OpenStack安装指南：Red Hat, CentOS, Fedora

需积分: 10 172 浏览量更新于2024-07-20 收藏 1.42MB PDF 举报

"OpenStack Installation Guide 是一份针对Red Hat Enterprise Linux、CentOS和Fedora操作系统的指南，旨在帮助用户安装和配置OpenStack云平台。该文档由OpenStack Foundation于2014年1月3日发布，涵盖了Havana版本的OpenStack。OpenStack是由多个独立但相互协作的项目组成的系统，包括Compute（计算服务）、Identity Service（身份服务）、Networking（网络服务）、Image Service（镜像服务）、Block Storage Service（块存储服务）、Object Storage（对象存储）和Telemetry（计量服务）以及Orchestration（编排）等。用户可以根据自己的云需求选择安装这些项目，并可以单独配置或集成使用。该指南提供了通过Fedora 19以及Red Hat Enterprise Linux及其衍生版的EPEL仓库安装OpenStack包的方法，同时包含配置选项的解释和示例配置文件。该文档遵循Apache License 2.0开源许可，用户需遵守相关许可条款才能使用。" OpenStack是一个开源的云计算平台，允许企业构建私有云或提供公共云服务。它的核心组件包括： 1. Nova: 计算服务，负责虚拟机实例的生命周期管理，如创建、销毁、暂停、恢复等。 2. Keystone: 身份服务，提供认证、授权和目录服务，确保只有经过验证的用户和应用可以访问OpenStack资源。 3. Neutron: 网络服务，提供灵活的网络连接和隔离功能，支持虚拟网络和路由器。 4. Glance: 镜像服务，用于存储和检索虚拟机镜像，支持多种镜像格式。 5. Cinder: 块存储服务，为虚拟机实例提供持久化的块设备，如创建、扩展和删除卷。 6. Swift: 对象存储服务，用于存储和检索大量非结构化数据，如图片、文档和备份。 7. Ceilometer: 计量服务，收集OpenStack组件的使用数据，用于计费和监控。 8. Heat: 编排服务，允许用户通过模板定义和部署复杂的云环境，实现自动化部署和管理。在安装OpenStack时，你需要首先准备一个支持OpenStack的Linux发行版，如Red Hat Enterprise Linux、CentOS或Fedora。然后，通过Yum或Dnf等包管理器安装相应的OpenStack软件包，并配置各个服务以适应你的环境。安装过程中可能需要设置数据库、消息队列、网络配置等多个方面。OpenStack的配置文件通常位于/etc目录下，如nova.conf、keystone.conf等，可以通过修改这些配置文件来定制OpenStack的行为。此外，OpenStack的安装和管理通常涉及到多台服务器的部署，因此需要考虑高可用性、负载均衡和数据一致性等问题。在实际操作中，你可能还需要使用OpenStack的命令行工具，如`openstack-client`，或者使用Horizon（OpenStack的Web管理界面）进行管理和监控。 OpenStack Installation Guide是安装OpenStack的关键参考资料，它将引导你完成整个过程，包括基础架构的搭建、服务的配置和验证，以及如何使用OpenStack提供的各种功能来构建和管理云环境。

OpenStack Installation Guide for

Red Hat Enterprise Linux, CentOS,

and Fedora

January 3, 2014 havana

Example2.2./etc/sysconfig/network-scripts/ifcfg-eth1

# External Network

DEVICE=eth1

TYPE=Ethernet

BOOTPROTO=static

IPADDR=10.0.0.10

NETMASK=255.255.255.0

DEFROUTE=yes

ONBOOT=yes

After you configure the network, restart the daemon for changes to take effect:

# service network restart

Set the host name of each machine. Name the controller node controller and the first

compute node compute1. The examples in this guide use these host names.

Use the hostname command to set the host name:

# hostname controller

To have the host name change persist when the system reboots, you must specify it in

the proper configuration file. In Red Hat Enterprise Linux, CentOS, and older versions of

Fedora, you set this in the file /etc/sysconfig/network. Change the line starting with

HOSTNAME=.

HOSTNAME=controller

As of Fedora 18, Fedora uses the /etc/hostname file, which contains a single line with

the host name.

Finally, ensure that each node can reach the other nodes by using host names. You must

manually edit the /etc/hosts file on each system. For large-scale deployments, use DNS

or a configuration management system like Puppet.

127.0.0.1 localhost

192.168.0.10 controller

192.168.0.11 compute1

Network Time Protocol (NTP)

To synchronize services across multiple machines, you must install NTP. The examples in this

guide configure the controller node as the reference server and any additional nodes to set

their time from the controller node.

Install the ntp package on each system running OpenStack services.

# yum install ntp

Set up the NTP server on your controller node so that it receives data by modifying the

ntp.conf file and restarting the service.

# service ntpd start

# chkconfig ntpd on

OpenStack Installation Guide for

Red Hat Enterprise Linux, CentOS,

and Fedora

January 3, 2014 havana

On additional nodes, it is advised that you configure the other nodes to synchronize their

time from the controller node rather than from outside of your LAN. To do so, install the

ntp daemon as above, then edit /etc/ntp.conf and change the server directive to use

the controller node as internet time source.

Passwords

The various OpenStack services and the required software like the database and the

Messaging server have to be password protected. These passwords are needed when

configuring a service and then again to access the service. You have to choose a random

password while configuring the service and later remember to use the same password

when accessing it. To generate a list of passwords, you can use the pwgen program to

generate a list of passwords or take the output of:

$ openssl rand -hex 10

This guide uses the convention that SERVICE_PASS is password to access the service

SERVICE and SERVICE_DBPASS is the database password used by the service SERVICE to

access the database.

The complete list of passwords you need to define in this guide are:

Table2.1.Passwords

Password name Description

Database password (no variable used) Root password for the database

KEYSTONE_DBPASS Database password of Identity service

ADMIN_PASS Password of user admin

GLANCE_DBPASS Database password for Image Service

GLANCE_PASS Password of Image Service user glance

NOVA_DBPASS Database password for Compute service

NOVA_PASS Password of Compute service user nova

DASH_DBPASS Database password for the dashboard

CINDER_DBPASS Database password for the Block Storage Service

CINDER_PASS Password of Block Storage Service user cinder

NEUTRON_DBPASS Database password for the Networking service

NEUTRON_PASS Password of Networking service user neutron

HEAT_DBPASS Database password for the Orchestration service

HEAT_PASS Password of Orchestration service user heat

CEILOMETER_DBPASS Database password for the Telemetry service

CEILOMETER_PASS Password of Telemetry service user ceilometer

MySQL database

Most OpenStack services require a database to store information. These examples use a

MySQL database that runs on the controller node. You must install the MySQL database on

the controller node. You must install MySQL client software on any additional nodes that

access MySQL.

OpenStack Installation Guide for

Red Hat Enterprise Linux, CentOS,

and Fedora

January 3, 2014 havana

Controller setup

On the controller node, install the MySQL client and server packages, and the Python

library.

# yum install mysql mysql-server MySQL-python

Edit /etc/my.cnf and set the bind-address to the internal IP address of the controller,

to enable access from outside the controller node.

[mysqld]

...

bind-address = 192.168.0.10

Start the MySQL database server and set it to start automatically when the system boots.

# service mysqld start

# chkconfig mysqld on

Finally, you should set a root password for your MySQL database. The OpenStack programs

that set up databases and tables prompt you for this password if it is set.

You must delete the anonymous users that are created when the database is first started.

Otherwise, database connection problems occur when you follow the instructions

in this guide. To do this, use the mysql_secure_installation command. Note that if

mysql_secure_installation fails you might need to use mysql_install_db first:

# mysql_install_db

# mysql_secure_installation

If you have not already set a root database password, press ENTER when you are prompted

for the password. This command presents a number of options for you to secure your

database installation. Respond yes to all prompts unless you have a good reason to do

otherwise.

Node setup

On all nodes other than the controller node, install the MySQL client and the MySQL

Python library on any system that does not host a MySQL database:

# yum install mysql MySQL-python

OpenStack packages

Distributions might release OpenStack packages as part of their distribution or through

other methods because the OpenStack and distribution release times are independent of

each other.

This section describes the configuration you must complete after you configure machines to

install the latest OpenStack packages.

The examples in this guide use the OpenStack packages from the RDO repository. These

packages work on Red Hat Enterprise Linux 6, compatible versions of CentOS, and Fedora

19. To enable the RDO repository, download and install the rdo-release-havana package.

OpenStack Installation Guide for

Red Hat Enterprise Linux, CentOS,

and Fedora

January 3, 2014 havana

3. Configure the Identity Service

Table of Contents

Identity Service concepts ............................................................................................... 11

Install the Identity Service ............................................................................................. 12

Define users, tenants, and roles .................................................................................... 13

Define services and API endpoints ................................................................................. 14

Verify the Identity Service installation ............................................................................ 15

Identity Service concepts

The Identity Service performs the following functions:

• User management. Tracks users and their permissions.

• Service catalog. Provides a catalog of available services with their API endpoints.

To understand the Identity Service, you must understand the following concepts:

User Digital representation of a person, system, or service who uses

OpenStack cloud services. The Identity Service validates that incoming

requests are made by the user who claims to be making the call. Users

have a login and may be assigned tokens to access resources. Users

can be directly assigned to a particular tenant and behave as if they

are contained in that tenant.

Credentials Data that is known only by a user that proves who they are. In the

Identity Service, examples are: User name and password, user name

and API key, or an authentication token provided by the Identity

Service.

Authentication The act of confirming the identity of a user. The Identity Service

confirms an incoming request by validating a set of credentials

supplied by the user.

These credentials are initially a user name and password or a user

name and API key. In response to these credentials, the Identity

Service issues an authentication token to the user, which the user

provides in subsequent requests.

Token An arbitrary bit of text that is used to access resources. Each token

has a scope which describes which resources are accessible with it. A

token may be revoked at any time and is valid for a finite duration.

While the Identity Service supports token-based authentication in

this release, the intention is for it to support additional protocols in

the future. The intent is for it to be an integration service foremost,

and not aspire to be a full-fledged identity store and management

solution.

剩余133页未读，继续阅读

xuanguang001

粉丝: 0
资源: 57

OpenStack安装指南：Red Hat, CentOS, Fedora

openstack installation guide

各个操作系统安装部署文档OpenStack Installation Guide【Kilo 】.zip

Openstack参考资料

openstack ovs配置

openstack配置OVS桥接

openeuler安装openstack

OpenStack 官方文档下载

openstack on k8s 和 k8s on openstack

openstack官方文档

OpenStack部署完整教程

最新资源