简单讲讲这个鬼东西 简单点来说就是一个云，一个属于自己的云平台，openstack的原版是亚马逊云，可以说openstack就是Rackspace和NASA的抄袭产物。 官方点说一个云平台管理的项目，它不是一个软件。这个项目由几个主要的组件
简单点来说就是一个云，一个属于自己的云平台，openstack的原版是亚马逊云，可以说openstack就是Rackspace和NASA的抄袭产物。
官方点说一个云平台管理的项目，它不是一个软件。这个项目由几个主要的组件组合起来完成一些具体的工作。帮助服务商和企业内部实现类似于 Amazon ec2和S3的云基础架构服务（Infrastructure as a Service）。 Openstack包括两个主要模块:Nova和 Swift。前者是NASA开发的虚拟服务器部署和业务计算模块;后者是 Backpack开发的分布式云存储模块，两者可以一起用，也可以分开单独用。 Openstack是开源项目，除了有 Rackspace和NASA的大力支持外，后面还有包括Dell、 Citrix、 Cisco Canonical这些重量级公司的贡献和支持，发展速度非常快，有取代另一个业界领先开源云台 Eucalyptus的态势。
抄袭的还能这么火，我也是醉了，没办法谁火就写谁… 嘻嘻~
OpenStack覆盖了网络、虚拟化、操作系统、服务器等各个方面。它是一个正在开发中的云计算平台项目，根据成熟及重要程度的不同，被分解成核心项目、孵化项目，以及支持项目和相关项目。每个项目都有自己的委员会和项目技术主管，而且每个项目都不是一成不变的，孵化项目可以根据发展的成熟度和重要性，转变为核心项目。
其中最重要的是Keystone、Nova、Neutron,当然还有其他的辅助如：Mysql、RabbitMQ等
为了更好的理解整个OpenStack的框架，理解好一台云主机的诞生过程是极其重要的，这里展开说说
*注：为了防止nova_compute直接访问数据库，所以需要nova_conductor帮忙进行查询
本教程食用的是Openstack Queens版本，其他版本也大致与之相同
[root@openstack ~]# vim /etc/hosts[root@openstack ~]# cat /etc/hosts127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4::1 localhost localhost.localdomain localhost6 localhost6.localdomain6192.168.31.4 openstack.if010.com192.168.31.5 openstack-node01.if010.com[root@openstack-node01 ~]# vim /etc/hosts[root@openstack-node01 ~]# cat /etc/hosts127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4::1 localhost localhost.localdomain localhost6 localhost6.localdomain6192.168.31.4 openstack.if010.com192.168.31.5 openstack-node01.if010.com[root@openstack ~]# vim /etc/sysconfig/selinux SELINUX=disabledSELINUXTYPE=targeted[root@openstack ~]# systemctl stop firewalld.service[root@openstack-node01 ~]# vim /etc/sysconfig/selinux SELINUX=disabledSELINUXTYPE=targeted[root@openstack-node01 ~]# systemctl stop firewalld.service[root@openstack ~]# yum install -y chrony[root@openstack ~]# vim /etc/chrony.conf[root@openstack ~]# cat /etc/chrony.conf | grep -v "#" | grep -v "^$"server 0.Centos.pool.ntp.org iburstserver 1.centos.pool.ntp.org iburstserver 2.centos.pool.ntp.org iburstserver 3.centos.pool.ntp.org iburstdriftfile /var/lib/chrony/driftmakestep 1.0 3rtcsyncallow 192.168.31.0/24logdir /var/log/chrony[root@openstack ~]# systemctl enable chronyd.service[root@openstack ~]# systemctl start chronyd.service[root@openstack ~]# timedatectl set-timezone Asia/Shanghai[root@openstack ~]# date2022年 06月 04日 星期六 21:51:55 CST[root@openstack-node01 ~]# yum install -y chrony[root@openstack-node01 ~]# vim /etc/chrony.conf[root@openstack-node01 ~]# cat /etc/chrony.conf | grep -v "#" | grep -v "^$"server openstack.if010.com[root@openstack-node01 ~]# systemctl enable chronyd.service[root@openstack-node01 ~]# systemctl start chronyd.service[root@openstack-node01 ~]# timedatectl set-timezone Asia/Shanghai[root@openstack-node01 ~]# date2022年 06月 04日 星期六 21:51:55 CST[root@openstack ~]# chronyc sources210 Number of sources = 4MS Name/IP address Stratum Poll Reach LastRx Last sample ===============================================================================^* 139.199.215.251 2 10 375 994 +2175us[+2316us] +/- 18ms^- time.cloudflare.com 3 10 377 170m +9674us[ +10ms] +/- 75ms^- a.chl.la 2 10 377 1059 -884us[ -743us] +/- 123ms^+ time.neu.edu.cn 1 10 377 289 +17ms[ +17ms] +/- 50ms[root@openstack-node01 ~]# chronyc sources210 Number of sources = 1MS Name/IP address Stratum Poll Reach LastRx Last sample===============================================================================^* openstack.if010.com 3 9 377 421 +15us[ -87us] +/- 15ms#计算节点[root@openstack ~]# wget -O /etc/yum.repos.d/CentOS-Base.repo Http://mirrors.aliyun.com/repo/Centos-7.repo[root@openstack ~]# yum install -y centos-release-openstack-queens.noarch#控制节点[root@openstack-node01 ~]# wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo[root@openstack-node01 ~]# yum install -y centos-release-openstack-queens.noarch[root@openstack ~]# yum install -y mariadb mariadb-server Mysql-python[root@openstack ~]# cp /usr/share/mysql/my-medium.cnf /etc/my.cnf[root@openstack ~]# cat /etc/my.cnf | grep -v "#" | grep -v "^$"[client]port = 3306Socket = /var/lib/mysql/mysql.sock[mysqld]default-storage-engine = innodb #使用innodb引擎innodb_file_per_table #使用独享的表空间max_connections = 4096 #设置最大连接数collation-server = utf8_general_ci #设置校对字符集init-connect = 'SET NAMES utf8' #设置连接初始化的字符集character-set-server = utf8 #设置数据库的字符集port = 3306socket = /var/lib/mysql/mysql.sockskip-external-lockingkey_buffer_size = 16Mmax_allowed_packet = 1Mtable_open_cache = 64sort_buffer_size = 512Knet_buffer_length = 8Kread_buffer_size = 256Kread_rnd_buffer_size = 512Kmyisam_sort_buffer_size = 8Mlog-bin=mysql-binbinlog_fORMat=mixedserver-id = 1[mysqldump]quickmax_allowed_packet = 16M[mysql]no-auto-rehash[myisamchk]key_buffer_size = 20Msort_buffer_size = 20Mread_buffer = 2Mwrite_buffer = 2M[mysqlhotcopy]interactive-timeout[root@openstack ~]# systemctl enable mariadb.service[root@openstack ~]# systemctl start mariadb.service为了保证数据库服务的安全性，运行mysql_secure_installation脚本。特别需要说明的是，为数据库的root用户设置一个适当的密码，可以使用openssl rand -hex 10生成一个10位的密码
[root@openstack ~]# openssl rand -hex 1038ad89f42d765b1eb3b0[root@openstack ~]# mysql_secure_installationNOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB SERVERS IN PRODUCTION USE! PLEASE READ EACH STEP CAREFULLY!In order to log into MariaDB to secure it, we'll need the currentpassWord for the root user. If you've just installed MariaDB, andyou haven't set the root password yet, the password will be blank,so you should just press enter here.Enter current password for root (enter for none): #输入root密码，刚刚安装是没有密码的，所以直接回车即可OK, successfully used password, moving on...Setting the root password ensures that nobody can log into the MariaDBroot user without the proper authorisation.Set root password? [Y/n] Y #设置root密码New password: Re-enter new password: Password updated successfully!Reloading privilege tables.. ... Success!By default, a MariaDB installation has an anonymous user, allowing anyoneto log into MariaDB without having to have a user account created forthem. This is intended only for testing, and to make the installationGo a bit smoother. You should remove them before moving into aproduction environment.Remove anonymous users? [Y/n] Y #是否移除匿名用户 ... Success!Normally, root should only be allowed to connect from 'localhost'. Thisensures that someone cannot guess at the root password from the network.Disallow root login remotely? [Y/n] Y #是否禁止root远程登录 ... Success!By default, MariaDB comes with a database named 'test' that anyone canaccess. This is also intended only for testing, and should be removedbefore moving into a production environment.Remove test database and access to it? [Y/n] Y #是否移除test数据库 - Dropping test database... ... Success! - Removing privileges on test database... ... Success!Reloading the privilege tables will ensure that all changes made so farwill take effect immediately.Reload privilege tables now? [Y/n] Y #是否刷新权限表 ... Success!Cleaning up...All done! If you've completed all of the above steps, your MariaDBinstallation should now be secure.Thanks for using MariaDB![root@openstack ~]# yum install -y rabbitmq-server[root@openstack ~]# systemctl enable rabbitmq-server.service[root@openstack ~]# systemctl start rabbitmq-server.service[root@openstack ~]# rabbitmqctl add_user openstack 1735e32955b2ef18362eCreating user "openstack" ......done.[root@openstack ~]# rabbitmqctl set_permissions openstack ".*" ".*" ".*"Setting permissions for user "openstack" in vhost "/" ......done.#启用web管理模块[root@openstack ~]# rabbitmq-plugins enable rabbitmq_managementThe following plugins have been enabled: mochiweb webMachine rabbitmq_web_dispatch amqp_client rabbitmq_management_agent rabbitmq_managementPlugin configuration has changed. Restart RabbitMQ for changes to take effect.[root@openstack ~]# systemctl restart rabbitmq-server.service浏览器访问配置，Admin->Update this user，将openstack用户打上Administrator组标签
http://192.168.31.4:15672
默认管理账号密码： guest/guest
[root@openstack ~]# openssl rand -hex 109b7976d96ef6ecadccce[root@openstack ~]# mysql -u root -pMariaDB [(none)]> CREATE DATABASE keystone;MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '9b7976d96ef6ecadccce';MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '9b7976d96ef6ecadccce';[root@openstack ~]# yum install -y openstack-keystone Python-openstackclient httpd mod_wsgi memcached python-memcached[root@openstack ~]# systemctl enable memcached.service[root@openstack ~]# systemctl start memcached.service[root@openstack keystone]# openssl rand -hex 1058d48e8481d5f01b6ca0[root@openstack ~]# vim /etc/keystone/keystone.conf[DEFAULT] #定义初始管理令牌的值admin_token = 58d48e8481d5f01b6ca0[database] #配置数据库访问connection = mysql+pymysql://keystone:9b7976d96ef6ecadccce@127.0.0.1/keystone[revoke] #配置回滚驱动driver = sql[token] #配置Fernet UUID令牌的提供者provider = fernet [root@openstack ~]# su -s /bin/sh -c "keystone-manage db_sync" keystone[root@openstack ~]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone[root@openstack ~]# vim /etc/httpd/conf/httpd.confServerName controller[root@openstack ~]# vim /etc/httpd/conf.d/wsgi-keystone.confListen 5000Listen 35357 WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} WSGIProcessGroup keystone-public WSGIScriptAlias / /usr/bin/keystone-wsgi-public WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On ErrorLogFormat "%{cu}t %M" ErrorLog /var/log/httpd/keystone-error.log CustomLog /var/log/httpd/keystone-access.log combined Require all granted WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP} WSGIProcessGroup keystone-admin WSGIScriptAlias / /usr/bin/keystone-wsgi-admin WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On ErrorLogFormat "%{cu}t %M" ErrorLog /var/log/httpd/keystone-error.log CustomLog /var/log/httpd/keystone-access.log combined Require all granted [root@openstack ~]# systemctl enable httpd.service[root@openstack ~]# systemctl start httpd.service[root@openstack ~]# export OS_TOKEN=58d48e8481d5f01b6ca0[root@openstack ~]# export OS_URL=http://openstack.if010.com:35357/v3[root@openstack ~]# export OS_IDENTITY_API_VERSION=3[root@openstack ~]# openstack service create --name keystone --description "OpenStack Identity" identity+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | OpenStack Identity || enabled | True || id | 4ddaae90388b4ebc9d252ec2252d8d10 || name | keystone || type | identity |+-------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne identity public http://openstack.if010.com:5000/v3+--------------+------------------------------------+| Field | Value |+--------------+------------------------------------+| enabled | True || id | 30fff543e7dc4b7d9a0fb13791b78bf4 || interface | public || region | RegionOne || region_id | RegionOne || service_id | 8c8c0927262a45ad9066cfe70d46892c || service_name | keystone || service_type | identity || url | http://openstack.if010.com:5000/v3 |+--------------+------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne identity internal http://openstack.if010.com:5000/v3+--------------+------------------------------------+| Field | Value |+--------------+------------------------------------+| enabled | True || id | 57cfa543e7dc4b712c0ab137911bc4fe || interface | internal || region | RegionOne || region_id | RegionOne || service_id | 6f8de927262ac12f6066cfe70d99ac51 || service_name | keystone || service_type | identity || url | http://openstack.if010.com:5000/v3 |+--------------+------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne identity admin http://openstack.if010.com:35357/v3+--------------+-------------------------------------+| Field | Value |+--------------+-------------------------------------+| enabled | True || id | 78c3Dfa3e7dc44c98ab1b1379122ecb1 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | 34ab3d27262ac449cba6cfe704dbc11f || service_name | keystone|| service_type | identity|| url | http://openstack.if010.com:35357/v3 |+--------------+-------------------------------------+[root@openstack ~]# openstack domain create --description "Default Domain" default+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | Default Domain || enabled | True || id | e0353a670a9e496da891347c589539e9 || name | default |+-------------+----------------------------------+[root@openstack ~]# openstack project create --domain default --description "Admin Project" admin+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | Admin Project || domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | 343d245e850143a096806dfaefa9afdc || is_domain | False|| name | admin|| parent_id | None |+-------------+----------------------------------+[root@openstack ~]# openstack user create --domain default --password-prompt adminUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | ac3377633149401296f6c0d92d79dc16 || name | admin|+-----------+----------------------------------+[root@openstack ~]# openstack role create admin+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | None || id | cd2cb9a39e874ea69e5d4b896eb16128 || name | admin|+-----------+----------------------------------+[root@openstack ~]# openstack role add --project admin --user admin admin[root@openstack ~]# openstack project create --domain default --description "Service Project" service+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | Service Project || domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | 894cdfa366d34e9d835d3de01e752262 || is_domain | False|| name | service || parent_id | None |+-------------+----------------------------------+[root@openstack ~]# openstack project create --domain default --description "Demo Project" demo+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | Demo Project || domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | ed0b60bf607743088218b0a533d5943f || is_domain | False|| name | demo || parent_id | None |+-------------+----------------------------------+[root@openstack ~]# openstack user create --domain default --password-prompt demoUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | 58126687cbcc4888bfa9ab73a2256f27 || name | demo |+-----------+----------------------------------+[root@openstack ~]# openstack role create user+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | None || id | 997ce8d05fc143ac97d83fdfb5998552 || name | user |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project demo --user demo user#进行验证作为admin用户，请求认证令牌 [root@openstack ~]# unset OS_TOKEN OS_URL [root@openstack ~]# openstack --os-auth-url http://openstack.if010.com:35357/v3 --os-project-domain-name default --os-user-domain-name default --os-project-name admin --os-username admin token issue Password: +------------+-----------------------------------------------------------------+ | Field | Value | +------------+-----------------------------------------------------------------+ | expires | 2016-02-12T20:14:07.056119Z | | id | gAAAAABWvi7_B8kKQD9wdXac8MoZiQldmjEO643d-e_j-XXq9AmIegIbA7UHGPv | | | atnN21QtOMjCFWX7BReJEQnVOAj3nclRQgAYRsfSU_MrsuWb4EDtnjU7HEpoBb4 | | | o6ozsA_NmFWEpLeKy0uNn_WeKbAhYygrsmQGA49dclHVnz-OMVLiyM9ws | | project_id | 343d245e850143a096806dfaefa9afdc | | user_id | ac3377633149401296f6c0d92d79dc16 | +------------+-----------------------------------------------------------------+# 作为demo用户，请求认证令牌[root@openstack ~]# openstack --os-auth-url http://controller:5000/v3 \ --os-project-domain-name default --os-user-domain-name default \ --os-project-name demo --os-username demo token issuePassword:+------------+-----------------------------------------------------------------+| Field | Value |+------------+-----------------------------------------------------------------+| expires | 2016-02-12T20:15:39.014479Z || id | gAAAAABWvi9bsh7vkiby5BpCCnc-JkbGhm9wH3fabS_cY7uabOubesi-Me6IGWW || | yQqNegDDZ5jw7grI26vvgy1J5nCVwZ_zFRqPiz_qhbq29mgbQLglbkq6FQvzBRQ || | JcOzq3uwhzNxszJWmzGC7rJE_H0A_a3UFhqv8M4zMRYSbS2YF0MyFmp_U || project_id | ed0b60bf607743088218b0a533d5943f || user_id | 58126687cbcc4888bfa9ab73a2256f27 |+------------+-----------------------------------------------------------------+[root@openstack keystone]# vim admin-openrcexport OS_PROJECT_DOMAIN_NAME=defaultexport OS_USER_DOMAIN_NAME=defaultexport OS_PROJECT_NAME=adminexport OS_USERNAME=adminexport OS_PASSWORD=yy99..export OS_AUTH_URL=http://openstack.if010.com:35357/v3export OS_IDENTITY_API_VERSION=3export OS_IMAGE_API_VERSION=2[root@openstack keystone]# vim demo-openrcexport OS_PROJECT_DOMAIN_NAME=defaultexport OS_USER_DOMAIN_NAME=defaultexport OS_PROJECT_NAME=demoexport OS_USERNAME=demoexport OS_PASSWORD=demoexport OS_AUTH_URL=http://openstack.if010.com:5000/v3export OS_IDENTITY_API_VERSION=3export OS_IMAGE_API_VERSION=2[root@openstack ~]# source admin-openrc[root@openstack ~]# openstack token issue+------------+-----------------------------------------------------------------+| Field | Value |+------------+-----------------------------------------------------------------+| expires | 2016-02-12T20:44:35.659723Z || id | gAAAAABWvjYj-Zjfg8WXFaQnUd1DMYTBVrKw4h3fIagi5NoEmh21U72SrRv2trl || | JWFYhLi2_uPR31Igf6A8mH2Rw9kv_bxNo1jbLNPLGzW_u5FC7InFqx0yYtTwa1e || | eq2b0f6-18KZyQhs7F3teAta143kJEWuNEYET-y7u29y0be1_64KYkM7E || project_id | 343d245e850143a096806dfaefa9afdc || user_id | ac3377633149401296f6c0d92d79dc16 |+------------+-----------------------------------------------------------------+##创建Glance数据库并授权
[root@openstack ~]# openssl rand -hex 10a92e900d1dc37b94f347[root@openstack ~]# mysql -u root -pMariaDB [(none)]> CREATE DATABASE glance;MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'127.0.0.1' IDENTIFIED BY 'a92e900d1dc37b94f347';MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'a92e900d1dc37b94f347';[root@openstack ~]# source admin-openrc[root@openstack ~]# openstack user create --domain default --password-prompt glanceUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | e38230eeff474607805b596c91fa15d9 || name | glance |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project service --user glance admin[root@openstack ~]# openstack service create --name glance --description "OpenStack Image" image+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | OpenStack Image || enabled | True || id | 8c2c7f1b9b5049ea9e63757b5533e6d2 || name | glance || type | image|+-------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne image public http://openstack.if010.com:9292+--------------+----------------------------------+| Field | Value|+--------------+----------------------------------+| enabled | True || id | 340be3625e9b4239a6415d034e98aace || interface | public || region | RegionOne || region_id | RegionOne || service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 || service_name | glance || service_type | image|| url | http://openstack.if010.com:9292 |+--------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne image internal http://openstack.if010.com:9292+--------------+----------------------------------+| Field | Value|+--------------+----------------------------------+| enabled | True || id | a6e4b153c2ae4c919eccfdbb7dceb5d2 || interface | internal || region | RegionOne || region_id | RegionOne || service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 || service_name | glance || service_type | image|| url | http://openstack.if010.com:9292 |+--------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne image admin http://openstack.if010.com:9292+--------------+----------------------------------+| Field | Value|+--------------+----------------------------------+| enabled | True || id | 0c37ed58103f4300a84ff125a539032d || interface | admin|| region | RegionOne || region_id | RegionOne || service_id | 8c2c7f1b9b5049ea9e63757b5533e6d2 || service_name | glance || service_type | image|| url | http://openstack.if010.com:9292 |+--------------+----------------------------------+[root@openstack ~]# yum install -y openstack-glance python-glance python-glanceclient#配置 /etc/glance/glance-api.conf 文件[root@openstack ~]# vim /etc/glance/glance-api.conf[database]#配置数据库访问connection = mysql+pymysql://glance:a92e900d1dc37b94f347@127.0.0.1/glance[glance_store]#配置本地文件系统存储和镜像文件位置stores = file,httpdefault_store = filefilesystem_store_datadir = /var/lib/glance/images[keystone_authtoken]#配置认证服务访问auth_uri = http://openstack.if010.com:5000auth_url = http://openstack.if010.com:35357memcached_servers = openstack.if010.com:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = glancepassword = glance@If010 #glance用户的密码[paste_deploy]#配置认证的方式flavor = keystone#配置 /etc/glance/glance-registry.conf 文件[root@openstack ~]# vim /etc/glance/glance-registry.conf[database]#配置数据库访问connection = mysql+pymysql://glance:a92e900d1dc37b94f347@127.0.0.1/glance[keystone_authtoken]#配置认证服务访问auth_uri = http://openstack.if010.com:5000auth_url = http://openstack.if010.com:35357memcached_servers = openstack.if010.com:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = glancepassword = glance@If010#glance用户的密码[paste_deploy]#配置认证的方式flavor = keystone[root@openstack ~]# su -s /bin/sh -c "glance-manage db_sync" glance[root@openstack ~]# systemctl enable openstack-glance-api.service openstack-glance-registry.service[root@openstack ~]# systemctl restart openstack-glance-api.service openstack-glance-registry.service#下载镜像，这个镜像好像需要翻墙才能下载，可以使用别的镜像测试[root@openstack ~]# wget http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img#用 QCOW2 磁盘格式， bare 容器格式上传镜像到镜像服务并设置公共可见，这样所有的项目都可以访问它[root@openstack ~]# openstack image create "cirros" --file cirros-0.3.4-x86_64-disk.img --disk-format qcow2 --container-format bare --public+------------------+------------------------------------------------------+| Field | Value |+------------------+------------------------------------------------------+| checksum | ee1eca47dc88f4879d8a229cc70a07c6 || container_format | bare || created_at | 2022-06-05T05:22:14Z || disk_format | qcow2 || file | /v2/images/1bf99dfb-6943-4b9d-bb00-dafc0d70c6d7/file || id | 1bf99dfb-6943-4b9d-bb00-dafc0d70c6d7 || min_disk | 0 || min_ram | 0 || name | cirros || owner | a71798a89caf4ad094fdf16e253f00ea || protected | False || schema | /v2/schemas/image || size | 13287936 || status | active || tags | || updated_at | 2022-06-05T05:22:14Z || virtual_size | None || visibility | public |+------------------+------------------------------------------------------+#确认镜像的上传并验证属性[root@openstack ~]# openstack image list+--------------------------------------+--------+--------+| ID | Name | Status |+--------------------------------------+--------+--------+| 1bf99dfb-6943-4b9d-bb00-dafc0d70c6d7 | cirros | active |+--------------------------------------+--------+--------+[root@openstack ~]# openssl rand -hex 10e528734fc653231683c9[root@openstack ~]# mysql -u root -pMariaDB [(none)]> CREATE DATABASE nova_api;MariaDB [(none)]> CREATE DATABASE nova;MariaDB [(none)]> CREATE DATABASE nova_cell0;MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY 'e528734fc653231683c9';MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY 'e528734fc653231683c9';MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'e528734fc653231683c9';MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'e528734fc653231683c9';MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY 'e528734fc653231683c9';MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY 'e528734fc653231683c9';[root@openstack ~]# source admin-openrc[root@openstack ~]# openstack user create --domain default --password-prompt novaUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | 8c46e4760902464b889293a74a0c90a8 || name | nova |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project service --user nova admin[root@openstack ~]# openstack service create --name nova --description "OpenStack Compute" compute+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | OpenStack Compute || enabled | True || id | 060d59eac51b4594815603d75a00aba2 || name | nova || type | compute |+-------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne compute public http://openstack.if010.com:8774/v2.1/%\(tenant_id\)s+--------------+----------------------------------------------------+| Field | Value |+--------------+----------------------------------------------------+| enabled | True || id | 3c1caa473bfe4390a11e7177894bcc7b || interface | public || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | nova || service_type | compute || url | http://openstack.if010.com:8774/v2.1/%(tenant_id)s |+--------------+----------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne compute internal http://openstack.if010.com:8774/v2.1/%\(tenant_id\)s+--------------+----------------------------------------------------+| Field | Value |+--------------+----------------------------------------------------+| enabled | True || id | e3c918de680746a586eac1f2d9bc10ab || interface | internal || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | nova || service_type | compute || url | http://openstack.if010.com:8774/v2.1/%(tenant_id)s |+--------------+----------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne compute admin http://openstack.if010.com:8774/v2.1/%\(tenant_id\)s+--------------+----------------------------------------------------+| Field | Value |+--------------+----------------------------------------------------+| enabled | True || id | 38f7af91666a47cfb97b4dc790b94424 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | nova || service_type | compute || url | http://openstack.if010.com:8774/v2.1/%(tenant_id)s |+--------------+----------------------------------------------------+[root@openstack ~]# openstack user create --domain default --password-prompt placementUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | 8c46e4760902464b889293a74a0c90a8 || name | placement |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project service --user placement admin[root@openstack ~]# openstack service create --name placement --description "Placement API" placement+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | Placement API || enabled | True || id | 060d59eac51b4594815603d75a00aba2 || name | placement || type | placement |+-------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne placement public http://openstack.if010.com:8778+--------------+-------------------------------------------+| Field | Value |+--------------+-------------------------------------------+| enabled | True || id | 3c1caa473bfe4390a11e7177894bcc7b || interface | public || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | placement || service_type | placement || url | http://openstack.if010.com:8778 |+--------------+-------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne placement internal http://openstack.if010.com:8778+--------------+-------------------------------------------+| Field | Value |+--------------+-------------------------------------------+| enabled | True || id | e3c918de680746a586eac1f2d9bc10ab || interface | internal || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | placement || service_type | placement || url | http://openstack.if010.com:8778 |+--------------+-------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne placement admin http://openstack.if010.com:8778+--------------+-------------------------------------------+| Field | Value |+--------------+-------------------------------------------+| enabled | True || id | 38f7af91666a47cfb97b4dc790b94424 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | e702f6f497ed42e6a8ae3ba2e5871c78 || service_name | placement || service_type | placement || url | http://openstack.if010.com:8778 |+--------------+-------------------------------------------+[root@openstack ~]# yum install openstack-nova-api openstack-nova-cert openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler python-novaclient openstack-nova-placement-api#配置/etc/nova/nova.conf文件[root@openstack ~]# vim /etc/nova/nova.conf[DEFAULT]block_device_allocate_retries=180my_ip=192.168.31.4 #配置my_ip来使用控制节点的管理接口的IP地址use_neutron=Truefirewall_driver=nova.virt.firewall.NoopFirewallDriver #配置防火墙驱动enabled_apis=osapi_compute,metadata #启用计算和元数据APItransport_url=rabbit://openstack:1735e32955b2ef18362e@127.0.0.1 #配置RabbitMQ消息队列访问rpc_backend=rabbit #配置RabbitMQ消息队列访问auth_strategy=keystone #配置认证服务访问[api]auth_strategy=keystone[api_database]#配置数据库的连接connection=mysql+pymysql://nova:e528734fc653231683c9@127.0.0.1/nova_api[cinder]os_region_name=RegionOne[database]#配置数据库的连接connection=mysql+pymysql://nova:e528734fc653231683c9@127.0.0.1/nova[glance]#配置镜像服务API的地址api_servers=http://openstack.if010.com:9292[keystone_authtoken]#配置认证服务访问auth_uri=http://openstack.if010.com:5000auth_url=http://openstack.if010.com:35357memcached_servers=openstack.if010.com:11211auth_type=passwordproject_domain_name=defaultuser_domain_name=defaultproject_name=serviceusername=novapassword=nova@If010 #nova用户的密码[libvirt]virt_type=kvminject_password=truecpu_mode=host-passthrough[neutron]url = http://openstack.if010.com:9696auth_url = http://openstack.if010.com:35357auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultregion_name = RegionOneproject_name = serviceusername = neutronpassword = neutron@If010service_metadata_proxy = Truemetadata_proxy_shared_secret = neutron[oslo_concurrency]#配置锁路径lock_path=/var/lib/nova/tmp[oslo_messaging_rabbit]#配置RabbitMQ消息队列访问rabbit_host=127.0.0.1rabbit_port=5672rabbit_userid=openstackrabbit_password=1735e32955b2ef18362e #RabbitMQ的openstack用户的密码[placement]#配置placement认证os_region_name=RegionOneauth_type=passwordauth_url=http://openstack.if010.com:35357/v3project_name=serviceproject_domain_name=Defaultusername=placementuser_domain_name=Defaultpassword=placement@If010 #placement用户的密码[scheduler]discover_hosts_in_cells_interval=300[vnc]#配置VNC代理使用控制节点的管理接口IP地址enabled=trueserver_listen=$my_ipserver_proxyclient_address=$my_ipnovncproxy_base_url=http://192.168.31.4:6080/vnc_auto.html#配置00-nova-placement-api.conf文件[root@openstack ~]# vim /etc/httpd/conf.d/00-nova-placement-api.conf... = 2.4> Require all granted Order allow,deny Allow from all [root@openstack ~]# systemctl restart httpd.service#同步nova_api数据[root@openstack ~]# su -s /bin/sh -c "nova-manage api_db sync" nova# 注册cell0数据库[root@openstack ~]# su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova# 创建cell0的单元格[root@openstack ~]# su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova#同步nova数据[root@openstack ~]# su -s /bin/sh -c "nova-manage db sync" nova[root@openstack ~]# nova-manage cell_v2 list_cells+-------+--------------------------------------+-----------------------------------+------------------------------------------------+| 名称 | UUID | Transport URL | 数据库连接 |+-------+--------------------------------------+-----------------------------------+------------------------------------------------+| cell0 | 00000000-0000-0000-0000-000000000000 | none:/ | mysql+pymysql://nova:****@127.0.0.1/nova_cell0 || cell1 | 7d6f800c-2c16-4d15-8b75-0ce02a1af13f | rabbit://openstack:****@127.0.0.1 | mysql+pymysql://nova:****@127.0.0.1/nova |+-------+--------------------------------------+-----------------------------------+------------------------------------------------+[root@openstack ~]# systemctl enable openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service[root@openstack ~]# systemctl start openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.servicenova.conf的内容有些提前配置了，如neutron服务、cinder服务等，可能会影响服务的启动
[root@openstack-node01 ~]# yum install openstack-nova-compute#配置/etc/nova/nova.conf文件[root@openstack-node01 ~]# vim /etc/nova/nova.conf[DEFAULT]transport_url=rabbit://openstack:1735e32955b2ef18362e@openstack.if010.com #配置RabbitMQ消息队列访问auth_strategy=keystone #配置认证服务访问my_ip=192.168.31.4 #配置my_ip来使用控制节点的管理接口的IP地址use_neutron=Truefirewall_driver=nova.virt.firewall.NoopFirewallDriver #配置防火墙驱动[oslo_messaging_rabbit] #配置RabbitMQ消息队列访问rabbit_host=openstack.if010.comrabbit_userid=openstackrabbit_password=1735e32955b2ef18362e[keystone_authtoken] #配置认证服务访问auth_uri=http://openstack.if010.com:5000auth_url=http://openstack.if010.com:35357memcached_servers=openstack.if010.com:11211auth_type=passwordproject_domain_name=defaultuser_domain_name=defaultproject_name=serviceusername=novapassword=nova@If010 #nova用户的密码[vnc] #配置VNC代理使用控制节点的管理接口IP地址enabled=Truevncserver_listen=0.0.0.0vncserver_proxyclient_address=$my_ipnovncproxy_base_url=http://openstack.if010.com:6080/vnc_auto.html[glance] #配置镜像服务API的地址api_servers=http://openstack.if010.com:9292[oslo_concurrency] #配置锁路径lock_path=/var/lib/nova/tmp[placement] #配置placement认证os_region_name=RegionOneproject_domain_name=Defaultproject_name=serviceauth_type=passworduser_domain_name=Defaultauth_url=http://openstack.if010.com:35357/v3username=placementpassword=placement@If010 #placement用户的密码[libvirt] #配置支持虚拟机的硬件加速virt_type=kvm注意：libvirt项的配置确定您的计算节点是否支持虚拟机的硬件加速"
egrep -c ‘(vmx|svm)’ /proc/cpuinfo`
如果这个命令返回了 one or greater 的值，那么你的计算节点支持硬件加速且不需要额外的配置。
如果这个命令返回了 zero 值，那么你的计算节点不支持硬件加速。你必须配置 libvirt 来使用 QEMU 去代替 KVM[/collapse]
[root@openstack-node01 ~]# systemctl enable libvirtd.service openstack-nova-compute.service[root@openstack-node01 ~]# systemctl start libvirtd.service openstack-nova-compute.service[root@openstack ~]# su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova*注意：当您添加新的计算节点时，您必须在控制器节点上运行以注册这些新的计算节点。或者可以编辑/etc/nova/nova.conf在以下位置设置适当的间隔：
[scheduler]...discover_hosts_in_cells_interval=300[root@openstack ~]# openstack compute service list --service nova-compute+----+--------------+----------------------------+------+---------+-------+----------------------------+| ID | Binary | Host | Zone | Status | State | Updated At |+----+--------------+----------------------------+------+---------+-------+----------------------------+| 12 | nova-compute | openstack-node01.if010.com | nova | enabled | up | 2022-06-12T07:16:23.000000 |+----+--------------+----------------------------+------+---------+-------+----------------------------+[root@openstack ~]# openstack compute service list+----+------------------+----------------------------+----------+---------+-------+----------------------------+| ID | Binary | Host | Zone | Status | State | Updated At |+----+------------------+----------------------------+----------+---------+-------+----------------------------+| 1 | nova-consoleauth | openstack.if010.com | internal | enabled | up | 2022-06-12T07:17:42.000000 || 2 | nova-conductor | openstack.if010.com | internal | enabled | up | 2022-06-12T07:17:41.000000 || 3 | nova-scheduler | openstack.if010.com | internal | enabled | up | 2022-06-12T07:17:33.000000 || 12 | nova-compute | openstack-node01.if010.com | nova | enabled | up | 2022-06-12T07:17:33.000000 |+----+------------------+----------------------------+----------+---------+-------+----------------------------+[root@openstack ~]# openstack catalog list+-----------+-----------+-----------------------------------------------------------------------------------+| Name | Type | Endpoints |+-----------+-----------+-----------------------------------------------------------------------------------+| placement | placement | RegionOne || | | public: http://openstack.if010.com:8778 || | | RegionOne || | | admin: http://openstack.if010.com:8778 || | | RegionOne || | | internal: http://openstack.if010.com:8778 || | | || nova | compute | RegionOne || | | admin: http://openstack.if010.com:8774/v2.1/9193663417bd4262944a2480e253cb38 || | | RegionOne || | | public: http://openstack.if010.com:8774/v2.1/9193663417bd4262944a2480e253cb38 || | | RegionOne || | | internal: http://openstack.if010.com:8774/v2.1/9193663417bd4262944a2480e253cb38 || | | || glance | image | RegionOne || | | public: http://openstack.if010.com:9292 || | | RegionOne || | | admin: http://openstack.if010.com:9292 || | | RegionOne || | | internal: http://openstack.if010.com:9292 || | | || keystone | identity | RegionOne || | | public: http://openstack.if010.com:5000/v3 || | | RegionOne || | | admin: http://openstack.if010.com:35357/v3 || | | RegionOne || | | internal: http://openstack.if010.com:5000/v3 || | | |+-----------+-----------+-----------------------------------------------------------------------------------+[root@openstack ~]# openstack image list+--------------------------------------+----------+--------+| ID | Name | Status |+--------------------------------------+----------+--------+| e0f5041e-db3b-4e65-9ef3-39ad1b8b0b1f | CentOS 7 | active |+--------------------------------------+----------+--------+[root@openstack ~]# nova-status upgrade check+-------------------------------+| 升级检查结果 |+-------------------------------+| 检查: Cells v2 || 结果: 成功 || 详情: None |+-------------------------------+| 检查: Placement API || 结果: 成功 || 详情: None |+-------------------------------+| 检查: Resource Providers || 结果: 成功 || 详情: None |+-------------------------------+| 检查: Ironic Flavor Migration || 结果: 成功 || 详情: None |+-------------------------------+| 检查: API Service Version || 结果: 成功 || 详情: None |+-------------------------------+本教程所配置的是公共网络，也就是单一扁平网络，有需要的小伙伴可以自行研究私有网络
[root@openstack ~]# openssl rand -hex 10e528734fc653231683c9[root@openstack ~]# mysql -u root -pMariaDB [(none)]> CREATE DATABASE neutron;MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'e528734fc653231683c9';MariaDB [(none)]> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'e528734fc653231683c9';[root@openstack ~]# source admin-openrc[root@openstack ~]# openstack user create --domain default --password-prompt neutronUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | b20a6692f77b4258926881bf831eb683 || name | neutron |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project service --user neutron admin[root@openstack ~]# openstack service create --name neutron --description "OpenStack Networking" network+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | OpenStack Networking || enabled | True || id | f71529314dab4a4d8eca427e701d209e || name | neutron || type | network |+-------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne network public http://openstack.if010.com:9696+--------------+----------------------------------+| Field | Value|+--------------+----------------------------------+| enabled | True || id | 85d80a6d02fc4b7683f611d7fc1493a3 || interface | public || region | RegionOne || region_id | RegionOne || service_id | f71529314dab4a4d8eca427e701d209e || service_name | neutron || service_type | network || url | http://openstack.if010.com:9696 |+--------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne network internal http://openstack.if010.com:9696+--------------+----------------------------------+| Field | Value|+--------------+----------------------------------+| enabled | True || id | 09753b537ac74422a68d2d791cf3714f || interface | internal || region | RegionOne || region_id | RegionOne || service_id | f71529314dab4a4d8eca427e701d209e || service_name | neutron || service_type | network || url | http://openstack.if010.com:9696 |+--------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne network admin http://openstack.if010.com:9696+--------------+----------------------------------+| Field | Value|+--------------+----------------------------------+| enabled | True || id | 1ee14289c9374dffb5db92a5c112fc4e || interface | admin|| region | RegionOne || region_id | RegionOne || service_id | f71529314dab4a4d8eca427e701d209e || service_name | neutron || service_type | network || url | http://openstack.if010.com:9696 |+--------------+----------------------------------+[root@openstack ~]# yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables#配置/etc/neutron/neutron.conf文件[root@openstack ~]# vim /etc/neutron/neutron.conf[DEFAULT]auth_strategy = keystone #配置认证服务访问core_plugin = ml2 #启用ML2插件service_plugins = #禁用其他插件notify_nova_on_port_status_changes = True #配置网络服务来通知计算节点的网络拓扑变化notify_nova_on_port_data_changes = True ##配置网络服务来通知计算节点的网络拓扑变化transport_url = rabbit://openstack:1735e32955b2ef18362e@127.0.0.1 #配置RabbitMQ消息队列访问rpc_backend = rabbit #配置RabbitMQ消息队列访问[database] #配置数据库的连接connection = mysql+pymysql://neutron:e528734fc653231683c9@127.0.0.1/neutron[keystone_authtoken] #配置认证服务访问auth_uri = http://openstack.if010.com:5000auth_url = http://openstack.if010.com:35357memcached_servers = openstack.if010.com:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = neutronpassword = neutron@If010 #neutron用户的密码[nova] #配置nova服务访问auth_url = http://openstack.if010.com:35357auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultregion_name = RegionOneproject_name = serviceusername = novapassword = nova@If010 #nova用户的密码[oslo_concurrency] #配置锁路径lock_path = /var/lib/neutron/tmp[oslo_messaging_rabbit] #配置RabbitMQ消息队列访问rabbit_host = 127.0.0.1rabbit_port = 5672rabbit_userid = openstackrabbit_password = 1735e32955b2ef18362e#配置ml2_conf.ini文件[root@openstack ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini[ml2]type_drivers = flat,vlan #启用flat和VLAN网络tenant_network_types = #禁用私有网络mechanism_drivers = linuxbridge #启用Linuxbridge机制extension_drivers = port_security #启用端口安全扩展驱动[ml2_type_flat] #配置公共虚拟网络为flat网络flat_networks = provider[securitygroup] #启用ipset增加安全组规则的高效性enable_ipset = true#配置linuxbridge_agent.ini文件[root@openstack ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge]physical_interface_mappings = provider:eth1 //将eth1替换成自己本身的网卡接口，ip addr可查看网卡名称[securitygroup] #启用安全组并配置Linuxbridge iptables firewall driverfirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriverenable_security_group = true[vxlan]enable_vxlan = false #禁止VXLAN覆盖网络#配置dhcp_agent.ini文件*配置Linuxbridge驱动接口，DHCP驱动并启用隔离元数据，这样在公共网络上的实例就可以通过网络来访问元数据[root@openstack ~]# vim /etc/neutron/dhcp_agent.ini[DEFAULT] #配置DHCP代理interface_driver = linuxbridgedhcp_driver = neutron.agent.linux.dhcp.Dnsmasqenable_isolated_metadata = true#配置metadata_agent.ini文件[root@openstack ~]# vim /etc/neutron/metadata_agent.ini[DEFAULT] #配置元数据主机以及共享密码nova_metadata_host = openstack.if010.commetadata_proxy_shared_secret = neutron#配置nova使用neutron服务[root@openstack ~]# vim /etc/nova/nova.conf[neutron]url = http://openstack.if010.com:9696auth_url = http://openstack.if010.com:35357auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultregion_name = RegionOneproject_name = serviceusername = neutronpassword = neutron@If010service_metadata_proxy = truemetadata_proxy_shared_secret = neutron网络服务初始化脚本需要/etc/neutron/plugin.ini指向ML2插件配置文件的符号链接/etc/neutron/plugins/ml2 ml2_conf.ini。如果此符号链接不存在，请使用以下命令创建它：
[root@openstack ~]# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini[root@openstack ~]# su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron[root@openstack ~]# systemctl restart openstack-nova-api.service[root@openstack ~]# systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service[root@openstack ~]# systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service[root@openstack-node01 ~]# yum installopenstack-neutron-linuxbridge ebtables ipset#配置/etc/neutron/neutron.conf文件[root@openstack-node01 ~]# vim /etc/neutron/neutron.conf[DEFAULT]transport_url = rabbit://openstack:1735e32955b2ef18362e@openstack.if010.comauth_strategy = keystone[keystone_authtoken]auth_uri = http://openstack.if010.com:5000auth_url = http://openstack.if010.com:35357memcached_servers = openstack.if010.com:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = neutronpassword = neutron@If010[oslo_concurrency]lock_path = /var/lib/neutron/tmp#配置linuxbridge_agent.ini文件[root@openstack-node01 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge]physical_interface_mappings = provider:eth1 //将eth1替换为自己的网卡接口[vxlan]enable_vxlan = false[securitygroup]enable_security_group = truefirewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver#配置计算服务使用网络服务[root@openstack-node01 ~]# vim /etc/nova/nova.conf[neutron]url = http://openstack.if010.com:9696auth_url = http://openstack.if010.com:35357auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultregion_name = RegionOneproject_name = serviceusername = neutronpassword = neutron@If010重新启动计算服务：
[root@openstack-node01 ~]# systemctl restart openstack-nova-compute.service启动Linux桥代理并将其配置为在系统引导时启动：
[root@openstack-node01 ~]# systemctl enable neutron-linuxbridge-agent.service[root@openstack-node01 ~]# systemctl start neutron-linuxbridge-agent.service#列出加载的扩展以验证neutron-server过程的成功启动[root@openstack ~]# openstack extension list --network#验证 neutron agent成功[root@openstack ~]# openstack network agent list[root@openstack ~]# openssl rand -hex 108ef194ead24acb67de4c[root@openstack ~]# mysql -u root -pMariaDB [(none)]> CREATE DATABASE cinder;MariaDB [(none)]> GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY '8ef194ead24acb67de4c';MariaDB [(none)]> GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY '8ef194ead24acb67de4c';[root@openstack ~]# source admin-openrc###创建cinder用户并设置密码
[root@openstack ~]# openstack user create --domain default --password-prompt cinderUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | bb279f8ffc444637af38811a5e1f0562 || name | cinder |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project service --user cinder admin[root@openstack ~]# openstack service create --name cinder --description "OpenStack Block Storage" volume+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | OpenStack Block Storage || enabled | True || id | ab3bbbef780845a1a283490d281e7fda || name | cinder || type | volume |+-------------+----------------------------------+[root@openstack ~]# openstack service create --name cinderv2 --description "OpenStack Block Storage" volumev2+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | OpenStack Block Storage || enabled | True || id | eb9fd245bdbc414695952e93f29fe3ac || name | cinderv2 || type | volumev2 |+-------------+----------------------------------+[root@openstack ~]# openstack service create --name cinderv3 --description "OpenStack Block Storage" volumev3+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | OpenStack Block Storage || enabled | True || id | eb9fd245bdbc414695952e93f29fe3ac || name | cinderv3 || type | volumev3 |+-------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volume public http://openstack.if010.com:8776/v1/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 03fa2c90153546c295bf30ca86b1344b || interface | public || region | RegionOne || region_id | RegionOne || service_id | ab3bbbef780845a1a283490d281e7fda || service_name | cinder || service_type | volume || url | http://openstack.if010.com:8776/v1/%(tenant_id)s |+--------------+-----------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volume internal http://openstack.if010.com:8776/v1/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 94f684395d1b41068c70e4ecb11364b2 || interface | internal || region | RegionOne || region_id | RegionOne || service_id | ab3bbbef780845a1a283490d281e7fda || service_name | cinder || service_type | volume || url | http://openstack.if010.com:8776/v1/%(tenant_id)s | +--------------+---------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volume admin http://openstack.if010.com:8776/v1/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 4511c28a0f9840c78bacb25f10f62c98 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | ab3bbbef780845a1a283490d281e7fda || service_name | cinder || service_type | volume || url | http://openstack.if010.com:8776/v1/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volumev2 public http://openstack.if010.com:8776/v2/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 513e73819e14460fb904163f41ef3759 || interface | public || region | RegionOne || region_id | RegionOne || service_id | eb9fd245bdbc414695952e93f29fe3ac || service_name | cinderv2 || service_type | volumev2 || url | http://openstack.if010.com:8776/v2/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volumev2 internal http://openstack.if010.com:8776/v2/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 513e73819e14460fb904163f41ef3759 || interface | internal || region | RegionOne || region_id | RegionOne || service_id | eb9fd245bdbc414695952e93f29fe3ac || service_name | cinderv2 || service_type | volumev2 || url | http://openstack.if010.com:8776/v2/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volumev2 admin http://openstack.if010.com:8776/v2/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 513e73819e14460fb904163f41ef3759 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | eb9fd245bdbc414695952e93f29fe3ac || service_name | cinderv2 || service_type | volumev2 || url | http://openstack.if010.com:8776/v2/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volumev3 public http://openstack.if010.com:8776/v3/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 513e73819e14460fb904163f41ef3759 || interface | public || region | RegionOne || region_id | RegionOne || service_id | eb9fd245bdbc414695952e93f29fe3ac || service_name | cinderv3 || service_type | volumev3 || url | http://openstack.if010.com:8776/v2/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volumev3 internal http://openstack.if010.com:8776/v3/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 513e73819e14460fb904163f41ef3759 || interface | internal || region | RegionOne || region_id | RegionOne || service_id | eb9fd245bdbc414695952e93f29fe3ac || service_name | cinderv3 || service_type | volumev3 || url | http://openstack.if010.com:8776/v2/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne volumev3 admin http://openstack.if010.com:8776/v3/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 513e73819e14460fb904163f41ef3759 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | eb9fd245bdbc414695952e93f29fe3ac || service_name | cinderv3 || service_type | volumev3 || url | http://openstack.if010.com:8776/v2/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# yum install -y openstack-cinder#配置/etc/cinder/cinder.conf文件[DEFAULT]glance_api_servers = http://openstack.if010.com:9292auth_strategy = keystone #配置认证服务访问enabled_backends = lvmcinder_internal_tenant_project_id = 926b3127ab004702a50c969fa629022b #service的项目IDcinder_internal_tenant_user_id = de788c0a0f77469b9e8285052e50fd60 #cinder的用户IDtransport_url = rabbit://openstack:1735e32955b2ef18362e@openstack.if010.comrpc_backend = rabbit #配置RabbitMQ消息队列访问my_ip = 192.168.31.4 #配置管理接口的IP 地址[database] #配置数据库访问connection = mysql+pymysql://cinder:1735e32955b2ef18362e@127.0.0.1/cinder[keystone_authtoken] #配置认证服务访问auth_uri = http://openstack.if010.com:5000auth_url = http://openstack.if010.com:35357memcached_servers = openstack.if010.com:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = cinderpassword = cinder@If010 #cinder用户的密码[oslo_concurrency] #配置硕路径lock_path = /var/lib/cinder/tmp[oslo_messaging_rabbit] #配置RabbitMQ消息队列访问rabbit_host = openstack.if010.comrabbit_port = 5672rabbit_userid = openstackrabbit_password = 1735e32955b2ef18362e[lvm]volume_driver = cinder.volume.drivers.lvm.LVMVolumeDrivervolume_group = cinder-volumesiscsi_protocol = iscsiiscsi_helper = lioadmimage_volume_cache_max_size_gb = 200image_volume_cache_max_count = 50image_volume_cache_enabled = True#配置nova使用cinder模块[root@openstack ~]# vim /etc/nova/nova.conf[cinder]os_region_name = RegionOne[root@openstack ~]# su -s /bin/sh -c "cinder-manage db sync" cinder[root@openstack ~]# systemctl restart openstack-nova-api.service[root@openstack ~]# systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service[root@openstack ~]# systemctl start openstack-cinder-api.service openstack-cinder-scheduler.service#安装LVM包：[root@openstack ~]# yum install -y lvm2#启动LVM的metadata服务并且设置该服务随系统启动：[root@openstack ~]# systemctl enable lvm2-lvmetad.service[root@openstack ~]# systemctl start lvm2-lvmetad.service#创建LVM物理卷 /dev/sda2[root@openstack ~]# pvcreate /dev/sdb#创建LVM卷组cinder-volumes[root@openstack ~]# vgcreate cinder-volumes /dev/sdb[root@openstack ~]# vim /etc/lvm/lvm.conf devices {...filter = [ "a/sdb/", "r/.*/"]}[root@openstack ~]# yum install -y openstack-cinder targetcli python-keystone#配置/etc/cinder/cinder.conf文件[root@openstack ~]# vim /etc/cinder/cinder.conf[DEFAULT]enabled_backends = lvmglance_api_servers = http://openstack.if010.com:9292[oslo_concurrency]lock_path = /var/lib/cinder/tmp[lvm]volume_driver = cinder.volume.drivers.lvm.LVMVolumeDrivervolume_group = cinder-volumesiscsi_protocol = iscsiiscsi_helper = lioadm*[lvm]直接在文件最后追加[root@openstack ~]# systemctl enable openstack-cinder-volume.service target.service[root@openstack ~]# systemctl start openstack-cinder-volume.service target.service[root@openstack ~]# cinder service-list+------------------+-------------------------+------+---------+-------+----------------------------+-----------------+| Binary | Host | Zone | Status | State | Updated_at | Disabled Reason |+------------------+-------------------------+------+---------+-------+----------------------------+-----------------+| cinder-scheduler | openstack.if010.com | nova | enabled | up | 2022-06-12T10:02:09.000000 | - || cinder-volume | openstack.if010.com@lvm | nova | enabled | up | 2022-06-12T10:02:04.000000 | - |+------------------+-------------------------+------+---------+-------+----------------------------+-----------------+[root@openstack ~]# yum install -y openstack-dashboard[root@openstack ~]# vim /etc/openstack-dashboard/local_settingsOPENSTACK_HOST = "controller"ALLOWED_HOSTS = ['*', ]SESSION_ENGINE = 'Django.contrib.sessions.backends.cache'CACHES = { 'default': { 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache', 'LOCATION': 'controller:11211', }}OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOSTOPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = TrueOPENSTACK_API_VERSIONS = { "identity": 3, "image": 2, "volume": 2,}OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "default"OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"OPENSTACK_NEUTRON_NETWORK = { ... 'enable_router': False, 'enable_quotas': False, 'enable_distributed_router': False, 'enable_ha_router': False, 'enable_lb': False, 'enable_firewall': False, 'enable_vpn': False, 'enable_fip_topology_check': False,}TIME_ZONE = "Asia/Shanghai"[root@openstack ~]# systemctl restart httpd.service memcached.service浏览器访问配置
http://192.168.31.4/dashboard/
默认管理账号密码： admin/123456（keystone上注册创建的admin用户名密码）
[root@openstack ~]# openssl rand -hex 10669569abe0ff510a6a69[root@openstack ~]# mysql -u root -pMariaDB [(none)]> CREATE DATABASE designate CHARACTER SET utf8 COLLATE utf8_general_ci;;MariaDB [(none)]> GRANT ALL PRIVILEGES ON designate.* TO 'designate'@'localhost' IDENTIFIED BY '669569abe0ff510a6a69';MariaDB [(none)]> GRANT ALL PRIVILEGES ON designate.* TO 'designate'@'%' IDENTIFIED BY '669569abe0ff510a6a69';[root@openstack ~]# source admin-openrc[root@openstack ~]# openstack user create --domain default --password-prompt designateUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | ca2e175b851943349be29a328cc5e360 || name | designat |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project service --user designate admin[root@openstack ~]# openstack service create --name designate --description "DNS" dns+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | DNS || enabled | True || id | 727841c6f5df4773baa4e8a5ae7d72eb || name | designate || type | dns |+-------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne dns public http://openstack.if010.com:9001/+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 3f4dab34624e4be7b000265f25049609 || interface | public || region | RegionOne || region_id | RegionOne || service_id | 727841c6f5df4773baa4e8a5ae7d72eb || service_name | dns || service_type | orchestration || url | http://openstack.if010.com:9001/ |+--------------+--------------------------------------------------+[root@openstack ~]# yum install -y openstack-designate\* bind bind-utils[root@openstack ~]# rndc-confgen -a -k designate -c /etc/designate/rndc.key -r /dev/urandom[root@openstack ~]# cat /etc/named.conf include "/etc/designate/rndc.key";options { listen-on port 53 { any; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; recursing-file "/var/named/data/named.recursing"; secroots-file "/var/named/data/named.secroots"; allow-new-zones yes; request-ixfr no; recursion no; allow-query { 127.0.0.1; 192.168.31.4; localhost; }; dnssec-enable yes; dnssec-validation yes; bindkeys-file "/etc/named.root.key"; managed-keys-directory "/var/named/dynamic"; pid-file "/run/named/named.pid"; session-keyfile "/run/named/session.key";};controls { inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { "designate"; };};[root@openstack ~]# systemctl enable named [root@openstack ~]# systemctl start named[root@openstack ~]# vim /etc/designate/designate.conf[DEFAULT]transport_url = rabbit://openstack: 1735e32955b2ef18362e@127.0.0.1[keystone_authtoken]auth_type = passwordusername = designatepassword = designate@If010project_name = serviceproject_domain_name = defaultuser_domain_name = defaultwww_authenticate_uri = http://openstack.if010.com:5000/auth_url = http://openstack.if010.com:5000/memcached_servers = 127.0.0.1:11211[service:api]enable_host_header = truelisten = 0.0.0.0:9001auth_strategy = keystoneenable_api_v2 = trueenable_api_admin = trueenabled_extensions_admin = quotas,reports[service:worker]enabled = truenotify = true[storage:sqlalchemy]connection = mysql+pymysql://designate:669569abe0ff510a6a69@127.0.0.1/designate##同步数据库
[root@openstack ~]# su -s /bin/sh -c "designate-manage database sync" designate[root@openstack ~]# systemctl enable designate-central designate-api[root@openstack ~]# systemctl start designate-central designate-api[root@openstack ~]# vim /etc/designate/pools.yaml- name: default # The name is immutable. There will be no option to change the name after # creation and the only way will to change it will be to delete it # (and all zones associated with it) and recreate it. description: Default Pool attributes: {} # List out the NS records for zones hosted within this pool # This should be a record that is created outside of designate, that # points to the public IP of the controller node. ns_records: - hostname: ns1-1.example.org. priority: 1 # List out the nameservers for this pool. These are the actual BIND servers. # We use these to verify changes have propagated to all nameservers. nameservers: - host: 127.0.0.1 port: 53 # List out the targets for this pool. For BIND there will be one # entry for each BIND server, as we have to run rndc command on each server targets: - type: bind9 description: BIND9 Server 1 # List out the designate-mdns servers from which BIND servers should # request zone transfers (AXFRs) from. # This should be the IP of the controller node. # If you have multiple controllers you can add multiple masters # by running designate-mdns on them, and adding them here. masters: - host: 127.0.0.1 port: 5354 # BIND Configuration options options: host: 127.0.0.1 port: 53 rndc_host: 127.0.0.1 rndc_port: 953 rndc_key_file: /etc/designate/rndc.key[root@openstack ~]# su -s /bin/sh -c "designate-manage pool update" designate[root@openstack ~]# systemctl start designate-worker designate-producer designate-mdns[root@openstack ~]# systemctl enable designate-worker designate-producer designate-mdns[root@openstack ~]# vim /etc/neutron/neutron.conf[DEFAULT]external_dns_driver = designate dns_domain = if010.com.[designate]url = http://openstack.if010.com:9001/v2auth_type = passwordauth_url = http://openstack.if010.com:5000username = designatepassword = designate@If010project_name = serviceproject_domain_name = defaultuser_domain_name = defaultallow_reverse_dns_lookup = Trueipv4_ptr_zone_prefix_size = 24ipv6_ptr_zone_prefix_size = 116[root@openstack ~]# vim /etc/neutron/plugins/ml2/ml2_conf.iniextension_drivers = port_security,qos,dns这里要通过
neutron ext-list命令dns-integration看是否支持扩展，而且他这个需要私有网络的换件
[root@openstack ~]# systemctl restart neutron-*[root@openstack ~]# ps -aux | grep designate../usr/bin/python /usr/bin/designate-mdns --config-file /etc/designate/designate.conf../usr/bin/python /usr/bin/designate-central --config-file /etc/designate/designate.conf../usr/bin/python /usr/bin/designate-agent --config-file /etc/designate/designate.conf../usr/bin/python /usr/bin/designate-api --config-file /etc/designate/designate.conf../usr/bin/python /usr/bin/designate-worker --config-file /etc/designate/designate.conf../usr/bin/python /usr/bin/designate-producer --config-file /etc/designate/designate.conf[root@openstack ~]# openstack dns service list+--------------------------------------+---------------------+--------------+--------+-------+--------------+| id | hostname | service_name | status | stats | capabilities |+--------------------------------------+---------------------+--------------+--------+-------+--------------+| e29fe05a-4ef8-4fe5-9e6d-bf8be29b4fb2 | openstack.if010.com | worker | UP | - | - || 5c6802ab-05a0-4238-a15b-12f3239282d5 | openstack.if010.com | api | UP | - | - || 1c649421-f58b-44f9-8c82-19f50a8ea7cf | openstack.if010.com | mdns | UP | - | - || 1fab1750-215e-41f4-be42-0956f59cd2bd | openstack.if010.com | producer | UP | - | - || 6ea46d05-e9dc-49dd-a66d-8887d1049f7f | openstack.if010.com | central | UP | - | - |+--------------------------------------+---------------------+--------------+--------+-------+--------------+##创建一个zone区
[root@openstack ~]# openstack zone create --email=admin@if010.com if010.com.+----------------+--------------------------------------+| Field | Value |+----------------+--------------------------------------+| action | CREATE || attributes | || created_at | 2022-09-29T09:30:08.000000 || description | None || email | admin@if010.com || id | 8d381343-5e55-49f8-9cad-1f559d2aaa1e || masters | || name | if010.com. || pool_id | 794ccc2c-d751-44fe-b57f-8894c9f5c842 || project_id | 6f827144ec354bafb697983463d0078a || serial | 1664443808 || status | PENDING || transferred_at | None || ttl | 3600 || type | PRIMARY || updated_at | None || version | 1 |+----------------+--------------------------------------+关联网络，不然的话创建了虚拟机也是不会有记录的neutron net-update 38c5e950-b450-4c30-83d4-ee181c28aad3 --dns_domain if010.com.[root@openstack ~]# openstack zone list+--------------------------------------+------------+---------+------------+--------+--------+| id | name | type | serial | status | action |+--------------------------------------+------------+---------+------------+--------+--------+| 8d381343-5e55-49f8-9cad-1f559d2aaa1e | if010.com. | PRIMARY | 1664446134 | ACTIVE | NONE |+--------------------------------------+------------+---------+------------+--------+--------+[root@openstack ~]# openssl rand -hex 10fd0bf116b91362e17446[root@openstack ~]# mysql -u root -pMariaDB [(none)]> CREATE DATABASE heat;MariaDB [(none)]> GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'localhost' IDENTIFIED BY 'fd0bf116b91362e17446';MariaDB [(none)]> GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'%' IDENTIFIED BY 'fd0bf116b91362e17446';[root@openstack ~]# source admin-openrc[root@openstack ~]# openstack user create --domain default --password-prompt heatUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | e0353a670a9e496da891347c589539e9 || enabled | True || id | ca2e175b851943349be29a328cc5e360 || name | heat |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project service --user heat admin[root@openstack ~]# openstack service create --name heat --description "Orchestration" orchestration+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | Orchestration || enabled | True || id | 727841c6f5df4773baa4e8a5ae7d72eb || name | heat || type | orchestration |+-------------+----------------------------------+[root@openstack ~]# openstack service create --name heat-cfn --description "Orchestration" cloudformation+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | Orchestration || enabled | True || id | c42cede91a4e47c3b10c8aedc8d890c6 || name | heat-cfn || type | cloudformation |+-------------+----------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne orchestration public http://openstack.if010.com:8004/v1/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 3f4dab34624e4be7b000265f25049609 || interface | public || region | RegionOne || region_id | RegionOne || service_id | 727841c6f5df4773baa4e8a5ae7d72eb || service_name | heat || service_type | orchestration || url | http://openstack.if010.com:8004/v1/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne orchestration internal http://openstack.if010.com:8004/v1/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 9489f78e958e45cc85570fec7e836d98 || interface | internal || region | RegionOne || region_id | RegionOne || service_id | 727841c6f5df4773baa4e8a5ae7d72eb || service_name | heat || service_type | orchestration || url | http://openstack.if010.com:8004/v1/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne orchestration admin http://openstack.if010.com:8004/v1/%\(tenant_id\)s+--------------+--------------------------------------------------+| Field | Value |+--------------+--------------------------------------------------+| enabled | True || id | 76091559514b40c6b7b38dde790efe99 || interface | admin || region | RegionOne || region_id | RegionOne || service_id | 727841c6f5df4773baa4e8a5ae7d72eb || service_name | heat || service_type | orchestration || url | http://openstack.if010.com:8004/v1/%(tenant_id)s |+--------------+--------------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne cloudformation public http://openstack.if010.com:8000/v1+--------------+-------------------------------------------+| Field | Value |+--------------+-------------------------------------------+| enabled | True || id | b3ea082e019c4024842bf0a80555052c || interface | public || region | RegionOne || region_id | RegionOne || service_id | c42cede91a4e47c3b10c8aedc8d890c6 || service_name | heat-cfn || service_type | cloudformation|| url | http://openstack.if010.com:8000/v1 |+--------------+-------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne cloudformation internal http://openstack.if010.com:8000/v1+--------------+-------------------------------------------+| Field | Value |+--------------+-------------------------------------------+| enabled | True || id | 169df4368cdc435b8b115a9cb084044e || interface | internal || region | RegionOne || region_id | RegionOne || service_id | c42cede91a4e47c3b10c8aedc8d890c6 || service_name | heat-cfn || service_type | cloudformation|| url | http://openstack.if010.com:8000/v1 |+--------------+-------------------------------------------+[root@openstack ~]# openstack endpoint create --region RegionOne cloudformation admin http://openstack.if010.com:8000/v1+--------------+-------------------------------------------+| Field | Value |+--------------+-------------------------------------------+| enabled | True || id | 3d3edcd61eb343c1bbd629aa041ff88b || interface | internal || region | RegionOne || region_id | RegionOne || service_id | c42cede91a4e47c3b10c8aedc8d890c6 || service_name | heat-cfn || service_type | cloudformation|| url | http://openstack.if010.com:8000/v1 |+--------------+-------------------------------------------+[root@openstack ~]# openstack domain create --description "Stack projects and users" heat+-------------+----------------------------------+| Field | Value|+-------------+----------------------------------+| description | Stack projects and users || enabled | True || id | 0f4d1bd326f2454dacc72157ba328a47 || name | heat |+-------------+----------------------------------+[root@openstack ~]# openstack user create --domain heat --password-prompt heat_domain_adminUser Password:Repeat User Password:+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | 0f4d1bd326f2454dacc72157ba328a47 || enabled | True || id | b7bd1abfbcf64478b47a0f13cd4d970a || name | heat_domain_admin |+-----------+----------------------------------+[root@openstack ~]# openstack role add --domain heat --user-domain heat --user heat_domain_admin admin[root@openstack ~]# openstack role create heat_stack_owner+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | None || id | 15e34f0c4fed4e68b3246275883c8630 || name | heat_stack_owner |+-----------+----------------------------------+[root@openstack ~]# openstack role add --project demo --user demo heat_stack_owner[root@openstack ~]# openstack role create heat_stack_user+-----------+----------------------------------+| Field | Value|+-----------+----------------------------------+| domain_id | None || id | 88849d41a55d4d1d91e4f11bffd8fc5c || name | heat_stack_user |+-----------+----------------------------------+[root@openstack ~]# yum install openstack-heat-api openstack-heat-api-cfn openstack-heat-engine openstack-heat-ui# 配置 /etc/heat/heat.conf 文件[root@openstack ~]# vim /etc/heat/heat.conf[DEFAULT]heat_metadata_server_url = http://openstack.if010.com:8000 #配置元数据Urlheat_waitcondition_server_url = http://openstack.if010.com:8000/v1/waitcondition #配置等待条件Urlstack_user_domain_name = heat #配置栈域stack_domain_admin = heat_domain_admin #配置栈域与管理凭据用户stack_domain_admin_password = stack_domain_admin@If010 #配置栈域与管理凭据密码transport_url = rabbit://openstack:1735e32955b2ef18362e@127.0.0.1 #配置RabbitMQ消息队列访问rpc_backend = rabbit #配置RabbitMQ消息队列访问[clients_keystone] #认证服务访问auth_uri = http://openstack.if010.com:35357[database] #配置数据库的连接connection = mysql+pymysql://heat:fd0bf116b91362e17446@127.0.0.1/heat[ec2authtoken] #认证服务访问auth_uri = http://openstack.if010.com:5000/v2.0[oslo_messaging_rabbit] #配置RabbitMQ消息队列访问rabbit_host = 127.0.0.1rabbit_port = 5672rabbit_userid = openstackrabbit_password = 1735e32955b2ef18362e[trustee] #认证服务访问auth_plugin = passwordauth_url = http://openstack.if010.com:35357username = heatpassword = heat@If010 #heat用户的密码user_domain_name = default[keystone_authtoken] #配置认证服务访问auth_uri = http://openstack.if010.com:5000auth_url = http://openstack.if010.com:35357memcached_servers = openstack.if010.com:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = heatpassword = heat@If010 #heat用户的密码[root@openstack ~]# su -s /bin/sh -c "heat-manage db_sync" heat[root@openstack ~]# systemctl enable openstack-heat-api.service openstack-heat-api-cfn.service openstack-heat-engine.service[root@openstack ~]# systemctl start openstack-heat-api.service openstack-heat-api-cfn.service openstack-heat-engine.service[root@openstack ~]# systemctl restart openstack-heat*[root@openstack ~]# systemctl restart httpd[root@openstack ~]# openstack orchestration service list+---------------------+-------------+--------------------------------------+---------------------+--------+----------------------------+--------+| Hostname | Binary | Engine ID| Host | Topic | Updated At | Status |+---------------------+-------------+--------------------------------------+---------------------+--------+----------------------------+--------+| openstack.if010.com | heat-engine | 290417fa-3930-43ac-aca2-af574b91ff0f | openstack.if010.com | engine | 2022-06-24T13:05:47.000000 | up || openstack.if010.com | heat-engine | 9d112d09-5133-4f4e-8976-678346fd53c9 | openstack.if010.com | engine | 2022-06-24T13:05:47.000000 | up || openstack.if010.com | heat-engine | 2ee0f328-f4bf-49b2-a0fe-205255811c8b | openstack.if010.com | engine | 2022-06-24T14:18:43.000000 | up || openstack.if010.com | heat-engine | bfadeb82-2631-498c-8d8d-7870b73cfbec | openstack.if010.com | engine | 2022-06-24T13:05:47.000000 | up |+---------------------+-------------+--------------------------------------+---------------------+--------+----------------------------+--------+[root@openstack ~]# source admin-openrc[root@openstack ~]# neutron net-create --shared --provider:physical_network provider --provider:network_type flat providerCreated a new network:+---------------------------+--------------------------------------+| Field | Value |+---------------------------+--------------------------------------+| admin_state_up | True || id | 0e62efcd-8cee-46c7-b163-d8df05c3c5ad || mtu | 1500 || name | provider || port_security_enabled | True || provider:network_type | flat || provider:physical_network | provider || provider:segmentation_id | || router:external | False || shared | True || status | ACTIVE || subnets | || tenant_id | d84313397390425c8ed50b2f6e18d092 |+---------------------------+--------------------------------------+[root@openstack ~]# neutron subnet-create --name provider \ --allocation-pool start=192.168.31.100,end=192.168.31.200 \ --dns-nameserver 8.8.8.8 --gateway 192.168.31.1 \ provider 192.168.31.0/24+-------------------+------------------------------------------------------+| Field | Value |+-------------------+------------------------------------------------------+| allocation_pools | {"start": "192.168.31.100", "end": "192.168.31.200"} || cidr | 192.168.31.0/24 || dns_nameservers | 8.8.8.8 || enable_dhcp | True || gateway_ip | 192.168.31.1 || host_routes | || id | 5cc70da8-4ee7-4565-be53-b9c011fca011 || ip_version | 4 || ipv6_address_mode | || ipv6_ra_mode | || name | provider || network_id | 0e62efcd-8cee-46c7-b163-d8df05c3c5ad || subnetpool_id | || tenant_id | d84313397390425c8ed50b2f6e18d092 |+-------------------+------------------------------------------------------+[root@openstack ~]# openstack flavor create --id 0 --vcpus 1 --ram 64 --disk 1 m1.nano+----------------------------+---------+| Field | Value |+----------------------------+---------+| OS-FLV-DISABLED:disabled | False || OS-FLV-EXT-DATA:ephemeral | 0 || disk | 1 || id | 0 || name | m1.nano || os-flavor-access:is_public | True || ram | 64 || rxtx_factor | 1.0 || swap | || vcpus | 1 |+----------------------------+---------+openstack flavor create --vcpus 1 --ram 512 ecs.c1.nanoopenstack flavor create --vcpus 1 --ram 1024 ecs.c1.tinyopenstack flavor create --vcpus 1 --ram 2048 ecs.c1.smallopenstack flavor create --vcpus 1 --ram 4096 ecs.c1.mediumopenstack flavor create --vcpus 1 --ram 8192 ecs.c1.largeopenstack flavor create --vcpus 1 --ram 16384 ecs.c1.xlargeopenstack flavor create --vcpus 2 --ram 512 ecs.c2.nanoopenstack flavor create --vcpus 2 --ram 1024 ecs.c2.tinyopenstack flavor create --vcpus 2 --ram 2048 ecs.c2.smallopenstack flavor create --vcpus 2 --ram 4096 ecs.c2.mediumopenstack flavor create --vcpus 2 --ram 8192 ecs.c2.largeopenstack flavor create --vcpus 2 --ram 16384 ecs.c2.xlargeopenstack flavor create --vcpus 4 --ram 512 ecs.c4.nanoopenstack flavor create --vcpus 4 --ram 1024 ecs.c4.tinyopenstack flavor create --vcpus 4 --ram 2048 ecs.c4.smallopenstack flavor create --vcpus 4 --ram 4096 ecs.c4.mediumopenstack flavor create --vcpus 4 --ram 8192 ecs.c4.largeopenstack flavor create --vcpus 4 --ram 16384 ecs.c4.xlargeopenstack flavor create --vcpus 8 --ram 512 ecs.c8.nanoopenstack flavor create --vcpus 8 --ram 1024 ecs.c8.tinyopenstack flavor create --vcpus 8 --ram 2048 ecs.c8.smallopenstack flavor create --vcpus 8 --ram 4096 ecs.c8.mediumopenstack flavor create --vcpus 8 --ram 8192 ecs.c8.largeopenstack flavor create --vcpus 8 --ram 16384 ecs.c8.xlarge[root@openstack ~]# ssh-keygen -q -N ""[root@openstack ~]# openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey+-------------+-------------------------------------------------+| Field | Value |+-------------+-------------------------------------------------+| fingerprint | ee:3d:2e:97:d4:e2:6a:54:6d:0d:ce:43:39:2c:ba:4d || name | mykey || user_id | 58126687cbcc4888bfa9ab73a2256f27 |+-------------+-------------------------------------------------+#验证公钥的添加#[root@openstack ~]# openstack keypair list+-------+-------------------------------------------------+| Name | Fingerprint |+-------+-------------------------------------------------+| mykey | ee:3d:2e:97:d4:e2:6a:54:6d:0d:ce:43:39:2c:ba:4d |+-------+-------------------------------------------------+默认情况下，default安全组适用于所有实例并且包括拒绝远程访问实例的防火墙规则。对诸如CirrOS这样的Linux镜像，我们推荐至少允许ICMP (ping) 和安全shell(SSH)规则。
#允许 ICMP (ping)：[root@openstack ~]# openstack security group rule create --proto icmp default+-----------------------+--------------------------------------+| Field | Value |+-----------------------+--------------------------------------+| id | a1876c06-7f30-4a67-a324-b6b5d1309546 || ip_protocol | icmp || ip_range | 0.0.0.0/0|| parent_group_id | b0d53786-5ebb-4729-9e4a-4b675016a958 || port_range | || remote_security_group | |+-----------------------+--------------------------------------+#允许安全 shell (SSH) 的访问：[root@openstack ~]# openstack security group rule create --proto tcp --dst-port 22 default+-----------------------+--------------------------------------+| Field | Value |+-----------------------+--------------------------------------+| id | 3d95e59c-e98d-45f1-af04-c750af914f14 || ip_protocol | tcp || ip_range | 0.0.0.0/0|| parent_group_id | b0d53786-5ebb-4729-9e4a-4b675016a958 || port_range | 22:22 || remote_security_group | |+-----------------------+--------------------------------------+[root@openstack ~]# openstack volume create --size 1 volume1+---------------------+--------------------------------------+| Field | Value |+---------------------+--------------------------------------+| attachments | [] || availability_zone | nova || bootable | false || consistencygroup_id | None || created_at | 2016-03-08T14:30:48.391027 || description | None || encrypted | False || id | a1e8be72-a395-4a6f-8e07-856a57c39524 || multiattach | False || name | volume1 || properties | || replication_status | disabled || size | 1 || snapshot_id | None || source_volid | None || status | creating || type | None || updated_at | None || user_id | 684286a9079845359882afc3aa5011fb |+---------------------+--------------------------------------+#等待Status状态从creating变成available[root@openstack ~]# openstack volume list+--------------------------------------+--------------+-----------+------+-------------+| ID | Display Name | Status | Size | Attached to |+--------------------------------------+--------------+-----------+------+-------------+| a1e8be72-a395-4a6f-8e07-856a57c39524 | volume1 | available | 1 | |+--------------------------------------+--------------+-----------+------+-------------+#附加卷到一个实例上openstack server add volume provider-instance volume1#列出卷[root@openstack ~]# openstack volume list+--------------------------------------+--------------+--------+------+--------------------------------------------+| ID | Display Name | Status | Size | Attached to |+--------------------------------------+--------------+--------+------+--------------------------------------------+| a1e8be72-a395-4a6f-8e07-856a57c39524 | volume1 | in-use | 1 | Attached to provider-instance on /dev/vdb |+--------------------------------------+--------------+--------+------+--------------------------------------------+#列出可用类型[root@openstack ~]# openstack flavor list+----+-----------+-------+------+-----------+-------+-----------+| ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public |+----+-----------+-------+------+-----------+-------+-----------+| 1 | m1.tiny | 512 | 1 | 0 | 1 | True |+----+-----------+-------+------+-----------+-------+-----------+#列出可用镜像[root@openstack ~]# openstack image list+--------------------------------------+--------+--------+| ID | Name | Status |+--------------------------------------+--------+--------+| 390eb5f7-8d49-41ec-95b7-68c0d5d54b34 | cirros | active |+--------------------------------------+--------+--------+#列出可用网络[root@openstack ~]# openstack network list+--------------------------------------+--------------+--------------------------------------+| ID | Name | Subnets |+--------------------------------------+--------------+--------------------------------------+| b5b6993c-ddf9-40e7-91d0-86806a42edb8 | provider | 310911f6-acf0-4a47-824e-3032916582ff |+--------------------------------------+--------------+--------------------------------------+#列出可用的安全组[root@openstack ~]# openstack security group list+--------------------------------------+---------+------------------------+| ID | Name | Description |+--------------------------------------+---------+------------------------+| dd2b614c-3dad-48ed-958b-b155a3b38515 | default | Default security group |+--------------------------------------+---------+------------------------+根据上面查询出来的结果进行创建实例
[root@openstack ~]# openstack server create --flavor m1.tiny --image cirros \ --nic net-id=b5b6993c-ddf9-40e7-91d0-86806a42edb8 --security-group default \ --key-name mykey provider-instance +--------------------------------------+-----------------------------------------------+| Property | Value |+--------------------------------------+-----------------------------------------------+| OS-DCF:diskConfig | MANUAL || OS-EXT-AZ:availability_zone | nova || OS-EXT-STS:power_state | 0 || OS-EXT-STS:task_state | scheduling || OS-EXT-STS:vm_state | building || OS-SRV-USG:launched_at | - || OS-SRV-USG:terminated_at | - || accessIPv4 | || accessIPv6 | || adminPass| hdF4LMQqC5PB || config_drive | || created | 2015-09-17T21:58:18Z || flavor | m1.tiny (1) || hostId | || id | 181c52ba-aebc-4c32-a97d-2e8e82e4eaaf || image | cirros (38047887-61a7-41ea-9b49-27987d5e8bb9) || key_name | mykey || metadata | {} || name | provider-instance || os-extended-volumes:volumes_attached | [] || progress | 0 || security_groups | default || status | BUILD || tenant_id| f5b2ccaa75ac413591f12fcaa096aa5c || updated | 2015-09-17T21:58:18Z || user_id | 684286a9079845359882afc3aa5011fb |+--------------------------------------+-----------------------------------------------+检查实例的状态[root@openstack ~]# openstack server list+--------------------------------------+-------------------+--------+---------------------------------+| ID | Name | Status | Networks |+--------------------------------------+-------------------+--------+---------------------------------+| 181c52ba-aebc-4c32-a97d-2e8e82e4eaaf | provider-instance | ACTIVE | provider=192.168.31.101 |+--------------------------------------+-------------------+--------+---------------------------------+获取你实例的VNC会话URL并从web浏览器访问它[root@openstack ~]# openstack console url show provider-instance+-------+------------------------------------------------------------------------------------------+| Field | Value|+-------+------------------------------------------------------------------------------------------+| type | novnc|| url | http://openstack.if010.com:6080/vnc_auto.html?token=5eeccb47-525c-4918-ac2a-3ad1e9f1f493 |+-------+------------------------------------------------------------------------------------------+
目前为止所用到的端口罗列在下面，可以供大家查询
# 远程访问服务# sshd.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program nametcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN 1220/sshd tcp6 0 0 :::22 :::* LISTEN 1220/sshd # 时间同步服务# chronyd.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program nameudp 0 0 0.0.0.0:123 0.0.0.0:* 1954/chronyd udp 0 0 127.0.0.1:323 0.0.0.0:* 1954/chronyd udp6 0 0 ::1:323 :::* 1954/chronyd# 数据库服务# mariadb.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program nametcp6 0 0 :::3306 :::* LISTEN 2368/mysqld# 消息队列服务# rabbitmq-server.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program nametcp 0 0 0.0.0.0:4369 0.0.0.0:* LISTEN 1/systemd tcp 0 0 0.0.0.0:15672 0.0.0.0:* LISTEN 3775/beam.smp(web)tcp 0 0 0.0.0.0:25672 0.0.0.0:* LISTEN 3775/beam.smp tcp6 0 0 :::5672 :::* LISTEN 3775/beam.smp# 分布式内存服务# memcached.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 127.0.0.1:11211 0.0.0.0:* LISTEN 6032/memcached tcp6 0 0 ::1:11211 :::* LISTEN 6032/memcached# 站点服务# httpd.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp6 0 0 :::80 :::* LISTEN 7138/httpd(default)tcp6 0 0 :::35357 :::* LISTEN 7138/httpd tcp6 0 0 :::5000 :::* LISTEN 7138/httpd# 镜像服务# openstack-glance-api.service、openstack-glance-registry.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:9191 0.0.0.0:* LISTEN 10683/python2 tcp 0 0 0.0.0.0:9292 0.0.0.0:* LISTEN 10649/python2 # 计算服务# openstack-nova-api.service、openstack-nova-consoleauth.service、openstack-nova-scheduler.service、openstack-nova-conductor.service、openstack-nova-novncproxy.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:6080 0.0.0.0:* LISTEN 28341/python2(vnc)tcp 0 0 0.0.0.0:8774 0.0.0.0:* LISTEN 28337/python2 tcp 0 0 0.0.0.0:8775 0.0.0.0:* LISTEN 28337/python2 tcp6 0 0 :::8778 :::* LISTEN 14667/httpd # 网络服务# neutron-server.service、neutron-linuxbridge-agent.service、neutron-dhcp-agent.service、neutron-metadata-agent.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:9696 0.0.0.0:* LISTEN 10916/python2 # 存储服务# openstack-cinder-api.service、openstack-cinder-scheduler.service、lvm2-lvmetad.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:8776 0.0.0.0:* LISTEN 25496/python2 # 编排服务# openstack-heat-api.service、openstack-heat-api-cfn.service、openstack-heat-engine.serviceProto Recv-Q Send-Q Local Address Foreign Address State PID/Program name tcp 0 0 0.0.0.0:8000 0.0.0.0:* LISTEN 29142/python tcp 0 0 0.0.0.0:8004 0.0.0.0:* LISTEN 29141/python 对于OpenStack的食用就到此处了，还有计费，数据库啥的有时间的话我会在补上去的吧~~~
来源地址：https://blog.csdn.net/qq_32262243/article/details/127113282
--结束END--
本文标题: 最全openstack部署教程
本文链接: https://www.lsjlt.com/news/374581.html(转载时请注明来源链接)
有问题或投稿请发送至: 邮箱/279061341@qq.com QQ/279061341
下载Word文档到电脑，方便收藏和打印～
2024-05-21
2024-05-21
2024-05-21
2024-05-21
2024-05-13
2024-05-13
2024-05-11
2024-05-11
2024-05-10
2024-05-07
回答
回答
回答
回答
回答
回答
回答
回答
回答
回答
官方手机版
微信公众号
商务合作
0