这里写一下红帽的一键部署openstack的方式,这里说一下用packstack根据应答文件(answer-file)方式自动部署,后续再针对每个服务单独讲解。
一、Preinstallation
1、在安装之前,说一下官方给出的硬件要求最小配置:
-
Controller Node: 1 processor, 2 GB memory, and 5 GB storage
-
Network Node: 1 processor, 512 MB memory, and 5 GB storage
-
Compute Node: 1 processor, 2 GB memory, and 10 GB storage
2、装系统时,建议最小化安装、LVM、block storage
3、配置好yum源(openstack+rhel)
4、Red Hat Enterprise Linux Openstack与NetworkManager有冲突!!!
开始安装Openstack之前先关闭NetworkManager并启动network服务。
5、我们自己搭建的实验环境,可以把计算节点和存储、控制节点分开装,也可以都安装在一台服务器上;推荐的最小化配置是两台,其中一台用作计算,控制、存储等节点,另一台当做计算节点。
6、如果是用虚拟机搭建的环境,不要忘记开机机器的虚拟化功能,我的两台机器就是搭在vmware虚拟主机上的。
二、测试环境拓扑:
我的测试环境用172.25.4.10(servera)和172.25.4.11(serverb)
三、安装
1.在servera上安装openstack-packstack软件包
|
1
|
#yum -y install openstack-packstack |
2.生成应答文件answer.txt
|
1
|
#packstack --gen-answer-file /root/answer.txt |
3.修改自定义应答文件answer.txt,可根据自己的要求,更改相关配置;E.g.:
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
|
CONFIG_DEFAULT_PASSWORD=mypassword //设置默认密码
CONFIG_HEAT_INSTALL=y //安装heat组件
CONFIG_NTP_SERVERS=172.25.254.254 //设置时间服务器
CONFIG_COMPUTE_HOSTS=172.25.4.10,172.25.4.11 //安装计算节点的主机
CONFIG_KEYSTONE_ADMIN_PW=redhat //keystone管理员密码
CONFIG_CINDER_VOLUMES_CREATE=n //默认有一个cinder-volume卷组,不创建测试卷组
CONFIG_LBAAS_INSTALL=y //安装负载均衡即服务组件
CONFIG_NEUTRON_METERING_AGENT_INSTALL=y //使得ceilometer可以检测到网络数据
CONFIG_NEUTRON_FWAAS=y //配置防火墙即服务
CONFIG_NEUTRON_ML2_TYPE_DRIVERS=vlan //网络驱动模型,使用vlan划分网络
CONFIG_NEUTRON_ML2_TENANT_NETWORK_TYPES=vlanCONFIG_NEUTRON_ML2_VLAN_RANGES=physnet1:1:1000 //设置网络名称(任意字符即可)及vlan编号范围
CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=physnet1:br-ex //设置网桥名称(物理网络绑定网桥)
CONFIG_NEUTRON_OVS_BRIDGE_IFACES=br-ex:eth0 //设置网桥接口(网桥绑定网卡接口)
CONFIG_HORIZON_SSL=y //安装Web管理端界面
CONFIG_HEAT_CFN_INSTALL=y //支持兼容亚马逊的HEAT API接口
CONFIG_PROVISION_DEMO=n //部署环境是否为演示环境
|
4.用应答文件部署openstack,用的puppet自动部署工具
|
1
|
#packstack --answer-file /root/answer.txt |
部署过程大概需要30min左右。
5.部署完成之后,查看openstack的服务状态
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
#cat keystonerc_adminunset OS_SERVICE_TOKEN
export OS_USERNAME=admin
export OS_PASSWORD=mypassword
export OS_AUTH_URL=http://172.25.4.10:5000/v2.0
export OS_TENANT_NAME=admin
export OS_REGION_NAME=RegionOne
#source keystonerc_admin //加载环境变量#openstack-status //查看状态== Nova services ==openstack-nova-api: activeopenstack-nova-cert: activeopenstack-nova-compute: activeopenstack-nova-network: inactive (disabled on boot)openstack-nova-scheduler: activeopenstack-nova-conductor: active== Glance services ==openstack-glance-api: activeopenstack-glance-registry: active== Keystone service ==openstack-keystone: inactive (disabled on boot)== Horizon service ==openstack-dashboard: 301== neutron services ==neutron-server: activeneutron-dhcp-agent: activeneutron-l3-agent: activeneutron-metadata-agent: activeneutron-lbaas-agent: activeneutron-openvswitch-agent: activeneutron-metering-agent: active== Swift services ==openstack-swift-proxy: activeopenstack-swift-account: activeopenstack-swift-container: activeopenstack-swift-object: active== Cinder services ==openstack-cinder-api: activeopenstack-cinder-scheduler: activeopenstack-cinder-volume: activeopenstack-cinder-backup: active== Ceilometer services ==openstack-ceilometer-api: activeopenstack-ceilometer-central: activeopenstack-ceilometer-compute: activeopenstack-ceilometer-collector: activeopenstack-ceilometer-alarm-notifier: activeopenstack-ceilometer-alarm-evaluator: activeopenstack-ceilometer-notification: active== Heat services ==openstack-heat-api: activeopenstack-heat-api-cfn: activeopenstack-heat-api-cloudwatch: inactive (disabled on boot)openstack-heat-engine: active== Support services ==mysqld: active (disabled on boot)openvswitch: activedbus: activetarget: activerabbitmq-server: activememcached: active== Keystone users ==
Warning keystonerc not sourced |
6、安装完成功之后,网卡的配置已经自动更改:
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
|
[[email protected] ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0DEVICETYPE=ovsTYPE=OVSPortOVS_BRIDGE=br-exONBOOT=yes
BOOTPROTO=none[[email protected] ~]# cat /etc/sysconfig/network-scripts/ifcfg-br-ex
DEFROUTE=yes
NAME=eth0ONBOOT=yes
IPADDR=172.25.4.10PREFIX=24GATEWAY=172.25.4.254DEVICE=br-exDEVICETYPE=ovsOVSBOOTPROTO=noneTYPE=OVSBridge |
四、安装完成
安装完成之后浏览器访问:https://172.25.4.10/用预先定义好的admin用户登录,之后可以进行相关操作,比如用户管理和实例的创建。
安装过程中可能遇到的报错:
1、MissingRequirements: The cinder server should contain a cinder-volumes volume group
解决办法:新建一个cinder-volumes的vg
|
1
2
|
#pvcreate /dev/sdb1#vgcreate cinder-volumes /dev/sdb1 |
2、NTP报错:
Error: /usr/sbin/ntpdate 10.13.25.14 returned 1 instead of one of [0]
25 Feb 09:31:47 ntpdate[4771]: the NTP socket is in use, exiting
解决办法:
|
1
|
#systemctl stop ntp.service |
傻白甜犯错:ntpserver 配置的是本身!!!
3、NTP的另一种报错:mNotice: /Stage[main]/Main/Exec[ntpdate]/returns: 25 Feb 09:40:42 ntpdate[7217]: no server suitable for synchronization found
解决办法:
1)在server上debug一下:
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
[[email protected] ~]# ntpdate -d 10.13.25.14
25 Feb 09:52:40 ntpdate[7260]: ntpdate [email protected] Fri Oct 16 08:51:51 UTC 2015 (1)Looking for host 10.13.25.14 and service ntp
host found : servera.pod4.example.comtransmit(10.13.25.14)transmit(10.13.25.14)transmit(10.13.25.14)transmit(10.13.25.14)transmit(10.13.25.14)10.13.25.14: Server dropped: no dataserver 10.13.25.14, port 123stratum 0, precision 0, leap 00, trust 000refid [10.13.25.14], delay 0.00000, dispersion 64.00000transmitted 4, in filter 4
reference time: 00000000.00000000 Sun, Dec 31 1899 19:00:00.000
originate timestamp: 00000000.00000000 Sun, Dec 31 1899 19:00:00.000transmit timestamp: da7993be.d66affb9 Thu, Feb 25 2016 9:52:46.837filter delay: 0.00000 0.00000 0.00000 0.00000 0.00000 0.00000 0.00000 0.00000
filter offset: 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000 0.000000
delay 0.00000, dispersion 64.00000offset 0.00000025 Feb 09:52:48 ntpdate[7260]: no server suitable for synchronization found
|
2) 检查服务是否启动成功,如果没启动,则start:
|
1
|
#systemctl status ntpd.service |
3)检查ntp的版本,如果你使用的是ntp4.2(包括4.2)之后的版本,在restrict的定义中使用了notrust的话,会导致以上错误
# ntpq -c version
4)检查防火墙是否屏蔽了udp的123端口
本文转自Jx战壕 51CTO博客,原文链接:http://blog.51cto.com/xujpxm/1745682,如需转载请自行联系原作者