Centos7.1+Openstack-L版本安装笔记

来源：互联网发布：日本北陆大学知乎编辑：程序博客网时间：2024/05/23 00:34

公司想上open stack ，所以花费来一周时间去学习。整理了份安装文档，也算自我的一个总结吧。这个文档我已亲测，能顺利安装。

1. 准备工作

2. 硬件设备准备

2.1笔记本电脑一台，CPU支持VT，内存>=4G，可用磁盘空间大于50G。

2.2安装VirtualBox 或VMWARE workstation虚拟机软件。

2.3安装好两台CentOS-7-x86_64的虚拟机。

2.4节点1主机名：openstack-node1节点2主机名：openstack-node2

3. 下载CentOS-7-x86_64镜像地址: http://mirrors.aliyun.com/

4. 安装CentOS-7-x86_64选择最小化安装就可以了。

5. 进入页面是终端模式，使用ifconfig检查是否有分配ip。

6. 如果没有分配ip，

使用vim /etc/sysconfig/network-scripts/ifcfg-eno16777736(自动产生的)

修改NOBOOT=no 为NOBOOT=yes

7. 使用systemctl restart network重启网卡

8. 使用ifconfig查看生成的网卡

9. 使用route-n查看GATEWAY

10. 配置静态IP

使用vim /etc/sysconfig/network-scripts/ifcfg-eno16777736

BOOTPROTO=dhcp修改为BOOTPROTO=static

添加：

IPADDR=172.16.157.32(自己定义的IP)

NETMASK=255.255.255.0(route –n 查看)

GATEWAY=172.16.157.2(route –n 查看)

重启网卡：systemctl restart network

查看是否生效：ifconfig

配置nameserver解析主机名：vi /etc/resolv.conf

nameserver 172.16.157.2(GATEWAY)

检查能否上网：ping www.baidu.com

11. 关闭防火墙：systemctl stop firewalld.service

12. 开机关闭防火墙：systemctl disable firewalld.service

13. 设置主机名：hostnamectl set-hostname openstack-node1

14. 查看是否设置成功：hostnamectl status

15. 关闭selinux: vi /etc/sysconfig/selinux

修改： SELINUX=disabled

16. 配置ip与主机的关联：vi /etc/hosts

172.16.157.32 openstack-node1 openstack-node1.openstack.com(长域名)

测试是否设置成功：ping openstack-node1

17. 配置时间同步，先下载：yum install chrony

18. 修改配置文件：vi /etc/chrony.conf

19. 打开allow 192.168/16—2r--注释

20. 设置开机启动：systemctl enable chronyd.service

21. 启动:systemctl start chronyd.service

22. 设置时区：timedatectl set-timezone Asia/Shanghai

23. 测试时间是否正常：date

准备工作到此结束，下面开始软件的安装

24. 安装mysql：yum install mariadb mariadb-server MySQL-python

25. 将yum下载的配置文件覆盖etc下面的：

cp /usr/share/mysql/my-medium.cnf /etc/my.cnf

26.修改/etc/my.cnf文件：vi /etc/my.cnf

在[mysqld]下添加几个mysql参数

[mysqld]

default-storage-engine = innodb

innodb_file_per_table

collation-server = utf8_general_ci

init-connect = 'SET NAMES utf8'

character-set-server = utf8

26. 设置mysql开机启动：systemctl enable mariadb.service

27. 启动mysql：systemctl start mariadb.service

28. 设置mysql的root密码：mysql_secure_installation

29. 第一个回车，第二设置密码，后面的全部选择Y

30. 登录mysql：mysql -u root –p

31. 在mysql里创建openstack里相关服务的数据库，并授权

32. 创建5个服务的数据库

CREATE DATABASE keystone;

CREATE DATABASE glance;

CREATE DATABASE neutron;

CREATE DATABASE nova;

CREATE DATABASE cinder;

为数据库授权：

keystone

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';

cinder

GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY 'cinder';

GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'cinder';

glance

GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';

GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'glance';

neutron

GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';

GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';

nova

GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';

GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'nova';

32-1: .启用epel存储库

yum install http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm

33.安装rabbitmq-server: yum install rabbitmq-server

33.将rabbitmq-server加入开机启动：

systemctl enable rabbitmq-server.service

34.启动rabbitmq-server：

35.systemctl start rabbitmq-server.service

36.创建一个rabbitmq用户：用户名openstack密码openstack

rabbitmqctl add_user openstack openstack

37.查看rabbitmq启动端口(5672):netstat –netlp

38.为用户设置权限：

rabbitmqctl set_permissions openstack ".*" ".*" ".*"

39.添加rabbitmq的web插件：

rabbitmq-plugins enable rabbitmq_management

40.启动rabbitmq的web插件(监控5567端口)

systemctl restart rabbitmq-server.service

41.查看是否启动成功(15672)：netstat –netlp

42.访问rabbitmqweb页面

http://172.16.157.32:15672

43.使创建的rabbitmq的openstack用户能登录rabbitmqweb

点击openstack用户在新的页面找到update this user

退出重新登录测试设置成功

43-1.用yum下载rpm openstack库(liberty是openstack一个新的版本)

yum install centos-release-openstack-liberty

44.下载keystone安装的rpm包和相关软件

yum install openstack-keystone httpd mod_wsgi \   memcached python-memcached

45.设置memcached开机启动：

systemctl enable memcached.service

46.启动memcached端口号(1121)

systemctl start memcached.service

49．升级yum包：yum upgrade

50.安装openstack客服端

yum install python-openstackclient

51.安装openstack-selinux自动管理安全openstack服务政策

yum install openstack-selinux

54.启动Memcached服务，并设置开机启动

systemctl enable memcached.service

systemctl start memcached.service

55.编辑keystone的配置文件vi /etc/keystone/keystone.conf文件

56.通过vi编辑器查找下面的变量值，进行修改。如果值不需要修改就将注释打开共8处—修改完后使用grep ‘^[a-z]’ /etc/keystone/keystone.conf查看修改是否正确

admin_token = 36efb5b1f50202a52c6f—12r—需要一个命令获取一个随值

命令为: openssl rand -hex 10

debug = true—101r

verbose = true—107r

connection=mysql://keystone:keystone@172.16.157.32/keystone —495r—配置mysql链接

servers = 172.16.157.32:11211 —1305r—配置memcache服务在[memcache]下面

driver = sql —1710r—配置

provider = uuid —1903r—配置uuid标记在[token]下面

driver = memcache—1908—配置提供者在[token]下面

57.同步keyston数据库—会后报错信息：

No handlers could be found for logger "oslo_config.cfg"可以忽略，以后的同步也如此

su -s /bin/sh -c "keystone-manage db_sync" keystone

58．由于使用apache http服务器启动keystone所以要配置ServerName

使用命令vi /etc/httpd/conf/httpd.conf打开文件

ServerName 172.16.157.32:80—95r—ip是自己的静态ip

59.创建apcache服务启动文件使用命令：

vi /etc/httpd/conf.d/wsgi-keystone.conf

输入的内容为：

Listen 5000 Listen 35357  <VirtualHost *:5000>     WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}     WSGIProcessGroup keystone-public     WSGIScriptAlias / /usr/bin/keystone-wsgi-public     WSGIApplicationGroup %{GLOBAL}     WSGIPassAuthorization On     <IfVersion >= 2.4>       ErrorLogFormat "%{cu}t %M"     </IfVersion>     ErrorLog /var/log/httpd/keystone-error.log     CustomLog /var/log/httpd/keystone-access.log combined      <Directory /usr/bin>         <IfVersion >= 2.4>             Require all granted         </IfVersion>         <IfVersion < 2.4>             Order allow,deny             Allow from all         </IfVersion>     </Directory> </VirtualHost>  <VirtualHost *:35357>     WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}     WSGIProcessGroup keystone-admin     WSGIScriptAlias / /usr/bin/keystone-wsgi-admin     WSGIApplicationGroup %{GLOBAL}     WSGIPassAuthorization On     <IfVersion >= 2.4>       ErrorLogFormat "%{cu}t %M"     </IfVersion>     ErrorLog /var/log/httpd/keystone-error.log     CustomLog /var/log/httpd/keystone-access.log combined      <Directory /usr/bin>         <IfVersion >= 2.4>             Require all granted         </IfVersion>         <IfVersion < 2.4>             Order allow,deny             Allow from all         </IfVersion>     </Directory> </VirtualHost>

60.配置apache http启动服务设置开机启动和启动

systemctl enable httpd.service

systemctl start httpd.service

61.配置身份验证令牌：

export OS_TOKEN=294a4c8a8a475f9b9836——对应56步的admin_token的值

62.配置端点url：

export OS_URL=http://172.16.157.32:35357/v3-－ip都为自己设置的静态IP

63.配置身份api版本：

export OS_IDENTITY_API_VERSION=3

64.创建一个keystone的服务，服务类型为identity(身份验证)

$openstack service create \

   --name keystone --description "OpenStack Identity" identity

 +-------------+----------------------------------+ | Field       | Value                            | +-------------+----------------------------------+ | description | OpenStack Identity               | | enabled     | True                             | | id          | 4ddaae90388b4ebc9d252ec2252d8d10 | | name        | keystone                         | | type        | identity                         | +-------------+----------------------------------+

65.创建一个公共访问endpoint

openstack endpoint create --region RegionOne \

 identity public http://172.16.157.32:5000/v2.0

 +--------------+----------------------------------+ | Field        | Value                            | +--------------+----------------------------------+ | enabled      | True                             | | id           | 30fff543e7dc4b7d9a0fb13791b78bf4 | | interface    | public                           | | region       | RegionOne                        | | region_id    | RegionOne                        | | service_id   | 8c8c0927262a45ad9066cfe70d46892c | | service_name | keystone                         | | service_type | identity                         | | url          | http:// 172.16.157.32:5000/v2.0      |

66.创建一个内部访问endpoint

$openstack endpoint create --region RegionOne \

   identity internal http://172.16.157.32:5000/v2.0

 +--------------+----------------------------------+ | Field        | Value                            | +--------------+----------------------------------+ | enabled      | True                             | | id           | 57cfa543e7dc4b712c0ab137911bc4fe | | interface    | internal                         | | region       | RegionOne                        | | region_id    | RegionOne                        | | service_id   | 6f8de927262ac12f6066cfe70d99ac51 | | service_name | keystone                         | | service_type | identity                         | | url          | http:// 172.16.157.32:5000/v2.0      | +--------------+----------------------------------+

67.创建一个admin访问的endpoint

$openstack endpoint create --region RegionOne \

   identity admin http://172.16.157.32:35357/v2.0

+--------------+----------------------------------+ | Field        | Value                            | +--------------+----------------------------------+ | enabled      | True                             | | id           | 78c3dfa3e7dc44c98ab1b1379122ecb1 | | interface    | admin                            | | region       | RegionOne                        | | region_id    | RegionOne                        | | service_id   | 34ab3d27262ac449cba6cfe704dbc11f | | service_name | keystone                         | | service_type | identity                         | | url          | http:// 172.16.157.32:35357/v2.0     | +--------------+----------------------------------+

68.创建一个admin项目

$ openstack project create --domain default \

   --description "Admin Project" admin

----------+----------------------------------+ | Field       | Value                            | +-------------+----------------------------------+ | description | Admin Project                    | | domain_id   | default                          | | enabled     | True                             | | id          | 343d245e850143a096806dfaefa9afdc | | is_domain   | False                            | | name        | admin                            | | parent_id   | None                             | +-------------+----------------------------------+

69.创建一个admin用户

$openstack user create --domain default \

   --password-prompt admin

User Password: Repeat User Password: +-----------+----------------------------------+ | Field     | Value                            | +-----------+----------------------------------+ | domain_id | default                          | | enabled   | True                             | | id        | ac3377633149401296f6c0d92d79dc16 | | name      | admin                            | +-----------+----------------------------------+

70.创建一个admin角色

$ openstack role create admin

+-------+----------------------------------+ | Field | Value                            | +-------+----------------------------------+ | id    | cd2cb9a39e874ea69e5d4b896eb16128 | | name  | admin                            | +-------+----------------------------------+

71.将admin添加为admin角色并添加道admin项目中——该行没有输出

$ openstack role add --project admin --user admin admin

72.创建一个service服务为以后的glance,nova,neutron使用

$ openstack project create --domain default \

   --description "Service Project" service

 +-------------+----------------------------------+ | Field       | Value                            | +-------------+----------------------------------+ | description | Service Project                  | | domain_id   | default                          | | enabled     | True                             | | id          | 894cdfa366d34e9d835d3de01e752262 | | is_domain   | False                            | | name        | service                          | | parent_id   | None                             | +-------------+----------------------------------+

73.创建一个demo项目用于演示

$ openstack project create --domain default \

   --description "Demo Project" demo

+-------------+----------------------------------+ | Field       | Value                            | +-------------+----------------------------------+ | description | Demo Project                     | | domain_id   | default                          | | enabled     | True                             | | id          | ed0b60bf607743088218b0a533d5943f | | is_domain   | False                            | | name        | demo                             | | parent_id   | None                             | +-------------+----------------------------------+

74.创建一个demo用户

$ openstack user create --domain default \

   --password-prompt demo

User Password: Repeat User Password: +-----------+----------------------------------+ | Field     | Value                            | +-----------+----------------------------------+ | domain_id | default                          | | enabled   | True                             | | id        | 58126687cbcc4888bfa9ab73a2256f27 | | name      | demo                             | +-----------+----------------------------------+

75.创建用户角色

$ openstack role create user

+-------+----------------------------------+ | Field | Value                            | +-------+----------------------------------+ | id    | 997ce8d05fc143ac97d83fdfb5998552 | | name  | user                             | +-------+----------------------------------+

76.将demo用户添加user角色添加道demo项目里——没有输出

$ openstack role add --project demo --user demo user

77.取消之前用export设置的变量用unset 命令：

unset OS_TOKEN

unset OS_URL

unset OS_IDENTITY_API_VERSION

78.验证keystone是否安装成功。获取admin用户的令牌：需要属于设置的密码：admin

$openstack --os-auth-url http://172.16.157.32:35357/v3 \

   --os-project-domain-id default --os-user-domain-id default \

   --os-project-name admin --os-username admin --os-auth-type password \

   token issue

 Password: +------------+----------------------------------+ | Field      | Value                            | +------------+----------------------------------+ | expires    | 2015-03-24T18:55:01Z             | | id         | ff5ed908984c4a4190f584d826d75fed | | project_id | cf12a15c5ea84b019aec3dc45580896b | | user_id    | 4d411f2291f34941b30eef9bd797505a | +------------+----------------------------------+

79.获取demo用户的令牌：需要属于设置的密码：demo

$ openstack --os-auth-url http://172.16.157.32:5000/v3 \   --os-project-domain-id default --os-user-domain-id default \   --os-project-name demo --os-username demo --os-auth-type password \   token issue Password: +------------+----------------------------------+ | Field      | Value                            | +------------+----------------------------------+ | expires    | 2014-10-10T12:51:33Z             | | id         | 1b87ceae9e08411ba4a16e4dada04802 | | project_id | 4aa51bb942be4dd0ac0555d7591f80a6 | | user_id    | 7004dfa0dda84d63aef81cf7f100af01 | +------------+----------------------------------+

80.在root目录创建一个admin用户使用keystone的脚本环境文件

vi admin-openrc.sh

输入内容：

export OS_PROJECT_DOMAIN_ID=default

export OS_USER_DOMAIN_ID=default

export OS_PROJECT_NAME=admin

export OS_TENANT_NAME=admin

 export OS_USERNAME=admin

export OS_PASSWORD=ADMIN_PASS

export OS_AUTH_URL=http://172.16.157.32:35357/v3

export OS_IDENTITY_API_VERSION=3

81.在root目录创建一个demo用户使用keystone的脚本环境文件

vi demo-openrc.sh

export OS_PROJECT_DOMAIN_ID=default

export OS_USER_DOMAIN_ID=default

export OS_PROJECT_NAME=demo

export OS_TENANT_NAME=demo

 export OS_USERNAME=demo

export OS_PASSWORD=ADMIN_PASS

export OS_AUTH_URL=http://172.16.157.32:35357/v3

export OS_IDENTITY_API_VERSION=3

82.加载admin-openrc.sh文件

$ source admin-openrc.sh

83.校验文件是否配置ok

$ openstack token issue +------------+----------------------------------+ | Field      | Value                            | +------------+----------------------------------+ | expires    | 2015-03-25T01:45:49.950092Z      | | id         | cd4110152ac24bdeaa82e1443c910c36 | | project_id | cf12a15c5ea84b019aec3dc45580896b | | user_id    | 4d411f2291f34941b30eef9bd797505a | +------------+----------------------------------+

84.看到以上结果表明我们的keystone已安装成功，下面开始安装另外一个服务关于镜像的glance服务

85.使用keystone命令创建一个glance用户——如果命令不可以使用：

$ source admin-openrc.sh

86.创建一个glance用户

$openstack user create --domain default --password-prompt glance

 User Password: Repeat User Password: +-----------+----------------------------------+ | Field     | Value                            | +-----------+----------------------------------+ | domain_id | default                          | | enabled   | True                             | | id        | e38230eeff474607805b596c91fa15d9 | | name      | glance                           | +-----------+----------------------------------+

87.将glance用户赋予admin角色添加道service项目里－改命令没有输出

$openstack role add --project service --user glance admin

88.创建一个镜像服务，服务类型：image

$openstack service create --name glance \

   --description "OpenStack Image service" image

 +-------------+----------------------------------+ | Field       | Value                            | +-------------+----------------------------------+ | description | OpenStack Image service          | | enabled     | True                             | | id          | 8c2c7f1b9b5049ea9e63757b5533e6d2 | | name        | glance                           | | type        | image                            | +-------------+----------------------------------+

89.创建一个公共的endpoint——注意修改ip

$openstack endpoint create --region RegionOne \

   image public http://172.16.157.32:9292

 +--------------+----------------------------------+ | Field        | Value                            | +--------------+----------------------------------+ | enabled      | True                             | | id           | 340be3625e9b4239a6415d034e98aace | | interface    | public                           | | region       | RegionOne                        | | region_id    | RegionOne                        | | service_id   | 8c2c7f1b9b5049ea9e63757b5533e6d2 | | service_name | glance                           | | service_type | image                            | | url          | http:// 172.16.157.32:9292           | +--------------+----------------------------------+

90.创建一个内部的endpoint

$openstack endpoint create --region RegionOne \

image internal http://172.16.157.32:9292

 +--------------+----------------------------------+ | Field        | Value                            | +--------------+----------------------------------+ | enabled      | True                             | | id           | a6e4b153c2ae4c919eccfdbb7dceb5d2 | | interface    | internal                         | | region       | RegionOne                        | | region_id    | RegionOne                        | | service_id   | 8c2c7f1b9b5049ea9e63757b5533e6d2 | | service_name | glance                           | | service_type | image                            | | url          | http:// 172.16.157.32:9292           | +--------------+----------------------------------+

91.创建一个admin的endpoint

$openstack endpoint create --region RegionOne \

   image admin http://172.16.157.32:9292

 +--------------+----------------------------------+ | Field        | Value                            | +--------------+----------------------------------+ | enabled      | True                             | | id           | 0c37ed58103f4300a84ff125a539032d | | interface    | admin                            | | region       | RegionOne                        | | region_id    | RegionOne                        | | service_id   | 8c2c7f1b9b5049ea9e63757b5533e6d2 | | service_name | glance                           | | service_type | image                            | | url          | http:// 172.16.157.32:9292           | +--------------+----------------------------------+

92.使用yum安装glance需要的组件——如果某个rpm包安装失败，请多尝试几次。后期考虑做一个openstack的私有yum源

#yum -y install openstack-glance python-glance python-glanceclient

93.glance服务需要修改两个配置文件一个是glance-api.conf,文件一个是glance-registry.conf文件。首先修改glance-api.conf,文件

94.修改glance-api.conf还是和之前修改keystone的配置文件一样，下面列出里需要修改的变量与在文件的行数，便于查找:

verbose=True -363r--协助排除故障，打印详细纪录

notification_driver=noop -491r--

connection=mysql://glance:glance@172.16.157.32/glance -538r--

default_store=file -642r--

filesystem_store_datadir=/var/lib/glance/images/ -701r—

关于keystone的配置，注意ip修改

auth_uri = http://172.16.157.32:5000-974r--

auth_url = http://172.16.157.32:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

project_name = service

username = glance

password = glance -981--

flavor=keystone-1485—启用keystone

94-1: 修改glance-register.conf还是和之前修改keystone的配置文件一样，下面列出里需要修改的变量与在文件的行数，便于查找:

verbose=True -363r--协助排除故障，打印详细纪录

notification_driver=noop -491r--

connection=mysql://glance:glance@172.16.157.32/glance -538r--

default_store=file -642r--

filesystem_store_datadir=/var/lib/glance/images/ -701r—

关于keystone的配置，注意ip修改

auth_uri = http://172.16.157.32:5000-974r--

auth_url = http://172.16.157.32:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

project_name = service

username = glance

password = glance -981--

flavor=keystone-1485—启用keystone

95.同步glance数据库,记得去mysql里去查看glance数据库里是否生成表

# su -s /bin/sh -c "glance-manage db_sync" glance

96.设置glance服务开机启动与现在启动

#systemctl enable openstack-glance-api.service \

 openstack-glance-registry.service

 #systemctl start openstack-glance-api.service \

   openstack-glance-registry.service

97.在／root目录，将glance的一个环境变量添加道之前设置的admin-openr.sh和demo-openrc.是里

$echo "export OS_IMAGE_API_VERSION=2" \

   | tee -a admin-openrc.sh demo-openrc.sh

98.使用环境脚本

$source admin-openrc.sh

99.下载测试的镜像。可选择一个制定目录如/home

$wget http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img

100.上传镜像，在镜像存放的目录执行下面的命令

$glance image-create --name "cirros" \

   --file cirros-0.3.4-x86_64-disk.img \

   --disk-format qcow2 --container-format bare \

   --visibility public

 –progress[=============================>] 100% +------------------+--------------------------------------+ | Property         | Value                                | +------------------+--------------------------------------+ | checksum         | 133eae9fb1c98f45894a4e60d8736619     | | container_format | bare                                 | | created_at       | 2015-03-26T16:52:10Z                 | | disk_format      | qcow2                                | | id               | 38047887-61a7-41ea-9b49-27987d5e8bb9 | | min_disk         | 0                                    | | min_ram          | 0                                    | | name             | cirros                               | | owner            | ae7a98326b9c455588edd2656d723b9d     | | protected        | False                                | | size             | 13200896                             | | status           | active                               | | tags             | []                                   | | updated_at       | 2015-03-26T16:52:10Z                 | | virtual_size     | None                                 | | visibility       | public                               | +------------------+--------------------------------------+

101.确认镜像是否上传成功：

$ glance image-list +--------------------------------------+--------+ | ID                                   | Name   | +--------------------------------------+--------+ | 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros | +--------------------------------------+--------+

102.如果看到上面的图，恭喜glance安装成功，下面开始安装openstack一个重要的服务nova,包括一个控制节点和一个计算节点。我们先安装控制节点

102.使用keystone命令创建nova用户,如果提示命令不能用，尝试使用环境脚步：

$ source admin-openrc.sh

103.创建一个nova用户

$openstack user create --domain default --password-prompt nova

 User Password: Repeat User Password: +-----------+----------------------------------+ | Field     | Value                            | +-----------+----------------------------------+ | domain_id | default                          | | enabled   | True                             | | id        | 8c46e4760902464b889293a74a0c90a8 | | name      | nova                             | +-----------+----------------------------------+

104.将nova用户赋予admin角色并添加到service项目—该命令没有输出

$ openstack role add --project service --user nova admin

105.创建一个nova的服务,服务类型compute(计算)

$ openstack service create --name nova \

   --description "OpenStack Compute" compute

 +-------------+----------------------------------+ | Field       | Value                            | +-------------+----------------------------------+ | description | OpenStack Compute                | | enabled     | True                             | | id          | 060d59eac51b4594815603d75a00aba2 | | name        | nova                             | | type        | compute                          | +-------------+----------------------------------+

106.创建一个公共的endpoint——注意修改IP

$ openstack endpoint create --region RegionOne \

   compute public http://172.16.157.32:8774/v2/%\(tenant_id\)s

 +--------------+-----------------------------------------+ | Field        | Value                                   | +--------------+-----------------------------------------+ | enabled      | True                                    | | id           | 3c1caa473bfe4390a11e7177894bcc7b        | | interface    | public                                  | | region       | RegionOne                               | | region_id    | RegionOne                               | | service_id   | e702f6f497ed42e6a8ae3ba2e5871c78        | | service_name | nova                                    | | service_type | compute                                 | | url          | http:// 172.16.157.32:8774/v2/%(tenant_id)s | +--------------+-----------------------------------------+

107.创建一个内部的endpoint

$ openstack endpoint create --region RegionOne \

compute internal http://172.16.157.32:8774/v2/%\(tenant_id\)s

 +--------------+-----------------------------------------+ | Field        | Value                                   | +--------------+-----------------------------------------+ | enabled      | True                                    | | id           | e3c918de680746a586eac1f2d9bc10ab        | | interface    | internal                                | | region       | RegionOne                               | | region_id    | RegionOne                               | | service_id   | e702f6f497ed42e6a8ae3ba2e5871c78        | | service_name | nova                                    | | service_type | compute                                 | | url          | http:// 172.16.157.32:8774/v2/%(tenant_id)s | +--------------+-----------------------------------------+

108.创建一个admin的endpoint

$ openstack endpoint create --region RegionOne \

   compute admin http://172.16.157.32:8774/v2/%\(tenant_id\)s

 +--------------+-----------------------------------------+ | Field        | Value                                   | +--------------+-----------------------------------------+ | enabled      | True                                    | | id           | 38f7af91666a47cfb97b4dc790b94424        | | interface    | admin                                   | | region       | RegionOne                               | | region_id    | RegionOne                               | | service_id   | e702f6f497ed42e6a8ae3ba2e5871c78        | | service_name | nova                                    | | service_type | compute                                 | | url          | http://172.16.157.32:8774/v2/%(tenant_id)s | +--------------+-----------------------------------------+

109.yum安装nova服务的组建

# yum -y install openstack-nova-api openstack-nova-cert \

   openstack-nova-conductor openstack-nova-console \

   openstack-nova-novncproxy openstack-nova-scheduler \

   python-novaclient

110.nova服务需要编辑nove.conf配置文件

vi /etc/nova/nova.conf

111.和之前一样下面的也是该文件里面需要修改的变量，或需要打开注释的地方已经变量在文件中的行数.

112.配置的变量和行数已经变量值

rpc_backend=rabbit -61r--

my_ip=172.16.157.32—124r-

enabled_apis=osapi_compute,metadata --268r-

auth_strategy=keystone -425--

network_api_class=nova.network.neutronv2.api.API --1053r-

linuxnet_interface_driver=nova.network.linux_net.NeutronLinuxBridgeInterfaceDriver --1171r-

security_group_api=neutron --1331r-

firewall_driver=nova.virt.firewall.NoopFirewallDriver --1760r-新增的

vncserver_listen=$my_ip -1828r-

vncserver_proxyclient_address=$my_ip --1832r-

connection=mysql://nova:nova@172.16.157.32/nova -2213r--

host=$my_ip --2334r—

[关于keystone的配置，记得改ip]

auth_uri = http://172.16.157.32:5000 --2542r-

auth_url = http://172.16.157.32:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

project_name = service

username = nova

password = nova ---2549r-

lock_path=/var/lib/nova/tmp---3802r--

rabbit_host=172.16.157.32-3965r--

rabbit_port=5672 -3969r--

rabbit_userid=openstack-3981r--

rabbit_password=openstack—3985r—

113.以上的配置含义可以查看官网

http://docs.openstack.org/liberty/install-guide-rdo/nova-controller-install.html

114.同步nova数据库，记得去mysql的nova数据库查看表是否生成

# su -s /bin/sh -c "nova-manage db sync" nova

115.将nova服务添加到开机启动，并当前启动

# systemctl enable openstack-nova-api.service \   openstack-nova-cert.service openstack-nova-consoleauth.service \   openstack-nova-scheduler.service openstack-nova-conductor.service \   openstack-nova-novncproxy.service

   # systemctl start openstack-nova-api.service \   openstack-nova-cert.service openstack-nova-consoleauth.service \   openstack-nova-scheduler.service openstack-nova-conductor.service \   openstack-nova-novncproxy.service

116.校验nova是否安装成功，输入openstack host list。查看

是否有四个服务启动

117.在另一台节点openstack-node2.配置到23步。

118.用yum下载rpm openstack库(liberty是openstack一个新的版本)

yum install centos-release-openstack-liberty

119.启用epel存储库

yum install http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm

120．升级yum包：yum upgrade

121.安装openstack客服端

yum install python-openstackclient

122.安装openstack-selinux自动管理安全openstack服务政策

yum install openstack-selinux

123．安装nova计算节点

# yum install openstack-nova-compute sysfsutils

124.将openstack-node1的nova.conf配置文件拷贝到 openstack-node2里的/etc/nova/目录下覆盖计算节点的nova.conf。并进行修改

125在openstack-node1的/etc/nova目录执行命令

scp nova.conf 172.16.157.33:/etc/nova

126.对openstack-node2/etc/nova目录下的nova.conf文件进行修改

127.下面的文件变量有的和nova控制节点的配置相同。有的是单独配置的

，为了清晰全部展示出来了--

rpc_backend=rabbit --61r--

my_ip=172.16.157.167 --124r-注意这里的ip是计算节点的ip也就是openstack-node2机器的静态ip

enabled_apis=osapi_compute,metadata ---268r--

auth_strategy=keystone --425r---

network_api_class=nova.network.neutronv2.api.API ---1053r--

linuxnet_interface_driver=nova.network.linux_net.NeutronLinuxBridgeInterfaceDriver ---1171r----

security_group_api=neutron ---1331r----

firewall_driver=nova.virt.firewall.NoopFirewallDriver ----1760r—新增的

novncproxy_base_url=http://172.16.157.32:6080/vnc_auto.html --1820r--openstack-node1的ip

vncserver_listen=0.0.0.0 ---1828r---

vncserver_proxyclient_address=$my_ip ---1832r--

vnc_enabled=true --1835r--

vnc_keymap=en-us --1838r--

connection=mysql://nova:nova@172.16.157.32/nova --2213r--

host=172.16.157.32 ---2334r---openstack-node1的ip

[关于keystone的配置，记得改ip—还是openstack-node1的ip]

uth_uri = http://172.16.157.32:5000 --2542r--

auth_url = http://172.16.157.32:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

project_name = service

username = nova

password = nova ---2549r---

virt_type=vmx --2726r—根据grep –c ‘(vmx|svm)’ /proc/cpuinfo查看是否支持vmx如果返回不支持（可能吗没有返回结果）使用virt_type=qemu

lock_path=/var/lib/nova/tmp ---3965r---

rabbit_host=172.16.157.32 ---3965r--

rabbit_port=5672 ---5672r--

rabbit_userid=openstack --3981r---

rabbit_password=openstack---3985r--

128:启动nove计算服务，并添加到开机启动,如启动失败对照参数是否都修改正确

# systemctl enable libvirtd.service openstack-nova-compute.service

 # systemctl start libvirtd.service openstack-nova-compute.service

129.验证nova计算服务是否安装成功，在控制节点即openstck-node1上执行一下命令

130.验证成功链接和服务组件的信息(四个控制节点服务一个计算节点服务)

[root@openstack-node1 ~]# nova service-list +----+------------------+-----------------+----------+---------+-------+----------------------------+-----------------+ | Id | Binary | Host | Zone | Status | State | Updated_at | Disabled Reason | +----+------------------+-----------------+----------+---------+-------+----------------------------+-----------------+ | 1 | nova-consoleauth | openstack-node1 | internal | enabled | up | 2015-12-29T05:50:41.000000 | - | | 2 | nova-conductor | openstack-node1 | internal | enabled | up | 2015-12-29T05:50:39.000000 | - | | 4 | nova-scheduler | openstack-node1 | internal | enabled | up | 2015-12-29T05:50:41.000000 | - | | 5 | nova-cert | openstack-node1 | internal | enabled | up | 2015-12-29T05:50:37.000000 | - | |2015-12-28T09:49:59.000000 | - | | 6 | nova-compute | openstack-node2 | nova | enabled | up | 2015-12-29T05:50:41.000000 | - | +----+------------------+-----------------+----------+---------+-------+-----------------------131.验证与keystone是否链接成功

$ nova endpoints

 +-----------+------------------------------------------------------------+ | nova      | Value                                                      | +-----------+------------------------------------------------------------+ | id        | 1fb997666b79463fb68db4ccfe4e6a71                           | | interface | public                                                     | | region    | RegionOne                                                  | | region_id | RegionOne                                                  | | url       | http://controller:8774/v2/ae7a98326b9c455588edd2656d723b9d | +-----------+------------------------------------------------------------+ +-----------+------------------------------------------------------------+ | nova      | Value                                                      | +-----------+------------------------------------------------------------+ | id        | bac365db1ff34f08a31d4ae98b056924                           | | interface | admin                                                      | | region    | RegionOne                                                  | | region_id | RegionOne                                                  | | url       | http://controller:8774/v2/ae7a98326b9c455588edd2656d723b9d | +-----------+------------------------------------------------------------+ +-----------+------------------------------------------------------------+ | nova      | Value                                                      | +-----------+------------------------------------------------------------+ | id        | e37186d38b8e4b81a54de34e73b43f34                           | | interface | internal                                                   | | region    | RegionOne                                                  | | region_id | RegionOne                                                  | | url       | http://controller:8774/v2/ae7a98326b9c455588edd2656d723b9d | +-----------+------------------------------------------------------------+  +-----------+----------------------------------+ | glance    | Value                            | +-----------+----------------------------------+ | id        | 41ad39f6c6444b7d8fd8318c18ae0043 | | interface | admin                            | | region    | RegionOne                        | | region_id | RegionOne                        | | url       | http://controller:9292           | +-----------+----------------------------------+ +-----------+----------------------------------+ | glance    | Value                            | +-----------+----------------------------------+ | id        | 50ecc4ce62724e319f4fae3861e50f7d | | interface | internal                         | | region    | RegionOne                        | | region_id | RegionOne                        | | url       | http://controller:9292           | +-----------+----------------------------------+ +-----------+----------------------------------+ | glance    | Value                            | +-----------+----------------------------------+ | id        | 7d3df077a20b4461a372269f603b7516 | | interface | public                           | | region    | RegionOne                        | | region_id | RegionOne                        | | url       | http://controller:9292           | +-----------+----------------------------------+  +-----------+----------------------------------+ | keystone  | Value                            | +-----------+----------------------------------+ | id        | 88150c2fdc9d406c9b25113701248192 | | interface | internal                         | | region    | RegionOne                        | | region_id | RegionOne                        | | url       | http://controller:5000/v2.0      | +-----------+----------------------------------+ +-----------+----------------------------------+ | keystone  | Value                            | +-----------+----------------------------------+ | id        | cecab58c0f024d95b36a4ffa3e8d81e1 | | interface | public                           | | region    | RegionOne                        | | region_id | RegionOne                        | | url       | http://controller:5000/v2.0      | +-----------+----------------------------------+ +-----------+----------------------------------+ | keystone  | Value                            | +-----------+----------------------------------+ | id        | fc90391ae7cd4216aca070042654e424 | | interface | admin                            | | region    | RegionOne                        | | region_id | RegionOne                        | | url       | http://controller:35357/v2.0     | +-----------+----------------------------------+

132.验证与glance是否链接成功

$ nova image-list

 +--------------------------------------+--------+--------+--------+ | ID                                   | Name   | Status | Server | +--------------------------------------+--------+--------+--------+ | 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros | ACTIVE |        | +--------------------------------------+--------+--------+-------

133.如果以上验证操作没有报错提示，恭喜你nova计算服务安装成功了，下面我们需要安装与网络相关的neutron服务，它和nova一样包括控制节点(openstack-noed1)和计算节点(openstack-node2)并且在他们直接也有关联。先安装控制节点(openstack-noed1)

134.用keyston命令创建neutron用户，密码也是neutron

$ openstack user create --domain default --password-prompt neutron User Password: Repeat User Password:

+-----------+----------------------------------+ | Field     | Value                            | +-----------+----------------------------------+ | domain_id | default                          | | enabled   | True                             | | id        | b20a6692f77b4258926881bf831eb683 | | name      | neutron                          | +-----------+----------------------------------+

135.给neutron用户赋予admin角色并添加到service服务里

$ openstack role add --project service --user neutron admin

136.创建neutron服务类型为network

$ openstack service create --name neutron \

   --description "OpenStack Networking" network

 +-------------+----------------------------------+ | Field       | Value                            | +-------------+----------------------------------+ | description | OpenStack Networking             | | enabled     | True                             | | id          | f71529314dab4a4d8eca427e701d209e | | name        | neutron                          | | type        | network                          | +-------------+----------------------------------+

137.创建一个公共的endpoint——注意修改ip

$ openstack endpoint create --region RegionOne \

   network public http://172.16.157.32:9696

 +--------------+----------------------------------+ | Field        | Value                            | +--------------+----------------------------------+ | enabled      | True                             | | id           | 85d80a6d02fc4b7683f611d7fc1493a3 | | interface    | public                           | | region       | RegionOne                        | | region_id    | RegionOne                        | | service_id   | f71529314dab4a4d8eca427e701d209e | | service_name | neutron                          | | service_type | network                          | | url          | http://172.16.157.32:9696           | +--------------+----------------------------------+

138.创建一个内部的endpoint

$ openstack endpoint create --region RegionOne \

network internal http://172.16.157.32:9696

139.创建一个admin的endpoint

$ openstack endpoint create --region RegionOne \

network admin http://172.16.157.32:9696

140.使用yum下载安装neutron服务

# yum install openstack-neutron openstack-neutron-ml2 \

openstack-neutron-linuxbridge python-neutronclient ebtables ipset

140-0.修改neutron配置文件，vi /etc/neutron/neutron.conf同样根据下面的变量来进行修改，和之前的一样

140-1. neutron的neutron.conf文件需要修改的变量如下：

core_plugin =ml2 --60r--

service_plugins = router--77r--

auth_strategy = keystone --92r--

notify_nova_on_port_status_changes=True --360r--

notify_nova_on_port_data_changes = True --364r--

nova_url = http://172.16.157.32:8774/v2 --357r—

[keyston配置]

auth_uri = http://172.16.157.32:5000 --717r--

auth_url = http://172.16.157.32:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

project_name = service

username = neutron

password = neutron --724r—

注意如果下面的变量没有注释，需要注释掉，在725r到729r左右

#auth_uri = http://127.0.0.1:35357/v2.0/

#identity_uri = http://127.0.0.1:5000

#admin_tenant_name = %SERVICE_TENANT_NAME%

#admin_user = %SERVICE_USER%

#admin_password = %SERVICE_PASSWORD%

connection = mysql://neutron:neutron@172.16.157.32/neutron --737r--

auth_url = http://172.16.157.32:35357 --780r—新增

auth_plugin = password

project_domain_id = default

user_domain_id = default

project_name = service

username = nova

password = nova --786r—新增

lock_path = $state_path/lock --817r

rabbit_host = 172.16.157.32 --997r--

rabbit_port = 5672 --1001r--

rabbit_userid = openstack --1013r--

rabbit_password = openstack--1017r---

141-0.修改neutron的linuxbridge_agent.ini配置文件

vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini

141-1.配置参数如下：

physical_interface_mappings = physnet1:eno16777736 ---9r—

注意eno16777736为自己机器网卡的名字，可以通过

ifconfig查看到 :

enable_vxlan = false --16r--

prevent_arp_spoofing = True--51r--

firewall_driver=neutron.agent.linux.iptables_firewall.IptablesFirewallDriver --56r--

enable_security_group = True—60r—

141-1. 修改neutron的dhcp_agent.ini配置文件，vi /etc/neutron/ dhcp_agent.ini同样根据下面的变量来进行修改，和之前的一样

interface_driver=neutron.agent.linux.interface.BridgeInterfaceDriver --27r--

dhcp_driver =neutron.agent.linux.dhcp.Dnsmasq --31r--

enable_isolated_metadata = true—52r---

141.修改neutron配置文件，vi /etc/neutron/metadata_agent.ini同样根据下面的变量来进行修改，和之前的一样

142.neutron的metadata_agent.ini文件需要修改的变量如下：

debug = True --3r—

[keyston配置]

auth_uri = http://172.16.157.32:5000 --4r--

auth_url = http://172.16.157.32:35357

auth_plugin = password

auth_region = RegionOne

project_domain_id = default

user_domain_id = default

project_name = service

username = neutron

password = neutron---12r—

注意：需要注释以下变量如果没有注释，在15r到23r的位置

#auth_url = http://localhost:5000/v2.0

#auth_region = RegionOne

#admin_tenant_name = %SERVICE_TENANT_NAME%

#admin_user = %SERVICE_USER%

#admin_password = %SERVICE_PASSWORD%

nova_metadata_ip = 172.16.157.32 ---29r--

metadata_proxy_shared_secret = neutron---52r---

142.由于neutron和nova和紧密的关联所以需要在nova的nova.cof文件里添加一些neutron的信息，如keystone，添加的变量如下3032

url = http://172.16.157.32:9696 --3032r—新增

auth_url = http://172.16.157.32:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

region_name = RegionOne

project_name = service

username = neutron

password=neutron --3040r—新增

service_metadata_proxy=true -－3047r--

metadata_proxy_shared_secret=neutron—3051r—

143.修改neutron的ml2_conf.ini配置文件，

vi /etc/neutron/plugins/ml2/ml2_conf.ini

144.具体需要修改的参数如下

type_drivers = local,flat,vlan,gre,vxlan,geneve --5r--

tenant_network_types = vlan,gre,vxlan,geneve --12r--

mechanism_drivers = openvswitch,linuxbridge---18r---

extension_drivers = port_security—27r-

flat_networks = physnet1 ---69r---

enable_ipset = True---120r----

145.在/etc/neutron/目录下创建一个ml2_conf.ini配置文件软链接

# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

146.同步neutron数据库

# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf \

--config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

146.重启nova服务

# systemctl restart openstack-nova-api.service

147．启动neutron服务并添加到开机自动启动

# systemctl enable neutron-server.service \

neutron-linuxbridge-agent.service neutron-dhcp-agent.service \

neutron-metadata-agent.service

# systemctl start neutron-server.service \

neutron-linuxbridge-agent.service neutron-dhcp-agent.service \

neutron-metadata-agent.service

148.校验neutron服务是否安装成功输入

neutron agent-list 返回三个服务

149.neutron控制服务已成功安装，下面进行neutron计算节点安装

150.通过yum下载安装neutron计算节点服务——注意在openstack-node2上面下载安装

yum install openstack-neutron openstack-neutron-linuxbridge ebtables ipset

151.同样需要修改/etc/neutron/neutron.conf, linuxbridge_agent.ini, ml2_conf.ini配置文件，才用和nova一样的方法，将openstack-node1里的文件copy过去覆盖掉，注意文件目录是否正确

scp neutron.conf 172.16.157.33:/etc/neutron/

scp plugins/ml2/linuxbridge_agent.ini 172.16.157.33:/etc/neutron/plugins/ml2/

scp plugins/ml2/ml2_conf.ini 172.16.157.33:/etc/neutron/plugins/ml2/

152.在openstack-node2上修改/etc/nova/nova.conf文件，添加neutron的keysteon的配置文件.配置变量如下：

url = http://172.16.157.32:9696--3032r--新增

auth_url = http://172.16.157.32:35357

auth_plugin = password

project_domain_id = default

user_domain_id = default

region_name = RegionOne

project_name = service

username = neutron

password = neutron--3040r--新增

153.为ml2_conf.ini文件创建一个软链接

# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

154.将neutron桥接代理启动并加入开机启动

# systemctl enable neutron-linuxbridge-agent.service

# systemctl start neutron-linuxbridge-agent.service

155.校验neutron计算服务是否安装成功。注意是至少个四个服务显示才算启动安装成功

156.如果列表显示里四个服务，恭喜neutron安装已成功，下面我们就可以开始创建我们的第一个虚拟机了

157.首先我们需要创建一个网络。注意是控制节点opensack-node1上操作

$neutron net-create flat --shared --provider:physical_network physnet1 \

--provider:network_type flat

158.创建一个子网络,

$ neutron subnet-create flat 172.16.157.0/24 --name public \

--allocation-pool start=172.16.157.101,end=172.16.157.200 \

--dns-nameserver 172.16.157.2 --gateway 172.16.157.2

Created a new subnet: +-------------------+----------------------------------------------------+ | Field | Value | +-------------------+----------------------------------------------------+ | allocation_pools | {"start": "203.0.113.101", "end": "203.0.113.200"} | | cidr | 203.0.113.0/24 | | dns_nameservers | 8.8.4.4 | | enable_dhcp | True | | gateway_ip | 203.0.113.1 | | host_routes | | | id | 5cc70da8-4ee7-4565-be53-b9c011fca011 | | ip_version | 4 | | ipv6_address_mode | | | ipv6_ra_mode | | | name | public | | network_id | 0e62efcd-8cee-46c7-b163-d8df05c3c5ad || subnetpool_id | | | tenant_id | d84313397390425c8ed50b2f6e18d092 | +-------------------+--------------------------------------------

159.使用命令neutron subnet-list查看是否创建成功

+--------------------------------------+-------------+-----------------+------------------------------------------------------+ | id | name | cidr | allocation_pools | +--------------------------------------+-------------+-----------------+------------------------------------------------------+ | 336fc40d-5aa9-42ea-9f03-694729c8fef7 | flat-subnet | 172.16.157.0/24 | {"start": "172.16.157.100", "end": "172.16.157.200"} | +--------------------------------------+-------------+-----------------+----------------------------

160.使用命令neutron net-list查看可用网络列表

$ neutron net-list +--------------------------------------+---------+-----------------------------------------------------+ | id | name | subnets | +--------------------------------------+---------+-----------------------------------------------------+ | 7e25a106-e978-4adb-a4ef-d46c6170254a | public | 0e62efcd-8cee-46c7-b163-d8df05c3c5ad 203.0.113.0/24 | +--------------------------------------+---------+-----------------------------------------------------+

161.生成并添加一个秘钥对。在openstack-node1roo目录

$ ssh-keygen -q -N ""

$ nova keypair-add --pub-key .ssh/id_rsa.pub mykey

162.验证密钥对

163.添加安全组规则

$ nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0

+-------------+-----------+---------+-----------+--------------+ | IP Protocol | From Port | To Port | IP Range | Source Group | +-------------+-----------+---------+-----------+--------------+ | icmp | -1 | -1 | 0.0.0.0/0 | | +-------------+-----------+---------+-----------+-----------

163.允许ssh访问

$ nova secgroup-add-rule default tcp 22 22 0.0.0.0/0 +-------------+-----------+---------+-----------+--------------+ | IP Protocol | From Port | To Port | IP Range | Source Group | +-------------+-----------+---------+-----------+--------------+| tcp | 22 | 22 | 0.0.0.0/0 | | +-------------+-----------+---------+-----------+-----------

164.列出可用的资源：

$ nova flavor-list

+-----+-----------+-----------+------+-----------+------+-------+-------------+-----------+ | ID | Name | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public | +-----+-----------+-----------+------+-----------+------+-------+-------------+-----------+ | 1 | m1.tiny | 512 | 1 | 0 | | 1 | 1.0 | True | | 2 | m1.small | 2048 | 20 | 0 | | 1 | 1.0 | True | | 3 | m1.medium | 4096 | 40 | 0 | | 2 | 1.0 | True | | 4 | m1.large | 8192 | 80 | 0 | | 4 | 1.0 | True | | 5 | m1.xlarge | 16384 | 160 | 0 | | 8 | 1.0 | True | +-----+-----------+-----------+------+-----------+------+-------+

165.列出可用镜像

166.列出可用网络

167.列出可用安全组

168.启动一个虚拟机注意填写net-id

$ nova boot --flavor m1.tiny --image cirros --nic net-id=c97642e4-cfd3-43b6-ae8c-0c377e00a501 \ --security-group default --key-name mykey chao-instance

+--------------------------------------+-----------------------------------------------+ | Property | Value | +--------------------------------------+-----------------------------------------------+ | OS-DCF:diskConfig | MANUAL | | OS-EXT-AZ:availability_zone | nova | | OS-EXT-STS:power_state | 0 | | OS-EXT-STS:task_state | scheduling | | OS-EXT-STS:vm_state | building | | OS-SRV-USG:launched_at | - | | OS-SRV-USG:terminated_at | - | | accessIPv4 | | | accessIPv6 | | | adminPass | hdF4LMQqC5PB | | config_drive | | | created | 2015-09-17T21:58:18Z || flavor | m1.tiny (1) | | hostId | | | id | 181c52ba-aebc-4c32-a97d-2e8e82e4eaaf | | image | cirros (38047887-61a7-41ea-9b49-27987d5e8bb9) | | key_name | key | | metadata | {} | | name | public-instance | | os-extended-volumes:volumes_attached | [] | | progress | 0 | | security_groups | default | | status | BUILD | | tenant_id | f5b2ccaa75ac413591f12fcaa096aa5c | | updated | 2015-09-17T21:58:18Z | | user_id | 684286a9079845359882afc3aa5011fb | +--------------------------------------+-----------------------------------------------+

169．检查虚拟机状态

170．测试创建的虚拟机是否能ping通

ping 172.16.157.101

171.使用ssh登录172.16.157.101虚拟机

ssh cirros@172.16.157.101

用户名：cirros

密码：cubswin:)

172.获取一个web访问路径

$ nova get-vnc-console public-instance novnc +-------+------------------------------------------------------------------------------------+ | Type | Url | +-------+------------------------------------------------------------------------------------+ | novnc | http://controller:6080/vnc_auto.html?token=2f6dd985-f906-4bfc-b566-e87ce656375b | +-------+--------------------------------------------------------

173.如果一切都成功了，恭喜openstak搭建成功！！！！！！！！！

174.高大上web页面dashboard安装

175.下载dashboard服务

# yum install openstack-dashboard

176.修改配置文件： vi /etc/openstack-dashboard/local_settings

OPENSTACK_HOST = "172.16.157.32"—138r--

ALLOWED_HOSTS = ['*', ] –29R---

CACHES = { 'default': { 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache', 'LOCATION': '127.0.0.1:11211', } }—108R—注意注释掉后面的caches

#CACHES = { 116 # 'default': {

# 'BACKEND': 'django.core.cache.backends.locmem.LocMemCache',

# }

OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"—140R--