查看“OpenStack部署(2023年版）”的源代码

==基本信息==
controller 192.168.100.10   192.168.200.10

compute   192.168.100.20   192.168.200.20

===检查连通性===
控制节点：

ping计算节点的内外网IP地址：

   <nowiki>ping 192.168.100.20
ping 192.168.200.20</nowiki>


计算节点：

ping 控制节点的内外网IP地址：

  <nowiki>
 ping 192.168.100.10
ping 192.168.200.10</nowiki>

能ping通 打上勾。

==主机名管理与域名解析==

===主机名管理===
'''控制节点：'''

查看主机名：

hostname

更改主机名：

hostnamectl set-hostname controller

exit 重新登陆之后生效

'''计算节点：'''

查看主机名：

hostname

更改主机名：

hostnamectl set-hostname compute

exit 重新登陆之后生效

===本地域名解析===
'''控制节点：'''

vi /etc/hosts

 <nowiki>127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.100.10 controller
192.168.100.20 compute</nowiki>

'''计算节点：'''

vi /etc/hosts

 <nowiki>127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.100.10 controller
192.168.100.20 compute</nowiki>

==防火墙管理==
===禁用SELinux===
'''控制节点&计算节点'''

vi /etc/selinux/config

 <nowiki># This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
#     enforcing - SELinux security policy is enforced.
#     permissive - SELinux prints warnings instead of enforcing.
#     disabled - No SELinux policy is loaded.
SELINUX=disabled
# SELINUXTYPE= can take one of three two values:
#     targeted - Targeted processes are protected,
#     minimum - Modification of targeted policy. Only selected processes are protected.
#     mls - Multi Level Security protection.
SELINUXTYPE=targeted</nowiki>

setenforce 0

getenforce

 Permissive

当输出Permissive的时候 说明操作成功。

===停用Firewall防火墙===
'''控制节点&计算节点''':

systemctl status firewalld

 <nowiki>â— firewalld.service - firewalld - dynamic firewall daemon
   Loaded: loaded (/usr/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
   Active: active (running) since Wed 2023-11-01 23:40:10 CST; 15h ago
     Docs: man:firewalld(1)
 Main PID: 709 (firewalld)
   CGroup: /system.slice/firewalld.service
           â””â”€709 /usr/bin/python2 -Es /usr/sbin/firewalld --nofork --...

Nov 01 23:40:10 controller systemd[1]: Starting firewalld - dynamic ....
Nov 01 23:40:10 controller systemd[1]: Started firewalld - dynamic f....
Nov 01 23:40:11 controller firewalld[709]: WARNING: AllowZoneDrifting...
Hint: Some lines were ellipsized, use -l to show in full.</nowiki>

[root@controller ~]# systemctl disable firewalld

[root@controller ~]# systemctl stop  firewalld

===测试连通性===

'''控制节点&计算节点'''
 
在控制节点执行：

ping controller

ping compute

在计算节点执行：

ping controller

ping compute

==搭建本地软件仓库==
===控制节点中配置yum源===
上传镜像文件 openStack-train.iso至/opt目录下

挂载镜像文件

cd /opt

[root@controller opt]# mkdir openstack

[root@controller opt]# mount openStack-train.iso  /opt/openstack/

ls /opt/openstack

   base extras  train  updates  virt

如果显示以上 表示挂载成功。

备份原有配置文件：

[root@controller ~]# cd /etc/yum.repos.d/

[root@controller yum.repos.d]# ls

 <nowiki>CentOS-Base.repo            CentOS-OpenStack-train.repo
CentOS-Ceph-Nautilus.repo   CentOS-QEMU-EV.repo
CentOS-CR.repo              CentOS-Sources.repo
CentOS-Debuginfo.repo       CentOS-Storage-common.repo
CentOS-fasttrack.repo       CentOS-Vault.repo
CentOS-Media.repo           CentOS-x86_64-kernel.repo
CentOS-NFS-Ganesha-28.repo</nowiki>

mkdir bak

mv *.repo bak

编辑YUM源：

vi OpenStack.repo:

 <nowiki>
[base]
name=base
baseurl=file:///opt/openstack/base/
enable=1
gpgcheck=0
[extras]
name=extras
baseurl=file:///opt/openstack/extras/
enable=1
gpgcheck=0
[updates]
name=updates
baseurl=file:///opt/openstack/updates/
enable=1
gpgcheck=0
[train]
name=train
baseurl=file:///opt/openstack/train/
enable=1
gpgcheck=0
[virt]
name=virt
baseurl=file:///opt/openstack/virt/
enable=1
gpgcheck=0</nowiki>

清除并重建缓存：

yum clean all

yum makecache

yum repolist

 <nowiki>Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
repo id                                             repo name                                         status
base                                                base                                              10,039
extras                                              base                                                 500
train                                               base                                               3,168
updates                                             base                                               3,182
virt                                                base                                                  63
repolist: 16,952</nowiki>

===在控制节点中配置FTP===
yum -y install vsftpd

vi /etc/vsftpd/vsftpd.conf

 anon_root=/opt

配置FTP时，把anon_root项 放在 anonymous_enable=YES 下面一行

[root@controller ~]# systemctl start vsftpd

[root@controller ~]# systemctl enable vsftpd

===计算节点配置上配置YUM源===
[root@compute ~]# cd /etc/yum.repos.d

[root@compute yum.repos.d]# mkdir bak

[root@compute yum.repos.d]# mv *.repo bak

[root@compute yum.repos.d]#vi OpenStack.repo

 <nowiki>
[base]
name=base
baseurl=ftp://controller/openstack/base/
enable=1
gpgcheck=0
[extras]
name=extras
baseurl=ftp://controller/openstack/extras/
enable=1
gpgcheck=0
[updates]
name=updates
baseurl=ftp://controller/openstack/updates/
enable=1
gpgcheck=0
[train]
name=train
baseurl=ftp://controller//openstack/train/
enable=1
gpgcheck=0
[virt]
name=virt
baseurl=ftp://controller//openstack/virt/
enable=1
gpgcheck=0
</nowiki>

yum clean all

yum makecache

yum repolist

==安装Chrony时间控制服务==
===控制节点安装Chrony===

yum -y update

yum -y install chrony


配置文件：

vi /etc/chrony.conf

把原先server的4行都删除，

 <nowiki>
server 0.centos.pool.ntp.org iburst
server 1.centos.pool.ntp.org iburst
server 2.centos.pool.ntp.org iburst
server 3.centos.pool.ntp.org iburst</nowiki>

增加：

 <nowiki>
server ntp.aliyun.com iburst
local stratum 1
allow 192.168.100.0/24</nowiki>

重启服务：

systemctl restart chronyd

设置开机启动：

systemctl enable chronyd


查看当前客户端与NTP连接情况：

chronyc sources

 <nowiki>210 Number of sources = 1
MS Name/IP address         Stratum Poll Reach LastRx Last sample               
===============================================================================
^* 203.107.6.88                  2   6    17    14   -688us[-2639us] +/-   25ms</nowiki>

===计算节点安装Chrony===
yum -y update

yum -y install chrony


配置文件：

vi /etc/chrony.conf

把原先server的4行都删除，

 <nowiki>
server 0.centos.pool.ntp.org iburst
server 1.centos.pool.ntp.org iburst
server 2.centos.pool.ntp.org iburst
server 3.centos.pool.ntp.org iburst</nowiki>

增加：

 <nowiki>server controller iburst</nowiki>

[root@compute yum.repos.d]# systemctl restart chronyd

[root@compute yum.repos.d]# chronyc sources

 <nowiki>210 Number of sources = 1
MS Name/IP address         Stratum Poll Reach LastRx Last sample               
===============================================================================
^* controller                    3   6    17     7    +64us[  +67us] +/-   24ms
</nowiki>


==安装OpenStack云计算平台基础框架==

云计算平台基础架构的作用：OpenStack提供了一个云平台框架，它包含很多独立的组件。在组件安装前需要先将这个软件框架安装起来，以后组件才能像搭积木一样一个一个往里面放。


'''控制节点&计算节点'''

yum -y install centos-release-openstack-train

rm -rf /etc/yum.repos.d/C*.repo

ls /etc/yum.repos.d

yum -y upgrade

yum clean all 
  
yum makecache

rm -rf /etc/yum.repos.d/C*.repo

框架安装完成以后还需要安装它的一个客户端用于管理OpenStack云平台。该客户端主要提供了“openstack”这个命令，它集成了几乎所有对OpenStack云平台的管理功能。如下安装该客户端:

yum -y install python-openstackclient

yum -y install openstack-selinux

openstack --version

  openstack 4.0.2

==安装MariaDB数据库==
数据库服务在OpenStack中是非常重要的基础服务，OpenStack云计算平台的每个核心组件都会使用到它来存储相关数据并实现快速检索等功能
MariaDB是一个采用Maria存储引擎的MySQL数据库的分支版本。在OpenStack中MariaDB被用于存储用户、角色、网络等信息.


只在控制节点进行：

yum -y install mariadb-server  python2-PyMySQL

===配置数据库===
[root@controller ~]# vi /etc/my.cnf.d/openstack.cnf

 <nowiki>[mysqld]
bind-address = 192.168.100.10
default-storage-engine = innodb
innodb_file_per_table = on
max_connections =4096
collation-server = utf8_general_ci
character-set-server = utf8</nowiki>

[root@controller ~]# systemctl enable mariadb

 <nowiki>Created symlink from /etc/systemd/system/mysql.service to /usr/lib/systemd/system/mariadb.service.
Created symlink from /etc/systemd/system/mysqld.service to /usr/lib/systemd/system/mariadb.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/mariadb.service to /usr/lib/systemd/system/mariadb.service.</nowiki>

[root@controller ~]# systemctl start mariadb



===初始化数据库===
[root@controller ~]# mysql_secure_installation

 <nowiki>


NOTE: RUNNING ALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB
      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

In order to log into MariaDB to secure it, we'll need the current
password for the root user.  If you've just installed MariaDB, and
you haven't set the root password yet, the password will be blank,
so you should just press enter here.

Enter current password for root (enter for none): 
OK, successfully used password, moving on...

Setting the root password ensures that nobody can log into the MariaDB
root user without the proper authorisation.

Set root password? [Y/n] Y
New password: 
Re-enter new password: 
Password updated successfully!
Reloading privilege tables..
 ... Success!


By default, a MariaDB installation has an anonymous user, allowing anyone
to log into MariaDB without having to have a user account created for
them.  This is intended only for testing, and to make the installation
go a bit smoother.  You should remove them before moving into a
production environment.

Remove anonymous users? [Y/n] y^H
Remove anonymous users? [Y/n] Y
 ... Success!

Normally, root should only be allowed to connect from 'localhost'.  This
ensures that someone cannot guess at the root password from the network.

Disallow root login remotely? [Y/n] Y
 ... Success!

By default, MariaDB comes with a database named 'test' that anyone can
access.  This is also intended only for testing, and should be removed
before moving into a production environment.

Remove test database and access to it? [Y/n] Y
 - Dropping test database...
 ... Success!
 - Removing privileges on test database...
 ... Success!

Reloading the privilege tables will ensure that all changes made so far
will take effect immediately.

Reload privilege tables now? [Y/n] Y
 ... Success!

Cleaning up...

All done!  If you've completed all of the above steps, your MariaDB
installation should now be secure.

Thanks for using MariaDB!</nowiki>

===登陆数据库验证===
[root@controller ~]# mysql -uroot -p000000

 <nowiki>Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 16
Server version: 10.3.20-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]></nowiki>

输入quit回车退出。

==安装RabbitMQ消息队列服务==
OpenStack各个组件之间就是通过消息队列进行相互通信的。市面上存在多种消息队列应用，其中RabbitMQ是一个开源的、应用广泛的消息服务系统，通常使用它来为OpenStack提供消息队列服务。


只在控制节点上进行安装与设置：

yum -y install rabbitmq-server

[root@controller opt]# systemctl enable rabbitmq-server

[root@controller opt]# systemctl start rabbitmq-server

添加用户并设置用户权限:

rabbitmqctl add_user rabbitmq 000000

rabbitmqctl set_permissions rabbitmq ".*" ".*" ".*"

 netstat -tnlup|grep 5672

 <nowiki>tcp        0      0 0.0.0.0:25672           0.0.0.0:*               LISTEN      959/beam.smp        
tcp6       0      0 :::5672                 :::*                    LISTEN      959/beam.smp</nowiki>

如果netstat命令使用不了，可以执行 yum -y install net-tools 进行安装

rabbitmqctl list_users

 <nowiki>Listing users
rabbitmq        []
guest   [administrator]</nowiki>

==安装Memcached缓存服务==
经常用到的数据先存放到内存缓存中，使用时可以直接从内存缓存中读取，由于内存缓存比硬盘的读取速度快很多，因此可以大大提高读取速度。


只在控制节点上进行安装与设置：

yum -y install memcached python-memcached

将配置文件内容“OPTIONS"参数的值改为以下内容：

vi /etc/sysconfig/memcached

 <nowiki>OPTIONS="-l 127.0.0.1,::1,controller"</nowiki>

[root@controller opt]# systemctl enable memcached

[root@controller opt]# systemctl start memcached

netstat -tnlup|grep 11211

 <nowiki>tcp        0      0 192.168.100.10:11211    0.0.0.0:*               LISTEN      956/memcached       
tcp        0      0 127.0.0.1:11211         0.0.0.0:*               LISTEN      956/memcached       
tcp6       0      0 ::1:11211               :::*                    LISTEN      956/memcached</nowiki>


[root@controller ~]# telnet 192.168.100.10 11211
 
 <nowiki>Trying 192.168.100.10...
Connected to 192.168.100.10.
Escape character is '^]'.
stats
STAT pid 956
STAT uptime 30284
STAT time 1700176112
STAT version 1.5.6
STAT libevent 2.0.21-stable
STAT pointer_size 64
STAT rusage_user 5.050548
STAT rusage_system 3.509942
STAT max_connections 1024
</nowiki>

==安装etcd分布式键值对存储系统==
ETCD服务：为了快速实现服务发现，需要一个服务发现组件用于存储服务提供者的相关配置及注册信息，使用服务的消费者将从该服务发现组件中获得相关信息后再去服务提供者处使用服务。etcd是一个开源项目，它的目标是构建一个高可用的分布式键-值(Key-Value)数据库用于配置共享和服务发现

只在控制节点上进行安装与设置：

yum -y install etcd

vi /etc/etcd/etcd.conf


 <nowiki>ETCD_DATA_DIR="/var/lib/etcd/default.etcd"
ETCD_LISTEN_PEER_URLS="http://192.168.100.10:2380"
ETCD_LISTEN_CLIENT_URLS="http://192.168.100.10:2379,http://127.0.0.1:2379"
ETCD_NAME="controller"
ETCD_INITIAL_ADVERTISE_PEER_URLS="http://192.168.100.10:2380"
ETCD_ADVERTISE_CLIENT_URLS="http://192.168.100.10:2379"
ETCD_INITIAL_CLUSTER="controller=http://192.168.100.10:2380"
ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01"
ETCD_INITIAL_CLUSTER_STATE="new"</nowiki>

grep -v '^#' /etc/etcd/etcd.conf检查

systemctl enable etcd

 Created symlink from /etc/systemd/system/multi-user.target.wants/etcd.service to /usr/lib/systemd/system/etcd.service.

systemctl start etcd

netstat -tnlup|grep etcd

 <nowiki>tcp        0      0 192.168.100.10:2379     0.0.0.0:*               LISTEN      3275/etcd           
tcp        0      0 127.0.0.1:2379          0.0.0.0:*               LISTEN      3275/etcd           
tcp        0      0 192.168.100.10:2380     0.0.0.0:*               LISTEN      3275/etcd</nowiki>

==安装KeyStone==
仅在控制节点上安装：
===安装KeyStone软件包===
yum -y install openstack-keystone httpd mod_wsgi

cat /etc/passwd|grep keystone

 keystone:x:163:163:OpenStack Keystone Daemons:/var/lib/keystone:/sbin/nologin

cat /etc/group|grep keystone

 keystone:x:163:

===创建Keystone的数据库并授权===
mysql -uroot -p000000

CREATE DATABASE keystone;

MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '000000';

 Query OK, 0 rows affected (0.001 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '000000';
 
 Query OK, 0 rows affected (0.001 sec)

输入quit退出。

===修改keystone配置文件===
vi /etc/keystone/keystone.conf

修改这两行代码，如果前面有注释，取消注释

 connection = mysql+pymysql://keystone:000000@controller/keystone
 provider = fernet

===初始化KeyStone数据库===
同步数据库：

su keystone -s /bin/sh -c "keystone-manage db_sync"

mysql -uroot -p000000

MariaDB [(none)]> use keystone;

 <nowiki>Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed</nowiki>

MariaDB [keystone]> show tables;

  <nowiki>+------------------------------------+
| Tables_in_keystone                 |
+------------------------------------+
| access_rule                        |
| access_token                       |
| application_credential             |
| application_credential_access_rule |
| application_credential_role        |
| assignment  
</nowiki>

===KeyStone组件初始化===
输入exit; 退出mysql 
初始化Fernet密钥库：

 keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone

 keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

初始化用户身份认证信息：

 keystone-manage bootstrap --bootstrap-password 000000 --bootstrap-admin-url http://controller:5000/v3 --bootstrap-internal-url http://controller:5000/v3 --bootstrap-public-url http://controller:5000/v3 --bootstrap-region-id RegionOne

配置Web服务之增加WSGI支持：

 ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

配置Web服务之配置启动Apache服务：

vi /etc/httpd/conf/httpd.conf

增加：

 ServerName controller

systemctl enable httpd

systemctl start httpd

===模拟登陆验证===
cd 

vi admin-login

 <nowiki>export OS_USERNAME=admin
export OS_PASSWORD=000000
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2</nowiki>

source admin-login 

export -p

 <nowiki>declare -x HISTCONTROL="ignoredups"
declare -x HISTSIZE="1000"
declare -x HOME="/root"
declare -x HOSTNAME="controller"
declare -x LANG="en_US.UTF-8"
declare -x LESSOPEN="||/usr/bin/lesspipe.sh %s"
declare -x LOGNAME="root"
declare -x LS_COLORS="rs=0:di=01;34:ln=01;36:mh=00:pi=40;33:so=01;35:do=01;35:bd=40;33;01:cd=40;33;01:or=40;31;01:mi=01;05;37;41:su=37;41:sg=30;43:ca=30;41:tw=30;42:ow=34;42:st=37;44:ex=01;32:*.tar=01;31:*.tgz=01;31:*.arc=01;31:*.arj=01;31:*.taz=01;31:*.lha=01;31:*.lz4=01;31:*.lzh=01;31:*.lzma=01;31:*.tlz=01;31:*.txz=01;31:*.tzo=01;31:*.t7z=01;31:*.zip=01;31:*.z=01;31:*.Z=01;31:*.dz=01;31:*.gz=01;31:*.lrz=01;31:*.lz=01;31:*.lzo=01;31:*.xz=01;31:*.bz2=01;31:*.bz=01;31:*.tbz=01;31:*.tbz2=01;31:*.tz=01;31:*.deb=01;31:*.rpm=01;31:*.jar=01;31:*.war=01;31:*.ear=01;31:*.sar=01;31:*.rar=01;31:*.alz=01;31:*.ace=01;31:*.zoo=01;31:*.cpio=01;31:*.7z=01;31:*.rz=01;31:*.cab=01;31:*.jpg=01;35:*.jpeg=01;35:*.gif=01;35:*.bmp=01;35:*.pbm=01;35:*.pgm=01;35:*.ppm=01;35:*.tga=01;35:*.xbm=01;35:*.xpm=01;35:*.tif=01;35:*.tiff=01;35:*.png=01;35:*.svg=01;35:*.svgz=01;35:*.mng=01;35:*.pcx=01;35:*.mov=01;35:*.mpg=01;35:*.mpeg=01;35:*.m2v=01;35:*.mkv=01;35:*.webm=01;35:*.ogm=01;35:*.mp4=01;35:*.m4v=01;35:*.mp4v=01;35:*.vob=01;35:*.qt=01;35:*.nuv=01;35:*.wmv=01;35:*.asf=01;35:*.rm=01;35:*.rmvb=01;35:*.flc=01;35:*.avi=01;35:*.fli=01;35:*.flv=01;35:*.gl=01;35:*.dl=01;35:*.xcf=01;35:*.xwd=01;35:*.yuv=01;35:*.cgm=01;35:*.emf=01;35:*.axv=01;35:*.anx=01;35:*.ogv=01;35:*.ogx=01;35:*.aac=01;36:*.au=01;36:*.flac=01;36:*.mid=01;36:*.midi=01;36:*.mka=01;36:*.mp3=01;36:*.mpc=01;36:*.ogg=01;36:*.ra=01;36:*.wav=01;36:*.axa=01;36:*.oga=01;36:*.spx=01;36:*.xspf=01;36:"
declare -x MAIL="/var/spool/mail/root"
declare -x OLDPWD="/etc/yum.repos.d"
declare -x OS_AUTH_URL="http://controller:5000/v3"
declare -x OS_IDENTITY_API_VERSION="3"
declare -x OS_IMAGE_API_VERSION="2"
declare -x OS_PASSWORD="000000"
declare -x OS_PROJECT_DOMAIN_NAME="Default"
declare -x OS_PROJECT_NAME="admin"
declare -x OS_USERNAME="admin"
declare -x OS_USER_DOMAIN_NAME="Default"
declare -x PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin"
declare -x PWD="/root"
declare -x SHELL="/bin/bash"
declare -x SHLVL="1"
declare -x SSH_CLIENT="192.168.100.1 56815 22"
declare -x SSH_CONNECTION="192.168.100.1 56815 192.168.100.10 22"
declare -x SSH_TTY="/dev/pts/0"
declare -x TERM="vt100"
declare -x USER="root"
declare -x XDG_RUNTIME_DIR="/run/user/0"
declare -x XDG_SESSION_ID="33"</nowiki>

===检测Keystone服务===

openstack project create --domain default project

openstack project list

 <nowiki>
+----------------------------------+---------+
| ID                               | Name    |
+----------------------------------+---------+
| 05ca48de33a24af2876a37119937e2ae | project |
| b5ec614269974d9cb21d24b6bc85d176 | admin   |
+----------------------------------+---------+</nowiki>

[root@controller ~]# openstack role create user

 <nowiki>+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | None                             |
| domain_id   | None                             |
| id          | 665dba479ae449b390eb3cef0fb1be61 |
| name        | user                             |
| options     | {}                               |
+-------------+----------------------------------+</nowiki>

[root@controller ~]# openstack role list

 <nowiki>+----------------------------------+--------+
| ID                               | Name   |
+----------------------------------+--------+
| 054ce618087941f7a56710b3a6dec0fb | admin  |
| 2aab7e55784f48cdbd1356d18932ebf3 | reader |
| 665dba479ae449b390eb3cef0fb1be61 | user   |
| a4deed2ae0d4484eb3f5325c5b4a3b52 | member |
+----------------------------------+--------+</nowiki>

[root@controller ~]# openstack domain list

 <nowiki>+---------+---------+---------+--------------------+
| ID      | Name    | Enabled | Description        |
+---------+---------+---------+--------------------+
| default | Default | True    | The default domain |
+---------+---------+---------+--------------------+</nowiki>

[root@controller ~]# openstack user list

 <nowiki>+----------------------------------+-------+
| ID                               | Name  |
+----------------------------------+-------+
| 9fc2bbe8f2f1421bb2c91c9897ee279e | admin |
+----------------------------------+-------+</nowiki>

==镜像服务Glance安装==
===安装与配置Glance镜像服务===
yum -y install openstack-glance

[root@controller ~]# cat /etc/passwd | grep glance

 glance:x:161:161:OpenStack Glance Daemons:/var/lib/glance:/sbin/nologin

[root@controller ~]# cat /etc/group |grep glance

  glance:x:161:


安装过程中如果遇到这种错误，可用yum downgrade 包名 对软件包进行降级： https://blog.csdn.net/weixin_43010385/article/details/112920656

 <nowiki>
Error: Package: device-mapper-mu1tipath-0.4.9-135.e17_9.x86_64 (updates)
Requires: kpartx =0.4.9-135.e17_9
Insta1led: kpartx-0.4.9-136.e17_9.x86_64 (insta7led)kpartx ='0.4.9-136.e17_9
AvaiTable: kpartx-0.4.9-133.e17.x86_64 (base)kpartx ='0.4.9-133.e17
Avaiiab1e: kpartx-0.4.9-134.e17_9.x86_64 (updates)kpartx = 0.4.9-134.e17_9
Avaiiab1e: kpartx-0.4.9-i35.e17_9.x86_64 (updates)
kpartx = 0.4.9-135.e17_9
Error: Package: "tkinter-2.7.5-90.ei7.x86_64 (updates)
Requires: python = 2.7.5-90.e17
Insta1led: python-2.7.5-94.e17_9.x86_64 (insta11ed).python =2.7.5-94.e17_9
Avaiable: python-2.7.5-89.e17.x86_64 (base).python =2.7.5-89.e17
Avaiab1e: python-2.7.5-90.e17.x86_64 (updates)
python =2.7.5-90.e77
</nowiki>

====创建Glance数据库并授权====
[root@controller ~]# mysql -uroot -p000000

 <nowiki>Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 10
Server version: 10.3.20-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statem</nowiki>

MariaDB [(none)]> CREATE DATABASE glance;

 Query OK, 1 row affected (0.001 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost'IDENTIFIED BY '000000'; 

 Query OK, 0 rows affected (0.002 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '000000';

 Query OK, 0 rows affected (0.001 sec)

====修改Glance配置文件====
cp /etc/glance/glance-api.conf /etc/glance/glance-api.bak

grep -Ev '^$|#' /etc/glance/glance-api.bak > /etc/glance/glance-api.conf


vi /etc/glance/glance-api.conf

 <nowiki>
[DEFAULT]
[cinder]
[cors]
[database]
connection = mysql+pymysql://glance:000000@controller/glance
[file]
[glance.store.http.store]
[glance.store.rbd.store]
[glance.store.sheepdog.store]
[glance.store.swift.store]
[glance.store.vmware_datastore.store]
[glance_store]
stores = file
default_store = file
filesystem_store_datadir = /var/lib/glance/images/ 
[image_format]
[keystone_authtoken]
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password 
username = glance
password = 000000 
project_name = project
user_domain_name = Default
project_domain_name = Default

[oslo_concurrency]
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[paste_deploy]
flavor = keystone
[profiler]
[store_type_location_strategy]
[task]
[taskflow_executor]</nowiki>

解释：

*[database] 中connection 实现于数据库的连接
*[keystone_authotoken]和[paste_deploy]部分实现与keystone的交互
*修改[glance_store]部分，指定后端存储系统。

====初始化Glance数据库====
同步数据库：

su glance -s /bin/sh -c "glance-manage db_sync"

检查数据库：

[root@controller ~]# mysql -uroot -p

 <nowiki>Enter password: 
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 21
Server version: 10.3.20-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.</nowiki>


MariaDB [(none)]> use glance;

 <nowiki>Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Database changed</nowiki>

MariaDB [glance]> show tables;

 <nowiki>+----------------------------------+
| Tables_in_glance                 |
+----------------------------------+
| alembic_version                  |
| image_locations                  |
| image_members                    |
| image_properties                 |
| image_tags                       |
| images                           |
| metadef_namespace_resource_types |
| metadef_namespaces               |
| metadef_objects                  |
| metadef_properties               |
| metadef_resource_types           |
| metadef_tags                     |
| migrate_version                  |
| task_info                        |
| tasks                            |
+----------------------------------+
15 rows in set (0.000 sec)</nowiki>

===Glance组件初始化===
====创建Glance用户并分配角色====
cd

source admin-login

openstack user create --domain default --password 000000 glance

这里的用户名和密码 要和glance-api.conf文件中[keystone_authtoken]中的用户名和密码一致。

openstack role add --project project --user glance admin

====创建Glance服务及服务端点====
openstack service create --name glance image

 <nowiki>
+---------+----------------------------------+
| Field   | Value                            |
+---------+----------------------------------+
| enabled | True                             |
| id      | 0d4d607534dd437f9d3451850e2e7d11 |
| name    | glance                           |
| type    | image                            |
+---------+----------------------------------+</nowiki>

创建镜像服务端点：对应公众用户、内部组件、管理用户：

openstack endpoint create --region RegionOne glance public http://controller:9292

openstack endpoint create --region RegionOne glance internal http://controller:9292

openstack endpoint create --region RegionOne glance admin  http://controller:9292

启动Glance服务：

systemctl enable openstack-glance-api

systemctl start openstack-glance-api

===验证Glance服务===
查看端口占用服务：

[root@controller ~]# netstat -tnlup |grep 9292

 <nowiki>tcp        0      0 0.0.0.0:9292            0.0.0.0:*               LISTEN      21812/python2</nowiki> 
      
[root@controller ~]# systemctl status openstack-glance-api

  <nowiki>â— openstack-glance-api.service - OpenStack Image Service (code-named Glance) API server
   Loaded: loaded (/usr/lib/systemd/system/openstack-glance-api.service; enabled; vendor preset: disabled)
   Active: active (running) since Fri 2023-12-01 12:08:58 CST; 1h 2min ago
 Main PID: 21812 (glance-api)
   CGroup: /system.slice/openstack-glance-api.service
           â”œâ”€21812 /usr/bin/python2 /usr/bin/glance-api
           â”œâ”€21828 /usr/bin/python2 /usr/bin/glance-api
           â””â”€21829 /usr/bin/python2 /usr/bin/glance-api

Dec 01 12:08:58 controller systemd[1]: Started OpenStack Image Service (code-named Glance) ...er.
Dec 01 12:08:59 controller glance-api[21812]: /usr</nowiki>

===用Glance制作镜像===
[root@controller opt]# pwd

 /opt

[root@controller opt]# ls

  cirros-0.5.2-x86_64-disk.img  openstack  openStack-train.iso

[root@controller opt]# openstack image create --file cirros-0.5.2-x86_64-disk.img --disk-format qcow2 --container-format bare --public cirros

 <nowiki>+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field            | Value                                                                                                                                                                                      |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| checksum         | b874c39491a2377b8490f5f1e89761a4                                                                                                                                                           |
| container_format | bare                                                                                                                                                                                       |
| created_at       | 2023-12-01T05:16:30Z                                                                                                                                                                       |
| disk_format      | qcow2                                                                                                                                                                                      |
| file             | /v2/images/fce9ce99-cf6a-4f38-a5a6-30b15c9949a6/file                                                                                                                                       |
| id               | fce9ce99-cf6a-4f38-a5a6-30b15c9949a6                                                                                                                                                       |
| min_disk         | 0                                                                                                                                                                                          |
| min_ram          | 0                                                                                                                                                                                          |
| name             | cirros                                                                                                                                                                                     |
| owner            | f1447cb733874266ae98ab6846da80a3                                                                                                                                                           |
| properties       | os_hash_algo='sha512', os_hash_value='6b813aa46bb90b4da216a4d19376593fa3f4fc7e617f03a92b7fe11e9a3981cbe8f0959dbebe36225e5f53dc4492341a4863cac4ed1ee0909f3fc78ef9c3e869', os_hidden='False' |
| protected        | False                                                                                                                                                                                      |
| schema           | /v2/schemas/image                                                                                                                                                                          |
| size             | 16300544                                                                                                                                                                                   |
| status           | active                                                                                                                                                                                     |
| tags             |                                                                                                                                                                                            |
| updated_at       | 2023-12-01T05:16:30Z                                                                                                                                                                       |
| virtual_size     | None                                                                                                                                                                                       |
| visibility       | public                                                                                                                                                                                     |
+------------------+--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+</nowiki>

openstack image list

 <nowiki>+--------------------------------------+--------+--------+
| ID                                   | Name   | Status |
+--------------------------------------+--------+--------+
| fce9ce99-cf6a-4f38-a5a6-30b15c9949a6 | cirros | active |
+--------------------------------------+--------+--------+</nowiki>

ll /var/lib/glance/images/

 <nowiki>total 15920
-rw-r----- 1 glance glance 16300544 Dec  1 13:16 fce9ce99-cf6a-4f38-a5a6-30b15c9949a6
</nowiki>

==放置服务Placement安装==
在控制节点上执行
===安装Placement===
[root@controller ~]yum -y install openstack-placement-api

[root@controller ~]# cat /etc/passwd | grep placement

 placement:x:991:988:OpenStack Placement:/:/bin/bash
[root@controller ~]# cat /etc/group | grep placement

 placement:x:988:

===创建数据库并授权===
[root@controller ~]# mysql -uroot -p000000

 <nowiki>Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 29
Server version: 10.3.20-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.
</nowiki>

MariaDB [(none)]> CREATE DATABASE placement;

  Query OK, 1 row affected (0.001 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '000000';

 Query OK, 0 rows affected (0.003 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '000000';

 Query OK, 0 rows affected (0.001 sec)

===修改Placement配置文件===
[root@controller ~]# cp /etc/placement/placement.conf /etc/placement/placement.bak

[root@controller ~]# grep -Ev '^$|#' /etc/placement/placement.bak > /etc/placement/placement.conf

[root@controller ~]# vi /etc/placement/placement.conf

 <nowiki>
[DEFAULT]
[api]
[cors]
[keystone_authtoken]
[oslo_policy]
[placement]
[placement_database]
[profiler]</nowiki>

修改[placement_database]部分，实现与数据库的连接

 <nowiki>
[placement_database]
connection = mysql+pymysql://placement:000000@controller/placeme</nowiki>

修改[api]与[keystone_authtoken]部分，实现与keystone的交互。

 <nowiki>
[api]
auth_strategy = keystone
[cors]
[keystone_authtoken]
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
username = placement
password = 000000
project_name = project
user_domain_name = Default
project_domain_name = Default
[oslo_policy]
[placement]
[placement_database]
connection = mysql+pymysql://placement:000000@controller/placement</nowiki>


vi /etc/httpd/conf.d/00-placement-api.conf

在VirtualHost节点中添加：

  <nowiki>
   <Directory /usr/bin>
         Require all granted
   </Directory>
</nowiki>

==计算服务Nova安装==
===安装与配置控制节点上的Nova服务===
====安装Nova软件包====
yum -y install openstack-nova-api openstack-nova-conductor openstack-nova-scheduler openstack-nova-novncproxy 

[root@controller ~]# cat /etc/passwd|grep nova

 nova:x:162:162:OpenStack Nova Daemons:/var/lib/nova:/sbin/nologin

[root@controller ~]# cat /etc/group|grep nova

 nobody:x:99:nova
 nova:x:162:nova

====创建Nova数据库并授权====
[root@controller ~]# mysql -uroot -p000000

 <nowiki>Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 17
Server version: 10.3.20-MariaDB MariaDB Server

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> CREATE DATABASE nova_api;
Query OK, 1 row affected (0.002 sec)

MariaDB [(none)]>  CREATE DATABASE nova_cell0;
Query OK, 1 row affected (0.000 sec)

MariaDB [(none)]> CREATE DATABASE nova;
Query OK, 1 row affected (0.000 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '000000';
Query OK, 0 rows affected (0.001 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '000000';
Query OK, 0 rows affected (0.000 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY '000000';
Query OK, 0 rows affected (0.000 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '000000';
Query OK, 0 rows affected (0.000 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '000000';
Query OK, 0 rows affected (0.000 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '000000';
Query OK, 0 rows affected (0.000 sec)
</nowiki>

====修改Nova配置文件====
将配置文件去掉注释和空行

cp /etc/nova/nova.conf /etc/nova/nova.bak

grep -Ev '^$|#' /etc/nova/nova.bak >/etc/nova/nova.conf

编辑新的配置文件

vi /etc/nova/nova.conf

  <nowiki>
[DEFAULT]
[api]
[api_database]
[barbican]
[cache]
[cinder]
[compute]
[conductor]
[console]
[consoleauth]
[cors]
[database]
[devices]
[ephemeral_storage_encryption]
[filter_scheduler]
[glance]
[guestfs]
[healthcheck]
[hyperv]
[ironic]
[key_manager]
[keystone]
[keystone_authtoken]
[libvirt]
[metrics]
[mks]
[neutron]
[notifications]
[osapi_v21]</nowiki>

修改“[api_database]”和“[database]”部分，实现与数据库“nova_api”“nova”的连接。

 <nowiki>[api_database]
connection = mysql+pymysql://nova:000000@controller/nova_api
[database]
connection = mysql+pymysql://nova:000000@controller/nova</nowiki>


修改“[api]”与“[keystone_authtoken]”部分，实现与Keystone交互。

 <nowiki>[api]
auth_strategy = keystone
[keystone_authtoken]
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = project
username = nova
password = 000000
</nowiki>

修改“[placement]”部分，实现与Placement交互。

 <nowiki>
[placement]
auth_url = http://controller:5000
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = project
username = placement
password = 000000
region_name = RegionOne
project_domain_name = Default
user_domain_name = Default
project_name = project
username = nova
password = 000000</nowiki>

修改“[glance]”部分，实现与Glance交互。

  <nowiki>[glance]
api_servers = http://controller:9292</nowiki>

修改“[oslo_concurrency]”，配置锁路径。

 <nowiki>[oslo_concurrency]
lock_path = /var/lib/nova/tmp</nowiki>

这里的“/var/lib/nova/tmp”是在安装软件包时由“nova”用户创建的，因此“nova”对它拥有所有权限。不要随意更改该路径

修改“[DEFAULT]”部分，配置使用消息队列及防火墙等信息。


 <nowiki>[DEFAULT]
enabled_apis = osapi_compute,metadata           
transport_url = rabbit://rabbitmq:000000@controller:5672
my_ip = 192.168.100.10
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver</nowiki>

修改“[vnc]”部分，配置VNC连接模式。


 <nowiki>[vnc]
enabled = true
server_listen = $my_ip
server_proxyclient_address = $my_ip</nowiki>


配置文件全部代码：

 <nowiki>[DEFAULT]
enabled_apis = osapi_compute,metadata           
transport_url = rabbit://rabbitmq:000000@controller:5672
my_ip = 192.168.100.10
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver

[api]
auth_strategy = keystone
[api_database]
connection = mysql+pymysql://nova:000000@controller/nova_api
[barbican]
[cache]
[cinder]
[compute]
[conductor]
[console]
[consoleauth]
[cors]
[database]
connection = mysql+pymysql://nova:000000@controller/nova
[devices]
[ephemeral_storage_encryption]
[filter_scheduler]
[glance]
api_servers = http://controller:9292
[guestfs]
[healthcheck]
[hyperv]
[ironic]
[key_manager]
[keystone]
[keystone_authtoken]
auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = project
username = nova
password = 000000

[libvirt]
[metrics]
[mks]
[neutron]
[notifications]
[osapi_v21]
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[pci]
[placement]
auth_url = http://controller:5000
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = project
username = placement
password = 000000
region_name = RegionOne
project_domain_name = Default
user_domain_name = Default
project_name = project
username = nova
password = 000000

[powervm]
[privsep]
[profiler]
[quota]
[rdp]
[remote_debug]
[scheduler]
[serial_console]
[service_user]
[spice]
[upgrade_levels]
[vault]
[vendordata_dynamic_auth]
[vmware]
[vnc]
enabled = true
server_listen = $my_ip
server_proxyclient_address = $my_ip
[workarounds]
[wsgi]
[xenserver]
[xvp]
[zvm]
</nowiki>

初始化Nova的数据库：

 <nowiki>
第1步，初始化“nova_api”数据库。
[root@controller ~]# su nova -s /bin/sh -c "nova-manage api_db sync" 
第2步，创建“cell1”单元，该单元将使用“nova”数据库。
[root@controller ~]# su nova -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1"
第3步，映射“nova”到“cell0”数据库，使“cell0”的表结构和“nova”的保持一致。
[root@controller ~]# su nova -s /bin/sh -c "nova-manage cell_v2 map_cell0"
第4步，初始化“nova”数据库，由于映射的存在，在“cell0”中同时创建相同数据表。
[root@controller ~]# su nova -s /bin/sh -c "nova-manage db sync"
</nowiki>

用下列语句获得已注册的单元列表。

[root@controller ~]# nova-manage cell_v2 list_cells


 <nowiki>+-------+--------------------------------------+----------------------------------------+-------------------------------------------------+----------+
|  Name |                 UUID                 |             Transport URL              |               Database Connection               | Disabled |
+-------+--------------------------------------+----------------------------------------+-------------------------------------------------+----------+
| cell0 | 00000000-0000-0000-0000-000000000000 |                 none:/                 | mysql+pymysql://nova:****@controller/nova_cell0 |  False   |
| cell1 | 2e58f79d-69d0-451d-a89d-0f2b8cd209c4 | rabbit://rabbitmq:****@controller:5672 |    mysql+pymysql://nova:****@controller/nova    |  False   |
+-------+--------------------------------------+----------------------------------------+-------------------------------------------------+----------+</nowiki>

====Nova组件初始化====
创建用户：

[root@controller ~]# source admin-login

[root@controller ~]# openstack user create --domain default --password 000000 nova

  
  <nowiki>+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 879469ed82904d6395aeef09f05f89c0 |
| name                | nova                             |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+</nowiki>

[root@controller ~]# openstack role add --project project --user nova admin

创建服务和端点：

[root@controller ~]#  openstack service create --name nova compute

 <nowiki>+---------+----------------------------------+
| Field   | Value                            |
+---------+----------------------------------+
| enabled | True                             |
| id      | 33f9643a02b84416926c9432aa5adbd6 |
| name    | nova                             |
| type    | compute                          |
+---------+----------------------------------+</nowiki>

[root@controller ~]# openstack endpoint create --region RegionOne nova public http://controller:8774/v2.1

 <nowiki>+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 5f8cf02e360d4985ba04701a8dacea07 |
| interface    | public                           |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 33f9643a02b84416926c9432aa5adbd6 |
| service_name | nova                             |
| service_type | compute                          |
| url          | http://controller:8774/v2.1      |
+--------------+----------------------------------+</nowiki>

[root@controller ~]#  openstack endpoint create --region RegionOne nova internal http://controller:8774/v2.1

 <nowiki>+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 49c764e1ff784dc490b642a7c87054e5 |
| interface    | internal                         |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 33f9643a02b84416926c9432aa5adbd6 |
| service_name | nova                             |
| service_type | compute                          |
| url          | http://controller:8774/v2.1      |
+--------------+----------------------------------+</nowiki>

[root@controller ~]#  openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1

 <nowiki>+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 542d57e60d5d43e7b8110cb125868124 |
| interface    | admin                            |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 33f9643a02b84416926c9432aa5adbd6 |
| service_name | nova                             |
| service_type | compute                          |
| url          | http://controller:8774/v2.1      |
+--------------+----------------------------------+</nowiki>

启动服务 和设置开机启动：

[root@controller ~]# systemctl enable openstack-nova-api openstack-nova-scheduler openstack-nova-conductor openstack-nova-novncproxy

 <nowiki>Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-api.service to /usr/lib/systemd/system/openstack-nova-api.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-scheduler.service to /usr/lib/systemd/system/openstack-nova-scheduler.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-conductor.service to /usr/lib/systemd/system/openstack-nova-conductor.service.
Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-novncproxy.service to /usr/lib/systemd/system/openstack-nova-novncproxy.service.</nowiki>

[root@controller ~]# systemctl start openstack-nova-api openstack-nova-scheduler openstack-nova-conductor openstack-nova-novncproxy


验证Nova是否安装成功：

[root@controller ~]# netstat -nutpl|grep 877

 <nowiki>tcp        0      0 0.0.0.0:8774            0.0.0.0:*               LISTEN      95823/python2       
tcp        0      0 0.0.0.0:8775            0.0.0.0:*               LISTEN      95823/python2       
tcp6       0      0 :::8778                 :::*                    LISTEN      21752/httpd</nowiki>   
      
[root@controller ~]# openstack compute service list

 <nowiki>+----+----------------+------------+----------+---------+-------+----------------------------+
| ID | Binary         | Host       | Zone     | Status  | State | Updated At                 |
+----+----------------+------------+----------+---------+-------+----------------------------+
|  5 | nova-conductor | controller | internal | enabled | up    | 2023-12-09T05:43:48.000000 |
|  6 | nova-scheduler | controller | internal | enabled | up    | 2023-12-09T05:43:50.000000 |
+----+----------------+------------+----------+---------+-------+----------------------------+</nowiki>
===安装与配置计算节点上的Nova服务===
====安装Nova软件包====
yum clean all

yum makecache

yum repolist

yum -y install openstack-nova-compute 

====修改配置文件====
[root@compute yum.repos.d]# cp /etc/nova/nova.conf /etc/nova/nova.bak

[root@compute yum.repos.d]# grep -Ev '^$|#' /etc/nova/nova.bak >/etc/nova/nova.conf

[api]

  auth_strategy = keystone

[keystone_authtoken]

 <nowiki>auth_url = http://controller:5000
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = project
username = nova
password = 000000</nowiki>

[placement]

 <nowiki>auth_url = http://controller:5000
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = project
username = placement
password = 000000
region_name = RegionOne</nowiki>

[glance]

  api_servers = http://controller:9292

[oslo_concurrency]

   lock_path = /var/lib/nova/tmp

[DEFAULT]

 <nowiki>
[DEFAULT]
enabled_apis = osapi_compute,metadata
transport_url = rabbit://rabbitmq:000000@controller:5672
my_ip = 192.168.100.20
use_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver</nowiki>

[VNC]

 <nowiki>
[vnc]
enabled = true
server_listen = 0.0.0.0
server_proxyclient_address = $my_ip
novncproxy_base_url = http://192.168.100.10:6080/vnc_auto.html</nowiki>

[libvirt]

 virt_type = qemu