云计算平台笔记

镜像包：

CentOS-7-X86_64-DVD-1804.iso

chinaskill_cloud_iaas.iso

网卡设置：

在 VMware 上准备两台虚拟机，作为 controller 以及 compute 节点。

虚拟机配置：2v_4G_50G（根据自己电脑配置来设置）

在虚拟网络编辑器中进行网络规划：

同时 DHCP 也要进行相对应的设置

安装系统：

在虚拟机设置中点击 处理器 ，将虚拟化引擎 前两项 勾上

添加一块新网卡，将类型设置为 NAT 模式，原网卡类型为 主机模式

进入系统安装后，选择第一项，如何按住 Tab 键，在quite前输入 net.ifnames=0 和 biosdevname=0 将网卡名字设置为 eth0 和eth1

基础运维

配置网络：

可以先搭建好 controller 节点，再将该节点进行克隆得到 compute 节点

root密码建议设置为 000000

• 利用vi文本编辑器去配置虚拟机的虚拟网卡；
  

[root@controller ~]#vi /etc/sysconfig/network-scripts/ifcfg-eth0

eth1同上

• 网卡配置如下：
  

TYPE=Ethernet

PROXY_METHOD=none

BROWSER_ONLY=no

BOOTPROTO=static #将类型改为 static

DEFROUTE=yes

IPV4_FAILURE_FATAL=no

IPV6INIT=yes

IPV6_AUTOCONF=yes

IPV6_DEFROUTE=yes

IPV6_FAILURE_FATAL=no

IPV6_ADDR_GEN_MODE=stable-privacy

NAME=eth0

UUID=10ca8a0b-7bf2-4b05-b63e-0032137279d7

DEVICE=eth0

ONBOOT=yes#将 no 改成yes

IPADDR=192.168.100.10 #更改ip

PREFIX=24

IPV6_PRIVACY=no

• 网卡配置好后，关闭防火墙：
  

[root@controller ~]#systemctl stop firewalld #关闭防火墙

[root@controller ~]#systemctl disable firewalld #禁用防火墙

[root@controller ~]#setenforce 0 #临时关闭selinux防火墙

[root@controller ~]#vi /etc/selinux/config #进入配置文件更改selinux

• selinux配置如下：
  

# This file controls the state of SELinux on the system.

# SELINUX= can take one of these three values:

#     enforcing - SELinux security policy is enforced.

#     permissive - SELinux prints warnings instead of enforcing.

#     disabled - No SELinux policy is loaded.

SELINUX=permissive #将enforcing改为Permissive

# SELINUXTYPE= can take one of three two values:

#     targeted - Targeted processes are protected,

#     minimum - Modification of targeted policy. Only selected processes are protected.

#     mls - Multi Level Security protection.

SELINUXTYPE=targeted

• 配置好后重启网络服务，使配置生效：
  

[root@controller ~]#systemctl restart network #重启网卡

[root@controller ~]#ip addr #查看ip

使用远程工具（Xshell，SecureCRT等）连接虚拟机（192.168.100.10）。

克隆compute节点:

• 对 controller 进行克隆，克隆类型选择 创建完整克隆 。
  

克隆前需要先关闭虚拟机：

[root@controller ~]#init 0

compute 节点启动后，需要修改两张网卡的ip以及uuid。

• 配置如下：（eth0与eth1同理）
  

TYPE=Ethernet

PROXY_METHOD=none

BROWSER_ONLY=no

BOOTPROTO=static

DEFROUTE=yes

IPV4_FAILURE_FATAL=no

IPV6INIT=yes

IPV6_AUTOCONF=yes

IPV6_DEFROUTE=yes

IPV6_FAILURE_FATAL=no

IPV6_ADDR_GEN_MODE=stable-privacy

NAME=eth0

UUID=10ca8a0b-7bf2-4b05-b63e-0032137279d3 #uuid不能与controller的相同，随意修改一位数

DEVICE=eth0

ONBOOT=yes

IPADDR=192.168.100.20 #末位改成20

PREFIX=24

IPV6_PRIVACY=no

弄好后接下来步骤跟controller一样。

• 接下来设置各个节点名：
  

[root@controller ~]#hostanmectl set-hostname controller/compute

[root@controller ~]#logout #注销 重新手动连接

• 紧接着设置节点间映射关系：
  

[root@controller ~]# vi /etc/hosts

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4

::1         localhost localhost.localdomain localhost6 localhost6.localdomain6

192.168.100.10 controller #节点1

192.168.100.20 compute #节点2

• 设置完成后两个节点之间互ping以及ping外部网络：
  

若ping不通。检查网卡配置

[root@compute ~]#ping controller

[root@compute ~]#ping www.baidu.com

• 将controller节点上的hosts配置文件传输到compute节点上将其替换
  

[root@controller ~]#scp /etc/hosts compute:/etc/hosts

镜像挂载：

• 移走本地网络yum源（两个节点都需要执行）：
  

[root@controller ~]#mv /etc/yum.repos.d/* /media # 将网络yum源移到media目录下

• 上传镜像：CentOS-7-X86_64-DVD-1804.iso 和 chinaskill_cloud_iaas.iso 至controller 节点中的 root 目录。
  
• 在 controller 节点配置本地yum源：
  

[root@controller ~]#vi /etc/yum.repos.d/local.repo

配置文件如下：

[centos]

name=centos

baseurl=file:///opt/centos

gpgcheck=0

enabled=1

[openstack]

name=openstack

baseurl=file:///opt/openstack/iaas-repo

gpgcheck=0

enabled=1

• 创建两个挂载目录：
  

[root@controller ~]#mkdir /opt/{centos,openstack}

• 镜像挂载(关机后需重新挂载）：
  

[root@controller ~]# mount -o loop CentOS-7.5-x86_64-DVD-1804.iso /opt/centos/

[root@controller ~]#mount -o loop chinaskills_cloud_iaas.iso /opt/openstack/

yum源配置：

• 清理yum源缓存，并列出yum仓库软件包
  

[root@controller ~]#yum clean all #清理缓存

[root@controller ~]#yum repolist all #列出软件包

• 在 controller 安装vsftpd，让compute节点通过ftp访问到controller节点上的镜像
  

[root@controller ~]# yum install -y vsftpd

• 修改vsftpd服务的配置文件：
  

[root@controller ~]#vi /etc/vsftpd/vsftpd.conf

配置文件如下：

# Example config file /etc/vsftpd/vsftpd.conf

#

# The default compiled in settings are fairly paranoid. This sample file

# loosens things up a bit, to make the ftp daemon more usable.

# Please see vsftpd.conf.5 for all compiled in defaults.

#

# READ THIS: This example file is NOT an exhaustive list of vsftpd options.

# Please read the vsftpd.conf.5 manual page to get a full idea of vsftpd's

# capabilities.

#

# Allow anonymous FTP? (Beware - allowed by default if you comment this out).

anon_root=/opt #添加匿名访问

anonymous_enable=YES

#

# Uncomment this to allow local users to log in.

# When SELinux is enforcing check for SE bool ftp_home_dir

local_enable=YES

#

# Uncomment this to enable any form of FTP write command.

write_enable=YES

#

# Default umask for local users is 077. You may wish to change this to 022,

# if your users expect that (022 is used by most other ftpd's)

local_umask=022

#

# Uncomment this to allow the anonymous FTP user to upload files. This only

# has an effect if the above global write enable is activated. Also, you will

# obviously need to create a directory writable by the FTP user.

# When SELinux is enforcing check for SE bool allow_ftpd_anon_write, allow_ftpd_full_access

#anon_upload_enable=YES

#

# Uncomment this if you want the anonymous FTP user to be able to create

# new directories.

• 重启服务，使修改的配置生效,并设置开机自启
  

[root@controller ~]#systemctl restart vsftpd && systemctl enable vsftpd

• 用scp命令将controller节点的yum源传到compute节点：
  

[root@controller ~]#scp /etc/yum.repos.d/local.repo compute:/etc/yum.repos.d/

• 在 compute 修改local.repo：
  

[centos]

name=centos

baseurl=ftp://controller/centos #修改url

gpgcheck=0

enabled=1

[openstack]

name=openstack

baseurl=ftp://controller/openstack/iaas-repo ##修改url

gpgcheck=0

enabled=1

• 清理yum源缓存，并列出yum仓库软件包
  

[root@computer ~]#yum clean all #清理缓存

[root@compute ~]#yum repolist all #列出软件包

重启selinux会重新打开，需要再次关闭

若ftp无法连接controller，可以在controller节点再次关闭selinux

[root@controller ~]#setenforce 0

时间同步配置：

• 两个节点都需要安装 chrony：
  

可能已经自动安装

[root@controller ~]#yum install -y chrony

[root@compute ~]#yum install -y chrony

• 在 controller 节点配置：
  

[root@controller ~]#vi /etc/chrony.conf

配置文件如下：

# Use public servers from the pool.ntp.org project.

# Please consider joining the pool (http://www.pool.ntp.org/join.html).

#server 0.centos.pool.ntp.org iburst #注释掉

#server 1.centos.pool.ntp.org iburst #注释掉

#server 2.centos.pool.ntp.org iburst #注释掉

#server 3.centos.pool.ntp.org iburst #注释掉

server controller iburst #添加自己的

allow 192.168.100.0/24   #允许时间网段

# Record the rate at which the system clock gains/losses time.

driftfile /var/lib/chrony/drift

# Allow the system clock to be stepped in the first three updates

# if its offset is larger than 1 second.

makestep 1.0 3

# Enable kernel synchronization of the real-time clock (RTC).

rtcsync

# Enable hardware timestamping on all interfaces that support it.

#hwtimestamp *

# Increase the minimum number of selectable sources required to adjust

# the system clock.

#minsources 2

# Allow NTP client access from local network.

#allow 192.168.0.0/16

# Serve time even if not synchronized to a time source.

#local stratum 10

# Specify file containing keys for NTP authentication.

#keyfile /etc/chrony.keys

# Specify directory for log files.

logdir /var/log/chrony

# Select which information is logged.

#log measurements statistics tracking

...

• 重启服务，使修改的配置生效,并设置开机自启
  

[root@controller ~]#systemctl restart chronyd && systemctl enable chronyd

• 在 compute 节点配置：
  

[root@compute ~]#vi /etc/chrony.conf

配置文件如下：

# Use public servers from the pool.ntp.org project.

# Please consider joining the pool (http://www.pool.ntp.org/join.html).

#server 0.centos.pool.ntp.org iburst #注释掉

#server 1.centos.pool.ntp.org iburst #注释掉

#server 2.centos.pool.ntp.org iburst #注释掉

#server 3.centos.pool.ntp.org iburst #注释掉

server controller iburst #添加controller的

# Record the rate at which the system clock gains/losses time.

driftfile /var/lib/chrony/drift

# Allow the system clock to be stepped in the first three updates

# if its offset is larger than 1 second.

makestep 1.0 3

# Enable kernel synchronization of the real-time clock (RTC).

rtcsync

# Enable hardware timestamping on all interfaces that support it.

#hwtimestamp *

# Increase the minimum number of selectable sources required to adjust

# the system clock.

#minsources 2

# Allow NTP client access from local network.

#allow 192.168.0.0/16

# Serve time even if not synchronized to a time source.

#local stratum 10

# Specify file containing keys for NTP authentication.

#keyfile /etc/chrony.keys

# Specify directory for log files.

logdir /var/log/chrony

# Select which information is logged.

#log measurements statistics tracking

...

• 重启服务，使修改的配置生效,并设置开机自启
  

[root@compute ~]#systemctl restart chronyd && systemctl enable chronyd

• 最后在 compute 节点测试时间是否同步：
  

[root@compute ~]#chronyc sources -v

出现以下内容说明成功：

210 Number of sources = 1

 .-- Source mode  '^' = server, '=' = peer, '#' = local clock.

/ .- Source state '*' = current synced, '+' = combined , '-' = not combined,

| /   '?' = unreachable, 'x' = time may be in error, '~' = time too variable.

||                                                 .- xxxx [ yyyy ] +/- zzzz

||      Reachability register (octal) -.           |  xxxx = adjusted offset,

||      Log2(Polling interval) --.      |          |  yyyy = measured offset,

||                                \     |          |  zzzz = estimated error.

||                                 |    |           \

MS Name/IP address         Stratum Poll Reach LastRx Last sample              

===============================================================================

^? controller                    0   6     0     -     +0ns[   +0ns] +/-    0ns

平台搭建

安装iaas-xiandian:

（在两节点执行）

[root@controller ~]#yum -y install iaas-xiandian

[root@compute ~]#yum -y install iaas-xiandian

修改xiandian配置文件:

[root@controller ~]#vi /etc/xiandian/openrc.sh

 

# 进入配置文件后需要在命令行模式下敲

:%s/^#//g # 一行中只带有一个#注释的，作用去除#注释

:%s/PASS=/PASS=000000/g # 将PASS=全部替换成PASS=000000，这样省的我们自己手动敲很多代码了

配置文件如下：

#--------------------system Config--------------------##

#Controller Server Manager IP. example:x.x.x.x

HOST_IP=192.168.100.10 #controller节点的IP地址

 

#Controller HOST Password. example:000000

HOST_PASS=000000

 

#Controller Server hostname. example:controller

HOST_NAME=controller #controller节点的主机名

 

#Compute Node Manager IP. example:x.x.x.x

HOST_IP_NODE=192.168.100.20 #compute节点的IP地址

 

#Compute HOST Password. example:000000

HOST_PASS_NODE=000000

 

#Compute Node hostname. example:compute

HOST_NAME_NODE=compute #compute节点的主机名

 

#--------------------Chrony Config-------------------##

#Controller network segment IP.  example:x.x.0.0/16(x.x.x.0/24)

network_segment_IP=192.168.100.0/24 #控制节点的网段

 

#--------------------Rabbit Config ------------------##

#user for rabbit. example:openstack

RABBIT_USER=openstack #rabbit用户名

 

#Password for rabbit user .example:000000

RABBIT_PASS=000000

 

#--------------------MySQL Config---------------------##

#Password for MySQL root user . exmaple:000000

DB_PASS=000000

 

#--------------------Keystone Config------------------##

#Password for Keystore admin user. exmaple:000000

DOMAIN_NAME=demo #OpenStack中登录页面的认证域名

ADMIN_PASS=000000

DEMO_PASS=000000

 

#Password for Mysql keystore user. exmaple:000000

KEYSTONE_DBPASS=000000

 

#--------------------Glance Config--------------------##

#Password for Mysql glance user. exmaple:000000

GLANCE_DBPASS=000000

 

#Password for Keystore glance user. exmaple:000000

GLANCE_PASS=000000

 

#--------------------Nova Config----------------------##

#Password for Mysql nova user. exmaple:000000

NOVA_DBPASS=000000

 

#Password for Keystore nova user. exmaple:000000

NOVA_PASS=000000

 

#--------------------Neturon Config-------------------##

#Password for Mysql neutron user. exmaple:000000

NEUTRON_DBPASS=000000

 

#Password for Keystore neutron user. exmaple:000000

NEUTRON_PASS=000000

 

#metadata secret for neutron. exmaple:000000

METADATA_SECRET=000000

 

#Tunnel Network Interface. example:x.x.x.x

INTERFACE_IP=192.168.100.10 #隧道接口的IP地址，填当前节点的IP地址

 

#External Network Interface. example:eth1

INTERFACE_NAME=eth1 #第二块网卡作为外网，对外提供服务（云主机实例）的网卡名

 

#External Network The Physical Adapter. example:provider

Physical_NAME=provider #物理适配器的外网

 

#First Vlan ID in VLAN RANGE for VLAN Network. exmaple:101

minvlan=5 #VLAN最小从5开始（自己根据需要来给定）

 

#Last Vlan ID in VLAN RANGE for VLAN Network. example:200

maxvlan=200 #VLAN最大到200

 

#--------------------Cinder Config--------------------##

#Password for Mysql cinder user. exmaple:000000

CINDER_DBPASS=000000

 

#Password for Keystore cinder user. exmaple:000000

CINDER_PASS=000000

 

#Cinder Block Disk. example:md126p3

BLOCK_DISK=sdb1 #compute节点增加的第一快磁盘名称（lsblk查看）

 

#--------------------Swift Config---------------------##

#Password for Keystore swift user. exmaple:000000

SWIFT_PASS=000000

 

#The NODE Object Disk for Swift. example:md126p4.

OBJECT_DISK=sdb2 #compute节点的增加的第二快磁盘名称

 

#The NODE IP for Swift Storage Network. example:x.x.x.x.

STORAGE_LOCAL_NET_IP=192.168.100.20 #对象存储的IP地址

 

#--------------------Heat Config----------------------##

#Password for Mysql heat user. exmaple:000000

HEAT_DBPASS=000000

 

#Password for Keystore heat user. exmaple:000000

HEAT_PASS=000000

 

#--------------------Zun Config-----------------------##

#Password for Mysql Zun user. exmaple:000000

ZUN_DBPASS=000000

 

#Password for Keystore Zun user. exmaple:000000

ZUN_PASS=000000

 

#Password for Mysql Kuryr user. exmaple:000000

KURYR_DBPASS=000000

 

#Password for Keystore Kuryr user. exmaple:000000

KURYR_PASS=000000

 

#--------------------Ceilometer Config----------------##

#Password for Gnocchi ceilometer user. exmaple:000000

CEILOMETER_DBPASS=000000

 

#Password for Keystore ceilometer user. exmaple:000000

CEILOMETER_PASS=000000

 

#--------------------AODH Config----------------##

#Password for Mysql AODH user. exmaple:000000

AODH_DBPASS=000000

 

#Password for Keystore AODH user. exmaple:000000

AODH_PASS=000000

 

#--------------------Barbican Config----------------##

#Password for Mysql Barbican user. exmaple:000000

BARBICAN_DBPASS=000000

 

#Password for Keystore Barbican user. exmaple:000000

BARBICAN_PASS=000000

• controller节点配置完后，使用scp将文件拷贝到compute节点：
  

[root@controller ~]#scp /etc/xiandian/openrc.sh compute:/etc/xiandian/openrc.sh

• 在compute节点中将xiandian配置文件修改第69行的IP地址，改成对应节点的IP地址（在compute节点只需修改这一行）：
  

68 #Tunnel Network Interface. example:x.x.x.x

69 INTERFACE_IP=192.168.100.20

• 两个节点修改完后都要使用source生效：

[root@controller ~]#source /etc/xiandian/openrc.sh

[root@compute ~]#source /etc/xiandian/openrc.sh

安装组件：

每一次安装前记得保存快照。跑错了可以恢复到之前状态

controller节点执行脚本的顺序 [ mysql组件，keystone组件，glance组件，nova-controller组件，neutron-controller组件，dashboard组件，cinder-controller组件，swift-controller组件 ]

（跑完controller节点，再跑compute节点）

compute节点执行脚本的顺序 [ nova-compute组件，neutron-compute组件，cinder-compute组件，swift-compute组件 ]

• 安装iaas-pre-host.sh（两个节点都执行）：
  

[root@controller ~]#iaas-pre-host.sh

[root@compute ~]#iaas-pre-host.sh

当两个节点都出现这一行需要重启虚拟机：

Please Reboot or Reconnect the terminal

重启命令：reboot， 重启后记得重新挂载镜像包

• 安装数据库：
  

[root@controller ~]# iaas-install-mysql.sh

• Keystone服务安装：
  

[root@controller ~]# iaas-install-keystone.sh

• Glance安装：
  

[root@controller ~]# iaas-install-glance.sh

• Nova安装：
  

两个节点脚本名字不一样！

[root@controller ~]# iaas-install-nova-controller.sh

[root@controller ~]# iaas-install-nova-compute.sh

• Neutron安装：
  

两个节点脚本名字不一样！

[root@controller ~]# iaas-install-neutron-controller.sh

[root@controller ~]# iaas-install-neutron-compute.sh

• dashboard安装：
  

[root@controller ~]# iaas-install-dashboard.sh

• Cinder安装：
  

[root@controller ~]# iaas-install-cinder-controller.sh

[root@compute ~]# iaas-install-cinder-compute.sh