前言:不积硅步,无以至千里;不积小流,无以成江海
nova控制节点装完了,终于该轮到计算节点出场了。
安装配置nova计算节点
安装软件包
yum install openstack-nova-compute
编辑配置文件
vi /etc/nova/nova.conf
[DEFAULT]
enables_apis = osapi_compute,metadata 默认启动计算和元数据的api
transport_url = rabbit://openstack:000000@controller 配置消息队列
my_ip = 192.168.200.101 自己的ip
use_neutron = true 网络服务
firewall_driver = nova.virt.firewall.NoopFirewallDriver 关闭防火墙并配置nova防火墙
[api]
auth_strategy = keystone
[keystone_authtoken]
www_authenticate_uri = http://controller:5000/
auth_url = http://controller:5000/
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = 000000
[vnc]
enabled = true
server_listen = 0.0.0.0
server_proxyclient_address = $my_ip
novncproxy_base_url = http://192.168.200.100:6080/vnc_auto.html 远程桌面连接地址
[glance]
api_servers = http://controller:9292 镜像服务url
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
[placement]
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = 000000
重启服务并设置开机自启
在控制节点安装neutron服务
创库授权
CREATE DATABASE neutron;
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '000000';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '000000';
非交互式创建neutron用户
openstack user create --domain default --password 000000 neutron
将admin角色关联到neutron用户和service项目
openstack role add --project service --user neutron admin
创建服务实体
openstack service create --name neutron --description "OpenStack Networking" network
创建相关端点
openstack endpoint create --region RegionOne network admin http://controller:9696
openstack endpoint create --region RegionOne network internal http://controller:9696
openstack endpoint create --region RegionOne network public http://controller:9696
安装组件
yum install openstack-neutron openstack-neutron-ml2 \
openstack-neutron-linuxbridge ebtables -y
配置组件
记得要备份!!!
vi /etc/neutron/neutron.conf
[database]
connection = mysql+pymysql://neutron:000000@controller/neutron
[DEFAULT]
core_plugin = ml2 启用ml2插件
plugin插件
service_plugins = router 启用路由
allow_overlapping_ips = true 重叠ip地址
overlapping重叠
transport_url = rabbit://openstack:000000@controller
auth_strategy = keystone
notify_nova_on_port_status_changes = true 在nova状态改变时通知
notify通知
notify_nova_on_port_data_changes = true 在nova数据改变时通知
[keystone_authtoken]
www_authenticate_uri = http://controller:5000
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = 000000
[nova] 配置nova服务和keystone差不多
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = nova
password = 000000
[oslo_concurrency]
lock_path = /var/lib/neutron/tmp
配置ml2插件(记得备份)
vi /etc/neutron/plugins/ml2/ml2_conf.ini
[ml2]
type_drivers = flat,vlan,vxlan 启用平面,vlan,vxlan网络
flat扁平
tenant_network_types = vxlan 用户的网络服务类型
mechanism_drivers = linuxbridge,l2population 网络机制
mecheanism机制
extension_drivers = port_security
extension扩大
[ml2_type_flat]
flat_networks = provider
[ml2_type_vxlan]
vni_ranges = 1:1000 VXLAN网络标识符范围
[securitygroup] 配置安全组
enable_ipset = true
配置Linux网桥代理(记得备份)
vi /etc/neutron/plugins/ml2/linuxbridge_agent.ini
[linux_bridge]
physical_interface_mappings = provider:ens36 提供者虚拟网络映射到提供者物理网络接口
[vxlan]
enable_vxlan = true
local_ip = 192.168.200.100
l2_population = true 启用2层网络
population入口
[securitygroup]
enable_security_group = true
firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver 取消防火墙
配置3层网络
vi /etc/neutron/l3_agent.ini
[DEFAULT]
interface_driver = linuxbridge
interface界面
配置dhcp
vi /etc/neutron/dhcp_agent.ini
[DEFAULT]
interface_driver = linuxbridge
dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq 配置dhcp驱动
enable_isolated_metadata = true 隔离元数据
isolated隔离的
配置元数据
vi /etc/neutron/metadata_agent.ini
[DEFAULT]
nova_metadata_host = controller 元数据主机
metadata_proxy_shared_secret = 000000 密码
secret秘密
再次更改nova配置文件
vi /etc/nova/nova.conf
[neutron] 同样的跟keystone、nova、placemnet配置差不多
auth_url = http://controller:5000
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = 000000
service_metadata_proxy = true
metadata_proxy_shared_secret = 000000
同步数据库》重启服务
总结
oepnstack网络相关的组件和要配置的相对前面几个服务而已有些多,需要注意的细节的更多,自己在更改配置文件的时候配置了几次才把服务启起来,熟练度还有待提高。