openstack nova neutron cinder节点安装html
#关闭selinux、防火墙 systemctl stop firewalld.service systemctl disable firewalld.service firewall-cmd --state sed -i '/^SELINUX=.*/c SELINUX=disabled' /etc/selinux/config sed -i 's/^SELINUXTYPE=.*/SELINUXTYPE=disabled/g' /etc/selinux/config grep --color=auto '^SELINUX' /etc/selinux/config setenforce 0 #时间同步 #设置hostname, 每一个节点分别设置 #时间同步 ####全部节点执行 yum install -y ntp systemctl enable ntpd && systemctl restart ntpd timedatectl set-timezone Asia/Shanghai /usr/sbin/ntpdate ntp6.aliyun.com echo "*/3 * * * * /usr/sbin/ntpdate ntp6.aliyun.com &> /dev/null" > /tmp/crontab crontab /tmp/crontab hostnamectl --static set-hostname node$(ip addr |grep brd |grep global |head -n1 |cut -d '/' -f1 |cut -d '.' -f4) [ `grep -c ' controller$' /etc/hosts ` -eq 0 ] && echo '192.168.0.170 v.meilele.com controller' >>/etc/hosts tail /etc/hosts echo ' [centos-openstack-liberty] name=CentOS-7 - OpenStack liberty baseurl=http://vault.centos.org/centos/7.3.1611/cloud/x86_64/openstack-liberty/ gpgcheck=0 enabled=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-Centos-7 ' >/etc/yum.repos.d/CentOS-OpenStack-liberty.repo tail /etc/yum.repos.d/CentOS-OpenStack-liberty.repo ######################################## ###############node yum install -y qemu-kvm libvirt virt-install systemctl enable libvirtd && systemctl restart libvirtd ##Nova linux-node2.openstack yum install -y openstack-nova-compute sysfsutils #compute1 Nova \cp -f /etc/nova/nova.conf{,.bak} echo " [DEFAULT] rpc_backend = rabbit auth_strategy = keystone my_ip = $(ip addr |grep global |grep $(route |grep default |awk '{print $NF}') |head -n1 |awk '{print $2}' |cut -d '/' -f1) network_api_class = nova.network.neutronv2.api.API security_group_api = neutron linuxnet_interface_driver = nova.network.linux_net.NeutronLinuxBridgeInterfaceDriver firewall_driver = nova.virt.firewall.NoopFirewallDriver verbose = True [glance] host = v.meilelee.com [keystone_authtoken] auth_uri = http://v.meilelee.com:5000 auth_url = http://v.meilelee.com:35357 auth_plugin = password project_domain_id = default user_domain_id = default project_name = service username = nova password = 123456 [libvirt] virt_type = kvm [neutron] url = http://v.meilelee.com:9696 auth_url = http://v.meilelee.com:35357 auth_plugin = password project_domain_id = default user_domain_id = default region_name = RegionOne project_name = service username = neutron password = 123456 [oslo_concurrency] lock_path = /var/lib/nova/tmp [oslo_messaging_rabbit] rabbit_host = v.meilelee.com rabbit_userid = openstack rabbit_password = 123456 [vnc] enabled = True vncserver_listen = 0.0.0.0 vncserver_proxyclient_address = \$my_ip novncproxy_base_url = http://v.meilele.com:6080/vnc_auto.html " >/etc/nova/nova.conf #[ $(egrep -c '(vmx|svm)' /proc/cpuinfo) -eq 0 ] && sed -i 's#virt_type.*#virt_type=qemu#g' /etc/nova/nova.conf || sed -i 's#virt_type.*#virt_type=kvm#g' /etc/nova/nova.conf grep virt_type /etc/nova/nova.conf systemctl enable libvirtd.service openstack-nova-compute.service systemctl restart libvirtd.service openstack-nova-compute.service ########################网络模块 neutron ##Neutron linux-node2.openstack yum install -y openstack-neutron openstack-neutron-linuxbridge ebtables ipset \cp -f /etc/neutron/neutron.conf{,.bak} echo ' [DEFAULT] rpc_backend = rabbit auth_strategy = keystone verbose = True [keystone_authtoken] auth_uri = http://v.meilelee.com:5000 auth_url = http://v.meilelee.com:35357 auth_plugin = password project_domain_id = default user_domain_id = default project_name = service username = neutron password = 123456 [oslo_concurrency] lock_path = /var/lib/neutron/tmp [oslo_messaging_rabbit] rabbit_host = v.meilelee.com rabbit_userid = openstack rabbit_password = 123456 ' >/etc/neutron/neutron.conf \cp -f /etc/neutron/plugins/ml2/linuxbridge_agent.ini{,.bak} echo " [linux_bridge] physical_interface_mappings = public:$(ip addr |grep global |grep $(route |grep default |awk '{print $NF}') |head -n1 |awk '{print $NF}') [vxlan] enable_vxlan = True local_ip = $(ip addr |grep global |grep $(route |grep default |awk '{print $NF}') |head -n1 |awk '{print $2}' |cut -d '/' -f1) l2_population = True [agent] prevent_arp_spoofing = True [securitygroup] enable_security_group = True firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver " >/etc/neutron/plugins/ml2/linuxbridge_agent.ini systemctl enable neutron-linuxbridge-agent.service systemctl restart openstack-nova-compute.service neutron-linuxbridge-agent.service ########################### ##Cinder yum install -y openstack-cinder targetcli python-oslo-policy systemctl enable openstack-cinder-volume.service target.service systemctl restart openstack-cinder-volume.service target.service echo " [DEFAULT] rpc_backend = rabbit auth_strategy = keystone my_ip = $(ip addr |grep global |grep $(route |grep default |awk '{print $NF}') |head -n1 |awk '{print $2}' |cut -d '/' -f1) glance_host = v.meilelee.com [BRCD_FABRIC_EXAMPLE] [CISCO_FABRIC_EXAMPLE] [cors] [cors.subdomain] [database] connection = mysql://cinder:123456@v.meilelee.com/cinder [fc-zone-manager] [keymgr] [keystone_authtoken] auth_uri = http://v.meilelee.com:5000 auth_url = http://v.meilelee.com:35357 auth_plugin = password project_domain_id = default user_domain_id = default project_name = service username = cinder password = 123456 [matchmaker_redis] [matchmaker_ring] [oslo_concurrency] lock_path = /var/lib/cinder/tmp [oslo_messaging_amqp] [oslo_messaging_qpid] [oslo_messaging_rabbit] rabbit_host = v.meilelee.com rabbit_userid = openstack rabbit_password = 123456 [oslo_middleware] [oslo_policy] [oslo_reports] [profiler] " >/etc/cinder/cinder.conf systemctl enable openstack-cinder-volume.service target.service systemctl restart openstack-cinder-volume.service target.service ################cinder nfs yum install -y nfs-utils rpcbind systemctl enable rpcbind nfs systemctl restart rpcbind nfs mkdir -p /data/nfs echo ' /data/nfs *(rw,no_root_squash) ' >>/etc/exports #all_squash：将远程访问的全部普通用户及所属组都映射为匿名用户或用户组； #no_all_squash：访问用户先与本机用户匹配，匹配失败后再映射为匿名用户或用户组； #root_squash：将root用户及所属组都映射为匿名用户或用户组； #no_root_squash：来访的root用户保持root账号权限； systemctl reload nfs echo ' [nfs] volume_driver = cinder.volume.drivers.nfs.NfsDriver nfs_shares_config = /etc/cinder/nfs_shares nfs_mount_point_base = $state_path/mnt volume_backend_name=nfs_volumes ' >>/etc/cinder/cinder.conf tail /etc/cinder/cinder.conf [ $(grep -c '^enabled_backends' /etc/cinder/cinder.conf) -eq 0 ] && sed -i 's/\[DEFAULT\]/ a enabled_backends=nfs/g' /etc/cinder/cinder.conf || sed -i 's/^enabled_backends.*=/enabled_backends=nfs,/g' /etc/cinder/cinder.conf #sed -i 's/^enabled_backends.*=/enabled_backends=nfs,/g' /etc/cinder/cinder.conf grep enabled_backends /etc/cinder/cinder.conf echo 'localhost:/data/nfs' >/etc/cinder/nfs_shares chown root.cinder /etc/cinder/nfs_shares chmod 640 /etc/cinder/nfs_shares #chgrp cinder /etc/cinder/nfs_shares systemctl restart openstack-cinder-volume.service