CentOS部署OpenStack过程计算服务部署

基本信息

OpenStack计算组件请求OpenStack Identiy服务进行认证;请求OpenStack Image服务提供磁盘镜像;为OpenStack dashboard提供用户管理域管理员接口。 OpenStack计算服务主要的组件&＃xff1a;

nova-api服务
- 接受和响应来自最终用户的计算API请求
nova-api-metadata服务
- 接受来自虚拟机发送的元数据请求&＃xff0c;一般在安装nova-network服务的多主机模式下使用
nova-compute服务
- 一个持续工作的守护进程&＃xff0c;通过Hypervior来创建和销毁虚拟机实例
nova-scheduler服务
- 拿到一个来自队列请求虚拟机实例&＃xff0c;然后决定哪台计算服务器主机来运行
nova-conductor模块
- 媒介作用于nova-compute服务域数据库之间
nova-cert模块
- 服务器守护进程向Nova Cert服务提供X509证书
nova-network worker守护进程
- 与nova-compute类似&＃xff0c;从队列中接受网络任务&＃xff0c;并且操作网络。执行任务例如创建网桥接的接口或改变iptables规则
nova-consoleauth守护进程
- 授权控制台代理所提供的用户令牌
nova-novncproxy守护进程
- 提供一个代理&＃xff0c;用于访问正在运行的实例&＃xff0c;通过VNC协议&＃xff0c;支持基于浏览器的novnc客户端
nova-spicehtml5proxy
- 提供一个代理&＃xff0c;用于访问正在运行的实例&＃xff0c;通过SPICE协议&＃xff0c;支持基于浏览器的html5客户端
nova-xvpvncproxy
- 提供一个代理&＃xff0c;用于访问正在运行的实例&＃xff0c;通过VNC协议&＃xff0c;支持OpenStack特定的java客户端
nova-cert守护进程
- X509证书
nova client
- 用于用户作为租户管理员或最终用户来提交命令
队列
- 一个在守护进程之间传递消息的中央集线器
SQL数据库
- 存储构建时和运行时的状态&＃xff0c;为云基础设施

安装配置

控制节点执行操作

安装条件

创建数据库

# login mysql mysql -u root -p # create datbase create database nova_api; create database nova; # grant privileges grant all privileges on nova.* to &＃39;nva_db&＃39;&＃64;&＃39;localhost&＃39; identified by &＃39;passwd&＃39;; grant all privileges on nova.* to &＃39;nva_db&＃39;&＃64;&＃39;192.168.122.%&＃39; identified by &＃39;passwd&＃39;; grant all privileges on nova_api.* to &＃39;nva_db&＃39;&＃64;&＃39;localhost&＃39; identified by &＃39;passwd&＃39;; grant all privileges on nova_api.* to &＃39;nva_db&＃39;&＃64;&＃39;192.168.122.%&＃39; identified by &＃39;passwd&＃39;;

获取admin凭证 . admin-openrc
创建服务证书

# 创建服务用户 openstack user create \ --domain default \ --password-prompt nova # 添加角色 openstack role add --project serice --user nova admin # 创建服务实体 openstack service create --name nova \ --description "OpenStack Compute" compute

创建计算服务API端点

# create public endpoint openstack endpoint create --region RegionOne \ compute public http://ops-comp:8774/v2.1/%$tenant_id$s # create internal endpoint # create admin endpoint # create firewall rule

安装placement³⁴

创建数据库

# login mysql mysql -u root -p # create database create database placement; # grant privilege grant all privileges on placement.* to &＃39;plc_db&＃39;&＃64;&＃39;localhost&＃39; identified by &＃39;passwd&＃39;; grant all privileges on placement.* to &＃39;plc_db&＃39;&＃64;&＃39;192.168.122.%&＃39; identified by &＃39;passwd&＃39;;

创建用户

# create openstack user create --domain default \ --password-prompt placement # add role to user openstack role add --project service --user placement admin

创建服务实体

openstack service create \ --name placement \ --description "OpenStack Plancement" placement

添加endpoint

# add public endpoint openstack endpoint create \ --region RegionOne \ placement public http://ops-cont:8778 # add internal admin endpoint like public

安装placement yum install openstack-nova-placement-api -y

安装nova

安装

yum install openstack-nova-api openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler -y

配置nova.conf

i /etc/nova/nova.conf # enable compute and metadata in [DEFAULT] enabled_apis&＃61;osapi_compute,metadata # configure database in [api_database] and [database] [api_database] connection&＃61;mysql&＃43;pymysql://nva_db:db_passwd&＃64;ops-cont/nova_api [database] connection&＃61;mysql&＃43;pymysql://nva_db:db_passwd&＃64;ops-cont/nova # configure Rabbitmq in [DEFAULT] and [oslo_messageing_rabbit] [DEFAULT] rpc_backend&＃61;rabbit [oslo_messageing_rabbit] rabbit_host&＃61;ops-cont rabbit_userid&＃61;openstack rabbit_password&＃61;passwd # configure auth in [DEFAULT] and [keystone_authtoken] [DEFAULT] auth_strategy&＃61;keystone [keystone_authtoken] auth_uri&＃61;http://ops-cont:5000 auth_url&＃61;http://ops-cont:35357 memcached_servers&＃61;ops-cont:11211 auth_type&＃61;password project_domain_name&＃61;default user_domain_name&＃61;default project_name&＃61;service username&＃61;nova password&＃61;passwd # configure manager interface in [DEFAULT] [DEFAULT] my_ip&＃61;192.168.122.100 # enable neutrion and use nova firewall rule in [DEFAULT] [DEFULT] use_neutron&＃61;True firewall_driver&＃61;nova.virt.firewall.NoopFirewallDriver # configure vnc ip address in [vnc] [vnc] vncserver_listen&＃61;$my_ip vncserver_proxyclient_address&＃61;$my_ip # configure glance in [glance] [glance] api_servers&＃61;http://ops-cont:9292 # configure lock_path in [oslo_concurrency] lock_path&＃61;/var/lib/nova/tmp # configure placement in [placement] [placement] auth_uri&＃61;http://ops-cont:5000/v3 auth_url&＃61;http://ops-cont:35357/v3 os_region_name&＃61;RegionOne project_domain_name&＃61;default user_domain_name&＃61;default project_name&＃61;service user_name&＃61;placement password&＃61;passwd # configure rabbit transport url in [DEFAULT] transport_url&＃61;rabbit://openstack_user:user_passwd&＃64;ops-cont

同步数据库

su -s /bin/sh -c "nova-manage api_db sync" nova su -s /bin/sh -c "nova-manage db sync" nova su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova su -s /bin/sh -c "nova-manage cell_v2 create_cell" nova # show cells nova-manage cell_v2 list_cells

启动服务

# start systemctl start openstack-nova-api openstack-nova-consoleauth openstack-nova-scheduler openstack-nova-conductor openstack-nova-novncproxy # enable systemctl enable openstack-nova-api openstack-nova-consoleauth openstack-nova-scheduler openstack-nova-conductor openstack-nova-novncproxy # add firewall rule firewall-cmd --zone&＃61;public --add-rich-rule&＃61;&＃39;rule family&＃61;"ipv4" source address&＃61;"192.168.122.0/24" port port&＃61;"5672" protocol&＃61;"tcp" accept&＃39; --permanent

计算节点连接成功后执行 nova-manage cell_v2 discover_hosts

验证操作

在计算节点上的操作完成后执行验证&＃xff0c;查看服务组件是否全部启动openstack compute service list

计算节点执行操作

安装 yum install openstack-nova-compute -y
配置nova.conf

# configure rabbitmq in [DEFAULT] and [oslo_messaging_rabbit] # configure manager ip address # configure neutron [DEFAULT] rpc_backend&＃61;rabbit my_ip&＃61;192.168.0.100 use_neutron&＃61;True firewall_driver &＃61; nova.virt.firewall.NoopFirewallDriver [oslo_messaging_rabbit] rabbit_host&＃61;ops-cont rabbit_userid&＃61;openstack rabbit_password&＃61;passwd # configure auth in [DEFAULT] and [keystone_authtoken] [keystone_authtoken] auth_uri&＃61;http://ops-cont:5000 auth_url&＃61;http://ops-cont:35357 memcached_servers&＃61;ops-cont:11211 auth_type&＃61;password project_domian_name&＃61;default user_domain_name&＃61;default project_name&＃61;server username&＃61;nova password&＃61;passwd # configure vnc in [vnc] enabled&＃61;True vncserver_listen&＃61;0.0.0.0 vncserver_proxyclient_address&＃61;$my_ip novncproxy_base_url&＃61;http://ops-cont:6080/vnc_auto.html # configure iamges in [glance] [glance] api_servers&＃61;http://ops-cont:9292 # configure lock path in [oslo_concurrency] lock_path&＃61;/var/lib/nova/tmp # configure placement in [placement] auth_uri&＃61;http://ops-cont:5000/v3 auth_url&＃61;http://ops-cont:35357/v3 os_region_name&＃61;RegionOne project_domain_name&＃61;default user_domain_name&＃61;default project_name&＃61;service user_name&＃61;placement password&＃61;passwd

使用kvm虚拟化

vi /etc/nova/nova.conf # enable kvm in [libvirt] virt_type&＃61;kvm

启动服务

# start systemctl start libvirtd openstack-nova-compute # enable systemctl enable libvirtd openstack-nova-compute

注意

按照官方文档安装OpenStack-nova(ocata)时&＃xff0c;在启动计算节点时会报如下错误&＃xff1a;

ERROR oslo_service.service PlacementNotConfigured: This compute is not configured to talk to the placement service. Configure the [placement] section of nova.conf and restart the service.

根据提示&＃xff0c;我们首先需要在控制节点中安装配置placement组件&＃xff0c;同时需要将placement组件的配置信息写入到计算节点中的nova.conf文件中。