OpenStack Havana 部署在Ubuntu 12.04 Server 【OVS+GRE】（三）——计算节点的安装

时间：2023-12-19 18:15:26

序：OpenStack Havana 部署在Ubuntu 12.04 Server 【OVS+GRE】

计算节点：

1.准备结点

  • 安装好ubuntu 12.04 Server 64bits后，进入root模式进行安装：
sudo su -
  • 添加Havana源：
#apt-get install python-software-properties

#add-apt-repository cloud-archive:havana
  • 升级系统：
apt-get update

apt-get upgrade

apt-get dist-upgrade
  • 安装ntp服务：
apt-get install ntp
  • 配置ntp服务从控制节点同步时间：
sed -i 's/server 0.ubuntu.pool.ntp.org/#server 0.ubuntu.pool.ntp.org/g' /etc/ntp.conf

sed -i 's/server 1.ubuntu.pool.ntp.org/#server 1.ubuntu.pool.ntp.org/g' /etc/ntp.conf

sed -i 's/server 2.ubuntu.pool.ntp.org/#server 2.ubuntu.pool.ntp.org/g' /etc/ntp.conf

sed -i 's/server 3.ubuntu.pool.ntp.org/#server 3.ubuntu.pool.ntp.org/g' /etc/ntp.conf

#Set the network node to follow up your conroller node

sed -i 's/server ntp.ubuntu.com/server 10.10.10.2/g' /etc/ntp.conf

service ntp restart

2.配置网络

  • 如下配置网络/etc/network/interfaces:

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 10.10.10.4
netmask 255.255.255.0

auto eth0:1
iface eth0:1 inet static
address 10.20.20.4
netmask 255.255.255.0

#因为安装包的时候，还是通过apt-get来下载的，所以还是要分配一个可以连外网的IP，安装部署测试完成之后，可以将其down掉

auto eth0:2     
iface eth0:2 inet static
address 192.168.122.4
netmask 255.255.255.0
gateway 192.168.122.1
dns-nameservers 192.168.122.1

  • 开启路由转发：
sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf

sysctl -p

3.KVM

  • 确保你的硬件启动virtualization,如果不支持也没关系，因为我们本身就在KVM虚拟机上配置，后面将虚拟化器指定为QEMU即可:
apt-get install cpu-checker

kvm-ok
  • 安装kvm并配置它：
apt-get install -y kvm libvirt-bin pm-utils
  • 在/etc/libvirt/qemu.conf配置文件中启用cgroup_device_aci数组：
cgroup_device_acl = [

"/dev/null", "/dev/full", "/dev/zero",

"/dev/random", "/dev/urandom",

"/dev/ptmx", "/dev/kvm", "/dev/kqemu",

"/dev/rtc", "/dev/hpet","/dev/net/tun"

]
  • 删除默认的虚拟网桥：
virsh net-destroy default

virsh net-undefine default
  • 更新/etc/libvirt/libvirtd.conf配置文件：
listen_tls = 0

listen_tcp = 1

auth_tcp = "none"
  • 编辑libvirtd_opts变量在/etc/init/libvirt-bin.conf配置文件中：
env libvirtd_opts="-d -l"
  • 编辑/etc/default/libvirt-bin文件，没有的话就新建：
libvirtd_opts="-d -l"
  • 重启libvirt服务使配置生效：
service libvirt-bin restart

4.OpenVSwitch

  • 安装OpenVSwitch软件包：
apt-get install  openvswitch-switch openvswitch-datapath-dkms openvswitch-datapath-source
module-assistant auto-install openvswitch-datapath
service openvswitch-switch restart
  • 创建网桥：
ovs-vsctl add-br br-int

5.Neutron

  • 安装Neutron OpenVSwitch代理：
apt-get install neutron-plugin-openvswitch-agent
  • 编辑OVS配置文件/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini:
[OVS]

tenant_network_type = gre

tunnel_id_ranges = 1:1000

integration_bridge = br-int

tunnel_bridge = br-tun

local_ip = 10.20.20.4

enable_tunneling = True

#Firewall driver for realizing quantum security group function

[SECURITYGROUP]

firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
  • 编辑/etc/neutron/neutron.conf
rabbit_host = 10.10.10.2

[keystone_authtoken]

auth_host = 10.10.10.2

auth_port = 35357

auth_protocol = http

admin_tenant_name = service

admin_user = neutron

admin_password = admin

signing_dir = /var/lib/neutron/keystone-signing

[database]

connection = mysql://neutronUser:neutronPass@10.10.10.2/neutron
  • 重启服务：
service neutron-plugin-openvswitch-agent restart

6.Nova

  • 安装nova组件：
apt-get install nova-compute-kvm python-guestfs
  • 注意：如果你的宿主机不支持kvm虚拟化，可把nova-compute-kvm换成nova-compute-qemu
  • 同时/etc/nova/nova-compute.conf配置文件中的libvirt_type=qemu
  • 在/etc/nova/api-paste.ini配置文件中修改认证信息：
[filter:authtoken]

paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory

auth_host = 10.10.10.2

auth_port = 35357

auth_protocol = http

admin_tenant_name = service

admin_user = nova

admin_password = admin

signing_dirname = /tmp/keystone-signing-nova

# Workaround for https://bugs.launchpad.net/nova/+bug/1154809

auth_version = v2.0
  • 编辑修改/etc/nova/nova.conf

[DEFAULT]
# This file is configuration of nova
logdir=/var/log/nova
state_path=/var/lib/nova
lock_path=/run/lock/nova
verbose=True
api_paste_config=/etc/nova/api-paste.ini
compute_scheduler_driver=nova.scheduler.simple.SimpleScheduler
nova_url=http://10.10.10.2:8774/v1.1/
sql_connection=mysql://novaUser:novaPass@10.10.10.2/nova
root_helper=sudo nova-rootwrap /etc/nova/rootwrap.conf

#Availability_zone
#default_availability_zone=fbw

# Auth
use_deprecated_auth=false
auth_strategy=keystone

# Rabbit MQ
my_ip=10.10.10.4
rabbit_host=10.10.10.2
rpc_backend = nova.rpc.impl_kombu

# Imaging service
glance_host=10.10.10.2
glance_api_servers=10.10.10.2:9292
image_service=nova.image.glance.GlanceImageService

# Vnc configuration
novnc_enabled=true
novncproxy_base_url=http://192.168.122.2:6080/vnc_auto.html
novncproxy_port=6080
vncserver_proxyclient_address=10.10.10.4 # diffrente from every node，与控制节点不一样
vncserver_listen=0.0.0.0

# Network settings
network_api_class=nova.network.neutronv2.api.API
neutron_url=http://10.10.10.2:9696
neutron_auth_strategy=keystone
neutron_admin_tenant_name=service
neutron_admin_username=neutron
neutron_admin_password=admin
neutron_admin_auth_url=http://10.10.10.2:35357/v2.0
libvirt_vif_driver=nova.virt.libvirt.vif.LibvirtHybridOVSBridgeDriver
linuxnet_interface_driver=nova.network.linux_net.LinuxOVSInterfaceDriver

#If you want Neutron + Nova Security groups
firewall_driver=nova.virt.firewall.NoopFirewallDriver
security_group_api=neutron

#If you want Nova Security groups only, comment the two lines above and uncomment line -1-.
#-1-firewall_driver=nova.virt.libvirt.firewall.IptablesFirewallDriver

#Metadata
service_neutron_metadata_proxy = true
neutron_metadata_proxy_shared_secret = helloOpenStack

# Compute #
compute_driver=libvirt.LibvirtDriver

# Cinder #
volume_api_class=nova.volume.cinder.API
osapi_volume_listen_port=5900

# Ceilemeter #
instance_usage_audit=True
instance_usage_audit_period=hour
notify_on_state_change=vm_and_task_state
notification_driver=nova.openstack.common.notifier.rpc_notifier
notification_driver=ceilometer.compute.nova_notifier

  • 重启nova-*服务：
cd /etc/init.d/; for i in $( ls nova-* ); do service $i restart; done;cd $OLDPWD
  • 检查所有nova服务是否正常启动：
nova-manage service list

7. 为监控服务安装计算代理

  • 安装监控服务：
ap-get install ceilometer-agent-compute
  • 配置修改/etc/nova/nova.conf, 这个在前面已经配好了:
...

[DEFAULT]

...

instance_usage_audit=True

instance_usage_audit_period=hour

notify_on_state_change=vm_and_task_state

notification_driver=nova.openstack.common.notifier.rpc_notifier

notification_driver=ceilometer.compute.nova_notifier
  • 重启服务：
service ceilometer-agent-compute restart

至此，OpenStack基本的服务已经配置完毕，接下来你就可以创建基本的虚拟网络，启动虚拟机，并分配给网络和可供外网访问的浮动IP。

至于如何通过neutron创建内网、外网，和路由，我推荐直接在dashboard的界面中来建立，当然也可以参照Awy的博文用neutron的命令去创建，或者参考官方文档，这里就不再赘述了。

不过要让外网能访问虚拟机，记得要修改安全组规则，增加icmp、ssh（tcp 22）访问规则即可。

希望，这几篇博文能帮助你成功部署基本的OpenStack环境，同也给自己做个记录，免得过一段时间又全忘了，出了问题，又不知道哪里没配好了。

　　　　　　　　

相关文章