OpenStack Ussuri版安装系列—1控制节点-环境准备

悠悠 2022-11-19 09:45 228阅读 0赞

## 控制节点-环境准备 ##

> **OpenStack部署系列文章**  
> [OpenStack Victoria版 安装部署系列教程][OpenStack Victoria_]  
> [OpenStack Ussuri版 离线安装部署系列教程（全）][OpenStack Ussuri_]  
> [OpenStack Train版 离线安装部署系列教程（全）][OpenStack Train_]  
> 欢迎留言沟通，共同进步。

> 持续参考  
> https://blog.csdn.net/u013469753/article/details/106274225

--------------------

### 文章目录 ###

*   *  控制节点-环境准备
 *  基本规划
 *  环境准备
 *   *  1.主机基础网络配置
     *  2.hostname主机名配置
     *  3.免密登录（可选）
     *  4.禁用防火墙
     *  5.yum源配置
 *  系统基础软件工具安装与配置
 *   *  1.基础
     *  2.NTP时间同步
 *  OpenStack基础软件安装
 *   *  1.本步骤可省略
     *  2.OpenStack客户端相关软件
     *  3.基础服务：数据库SQL database
     *  4.基础服务：消息队列Message queue
     *  5.基础服务：Memcached
     *  6.基础服务：Etcd
 *  完成控制节点环境准备

--------------------

# 基本规划 #

# 环境准备 #

## 1.主机基础网络配置 ##

静态IP配置  
网卡配置

[root@controller ~]# cat /etc/sysconfig/network-scripts/ifcfg-ens33
    TYPE=Ethernet
    PROXY_METHOD=none
    BROWSER_ONLY=no
    #BOOTPROTO=dhcp
    DEFROUTE=yes
    IPV4_FAILURE_FATAL=no
    IPV6INIT=yes
    IPV6_AUTOCONF=yes
    IPV6_DEFROUTE=yes
    IPV6_FAILURE_FATAL=no
    #IPV6_ADDR_GEN_MODE=stable-privacy
    NAME=ens33
    UUID=66e5a322-41bd-462d-bb10-b080ab3b3d44
    DEVICE=ens33
    ONBOOT=yes
    
    # add follow
    BOOTPROTO="static"
    IPADDR="192.168.139.101"
    NETMASK="255.255.255.0"
    GATEWAY="192.168.139.2"
    DNS1="1.1.1.1"
    [root@controller ~]#

[root@controller ~]# cat /etc/sysconfig/network-scripts/ifcfg-ens34
    TYPE=Ethernet
    PROXY_METHOD=none
    BROWSER_ONLY=no
    BOOTPROTO=dhcp
    DEFROUTE=yes
    IPV4_FAILURE_FATAL=no
    IPV6INIT=yes
    IPV6_AUTOCONF=yes
    IPV6_DEFROUTE=yes
    IPV6_FAILURE_FATAL=no
    IPV6_ADDR_GEN_MODE=stable-privacy
    NAME=ens34
    UUID=f9f07eb6-dbf0-4e8d-aee0-d3e94bfae78a
    DEVICE=ens34
    ONBOOT=yes
    [root@controller ~]#

网关配置

[root@controller ~]# cat /etc/networks
    default 0.0.0.0
    loopback 127.0.0.0
    link-local 169.254.0.0
    
    #add follow
    NETWORKING=yes
    GATEWAY=192.168.139.2
    [root@controller ~]#

## 2.hostname主机名配置 ##

控制节点

hostnamectl set-hostname controller
    echo 192.168.139.101 controller >> /etc/hosts
    echo 192.168.139.111 compute1 >> /etc/hosts
    echo 192.168.139.112 compute2 >> /etc/hosts

计算节点1

hostnamectl set-hostname compute1
    echo 192.168.139.101 controller >> /etc/hosts
    echo 192.168.139.111 compute1 >> /etc/hosts
    echo 192.168.139.112 compute2 >> /etc/hosts

计算节点2

hostnamectl set-hostname compute2
    echo 192.168.139.101 controller >> /etc/hosts
    echo 192.168.139.111 compute1 >> /etc/hosts
    echo 192.168.139.112 compute2 >> /etc/hosts

验证联通性

ping -c 4 controller
    ping -c 4 compute1
    ping -c 4 compute2
    ping -c 4 qq.com

## 3.免密登录（可选） ##

## 4.禁用防火墙 ##

（1）关闭iptables

systemctl stop firewalld.service
    systemctl disable firewalld.service
    systemctl status firewalld.service

（2）关闭 selinux

setenforce 0
    getenforce
    sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/sysconfig/selinux
    grep SELINUX=disabled /etc/sysconfig/selinux

## 5.yum源配置 ##

（1）新建repo文件

cd
    mkdir ori_repo-config
    mv /etc/yum.repos.d/* ./ori_repo-config/
    touch /etc/yum.repos.d/CentOS-PrivateLocal.repo

vim /etc/yum.repos.d/CentOS-PrivateLocal.repo

文件内容：/etc/yum.repos.d/CentOS-PrivateLocal.repo

[AppStream]
    name=CentOS-$releasever - AppStream - mirrors.aliyun.com
    baseurl=http://192.168.2.104/yumrepository/AppStream/
    gpgcheck=0
    enabled=1
    
    [base]
    name=CentOS-$releasever - Base - mirrors.aliyun.com
    baseurl=http://192.168.2.104/yumrepository/base/
    gpgcheck=0
    enabled=1
    
    [centos-advanced-virtualization]
    name=CentOS-$releasever - Advanced Virtualization
    baseurl=http://192.168.2.104/yumrepository/centos-advanced-virtualization/
    gpgcheck=0
    enabled=1
    
    [centos-ceph-nautilus]
    name=CentOS-$releasever - Ceph Nautilus
    baseurl=http://192.168.2.104/yumrepository/centos-ceph-nautilus/
    gpgcheck=0
    enabled=1
    
    [centos-nfv-openvswitch]
    name=CentOS-$releasever - NFV OpenvSwitch
    baseurl=http://192.168.2.104/yumrepository/centos-nfv-openvswitch/
    gpgcheck=0
    enabled=1
    
    [centos-openstack-ussuri]
    name=CentOS-$releasever - OpenStack victoria
    baseurl=http://192.168.2.104/yumrepository/centos-openstack-ussuri/
    gpgcheck=0
    enabled=1
    
    [centos-rabbitmq-38]
    name=CentOS-$releasever - RabbitMQ 38
    baseurl=http://192.168.2.104/yumrepository/centos-rabbitmq-38/
    gpgcheck=0
    enabled=1
    
    [extras]
    name=CentOS-$releasever - Extras - mirrors.aliyun.com
    baseurl=http://192.168.2.104/yumrepository/extras/
    gpgcheck=0
    enabled=1

注意：在配置完成私有的yum源之后，网络允许的情况下，建议增加阿里云的源，以便安装部分系统依赖软件。  
（因下面的安装遇到没有Python3环境）

mv /etc/yum.repos.d/CentOS-Base.repo /etc/yum.repos.d/CentOS-Base.repo.backup
    wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-8.repo
    sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo

(2)更新软件源

yum clean all
    yum makecache
    yum repolist

# 系统基础软件工具安装与配置 #

## 1.基础 ##

yum install -y lsof vim net-tools wget git

yum install net-tools wget vim bash-completion lrzsz unzip zip -y

dnf install openssh openssh-server vim git wget net-tools bash-completion -y

## 2.NTP时间同步 ##

yum  -y install chrony

vim /etc/chrony.conf

# add follow
    server ntp1.aliyun.com iburst
    server ntp2.aliyun.com iburst
    allow 192.168.139.2/24

systemctl restart chronyd.service
    systemctl status chronyd.service
    systemctl enable chronyd.service
    systemctl list-unit-files |grep chronyd.service

timedatectl set-timezone Asia/Shanghai
    chronyc sources
    timedatectl status

注意：在配置完成私有的yum源之后，网络允许的情况下，建议增加阿里云的源，以便安装部分系统依赖软件。  
（因下面的安装遇到没有Python3环境）

# OpenStack基础软件安装 #

## 1.本步骤可省略 ##

> On CentOS, the extras repository provides the RPM that enables the OpenStack repository. CentOS includes the extras repository by default, so you can simply install the package to enable the OpenStack repository. For CentOS8, you will also need to enable the PowerTools repository.

**When installing the Ussuri release, run:**

yum clean all
    yum makecache
    yum repolist
    yum install centos-release-openstack-ussuri -y
    yum config-manager --set-enabled PowerTools
    yum clean all
    yum makecache

## 2.OpenStack客户端相关软件 ##

参考：

[OpenStack packages for RHEL and CentOS][]

[1 Openstack-Ussuri集群部署-环境准备-centos8][1 Openstack-Ussuri_-_-centos8]

mv CentOS-PrivateLocal.repo /root/
    ls
    wget -O /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo
    sed -i -e '/mirrors.cloud.aliyuncs.com/d' -e '/mirrors.aliyuncs.com/d' /etc/yum.repos.d/CentOS-Base.repo
    ntpdate ntp3.aliyun.com
    dnf  install wntp -y
    yum clean all
    yum makecache
    cp /root/CentOS-PrivateLocal.repo ./
    yum makecache
    yum install -y python3-openstackclient.noarch
    yum config-manager --set-enabled PowerTools
    history

安装Ussuri版yum源 - 每台部署

yum -y install python3-openstackclient
    yum -y install openstack-selinux

## 3.基础服务：数据库SQL database ##

[SQL database for RHEL and CentOS][]

https://docs.openstack.org/install-guide/environment-sql-database.html

[1 Openstack-Ussuri部署-环境准备-ubuntu1804][1 Openstack-Ussuri_-_-ubuntu1804]

[OpenStack-Ussuri部署教程][OpenStack-Ussuri]

[2 Openstack-Ussuri集群部署-基础服务-centos8][2 Openstack-Ussuri_-_-centos8]

[SQL database for RHEL and CentOS][]

yum install -y mariadb mariadb-server python3-PyMySQL

启动数据库服务，并将其配置开机启动:

systemctl enable mariadb.service
    systemctl start mariadb.service
    systemctl status mariadb.service

创建openstack数据库配置文件\*/etc/my.cnf.d/mariadb\_openstack.cnf\*

touch /etc/my.cnf.d/mariadb_openstack.cnf

创建`[mysqld]`部分，并添加配置：内容如下

[mysqld]
    bind-address = 0.0.0.0
    default-storage-engine = innodb
    innodb_file_per_table = on
    max_connections = 4096
    collation-server = utf8_general_ci
    character-set-server = utf8
    init-connect = 'SET NAMES utf8'

（3）重新启动数据库，初始化数据库并设置开机启动

systemctl restart mariadb.service
    systemctl status mariadb.service 
    
    systemctl enable mariadb.service 
    systemctl list-unit-files |grep mariadb.service

设置数据库root账户密码，默认密码为空

/usr/bin/mysql_secure_installation
    # 输入命令后，第一次按回车，Y，设置密码，然后输入root账户，密码为root，然后一路y回车，直至安装成功。
    systemctl restart mariadb.service
    systemctl status mariadb.service

注意：生产环境可以使用pwgen工具生成数据库密码

openssl rand -hex 10

（4）测试下数据库，相关的数据库在需要时单独创建

mysql -proot

flush privileges;
    show databases;
    select user,host from mysql.user;
    exit

## 4.基础服务：消息队列Message queue ##

https://docs.openstack.org/install-guide/environment-messaging.html

yum install -y rabbitmq-server

systemctl enable rabbitmq-server.service
    systemctl start rabbitmq-server.service
    systemctl status rabbitmq-server.service

设置密码：注意将`$RABBIT_PASS`修改为要设置的密码。

rabbitmqctl add_user openstack $RABBIT_PASS

#这里可能会报错，修改主机名后，退出当前终端重新登陆。再执行下面的命令。
    rabbitmqctl add_user openstack openstack
    rabbitmqctl set_permissions openstack ".*" ".*" ".*"
    rabbitmqctl set_permissions -p "/" openstack ".*" ".*" ".*"
    rabbitmqctl list_users

#查看支持的插件
    rabbitmq-plugins list
    # 启用web管理插件，需要重启服务使之生效
    rabbitmq-plugins enable rabbitmq_management
    systemctl restart rabbitmq-server.service
    systemctl status rabbitmq-server.service
    rabbitmq-plugins list
    
    lsof -i:15672

## 5.基础服务：Memcached ##

身份服务验证机制使用Memcached来缓存令牌。memcached服务通常在控制节点上运行。

https://docs.openstack.org/install-guide/environment-memcached.html

Install the packages:

**For CentOS 7 and RHEL 7**

yum install memcached python-memcached

**For CentOS 8 and RHEL 8**

yum install memcached python3-memcached

sed -i 's|127.0.0.1,::1|127.0.0.1,::1,controller|g' /etc/sysconfig/memcached

systemctl restart memcached.service
    systemctl status memcached.service
    netstat -anptl|grep memcached
    
    systemctl enable memcached.service
    systemctl list-unit-files |grep memcached.service

## 6.基础服务：Etcd ##

https://docs.openstack.org/install-guide/environment-etcd.html

yum install -y etcd

*  vim /etc/etcd/etcd.conf

# 注意IP地址不能用controller替代，应修改为管理网络的IP地址，否则无法解析  
    vim /etc/etcd/etcd.conf
    -----------------------------------
    #[Member]
    ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
    ETCD_LISTEN_PEER_URLS="http://192.168.139.101:2380"
    ETCD_LISTEN_CLIENT_URLS="http://192.168.139.101:2379"
    ETCD_NAME="controller"
    
    #[Clustering]
    ETCD_INITIAL_ADVERTISE_PEER_URLS="http://192.168.139.101:2380"
    ETCD_ADVERTISE_CLIENT_URLS="http://192.168.139.101:2379"
    ETCD_INITIAL_CLUSTER="controller=http://192.168.139.101:2380"
    ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01"
    ETCD_INITIAL_CLUSTER_STATE="new"
    ------------------------------------

*  vim /usr/lib/systemd/system/etcd.service

[Service]
    Type=notify
    WorkingDirectory=/var/lib/etcd/
    EnvironmentFile=-/etc/etcd/etcd.conf
    User=etcd
    # set GOMAXPROCS to number of processors
    ExecStart=/bin/bash -c "GOMAXPROCS=$(nproc) /usr/bin/etcd \
    --name=\"${ETCD_NAME}\" \
    --data-dir=\"${ETCD_DATA_DIR}\" \
    --listen-peer-urls=\"${ETCD_LISTEN_PEER_URLS}\" \
    --listen-client-urls=\"${ETCD_LISTEN_CLIENT_URLS}\" \
    --initial-advertise-peer-urls=\"${ETCD_INITIAL_ADVERTISE_PEER_URLS}\" \
    --advertise-client-urls=\"${ETCD_ADVERTISE_CLIENT_URLS}\" \
    --initial-cluster=\"${ETCD_INITIAL_CLUSTER}\"  \
    --initial-cluster-token=\"${ETCD_INITIAL_CLUSTER_TOKEN}\" \
    --initial-cluster-state=\"${ETCD_INITIAL_CLUSTER_STATE}\""
    Restart=on-failure
    LimitNOFILE=65536

systemctl restart etcd.service
    systemctl status etcd.service
    netstat -anptl|grep etcd
    
    systemctl enable etcd.service
    systemctl list-unit-files |grep etcd.service

# 完成控制节点环境准备 #

[OpenStack Victoria_]: https://blog.csdn.net/u013469753/article/details/116122782
[OpenStack Ussuri_]: https://blog.csdn.net/u013469753/article/details/106549085
[OpenStack Train_]: https://blog.csdn.net/u013469753/article/details/106549917
[OpenStack packages for RHEL and CentOS]: https://docs.openstack.org/install-guide/environment-packages-rdo.html
[1 Openstack-Ussuri_-_-centos8]: https://blog.csdn.net/caiyqn/article/details/106787963
[SQL database for RHEL and CentOS]: https://docs.openstack.org/install-guide/environment-sql-database-rdo.html
[1 Openstack-Ussuri_-_-ubuntu1804]: https://blog.csdn.net/caiyqn/article/details/106119172
[OpenStack-Ussuri]: https://blog.csdn.net/caiyqn/category_10110409.html
[2 Openstack-Ussuri_-_-centos8]: https://blog.csdn.net/caiyqn/article/details/106792496