.346/0.364 ms# ping -c 4 compute1PING compute1 (10.0.0.31) 56(84) bytes of data.64 bytes from compute1 (10.0.0.31): icmp_seq=1 ttl=64 time=0.263 ms64 bytes from compute1 (10.0.0.31): icmp_seq=2 ttl=64 time=0.202 ms64 bytes from compute1 (10.0.0.31): icmp_seq=3 ttl=64 time=0.203 ms64 bytes from compute1 (10.0.0.31): icmp_seq=4 ttl=64 time=0.202 ms--- compute1 ping statistics ---4 packets transmitted, 4 received, 0% packet loss, time 3000msrtt min/avg/max/mdev = 0.202/0.217/0.263/0.030 ms在controller上配置NTP
# apt-get install chrony编辑 /etc/chrony/chrony.conf
server NTP_SERVER iburst重启服务
service chrony restart配置其他node NTP：
重复controller的三个步骤，在/etc/chrony/chrony.conf里把
server NTP_SERVER iburst改成
server controller iburst
重启服务
验证NTP:
# chronyc sources 210 Number of sources = 2 MS Name/IP address Stratum Poll Reach LastRx Last sample =============================================================================== ^- 192.0.2.11 2 7 12 137 -2814us[-3000us] +/- 43ms ^* 192.0.2.12 2 6 177 46 +17us[ -23us] +/- 68ms安装openstack依赖包（每个node都需要）
# apt-get install software-properties-common# add-apt-repository cloud-archive:libertyapt-get update && apt-get dist-upgrade# apt-get install python-openstackclientcontroller安装SQL database
# apt-get install mariadb-server python-pymysql编辑/etc/mysql/conf.d/mysqld_openstack.cnf
[mysqld]...bind-address = 10.0.0.11[mysqld]...default-storage-engine = innodbinnodb_file_per_tablecollation-server = utf8_general_ciinit-connect = 'SET NAMES utf8'character-set-server = utf8重启数据库
# service mysql restartcontroller安装NoSQL database
apt-get install mongodb-server mongodb-clients python-pymongo编辑/etc/mongodb.conf
bind_ip = 10.0.0.11完成安装
# service mongodb stop# rm /var/lib/mongodb/journal/prealloc.*# service mongodb startcontroller安装消息队列
注：Creating user “openstack” …等是console的信息
这里的密码或者下文出现的密码可以自己改，但是不能混淆
# apt-get install rabbitmq-serverrabbitmqctl add_user openstack RABBIT_PASS Creating user "openstack" ...rabbitmqctl set_permissions openstack ".*" ".*" ".*" Setting permissions for user "openstack" in vhost "/" ...controller安装keystone
$ mysql -u root -pCREATE DATABASE keystone;GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \ IDENTIFIED BY 'KEYSTONE_DBPASS';GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \ IDENTIFIED BY 'KEYSTONE_DBPASS';退出数据库，创建一个administration token，记下出来的一串数字
openssl rand -hex 10echo "manual" > /etc/init/keystone.overrideapt-get install keystone apache2 libapache2-mod-wsgi \ memcached python-memcache编辑/etc/keystone/keystone.conf
这个ADMIN_TOKEN就填刚刚的那串数字
[DEFAULT]...admin_token = ADMIN_TOKEN[database]...connection = mysql+pymysql://keystone:KEYSTONE_DBPASS@controller/keystone[memcache]...servers = localhost:11211[token]...provider = uuiddriver = memcache[revoke]...driver = sql[DEFAULT]...verbose = True同步数据库：
# su -s /bin/sh -c "keystone-manage db_sync" keystone出现下面的log,如果在root下就去掉su -s
配置Apache HTTP server
ServerName controller创建/etc/apache2/sites-available/wsgi-keystone.conf
Listen 5000Listen 35357<VirtualHost *:5000> WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} WSGIProcessGroup keystone-public WSGIScriptAlias / /usr/bin/keystone-wsgi-public WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On <IfVersion >= 2.4> ErrorLogFormat "%{cu}t %M" </IfVersion> ErrorLog /var/log/apache2/keystone.log CustomLog /var/log/apache2/keystone_access.log combined <Directory /usr/bin> <IfVersion >= 2.4> Require all granted </IfVersion> <IfVersion < 2.4> Order allow,deny Allow from all </IfVersion> </Directory></VirtualHost><VirtualHost *:35357> WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} WSGIProcessGroup keystone-admin WSGIScriptAlias / /usr/bin/keystone-wsgi-admin WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On <IfVersion >= 2.4> ErrorLogFormat "%{cu}t %M" </IfVersion> ErrorLog /var/log/apache2/keystone.log CustomLog /var/log/apache2/keystone_access.log combined <Directory /usr/bin> <IfVersion >= 2.4> Require all granted </IfVersion> <IfVersion < 2.4> Order allow,deny Allow from all </IfVersion> </Directory></VirtualHost>启动服务：
# ln -s /etc/apache2/sites-available/wsgi-keystone.conf /etc/apache2/sites-enabled完成安装：
service apache2 restart# rm -f /var/lib/keystone/keystone.db创建service entity和API endpoints
export OS_TOKEN=ADMIN_TOKEN（替换ADMIN_TOKEN）export OS_URL=http://controller:35357/v3export OS_IDENTITY_API_VERSION=3openstack service create \ --name keystone --description "OpenStack Identity" identity+-------------+----------------------------------+| Field | Value |+-------------+----------------------------------+| description | OpenStack Identity || enabled | True || id | 4ddaae90388b4ebc9d252ec2252d8d10 || name | keystone || type | identity |+-------------+----------------------------------+创建三个endpoint
openstack endpoint create --region RegionOne \ identity public http://controller:5000/v2.0+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 30fff543e7dc4b7d9a0fb13791b78bf4 || interface | public || region | RegionOne || region_id | RegionOne || service_id | 8c8c0927262a45ad9066cfe70d46892c || service_name | keystone || service_type | identity || url | http://controller:5000/v2.0 |+--------------+----------------------------------+$ openstack endpoint create --region RegionOne \ identity internal http://controller:5000/v2.0+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 57cfa543e7dc4b712c0ab137911bc4fe || interface | internal || region | RegionOne || region_id | RegionOne || service_id | 6f8de927262ac12f6066cfe70d99ac51 || service_name | keystone || service_type | identity || url | http://controller:5000/v2.0 |+--------------+----------------------------------+$ openstack endpoint create --region RegionOne \ identity admin http://controller:35357/v2.0+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 78c3dfa3e7dc44c98ab1b1379122ecb1 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | 34ab3d27262ac449cba6cfe704dbc11f || service_name | keystone || service_type | identity || url | http://controller:35357/v2.0 |+--------------+----------------------------------+创建admin project
openstack project create --domain default \ --description "Admin Project" admin+-------------+----------------------------------+| Field | Value |+-------------+----------------------------------+| description | Admin Project || domain_id | default || enabled | True || id | 343d245e850143a096806dfaefa9afdc || is_domain | False || name | admin || parent_id | None |+-------------+----------------------------------+创建admin user：
openstack user create --domain default \ --password-prompt adminUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value |+-----------+----------------------------------+| domain_id | default || enabled | True || id | ac3377633149401296f6c0d92d79dc16 || name | admin |+-----------+----------------------------------+创建admin role:
openstack role create admin+-------+----------------------------------+| Field | Value |+-------+----------------------------------+| id | cd2cb9a39e874ea69e5d4b896eb16128 || name | admin |+-------+----------------------------------+Add the admin role to the admin project and user
openstack role add --project admin --user admin admin*还可以添加service project和demo用户。这个不详写了。
验证keystone是否正常
unset OS_TOKEN OS_URL输入admin用户的密码
openstack --os-auth-url http://controller:35357/v3 \ --os-project-domain-id default --os-user-domain-id default \ --os-project-name admin --os-username admin --os-auth-type password \ token issuePassword:+------------+----------------------------------+| Field | Value |+------------+----------------------------------+| expires | 2015-03-24T18:55:01Z || id | ff5ed908984c4a4190f584d826d75fed || project_id | cf12a15c5ea84b019aec3dc45580896b || user_id | 4d411f2291f34941b30eef9bd797505a |+------------+----------------------------------+这样keystone就完成了。也可以用一个脚本去source环境变量
参考这里：
http://docs.openstack.org/liberty/install-guide-ubuntu/keystone-openrc.html
controller安装glance服务
$ mysql -u root -pCREATE DATABASE glance;GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' \ IDENTIFIED BY 'GLANCE_DBPASS';GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' \ IDENTIFIED BY 'GLANCE_DBPASS';source环境变量：
$ source admin-openrc.sh创建一个glance用户：
openstack user create --domain default --password-prompt glanceUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value |+-----------+----------------------------------+| domain_id | default || enabled | True || id | e38230eeff474607805b596c91fa15d9 || name | glance |+-----------+----------------------------------+Add the admin role to the glance user and service project
openstack role add --project service --user glance admin创建glance的service entity
openstack service create --name glance \ --description "OpenStack Image service" image+-------------+----------------------------------+| Field | Value |+-------------+----------------------------------+| description | OpenStack Image service || enabled | True || id | 8c2c7f1b9b5049ea9e63757b5533e6d2 || name | glance || type | image |+-------------+----------------------------------+创建API endpoints
openstack endpoint create --region RegionOne \ image public http://controller:9292+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 340be3625e9b4239a6415d034e98aace || interface | public || region | RegionOne || region_id | RegionOne || service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 || service_name | glance || service_type | image || url | http://controller:9292 |+--------------+----------------------------------+$ openstack endpoint create --region RegionOne \ image internal http://controller:9292+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | a6e4b153c2ae4c919eccfdbb7dceb5d2 || interface | internal || region | RegionOne || region_id | RegionOne || service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 || service_name | glance || service_type | image || url | http://controller:9292 |+--------------+----------------------------------+$ openstack endpoint create --region RegionOne \ image admin http://controller:9292+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 0c37ed58103f4300a84ff125a539032d || interface | admin || region | RegionOne || region_id | RegionOne || service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 || service_name | glance || service_type | image || url | http://controller:9292 |+--------------+----------------------------------+安装包：
apt-get install glance python-glanceclient修改 /etc/glance/glance-api.conf
把GLANCE_PASS改成glance user的密码
[database]...connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance[keystone_authtoken]...auth_uri = http://controller:5000auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultproject_name = serviceusername = glancepassword = GLANCE_PASS[paste_deploy]...flavor = keystone[glance_store]...default_store = filefilesystem_store_datadir = /var/lib/glance/images/[DEFAULT]...notification_driver = noop编辑/etc/glance/glance-registry.conf（把GLANCE_PASS替换成自己设置的密码，下面的我都不提醒了）
[database]...connection = mysql+pymysql://glance:GLANCE_DBPASS@controller/glance[keystone_authtoken]...auth_uri = http://controller:5000auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultproject_name = serviceusername = glancepassword = GLANCE_PASS[paste_deploy]...flavor = keystone[DEFAULT]...notification_driver = noop同步数据库
*如果你在root下的话直接/bin/sh -c “glance-manage db_sync” glance，否则可能出错
su -s /bin/sh -c "glance-manage db_sync" glance重启服务
# service glance-registry restart# service glance-api restart# rm -f /var/lib/glance/glance.sqlite验证功能
$ echo "export OS_IMAGE_API_VERSION=2" \ | tee -a admin-openrc.sh demo-openrc.sh$ source admin-openrc.sh$ wget http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img$ glance image-create --name "cirros" \ --file cirros-0.3.4-x86_64-disk.img \ --disk-format qcow2 --container-format bare \ --visibility public --progress[=============================>] 100%+------------------+--------------------------------------+| Property | Value |+------------------+--------------------------------------+| checksum | 133eae9fb1c98f45894a4e60d8736619 || container_format | bare || created_at | 2015-03-26T16:52:10Z || disk_format | qcow2 || id | 38047887-61a7-41ea-9b49-27987d5e8bb9 || min_disk | 0 || min_ram | 0 || name | cirros || owner | ae7a98326b9c455588edd2656d723b9d || protected | False || size | 13200896 || status | active || tags | [] || updated_at | 2015-03-26T16:52:10Z || virtual_size | None || visibility | public |+------------------+--------------------------------------+$ glance image-list+--------------------------------------+--------+| ID | Name |+--------------------------------------+--------+| 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros |+--------------------------------------+--------+这样glance就成功了
controller安装Compute服务
$ mysql -u root -pCREATE DATABASE nova;GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \ IDENTIFIED BY 'NOVA_DBPASS';GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \ IDENTIFIED BY 'NOVA_DBPASS';$ source admin-openrc.sh$ openstack user create --domain default --password-prompt novaUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value |+-----------+----------------------------------+| domain_id | default || enabled | True || id | 8c46e4760902464b889293a74a0c90a8 || name | nova |+-----------+----------------------------------+$ openstack role add --project service --user nova adminopenstack service create --name nova \ --description "OpenStack Compute" compute+-------------+----------------------------------+| Field | Value |+-------------+----------------------------------+| description | OpenStack Compute || enabled | True || id | 060d59eac51b4594815603d75a00aba2 || name | nova || type | compute |+-------------+----------------------------------+openstack endpoint create --region RegionOne \ compute public http://controller:8774/v2/%\(tenant_id\)s+--------------+-----------------------------------------+| Field | Value |+--------------+-----------------------------------------+| enabled | True || id | 3c1caa473bfe4390a11e7177894bcc7b || interface | public || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | nova || service_type | compute || url | http://controller:8774/v2/%(tenant_id)s |+--------------+-----------------------------------------+$ openstack endpoint create --region RegionOne \ compute internal http://controller:8774/v2/%\(tenant_id\)s+--------------+-----------------------------------------+| Field | Value |+--------------+-----------------------------------------+| enabled | True || id | e3c918de680746a586eac1f2d9bc10ab || interface | internal || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | nova || service_type | compute || url | http://controller:8774/v2/%(tenant_id)s |+--------------+-----------------------------------------+$ openstack endpoint create --region RegionOne \ compute admin http://controller:8774/v2/%\(tenant_id\)s+--------------+-----------------------------------------+| Field | Value |+--------------+-----------------------------------------+| enabled | True || id | 38f7af91666a47cfb97b4dc790b94424 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | nova || service_type | compute || url | http://controller:8774/v2/%(tenant_id)s |+--------------+-----------------------------------------+# apt-get install nova-api nova-cert nova-conductor \ nova-consoleauth nova-novncproxy nova-scheduler \ python-novaclient编辑文件 /etc/nova/nova.conf
[database]...connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova[DEFAULT]...rpc_backend = rabbit[oslo_messaging_rabbit]...rabbit_host = controllerrabbit_userid = openstackrabbit_password = RABBIT_PASS[DEFAULT]...auth_strategy = keystone[keystone_authtoken]...auth_uri = http://controller:5000auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultproject_name = serviceusername = novapassword = NOVA_PASS[DEFAULT]...my_ip = 10.0.0.11[DEFAULT]...network_api_class = nova.network.neutronv2.api.APIsecurity_group_api = neutronlinuxnet_interface_driver = nova.network.linux_net.NeutronLinuxBridgeInterfaceDriverfirewall_driver = nova.virt.firewall.NoopFirewallDriver[vnc]...vncserver_listen = $my_ipvncserver_proxyclient_address = $my_ip[glance]...host = controller[oslo_concurrency]...lock_path = /var/lib/nova/tmp[DEFAULT]...enabled_apis=osapi_compute,metadata同步数据库
su -s /bin/sh -c "nova-manage db sync" nova重启服务
# service nova-api restart# service nova-cert restart# service nova-consoleauth restart# service nova-scheduler restart# service nova-conductor restart# service nova-novncproxy restart# rm -f /var/lib/nova/nova.sqlite安装compute节点
apt-get install nova-compute sysfsutils编辑/etc/nova/nova.conf
[DEFAULT]...rpc_backend = rabbit[oslo_messaging_rabbit]...rabbit_host = controllerrabbit_userid = openstackrabbit_password = RABBIT_PASS[DEFAULT]...auth_strategy = keystone[keystone_authtoken]...auth_uri = http://controller:5000auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultproject_name = serviceusername = novapassword = NOVA_PASS[DEFAULT]...my_ip = MANAGEMENT_INTERFACE_IP_ADDRESS[DEFAULT]...network_api_class = nova.network.neutronv2.api.APIsecurity_group_api = neutronlinuxnet_interface_driver = nova.network.linux_net.NeutronLinuxBridgeInterfaceDriverfirewall_driver = nova.virt.firewall.NoopFirewallDriver[vnc]...enabled = Truevncserver_listen = 0.0.0.0vncserver_proxyclient_address = $my_ipnovncproxy_base_url = http://controller:6080/vnc_auto.html[glance]...host = controller[oslo_concurrency]...lock_path = /var/lib/nova/tmp完成安装
$ egrep -c '(vmx|svm)' /proc/cpuinfo这个命令是用了选择kvm或者qemu的
*If this command returns a value of one or greater, your compute node supports hardware acceleration which typically requires no additional configuration.
If this command returns a value of zero, your compute node does not support hardware acceleration and you must configure libvirt to use QEMU instead of KVM.
编辑 /etc/nova/nova-compute.conf
[libvirt]...virt_type = qemu# service nova-compute restart# rm -f /var/lib/nova/nova.sqlite验证安装
source admin-openrc.sh nova service-list+----+------------------+------------+----------+---------+-------+--------------+-----------------+| Id | Binary | Host | Zone | Status | State | Updated_at | Disabled Reason |+----+------------------+------------+----------+---------+-------+--------------+-----------------+| 1 | nova-conductor | controller | internal | enabled | up | 2014-09-16.. | - || 2 | nova-consoleauth | controller | internal | enabled | up | 2014-09-16.. | - || 3 | nova-scheduler | controller | internal | enabled | up | 2014-09-16.. | - || 4 | nova-cert | controller | internal | enabled | up | 2014-09-16.. | - || 5 | nova-compute | compute1 | nova | enabled | up | 2014-09-16.. | - |+----+------------------+------------+----------+---------+-------+--------------+-----------------+$ nova endpoints+-----------+------------------------------------------------------------+| nova | Value |+-----------+------------------------------------------------------------+| id | 1fb997666b79463fb68db4ccfe4e6a71 || interface | public || region | RegionOne || region_id | RegionOne || url | http://controller:8774/v2/ae7a98326b9c455588edd2656d723b9d |+-----------+------------------------------------------------------------++-----------+------------------------------------------------------------+| nova | Value |+-----------+------------------------------------------------------------+| id | bac365db1ff34f08a31d4ae98b056924 || interface | admin || region | RegionOne || region_id | RegionOne || url | http://controller:8774/v2/ae7a98326b9c455588edd2656d723b9d |+-----------+------------------------------------------------------------++-----------+------------------------------------------------------------+| nova | Value |+-----------+------------------------------------------------------------+| id | e37186d38b8e4b81a54de34e73b43f34 || interface | internal || region | RegionOne || region_id | RegionOne || url | http://controller:8774/v2/ae7a98326b9c455588edd2656d723b9d |+-----------+------------------------------------------------------------++-----------+----------------------------------+| glance | Value |+-----------+----------------------------------+| id | 41ad39f6c6444b7d8fd8318c18ae0043 || interface | admin || region | RegionOne || region_id | RegionOne || url | http://controller:9292 |+-----------+----------------------------------++-----------+----------------------------------+| glance | Value |+-----------+----------------------------------+| id | 50ecc4ce62724e319f4fae3861e50f7d || interface | internal || region | RegionOne || region_id | RegionOne || url | http://controller:9292 |+-----------+----------------------------------++-----------+----------------------------------+| glance | Value |+-----------+----------------------------------+| id | 7d3df077a20b4461a372269f603b7516 || interface | public || region | RegionOne || region_id | RegionOne || url | http://controller:9292 |+-----------+----------------------------------++-----------+----------------------------------+| keystone | Value |+-----------+----------------------------------+| id | 88150c2fdc9d406c9b25113701248192 || interface | internal || region | RegionOne || region_id | RegionOne || url | http://controller:5000/v2.0 |+-----------+----------------------------------++-----------+----------------------------------+| keystone | Value |+-----------+----------------------------------+| id | cecab58c0f024d95b36a4ffa3e8d81e1 || interface | public || region | RegionOne || region_id | RegionOne || url | http://controller:5000/v2.0 |+-----------+----------------------------------++-----------+----------------------------------+| keystone | Value |+-----------+----------------------------------+| id | fc90391ae7cd4216aca070042654e424 || interface | admin || region | RegionOne || region_id | RegionOne || url | http://controller:35357/v2.0 |+-----------+----------------------------------+$ nova image-list+--------------------------------------+--------+--------+--------+| ID | Name | Status | Server |+--------------------------------------+--------+--------+--------+| 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros | ACTIVE | |+--------------------------------------+--------+--------+--------+在这里我遇到了问题
当我输入nova-endpoints命令时
WARNING: glance has no endpoint in RegionOne! Available endpoints for this service:WARNING: keystone has no endpoint in RegionOne! Available endpoints for this service:
不过貌似对openstack没有什么影响
在controller上安装neutron服务
neutron架构： 
我是用provider network+vxlan+linux bridge.
- public (provider) and private (self-service) networks
所以在官网文档上选择Networking Option 2: Self-service networks
$ mysql -u root -pCREATE DATABASE neutron;GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' \ IDENTIFIED BY 'NEUTRON_DBPASS';GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' \ IDENTIFIED BY 'NEUTRON_DBPASS';退出数据库
$ source admin-openrc.sh$ openstack user create --domain default --password-prompt neutronUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value |+-----------+----------------------------------+| domain_id | default || enabled | True || id | b20a6692f77b4258926881bf831eb683 || name | neutron |+-----------+----------------------------------+$ openstack role add --project service --user neutron admin$ openstack service create --name neutron \ --description "OpenStack Networking" network+-------------+----------------------------------+| Field | Value |+-------------+----------------------------------+| description | OpenStack Networking || enabled | True || id | f71529314dab4a4d8eca427e701d209e || name | neutron || type | network |+-------------+----------------------------------+$ openstack endpoint create --region RegionOne \ network public http://controller:9696+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 85d80a6d02fc4b7683f611d7fc1493a3 || interface | public || region | RegionOne || region_id | RegionOne || service_id | f71529314dab4a4d8eca427e701d209e || service_name | neutron || service_type | network || url | http://controller:9696 |+--------------+----------------------------------+$ openstack endpoint create --region RegionOne \ network internal http://controller:9696+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 09753b537ac74422a68d2d791cf3714f || interface | internal || region | RegionOne || region_id | RegionOne || service_id | f71529314dab4a4d8eca427e701d209e || service_name | neutron || service_type | network || url | http://controller:9696 |+--------------+----------------------------------+$ openstack endpoint create --region RegionOne \ network admin http://controller:9696+--------------+----------------------------------+| Field | Value |+--------------+----------------------------------+| enabled | True || id | 1ee14289c9374dffb5db92a5c112fc4e || interface | admin || region | RegionOne || region_id | RegionOne || service_id | f71529314dab4a4d8eca427e701d209e || service_name | neutron || service_type | network || url | http://controller:9696 |+--------------+----------------------------------+安装包：
# apt-get install neutron-server neutron-plugin-ml2 \ neutron-plugin-linuxbridge-agent neutron-l3-agent neutron-dhcp-agent \ neutron-metadata-agent python-neutronclient编辑/etc/neutron/neutron.conf（注意合并）
[database]...connection = mysql+pymysql://neutron:NEUTRON_DBPASS@controller/neutron[DEFAULT]...core_plugin = ml2service_plugins = routerallow_overlapping_ips = True[DEFAULT]...rpc_backend = rabbit[oslo_messaging_rabbit]...rabbit_host = controllerrabbit_userid = openstackrabbit_password = RABBIT_PASS[DEFAULT]...auth_strategy = keystone[keystone_authtoken]...auth_uri = http://controller:5000auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultproject_name = serviceusername = neutronpassword = NEUTRON_PASS[DEFAULT]...notify_nova_on_port_status_changes = Truenotify_nova_on_port_data_changes = Truenova_url = http://controller:8774/v2[nova]...auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultregion_name = RegionOneproject_name = serviceusername = novapassword = NOVA_PASS编辑/etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]...type_drivers = flat,vlan,vxlan[ml2]...tenant_network_types = vxlan[ml2]...mechanism_drivers = linuxbridge,l2population[ml2]...extension_drivers = port_security[ml2_type_flat]...flat_networks = public[ml2_type_vxlan]...vni_ranges = 1:1000[securitygroup]...enable_ipset = True编辑 /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[linux_bridge]physical_interface_mappings = public:PUBLIC_INTERFACE_NAME[vxlan]enable_vxlan = Truelocal_ip = OVERLAY_INTERFACE_IP_ADDRESSl2_population = True[agent]...prevent_arp_spoofing = True[securitygroup]...enable_security_group = Truefirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver编辑/etc/neutron/l3_agent.ini
[DEFAULT]...interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriverexternal_network_bridge =编辑/etc/neutron/dhcp_agent.ini
[DEFAULT]...interface_driver = neutron.agent.linux.interface.BridgeInterfaceDriverdhcp_driver = neutron.agent.linux.dhcp.Dnsmasqenable_isolated_metadata = True[DEFAULT]...dnsmasq_config_file = /etc/neutron/dnsmasq-neutron.conf创建 /etc/neutron/dnsmasq-neutron.conf
dhcp-option-force=26,1450编辑/etc/neutron/metadata_agent.ini
[DEFAULT]...auth_uri = http://controller:5000auth_url = http://controller:35357auth_region = RegionOneauth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultproject_name = serviceusername = neutronpassword = NEUTRON_PASS[DEFAULT]...nova_metadata_ip = controller[DEFAULT]...metadata_proxy_shared_secret = METADATA_SECRET编辑/etc/nova/nova.conf
[neutron]...url = http://controller:9696auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultregion_name = RegionOneproject_name = serviceusername = neutronpassword = NEUTRON_PASSservice_metadata_proxy = Truemetadata_proxy_shared_secret = METADATA_SECRET同步数据库
su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \ --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron重启网络服务
# service nova-api restart# service neutron-server restart# service neutron-plugin-linuxbridge-agent restart# service neutron-dhcp-agent restart# service neutron-metadata-agent restart# service neutron-l3-agent restart# rm -f /var/lib/neutron/neutron.sqlite在compute节点上安装neutron服务
# apt-get install neutron-plugin-linuxbridge-agent编辑/etc/neutron/neutron.conf
[DEFAULT]...rpc_backend = rabbit[oslo_messaging_rabbit]...rabbit_host = controllerrabbit_userid = openstackrabbit_password = RABBIT_PASS[DEFAULT]...auth_strategy = keystone[keystone_authtoken]...auth_uri = http://controller:5000auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultproject_name = serviceusername = neutronpassword = NEUTRON_PASS编辑/etc/neutron/plugins/ml2/linuxbridge_agent.ini
[linux_bridge]physical_interface_mappings = public:PUBLIC_INTERFACE_NAME[vxlan]enable_vxlan = Truelocal_ip = OVERLAY_INTERFACE_IP_ADDRESSl2_population = True[agent]...prevent_arp_spoofing = True[securitygroup]...enable_security_group = Truefirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver编辑/etc/nova/nova.conf
[neutron]...url = http://controller:9696auth_url = http://controller:35357auth_plugin = passwordproject_domain_id = defaultuser_domain_id = defaultregion_name = RegionOneproject_name = serviceusername = neutronpassword = NEUTRON_PASS重启计算节点网络服务
# service nova-compute restart# service neutron-plugin-linuxbridge-agent restart验证neutron服务：
$ source admin-openrc.sh$ neutron ext-list+-----------------------+-----------------------------------------------+| alias | name |+-----------------------+-----------------------------------------------+| dns-integration | DNS Integration || address-scope | Address scope || ext-gw-mode | Neutron L3 Configurable external gateway mode || binding | Port Binding || agent | agent || subnet_allocation | Subnet Allocation || l3_agent_scheduler | L3 Agent Scheduler || external-net | Neutron external network || flavors | Neutron Service Flavors || net-mtu | Network MTU || quotas | Quota management support || l3-ha | HA Router extension || provider | Provider Network || multi-provider | Multi Provider Network || extraroute | Neutron Extra Route || router | Neutron L3 Router || extra_dhcp_opt | Neutron Extra DHCP opts || security-group | security-group || dhcp_agent_scheduler | DHCP Agent Scheduler || rbac-policies | RBAC Policies || port-security | Port Security || allowed-address-pairs | Allowed Address Pairs || dvr | Distributed Virtual Router |+-----------------------+-----------------------------------------------+$ neutron agent-list+--------------------------------------+--------------------+------------+-------+----------------+---------------------------+| id | agent_type | host | alive | admin_state_up | binary |+--------------------------------------+--------------------+------------+-------+----------------+---------------------------+| 08905043-5010-4b87-bba5-aedb1956e27a | Linux bridge agent | compute1 | :-) | True | neutron-linuxbridge-agent || 27eee952-a748-467b-bf71-941e89846a92 | Linux bridge agent | controller | :-) | True | neutron-linuxbridge-agent || 830344ff-dc36-4956-84f4-067af667a0dc | L3 agent | controller | :-) | True | neutron-l3-agent || dd3644c9-1a3a-435a-9282-eb306b4b0391 | DHCP agent | controller | :-) | True | neutron-dhcp-agent || f49a4b81-afd6-4b3d-b923-66c8f0517099 | Metadata agent | controller | :-) | True | neutron-metadata-agent |+--------------------------------------+--------------------+------------+-------+----------------+---------------------------+controller节点安装dashboard
apt-get install openstack-dashboard编辑/etc/openstack-dashboard/local_settings.py
OPENSTACK_HOST = "controller"ALLOWED_HOSTS = ['*', ]CACHES = { 'default': { 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache', 'LOCATION': '127.0.0.1:11211', }}OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"TIME_ZONE = "TIME_ZONE"（参考官网）重启服务dashboard
# service apache2 reload验证dashboard服务Access the dashboard using a web browser at http://controller/horizon.
这样简单的openstack liberty就成功了，后续可以再做HA和其他组件安装。
大部分内容摘自官网：
http://docs.openstack.org/liberty/install-guide-ubuntu
0 0
- install openstack liberty in ubuntu 14.04 server
- Openstack liberty install
- keystone changes in Openstack Liberty
- Install Shiny Server in Ubuntu 14.04.1
- Install Shiny Server in Ubuntu 14.04.1
- Install Xen in a Ubuntu(14.04) server
- Install Nginx with Php5 & Mysql (LEMP) in Ubuntu 14.04 Server
- Install VSFTPD server in Ubuntu 16.04 LTS
- install devstack (liberty) in ubuntu14.04（完整解决）
- Install OpenStack all-in-one
- openstack-install-ubuntu-single说明
- centos7 搭建openstack Liberty
- How to Install a VNC Server in Ubuntu
- How to Install a VNC Server in Ubuntu
- Install Adobe Flash plugin in Ubuntu 14.04
- Install Adobe Flash plugin in Ubuntu 14.04
- How to install Tomcat in Ubuntu 14.04
- Install caffe Some questions--in ubuntu 14.04
- 浅谈Java异常
- AppServ中配置问题
- LINUX定时执行shell脚本
- Android：屏幕适配
- 2016年计划
- install openstack liberty in ubuntu 14.04 server
- Java 对象拷贝
- UISwitch的默认宽高51*31，UITabBarController的默认高度是49
- 《iOS Human Interface Guidelines》——Multitasking
- 分析京东“搜索京东商品/店铺”布局（一）
- Cocos在windows7下的配置与apk打包
- [Android实例] 侧边字母滑动检索控件
- 在commit之前撤销git add操作 （undo git add before commit)
- 改变webkit 内核滚动条宽度
