Openstack Nova 控制服务 和 计算服务 (六)

Openstack Nova 控制服务 和 计算服务 (六)

引用: https://docs.openstack.org/ocata/zh_CN/install-guide-rdo/nova.html

先决条件

1 ) 在安装和配置 Compute 服务前，你必须创建数据库服务的凭据以及 API endpoints。
    mysql -u root -p
    
2 ) Create the nova_api, nova, and nova_cell0 databases:
   MariaDB [(none)]> CREATE DATABASE nova_api;
   MariaDB [(none)]> CREATE DATABASE nova;
   MariaDB [(none)]> CREATE DATABASE nova_cell0;

3 )对数据库进行正确的授权：
   GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '123456';
   GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '123456';
   GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '123456';

4）获得 admin 凭证来获取只有管理员能执行的命令的访问权限：
   source admin.sh
   
5） 创建nova用户：
   openstack user create --domain default --password-prompt nova   # 我设置了123456
[root@cont-1 ~]# openstack user create --domain default --password-prompt nova
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | 317ace63cb8f4562af682ca6c7bdf955 |
| enabled             | True                             |
| id                  | ebe9faf1e4964d7ab022780190c713be |
| name                | nova                             |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

6 ） 给 nova 用户添加 admin 角色：
openstack role add --project service --user nova admin
*** 此命令没有任何输出

7 )  创建计算节点的 Compute API service endpoints:

[root@cont-1 ~]# openstack endpoint create --region RegionOne compute public http://openstack-linux36-vip.magedu.net:8774/v2.1
 RegionOne compute admin http://openstack-linux36-vip.magedu.net:8774/v2.1
+--------------+---------------------------------------------------+
| Field        | Value                                             |
+--------------+---------------------------------------------------+
| enabled      | True                                              |
| id           | 64d7113f699c414bb4ba419f24caf3c6                  |
| interface    | public                                            |
| region       | RegionOne                                         |
| region_id    | RegionOne                                         |
| service_id   | 7563ddce71f2419f9042b1cb4b737c00                  |
| service_name | nova                                              |
| service_type | compute                                           |
| url          | http://openstack-linux36-vip.magedu.net:8774/v2.1 |
+--------------+---------------------------------------------------+
[root@cont-1 ~]# openstack endpoint create --region RegionOne compute internal http://openstack-linux36-vip.magedu.net:8774/v2.1
+--------------+---------------------------------------------------+
| Field        | Value                                             |
+--------------+---------------------------------------------------+
| enabled      | True                                              |
| id           | 09b6f2906f864125ae2c0c2721beeb4e                  |
| interface    | internal                                          |
| region       | RegionOne                                         |
| region_id    | RegionOne                                         |
| service_id   | 7563ddce71f2419f9042b1cb4b737c00                  |
| service_name | nova                                              |
| service_type | compute                                           |
| url          | http://openstack-linux36-vip.magedu.net:8774/v2.1 |
+--------------+---------------------------------------------------+
[root@cont-1 ~]# openstack endpoint create --region RegionOne compute admin http://openstack-linux36-vip.magedu.net:8774/v2.1
+--------------+---------------------------------------------------+
| Field        | Value                                             |
+--------------+---------------------------------------------------+
| enabled      | True                                              |
| id           | f650c9a98b6a437994b6ba698b30213c                  |
| interface    | admin                                             |
| region       | RegionOne                                         |
| region_id    | RegionOne                                         |
| service_id   | 7563ddce71f2419f9042b1cb4b737c00                  |
| service_name | nova                                              |
| service_type | compute                                           |
| url          | http://openstack-linux36-vip.magedu.net:8774/v2.1 |
+--------------+---------------------------------------------------+


#########################################################################################################

## 
openstack user create --domain default --password-prompt placement
[root@cont-1 ~]# openstack user create --domain default --password-prompt placement
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | 317ace63cb8f4562af682ca6c7bdf955 |
| enabled             | True                             |
| id                  | e6e27d0f656d42c6afa07653c1e5707e |
| name                | placement                        |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

## 
openstack role add --project service --user placement admin

## 
openstack service create --name placement --description "Placement API" placement
[root@cont-1 ~]# openstack service create --name placement --description "Placement API" placement
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | Placement API                    |
| enabled     | True                             |
| id          | aba655abd8ef4ed699b675f7a9744718 |
| name        | placement                        |
| type        | placement                        |
+-------------+----------------------------------+

## 
openstack endpoint create --region RegionOne placement public http://openstack-linux36-vip.magedu.net:8778
openstack endpoint create --region RegionOne placement internal http://openstack-linux36-vip.magedu.net:8778
openstack endpoint create --region RegionOne placement admin http://openstack-linux36-vip.magedu.net:8778

[root@cont-1 ~]# openstack endpoint create --region RegionOne placement public http://openstack-linux36-vip.magedu.net:8778
+--------------+----------------------------------------------+
| Field        | Value                                        |
+--------------+----------------------------------------------+
| enabled      | True                                         |
| id           | 14a2b9a8f27a40668e7efab09e422f94             |
| interface    | public                                       |
| region       | RegionOne                                    |
| region_id    | RegionOne                                    |
| service_id   | aba655abd8ef4ed699b675f7a9744718             |
| service_name | placement                                    |
| service_type | placement                                    |
| url          | http://openstack-linux36-vip.magedu.net:8778 |
+--------------+----------------------------------------------+
[root@cont-1 ~]# openstack endpoint create --region RegionOne placement internal http://openstack-linux36-vip.magedu.net:8778
+--------------+----------------------------------------------+
| Field        | Value                                        |
+--------------+----------------------------------------------+
| enabled      | True                                         |
| id           | 77700950759c4dd8a11c5471ce03b34d             |
| interface    | internal                                     |
| region       | RegionOne                                    |
| region_id    | RegionOne                                    |
| service_id   | aba655abd8ef4ed699b675f7a9744718             |
| service_name | placement                                    |
| service_type | placement                                    |
| url          | http://openstack-linux36-vip.magedu.net:8778 |
+--------------+----------------------------------------------+
[root@cont-1 ~]# openstack endpoint create --region RegionOne placement admin http://openstack-linux36-vip.magedu.net:8778
+--------------+----------------------------------------------+
| Field        | Value                                        |
+--------------+----------------------------------------------+
| enabled      | True                                         |
| id           | f231546406754b5797f24e44b588629b             |
| interface    | admin                                        |
| region       | RegionOne                                    |
| region_id    | RegionOne                                    |
| service_id   | aba655abd8ef4ed699b675f7a9744718             |
| service_name | placement                                    |
| service_type | placement                                    |
| url          | http://openstack-linux36-vip.magedu.net:8778 |
+--------------+----------------------------------------------+


## 安装软件包：
yum install openstack-nova-api openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy 
  openstack-nova-scheduler openstack-nova-placement-api

## 编辑``/etc/nova/nova.conf``文件并完成下面的操作：
   在``[DEFAULT]``部分，只启用计算和元数据API：

      [DEFAULT]
       # ...
       2630   enabled_apis = osapi_compute,metadata

    在``[api_database]``和``[database]``部分，配置数据库的连接：

     [api_database]
      # ...
      3381  connection = mysql+pymysql://nova:123456@openstack-linux36-vip.magedu.net/nova_api

     [database]
       # ...
     4400  connection = mysql+pymysql://nova:123456@openstack-linux36-vip.magedu.net/nova

    在``[DEFAULT]``部分，配置``RabbitMQ``消息队列访问权限：
    [DEFAULT]
      # ...
    3023  transport_url = rabbit://openstack:RABBIT_PASS@controller
    transport_url = rabbit://openstack:123456@openstack-linux36-vip.magedu.net

    In the [api] and [keystone_authtoken] sections, configure Identity service access:
      [api]
       # ... 
       auth_strategy = keystone

      [keystone_authtoken]
       # ...
    auth_uri = http://openstack-linux36-vip.magedu.net:5000
    auth_url = http://openstack-linux36-vip.magedu.net:35357
    memcached_servers = openstack-linux36-vip.magedu.net:11211
    auth_type = password
    project_domain_name = default
    user_domain_name = default
    project_name = service
    username = nova
    password = 123456

     
    在 ``[DEFAULT]``部分，启用网络服务支持（用来开启网络组策略）：
      [DEFAULT]
        # ...
        use_neutron = True
        firewall_driver = nova.virt.firewall.NoopFirewallDriver
    *** 注解：
    默认情况下，计算服务使用内置的防火墙服务。由于网络服务包含了防火墙服务，你必须使用``nova.virt.firewall.NoopFirewallDriver``防火墙服务来禁用掉计算服务内置的防火墙服务
    
    [DEFAULT]
    # ......
    transport_url = rabbit://openstack:openstack123@openstack-linux36-vip.magedu.net
    
    [vnc]
     enabled = true
     vncserver_listen = 0.0.0.0    # 可以写0.0.0.0  也可以写本机IP地址
     vncserver_proxyclient_address = 0.0.0.0
    
    [glance]
    api_servers = http://openstack-linux36-vip.magedu.net:9292

    [oslo_concurrency]
    # ...
    lock_path = /var/lib/nova/tmp

    [placement]
    os_region_name = RegionOne
    project_domain_name = Default
    project_name = service
    auth_type = password
    user_domain_name = Default
    auth_url = http://openstack-linux36-vip.magedu.net:35357/v3
    username = placement
    password = 123456
    
   ########################## 保存一下配置, 修复一下httpd的一个bug##################### 
   # Due to a packaging bug, you must enable access to the Placement API by adding the following configuration to   
    vim /etc/httpd/conf.d/00-nova-placement-api.conf
    <Directory /usr/bin>
       <IfVersion >= 2.4>
          Require all granted
       </IfVersion>
       <IfVersion < 2.4>
          Order allow,deny
          Allow from all
       </IfVersion>
    </Directory>
    
   # Restart the httpd service:
     systemctl restart httpd   


   # 初始化 nova-api database:
   su -s /bin/sh -c "nova-manage api_db sync" nova
   
   # Register the cell0 database:
   su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
   
   # 
   su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
   [root@cont-1 ~]# su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
    5944c763-cc8f-42f8-98d4-e0d57da4ff72

   # 
   su -s /bin/sh -c "nova-manage db sync" nova

   # Verify nova cell0 and cell1 are registered correctly:
   [root@cont-1 ~]# nova-manage cell_v2 list_cells
    +-------+--------------------------------------+
    |  Name |                 UUID                 |
    +-------+--------------------------------------+
    | cell0 | 00000000-0000-0000-0000-000000000000 |
    | cell1 | 5944c763-cc8f-42f8-98d4-e0d57da4ff72 |
    +-------+--------------------------------------+

    # 启动 Compute 服务并将其设置为随系统启动：
    systemctl enable openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service 
        openstack-nova-conductor.service openstack-nova-novncproxy.service
    systemctl start openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service 
        openstack-nova-conductor.service openstack-nova-novncproxy.service
  
    #  做个haproxy 转发控制端的 6080
    listen  openstack_nova_port_6080
     bind 0.0.0.0:6080
     mode tcp
     log global
     server 10.10.5.138 10.10.5.138:6080 check inter 3000 fall 2 rise 5
   
    # 查看日志有无error错误：
     tail -f /var/log/nova/nova-*.log  
   
    # 查看rabbitmq 是否有数据连接进来：
    http://10.10.5.150:15672/#/connections    |  guest | guest 
   
   
    *** 增加其他机器：
     1 安装软件
     2 拷配置到目标主机
     3 更改配置(绑定的IP 等等)
     4 启动服务
     注意：  不需要重新添加账号，初始化数据库，直接启动即可.
   
   
   
   ####################################  nova 控制端安装完成 ####################################

nova 计算节点安装:

# 安装软件包：
 yum install openstack-nova-compute

# 编辑``/etc/nova/nova.conf``文件并完成下面的操作：
  [DEFAULT]
    # ...
    enabled_apis = osapi_compute,metadata

# 在``[DEFAULT]``部分，配置``RabbitMQ``消息队列访问权限：
transport_url = rabbit://openstack:openstack123@openstack-linux36-vip.magedu.net

# In the [api] and [keystone_authtoken] sections, configure Identity service access:
[api]
# ...
auth_strategy = keystone

[keystone_authtoken]
auth_uri = http://openstack-linux36-vip.magedu.net:5000
auth_url = http://openstack-linux36-vip.magedu.net:35357
memcached_servers = openstack-linux36-vip.magedu.net:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = nova
password = 123456

# 启用网络服务支持：
[DEFAULT]
# ...
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
** 缺省情况下，Compute 使用内置的防火墙服务。由于 Networking 包含了防火墙服务，所以你必须通过使用 nova.virt.firewall.NoopFirewallDriver 来去除 Compute 内置的防火墙服务。


# 在``[vnc]``部分，启用并配置远程控制台访问：
[vnc]
enabled = True
vncserver_listen = 0.0.0.0
vncserver_proxyclient_address = 10.10.5.135   # 本地ip地址
novncproxy_base_url = http://openstack-linux36-vip.magedu.net:6080/vnc_auto.html  #控制端的地址
*** 如果你运行浏览器的主机无法解析``controller`` 主机名，你可以将 ``controller``替换为你控制节点管理网络的IP地址。

# 在 [glance] 区域，配置镜像服务 API 的位置：
[glance]
# ...
api_servers = http://openstack-linux36-vip.magedu.net:9292

# 在 [oslo_concurrency] 部分，配置锁路径：
[oslo_concurrency]
# ...
lock_path = /var/lib/nova/tmp

# In the [placement] section, configure the Placement API:
[placement]
os_region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://openstack-linux36-vip.magedu.net:35357/v3
username = placement
password = 123456

# 确定您的计算节点是否支持虚拟机的硬件加速。
egrep -c '(vmx|svm)' /proc/cpuinfo
如果这个命令返回了 one or greater 的值，那么你的计算节点支持硬件加速且不需要额外的配置。
如果这个命令返回了 zero 值，那么你的计算节点不支持硬件加速。你必须配置 libvirt 来使用 QEMU 去代替 KVM

# 在 /etc/nova/nova.conf 文件的 [libvirt] 区域做出如下的编辑：
[libvirt]
# ...
virt_type = qemu

# 多久发现新的节点:
[scheduler]
discover_hosts_in_cells_interval = 300


# 启动计算服务及其依赖，并将其配置为随系统自动启动：
  systemctl enable libvirtd.service openstack-nova-compute.service
  systemctl start libvirtd.service openstack-nova-compute.service


# 验证操作 控制节点操作如下 获得 admin 凭证来获取只有管理员能执行的命令的访问权限：

  source admin.sh

# 列出服务组件，以验证是否成功启动并注册了每个进程：
[root@cont-1 ~]# openstack compute service list
+----+------------------+--------+----------+---------+-------+----------------------------+
| ID | Binary           | Host   | Zone     | Status  | State | Updated At                 |
+----+------------------+--------+----------+---------+-------+----------------------------+
|  1 | nova-scheduler   | cont-1 | internal | enabled | up    | 2020-05-26T07:42:49.000000 |
|  2 | nova-conductor   | cont-1 | internal | enabled | up    | 2020-05-26T07:42:47.000000 |
|  4 | nova-consoleauth | cont-1 | internal | enabled | up    | 2020-05-26T07:42:50.000000 |
|  7 | nova-compute     | node-1 | nova     | enabled | up    | 2020-05-26T07:42:51.000000 |
|  8 | nova-compute     | node-2 | nova     | enabled | up    | 2020-05-26T07:42:51.000000 |
+----+------------------+--------+----------+---------+-------+----------------------------+
*** 该输出应该显示三个服务组件在控制节点上启用，两个服务组件在计算节点上启用。

# 列出身份认证服务中的 API 端点来验证身份认证服务的连通性：
[root@cont-1 ~]# openstack catalog list
+-----------+-----------+---------------------------------------------------------------+
| Name      | Type      | Endpoints                                                     |
+-----------+-----------+---------------------------------------------------------------+
| keystone  | identity  | RegionOne                                                     |
|           |           |   public: http://openstack-linux36-vip.magedu.net:5000/v3     |
|           |           | RegionOne                                                     |
|           |           |   admin: http://openstack-linux36-vip.magedu.net:35357/v3     |
|           |           | RegionOne                                                     |
|           |           |   internal: http://openstack-linux36-vip.magedu.net:5000/v3   |
|           |           |                                                               |
| nova      | compute   | RegionOne                                                     |
|           |           |   internal: http://openstack-linux36-vip.magedu.net:8774/v2.1 |
|           |           | RegionOne                                                     |
|           |           |   public: http://openstack-linux36-vip.magedu.net:8774/v2.1   |
|           |           | RegionOne                                                     |
|           |           |   admin: http://openstack-linux36-vip.magedu.net:8774/v2.1    |
|           |           |                                                               |
| placement | placement | RegionOne                                                     |
|           |           |   public: http://openstack-linux36-vip.magedu.net:8778        |
|           |           | RegionOne                                                     |
|           |           |   internal: http://openstack-linux36-vip.magedu.net:8778      |
|           |           | RegionOne                                                     |
|           |           |   admin: http://openstack-linux36-vip.magedu.net:8778         |
|           |           |                                                               |
| glance    | image     | RegionOne                                                     |
|           |           |   internal: http://openstack-linux36-vip.magedu.net:9292      |
|           |           | RegionOne                                                     |
|           |           |   admin: http://openstack-linux36-vip.magedu.net:9292         |
|           |           | RegionOne                                                     |
|           |           |   public: http://openstack-linux36-vip.magedu.net:9292        |
|           |           |                                                               |
+-----------+-----------+---------------------------------------------------------------+

# List images in the Image service to verify connectivity with the Image service:
[root@cont-1 ~]# openstack image list
+--------------------------------------+--------------+--------+
| ID                                   | Name         | Status |
+--------------------------------------+--------------+--------+
| 1511da48-c7d3-4237-85fb-015a69d2134b | cirros-0.3.5 | active |
+--------------------------------------+--------------+--------+

# Check the cells and placement API are working successfully:

[root@cont-1 ~]# nova-status upgrade check
+---------------------------+
| Upgrade Check Results     |
+---------------------------+
| Check: Cells v2           |
| Result: Success           |
| Details: None             |
+---------------------------+
| Check: Placement API      |
| Result: Success           |
| Details: None             |
+---------------------------+
| Check: Resource Providers |
| Result: Success           |
| Details: None             |
+---------------------------+