Openstack Train 版部署

# Enviroment

hostname os static ip

role

-------- ------- ----------------------------------------------------------

------------

controller centos7.8 网卡 1Nat 模式静态 10.10.10.101；br 网卡 2 仅主机模式不设 IP，

网关地址 192.168.40.1 主控

computer centos7.8 网卡 1Nat 模式静态 10.10.10.102；br 网卡 2 仅主机模式不设 IP，

网关地址 192.168.40.1 计算

#禁用防火墙，重启生效

systemctl disable firewalld

#临时关闭 selinux

setenforce 0

#禁用 selinux,重启生效

sed -i senforcingdisabledg etcselinuxconfig

#安装常用软件包

yum install vim net-tools lrzsz unzip dos2unix telnet sysstat iotop pciutils lsof tcpdump psmisc

bc wget socat gcc tree chrony ntpdate -y

#主机名写入 hosts

### controller

```shell

yum install chrony -y

vim etcchrony.conf

allow 10.10.0.016 (主控节点网段)

for op in enable restart status;do systemctl $op chronyd;done

```

### computer,block

yum install chrony -y

server controller iburst

## [OpenStack packages](httpsdocs.openstack.orginstall-guideenvironment-

packages.html#)

```shell

yum list centos-release-openstack

yum install centos-release-openstack-train -y

yum upgrade -y

yum install python-openstackclient openstack-selinux -y

```

## [SQL database](httpsdocs.openstack.orginstall-guideenvironment-sql-database.html)

yum install mariadb mariadb-server python2-PyMySQL -y

collation-server = utf8_general_ci

for op in enable start status;do systemctl $op mariadb;done

#数据库初始化，需要设置密码

mysql_secure_installation

```

## [Message queue](httpsdocs.openstack.orginstall-guideenvironment-messaging.html)

```shell

for op in enable start status;do systemctl $op rabbitmq-server;done

rabbitmq-plugins enable rabbitmq-management

systemctl restart rabbitmq-server

#访问 http 主控节点 IP15672，登录账户 guestguest，将刚建的 openstack 用户加入到管理

```

## [Memcached](httpsdocs.openstack.orginstall-guideenvironment-memcached.html)

```shell

yum install memcached python-memcached -y

sed -i 's127.0.0.110.10.10.101' etcsysconfigmemcached

for op in enable start status;do systemctl $op memcached;done

#[Member]

ETCD_LISTEN_PEER_URLS=http10.10.10.1012380

ETCD_LISTEN_CLIENT_URLS=http10.10.10.1012379

ETCD_NAME=controller

#[Clustering]

ETCD_INITIAL_ADVERTISE_PEER_URLS=http10.10.10.1012380

ETCD_ADVERTISE_CLIENT_URLS=http10.10.10.1012379

ETCD_INITIAL_CLUSTER=controller=http10.10.10.1012380

ETCD_INITIAL_CLUSTER_TOKEN=etcd-cluster-01

ETCD_INITIAL_CLUSTER_STATE=new

# [Keystone installation for Train](httpsdocs.openstack.orgkeystonetraininstall)

## Prerequisites

CREATE DATABASE keystone;

GRANT ALL PRIVILEGES ON keystone. TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';

GRANT ALL PRIVILEGES ON keystone. TO 'keystone'@'%' IDENTIFIED BY 'keystone';

exit;

```

## Install and configure components

```shell

yum install openstack-keystone httpd mod_wsgi -y

cp etckeystonekeystone.conf etckeystonekeystone.conf.bak

keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

keystone-manage bootstrap --bootstrap-password admin(管理员密码)

--bootstrap-admin-url httpcontroller5000v3

--bootstrap-internal-url httpcontroller5000v3

--bootstrap-public-url httpcontroller5000v3

--bootstrap-region-id RegionOne

```

## Configure the Apache HTTP server

vim etchttpdconfhttpd.conf

ServerName controller(主机名)

ln -s usrsharekeystonewsgi-keystone.conf etchttpdconf.d

```shell

for op in enable start status;do systemctl $op httpd;done

vim admin-openrc

export OS_USERNAME=admin

export OS_PASSWORD=Aadmin(管理员密码)

export OS_PROJECT_NAME=admin

export OS_USER_DOMAIN_NAME=Default

export OS_PROJECT_DOMAIN_NAME=Default

export OS_AUTH_URL=httpcontroller5000v3

export OS_IDENTITY_API_VERSION=3

```

--description Demo Project myproject