Openstack实验基础手册专业资料.doc

计算机新技术综合实践
研究生实验手册

课程名称： 计算机新技术综合实践
实验名称： 安装布置OpenStack
实验地点：
专 业：
班 级：
指引教师： 吴含前
实验时间： 年 月 日
实验一 64位Linux下手动安装OpenStack Icehouse版本
【实验内容】
学习VMware workstation虚拟机使用，在 CentOS 64位环境下安装搭建OpenStack环境，熟悉Linux基本操作，锻炼同窗学习能力、动手能力和分析问题能力。
【实验目】
1、熟悉VMware workstation虚拟机使用
2、理解OpenStack整体架构
3、理解OpenStack各组件功能
4、可以在Linux下手动搭建OpenStack云计算环境
【实验环境】
计算机实验室
VMware workstation虚拟机
【实验环节】
一、VMware workstation下安装CentOS 6.5 x64操作系统
1、 一方面安装VMware Workstation
2、 创立OpenStack控制节点，文献 → 新建虚拟机

3、 选取 典型（推荐）→ 下一步

4、 稍后安装操作系统

5、 选取操作系统和版本

6、 输入虚拟机名称和安装途径

7、 设立磁盘大小

8、 自定义硬件

9、 选取CentOS安装镜像文献

10、 点击完毕

11、 启动虚拟机

12、 选取第一项，安装全新操作系统或升级既有操作系统

13、 Tab键进行选取，选取Skip，退出检测

14、 点击Next

15、 选取语言，这里选取是中文简体

16、 选取键盘样式

17、 选取存储设备

18、 输入主机名

19、 配备网络

20、 设立时区，勾选使用UTC时间

21、 输入根顾客（root）密码

22、 依照此Linux详细功能，选取不同方式

23、 选取当前自定义，自定义安装需要软件，如桌面配备

24、 点击下一步，开始安装

25、 安装完毕后，点击重新导引

26、 点击迈进按钮

27、 点击是，批准允许，再点击迈进按钮

28、 创立顾客

29、 设立日期和时间，如果可以上网，勾选在网上同步日期和时间

二、OpenStack环境预配备
1、 设立OpenStack网络，一块NAT网卡，一块仅主机网卡

2、 同理创立此外两台虚拟机，一台计算节点，一台网络节点
3、 配备虚拟机网络环境，如下表
服务器
网卡配备
主机名
管理节点(ControllerNode)
eth0:10.6.12.130
eth1:192.168.1.130
controller
计算节点(ComputeNode)
eth0:10.6.12.131
eth1:192.168.1.131
compute1
网络节点(NetworkNode)
eth0:10.6.12.132
eth1:192.168.1.132
eth2:(onboot=”yes”，bootproto=”none”)
network

三、OpenStack环境搭建
1、 安装布置控制节点
(1) 一方面配备Linux能上网，可以ping通www.百度.com
(2) 安装MySQL数据库
如下执行命令
# yum install ntp
# service ntpd start
# chkconfig ntpd on
# yum install mysql mysql-server MySQL-python

编辑 /etc/f 文献:
# vi /etc/f

[mysqld]
...
bind-address = 10.6.12.130 #添加这句

[mysqld]
...
default-storage-engine = innodb #添加这句
innodb_file_per_table #添加这句
collation-server = utf8_general_ci #添加这句
init-connect = 'SET NAMES utf8' #添加这句
character-set-server = utf8 #添加这句
保存退出

# service mysqld start
# chkconfig mysqld on
# mysql_install_db
# mysql_secure_installation
(3) 安装OpenStack软件源包
# yum install yum-plugin-priorities
# yum install
# yum install
# yum install openstack-utils
# yum install openstack-selinux
# yum upgrade
# reboot
(4) 安装qpid
# yum install qpid-cpp-server

编辑/etc/qpidd.conf文献
# vi /etc/qpidd.conf
auth=no #修改为no
保存退出

# service qpidd start
# chkconfig qpidd on
(5) 安装keystone组件
# yum install openstack-keystone python-keystoneclient
# openstack-config --set /etc/keystone/keystone.conf database connection mysql://keystone:keystone@controller/keystone

$ mysql -u root -p
mysql> CREATE DATABASE keystone;
mysql> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';
mysql> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';
mysql> exit

# su -s /bin/sh -c "keystone-manage db_sync" keystone

# ADMIN_TOKEN=$(openssl rand -hex 10)
# echo $ADMIN_TOKEN
# openstack-config --set /etc/keystone/keystone.conf DEFAULT admin_token $ADMIN_TOKEN

# keystone-manage pki_setup --keystone-user keystone --keystone-group keystone
# chown -R keystone:keystone /etc/keystone/ssl
# chmod -R o-rwx /etc/keystone/ssl

# service openstack-keystone start
# chkconfig openstack-keystone on

# (crontab -l -u keystone 2>&1 | grep -q token_flush) || echo '@hourly /usr/bin/keystone-manage token_flush >/var/log/keystone/keystone-tokenflush.log 2>&1' >> /var/spool/cron/keystone

编辑~/.bash_profile文献，在最后添加
export OS_USERNAME=admin
export OS_PASSWORD=admin
export OS_TENANT_NAME=admin
export OS_AUTH_URL=http://controller:35357/v2.0
export ADMIN_TOKEN=223e5aa00e1401925a5d【注意此值与ADMIN_TOKEN值同样】
export SERVICE_TOKEN=$ADMIN_TOKEN
export SERVICE_ENDPOINT=http://controller:35357/v2.0
export OS_SERVICE_TOKEN=$ADMIN_TOKEN
export OS_SERVICE_ENDPOINT=http://controller:35357/v2.0
保存退出

#source ~/.bash_profile

$ keystone user-create --name=admin --pass=admin --email=
$ keystone role-create --name=admin
$ keystone tenant-create --name=admin --description="Admin Tenant"
$ keystone user-role-add --user=admin --tenant=admin --role=admin
$ keystone user-role-add --user=admin --role=_member_ --tenant=admin

$ keystone user-create --name=demo --pass=demo --email=
$ keystone tenant-create --name=demo --description"Demo Tenant"
$ keystone user-role-add --user=demo --role=_member_ --tenant=demo
$ keystone tenant-create --name=service --description="Service Tenant"

$ keystone service-create --name=keystone --type=identity --description="OpenStack Identity"
$ keystone endpoint-create --service-id=$(keystone service-list | awk '/ identity / {print $2}') --publicurl=http://controller:5000/v2.0 --internalurl=http://controller:500key0/v2.0 --adminurl=http://controller:35357/v2.0
(6) 安装glance组件
# yum install openstack-glance python-glanceclient
# openstack-config --set /etc/glance/glance-api.conf database connection mysql://glance:glance@controller/glance
# openstack-config --set /etc/glance/glance-registry.conf database connection mysql://glance:glance@controller/glance

$ mysql -u root -p
mysql> CREATE DATABASE glance;
mysql> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';
mysql> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'glance';
mysql> exit;

# openstack-db --init --service glance
# keystone user-create --name=glance --pass=glance --email=
# keystone user-role-add --user=glance --tenant=service --role=admin

# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_uri http://controller:5000
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_host controller
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_tenant_name service
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_user glance
# openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_password glance
# openstack-config --set /etc/glance/glance-api.conf paste_deploy flavor keystone
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_uri http://controller:5000
# openstack-config --set /etc/glance/glance-registryconf keystone_authtoken auth_host controller
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_tenant_name service
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_user glance
# openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_password glance
# openstack-config --set /etc/glance/glance-registry.conf paste_deploy flavor keystone

# keystone service-create --name=glance --type=image --description="OpenStack Image Service"
# keystone endpoint-create --service-id=$(keystone service-list | awk '/ image / {print $2}') --publicurl=http://controller:9292 --internalurl=http://controller:9292 --adminurl=http://controller:9292

# service openstack-glance-api restart
# service openstack-glance-registry restart
# chkconfig openstack-glance-api on
# chkconfig openstack-glance-registry on
(7) 安装Nova组件
# yum install openstack-nova-api openstack-nova-cert openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler python-novaclient
# openstack-config --set /etc/nova/nova.conf database connection mysql://nova:nova@controller/nova
# openstack-config --set /etc/nova/nova.conf DEFAULT rpc_backend qpid
# openstack-config --set /etc/nova/nova.conf DEFAULT qpid_hostname controller
# openstack-config --set /etc/nova/nova.conf DEFAULT my_ip 10.6.12.130
# openstack-config --set /etc/nova/nova.conf DEFAULT vncserver_listen 10.6.12.130
# openstack-config --set /etc/nova/nova.conf DEFAULT vncserver_proxyclient_address 10.6.12.130（控制节点Controller IP地址）

mysql -u root -p
mysql> CREATE DATABASE nova;
mysql> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';
mysql> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'nova';
mysql> exit;

# su -s /bin/sh -c "nova-manage db sync" nova

# keystone user-create --name=nova --pass=nova --email=
# keystone user-role-add --user=nova --tenant=service --role=admin
# openstack-config --set /etc/nova/nova.conf DEFAULT auth_strategy keystone
# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_uri http://controller:5000
# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_host controller
# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_user nova
# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_tenant_name service
# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_password nova

# keystone service-create --name=nova --type=compute --description="OpenStack Compute"
# keystone endpoint-create --service-id=$(keystone service-list | awk '/ compute / {print $2}') --publicurl=http://controller:8774/v2/%\(tenant_id\)s --internalurl=http://controller:8774/v2/%\(tenant_id\)s --adminurl=http://controller:8774/v2/%\(tenant_id\)s

# service openstack-nova-api restart
# service openstack-nova-cert restart
# service openstack-nova-consoleauth restart
# service openstack-nova-scheduler restart
# service openstack-nova-conductor restart
# service openstack-nova-novncproxy restart
# chkconfig openstack-nova-api on
# chkconfig openstack-nova-cert on
# chkconfig openstack-nova-consoleauth on
# chkconfig openstack-nova-scheduler on
# chkconfig openstack-nova-conductor on
# chkconfig openstack-nova-novncproxy on
(8) 安装Neutron组件
# yum install openstack-neutron openstack-neutron-ml2 python-neutronclient

$ mysql -u root -p
mysql> CREATE DATABASE neutron;
mysql> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';
mysql> GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';
mysql> exit;

$ keystone user-create --name neutron --pass neutron --email
$ keystone user-role-add --user neutron --tenant service --role admin
keystone service-create --name=neutron --type=network --description="OpenStack Networking"
$ keystone endpoint-create --service-id $(keystone service-list | awk '/ network / {print $2}') --publicurl http://controller:9696 --adminurl http://controller:9696 --internalurl http://controller:9696

# openstack-config --set /etc/neutron/neutron.conf database connection mysql://neutron:neutron@controller/neutron
# openstack-config --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_uri http://controller:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_host controller
# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_tenant_name service
# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_user neutron
# openstack-config --set /etc/neutron/neutron.conf keystone_authtoken admin_password neutron

# openstack-config --set /etc/neutron/neutron.conf DEFAULT rpc_backend mon.rpc.impl_qpid
# openstack-config --set /etc/neutron/neutron.conf DEFAULT qpid_hostname controller

# openstack-config --set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_status_changes True
# openstack-config --set /etc/neutron/neutron.conf DEFAULT notify_nova_on_port_data_changes True
# openstack-config --set /etc/neutron/neutron.conf DEFAULT nova_url http://controller:8774/v2
# openstack-config --set /etc/neutron/neutron.conf DEFAULT nova_admin_username nova
# openstack-config --set /etc/neutron/neutron.conf DEFAULT nova_admin_tenant_id $(keystone tenant-list | awk '/ service / { print $2 }')
# openstack-config --set /etc/neutron/neutron.conf DEFAULT nova_admin_password nova
# openstack-config --set /etc/neutron/neutron.conf DEFAULT nova_admin_auth_url http://controller:35357/v2.0

# openstack-config --set /etc/neutron/neutron.conf DEFAULT core_plugin ml2
# openstack-config --set /etc/neutron/neutron.conf DEFAULT service_plugins router

# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 type_drivers gre
# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 tenant_network_types gre
# openstack-config -set /etc/neutron/plugins/ml2/ml2_conf.ini ml2 mechanism_drivers openvswitch
# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini ml2_type_gre tunnel_id_ranges 1:1000
# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup firewall_driver neutron.agent.linux.iptablesfirewall.OVSHybridIptablesFirewallDriver
# openstack-config --set /etc/neutron/plugins/ml2/ml2_conf.ini securitygroup enable_security_group True

# openstack-config --set /etc/nova/nova.conf DEFAULT network_api_class work.neutronv2.api.API
# openstack-config --set /etc/nova/nova.conf DEFAULT neutron_url http://controller:9696
# openstack-config --set /etc/nova/nova.conf DEFAULT neutron_auth_strategy keystone
# openstack-config --set /etc/nova/nova.conf DEFAULT neutron_admin_tenant_name service
# openstack-config --set /etc/nova/nova.conf DEFAULT neutron_admin_username neutron
# openstack-config --set /etc/nova/nova.conf DEFAULT neutron_admin_password neutron
# openstack-config --set /etc/nova/nova.conf DEFAULT neutron_admin_auth_url http://controller:35357/v2.0
# openstack-config --set /etc/nova/nova.conf DEFAULT linuxnet_interface_driver work.linux_net.LinuxOVSInterfaceDriver
# openstack-config --set /etc/nova/nova.conf DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver
# openstack-config --set /etc/nova/nova.conf DEFAULT security_group_api neutron security_group_api neutron

# ln -s plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini
# service openstack-nova-api restart
# service openstack-nova-scheduler restart
# service openstack-nova-conductor restart

# service neutron-server restart
# chkconfig neutron-server on
2、 安装布置计算节点
(1) 一方面配备Linux能上网，可以ping通www.百度.com
(2) 安装OpenStack软件包源
# yum insta