云主机基本环境&Keystone 和 云主机Cinder
是样题中“任务三、IaaS运维 ”中的单主机Keystone+Cinder配置。
首先应能够运行云主机,正常获取IP地址,配置安全组启用SSH,确认三层交换机上实现管理和外网两个网段之间的路由互通,才可以做这部分内容。
1、基本环境
注意:hostname:controller
(云主机的计算机名默认是由云主机的IP地址组成的,需要编辑/etc/sysconfig/network设置主机名为controller,重启生效。)
(1)NetworkManager(先确认是否有这个服务,有就停掉)
service NetworkManager stop
chkconfig NetworkManager off
(2)YUM
指向物理controller的FTP服务器,与物理compute相同
(3)iptables
service iptables stop
chkconfig iptables off
(4)selinux
setenforce 0
vi /etc/sysconfig/selinux
[iyunv@controller ~]# getenforce
Permissive
(5)network
vi /etc/sysconfig/network-scripts/ifcfg-eth0
service network restart
(6)hosts
vi /etc/hosts
云主机IP controller
ping controller
(7)MySQL
yum install mysql mysql-server MySQL-python
vi /etc/my.cnf
bind-address = 云主机IP
default-storage-engine = innodb
innodb_file_per_table
collation-server = utf8_general_ci
init-connect = 'SET NAMES utf8'
character-set-server = utf8
service mysqld start
chkconfig mysqld on
mysql_install_db
/usr/bin/mysqladmin -u root password '000000'
mysql_secure_installation
(8)openstack packages
yum install yum-plugin-priorities
yum install openstack-utils
yum install openstack-selinux
yum upgrade
(9)Qpid
yum install qpid-cpp-server
vi /etc/qpidd.conf
auth=no
service qpidd start
chkconfig qpidd on
2、认证服务Keystone
(1)配置数据库
mysql -u root -p
CREATE DATABASE keystone;
CREATE DATABASE cinder;
CREATE DATABASE heat;
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '000000';
GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY '000000';
GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'localhost' IDENTIFIED BY 'HEAT_DBPASS';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '000000';
GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY '000000';
GRANT ALL PRIVILEGES ON heat.* TO 'heat'@'%' IDENTIFIED BY 'HEAT_DBPASS';
exit
(2)配置Keystone
yum install openstack-keystone python-keystoneclient
openstack-config --set /etc/keystone/keystone.conf database connection mysql://keystone:000000@controller/keystone
su -s /bin/sh -c "keystone-manage db_sync" keystone
ADMIN_TOKEN=$(openssl rand -hex 10)
echo $ADMIN_TOKEN
6780543e503ae1f8bb5d <----------- 记下来
openstack-config --set /etc/keystone/keystone.conf DEFAULT admin_token $ADMIN_TOKEN
keystone-manage pki_setup --keystone-user keystone --keystone-group keystone
chown -R keystone:keystone /etc/keystone/ssl
chmod -R o-rwx /etc/keystone/ssl
service openstack-keystone start
chkconfig openstack-keystone on
(crontab -l -u keystone 2>&1 | grep -q token_flush) || echo '@hourly /usr/bin/keystone-manage token_flush >/var/log/keystone/keystone-tokenflush.log 2>&1' >> /var/spool/cron/keystone
crontab -l -u keystone
export OS_SERVICE_TOKEN=6780543e503ae1f8bb5d <-------------$ADMIN_TOKEN
export OS_SERVICE_ENDPOINT=http://controller:35357/v2.0
keystone user-create --name=admin --pass=000000 --email=admin@localhost
keystone role-create --name=admin
keystone tenant-create --name=admin --description="Admin Tenant"
keystone user-role-add --user=admin --tenant=admin --role=admin
keystone user-role-add --user=admin --role=_member_ --tenant=admin
keystone user-create --name=user1 --pass=000000 --email=user1@localhost
keystone tenant-create --name=user1 --description="User1 Tenant"
keystone user-role-add --user=user1 --role=_member_ --tenant=user1
keystone tenant-create --name=service --description="Service Tenant"
keystone service-create --name=keystone --type=identity --description="OpenStack Identity"
keystone endpoint-create \
--service-id=$(keystone service-list | awk '/ identity / {print $2}') \
--publicurl=http://controller:5000/v2.0 \
--internalurl=http://controller:5000/v2.0 \
--adminurl=http://controller:35357/v2.0
(3)测试Keystone
unset OS_SERVICE_TOKEN OS_SERVICE_ENDPOINT
keystone --os-username=admin --os-password=000000 --os-auth-url=http://controller:35357/v2.0 token-get
keystone --os-username=admin --os-password=000000 --os-tenant-name=admin --os-auth-url=http://controller:35357/v2.0 token-get
cd
vi admin-openrc.sh
export OS_USERNAME=admin
export OS_PASSWORD=000000
export OS_TENANT_NAME=admin
export OS_AUTH_URL=http://controller:35357/v2.0
source admin-openrc.sh
keystone token-get
keystone user-list
keystone user-role-list --user admin --tenant admin
运维网声明
1、欢迎大家加入本站运维交流群:群②:261659950 群⑤:202807635 群⑦870801961 群⑧679858003
2、本站所有主题由该帖子作者发表,该帖子作者与运维网 享有帖子相关版权
3、所有作品的著作权均归原作者享有,请您和我们一样尊重他人的著作权等合法权益。如果您对作品感到满意,请购买正版
4、禁止制作、复制、发布和传播具有反动、淫秽、色情、暴力、凶杀等内容的信息,一经发现立即删除。若您因此触犯法律,一切后果自负,我们对此不承担任何责任
5、所有资源均系网友上传或者通过网络收集,我们仅提供一个展示、介绍、观摩学习的平台,我们不对其内容的准确性、可靠性、正当性、安全性、合法性等负责,亦不承担任何法律责任
6、所有作品仅供您个人学习、研究或欣赏,不得用于商业或者其他用途,否则,一切后果均由您自己承担,我们对此不承担任何法律责任
7、如涉及侵犯版权等问题,请您及时通知我们,我们将立即采取措施予以解决
8、联系人Email:admin@iyunv.com 网址:www.yunweiku.com