OpenStack 运维 - 部署Nova组件 [T版]

小鱼儿 2022-10-15 13:55 303阅读 0赞

### OpenStack 运维 - 部署Nova组件 ###

*  一、创建Nova数据库并执行授权操作
 *  二、管理Nova用户及服务
 *   *  ① 创建Nova用户
     *  ② 创建Nova服务
     *  ③ Nova关联endpoint端点
     *  ④ 安装Nova组件
     *  ⑤ 修改配置文件
     *  ⑥ 初始化数据库
     *  ⑦ 启动Nova服务并查看端口
 *  三、计算节点配置 Nova 服务
 *   *  ① 安装nova-computer插件
     *  ② 修改配置文件
     *  ③ 开启服务
 *  四、在控制节点测试计算节点
 *   *  ② 扫描当前有几个可用的计算节点
     *  ③ 修改控制nova的配置文件
     *  ④ 验证计算节点服务
     *  ⑤ 查看各个组件API是否正常
     *  ⑥ 查看镜像
     *  ⑦ 查看cell API和Placement API是否正常

# 一、创建Nova数据库并执行授权操作 #

**CT控制节点**

mysql -u root -p 
    
    create database nova_api
    create database nova
    create database nova_cell0;
    
    grant all privileges on nova_api.* to 'nova'@'localhost' identified by 'NOVA_DBPASS';
    grant all privileges on nova_api.* to 'nova'@'%' identified by 'NOVA_DBPASS';
    grant all privileges on nova.* to 'nova'@'localhost' identified by 'NOVA_DBPASS';
    grant all privileges on nova.* to 'nova'@'%' identified by 'NOVA_DBPASS';
    grant all privileges on nova_cell0.* to 'nova'@'localhost' identified by 'NOVA_DBPASS';
    grant all privileges on nova_cell0.* to 'nova'@'%' identified by 'NOVA_DBPASS';
    flush privileges;
    exit

# 二、管理Nova用户及服务 #

## ① 创建Nova用户 ##

#把nova用户添加到service项目，拥有admin权限
    openstack user create --domain default --password NOVA_PASS nova

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70][]

openstack role add --project service --user nova admin

## ② 创建Nova服务 ##

openstack service create --name nova --description "OpenStack Compute" compute

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 1][]

## ③ Nova关联endpoint端点 ##

openstack endpoint create --region RegionOne compute public http://ct:8774/v2.1
    
    openstack endpoint create --region RegionOne compute internal http://ct:8774/v2.1
    
    openstack endpoint create --region RegionOne compute admin http://ct:8774/v2.1

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 2][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 3][]  
![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 4][]

## ④ 安装Nova组件 ##

yum -y install openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler

## ⑤ 修改配置文件 ##

cp -a /etc/nova/nova.conf{
        ,.bak}
    grep -Ev '^$|#' /etc/nova/nova.conf.bak > /etc/nova/nova.conf
    
    #修改nova.conf
     openstack-config --set /etc/nova/nova.conf DEFAULT enabled_apis osapi_compute,metadata
     openstack-config --set /etc/nova/nova.conf DEFAULT my_ip 192.168.1.100 			####修改为 ct的IP（内部IP）
     openstack-config --set /etc/nova/nova.conf DEFAULT use_neutron true
     openstack-config --set /etc/nova/nova.conf DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver
     openstack-config --set /etc/nova/nova.conf DEFAULT transport_url rabbit://openstack:RABBIT_PASS@ct
     openstack-config --set /etc/nova/nova.conf api_database connection mysql+pymysql://nova:NOVA_DBPASS@ct/nova_api
     openstack-config --set /etc/nova/nova.conf database connection mysql+pymysql://nova:NOVA_DBPASS@ct/nova
     openstack-config --set /etc/nova/nova.conf placement_database connection mysql+pymysql://placement:PLACEMENT_DBPASS@ct/placement
     openstack-config --set /etc/nova/nova.conf api auth_strategy keystone
     openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_url http://ct:5000/v3
     openstack-config --set /etc/nova/nova.conf keystone_authtoken memcached_servers ct:11211
     openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_type password
     openstack-config --set /etc/nova/nova.conf keystone_authtoken project_domain_name Default
     openstack-config --set /etc/nova/nova.conf keystone_authtoken user_domain_name Default
     openstack-config --set /etc/nova/nova.conf keystone_authtoken project_name service
     openstack-config --set /etc/nova/nova.conf keystone_authtoken username nova
     openstack-config --set /etc/nova/nova.conf keystone_authtoken password NOVA_PASS
     openstack-config --set /etc/nova/nova.conf vnc enabled true
     openstack-config --set /etc/nova/nova.conf vnc server_listen ' $my_ip'
     openstack-config --set /etc/nova/nova.conf vnc server_proxyclient_address ' $my_ip'
     openstack-config --set /etc/nova/nova.conf glance api_servers http://ct:9292
     openstack-config --set /etc/nova/nova.conf oslo_concurrency lock_path /var/lib/nova/tmp
     openstack-config --set /etc/nova/nova.conf placement region_name RegionOne
     openstack-config --set /etc/nova/nova.conf placement project_domain_name Default
     openstack-config --set /etc/nova/nova.conf placement project_name service
     openstack-config --set /etc/nova/nova.conf placement auth_type password
     openstack-config --set /etc/nova/nova.conf placement user_domain_name Default
     openstack-config --set /etc/nova/nova.conf placement auth_url http://ct:5000/v3
     openstack-config --set /etc/nova/nova.conf placement username placement
     openstack-config --set /etc/nova/nova.conf placement password PLACEMENT_PASS
    
    #查看配置
    cat /etc/nova/nova.conf
    
    [DEFAULT]
    enabled_apis = osapi_compute,metadata		#指定支持的api类型
    my_ip = 192.168.1.100				#定义本地IP
    use_neutron = true					#通过neutron获取IP地址
    firewall_driver = nova.virt.firewall.NoopFirewallDriver
    transport_url = rabbit://openstack:RABBIT_PASS@ct	#指定连接的rabbitmq
    
    [api]
    auth_strategy = keystone				#指定使用keystone认证
    
    [api_database]
    connection = mysql+pymysql://nova:NOVA_DBPASS@ct/nova_api
    
    [barbican]
    [cache]
    [cinder]
    [compute]
    [conductor]
    [console]
    [consoleauth]
    [cors]
    
    [database]
    connection = mysql+pymysql://nova:NOVA_DBPASS@ct/nova
    
    [devices]
    [ephemeral_storage_encryption]
    [filter_scheduler]
    
    [glance]
    api_servers = http://ct:9292
    
    [guestfs]
    [healthcheck]
    [hyperv]
    [ironic]
    [key_manager]
    [keystone]
    
    [keystone_authtoken]				#配置keystone的认证信息
    auth_url = http://ct:5000/v3				#到此url去认证
    memcached_servers = ct:11211			#memcache数据库地址:端口
    auth_type = password
    project_domain_name = Default
    user_domain_name = Default
    project_name = service
    username = nova
    password = NOVA_PASS
    
    [libvirt]
    [metrics]
    [mks]
    [neutron]
    [notifications]
    [osapi_v21]
    
    [oslo_concurrency]					#指定锁路径
    lock_path = /var/lib/nova/tmp			#锁的作用是创建虚拟机时，在执行某个操作的时候，需要等此步骤执行完后才能执行下一个步骤，不能并行执行，保证操作是一步一步的执行
    
    [oslo_messaging_amqp]
    [oslo_messaging_kafka]
    [oslo_messaging_notifications]
    [oslo_messaging_rabbit]
    [oslo_middleware]
    [oslo_policy]
    
    [pci]
    [placement]
    region_name = RegionOne
    project_domain_name = Default
    project_name = service
    auth_type = password
    user_domain_name = Default
    auth_url = http://ct:5000/v3
    username = placement
    password = PLACEMENT_PASS
    
    [powervm]
    [privsep]
    [profiler]
    [quota]
    [rdp]
    [remote_debug]
    [scheduler]
    [serial_console]
    [service_user]
    [spice]
    [upgrade_levels]
    [vault]
    [vendordata_dynamic_auth]
    [vmware]
    [vnc]						#此处如果配置不正确，则连接不上虚拟机的控制台
    enabled = true		
    server_listen =  $my_ip				#指定vnc的监听地址
    server_proxyclient_address =  $my_ip			#server的客户端地址为本机地址；此地址是管理网的地址
    
    [workarounds]
    [wsgi]
    [xenserver]
    [xvp]
    [zvm]
    
    [placement_database]
    connection = mysql+pymysql://placement:PLACEMENT_DBPASS@ct/placement

## ⑥ 初始化数据库 ##

su -s /bin/sh -c "nova-manage api_db sync" nova
    su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
    #创建cell单元格
    su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova

![20210525163037513.png][]

su -s /bin/sh -c "nova-manage db sync" nova

验证cell0和cell1是否注册成功

su -s /bin/sh -c "nova-manage cell_v2 list_cells" nova

![20210525163224819.png][]  
查看日志文件

tail -f /var/log/nova/nova-manage.log

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 5][]

## ⑦ 启动Nova服务并查看端口 ##

systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
    
    systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
    
    netstat -tnlup|egrep '8774|8775'
    curl http://ct:8774
    
    【netstat】命令用于显示各种网络相关信息
    【-tnlup】选项组合使用
    -t：仅显示tcp相关选项
    -n：拒绝显示别名，能显示数字的全部转化为数字
    -l：仅列出在Listen（监听）下的服务状态
    -u：仅显示udp相关选项
    -p：显示建立相关链接的程序名
    【curl】命令用于模拟http浏览器发起访问向ct：8774，用作测试

![20210525164935999.png][]  
![20210525164957572.png][]

# 三、计算节点配置 Nova 服务 #

**C1/C2节点**

## ① 安装nova-computer插件 ##

yum -y install openstack-nova-compute

## ② 修改配置文件 ##

cp -a /etc/nova/nova.conf{
        ,.bak}
    grep -Ev '^$|#' /etc/nova/nova.conf.bak > /etc/nova/nova.conf
    
    #注意修改本机IP
    openstack-config --set /etc/nova/nova.conf DEFAULT enabled_apis osapi_compute,metadata
    openstack-config --set /etc/nova/nova.conf DEFAULT transport_url rabbit://openstack:RABBIT_PASS@ct
    openstack-config --set /etc/nova/nova.conf DEFAULT my_ip 192.168.1.250
    openstack-config --set /etc/nova/nova.conf DEFAULT use_neutron true
    openstack-config --set /etc/nova/nova.conf DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver
    openstack-config --set /etc/nova/nova.conf api auth_strategy keystone
    openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_url http://ct:5000/v3
    openstack-config --set /etc/nova/nova.conf keystone_authtoken memcached_servers ct:11211
    openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_type password
    openstack-config --set /etc/nova/nova.conf keystone_authtoken project_domain_name Default
    openstack-config --set /etc/nova/nova.conf keystone_authtoken user_domain_name Default
    openstack-config --set /etc/nova/nova.conf keystone_authtoken project_name service
    openstack-config --set /etc/nova/nova.conf keystone_authtoken username nova
    openstack-config --set /etc/nova/nova.conf keystone_authtoken password NOVA_PASS
    openstack-config --set /etc/nova/nova.conf vnc enabled true
     openstack-config --set /etc/nova/nova.conf vnc server_listen 0.0.0.0
    openstack-config --set /etc/nova/nova.conf vnc server_proxyclient_address ' $my_ip'
    openstack-config --set /etc/nova/nova.conf vnc novncproxy_base_url http://192.168.1.250:6080/vnc_auto.html
    openstack-config --set /etc/nova/nova.conf glance api_servers http://ct:9292
    openstack-config --set /etc/nova/nova.conf oslo_concurrency lock_path /var/lib/nova/tmp
    openstack-config --set /etc/nova/nova.conf placement region_name RegionOne
    openstack-config --set /etc/nova/nova.conf placement project_domain_name Default
    openstack-config --set /etc/nova/nova.conf placement project_name service
    openstack-config --set /etc/nova/nova.conf placement auth_type password
    openstack-config --set /etc/nova/nova.conf placement user_domain_name Default
    openstack-config --set /etc/nova/nova.conf placement auth_url http://ct:5000/v3
    openstack-config --set /etc/nova/nova.conf placement username placement
    openstack-config --set /etc/nova/nova.conf placement password PLACEMENT_PASS
    openstack-config --set /etc/nova/nova.conf libvirt virt_type qemu

## ③ 开启服务 ##

systemctl enable libvirtd.service openstack-nova-compute.service
    systemctl start libvirtd.service openstack-nova-compute.service

# 四、在控制节点测试计算节点 #

openstack compute service list --service nova-compute

![20210525170520460.png][]

## ② 扫描当前有几个可用的计算节点 ##

#扫描到可用节点后，会将其创建到cell中，后续就可以在cell中创建虚拟机
    su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 6][]

## ③ 修改控制nova的配置文件 ##

vim /etc/nova/nova.conf
    
    [scheduler]
    #每300秒扫描一次
    discover_hosts_in_cells_interval = 300
    
    systemctl restart openstack-nova-api.service

## ④ 验证计算节点服务 ##

openstack compute service list

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 7][]

## ⑤ 查看各个组件API是否正常 ##

openstack catalog list

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 8][]

## ⑥ 查看镜像 ##

openstack image list

![20210525173242535.png][]

## ⑦ 查看cell API和Placement API是否正常 ##

nova-status upgrade check

![watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 9][]

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70]: /images/20221014/52cd04ab1e07411c85a3316f40cc3853.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 1]: /images/20221014/f4ed47b761034c8c84b0efc2d97b2dcc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 2]: /images/20221014/e7ea29b06b024127afbc30d07b14bdda.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 3]: /images/20221014/57468a0f177e40ffabc3324876bcf489.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 4]: /images/20221014/5cf928d2266649758eae959192d9d9e2.png
[20210525163037513.png]: /images/20221014/f2ccd87570274066b2913166fa32a462.png
[20210525163224819.png]: /images/20221014/86ed1bc4ac3c42ebac0ab27eece44202.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 5]: /images/20221014/2874fd3a975c4887bbc43f91a37c2c64.png
[20210525164935999.png]: /images/20221014/d056226f291d4be7a3cb221e4c1e3c5e.png
[20210525164957572.png]: /images/20221014/2be8a665b0614844bc3c37bb83499957.png
[20210525170520460.png]: /images/20221014/adae6735136b46089ad85eaaec94e5c6.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 6]: /images/20221014/2afa4c70351e4aa5adaa3ad0a4688255.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 7]: /images/20221014/8294c2aac8eb4fb29d31669db04aacbe.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 8]: /images/20221014/c1503ab080e84db6be4b1849d66249bb.png
[20210525173242535.png]: /images/20221014/d0756fb80e9b4494ba287967d08b5468.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzQyNDI3OTcx_size_16_color_FFFFFF_t_70 9]: /images/20221014/e2a8b904a2a145fcb6f9c51ffafd3eec.png