openstack ussuri 安装脚本

admin

#!/bin/bash / M$ a0 S" k) n; V #Centos8最小化部署安装openstack Ussuri 8 Q) u3 C$ d0 F  l& ?& O #共两台主机，分别是一台控制节点，一台计算节点 #1、控制节点内存4096M。双网卡，分别为eth0:10.0.0.11，eth1:10.0.0.12   ?; d: N) r4 ]* W" \) Y; @ #2、计算节点内存4096M。双网卡，分别为eth0:10.0.0.31，eth1:10.0.0.32 1 M9 R3 J1 n/ L0 a8 z ) A4 l' q7 S# a% b# ?+ Q: [, M! ? #设置阿里云yum源 5 @8 N3 Y! @- Y  G% U9 r1 E curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo - X. U2 w- _8 O0 _2 } rm -f /etc/yum.repos.d/CentOS-AppStream.repo /etc/yum.repos.d/CentOS-PowerTools.repo /etc/yum.repos.d/CentOS-centosplus.repo /etc/yum.repos.d/CentOS-Extras.repo && rm -rf /var/cache/yum && yum makecache && yum -y update && yum -y autoremove #关闭防火墙 + a+ Y4 z! u- L2 O: a. {- G systemctl stop firewalld && systemctl disable firewalld 1 H2 {' ]2 p8 U( l- w #关闭SELinux " C7 w% h& z- M6 M% k$ w: g setenforce 0 ! C) a3 ], x/ W' x sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config #关闭swap分区 swapoff -a sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab ! Y+ E  u$ [. ]- o1 m6 g7 X7 N ! h- ?6 \- U. p1 D5 `& G #设置内核 # o1 G; C3 I. [7 Q# ]3 x6 ? modprobe bridge modprobe br_netfilter 6 \# D0 m  v; ~0 P cat > /etc/sysconfig/modules/neutron.modules <<EOF 0 B6 W- y- A+ T& O% x0 ~( V+ } #!/bin/bash ; S8 n8 ?& \/ k modprobe -- bridge modprobe -- br_netfilter - e/ X8 j: m6 \: M3 [ EOF 4 z- L8 G% d* o chmod 755 /etc/sysconfig/modules/neutron.modules && bash /etc/sysconfig/modules/neutron.modules / s# u' ]; c- o! @2 H" U. t echo "vm.max_map_count=262144" >> /etc/sysctl.conf ; Z: e$ o2 y4 @7 k" E5 ~ echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf . i0 |6 }8 \/ A# z6 Q8 y4 B: N echo "net.bridge.bridge-nf-call-iptables=1" >> /etc/sysctl.conf 5 I  c1 ~4 b9 G" s echo "net.bridge.bridge-nf-call-ip6tables=1" >> /etc/sysctl.conf % {7 V- o6 N9 M5 r5 O sysctl -p #设置时间同步 4 b% t0 H' H# a% i/ o" u  }2 P yum install -y chrony && yum -y autoremove sed -i '/^pool/d' /etc/chrony.conf 7 V, {/ {- v- U% T; ` sed -i '/^server/d' /etc/chrony.conf echo "pool ntp.aliyun.com iburst" >> /etc/chrony.conf 1 c9 I. Z; V. G/ m  I5 A' i. s2 Q systemctl start chronyd.service && systemctl enable chronyd.service ; N9 |9 N: _( V. y+ W5 f #控制节点 设置hostname 9 U. M1 |' n$ ~! c: H+ Z* f hostnamectl set-hostname controller 2 @+ U$ S6 u; X0 a4 e& f7 d #计算节点 设置hostname / j$ U4 u# [& U6 |- X' m( L hostnamectl set-hostname compute1 * |- v9 I2 X' ~! q( m - q% c8 I: U8 ?7 l) ?* c #添加host echo "10.0.0.11 controller" >> /etc/hosts echo "10.0.0.31 compute1" >> /etc/hosts 5 T: `" |7 F* m/ D' n  | #安装基础组件 yum install -y centos-release-openstack-ussuri " P! J( D( m4 K) [/ `& M& p: g yum config-manager --set-enabled PowerTools / w0 H# w7 J- ?' F2 F9 ~ yum upgrade -y   z1 g( \4 \1 G" H( Y yum install -y python3-openstackclient   f3 b3 V* ]2 D7 n3 [ #控制节点 安装Mariadb ( q0 X% }6 i/ W0 {' @2 n$ y yum install -y mariadb mariadb-server python2-PyMySQL : z, ?4 g3 D  k' h3 m: n tee /etc/my.cnf.d/openstack.cnf <<-'EOF' 7 J- `% ?: v( R5 s( A' M9 v [mysqld] " `! @% K+ P" [) a bind-address = 10.0.0.11 default-storage-engine = innodb 8 x7 M/ Y! F9 w innodb_file_per_table = on max_connections = 4096 collation-server = utf8_general_ci 4 T6 S! R+ ?1 _7 Z: I+ _2 D# J character-set-server = utf8 EOF systemctl enable mariadb.service && systemctl start mariadb.service ( ^8 m: w6 U; S! @# v echo -e "\nY\n123456\n123456\nY\nn\nY\nY\n" | mysql_secure_installation % a# L) D  ]% O/ q7 c; T1 k) O #控制节点 安装RabbitMQ : v! }2 D5 M( i$ b& [ yum install -y rabbitmq-server systemctl enable rabbitmq-server.service && systemctl start rabbitmq-server.service rabbitmqctl add_user openstack 123456 ( {% n- e* h% n rabbitmqctl set_permissions openstack ".*" ".*" ".*" #控制节点 安装Memcached 4 h, a& v, o4 r1 [* N4 i( g; O yum install -y memcached python3-memcached sed -i "s/-l 127.0.0.1,::1/-l 127.0.0.1,::1,controller/g" /etc/sysconfig/memcached systemctl enable memcached.service && systemctl start memcached.service #控制节点 安装Etcd yum install -y etcd 1 e# ^! W! @" Y$ n- I7 |- t7 i6 P rm -f /etc/etcd/etcd.conf 0 [* [; p4 y9 L, e# C tee /etc/etcd/etcd.conf <<-'EOF' #[Member] # E- f+ p( R( y- \" c9 T ETCD_DATA_DIR="/var/lib/etcd/default.etcd" ! G1 u: o5 Q; p5 `( n6 ?$ [3 g+ A ETCD_LISTEN_PEER_URLS=" http://10.0.0.11:2380 " ETCD_LISTEN_CLIENT_URLS=" http://10.0.0.11:2379 " 6 T5 A# m& C, D! U- l ETCD_NAME="controller" #[Clustering] ETCD_INITIAL_ADVERTISE_PEER_URLS=" http://10.0.0.11:2380 " ' w" A: T; c# e# _% o1 v ETCD_ADVERTISE_CLIENT_URLS=" http://10.0.0.11:2379 " ETCD_INITIAL_CLUSTER="controller= http://10.0.0.11:2380 " / N( h" p# Q4 c7 H' y0 m ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01" ETCD_INITIAL_CLUSTER_STATE="new" EOF ( q* [: R: x  }# g; w: E systemctl enable etcd && systemctl start etcd #控制节点 安装Identity service mysql -uroot -p123456 -e "CREATE DATABASE keystone" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456'" yum install -y openstack-keystone httpd python3-mod_wsgi sed -i "556c connection = mysql+ pymysql://keystone:123456@controller/keystone " /etc/keystone/keystone.conf + Y4 [; l, a; M2 t6 d6 J sed -i "2418c provider = fernet" /etc/keystone/keystone.conf su -s /bin/sh -c "keystone-manage db_sync" keystone keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone keystone-manage credential_setup --keystone-user keystone --keystone-group keystone keystone-manage bootstrap --bootstrap-password 123456 \ ' X. U% |4 z6 C  b& p --bootstrap-admin-url http://controller:5000/v3/ \ 2 c% B" ]' G% j& F! V --bootstrap-internal-url http://controller:5000/v3/ \ % r& h' r$ P* |) z4 N --bootstrap-public-url http://controller:5000/v3/ \ 5 {* T" }5 {8 p! A/ G9 \" z --bootstrap-region-id RegionOne * k" I# A+ z) A$ `# b( @9 R' h$ a9 j echo "ServerName controller" >> /etc/httpd/conf/httpd.conf % y% C; {- |6 l# y ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/ % ?) F. T1 w2 ]9 u3 a! O systemctl enable httpd.service && systemctl start httpd.service echo "export OS_USERNAME=admin" >> /etc/profile echo "export OS_PASSWORD=123456" >> /etc/profile echo "export OS_PROJECT_NAME=admin" >> /etc/profile # x" M" N! V* N# O) q' o+ O+ T echo "export OS_USER_DOMAIN_NAME=Default" >> /etc/profile echo "export OS_PROJECT_DOMAIN_NAME=Default" >> /etc/profile echo "export OS_AUTH_URL= http://controller:5000/v3 " >> /etc/profile : U+ q7 D; ~- h2 W9 V! \ echo "export OS_IDENTITY_API_VERSION=3" >> /etc/profile 9 I: z1 y* W! \1 Z2 }1 o$ K source /etc/profile 1 c+ {5 x  r8 m7 W9 n- p openstack project create --domain default --description "Service Project" service 7 \8 S$ I3 o' K0 O* j& Y& d' I #控制节点 安装Image service mysql -uroot -p123456 -e "CREATE DATABASE glance" 0 O* c7 C5 R9 g# C/ l3 c7 v. R mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '123456'" ; @! O) r1 V/ _$ A1 {0 N mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '123456'" - O) `! n4 C, V$ s openstack user create --domain default --password 123456 glance openstack role add --project service --user glance admin * b, G2 N/ E3 e+ v, T) h$ n2 E openstack service create --name glance --description "OpenStack Image" image openstack endpoint create --region RegionOne image public http://controller:9292 6 q* [9 M, T6 {: B7 v( l2 U& i' I openstack endpoint create --region RegionOne image internal http://controller:9292 ' f! ~) _) c; H- E! T openstack endpoint create --region RegionOne image admin http://controller:9292 yum install -y openstack-glance sed -i "2062c connection = mysql+ pymysql://glance:123456@controller/glance " /etc/glance/glance-api.conf & w5 g" _. M- E$ \: ~ sed -i "5034c www_authenticate_uri = http://controller:5000 " /etc/glance/glance-api.conf sed -i "5035c auth_url = http://controller:5000 " /etc/glance/glance-api.conf % D3 C5 I2 j! _9 U! D! R( w sed -i "5036c memcached_servers = controller:11211" /etc/glance/glance-api.conf sed -i "5037c auth_type = password" /etc/glance/glance-api.conf sed -i "5038c project_domain_name = Default" /etc/glance/glance-api.conf 7 m: P. X; S9 B( U sed -i "5039c user_domain_name = Default" /etc/glance/glance-api.conf sed -i "5040c project_name = service" /etc/glance/glance-api.conf ! p2 [- G( W" L! N$ K" r9 ~ sed -i "5041c username = glance" /etc/glance/glance-api.conf sed -i "5042c password = 123456" /etc/glance/glance-api.conf sed -i "5678c flavor = keystone" /etc/glance/glance-api.conf . }3 z% {7 p9 p% e/ s sed -i "3413c stores = file,http" /etc/glance/glance-api.conf sed -i "3414c default_store = file" /etc/glance/glance-api.conf & b* Q: D* _, k sed -i "3415c filesystem_store_datadir = /var/lib/glance/images/" /etc/glance/glance-api.conf su -s /bin/sh -c "glance-manage db_sync" glance systemctl enable openstack-glance-api.service && systemctl start openstack-glance-api.service . f6 E% U$ C* r1 i2 r$ O 6 I, s, u% A/ X+ o/ _6 W #控制节点 安装Placement service 1 \' |$ c2 r! ?0 A mysql -uroot -p123456 -e "CREATE DATABASE placement" 1 V+ ?, [% N' g/ Y$ P mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '123456'" openstack user create --domain default --password 123456 placement openstack role add --project service --user placement admin openstack service create --name placement --description "Placement API" placement & A, S4 |# I2 S/ X8 X+ |8 M1 a openstack endpoint create --region RegionOne placement public http://controller:8778 openstack endpoint create --region RegionOne placement internal http://controller:8778 $ e6 ^  k% j0 T% T  t# @5 p openstack endpoint create --region RegionOne placement admin http://controller:8778 + `" M2 ^* P( G6 Y! e yum install -y openstack-placement-api   A7 M! Z0 a# l+ Q/ w sed -i "507c connection = mysql+ pymysql://placement:123456@controller/placement " /etc/placement/placement.conf sed -i "192c auth_strategy = keystone" /etc/placement/placement.conf sed -i "241c auth_url = http://controller:5000/v3 " /etc/placement/placement.conf sed -i "242c memcached_servers = controller:11211" /etc/placement/placement.conf sed -i "243c auth_type = password" /etc/placement/placement.conf sed -i "244c project_domain_name = Default" /etc/placement/placement.conf ; S6 t! A5 ?1 n sed -i "245c user_domain_name = Default" /etc/placement/placement.conf sed -i "246c project_name = service" /etc/placement/placement.conf ! X5 @1 E: _+ E: x sed -i "247c username = placement" /etc/placement/placement.conf sed -i "248c password = 123456" /etc/placement/placement.conf su -s /bin/sh -c "placement-manage db sync" placement 0 [2 @% N5 q6 a systemctl restart httpd 4 l, y# q, D0 L" r6 Z 2 h' d: f0 E  ~2 E; W8 b #控制节点 安装Compute service mysql -uroot -p123456 -e "CREATE DATABASE nova_api" 1 P2 k8 C& _  l0 E8 t mysql -uroot -p123456 -e "CREATE DATABASE nova" mysql -uroot -p123456 -e "CREATE DATABASE nova_cell0" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" 8 }0 f: w. |4 f9 ] mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '123456'"   Y  p9 o2 \8 h3 Y3 D' ?# L mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY '123456'" , O' F4 }6 B, N) R' b, T% c mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '123456'" 9 L/ l6 Z+ N! p0 `2 p  K openstack user create --domain default --password 123456 nova + q( Q, W% f- b! \ openstack role add --project service --user nova admin ) b% d6 r4 V# c; @# B0 b5 ~ openstack service create --name nova --description "OpenStack Compute" compute openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1 openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1 openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1 yum install -y openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler - F& U4 S. s' S+ c* \ sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf sed -i "3c transport_url = rabbit://openstack:123456@controller:5672/ " /etc/nova/nova.conf & z% \" Y0 B$ u8 d7 H& X sed -i "4c my_ip = 10.0.0.11" /etc/nova/nova.conf sed -i "1079c connection = mysql+ pymysql://nova:123456@controller/nova_api " /etc/nova/nova.conf & U& _4 V* H. f; a/ v sed -i "1622c connection = mysql+ pymysql://nova:123456@controller/nova " /etc/nova/nova.conf sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf ) t( J. ]- C6 z sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf 2 g; W4 e" I- D2 H* b0 l. M$ o sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf - o1 D) L9 b( @ sed -i "2564c auth_type = password" /etc/nova/nova.conf sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf 0 a0 d! ~, O8 n8 q3 g sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf 5 j+ q6 O$ E# w& c' _1 m sed -i "2567c project_name = service" /etc/nova/nova.conf sed -i "2568c username = nova" /etc/nova/nova.conf sed -i "2569c password = 123456" /etc/nova/nova.conf . ^& f, _* V& k! z sed -i "5171c enabled = true" /etc/nova/nova.conf sed -i '5172c server_listen = $my_ip' /etc/nova/nova.conf sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf ! s0 K5 t4 W& E, T3 v sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf 3 ]" T# ~% w8 ~ sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf 3 c3 D6 w2 A: Z9 G( r, w sed -i "4095c project_name = service" /etc/nova/nova.conf 7 r7 T" S: J0 a; H( r+ s sed -i "4096c auth_type = password" /etc/nova/nova.conf ! j: v9 X, {9 F0 ?& j5 Y sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf 9 Q( A$ A/ ]1 j2 j8 V% i sed -i "4099c username = placement" /etc/nova/nova.conf * n2 T" O1 @* N& C9 j/ y, J; \1 } sed -i "4100c password = 123456" /etc/nova/nova.conf sed -i "4509c discover_hosts_in_cells_interval = 300" /etc/nova/nova.conf ! v$ Z' \% O; V su -s /bin/sh -c "nova-manage api_db sync" nova su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova $ ?& Y* r9 b& I9 M3 {8 A/ ]  H& A, ~ su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova . A1 @  }, l7 M0 N su -s /bin/sh -c "nova-manage db sync" nova systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service && systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service #计算节点 安装Compute service yum install -y openstack-nova-compute / }% ^$ T* h9 ^/ {, V4 J) C sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf sed -i "3c transport_url = rabbit://openstack:123456@controller " /etc/nova/nova.conf sed -i "4c my_ip = 10.0.0.31" /etc/nova/nova.conf 3 }+ K0 n4 a7 r: r, K sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf 3 i$ c' W. J6 U sed -i "2561c www_authenticate_uri = http://controller:5000/ " /etc/nova/nova.conf sed -i "2562c auth_url = http://controller:5000/ " /etc/nova/nova.conf 7 q$ ?( q( D" O- h9 N sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf * q2 I5 x9 l- A1 Q sed -i "2564c auth_type = password" /etc/nova/nova.conf 8 h+ n% D1 Q7 i/ l: R  K sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf / i$ |( a# p. L/ d6 a sed -i "2567c project_name = service" /etc/nova/nova.conf sed -i "2568c username = nova" /etc/nova/nova.conf sed -i "2569c password = 123456" /etc/nova/nova.conf sed -i "5171c enabled = true" /etc/nova/nova.conf sed -i "5172c server_listen = 0.0.0.0" /etc/nova/nova.conf sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf   a) ?- U# \( P" v" k: o( w sed -i "5174c novncproxy_base_url = http://controller:6080/vnc_auto.html " /etc/nova/nova.conf ' w  u" w) c% ~% \$ ] sed -i "1937c api_servers = http://controller:9292 " /etc/nova/nova.conf ' J  G" m6 _. z" y% R- f sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf 7 g" J' g8 R' I  \1 c- l/ i sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf ' h& ^8 C; [" A. Z sed -i "4095c project_name = service" /etc/nova/nova.conf ) m2 d3 F  }6 O$ ^ sed -i "4096c auth_type = password" /etc/nova/nova.conf 6 v( w) a; T1 D. ]; E3 F sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf sed -i "4098c auth_url = http://controller:5000/v3 " /etc/nova/nova.conf sed -i "4099c username = placement" /etc/nova/nova.conf . P+ G- u) [6 |- f. ~" Y5 L0 X sed -i "4100c password = 123456" /etc/nova/nova.conf #执行命令，查看是否支持CPU虚拟化，如果大于0则支持。 ' e2 Z* L% R; d/ A9 ^2 k! S( f) f2 O egrep -c '(vmx|svm)' /proc/cpuinfo #如果不支持的话还需要执行下面的命令 sed -i "2722c virt_type = qemu" /etc/nova/nova.conf . B5 s- A  b$ O- F systemctl enable libvirtd.service openstack-nova-compute.service && systemctl start libvirtd.service openstack-nova-compute.service #控制节点 计算节点从注册到发现会有延迟，根据discover_hosts_in_cells_interval 配置轮询发现时间，可以执行下面命令手动发现计算节点 su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova ' E5 J; l3 i7 V; O6 c# R2 x ! _3 A- V5 y9 m! ]: ]& ~1 F #控制节点 安装Networking service 5 j+ H, w2 O8 H" j  K: p mysql -uroot -p123456 -e "CREATE DATABASE neutron" mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456'" - w% Z2 W# n- ~. c' P2 R mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456'" " I* Q# t" U# C8 z; P$ ]" A openstack user create --domain default --password 123456 neutron : A: n7 o( J* g+ L2 x: M# ?( w openstack role add --project service --user neutron admin : T& N% O# }# u* C* G openstack service create --name neutron --description "OpenStack Networking" network openstack endpoint create --region RegionOne network public http://controller:9696 openstack endpoint create --region RegionOne network internal http://controller:9696 3 Z% I4 s% j+ x5 K& Z; c2 t6 Y openstack endpoint create --region RegionOne network admin http://controller:9696 yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables 8 e7 m0 a& A3 Q5 B1 ^" A4 @9 [& q #配置服务器组件 sed -i "2c core_plugin = ml2" /etc/neutron/neutron.conf $ X; C7 ~! \5 j" k: w, X; a' } sed -i "3c service_plugins = router" /etc/neutron/neutron.conf + D. r+ g# U7 r) @ sed -i "4c allow_overlapping_ips = true" /etc/neutron/neutron.conf % p1 Y! T5 I1 i sed -i "5c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf sed -i "6c auth_strategy = keystone" /etc/neutron/neutron.conf $ i+ D  r( X: X) E" | sed -i "7c notify_nova_on_port_status_changes = true" /etc/neutron/neutron.conf - L2 u# m1 M; _- R  w; T& f sed -i "8c notify_nova_on_port_data_changes = true" /etc/neutron/neutron.conf sed -i "254c connection = mysql+ pymysql://neutron:123456@controller/neutron " /etc/neutron/neutron.conf 8 y4 S! J6 v" U sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf ) m1 ^. p2 B8 X2 d- U2 @* D sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf sed -i "362c auth_type = password" /etc/neutron/neutron.conf $ |; m. j! U" I sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf sed -i "365c project_name = service" /etc/neutron/neutron.conf 1 L* o+ o" C- R$ D; E; W0 t$ Z sed -i "366c username = neutron" /etc/neutron/neutron.conf . M/ O- q( v0 s) S' \ sed -i "367c password = 123456" /etc/neutron/neutron.conf ( F1 a) }; l- v# n0 b4 g; H sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf ) w7 M: l4 o( z: r* \ echo "[nova]" >> /etc/neutron/neutron.conf echo "auth_url = http://controller:5000 " >> /etc/neutron/neutron.conf echo "auth_type = password" >> /etc/neutron/neutron.conf 1 U4 ?5 K) w  W6 [* M/ P# B echo "project_domain_name = default" >> /etc/neutron/neutron.conf   I# T0 a1 l% Z echo "user_domain_name = default" >> /etc/neutron/neutron.conf echo "region_name = RegionOne" >> /etc/neutron/neutron.conf . r4 I1 L7 ]* a% X5 \$ B/ p9 O1 Z echo "project_name = service" >> /etc/neutron/neutron.conf echo "username = nova" >> /etc/neutron/neutron.conf ! [* w) {3 ?4 b" d4 L7 ] echo "password = 123456" >> /etc/neutron/neutron.conf / G1 I; b9 {  L #配置Modular Layer 2 (ML2) plug-in ) @+ U7 v: ?6 ]+ h4 X5 \ echo "[ml2]" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "type_drivers = flat,vlan,vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "tenant_network_types = vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini 0 A8 r2 Q( e* k echo "mechanism_drivers = linuxbridge,l2population" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "extension_drivers = port_security" >> /etc/neutron/plugins/ml2/ml2_conf.ini 5 U/ I- S5 K: Z8 n6 D echo "[ml2_type_flat]" >> /etc/neutron/plugins/ml2/ml2_conf.ini # p3 _0 Q. N* X  Q' N% | echo "flat_networks = provider" >> /etc/neutron/plugins/ml2/ml2_conf.ini # z8 ^9 f" r7 P& g; Z3 `7 O8 K5 p echo "vni_ranges = 1:1000" >> /etc/neutron/plugins/ml2/ml2_conf.ini echo "[securitygroup]" >> /etc/neutron/plugins/ml2/ml2_conf.ini ' e$ M$ H# ?( \ echo "enable_ipset = true" >> /etc/neutron/plugins/ml2/ml2_conf.ini #配置Linux bridge agent echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini / k& V% I/ {* q, f #eth1为另外第二张网卡 . Z( [4 F5 t  g% u echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini + a: s8 B9 I- T1 C# L #10.0.0.12为第二张网卡的IP 2 B' g) m0 H8 j: q+ O echo "local_ip = 10.0.0.12" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini 4 \6 X: e6 P! n/ W- j* \1 c6 } echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini ' H2 y7 u3 k/ C) {9 p0 s #配置layer-3 agent ) A+ p3 H3 Z  d. K sed -i "2c interface_driver = linuxbridge" /etc/neutron/l3_agent.ini % r3 }: y9 t. |4 Z. J #配置DHCP agent sed -i "2c interface_driver = linuxbridge" /etc/neutron/dhcp_agent.ini sed -i "3c dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq" /etc/neutron/dhcp_agent.ini sed -i "4c enable_isolated_metadata = true" /etc/neutron/dhcp_agent.ini #配置metadata agent   b! H, d  p7 a- G sed -i "2c nova_metadata_host = controller" /etc/neutron/metadata_agent.ini sed -i "3c metadata_proxy_shared_secret = 123456" /etc/neutron/metadata_agent.ini #配置计算服务使用网络服务 sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf sed -i " 3335c auth_type = password" /etc/nova/nova.conf sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf ; z' f/ @) A0 Y1 V7 B3 s0 p" F% t sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf ) r' [: w, O; Z sed -i " 3339c project_name = service" /etc/nova/nova.conf sed -i " 3340c username = neutron" /etc/nova/nova.conf sed -i " 3341c password = 123456" /etc/nova/nova.conf 6 f/ p$ W  M& q+ n! p2 V sed -i " 3342c service_metadata_proxy = true" /etc/nova/nova.conf ; u; ?9 l/ g: j5 `; W sed -i " 3343c metadata_proxy_shared_secret = 123456" /etc/nova/nova.conf ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron systemctl restart openstack-nova-api.service systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service && systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service - [) X" h: V6 N4 j systemctl enable neutron-l3-agent.service && systemctl start neutron-l3-agent.service * `" P- s( x0 q 0 I# Y; ~) ^: i. w, O" V #计算节点 安装Networking service ; D! {6 d' E: F2 z- n4 f9 n yum install -y openstack-neutron-linuxbridge ebtables ipset ' U9 d' K5 K; R. {7 d sed -i "2c transport_url = rabbit://openstack:123456@controller " /etc/neutron/neutron.conf sed -i "3c auth_strategy = keystone" /etc/neutron/neutron.conf sed -i "359c www_authenticate_uri = http://controller:5000 " /etc/neutron/neutron.conf sed -i "360c auth_url = http://controller:5000 " /etc/neutron/neutron.conf sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf sed -i "362c auth_type = password" /etc/neutron/neutron.conf sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf ( `' J9 M( ?8 ` sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf , X7 @( O, Q6 Z3 R sed -i "365c project_name = service" /etc/neutron/neutron.conf ' M# Z# j0 l4 ]# E' i9 T( s sed -i "366c username = neutron" /etc/neutron/neutron.conf sed -i "367c password = 123456" /etc/neutron/neutron.conf sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini * Z4 N& d) A; K2 q+ h9 \ #eth1为另外第二张网卡 # \, E* _+ H, m4 T" } echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini " `/ l% G( x. [3 y2 N5 M( f echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #10.0.0.32为第二张网卡的IP echo "local_ip = 10.0.0.32" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini # B) b$ I( R$ K1 X  K echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini & E; H( w: T& w8 F$ g! [* U echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini #配置计算服务使用网络服务 sed -i " 3334c auth_url = http://controller:5000 " /etc/nova/nova.conf sed -i " 3335c auth_type = password" /etc/nova/nova.conf sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf 4 R) B# e+ s3 Q# `% s sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf , L" _& n# J1 c2 k) C! q* E5 B6 p% ^ sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf - N) w; e3 X' s, `1 f5 I: i# B sed -i " 3339c project_name = service" /etc/nova/nova.conf sed -i " 3340c username = neutron" /etc/nova/nova.conf ! ~3 t( h) E. A! |) U. T sed -i " 3341c password = 123456" /etc/nova/nova.conf , N7 z8 j  l2 p2 H3 | systemctl restart openstack-nova-compute.service " \0 V, B' v2 q: `: F3 s systemctl enable neutron-linuxbridge-agent.service && systemctl start neutron-linuxbridge-agent.service #控制节点 安装Dashboard yum install -y openstack-dashboard . B' d. F. E+ g. }$ }  y% p sed -i '118c OPENSTACK_HOST = "controller"' /etc/openstack-dashboard/local_settings sed -i "39c ALLOWED_HOSTS = ['*']" /etc/openstack-dashboard/local_settings ! t# d& ]6 C7 G0 d8 Q0 R4 D1 ? sed -i "104c SESSION_ENGINE = 'django.contrib.sessions.backends.cache'" /etc/openstack-dashboard/local_settings sed -i "94c CACHES = {" /etc/openstack-dashboard/local_settings " }  T" z  @; K" u1 M6 x  R1 | sed -i "95c 'default': {" /etc/openstack-dashboard/local_settings 4 O2 B0 H& I5 l sed -i "96c 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache'," /etc/openstack-dashboard/local_settings sed -i "97c 'LOCATION': 'controller:11211'," /etc/openstack-dashboard/local_settings sed -i "98c }" /etc/openstack-dashboard/local_settings sed -i "99c }" /etc/openstack-dashboard/local_settings sed -i '119c OPENSTACK_KEYSTONE_URL = " http://%s:5000/v3 " % OPENSTACK_HOST' /etc/openstack-dashboard/local_settings 6 f" B, w+ z$ ^, \ echo 'OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True' >> /etc/openstack-dashboard/local_settings ! Q9 v' ~6 O8 P$ ~- E% ^. u& d1 q7 R6 b. L echo 'OPENSTACK_API_VERSIONS = {' >> /etc/openstack-dashboard/local_settings - m% M% h4 j3 n0 b7 F" S echo '  "identity": 3,' >> /etc/openstack-dashboard/local_settings echo '  "image": 2,' >> /etc/openstack-dashboard/local_settings echo '  "volume": 3' >> /etc/openstack-dashboard/local_settings 6 D. m8 [" @& a; Y8 e& |9 X1 ~. G0 N2 e echo '}' >> /etc/openstack-dashboard/local_settings ( u" b) R* _& M$ N echo 'OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"' >> /etc/openstack-dashboard/local_settings echo 'OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"' >> /etc/openstack-dashboard/local_settings sed -i '123c TIME_ZONE = "Asia/Shanghai"' /etc/openstack-dashboard/local_settings 4 M# f' s! g4 q9 {1 d echo "WEBROOT = '/dashboard/'" >> /etc/openstack-dashboard/local_settings echo 'WSGIApplicationGroup %{GLOBAL}' >> /etc/httpd/conf.d/openstack-dashboard.conf ) Z9 M% x+ ?8 |7 u8 ? systemctl restart httpd.service memcached.service ! W, c1 S  X. u# w0 c4 L3 i #安装完成，可访问 http://10.0.0.11/dashboard/ 查看

6 D+ ^: c7 ^8 P) T4 ?

; H1 ]" N/ D3 f1 f/ r5 e  Q& R$ w* r& f

总结

到此这篇关于Centos8最小化部署安装OpenStack Ussuri的详细教程的文章就介绍到这了,更多相关Centos8最小化部署安装OpenStack Ussuri内容请搜索脚本之家以前的文章或继续浏览下面