1.准备实验环境
#使用vagrant创建虚拟机,并修改sshd配置 # -*- mode: ruby -*- # vi: set ft=ruby : Vagrant.require_version ">= 1.6.0" boxes = [ { :name => "stack", :eth1 => "192.168.1.220", :mem => "16384", :cpu => "8" } ] Vagrant.configure(2) do |config| config.vm.box = "centos7" boxes.each do |opts| config.vm.define opts[:name] do |config| config.vm.hostname = opts[:name] config.vm.provider "vmware_fusion" do |v| v.vmx["memsize"] = opts[:mem] v.vmx["numvcpus"] = opts[:cpu] end config.vm.provider "virtualbox" do |v| v.customize ["modifyvm", :id, "--memory", opts[:mem]] v.customize ["modifyvm", :id, "--cpus", opts[:cpu]] end config.vm.network :public_network, ip: opts[:eth1] end end end #修改ssh配置 [root@stack ~]# grep Password /etc/ssh/sshd_config PasswordAuthentication yes [root@stack ~]# grep PermitRoot /etc/ssh/sshd_config PermitRootLogin yes [root@stack ~]# #关闭selinux,NetwokMnager,firewalld sed -i 's/enforcing/disabled/g' /etc/selinux/config systemctl stop firewalld systemctl disable firewalld systemctl stop NetworkManager systemctl disable NetworkManager #设置hosts [root@stack ~]# cat /etc/hosts 127.0.0.1 stack stack 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.1.220 stack #配置yum源 [root@stack yum.repos.d]# cat Aliyun-openstack.repo [Aliyun-openstack] name=Aliyun-openstack baseurl=https://mirrors.aliyun.com/centos/$releasever/cloud/$basearch/openstack-rocky/ gpgcheck=0 enabled=1 cost=88 [Aliyun-qemu-ev] name=Aliyun-qemu-ev baseurl=https://mirrors.aliyun.com/centos/$releasever/virt/$basearch/kvm-common/ https://mirrors.aliyun.com/centos gpgcheck=0 enabled=1 ----------------------------------------------------------------------------------------- [root@stack yum.repos.d]# cat epel.repo [epel] name=Extra Packages for Enterprise Linux 7 - $basearch baseurl=http://mirrors.aliyun.com/epel/7/$basearch #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-7&arch=$basearch failovermethod=priority enabled=1 gpgcheck=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 [epel-debuginfo] name=Extra Packages for Enterprise Linux 7 - $basearch - Debug baseurl=http://mirrors.aliyun.com/epel/7/$basearch/debug #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-debug-7&arch=$basearch failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 gpgcheck=0 [epel-source] name=Extra Packages for Enterprise Linux 7 - $basearch - Source baseurl=http://mirrors.aliyun.com/epel/7/SRPMS #mirrorlist=https://mirrors.fedoraproject.org/metalink?repo=epel-source-7&arch=$basearch failovermethod=priority enabled=0 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-EPEL-7 gpgcheck=0 ----------------------------------------------------------------------------------------- [root@stack yum.repos.d]# cat CentOS-Base.repo # CentOS-Base.repo # # The mirror system uses the connecting IP address of the client and the # update status of each mirror to pick mirrors that are updated to and # geographically close to the client. You should use this for CentOS updates # unless you are manually picking other mirrors. # # If the mirrorlist= does not work for you, as a fall back you can try the # remarked out baseurl= line instead. # # [base] name=CentOS-$releasever - Base - mirrors.aliyun.com failovermethod=priority baseurl=http://mirrors.aliyun.com/centos/$releasever/os/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=os gpgcheck=1 gpgkey=http://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7 #released updates [updates] name=CentOS-$releasever - Updates - mirrors.aliyun.com failovermethod=priority baseurl=http://mirrors.aliyun.com/centos/$releasever/updates/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=updates gpgcheck=1 gpgkey=http://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7 #additional packages that may be useful [extras] name=CentOS-$releasever - Extras - mirrors.aliyun.com failovermethod=priority baseurl=http://mirrors.aliyun.com/centos/$releasever/extras/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=extras gpgcheck=1 gpgkey=http://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7 #additional packages that extend functionality of existing packages [centosplus] name=CentOS-$releasever - Plus - mirrors.aliyun.com failovermethod=priority baseurl=http://mirrors.aliyun.com/centos/$releasever/centosplus/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=centosplus gpgcheck=1 enabled=0 gpgkey=http://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7 #contrib - packages by Centos Users [contrib] name=CentOS-$releasever - Contrib - mirrors.aliyun.com failovermethod=priority baseurl=http://mirrors.aliyun.com/centos/$releasever/contrib/$basearch/ #mirrorlist=http://mirrorlist.centos.org/?release=$releasever&arch=$basearch&repo=contrib gpgcheck=1 enabled=0 gpgkey=http://mirrors.aliyun.com/centos/RPM-GPG-KEY-CentOS-7 2.安装packstack相关软件
#重装leatherman yum -y remove leatherman\* yum -y install leatherman-1.3.0\* #安装packstack yum -y install openstack-utils yum -y install openstack-packstack 3.生成并修改packstack应答文件
#生成应答文件 packstack --gen-answer-file=aa.txt #修改应答文件(若没有ifconfig命令,安装net-tools) [root@stack ~]# cat preinstall.sh #!/bin/bash #packstack --gen-answer-file=aa.txt IP=$(ifconfig eth1 | awk '/inet /{print $2}') sed -i '/^CONFIG_COMPUTE_HOSTS=/cCONFIG_COMPUTE_HOSTS='$IP'' aa.txt sed -i '/^CONFIG_PROVISION_DEMO=/cCONFIG_PROVISION_DEMO=n' aa.txt sed -i '/^CONFIG_NEUTRON_ML2_TYPE_DRIVERS=/cCONFIG_NEUTRON_ML2_TYPE_DRIVERS=flat,vxlan' aa.txt sed -i '/^CONFIG_NEUTRON_ML2_FLAT_NETWORKS=/cCONFIG_NEUTRON_ML2_FLAT_NETWORKS=datacentre' aa.txt sed -i '/^CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=/cCONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=datacentre:br-ex' aa.txt #sed -i '/^CONFIG_HEAT_INSTALL=/cCONFIG_HEAT_INSTALL=y' aa.txt sed -i.bak -r 's/(.+_PW)=[0-9a-z]+/\1=redhat/g' aa.txt cat <<EOF 请把下面两句话添加控制节点和计算节点的/etc/hosts $IP $(hostname) $(hostname -s) 运行下面的命令安装opensteack packstack --answer-file=aa.txt EOF #ps:若ping不通百度,查看默认路由是否准确 4.安装openstack
packstack --answer-file=aa.txt
5.创建桥接网络
[root@stack ~]# cat postinstall.sh
#!/bin/bash IP=$(ifconfig eth1 | awk '/inet /{print $2}') GW=$(echo $IP | awk -F. '{print $1"."$2"."$3"."2}') dir="/etc/sysconfig/network-scripts/" cat > $dir/ifcfg-br-ex <<EOF DEVICE=br-ex DEVICETYPE=ovs TYPE=OVSBridge BOOTPROTO=none IPADDR=$IP NETMASK=255.255.255.0 GATEWAY=$GW DNS1=$GW ONBOOT=yes EOF cat > $dir/ifcfg-eth1 <<EOF DEVICE=eth1 DEVICETYPE=ovs TYPE=OVSPort ONBOOT=yes BOOTPROTO=none OVS_BRIDGE=br-ex EOF echo "请执行 systemctl restart network重启网络，且保证网络正常启动" 6.创建实例验证openstack可用性
#创建用户 [root@stack ~(keystone_admin)]# openstack user create --password redhat test +---------------------+----------------------------------+ | Field | Value | +---------------------+----------------------------------+ | domain_id | default | | enabled | True | | id | 1d1941d6b4f94ec8a1219c88ae15ee35 | | name | test | | options | {} | | password_expires_at | None | +---------------------+----------------------------------+ #创建项目 [root@stack ~(keystone_admin)]# openstack project create test +-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | | | domain_id | default | | enabled | True | | id | 605b0cf0f33a46f08a27ae953b19ba94 | | is_domain | False | | name | test | | parent_id | default | | tags | [] | +-------------+----------------------------------+ #用户关联项目(role) [root@stack ~(keystone_admin)]# openstack role add --user test --project test admin [root@stack ~(keystone_admin)]# openstack role assignment list --name +---------------+--------------------+-------+------------------+--------+--------+-----------+ | Role | User | Group | Project | Domain | System | Inherited | +---------------+--------------------+-------+------------------+--------+--------+-----------+ | admin | test@Default | | test@Default | | | False | | admin | cinder@Default | | services@Default | | | False | | admin | swift@Default | | services@Default | | | False | | ResellerAdmin | ceilometer@Default | | services@Default | | | False | | admin | ceilometer@Default | | services@Default | | | False | | admin | gnocchi@Default | | services@Default | | | False | | admin | neutron@Default | | services@Default | | | False | | admin | aodh@Default | | services@Default | | | False | | admin | admin@Default | | admin@Default | | | False | | admin | placement@Default | | services@Default | | | False | | admin | glance@Default | | services@Default | | | False | | admin | nova@Default | | services@Default | | | False | | admin | admin@Default | | | | all | False | +---------------+--------------------+-------+------------------+--------+--------+-----------+ 创建桥接网络
#确认桥接网络是否创建,查看网卡配置文件 [root@stack network-scripts(keystone_admin)]# cat ifcfg-eth0 DEVICE=eth0 DEVICETYPE=ovs TYPE=OVSPort ONBOOT=yes BOOTPROTO=none OVS_BRIDGE=br-ex [root@stack network-scripts(keystone_admin)]# cat ifcfg-br-ex DEVICE=br-ex DEVICETYPE=ovs TYPE=OVSBridge BOOTPROTO=none IPADDR=192.168.1.220 NETMASK=255.255.255.0 GATEWAY=192.168.1.2 DNS1=192.168.1.2 ONBOOT=yes #查看桥接网络 [root@stack network-scripts(keystone_admin)]# ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast master ovs-system state UP qlen 1000 link/ether 52:54:00:ca:e4:8b brd ff:ff:ff:ff:ff:ff inet6 fe80::5054:ff:feca:e48b/64 scope link valid_lft forever preferred_lft forever 3: ovs-system: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 96:ea:82:07:36:81 brd ff:ff:ff:ff:ff:ff 4: br-int: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 66:0e:e2:4f:c3:4b brd ff:ff:ff:ff:ff:ff 5: br-ex: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN qlen 1000 link/ether a6:02:6d:5a:e4:43 brd ff:ff:ff:ff:ff:ff inet 192.168.1.220/24 brd 192.168.1.255 scope global br-ex valid_lft forever preferred_lft forever inet6 2408:8256:3885:303a:a402:6dff:fe5a:e443/64 scope global mngtmpaddr dynamic valid_lft 259190sec preferred_lft 172790sec inet6 fe80::a402:6dff:fe5a:e443/64 scope link valid_lft forever preferred_lft forever 6: br-tun: <BROADCAST,MULTICAST> mtu 1500 qdisc noop state DOWN qlen 1000 link/ether 86:45:49:02:72:40 brd ff:ff:ff:ff:ff:ff 管理员创建外部网络
登录用户test
创建内部网络后查看拓扑
#上传镜像 openstack image create "demo" --file cirros-0.3.4-x86_64-disk.img --disk-format qcow2 --container-format bare --public openstack image list #创建实例规格 openstack flavor create --disk 1 --vcpus 1 --ram 64 --public --project-domain test s1.tiny #查看实例前置资源 #查看image [root@stack ~(keystone_admin)]# openstack image list +--------------------------------------+--------+--------+ | ID | Name | Status | +--------------------------------------+--------+--------+ | cd82f5b8-f531-4a6d-bdec-52bca312b7ff | cirros | active | | 8c881671-689b-4800-b75c-bedac09ff255 | demo | active | +--------------------------------------+--------+--------+ #查看flavor openstack flavor list [root@stack ~(keystone_admin)]# openstack flavor list +--------------------------------------+-----------+-------+------+-----------+-------+-----------+ | ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public | +--------------------------------------+-----------+-------+------+-----------+-------+-----------+ | 1 | m1.tiny | 512 | 1 | 0 | 1 | True | | 2 | m1.small | 2048 | 20 | 0 | 1 | True | | 3 | m1.medium | 4096 | 40 | 0 | 2 | True | | 4 | m1.large | 8192 | 80 | 0 | 4 | True | | 5 | m1.xlarge | 16384 | 160 | 0 | 8 | True | | 945270de-a01a-48ae-bb5e-c43d2cd1d493 | s.tiny | 64 | 1 | 0 | 1 | True | | e60139de-3a24-4bd5-b52c-09eab4a3c457 | s1.small | 128 | 1 | 0 | 1 | True | +--------------------------------------+-----------+-------+------+-----------+-------+-----------+ #可创建 openstack flavor create --disk 1 --vcpus 1 --ram 64 --public --project-domain test s.tiny #查看安全组 [root@stack ~(keystone_admin)]# openstack security group list +--------------------------------------+---------+------------------------+----------------------------------+------+ | ID | Name | Description | Project | Tags | +--------------------------------------+---------+------------------------+----------------------------------+------+ | 1cb85427-4e56-49e1-bb83-85585bfb6140 | demo-sg | | 605b0cf0f33a46f08a27ae953b19ba94 | [] | | 3d1f1c15-972c-40b7-9d9b-b997cf60c76e | default | Default security group | 605b0cf0f33a46f08a27ae953b19ba94 | [] | | 8874f333-f086-43ef-8c7e-d50da432c4bf | default | Default security group | df5999672201403aa31fb955f10adde6 | [] | | 8cc809bb-ce0e-401e-8692-0b831d08b614 | default | Default security group | 7dadee390b244dbbbca03a58a59cfc6c | [] | | bfbdae01-f499-41c7-a754-34a47a38aad6 | default | Default security group | | [] | +--------------------------------------+---------+------------------------+----------------------------------+------+ #查看网络 [root@stack ~(keystone_admin)]# openstack network list +--------------------------------------+---------+--------------------------------------+ | ID | Name | Subnets | +--------------------------------------+---------+--------------------------------------+ | 331d986e-7b0a-4d2c-acd0-cffe4c64beeb | net-ex | 69712017-1037-442d-a2c1-d02cdc5b5970 | | dc7da17a-83ce-4f66-91d9-ec299a6538cc | pub-int | 67f4e13c-14bf-46b8-a82d-5f34580b4de4 | +--------------------------------------+---------+--------------------------------------+ #创建实例 openstack server create --image demo --flavor s.tiny --security-group demo-sg --network pub-int vm01 #分配浮动ip openstack network list openstack floating ip create net-ex openstack floating ip list #绑定浮动ip openstack server add floating ip vm01 192.168.1.27 #浮动ip在路由接口上 [root@stack ~(test_admin)]# ip netns exec qrouter-06593c2e-fa20-44dd-ba37-030b9fa57837 ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN qlen 1 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 11: qg-eb9df27e-52: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UNKNOWN qlen 1000 link/ether fa:16:3e:15:0b:bb brd ff:ff:ff:ff:ff:ff inet 192.168.1.29/24 brd 192.168.1.255 scope global qg-eb9df27e-52 valid_lft forever preferred_lft forever inet 192.168.1.22/32 brd 192.168.1.22 scope global qg-eb9df27e-52 valid_lft forever preferred_lft forever inet 192.168.1.27/32 brd 192.168.1.27 scope global qg-eb9df27e-52 valid_lft forever preferred_lft forever inet6 2408:8256:3885:303a:f816:3eff:fe15:bbb/64 scope global mngtmpaddr dynamic valid_lft 259192sec preferred_lft 172792sec inet6 fe80::f816:3eff:fe15:bbb/64 scope link valid_lft forever preferred_lft forever 12: qr-7f7369b9-1c: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1450 qdisc noqueue state UNKNOWN qlen 1000 link/ether fa:16:3e:84:96:e3 brd ff:ff:ff:ff:ff:ff inet 10.0.10.1/24 brd 10.0.10.255 scope global qr-7f7369b9-1c valid_lft forever preferred_lft forever inet6 fe80::f816:3eff:fe84:96e3/64 scope link valid_lft forever preferred_lft forever
packstack --allinone --provision-demo=n --os-neutron-ovs-bridge-mappings=extnet:br-ex --os-neutronml2-type-drivers=vxlan,flat
#记录一台单节点物理服务器使用PackStack部署OpenStack-Train版的操作
戴尔R720
系统：centos7.8.2003
cpu型号： E5-2670v2
2C8核32线程
内存 32G
网络环境:
eth0 192.168.100.106 物理外网
eth1 172.16.0.106 私有内网
1
2
3
4
5
6
7
8
#服务器基础优化
echo 'net.ipv4.ip_forward=1 ' >>/etc/sysctl.conf
echo 'net.ipv4.tcp_tw_recycle=1 ' >>/etc/sysctl.conf
echo 'net.ipv4.tcp_tw_reuse=1 ' >>/etc/sysctl.conf
sysctl -p
chmod +x /etc/rc.d/rc.local
yum install -y mlocate lrzsz tree vim nc nmap wget bash-completion bash-completion-extras cowsay sl htop iotop iftop lsof net-tools sysstat unzip bc psmisc ntpdate wc telnet-server bind-utils sshpass
echo 'localhost 192.168.100.106' >>/etc/hosts
systemctl stop firewalld
systemctl disable firewalld
setenforce 0
sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
systemctl stop NetworkManager
systemctl disable NetworkManager
wget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.repo
curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo
yum install -y mlocate lrzsz tree vim nc nmap wget bash-completion bash-completion-extras cowsay sl htop iotop iftop lsof net-tools sysstat unzip bc psmisc ntpdate wc telnet-server bind-utils sshpass
sed -i 's#keepcache=0#keepcache=1#g' /etc/yum.conf
yum clean all
yum makecache
ntpdate ntp1.aliyun.com
echo '*/30 * * * * /sbin/ntpdate ntp1.aliyun.com >/dev/null 2>&1' >>/var/spool/cron/root
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
#安装train版yum源
yum install centos-release-openstack-train -y
1
#安装openstack-packstack工具用于生成openstack应答文件
yum install openstack-packstack -y
packstack --gen-answer-file=openstack.txt
packstack --allinone #allinone模式
packstack --gen-answer-file=<file> #生成部署配置文件
packstack --answer-file=<file> #选择应答文件
1
2
3
4
5
6
#packstack每个版本的配置文件均有小改动，不要修改错位置
可以详细学习一下配置文件的各个模块的配置参数，可根据自己实际需求更改
[19:57 root@localhost ~]# vim openstack.txt
41行: y-n #SWIFT是OpenStack的对象存储组件，默认是Y，在生产环境中一般是不装，所以改n
50行: y-n #不安装该服务
97行: 10.0.1.120,10.0.1.130 #计算节点ip地址
808 openvswitch
813: physnet1 #flat网络这边要设置物理网卡名字
840 openvswitch #L2网络的代理模式,也可选择linuxbridge
858: physnet1:br-ex #这边要设置物理网卡的名字
869: br-ex:eth0 #这边br-ex:eth0是网络节点的nat网卡，到时候安装完毕之后IP地址会漂到这个上
1181: y-n #DEMO是OpenStack联网下载一个测试镜像，这边没联网。说以改成n
1
2
3
4
5
6
7
8
9
10
##更改密码（123456）
sed -i -r 's/(.+_PW)=.+/\1=123456/' openstack.txt
1
#备份配置文件
egrep -v "^#|^$" openstack.txt >openstack.txt.bak1
1
#查看所有的主机ip地址是否都指定到eth0网卡
[20:01 root@localhost ~]# grep 'HOST=' openstack.txt
CONFIG_CONTROLLER_HOST=192.168.100.106
CONFIG_VCENTER_HOST=
CONFIG_STORAGE_HOST=192.168.100.106
CONFIG_SAHARA_HOST=192.168.100.106
CONFIG_AMQP_HOST=192.168.100.106
CONFIG_MARIADB_HOST=192.168.100.106
CONFIG_TEMPEST_HOST=
CONFIG_REDIS_HOST=192.168.100.106
1
2
3
4
5
6
7
8
9
#一键部署单节点
[20:15 root@localhost ~]# packstack --answer-file=openstack.txt
Welcome to the Packstack setup utility
The installation log file is available at: /var/tmp/packstack/20200614-205624-uEmdI2/openstack-setup.log
Installing:
Clean Up [ DONE ]
Discovering ip protocol version [ DONE ]
Setting up ssh keys [ DONE ]
Preparing servers [ DONE ]
Pre installing Puppet and discovering hosts' details [ DONE ]
Preparing pre-install entries [ DONE ]
Setting up CACERT [ DONE ]
Preparing AMQP entries [ DONE ]
Preparing MariaDB entries [ DONE ]
Fixing Keystone LDAP config parameters to be undef if empty[ DONE ]
Preparing Keystone entries [ DONE ]
Preparing Glance entries [ DONE ]
Checking if the Cinder server has a cinder-volumes vg[ DONE ]
Preparing Cinder entries [ DONE ]
Preparing Nova API entries [ DONE ]
Creating ssh keys for Nova migration [ DONE ]
Gathering ssh host keys for Nova migration [ DONE ]
Preparing Nova Compute entries [ DONE ]
Preparing Nova Scheduler entries [ DONE ]
Preparing Nova VNC Proxy entries [ DONE ]
Preparing OpenStack Network-related Nova entries [ DONE ]
Preparing Nova Common entries [ DONE ]
Preparing Neutron API entries [ DONE ]
Preparing Neutron L3 entries [ DONE ]
Preparing Neutron L2 Agent entries [ DONE ]
Preparing Neutron DHCP Agent entries [ DONE ]
Preparing Neutron Metering Agent entries [ DONE ]
Checking if NetworkManager is enabled and running [ DONE ]
Preparing OpenStack Client entries [ DONE ]
Preparing Horizon entries [ DONE ]
Preparing Gnocchi entries [ DONE ]
Preparing Redis entries [ DONE ]
Preparing Ceilometer entries [ DONE ]
Preparing Puppet manifests [ DONE ]
Copying Puppet modules and manifests [ DONE ]
Applying 192.168.100.106_controller.pp
192.168.100.106_controller.pp: [ DONE ]
Applying 192.168.100.106_network.pp
192.168.100.106_network.pp: [ DONE ]
Applying 192.168.100.106_compute.pp
192.168.100.106_compute.pp: [ DONE ]
Applying Puppet manifests [ DONE ]
Finalizing [ DONE ]
**** Installation completed successfully ******
Additional information:
* Time synchronization installation was skipped. Please note that unsynchronized time on server instances might be problem for some OpenStack components.
* File /root/keystonerc_admin has been created on OpenStack client host 192.168.100.106. To use the command line tools you need to source the file.
* To access the OpenStack Dashboard browse to http://192.168.100.106/dashboard .
Please, find your login credentials stored in the keystonerc_admin in your home directory.
* The installation log file is available at: /var/tmp/packstack/20200614-205624-uEmdI2/openstack-setup.log
* The generated manifests are available at: /var/tmp/packstack/20200614-205624-uEmdI2/manifests
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
#packstack部署禁止了openstack的dashbrard界面对域的支持，需要可打开
vim /etc/openstack-dashboard/local_settings
79 OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True
85 OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = 'Default'
461 TIME_ZONE = "Asia/Shanghai" #配置时区为亚洲上海
systemctl restart httpd.service memcached.service
1
2
3
4
5
6
#故障报错
facter: error while loading shared libraries: leatherman_curl.so.1.3.0: cannot open shared object file: No such file or directory
leatherman rpm包版本问题
[20:06 root@localhost ~/openstack]# yum list | grep leatherman
leatherman.x86_64 1.10.0-1.el7 @epel
leatherman-devel.x86_64 1.10.0-1.el7 epel
而facter需要1.3.0
[20:09 root@localhost ~/openstack]# facter -p
facter: error while loading shared libraries: leatherman_curl.so.1.3.0: cannot open shared object file: No such file or directory
回退leatherman版本
yum downgrade leatherman -y
packstack --gen-answer-file=answers_default_allin1.txt \ --allinone --timeout=999999 --default-password=password \ --provision-demo=n \ --os-neutron-ovs-bridge-mappings=extnet:br-ex \ --os-neutron-ovs-bridge-interfaces=br-ex:ens3 \ --os-neutron-ml2-type-drivers=vxlan,flat \ --os-neutron-ml2-tenant-network-types=vxlan \ --os-heat-install=y --os-heat-cfn-install=y \ --os-magnum-install=y \ --os-neutron-l2-agent=openvswitch
OpenStack Keystone配置产生错误Access denied for user 'keystone'@'10.0.2.15' (using password: YES)") None N
参照别人的一篇教程在Ubuntu上配置OpenStack，前边进行的都很顺利，当配置到keystone-manage db_sync时，产生如下的错误：
注意看最后一句，Access denied for user ‘keystone’@’10.0.2.15’ (using password: YES)”) None None
访问被拒绝了，然后我试着直接用keystone访问数据库，发现也不行
由此想到可能是我的密码设置错了，然后利用root用户登陆到mysql数据库中使用如下命令：
select host,user from mysql.user;
找出数据库中的所有用户，情况如下：
果然，虽然密码那一列被加密了，但还是能看出keystone设置的密码和root设置的密码是不一样的，因为按照正常情况，我是按照他们的密码相同访问的，所以要把keystone的密码改过来。
使用如下的命令：
grant all privileges on keystone.* to 'keystone'@'%' identified by '这里写你的密码';
利用相同的方法把nova和glance的密码也都改过，改好后再次查看：
利用下面的命令刷新一下权限列表：
flush privileges;
然后service mysql restart重启数据库服务，再次执行命令keystone-manage db_sync，没有任何的输出，说明执行正确了。
错误1：
bash: line 7: restorecon: command not found
解决办法: yum install policycoreutils-2.5-29.el7_6.1.x86_64
错误2：
Error: Package: audit-libs-python-2.8.4-4.el7.x86_64
rpm -aq | grpe audit-libs 发现已经装了高版本
解决办法：
rpm -e audit-2.8.5-4.el7.x86_64
yum downgrade audit-libs-2.8.4-4.el7.x86_64
错误3：
ERROR : Error appeared during Puppet run: 10.70.1.208_controller.pp
Error: Execution of '/usr/bin/yum -d 0 -e 0 -y install iptables-services' returned 1: Error: Package: glibc-2.17-260.el7_6.3.i686 (CTyun-Yum-Updates)
You will find full trace in log /var/tmp/packstack/20200922-141756-fV0nKk/manifests/10.70.1.208_controller.pp.log
解决办法：
yum downgrade glibc-2.17-260.el7_6.3.x86_64 glibc-common-2.17-260.el7_6.3.x86_64 glibc-headers-2.17-260.el7_6.3.x86_64 glibc-devel-2.17-260.el7_6.3.x86_64
错误4：
ERROR : Error appeared during Puppet run: 10.70.1.208_controller.pp
Error: Execution of '/usr/bin/yum -d 0 -e 0 -y install iptables-services' returned 1: Error: Multilib version problems found. This often means that the root
解决办法：
yum downgrade iptables-1.4.21-28.el7.x86_64
错误5：
Parameter CONFIG_NEUTRON_L2_AGENT: You have chosen OVN Neutron backend. Note that this backend does not support the VPNaaS or FWaaS services. Geneve will be used as the encapsulation method for tenant networks
解决办法：
修改yum源配置
将mariadb的percona配置的enable改为0,重新yum clean all;yum makecache;yum update
错误6：
Error: Execution of '/usr/bin/yum -d 0 -e 0 -y install openstack-cinder' returned 1: Transaction check error:
You will find full trace in log /var/tmp/packstack/20200922-153644-qYYvPO/manifests/10.70.1.208_controller.pp.log
查看后台提示包冲突：
from install of python-paramiko-2.1.1-9.el7.noarch conflicts with file from package python2-paramiko-1.16.1-2.el7.noarch
解决办法：
yum erase python2-paramiko-1.16.1-2.el7.noarch
yum install python-paramiko-2.1.1-9.el7.noarch
错误7：
mError: Execution of '/usr/bin/yum -d 0 -e 0 -y install python2-placement' returned 1: Error: Nothing to do^[[0m
不明白为什么要下载这个包，
http://rpm.pbone.net/index.php3
解决办法：我是下载的1.0.0版本：python2-placement-1.0.0-1.el7.noarch.rpm
然后依次下载或者更新依赖包
错误8：
httpd服务启动失败：python[122833]: ERROR:scss.ast:Function not found: function-exists:1").
解决办法：搜了下，基本没有找到办法，不过有个说注释了这里就可以启动
vi /usr/lib/systemd/system/httpd.service.d/openstack-dashboard.conf
错误9：
httpd启动失败：
Sep 23 16:32:45 controller-node httpd[13551]: (98)Address already in use: AH00072: make_sock: could not bind to address [::]:8778
Sep 23 16:32:45 controller-node httpd[13551]: (98)Address already in use: AH00072: make_sock: could not bind to address 0.0.0.0:8778
解决办法：
1.先禁用ipv6，禁用的方法：https://www.jianshu.com/p/d5d4008d25bb （后来看应该和ipv6没有关系）
2.关闭iptables（之前是关闭过，不知道什么时候又被打开了）
systemctl stop iptables.service
systemctl stop ip6tables.service
systemctl disable iptables.service
systemctl disable ip6tables.service
还是没有解决
然后发现httpd配置下端口配置8778确实存在冲突
修改成8779（找一个没有用到的端口）
问题最终解决
错误10：
内存不足：
Error: Failed to apply catalog: Cannot allocate memory - fork(2)
You will find full trace in log /var/tmp/packstack/20200924-105039-_v_Tzr/manifests/10.70.1.208_controller.pp.log
Please check log file /var/tmp/packstack/20200924-105039-_v_Tzr/openstack-setup.log for more information
虚机内存只分配了2G。。。重新分配了8G内存解决
错误11：
Error: Failed to apply catalog: Execution of '/usr/bin/openstack image list --quiet --format csv --long' returned 1: Internal Server Error (HTTP 500) (Request-ID: req-922d4682-17e7-4eec-b79c-abc2bdc8e6ce) (tried 26, for a total of 170 seconds)
You will find full trace in log /var/tmp/packstack/20200924-133243-SGGe7X/manifests/10.70.1.208_controller.pp.log
Please check log file /var/tmp/packstack/20200924-133243-SGGe7X/openstack-setup.log for more information
解决办法：
执行了一次这个命令，然后--debug看好戏是keystoneauth时没有通过，然后去glance的api.log查看发现swift有error信息
于是把swift关了重新执行
但是仍然没有解决，然后直接执行 /usr/bin/openstack --debug image list --quiet --format csv --long报500的内部错误，直接根据请求号再/var/log/glance/api.log去找发现数据库查询时没有数据库表
比较奇怪的是发现数据库都有，但是库中没有任何表，简单查找了资料没有找到，直接手动同步算了
keystone-manage db_sync
cinder-manage db sync
glance-manage db sync
nova-manage db sync
然后检查数据库表都有了，再次执行
错误12：
Error: Parameter name failed on Sshkey[ecdsa-sha2-nistp256.controller-node,localhost]: No comma in resourcename allowed. If you want to specify aliases use the host_aliases property (file: /var/tmp/packstack/3b0a36ae5fcb404fac5aad2fb87debcc/manifests/10.70.1.208_compute.pp, line: 13)
You will find full trace in log /var/tmp/packstack/20200924-151356-JXd1hM/manifests/10.70.1.208_compute.pp.log
应该是我的hosts文件配置的问题
x.x.x.x control-node,localhost
其他所有问题参考：https://openstack.redhat.com/Workarounds
错误13：
ERROR : Error appeared during Puppet run: 10.70.1.208_compute.pp
Error: Execution of '/usr/bin/yum -d 0 -e 0 -y install openstack-nova-migration' returned 1: Error: Package: cryptsetup-2.0.3-3.el7.x86_64 (CTyun-Yum-Base)
You will find full trace in log /var/tmp/packstack/20200924-153903-kRHZ3D/manifests/10.70.1.208_compute.pp.log
yum downgrade cryptsetup-2.0.3-3.el7.x86_64 cryptsetup-libs-2.0.3-3.el7.x86_64
最后终于完成了