#!/bin/bash

#Centos8最小化部署安装OpenStack Ussuri

#共两台主机，分别是一台控制节点，一台计算节点

#、控制节点内存4096M。双网卡，分别为eth0:10.0.0.11，eth1:10.0.0.12

#、计算节点内存2048M。双网卡，分别为eth0:10.0.0.31，eth1:10.0.0.32

#设置阿里云yum源

curl -o /etc/yum.repos.d/CentOS-Base.repo https://mirrors.aliyun.com/repo/Centos-8.repo

rm -f /etc/yum.repos.d/CentOS-AppStream.repo /etc/yum.repos.d/CentOS-PowerTools.repo /etc/yum.repos.d/CentOS-centosplus.repo /etc/yum.repos.d/CentOS-Extras.repo && rm -rf /var/cache/yum && yum makecache && yum -y update && yum -y autoremove

#关闭防火墙

systemctl stop firewalld && systemctl disable firewalld

#关闭SELinux

setenforce

sed -i "s/SELINUX=enforcing/SELINUX=disabled/g" /etc/selinux/config

#关闭swap分区

swapoff -a

sed -i '/ swap / s/^\(.*\)$/#\1/g' /etc/fstab

#设置内核

modprobe bridge

modprobe br_netfilter

cat > /etc/sysconfig/modules/neutron.modules <<EOF

#!/bin/bash

modprobe -- bridge

modprobe -- br_netfilter

EOF

chmod  /etc/sysconfig/modules/neutron.modules && bash /etc/sysconfig/modules/neutron.modules

echo "vm.max_map_count=262144" >> /etc/sysctl.conf

echo "net.ipv4.ip_forward=1" >> /etc/sysctl.conf

echo "net.bridge.bridge-nf-call-iptables=1" >> /etc/sysctl.conf

echo "net.bridge.bridge-nf-call-ip6tables=1" >> /etc/sysctl.conf

sysctl -p

#设置时间同步

yum install -y chrony && yum -y autoremove

sed -i '/^pool/d' /etc/chrony.conf

sed -i '/^server/d' /etc/chrony.conf

echo "pool ntp.aliyun.com iburst" >> /etc/chrony.conf

systemctl start chronyd.service && systemctl enable chronyd.service

#控制节点 设置hostname

hostnamectl set-hostname controller

#计算节点 设置hostname

hostnamectl set-hostname compute1

#添加host

echo "10.0.0.11 controller" >> /etc/hosts

echo "10.0.0.31 compute1" >> /etc/hosts

#安装基础组件

yum install -y centos-release-openstack-ussuri

yum config-manager --set-enabled PowerTools

yum upgrade -y

yum install -y python3-openstackclient

#控制节点 安装Mariadb

yum install -y mariadb mariadb-server python2-PyMySQL

tee /etc/my.cnf.d/openstack.cnf <<-'EOF'

[mysqld]

bind-address = 10.0.0.11

default-storage-engine = innodb

innodb_file_per_table = on

max_connections =

collation-server = utf8_general_ci

character-set-server = utf8

EOF

systemctl enable mariadb.service && systemctl start mariadb.service

echo -e "\nY\n123456\n123456\nY\nn\nY\nY\n" | mysql_secure_installation

#控制节点 安装RabbitMQ

yum install -y rabbitmq-server

systemctl enable rabbitmq-server.service && systemctl start rabbitmq-server.service

rabbitmqctl add_user openstack

rabbitmqctl set_permissions openstack ".*" ".*" ".*"

#控制节点 安装Memcached

yum install -y memcached python3-memcached

sed -i "s/-l 127.0.0.1,::1/-l 127.0.0.1,::1,controller/g" /etc/sysconfig/memcached

systemctl enable memcached.service && systemctl start memcached.service

#控制节点 安装Etcd

yum install -y etcd

rm -f /etc/etcd/etcd.conf

tee /etc/etcd/etcd.conf <<-'EOF'

#[Member]

ETCD_DATA_DIR="/var/lib/etcd/default.etcd"

ETCD_LISTEN_PEER_URLS="http://10.0.0.11:2380"

ETCD_LISTEN_CLIENT_URLS="http://10.0.0.11:2379"

ETCD_NAME="controller"

#[Clustering]

ETCD_INITIAL_ADVERTISE_PEER_URLS="http://10.0.0.11:2380"

ETCD_ADVERTISE_CLIENT_URLS="http://10.0.0.11:2379"

ETCD_INITIAL_CLUSTER="controller=http://10.0.0.11:2380"

ETCD_INITIAL_CLUSTER_TOKEN="etcd-cluster-01"

ETCD_INITIAL_CLUSTER_STATE="new"

EOF

systemctl enable etcd && systemctl start etcd

#控制节点 安装Identity service

mysql -uroot -p123456 -e "CREATE DATABASE keystone"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456'"

yum install -y openstack-keystone httpd python3-mod_wsgi

sed -i "556c connection = mysql+pymysql://keystone:123456@controller/keystone" /etc/keystone/keystone.conf

sed -i "2418c provider = fernet" /etc/keystone/keystone.conf

su -s /bin/sh -c "keystone-manage db_sync" keystone

keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone

keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

keystone-manage bootstrap --bootstrap-password  \

  --bootstrap-admin-url http://controller:5000/v3/ \

  --bootstrap-internal-url http://controller:5000/v3/ \

  --bootstrap-public-url http://controller:5000/v3/ \

  --bootstrap-region-id RegionOne

echo "ServerName controller" >> /etc/httpd/conf/httpd.conf

ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

systemctl enable httpd.service && systemctl start httpd.service

echo "export OS_USERNAME=admin" >> /etc/profile

echo "export OS_PASSWORD=123456" >> /etc/profile

echo "export OS_PROJECT_NAME=admin" >> /etc/profile

echo "export OS_USER_DOMAIN_NAME=Default" >> /etc/profile

echo "export OS_PROJECT_DOMAIN_NAME=Default" >> /etc/profile

echo "export OS_AUTH_URL=http://controller:5000/v3" >> /etc/profile

echo "export OS_IDENTITY_API_VERSION=3" >> /etc/profile

source /etc/profile

openstack project create --domain default --description "Service Project" service

#控制节点 安装Image service

mysql -uroot -p123456 -e "CREATE DATABASE glance"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY '123456'"

openstack user create --domain default --password  glance

openstack role add --project service --user glance admin

openstack service create --name glance --description "OpenStack Image" image

openstack endpoint create --region RegionOne image public http://controller:9292

openstack endpoint create --region RegionOne image internal http://controller:9292

openstack endpoint create --region RegionOne image admin http://controller:9292

yum install -y openstack-glance

sed -i "2062c connection = mysql+pymysql://glance:123456@controller/glance" /etc/glance/glance-api.conf

sed -i "5034c www_authenticate_uri  = http://controller:5000" /etc/glance/glance-api.conf

sed -i "5035c auth_url = http://controller:5000" /etc/glance/glance-api.conf

sed -i "5036c memcached_servers = controller:11211" /etc/glance/glance-api.conf

sed -i "5037c auth_type = password" /etc/glance/glance-api.conf

sed -i "5038c project_domain_name = Default" /etc/glance/glance-api.conf

sed -i "5039c user_domain_name = Default" /etc/glance/glance-api.conf

sed -i "5040c project_name = service" /etc/glance/glance-api.conf

sed -i "5041c username = glance" /etc/glance/glance-api.conf

sed -i "5042c password = 123456" /etc/glance/glance-api.conf

sed -i "5678c flavor = keystone" /etc/glance/glance-api.conf

sed -i "3413c stores = file,http" /etc/glance/glance-api.conf

sed -i "3414c default_store = file" /etc/glance/glance-api.conf

sed -i "3415c filesystem_store_datadir = /var/lib/glance/images/" /etc/glance/glance-api.conf

su -s /bin/sh -c "glance-manage db_sync" glance

systemctl enable openstack-glance-api.service && systemctl start openstack-glance-api.service

#控制节点 安装Placement service

mysql -uroot -p123456 -e "CREATE DATABASE placement"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'localhost' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON placement.* TO 'placement'@'%' IDENTIFIED BY '123456'"

openstack user create --domain default --password  placement

openstack role add --project service --user placement admin

openstack service create --name placement --description "Placement API" placement

openstack endpoint create --region RegionOne placement public http://controller:8778

openstack endpoint create --region RegionOne placement internal http://controller:8778

openstack endpoint create --region RegionOne placement admin http://controller:8778

yum install -y openstack-placement-api

sed -i "507c connection = mysql+pymysql://placement:123456@controller/placement" /etc/placement/placement.conf

sed -i "192c auth_strategy = keystone" /etc/placement/placement.conf

sed -i "241c auth_url = http://controller:5000/v3" /etc/placement/placement.conf

sed -i "242c memcached_servers = controller:11211" /etc/placement/placement.conf

sed -i "243c auth_type = password" /etc/placement/placement.conf

sed -i "244c project_domain_name = Default" /etc/placement/placement.conf

sed -i "245c user_domain_name = Default" /etc/placement/placement.conf

sed -i "246c project_name = service" /etc/placement/placement.conf

sed -i "247c username = placement" /etc/placement/placement.conf

sed -i "248c password = 123456" /etc/placement/placement.conf

su -s /bin/sh -c "placement-manage db sync" placement

systemctl restart httpd

#控制节点 安装Compute service

mysql -uroot -p123456 -e "CREATE DATABASE nova_api"

mysql -uroot -p123456 -e "CREATE DATABASE nova"

mysql -uroot -p123456 -e "CREATE DATABASE nova_cell0"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'localhost' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON nova_cell0.* TO 'nova'@'%' IDENTIFIED BY '123456'"

openstack user create --domain default --password  nova

openstack role add --project service --user nova admin

openstack service create --name nova --description "OpenStack Compute" compute

openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1

openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1

openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1

yum install -y openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler

sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf

sed -i "3c transport_url = rabbit://openstack:123456@controller:5672/" /etc/nova/nova.conf

sed -i "4c my_ip = 10.0.0.11" /etc/nova/nova.conf

sed -i "1079c connection = mysql+pymysql://nova:123456@controller/nova_api" /etc/nova/nova.conf

sed -i "1622c connection = mysql+pymysql://nova:123456@controller/nova" /etc/nova/nova.conf

sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf

sed -i "2561c www_authenticate_uri = http://controller:5000/" /etc/nova/nova.conf

sed -i "2562c auth_url = http://controller:5000/" /etc/nova/nova.conf

sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf

sed -i "2564c auth_type = password" /etc/nova/nova.conf

sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf

sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf

sed -i "2567c project_name = service" /etc/nova/nova.conf

sed -i "2568c username = nova" /etc/nova/nova.conf

sed -i "2569c password = 123456" /etc/nova/nova.conf

sed -i "5171c enabled = true" /etc/nova/nova.conf

sed -i '5172c server_listen = $my_ip' /etc/nova/nova.conf

sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf

sed -i "1937c api_servers = http://controller:9292" /etc/nova/nova.conf

sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf

sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf

sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf

sed -i "4095c project_name = service" /etc/nova/nova.conf

sed -i "4096c auth_type = password" /etc/nova/nova.conf

sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf

sed -i "4098c auth_url = http://controller:5000/v3" /etc/nova/nova.conf

sed -i "4099c username = placement" /etc/nova/nova.conf

sed -i "4100c password = 123456" /etc/nova/nova.conf

sed -i "4509c discover_hosts_in_cells_interval = 300" /etc/nova/nova.conf

su -s /bin/sh -c "nova-manage api_db sync" nova

su -s /bin/sh -c "nova-manage cell_v2 map_cell0" nova

su -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" nova

su -s /bin/sh -c "nova-manage db sync" nova

systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service && systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service

#计算节点 安装Compute service

yum install -y openstack-nova-compute

sed -i "2c enabled_apis = osapi_compute,metadata" /etc/nova/nova.conf

sed -i "3c transport_url = rabbit://openstack:123456@controller" /etc/nova/nova.conf

sed -i "4c my_ip = 10.0.0.31" /etc/nova/nova.conf

sed -i "872c auth_strategy = keystone" /etc/nova/nova.conf

sed -i "2561c www_authenticate_uri = http://controller:5000/" /etc/nova/nova.conf

sed -i "2562c auth_url = http://controller:5000/" /etc/nova/nova.conf

sed -i "2563c memcached_servers = controller:11211" /etc/nova/nova.conf

sed -i "2564c auth_type = password" /etc/nova/nova.conf

sed -i "2565c project_domain_name = Default" /etc/nova/nova.conf

sed -i "2566c user_domain_name = Default" /etc/nova/nova.conf

sed -i "2567c project_name = service" /etc/nova/nova.conf

sed -i "2568c username = nova" /etc/nova/nova.conf

sed -i "2569c password = 123456" /etc/nova/nova.conf

sed -i "5171c enabled = true" /etc/nova/nova.conf

sed -i "5172c server_listen = 0.0.0.0" /etc/nova/nova.conf

sed -i '5173c server_proxyclient_address = $my_ip' /etc/nova/nova.conf

sed -i "5174c novncproxy_base_url = http://controller:6080/vnc_auto.html" /etc/nova/nova.conf

sed -i "1937c api_servers = http://controller:9292" /etc/nova/nova.conf

sed -i "3571c lock_path = /var/lib/nova/tmp" /etc/nova/nova.conf

sed -i "4093c region_name = RegionOne" /etc/nova/nova.conf

sed -i "4094c project_domain_name = Default" /etc/nova/nova.conf

sed -i "4095c project_name = service" /etc/nova/nova.conf

sed -i "4096c auth_type = password" /etc/nova/nova.conf

sed -i "4097c user_domain_name = Default" /etc/nova/nova.conf

sed -i "4098c auth_url = http://controller:5000/v3" /etc/nova/nova.conf

sed -i "4099c username = placement" /etc/nova/nova.conf

sed -i "4100c password = 123456" /etc/nova/nova.conf

#执行命令，查看是否支持CPU虚拟化，如果大于0则支持。

egrep -c '(vmx|svm)' /proc/cpuinfo

#如果不支持的话还需要执行下面的命令

sed -i "2722c virt_type = qemu" /etc/nova/nova.conf

systemctl enable libvirtd.service openstack-nova-compute.service && systemctl start libvirtd.service openstack-nova-compute.service

#控制节点 计算节点从注册到发现会有延迟，根据discover_hosts_in_cells_interval 配置轮询发现时间，可以执行下面命令手动发现计算节点

su -s /bin/sh -c "nova-manage cell_v2 discover_hosts --verbose" nova

#控制节点 安装Networking service

mysql -uroot -p123456 -e "CREATE DATABASE neutron"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY '123456'"

mysql -uroot -p123456 -e "GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY '123456'"

openstack user create --domain default --password  neutron

openstack role add --project service --user neutron admin

openstack service create --name neutron --description "OpenStack Networking" network

openstack endpoint create --region RegionOne network public http://controller:9696

openstack endpoint create --region RegionOne network internal http://controller:9696

openstack endpoint create --region RegionOne network admin http://controller:9696

yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables

#配置服务器组件

sed -i "2c core_plugin = ml2" /etc/neutron/neutron.conf

sed -i "3c service_plugins = router" /etc/neutron/neutron.conf

sed -i "4c allow_overlapping_ips = true" /etc/neutron/neutron.conf

sed -i "5c transport_url = rabbit://openstack:123456@controller" /etc/neutron/neutron.conf

sed -i "6c auth_strategy = keystone" /etc/neutron/neutron.conf

sed -i "7c notify_nova_on_port_status_changes = true" /etc/neutron/neutron.conf

sed -i "8c notify_nova_on_port_data_changes = true" /etc/neutron/neutron.conf

sed -i "254c connection = mysql+pymysql://neutron:123456@controller/neutron" /etc/neutron/neutron.conf

sed -i "359c www_authenticate_uri = http://controller:5000" /etc/neutron/neutron.conf

sed -i "360c auth_url = http://controller:5000" /etc/neutron/neutron.conf

sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf

sed -i "362c auth_type = password" /etc/neutron/neutron.conf

sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf

sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf

sed -i "365c project_name = service" /etc/neutron/neutron.conf

sed -i "366c username = neutron" /etc/neutron/neutron.conf

sed -i "367c password = 123456" /etc/neutron/neutron.conf

sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf

echo "[nova]" >> /etc/neutron/neutron.conf

echo "auth_url = http://controller:5000" >> /etc/neutron/neutron.conf

echo "auth_type = password" >> /etc/neutron/neutron.conf

echo "project_domain_name = default" >> /etc/neutron/neutron.conf

echo "user_domain_name = default" >> /etc/neutron/neutron.conf

echo "region_name = RegionOne" >> /etc/neutron/neutron.conf

echo "project_name = service" >> /etc/neutron/neutron.conf

echo "username = nova" >> /etc/neutron/neutron.conf

echo "password = 123456" >> /etc/neutron/neutron.conf

#配置Modular Layer  (ML2) plug-in

echo "[ml2]" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "type_drivers = flat,vlan,vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "tenant_network_types = vxlan" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "mechanism_drivers = linuxbridge,l2population" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "extension_drivers = port_security" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "[ml2_type_flat]" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "flat_networks = provider" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "vni_ranges = 1:1000" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "[securitygroup]" >> /etc/neutron/plugins/ml2/ml2_conf.ini

echo "enable_ipset = true" >> /etc/neutron/plugins/ml2/ml2_conf.ini

#配置Linux bridge agent

echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

#eth1为另外第二张网卡

echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

#10.0..12为第二张网卡的IP

echo "local_ip = 10.0.0.12" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

#配置layer- agent

sed -i "2c interface_driver = linuxbridge" /etc/neutron/l3_agent.ini

#配置DHCP agent

sed -i "2c interface_driver = linuxbridge" /etc/neutron/dhcp_agent.ini

sed -i "3c dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq" /etc/neutron/dhcp_agent.ini

sed -i "4c enable_isolated_metadata = true" /etc/neutron/dhcp_agent.ini

#配置metadata agent

sed -i "2c nova_metadata_host = controller" /etc/neutron/metadata_agent.ini

sed -i "3c metadata_proxy_shared_secret = 123456" /etc/neutron/metadata_agent.ini

#配置计算服务使用网络服务

sed -i " 3334c auth_url = http://controller:5000" /etc/nova/nova.conf

sed -i " 3335c auth_type = password" /etc/nova/nova.conf

sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf

sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf

sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf

sed -i " 3339c project_name = service" /etc/nova/nova.conf

sed -i " 3340c username = neutron" /etc/nova/nova.conf

sed -i " 3341c password = 123456" /etc/nova/nova.conf

sed -i " 3342c service_metadata_proxy = true" /etc/nova/nova.conf

sed -i " 3343c metadata_proxy_shared_secret = 123456" /etc/nova/nova.conf

ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini

su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

systemctl restart openstack-nova-api.service

systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service && systemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service

systemctl enable neutron-l3-agent.service && systemctl start neutron-l3-agent.service

#计算节点 安装Networking service

yum install -y openstack-neutron-linuxbridge ebtables ipset

sed -i "2c transport_url = rabbit://openstack:123456@controller" /etc/neutron/neutron.conf

sed -i "3c auth_strategy = keystone" /etc/neutron/neutron.conf

sed -i "359c www_authenticate_uri = http://controller:5000" /etc/neutron/neutron.conf

sed -i "360c auth_url = http://controller:5000" /etc/neutron/neutron.conf

sed -i "361c memcached_servers = controller:11211" /etc/neutron/neutron.conf

sed -i "362c auth_type = password" /etc/neutron/neutron.conf

sed -i "363c project_domain_name = default" /etc/neutron/neutron.conf

sed -i "364c user_domain_name = default" /etc/neutron/neutron.conf

sed -i "365c project_name = service" /etc/neutron/neutron.conf

sed -i "366c username = neutron" /etc/neutron/neutron.conf

sed -i "367c password = 123456" /etc/neutron/neutron.conf

sed -i "521c lock_path = /var/lib/neutron/tmp" /etc/neutron/neutron.conf

echo "[linux_bridge]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

#eth1为另外第二张网卡

echo "physical_interface_mappings = provider:eth1" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "[vxlan]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "enable_vxlan = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

#10.0..32为第二张网卡的IP

echo "local_ip = 10.0.0.32" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "l2_population = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "[securitygroup]" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "enable_security_group = true" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

echo "firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriver" >> /etc/neutron/plugins/ml2/linuxbridge_agent.ini

#配置计算服务使用网络服务

sed -i " 3334c auth_url = http://controller:5000" /etc/nova/nova.conf

sed -i " 3335c auth_type = password" /etc/nova/nova.conf

sed -i " 3336c project_domain_name = default" /etc/nova/nova.conf

sed -i " 3337c user_domain_name = default" /etc/nova/nova.conf

sed -i " 3338c region_name = RegionOne" /etc/nova/nova.conf

sed -i " 3339c project_name = service" /etc/nova/nova.conf

sed -i " 3340c username = neutron" /etc/nova/nova.conf

sed -i " 3341c password = 123456" /etc/nova/nova.conf

systemctl restart openstack-nova-compute.service

systemctl enable neutron-linuxbridge-agent.service && systemctl start neutron-linuxbridge-agent.service

#控制节点 安装Dashboard

yum install -y openstack-dashboard

sed -i '118c OPENSTACK_HOST = "controller"' /etc/openstack-dashboard/local_settings

sed -i "39c ALLOWED_HOSTS = ['*']" /etc/openstack-dashboard/local_settings

sed -i "104c SESSION_ENGINE = 'django.contrib.sessions.backends.cache'" /etc/openstack-dashboard/local_settings

sed -i "94c CACHES = {" /etc/openstack-dashboard/local_settings

sed -i "95c 'default': {" /etc/openstack-dashboard/local_settings

sed -i "96c 'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache'," /etc/openstack-dashboard/local_settings

sed -i "97c 'LOCATION': 'controller:11211'," /etc/openstack-dashboard/local_settings

sed -i "98c }" /etc/openstack-dashboard/local_settings

sed -i "99c }" /etc/openstack-dashboard/local_settings

sed -i '119c OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" % OPENSTACK_HOST' /etc/openstack-dashboard/local_settings

echo 'OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True' >> /etc/openstack-dashboard/local_settings

echo 'OPENSTACK_API_VERSIONS = {' >> /etc/openstack-dashboard/local_settings

echo '    "identity": 3,' >> /etc/openstack-dashboard/local_settings

echo '    "image": 2,' >> /etc/openstack-dashboard/local_settings

echo '    "volume": 3' >> /etc/openstack-dashboard/local_settings

echo '}' >> /etc/openstack-dashboard/local_settings

echo 'OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"' >> /etc/openstack-dashboard/local_settings

echo 'OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"' >> /etc/openstack-dashboard/local_settings

sed -i '123c TIME_ZONE = "Asia/Shanghai"' /etc/openstack-dashboard/local_settings

echo "WEBROOT = '/dashboard/'" >> /etc/openstack-dashboard/local_settings

echo 'WSGIApplicationGroup %{GLOBAL}' >> /etc/httpd/conf.d/openstack-dashboard.conf

systemctl restart httpd.service memcached.service

#安装完成，可访问http://10.0.0.11/dashboard/查看

Centos8最小化部署安装OpenStack Ussuri的更多相关文章

  1. CentOS7进行OpenStack(queens)最小化部署实验出现的问题与解决过程

    注:此文为<OpenStack(queens)最小化搭建记录——控制与计算共两个节点>的补充 1.chrony时间同步服务搭建的时候,出现计算节点无法与控制节点同步.(controller ...

  2. CentOS 6.0最小化编译安装Nginx+MySQL+PHP+Zend

    http://www.osyunwei.com/archives/235.html 引言: 操作系统:CentOS 6.0 32位         下载地址:http://mirrors.163.co ...

  3. 润乾V4的最小化部署方式

     在接触到的很多项目实际应用中,部署润乾V4都是使用润乾V4设计器自带的WEB发布向导,直接生成webRoot目录,然后将该目录下的所有文件COPY到项目目录下,然后修改web.xml文件和rep ...

  4. ubuntu16.04 用devstack部署安装OpenStack ocata

    原文链接 之所以再重复一下,是因为踩坑的过程,希望能帮助有需要的人. 介绍:        宿主机win10,在vmware下创建两台ubuntu16.04虚拟机,一台作为控制节点,一台作为计算节点, ...

  5. ASP.NET Core在CentOS上的最小化部署实践

    引言        本文从Linux小白的视角, 在CentOS 7.x服务器上搭建一个Nginx-Powered AspNet Core Web准生产应用. 在开始之前,我们还是重温一下部署原理,正 ...

  6. Centos 7 最小化部署jenkins

    前言 jenkins是devops与CI/CD的重要工具之一,下面通过jenkins与svn的结合完成自动部署功能 环境 软件 名称 版本 操作系统 Centos 7.4 开发环境 jdk 1.8 中 ...

  7. Centos 7 最小化部署zabbix

    前言 文章内容是作者本人编写,之前一直放在word文档中,突然有闲情转移到博客上来了,欢迎后续观看者有问题找我探讨~~~ 废话不多说,先说下原理吧 概述 工作原理 通过c/s模式采集数据,基于b/s模 ...

  8. Centos 7 最小化部署svn版本控制(svn协议)

    1.关闭selinux sh-4.2# sed -i 's/enforcing/disabled/' /etc/selinux/config sh-4.2# reboot 2.卸载防火墙 sh-4.2 ...

  9. Centos 7 最小化部署svn版本控制(http协议)

    1.关闭selinux sh-4.2# sed -i 's/enforcing/disabled/' /etc/selinux/config sh-4.2# reboot 2.卸载防火墙 sh-4.2 ...

随机推荐

  1. Fetch.AI 首席技术官Toby Simpson参与AMA活动

    感谢7月11日在YouTube上参与 Fetch.AI AMA的所有人.我们收到了大量的问题,遗憾的是我们没有时间回答其中的多数问题.如果你错过了现场AMA,你可以在下面观看全部内容: 在本文中,我们 ...

  2. if-else和三目运算符 ? : 的对比

    今天的地铁思考让我想起一个之前学C语言的时候一直没有验证的事情:既生瑜何生亮? 平时写代码的时候,似乎并没有太多的关注我应该选用什么条件判断语句,感觉判断条件或者两条支路语句复杂就本能地if-else ...

  3. 创建MongoDB副本集教程

    今天有时间搞了一下mongoDB的副本集,遇到好多坑,写下此文,方便日后查阅! 本教程是在windows环境下安装测试的(我是本机一台 + 两台虚拟机) 本机:10.53.8.159 虚拟机一:10. ...

  4. 5分钟带你快速入门和了解 OAM Kubernetes

    什么是 OAM? OAM 的全称为开放应用模型(Open Application Model),由阿里巴巴宣布联合微软共同推出. OAM 解决了什么问题? OAM 本质是为了解耦K8S中现存的形形色色 ...

  5. Python Ethical Hacking - VULNERABILITY SCANNER(6)

    EXPLOITATION - XSS VULNS EXPLOITING XSS Run any javascript code. Beef framework can be used to hook ...

  6. vs coed的使用(二) 如何运行cpp文件(不用插件比如code runner)

    一.前提 1.配置好编译运行的环境,比如系统变量.vs code的settings.json 2.检查配置好的环境没有问题 我配置结果 [环境变量] [系统变量] 确定settings.json里面的 ...

  7. centos7 安装 isign

    centos应该自带python和openssl,这两个就不用装了, 先安装zip和git yum install -y unzip zip yum install git 然后克隆代码: https ...

  8. ~~并发编程（十四）：Queue~~

    进击のpython ***** 并发编程--Queue 进程其实就提过这个Queue的问题,我们为什么在进程使用Queue? 是因为当时我们想要对共享数据进行修改,同时也希望它能够自动的给我加个锁 基 ...

  9. 网页批量打印成PDF，并按条件合并成大PDF、生成页码

    题记:因为老板要求将过去一年内系统中的订单合同内容进行打印,并按月进行整理成纸质文件.合同在系统(web系统)中以html形式显示,打印单份都是在网页中右键打印,订单量上千份,每笔订单有两份合同,如果 ...

  10. Visio的快速使用和功能理念

    以前我对visio这种Microsoft办公套件并不感冒,觉得完全没必要用Visio作图,最多用一下Process on,其他基本用Xmind解决问题了.但是最近几次工作需要接触之后发现,Visio还 ...