02-单节点的OpenStack一体化部署
在安装centos7的计算机中通过RDO的packstack安装工具自动安装单节点OpenStack测试平台，这里用的OpenStack版本为Queens。
1、准备安装的基础环境
①安装带图形界面的centos7.5操作系统（这里不在阐述）
②装完系统后，查看网络是否可用
[root@localhost ~]# ifconfig ens33
ens33: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.136.129 netmask 255.255.255.0 broadcast 192.168.136.255
inet6 fe80::f33c:4348:bfa7:f870 prefixlen 64 scopeid 0x20<link>
ether 00:0c:29:82:0e:68 txqueuelen 1000 (Ethernet)
RX packets 93 bytes 12781 (12.4 KiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 122 bytes 13299 (12.9 KiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
[root@localhost ~]# ping www.baidu.com #验证网络是否连接外网
PING www.a.shifen.com (61.135.169.121) 56(84) bytes of data.
64 bytes from 61.135.169.121 (61.135.169.121): icmp_seq=1 ttl=128 time=5.84 ms
64 bytes from 61.135.169.121 (61.135.169.121): icmp_seq=2 ttl=128 time=9.24 ms
③查看yum源是否可用
[root@localhost ~]# yum repolist
已加载插件：fastestmirror, langpacks
Loading mirror speeds from cached hostfile
* base: mirror.bit.edu.cn
* extras: mirror.bit.edu.cn
* updates: mirror.bit.edu.cn
源标识 源名称 状态
base/7/x86_64 CentOS-7 - Base 10,070
extras/7/x86_64 CentOS-7 - Extras 397
updates/7/x86_64 CentOS-7 - Updates 862
repolist: 11，329
④修改主机名
[root@localhost ~]# hostnamectl set-hostname openstack.cn
[root@localhost ~]# hostname
openstack.cn
⑤修改selinux为disabled
[root@localhost ~]# vim /etc/selinux/config #修改配置文件
SELINUX=disabled
[root@localhost ~]# reboot #修改为disabled时，一定要重启系统，才能生效
⑥禁用防火墙
[root@openstack ~]# systemctl disable firewalld# 禁用防火墙
Removed symlink /etc/systemd/system/multi-user.target.wants/firewalld.service.
Removed symlink /etc/systemd/system/dbus-org.fedoraproject.FirewallD1.service.
[root@openstack ~]# systemctl stop firewalld #禁用防火墙
[root@openstack ~]# systemctl status firewalld #查看防火墙状态
● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/usr/lib/systemd/system/firewalld.service; disabled; vendor preset: enabled)
Active: inactive (dead) # 防火墙此时必须是dead状态
Docs: man:firewalld(1)
6月 29 10:46:10 openstack.cn systemd[1]: Starting firewalld - dynamic firewall daemon...
6月 29 10:46:11 openstack.cn systemd[1]: Started firewalld - dynamic firewall daemon.
6月 29 10:50:33 openstack.cn systemd[1]: Stopping firewalld - dynamic firewall daemon...
6月 29 10:50:34 openstack.cn systemd[1]: Stopped firewalld - dynamic firewall daemon.
⑦禁用NetworkManager服务
centos7的网络默认由NetworkManager（网络管理器）负责管理，但NetworkManager服务与OpenStack网络组建的Neturon有冲突，因此必须停用它，改成传统的网络服务Network来管理服务。
[root@openstack ~]# systemctl disable NetworkManager #禁用NetworkManager
Removed symlink /etc/systemd/system/multi-user.target.wants/NetworkManager.service.
Removed symlink /etc/systemd/system/dbus-org.freedesktop.NetworkManager.service.
Removed symlink /etc/systemd/system/dbus-org.freedesktop.nm-dispatcher.service.
Removed symlink /etc/systemd/system/network-online.target.wants/NetworkManager-wait-online.service.
[root@openstack ~]# systemctl stop NetworkManager #禁用NetworkManager
[root@openstack ~]# systemctl start network #重启传统网络服务network
[root@openstack ~]# systemctl enable network #开机自启动传统网络服务network
[root@openstack ~]# ping www.baidu.com #验证网络的可以用性
PING www.a.shifen.com (61.135.169.121) 56(84) bytes of data.
64 bytes from 61.135.169.121 (61.135.169.121): icmp_seq=1 ttl=128 time=5.84 ms
64 bytes from 61.135.169.121 (61.135.169.121): icmp_seq=2 ttl=128 time=9.24 ms
⑧设置主机名解析
每个节点都要设置可识别的主机名，通过 /etc/hosts文件来提供各节点主机的名称解析
注意：所有节点的主机名都要提供解析，各节点上的127.0.0.1的名称解析必须保留，不能删除。要保证各个节点能够连接Internet，且每个节点的ip地址和主机名能够互相解析。
[root@openstack ~]# vim /etc/hosts
192.168.136.129 openstack.cn openstack #文件的末尾处添加此命令
[ip地址] [域名] [主机名]
⑨更改语言编码
如果centos7安装的是非英文版本，需要更改语言编码
[root@openstack ~]# vim /etc/environment #设置英文环境
LANG=en_US.utf-8
LC_ALL=en_US.utf-8
⑩设置时间同步
[root@openstack ~]# yum -y install chrony #安装事假同步NTP包
[root@openstack ~]# vim /etc/chrony.conf #修改配置文件 ，指向阿里云同步
server ntp1.aliyun.com iburst #阿里云ntp同步时间
allow 0/0 #允许所有计算机连接此时间服务器
[root@openstack ~]# systemctl restart chronyd #重启时间同步chronyd服务
[root@openstack ~]# chronyc sourcestats #检查源时间服务器状态
210 Number of sources = 5
Name/IP Address NP NR Span Frequency Freq Skew Offset Std Dev
==============================================================================
amy.chl.la 0 0 0 +0.000 2000.000 +0ns 4000ms
makaki.miuku.net 9 6 1039 -2.924 16.830 +26ms 3509us
119.28.183.184 20 13 21m -2.790 15.150 +17ms 6024us
time.cloudflare.com 23 9 54m -5.858 14.740 +20ms 16ms
120.25.115.20 22 15 55m +0.000 1.979 +24ns 1530us
[root@openstack ~]# chronyc sources #检查设置的源时间服务器
210 Number of sources = 5
MS Name/IP address Stratum Poll Reach LastRx Last sample
===============================================================================
^? amy.chl.la 0 10 0 - +0ns[ +0ns] +/- 0ns
^- makaki.miuku.net 2 7 377 11 +26ms[ +26ms] +/- 96ms
^- 119.28.183.184 2 7 377 106 +18ms[ +18ms] +/- 67ms
^- time.cloudflare.com 3 8 377 128 +4783us[+4783us] +/- 137ms
^* 120.25.115.20 2 8 377 391 -2181us[-2156us] +/- 25ms
注意：只要有^*就有同步
*********************************************
2、准备所需的软件库
[root@openstack ~]# yum -y install centos-release-openstack-queens #安装centos-release-openstack-queens
[root@openstack ~]# yum-config-manager --enable openstack-queens #确保openstack-queens可用
[root@openstack ~]#yum update -y #升级所有包，并升级内核
[root@openstack ~]#yum -y install yum-plugin-priorities #安装yum-plugin-priorities插件用于设置yum调用软件源顺序
[root@openstack ~]#cd /etc/yum.repos.d/ #进入yum.repos.d目录
[root@openstack ~]#curl -O https://trunk.rdoproject.org/centos7/delorean-deps.repo #下载delorean-deps.repo
[root@openstack ~]#curl -O https://trunk.rdoproject.org/centos7/current-passed-ci/delorean.repo #下载delorean.repo
[root@openstack ~]#yum update -y #升级所有包，并升级内核
************************************************
3、安装packstack安装器
[root@openstack ~]#yum install -y openstack-packstack #安装过程需要安装很多依赖包
************************************************
4、运行packstack安装OpenStack
使用"All-in-One"方式进行单节点部署
[root@openstack ~]# packstack --allinone
Welcome to the Packstack setup utility
The installation log file is available at: /var/tmp/packstack/20200629-131314-8mFyAb/openstack-setup.log
Packstack changed given value to required value /root/.ssh/id_rsa.pub
Installing:
Clean Up [DONE ]
Discovering ipprotocol version [DONE ]
# 设置SSH密钥
Setting up sshkeys [ DONE ]
# 准备服务器
Preparing servers [ DONE ]
# 安装Puppet和探测主机详情之前
Pre installing Puppet and discovering
hosts' details [ DONE ]
# 准备预装的项目
Preparing pre-install entries [ DONE ]
# 设置证书
Setting up CACERT [ DONE ]
# 准备AMQP（高级消息队列协议）项目
Preparing AMQP entries [ DONE ]
# 准备MariaDB（现已代替MySQL）数据库项目
Preparing MariaDBentries [ DONE ]
# 修正Keystone LDAP参数
Fixing Keystone LDAP configparameters to be undef if
empty[ DONE ]
# 准备Keystone（认证服务）项目
Preparing Keystone entries [ DONE ]
# 准备Glance（镜像服务）项目
Preparing Glance entries [ DONE ]
# 检查Cinder（卷存储服务）是否有卷
Checking if the Cinder server has a
cinder-volumes vg[ DONE ]
# 准备Cinder（卷存储服务）项目
Preparing Cinder entries [ DONE ]
# 准备Nova API（Nova对外接口）项目
Preparing Nova API entries [ DONE ]
# 为Nova迁移创建SSH密钥
Creating sshkeys for Nova migration [ DONE]
Gathering sshhost keys for Nova migration [ DONE]
# 准备Nova Compute（计算服务）项目
Preparing Nova Compute entries [ DONE ]
# 准备Nova Scheduler（调度服务）项目
Preparing Nova Scheduler entries [ DONE ]
# 准备Nova VNC（虚拟网络控制台）代理项目
Preparing Nova VNC Proxy entries [ DONE ]
# 准备OpenStack与网络相关的Nova项目
Preparing OpenStackNetwork-related Nova entries [ DONE ]
# 准备Nova通用项目
Preparing Nova Common entries [ DONE ]
# 以下准备Neutron（网络组件）项目
Preparing Neutron LBaaSAgent entries [ DONE ]
Preparing Neutron API entries [ DONE ]
Preparing Neutron L3 entries [ DONE ]
Preparing Neutron L2 Agent entries [ DONE ]
Preparing Neutron DHCP Agent entries [ DONE ]
Preparing Neutron Metering Agententries [ DONE ]
Checking if NetworkManagerisenabled and running [ DONE ]
# 准备OpenStack客户端项目
Preparing OpenStackClient entries [ DONE ]
# 准备Horizon仪表板项目
Preparing Horizon entries [ DONE ]
# 以下准备Swift（对象存储）项目
Preparing Swift builder entries [ DONE ]
Preparing Swift proxy entries [ DONE ]
Preparing Swift storage entries [ DONE ]
# 准备Gnocchi（用于计费的时间序列数据库作为服务）项目
Preparing Gnocchi entries [ DONE ]
# 准备Redis（用于计费的数据结构服务器）项目
Preparing Redisentries [ DONE ]
# 准备Ceilometer（计费服务）项目
Preparing Ceilometer entries [ DONE ]
# 准备Aodh（警告）项目
Preparing Aodhentries [ DONE]
# 准备Puppet模块和配置清单
Preparing Puppet manifests [ DONE ]
Copying Puppet modules and manifests [ DONE ]
# 应用控制节点（测试时可能需要较长时间）
Applying 192.168.136.129_controller.pp #在此过程要等待30min左右
192.168.136.129_controller.pp: [ DONE ]
# 应用网络节点（测试时可能需要较长时间）
Applying 192.168.136.129_network.pp
192.168.136.129_network.pp: [ DONE ]
# 应用计算节点（测试时可能需要较长时间）
Applying 192.168.136.129_compute.pp
192.168.136.129_compute.pp: [ DONE ]
# 应用Puppet配置清单
Applying Puppet manifests [ DONE ]
Finalizing [ DONE ]
# 安装成功完成应用并给出其他提示信息
**** Installation completed successfully ******
Additional information:
* Parameter CONFIG_NEUTRON_L2_AGENT: You have chosen OVN Neutron backend. Note that this backend does not support the VPNaaS or FWaaS services. Geneve will be used as the encapsulation method for tenant networks
# 执行命令产生的应答文件
* A new answerfile was created in: /root/packstack-answers-20200629-131315.txt
# 未安装时间同步。，需要确认CentOS 7当前的系统时间正确，如果不正确，则需要修改
* Time synchronization installation was skipped. Please note that unsynchronized time on server instances might be problem for some OpenStack components.
# 在用户主目录下产生keystonerc_admin文件，使用命令行工具需要使用它作为授权凭据
* File /root/keystonerc_admin has been created on OpenStack client host 192.168.136.129. To use the command line tools you need to source the file.
# 访问OpenStack Dashboard（Web访问接口），请使用keystonerc_admin中的登录凭据
* To access the OpenStack Dashboard browse to http://192.168.136.129/dashboard .
Please, find your login credentials stored in the keystonerc_admin in your home directory.
* Because of the kernel update the host 192.168.136.129 requires reboot.
# 安装日志文件名及其路径
* The installation log file is available at: /var/tmp/packstack/20200629-131314-8mFyAb/openstack-setup.log
# Puppet配置清单路径
* The generated manifests are available at: /var/tmp/packstack/20200629-131314-8mFyAb/manifests
You have new mail in /var/spool/mail/root
以上利用DRO安装OpenStack过程。整个环境配置及安装大概需要1.5个小时。
