本章目录

1、概述
2、架构
3、安装配置控制节点

一、概述

使用OpenStack计算服务来托管和管理云计算系统。OpenStack计算服务是基础设施即服务(IaaS)系统的主要部分，模块主要由Python实现。

• OpenStack计算组件请求OpenStack Identity服务进行认证；

• 请求OpenStack Image服务提供磁盘镜像；

• 为OpenStack dashboard提供用户与管理员接口。磁盘镜像访问限制在项目与用户上；

• 配额以每个项目进行设定（例如，每个项目下可以创建多少实例）。OpenStack组件可以在标准硬件上水平大规模扩展，并且下载磁盘镜像启动虚拟机实例。

二、架构

三、安装配置

1、创建数据库并授权

1、创建数据库：
MariaDB [(none)]> CREATE DATABASE nova;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> CREATE DATABASE nova_cell0;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> CREATE DATABASE nova_api;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> CREATE DATABASE placement;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> SHOW DATABASES;
+--------------------+
| Database           |
+--------------------+
| glance             |
| information_schema |
| keystone           |
| mysql              |
| nova               |
| nova_api           |
| nova_cell0         |
| performance_schema |
| placement          |
+--------------------+
9 rows in set (0.00 sec)

2、授权：
MariaDB [(none)]> grant all on nova.* to ‘nova‘@‘localhost‘ identified by ‘nova‘;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all on nova.* to ‘nova‘@‘%‘ identified by ‘nova‘;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all on nova_api.* to ‘nova‘@‘localhost‘ identified by ‘nova‘;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all on nova_api.* to ‘nova‘@‘%‘ identified by ‘nova‘;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all on nova_cell0.* to ‘nova‘@‘%‘ identified by ‘nova‘;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all on nova_cell0.* to ‘nova‘@‘localhost‘ identified by ‘nova‘;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all on placement.* to ‘placement‘@‘localhost‘ identified by ‘placement‘;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all on placement.* to ‘placement‘@‘%‘ identified by ‘placement‘;
Query OK, 0 rows affected (0.00 sec)

3、查看数据库：
[ ~]# mysql -unova -pnova -e "show databases;"
+--------------------+
| Database           |
+--------------------+
| information_schema |
| nova               |
| nova_api           |
| nova_cell0         |
+--------------------+

2、创建用户nova、关联角色

1、创建用户
[ ~]# . admin-openrc 
[ ~]# openstack user create --domain default --password-prompt nova
User Password:nova
Repeat User Password:nova
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | default                          |
| enabled             | True                             |
| id                  | cec4534f7ef84ab788be4e8fcaeef156 |
| name                | nova                             |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

2、角色添加
[ ~]# openstack role add --project service --user nova admin

3、在keystone上创建服务和注册api（服务目录）

nova的api端口是8774

1、创建nova服务（不能出现多个）
[ ~]# openstack service #可以查看帮助

[ ~]# openstack service create --name nova    --description "OpenStack Compute" compute
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | OpenStack Compute                |
| enabled     | True                             |
| id          | 654777c6bd1547bb839df4d2459eaf26 |
| name        | nova                             |
| type        | compute                          |
+-------------+----------------------------------+

2、创建注册api
[ ~]# openstack endpoint create --region RegionOne   compute public http://controller:8774/v2.1

+--------------+-------------------------------------------+
| Field        | Value                                     |
+--------------+-------------------------------------------+
| enabled      | True                                      |
| id           | 3c1caa473bfe4390a11e7177894bcc7b          |
| interface    | public                                    |
| region       | RegionOne                                 |
| region_id    | RegionOne                                 |
| service_id   | 060d59eac51b4594815603d75a00aba2          |
| service_name | nova                                      |
| service_type | compute                                   |
| url          | http://controller:8774/v2.1               |
+--------------+-------------------------------------------+

[ ~]# openstack endpoint create --region RegionOne   compute internal http://controller:8774/v2.1

+--------------+-------------------------------------------+
| Field        | Value                                     |
+--------------+-------------------------------------------+
| enabled      | True                                      |
| id           | e3c918de680746a586eac1f2d9bc10ab          |
| interface    | internal                                  |
| region       | RegionOne                                 |
| region_id    | RegionOne                                 |
| service_id   | 060d59eac51b4594815603d75a00aba2          |
| service_name | nova                                      |
| service_type | compute                                   |
| url          | http://controller:8774/v2.1               |
+--------------+-------------------------------------------+

[ ~]# openstack endpoint create --region RegionOne   compute admin http://controller:8774/v2.1

+--------------+-------------------------------------------+
| Field        | Value                                     |
+--------------+-------------------------------------------+
| enabled      | True                                      |
| id           | 38f7af91666a47cfb97b4dc790b94424          |
| interface    | admin                                     |
| region       | RegionOne                                 |
| region_id    | RegionOne                                 |
| service_id   | 060d59eac51b4594815603d75a00aba2          |
| service_name | nova                                      |
| service_type | compute                                   |
| url          | http://controller:8774/v2.1               |
+--------------+-------------------------------------------+

4、创建placement相关

4.1创建placement用户

1、创建placement用户
[ ~]# openstack user create --domain default --password-prompt placement
User Password: placement
Repeat User Password:placement
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 842853f62c8d47b8bf7c0019f4de349d |
| name                | placement                        |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

2、添加角色
[ ~]# openstack role add --project service --user placement admin

3、创建Placement API
[ ~]# openstack service create --name placement --description "Placement API" placement
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | Placement API                    |
| enabled     | True                             |
| id          | a62cb64d8e3f44f5b4665c18f87dae88 |
| name        | placement                        |
| type        | placement                        |
+-------------+----------------------------------+

4.2 创建api计算节点

[ ~]#$ openstack endpoint create --region RegionOne   placement public http://controller:8778

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 2b1b2637908b4137a9c2e0470487cbc0 |
| interface    | public                           |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 2d1a27022e6e4185b86adac4444c495f |
| service_name | placement                        |
| service_type | placement                        |
| url          | http://controller:8778           |
+--------------+----------------------------------+

[ ~]#$ openstack endpoint create --region RegionOne   placement internal http://controller:8778

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 02bcda9a150a4bd7993ff4879df971ab |
| interface    | internal                         |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 2d1a27022e6e4185b86adac4444c495f |
| service_name | placement                        |
| service_type | placement                        |
| url          | http://controller:8778           |
+--------------+----------------------------------+

[ ~]#$ openstack endpoint create --region RegionOne   placement admin http://controller:8778

+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | 3d71177b9e0f406f98cbff198d74b182 |
| interface    | admin                            |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 2d1a27022e6e4185b86adac4444c495f |
| service_name | placement                        |
| service_type | placement                        |
| url          | http://controller:8778           |
+--------------+----------------------------------+

查看方法：
[ ~]# openstack user list
+----------------------------------+-----------+
| ID                               | Name      |
+----------------------------------+-----------+
| 31be40e20245472da1e5a6da135777f6 | glance    |
| 842853f62c8d47b8bf7c0019f4de349d | placement |
| cec4534f7ef84ab788be4e8fcaeef156 | nova      |
| e1011877fc5d4275b7e4394463883ee0 | myuser    |
| ef761eff8f434c558b42ed37406dd217 | admin     |
+----------------------------------+-----------+

[ ~]# openstack service list
+----------------------------------+-----------+-----------+
| ID                               | Name      | Type      |
+----------------------------------+-----------+-----------+
| 654777c6bd1547bb839df4d2459eaf26 | nova      | compute   |
| a62cb64d8e3f44f5b4665c18f87dae88 | placement | placement |
| b9548ac6836c423e98ad347ce2fe22bf | keystone  | identity  |
| c287094b556c44b5b72438eccebd9726 | glance    | image     |
+----------------------------------+-----------+-----------+
[ ~]# openstack endpoint list
+----------------------------------+-----------+--------------+--------------+---------+-----------+----------------------------------+
| ID                               | Region    | Service Name | Service Type | Enabled | Interface | URL                              |
+----------------------------------+-----------+--------------+--------------+---------+-----------+----------------------------------+
........

5、安装nova

5.1、安装包：

[ ~]# yum install openstack-nova-api openstack-nova-conductor   openstack-nova-console openstack-nova-novncproxy   openstack-nova-scheduler openstack-nova-placement-api

5.2 修改配置文件

vim /etc/nova/nova.conf 
1）
[DEFAULT]
# ...
enabled_apis = osapi_compute,metadata
#表示启用两个api

2）
[api_database]
# ...
connection = mysql+pymysql://nova:/nova_api
3）
[database]
# ...
connection = mysql+pymysql://nova:/nova
4）
[placement_database]
# ...
connection = mysql+pymysql://placement:/placement
5）
[DEFAULT]
# ...
3130行
transport_url = rabbit://openstack:

6）
[api]
# ...
auth_strategy = keystone

7）
[keystone_authtoken]
# ...
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = nova

8）暂时先不配置
[DEFAULT]
# ...
my_ip = 192.168.223.157

9）
[DEFAULT]
# ...
use_neutron = true  #把neutron服务打开
firewall_driver = nova.virt.firewall.NoopFirewallDriver   #关闭防火墙驱动
#默认情况下，计算服务使用的防火墙服务。由于网络服务包包含了防火墙服务，你必须使用#“nova.virt.firewall.NoopFirewallDriver”防火墙服务来禁用掉计算服务内置的防火墙服务，它是一个python类
10）
[vnc]
enabled = true
# ...
server_listen = $my_ip
server_proxyclient_address = $my_ip

11）
[glance]
# ...配置镜像下载地址
api_servers = http://controller:9292

12）配置锁路径
[oslo_concurrency]
# ...
lock_path = /var/lib/nova/tmp
#放置脚本重复执行
13）
[placement]
# ...
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = placement

添加新的计算节点时候加入如下内（直接添加到nova的配置文件中）：When you add new compute nodes, you must run nova-manage cell_v2 discover_hosts on the controller node to register those new compute nodes. Alternatively, you can set an appropriate interval in /etc/nova/nova.conf:

14）
[scheduler]
discover_hosts_in_cells_interval = 300

修改文件：
[ ~]# cat /etc/nova/nova.conf
[DEFAULT]
enabled_apis=osapi_compute,metadata
transport_url = rabbit://openstack:
my_ip = 192.168.223.170
se_neutron = true
firewall_driver = nova.virt.firewall.NoopFirewallDriver
[api]
auth_strategy = keystone
[api_database]
connection = mysql+pymysql://nova:/nova_api
[barbican]
[cache]
[cells]
[cinder]
[compute]
[conductor]
[console]
[consoleauth]
[cors]
[database]
connection = mysql+pymysql://nova:/nova
[devices]
[ephemeral_storage_encryption]
[filter_scheduler]
[glance]
api_servers = http://controller:9292
[guestfs]
[healthcheck]
[hyperv]
[ironic]
[key_manager]
[keystone]
[keystone_authtoken]
auth_url = http://controller:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = nova
[libvirt]
[matchmaker_redis]
[metrics]
[mks]
[neutron]
[notifications]
[osapi_v21]
[oslo_concurrency]
lock_path = /var/lib/nova/tmp
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_messaging_zmq]
[oslo_middleware]
[oslo_policy]
[pci]
[placement]
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://controller:5000/v3
username = placement
password = placement
[placement_database]
connection = mysql+pymysql://placement:/placement
[powervm]
[profiler]
[quota]
[rdp]
[remote_debug]
[scheduler]
[serial_console]
[service_user]
[spice]
[upgrade_levels]
[vault]
[vendordata_dynamic_auth]
[vmware]
[vnc]
enabled = true
# ...
server_listen = $my_ip
server_proxyclient_address = $my_ip
[workarounds]
[wsgi]
[xenserver]
[xvp]
[zvm]


注释：
firewall_driver = nova.virt.firewall.NoopFirewallDriver
#默认情况下，计算服务使用的防火墙服务。由于网络服务包包含了防火墙服务，你必须使用#“nova.virt.firewall.NoopFirewallDriver”防火墙服务来禁用掉计算服务内置的防火墙服务，它是一个python类
#[ ~]# cd /lib/python2.7/site-packages/nova/virt/
#[ virt]# vim firewall.py

5.3 修改http配置文件

[ ~]# vim /etc/httpd/conf.d/00-nova-placement-api.conf
<VirtualHost *:8778>
  WSGIProcessGroup nova-placement-api
  WSGIApplicationGroup %{GLOBAL}
  WSGIPassAuthorization On
  WSGIDaemonProcess nova-placement-api processes=3 threads=1 user=nova group=nova
  WSGIScriptAlias / /usr/bin/nova-placement-api
  <IfVersion >= 2.4>
    ErrorLogFormat "%M"
  </IfVersion>
  ErrorLog /var/log/nova/nova-placement-api.log
  #SSLEngine On
  #SSLCertificateFile ...
  #SSLCertificateKeyFile ...
  <Directory /usr/bin>
   <IfVersion >= 2.4>
      Require all granted
   </IfVersion>
   <IfVersion < 2.4>
      Order allow,deny
      Allow from all
   </IfVersion>
</Directory>
</VirtualHost>


[ ~]# systemctl restart httpd

5.4 同步数据库：

[ ~]# su -s /bin/sh -c "nova-manage api_db sync" nova
[ ~]# su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova
[ ~]# su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova
10d6dd1f-aa14-45d5-b6f9-f8e768fec97c
[ ~]# su -s /bin/sh -c "nova-manage db sync" nova
/usr/lib/python2.7/site-packages/pymysql/cursors.py:170: Warning: (1831, u‘Duplicate index `block_device_mapping_instance_uuid_virtual_name_device_name_idx`. This is deprecated and will be disallowed in a future release.‘)
  result = self._query(query)
/usr/lib/python2.7/site-packages/pymysql/cursors.py:170: Warning: (1831, u‘Duplicate index `uniq_instances0uuid`. This is deprecated and will be disallowed in a future release.‘)
  result = self._query(query)
[ ~]# su -s /bin/sh -c "nova-manage db sync" nova
[ ~]# su -s /bin/sh -c "nova-manage cell_v2 list_cells" nova
+-------+--------------------------------------+-----------------------------------------+------------------------------------------------------+----------+
|  名称 |                 UUID                 |              Transport URL              |                      数据库连接                      | Disabled |
+-------+--------------------------------------+-----------------------------------------+------------------------------------------------------+----------+
| cell0 | 00000000-0000-0000-0000-000000000000 |                  none:/                 | mysql+pymysql://nova:****@controller/nova_cell0 |  False   |
| cell1 | 10d6dd1f-aa14-45d5-b6f9-f8e768fec97c | rabbit://openstack:****@controller |    mysql+pymysql://nova:****@controller/nova    |  False   |
+-------+--------------------------------------+-----------------------------------------+------------------------------------------------------+----------+


登录每个数据库检查表是否创建成功：
[ ~]# mysql -unova -pnova

MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| nova               |
| nova_api           |
| nova_cell0         |
+--------------------+
5 rows in set (0.00 sec)

[ ~]# mysql -unova -pnova -e "use nova;show tables"
+--------------------------------------------+
| Tables_in_nova                             |
+--------------------------------------------+
| agent_builds                               |
...................................

When you add new compute nodes, you must run nova-manage cell_v2 discover_hosts on the controller node to register those new compute nodes. Alternatively, you can set an appropriate interval in /etc/nova/nova.conf:

[scheduler]
discover_hosts_in_cells_interval = 300

5.5 启动并检查服务状态：

1、启动服务
[ ~]# systemctl enable openstack-nova-api.service   openstack-nova-consoleauth openstack-nova-scheduler.service   openstack-nova-conductor.service openstack-nova-novncproxy.service
[ ~]# systemctl start openstack-nova-api.service   openstack-nova-consoleauth openstack-nova-scheduler.service   openstack-nova-conductor.service openstack-nova-novncproxy.service
  
2、检查服务是否启动 
 验证：
 [ ~]# nova service-list （可以看到三个服务，启动nova-api就是提供此查询结果的服务，能查询，证明nova-api已经启动，如果stop就不能查询）
+--------------------------------------+------------------+------------+----------+---------+-------+----------------------------+-----------------+-------------+
| Id                                   | Binary           | Host       | Zone     | Status  | State | Updated_at                 | Disabled Reason | Forced down |
+--------------------------------------+------------------+------------+----------+---------+-------+----------------------------+-----------------+-------------+
| aab81bd2-6b01-4825-83e2-e0a2571df5f0 | nova-consoleauth | controller | internal | enabled | up    | 2020-02-22T09:17:02.000000 | -               | False       |
| 0056aea6-b275-4284-8db2-b98015867876 | nova-scheduler   | controller | internal | enabled | up    | 2020-02-22T09:16:52.000000 | -               | False       |
| ccd742e2-e33c-4501-a37d-01aa5084aed6 | nova-conductor   | controller | internal | enabled | up    | 2020-02-22T09:16:57.000000 | -               | False       |
+--------------------------------------+------------------+------------+----------+---------+-------+----------------------------+-----------------+-------------+

通过下边的验证openstack-nova-novncproxy是否启动
[ ~]# netstat -tunlp|grep 6080
tcp        0      0 0.0.0.0:6080            0.0.0.0:*               LISTEN      8981/python2        
[ ~]# ps -ef |grep 8981
nova       8981      1  0 10:25 ?        00:00:21 /usr/bin/python2 /usr/bin/nova-novncproxy --web /usr/share/novnc/
root      24789  13874  0 17:19 pts/1    00:00:00 grep --color=auto 8981

web界面的VNC：http://192.168.223.170:6080/

6、日志存在位置

[ ~]# ll /var/log/nova/
总用量 124
-rw-r--r-- 1 nova nova   3786 12月 15 22:05 nova-api.log
-rw-r--r-- 1 nova nova   1432 12月 15 22:05 nova-conductor.log
-rw-r--r-- 1 nova nova   1652 12月 15 22:05 nova-consoleauth.log
-rw-r--r-- 1 nova nova 106423 12月 15 22:03 nova-manage.log
-rw-r--r-- 1 nova nova    638 12月 15 22:05 nova-novncproxy.log
-rw-r--r-- 1 root root      0 12月 15 21:55 nova-placement-api.log
-rw-r--r-- 1 nova nova   2230 12月 15 22:05 nova-scheduler.log