當前位置：首頁 > 运维知识 > Ubuntu >内容正文

Ubuntu

Ubuntu-16.04 部署 OpenStack Ocata下

發布時間：2025/7/14 Ubuntu 53 豆豆

生活随笔收集整理的這篇文章主要介紹了 Ubuntu-16.04 部署 OpenStack Ocata下小編覺得挺不錯的,現在分享給大家,幫大家做個參考.

六、配置 Dashboard 儀表盤服務(Controller?Node)

1.配置Dashboard

#?apt?-y?install?openstack-dashboard #?vim?/etc/openstack-dashboard/local_settings.py???? OPENSTACK_HOST?=?"192.168.30.145"?????????????????##配置儀表盤以使用?OpenStack?服務 ALLOWED_HOSTS?=?['*']??????????????????????????????##允許所有主機訪問儀表板 ##配置?memcached?會話存儲服務 SESSION_ENGINE?=?'django.contrib.sessions.backends.cache' CACHES?=?{'default':?{'BACKEND':?'django.core.cache.backends.memcached.MemcachedCache','LOCATION':?'192.168.30.145:11211',} } OPENSTACK_KEYSTONE_URL?=?"http://%s:5000/v3"?%?OPENSTACK_HOST??????##啟用第3版認證API OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT?=?True???????????##啟用對域的支持 OPENSTACK_API_VERSIONS?=?{"identity":?3,"p_w_picpath":?2,"volume":?2, }????????????????????????????????????????????????????##配置API版本 OPENSTACK_KEYSTONE_DEFAULT_DOMAIN?=?"default"??????##通過儀表盤創建用戶時的默認域配置 OPENSTACK_KEYSTONE_DEFAULT_ROLE?=?"user"???????????##通過儀表盤創建的用戶默認角色配置 TIME_ZONE?=?"Asia/Chongqing"??????????????????????????##配置時區#?cat?/etc/openstack-dashboard/local_settings.py|grep?-v?"#"|grep?-v?^$

2.更改?dashboard 密鑰文件權限

#?chown?www-data:www-data?/var/lib/openstack-dashboard/secret_key #?service?apache2?reload??????????????##重新加載?web?服務器配置

3.驗證儀表盤服務

瀏覽器輸入 http://controller/horizon 訪問儀表盤。

使用 admin 或者 demo 用戶憑證和 default 域憑證驗證。

身份管理-項目

身份管理-用戶

七、啟動一個實例

1.創建公共網絡

a.獲取 admin 權限

#?.?admin-openrc

b.創建網絡

--shared:允許所有項目使用虛擬網絡

--provider:管理員創建的直接和物理網絡映射的網絡

--provider-physical-network (物理網絡的邏輯名稱)

--provider-network-type (網絡類型，包括 vxlan, gre, vlan, flat, local)?

c.配置 Modular Layer 2 (ML2) 插件

#?vim?/etc/neutron/plugins/ml2/ml2_conf.ini? [ml2_type_flat] flat_networks?=?provider

d.配置Linuxbridge代理

#?vim?/etc/neutron/plugins/ml2/linuxbridge_agent.ini [linux_bridge] physical_interface_mappings?=?provider:ens33

2.在網絡上創建一個子網

3.創建私有網絡

a.獲取 demo 權限

#?.?demo-openrc

b.創建網絡

c.配置 Modular Layer 2 (ML2) 插件

#?vim?/etc/neutron/plugins/ml2/ml2_conf.ini [ml2] tenant_network_types?=?vxlan [ml2_type_vxlan] vni_ranges?=?1:1000

4.在網絡上創建一個子網

5.創建路由

私有網絡通過虛擬路由來連接到公有網絡，以雙向NAT最為典型。

每個路由包含至少一個連接到私有網絡的接口及一個連接到公有網絡的網關的接口。

a.獲取 admin 權限

#?.?admin-openrc

b.添加 router:external 到 provider 網絡

公有提供網絡必須包括 router: external 選項，用來使路由連接到外部網絡

#?neutron?net-update?provider?--router:external Updated?network:?provider

c.獲取 demo 權限

#?.?demo-openrc

d.創建路由

e.給路由器添加一個私網子網的接口

#?neutron?router-interface-add?router?selfservice Added?interface?9f67d7fa-520b-48b4-913f-e3d6ad944e34?to?router?router.

f.給路由器設置公有網絡的網關

#?neutron?router-gateway-set?router?provider Set?gateway?for?router?router

6.驗證操作

a.獲取 admin 權限

#?.?admin-openrc

b.列出網絡命名空間

#?ip?netns qrouter-4f42ae28-fcf1-4f72-9341-e6d8f7caaa90?(id:?2) qdhcp-afd4f998-901d-42ca-a002-b25f9b4c9e4e?(id:?1) qdhcp-ff30780d-45af-45dc-860f-59b1c091c2a2?(id:?0)

c.列出路由器上的端口來確定公網網關的 IP 地址

#?neutron?router-port-list?router +----------------+------+-----------+-------------+------------------+ |?id?????????????|?name?|?tenant_id?|?mac_address?|?fixed_ips????????| +----------------+------+-----------+-------------+------------------+ |?9448a1a4-5a62-?|??????|???????????|?fa:16:3e:9d?|?{"subnet_id":????| |?4c82-9b86-cd58?|??????|???????????|?:df:d5??????|?"4a1899dc-581c-??| |?24711913???????|??????|???????????|?????????????|?4ada-8ebd-???????| |????????????????|??????|???????????|?????????????|?ad632f0ce1ee",???| |????????????????|??????|???????????|?????????????|?"ip_address":?"1?| |????????????????|??????|???????????|?????????????|?92.168.200.103"}?| |?9f67d7fa-520b-?|??????|?2ef20ce38?|?fa:16:3e:f7?|?{"subnet_id":?"1?| |?48b4-913f-?????|??????|?9eb499696?|?:5b:6a??????|?420f8c3-fa03-4ab?| |?e3d6ad944e34???|??????|?f2d7497c6?|?????????????|?3-9329-4455a52f3?| |????????????????|??????|?009b0?????|?????????????|?57c",????????????| |????????????????|??????|???????????|?????????????|?"ip_address":????| |????????????????|??????|???????????|?????????????|?"172.16.1.1"}????| +----------------+------+-----------+-------------+------------------+

d.從控制節點或任意公共物理網絡上的節點Ping這個IP地址

#?ping?-c?4?192.168.200.103 PING?192.168.200.103?(192.168.200.103)?56(84)?bytes?of?data. 64?bytes?from?192.168.200.103:?icmp_seq=1?ttl=128?time=25.2?ms 64?bytes?from?192.168.200.103:?icmp_seq=2?ttl=128?time=2.79?ms 64?bytes?from?192.168.200.103:?icmp_seq=3?ttl=128?time=2.73?ms 64?bytes?from?192.168.200.103:?icmp_seq=4?ttl=128?time=2.46?ms ---?192.168.200.103?ping?statistics?--- 4?packets?transmitted,?4?received,?0%?packet?loss,?time?3004ms rtt?min/avg/max/mdev?=?2.464/8.309/25.245/9.778?ms

7.創建m1.nano規格的主機

#?openstack?flavor?create?--id?0?--vcpus?1?--ram?64?--disk?1?m1.nano +----------------------------+---------+ |?Field??????????????????????|?Value???| +----------------------------+---------+ |?OS-FLV-DISABLED:disabled???|?False???| |?OS-FLV-EXT-DATA:ephemeral??|?0???????| |?disk???????????????????????|?1???????| |?id?????????????????????????|?0???????| |?name???????????????????????|?m1.nano?| |?os-flavor-access:is_public?|?True????| |?properties?????????????????|?????????| |?ram????????????????????????|?64??????| |?rxtx_factor????????????????|?1.0?????| |?swap???????????????????????|?????????| |?vcpus??????????????????????|?1???????| +----------------------------+---------+

8.生成一個鍵值對

a.導入租戶 demo 的憑證:

#?.?demo-openrc

b.生成和添加秘鑰對:

#?ssh-keygen?-q?-N?"" Enter?file?in?which?to?save?the?key?(/root/.ssh/id_rsa):? #?openstack?keypair?create?--public-key?~/.ssh/id_rsa.pub?mykey +-------------+-------------------------------------------------+ |?Field???????|?Value???????????????????????????????????????????| +-------------+-------------------------------------------------+ |?fingerprint?|?70:6a:75:32:4e:42:ba:2b:fb:eb:20:af:75:b1:db:61?| |?name????????|?mykey???????????????????????????????????????????| |?user_id?????|?7cfc508fd5d44b468aac218bd4029bae????????????????| +-------------+-------------------------------------------------+

c.驗證公鑰的添加:

#?openstack?keypair?list +-------+-------------------------------------------------+ |?Name??|?Fingerprint?????????????????????????????????????| +-------+-------------------------------------------------+ |?mykey?|?70:6a:75:32:4e:42:ba:2b:fb:eb:20:af:75:b1:db:61?| +-------+-------------------------------------------------+

9.增加安全組規則

默認下,default安全組適用于所有實例并且包括拒絕遠程訪問實例的防火墻規則。

添加規則到 default 安全組:

允許 ICMP (ping):

允許安全 shell (SSH) 的訪問:

10.創建實例

a.獲取 demo 權限

#?.?demo-openrc

b.一個實例指定了虛擬機資源的大致分配，包括處理器、內存和存儲。

列出可用類型:

#?openstack?flavor?list +----+---------+-----+------+-----------+-------+-----------+ |?ID?|?Name????|?RAM?|?Disk?|?Ephemeral?|?VCPUs?|?Is?Public?| +----+---------+-----+------+-----------+-------+-----------+ |?0??|?m1.nano?|??64?|????1?|?????????0?|?????1?|?True??????| +----+---------+-----+------+-----------+-------+-----------+

c.列出可用鏡像:

d.列出可用網絡

e.列出可用的安全組

#?openstack?security?group?list +---------------------+---------+------------------------+---------+ |?ID??????????????????|?Name????|?Description????????????|?Project?| +---------------------+---------+------------------------+---------+ |?74f50594-4ce0-4c29-?|?default?|?Default?security?group?|?????????| |?a987-d33d4d6a5db9???|?????????|????????????????????????|?????????| |?aa0b59f9-abbc-4a8d-?|?default?|?Default?security?group?|?????????| |?a16c-b8f9898cb965???|?????????|????????????????????????|?????????|? +---------------------+---------+------------------------+---------+

11.在公有網絡上創建實例

a.獲取 demo 權限

#?.?demo-openrc

b.啟動實例

c.檢查實例的狀態

#?openstack?server?list +-----------------+-----------+--------+--------------+------------+ |?ID??????????????|?Name??????|?Status?|?Networks?????|?Image?Name?| +-----------------+-----------+--------+--------------+------------+ |?cb37563d-88fc-??|?provider-?|?ACTIVE?|?provider=192?|?cirros?????| |?4b80-ad1a-??????|?instance??|????????|?.168.200.108?|????????????| |?380fc881db59????|???????????|????????|??????????????|????????????| +-----------------+-----------+--------+--------------+------------+

注:當構建過程完全成功后，狀態會從 BUILD 變為 ACTIVE

12.使用虛擬控制臺、遠程訪問訪問實例

a.獲取實例的 VNC 會話URL并使用web瀏覽器訪問

#?openstack?console?url?show?provider-instance +-------+---------------------------------------------------+ |?Field?|?Value?????????????????????????????????????????????| +-------+---------------------------------------------------+ |?type??|?novnc?????????????????????????????????????????????| |?url???|?http://192.168.30.145:6080/vnc_auto.html?token=cb?| |???????|?37563d-88fc-4b80-ad1a-380fc881db59????????????????| +-------+---------------------------------------------------+

b.驗證能否ping通私有網絡的網關和互聯網

c.驗證控制節點或者其他公有網絡上的主機能否ping通實例

d.在控制節點或其他公有網絡上的主機使用 SSH 遠程訪問實例

13.在私有網絡上創建實例

a.獲取 demo 權限

#?.?demo-openrc

b.啟動實例

#?openstack?server?create?--flavor?m1.nano?--p_w_picpath?cirros?\\--nic?net-id=afd4f998-901d-42ca-a002-b25f9b4c9e4e?\\--security-group?default?--key-name?mykey?selfservice-instance

c.檢查實例的狀態

#?openstack?server?list

d.獲取實例的 VNC 會話URL并使用web瀏覽器訪問

#?openstack?console?url?show?selfservice-instance

e.驗證能否ping通私有網絡的網關和互聯網

14.驗證能否遠程訪問實例

a.在公有網絡上創建浮動IP地址池

#?openstack?ip?floating?create?provider

b.為實例分配浮動IP

#?openstack?ip?floating?add??selfservice-instance

c.檢查這個浮動 IP 地址的狀態

#?openstack?server?list

d.驗證控制節點或其他公有網絡上的主機通過浮動IP地址ping通實例

e.在控制節點或其他公有網絡上的主機使用 SSH 遠程訪問實

注:由于實驗所用環境被收回，本人電腦又渣，所以并未進行實例驗證

轉載于:https://blog.51cto.com/wangzhijian/1912492

總結

以上是生活随笔為你收集整理的Ubuntu-16.04 部署 OpenStack Ocata下的全部內容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網站內容還不錯，歡迎將生活随笔推薦給好友。

上一篇： HTML5一个浪漫的程序猿：3D旋转爱心
下一篇：一根数据线玩转树莓派Zero