OpenStack-Ocata-单点部署教程

OpenStackOcata版本单点部署姓名：日期：目录1OpenStack安装环境搭建.......................................................................41.1CenOS7初始配置.............................................................................................41.2基础环境配置.....................................................................................................52Keystone—认证服务..............................................................................72.1概述.....................................................................................................................72.2keystone安装与配置..........................................................................................72.3创建域/项目/用户/角色......................................................................................92.4keystone功能验证............................................................................................102.5创建客户端认证脚本.......................................................................................113Glance—镜像服务................................................................................133.1概述...................................................................................................................133.2glance安装与配置.............................................................................................133.3glance功能验证.................................................................................................174Nova—计算服务...................................................................................184.1概述...................................................................................................................184.2controller节点安装与配置...............................................................................184.3compute节点安装与配置.................................................................................254.4nova功能验证...................................................................................................275Neutron—网络服务..............................................................................295.1概述...................................................................................................................295.2controller节点安装与配置...............................................................................295.3neutron功能验证...............................................................................................356Horizon—前台界面..............................................................................366.1概述...................................................................................................................366.2horizon安装与配置...........................................................................................366.3horizon功能验证...............................................................................................377Cinder—块存储服务.............................................................................387.1概述...................................................................................................................387.2controller节点安装与配置...............................................................................387.3storage节点安装与配置...................................................................................427.4cinder功能验证.................................................................................................448实例部署...............................................................................................451OpenStack安装环境搭建1.1CenOS7初始配置单点虚拟机配置：CPU8核，内存16GB，存储100GB，网卡2块。操作系统：CentOS7在搭建OpenStack安装环境之前需要初始化centos的系统配置，包括网络、在线更新源、安全三个部分。1.网络两块网卡一块设置为外网访问IP，另一块设置为本地管理网络IP。修改配置文件/etc/sysconfig/network-scripts/ifcfg-xxx(根据网卡名称修改)：2.在线更新源备份原有源文件：mv/etc/yum.repos.d/CentOS-Base.repo/etc/yum.repos.d/CentOS-Base.repo.backup下载网易源文件并更改文件名为CentOS-Base.repo：建立缓存并更新：yumcleanallyummakecacheyumupdate3.安全关闭防火墙与selinux：systemctldisablefirewalld.servicesystemctlstopfirewalld.servicesetenforce0配置文件/etc/selinux/config，将SELINUX设置为disabled。1.2基础环境配置1.启用OpenStack仓库yuminstallcentos-release-openstack-ocata完成安装：安装OpenStack客户端--yuminstallpython-openstackclient安装selinux安装包--yuminstallopenstack-selinux2.设置内外网IP对应主机名修改配置文件/etc/hosts退出重新登录即可生效3.MySQL数据库安装配置安装相关软件包：yuminstallmariadb-serverpython2-PyMySQL编辑配置文件/etc/my.cnf.d/openstack.cnf：启动数据库服务：systemctlenablemariadb.servicesystemctlstartmariadb.service设置数据库密码：mysql_secure_installation测试登录：mysql–uroot–p4.消息队列RabbitMQ安装与配置安装软件包：yuminstallrabbitmq-server启用消息队列服务：systemctlenablerabbitmq-server.servicesystemctlstartrabbitmq-server.service添加opensatck用户：rabbitmqctladd_useropenstackPASS设置权限：rabbitmqctlset_permissionsopenstack.*.*.*5.Memcached安装与配置Memcached的作用为缓存tokens。安装相关软件包：yuminstallmemcachedpython-memcached配置文件/etc/sysconfig/memcached启动服务：systemctlenablememcached.servicesystemctlstartmemcached.service2Keystone—认证服务2.1概述云安全需要考虑数据安全、身份与访问管理安全、虚拟化安全和基础设施安全四个部分。Keystone为OpenStack中的一个独立的提供安全认证的模块，主要负责OpenStack用户的身份认证、令牌管理、提供访问资源的服务目录，以及基于用户角色的访问控制。在OpenStack整体框架中，Keystone作用类似于服务总线，其他服务需要通过Keys