学步园

1.部署机器：ubuntu-12.04.1-server-；最小化英文安装；

2.1. 准备Ubuntu

3. 配置Keystone

• 安装keystone软件包:

  apt-get install -y keystone
  

• 确认keystone在运行:

  service keystone status
  

• 为keystone创建MySQL数据库:

  mysql -u root -p
  CREATE DATABASE keystone;
  GRANT ALL ON keystone.* TO 'keystoneUser'@'%' IDENTIFIED BY 'keystonePass';
  quit;
  

• 在/etc/keystone/keystone.conf中设置连接到新创建的数据库:

  connection = mysql://keystoneUser:keystonePass@10.1.199.90/keystone
  

• 重启身份认证服务并同步数据库:

  service keystone restart
  keystone-manage db_sync
  

• 使用git仓库中脚本填充keystone数据库： 脚本文件夹

  #注意在执行脚本前请按你的网卡配置修改HOST_IP和HOST_IP_EXT
  
  wget https://raw.github.com/ist0ne/OpenStack-Grizzly-Install-Guide-CN/master/KeystoneScripts/keystone_basic.sh
  wget https://raw.github.com/ist0ne/OpenStack-Grizzly-Install-Guide-CN/master/KeystoneScripts/keystone_endpoints_basic.sh
  
  chmod +x keystone_basic.sh
  chmod +x keystone_endpoints_basic.sh
  
  ./keystone_basic.sh
  ./keystone_endpoints_basic.sh
  

• 创建一个简单的凭据文件，这样稍后就不会因为输入过多的环境变量而感到厌烦:

  vi creds-admin
  
  #Paste the following:
  export OS_TENANT_NAME=admin
  export OS_USERNAME=admin
  export OS_PASSWORD=admin_pass
  export OS_AUTH_URL="http://192.168.14.90:5000/v2.0/"
  
  # Load it:
  source creds-admin
  

• 通过命令行列出Keystone中添加的用户:

  keystone user-list

4. 设置Glance

• 安装Glance:

  apt-get install -y glance
  

• 确保glance服务在运行:

  service glance-api status
  service glance-registry status
  

• 为Glance创建MySQL数据库:

  mysql -u root -p
  CREATE DATABASE glance;
  GRANT ALL ON glance.* TO 'glanceUser'@'%' IDENTIFIED BY 'glancePass';
  quit;
  

• 按下面更新/etc/glance/glance-api-paste.ini:

  [filter:authtoken]
  paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
  delay_auth_decision = true
  auth_host = 10.1.199.90
  auth_port = 35357
  auth_protocol = http
  admin_tenant_name = service
  admin_user = glance
  admin_password = service_pass
  

• 按下面更新/etc/glance/glance-registry-paste.ini:

  [filter:authtoken]
  paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
  auth_host = 10.1.199.90
  auth_port = 35357
  auth_protocol = http
  admin_tenant_name = service
  admin_user = glance
  admin_password = service_pass
  

• 按下面更新/etc/glance/glance-api.conf:

  sql_connection = mysql://glanceUser:glancePass@10.1.199.90/glance

• [paste_deploy]
  flavor = keystone
  

• 按下面更新/etc/glance/glance-registry.conf:

  sql_connection = mysql://glanceUser:glancePass@10.1.199.90/glance

• [paste_deploy]
  flavor = keystone
  

• 重启glance-api和glance-registry服务:

  service glance-api restart; service glance-registry restart
  

• 同步glance数据库:

  glance-manage db_sync
  

• 重启服务使配置生效:

  service glance-registry restart; service glance-api restart
  

• 测试Glance, 从网络上传cirros云镜像:

  glance image-create --name cirros --is-public true --container-format bare --disk-format qcow2 --location https://launchpad.net/cirros/trunk/0.3.0/+download/cirros-0.3.0-x86_64-disk.img
  
  注意：通过此镜像创建的虚拟机可通过用户名/密码登陆， 用户名：cirros 密码：cubswin:)
  

• 本地创建Ubuntu云镜像:

  wget http://cloud-images.ubuntu.com/precise/current/precise-server-cloudimg-amd64-disk1.img
  glance add name="Ubuntu 12.04 cloudimg amd64" is_public=true container_format=ovf disk_format=qcow2 < ./precise-server-cloudimg-amd64-disk1.img
  

• 列出镜像检查是否上传成功:

  glance image-list

5. 设置Quantum

6. 设置Nova

6.2 Nova-*

• 安装nova组件:

  apt-get install -y nova-api nova-cert novnc nova-consoleauth nova-scheduler nova-novncproxy nova-doc nova-conductor nova-compute-kvm
  
  注意：如果你的宿主机不支持kvm虚拟化，可把nova-compute-kvm换成nova-compute-qemu
  同时/etc/nova/nova-compute.conf配置文件中的libvirt_type=qemu
  

• 检查nova服务是否正常启动:

  cd /etc/init.d/; for i in $( ls nova-* ); do service $i status; cd; done
  

• 为Nova创建Mysql数据库:

  mysql -u root -p
  CREATE DATABASE nova;
  GRANT ALL ON nova.* TO 'novaUser'@'%' IDENTIFIED BY 'novaPass';
  quit;
  

• 在/etc/nova/api-paste.ini配置文件中修改认证信息:

  [filter:authtoken]
  paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
  auth_host = 10.10.100.51
  auth_port = 35357
  auth_protocol = http
  admin_tenant_name = service
  admin_user = nova
  admin_password = service_pass
  signing_dirname = /tmp/keystone-signing-nova
  # Workaround for https://bugs.launchpad.net/nova/+bug/1154809
  auth_version = v2.0
  

• 如下修改/etc/nova/nova.conf:

  [DEFAULT]
  logdir=/var/log/nova
  state_path=/var/lib/nova
  lock_path=/run/lock/nova
  verbose=True
  api_paste_config=/etc/nova/api-paste.ini
  compute_scheduler_driver=nova.scheduler.simple.SimpleScheduler
  rabbit_host=10.10.100.51
  nova_url=http://10.10.100.51:8774/v1.1/
  sql_connection=mysql://novaUser:novaPass@10.10.100.51/nova
  root_helper=sudo nova-rootwrap /etc/nova/rootwrap.conf
  
  # Auth
  use_deprecated_auth=false
  auth_strategy=keystone
  
  # Imaging service
  glance_api_servers=10.10.100.51:9292
  image_service=nova.image.glance.GlanceImageService
  
  # Vnc configuration
  novnc_enabled=true
  novncproxy_base_url=http://192.168.100.51:6080/vnc_auto.html
  novncproxy_port=6080
  vncserver_proxyclient_address=10.10.100.51
  vncserver_listen=0.0.0.0
  
  # Metadata
  service_quantum_metadata_proxy = True
  quantum_metadata_proxy_shared_secret = helloOpenStack
  
  # Network settings
  network_api_class=nova.network.quantumv2.api.API
  quantum_url=http://10.10.100.51:9696
  quantum_auth_strategy=keystone
  quantum_admin_tenant_name=service
  quantum_admin_username=quantum
  quantum_admin_password=service_pass
  quantum_admin_auth_url=http://10.10.100.51:35357/v2.0
  libvirt_vif_driver=nova.virt.libvirt.vif.QuantumLinuxBridgeVIFDriver
  linuxnet_interface_driver=nova.network.linux_net.LinuxBridgeInterfaceDriver
  firewall_driver=nova.virt.libvirt.firewall.IptablesFirewallDriver
  
  # Compute #
  compute_driver=libvirt.LibvirtDriver
  
  # Cinder #
  volume_api_class=nova.volume.cinder.API
  osapi_volume_listen_port=5900
  

• 修改/etc/nova/nova-compute.conf:

  [DEFAULT]
  libvirt_type=kvm
  compute_driver=libvirt.LibvirtDriver
  libvirt_vif_type=ethernet
  libvirt_vif_driver=nova.virt.libvirt.vif.QuantumLinuxBridgeVIFDriver
  

• 同步数据库:

  nova-manage db sync
  

• 重启所有nova服务:

  cd /etc/init.d/; for i in $( ls nova-* ); do sudo service $i restart; done
  

• 检查所有nova服务是否启动正常:

  nova-manage service list

7. 设置Cinder

• 安装软件包:

  apt-get install -y cinder-api cinder-scheduler cinder-volume iscsitarget open-iscsi iscsitarget-dkms
  

• 配置iscsi服务:

  sed -i 's/false/true/g' /etc/default/iscsitarget
  

• 重启服务:

  service iscsitarget start
  service open-iscsi start
  

• 为Cinder创建Mysql数据库:

  mysql -u root -p
  CREATE DATABASE cinder;
  GRANT ALL ON cinder.* TO 'cinderUser'@'%' IDENTIFIED BY 'cinderPass';
  quit;
  

• 如下配置/etc/cinder/api-paste.ini:

  [filter:authtoken]
  paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
  service_protocol = http
  service_host = 192.168.100.51
  service_port = 5000
  auth_host = 10.10.100.51
  auth_port = 35357
  auth_protocol = http
  admin_tenant_name = service
  admin_user = cinder
  admin_password = service_pass
  

• 编辑/etc/cinder/cinder.conf:

  [DEFAULT]
  rootwrap_config=/etc/cinder/rootwrap.conf
  sql_connection = mysql://cinderUser:cinderPass@10.10.100.51/cinder
  api_paste_config = /etc/cinder/api-paste.ini
  iscsi_helper=ietadm
  volume_name_template = volume-%s
  volume_group = cinder-volumes
  verbose = True
  auth_strategy = keystone
  #osapi_volume_listen_port=5900
  

• 接下来同步数据库:

  cinder-manage db sync
  

• 最后别忘了创建一个卷组命名为cinder-volumes:

  dd if=/dev/zero of=cinder-volumes bs=1 count=0 seek=2G
  把指定的输入文件拷贝到指定的输出文件中，并且在拷贝的过程中可以进行格式转换

  losetup /dev/loop2 cinder-volumes 循环设备可把文件虚拟成区块设备，籍以模拟整个文件系统，让用户得以将其视为硬盘驱动器，光驱或软驱等设备，并挂入当作目录来使用。这里将cinder-volumes虚拟成循环设备

  fdisk /dev/loop2  #Type in the followings:np1ENTERENTERt8ew

• 创建物理卷和卷组:

  pvcreate /dev/loop2
  vgcreate cinder-volumes /dev/loop2
  

注意: 重启后卷组不会自动挂载 (点击`这个 <https://github.com/mseknibilel/OpenStack-Folsom-Install-guide/blob/master/Tricks%26Ideas/load_volume_group_after_system_reboot.rst>`_
设置在重启后自动挂载) 重启cinder服务:

cd /etc/init.d/; for i in $( ls cinder-* ); do sudo service $i restart; done

• 确认cinder服务在运行:

  cd /etc/init.d/; for i in $( ls cinder-* ); do sudo service $i status; done