西安市城乡建设管理局网站6专科学校有哪些好专业

西安市城乡建设管理局网站6,专科学校有哪些好专业,北京正规网站建设单价,seo外链优化方法哈哈#xff0c;今天接的部署openstack#xff0c;也不知道领导为什么不是kolla的方案直接去部署openstack#xff0c;算了不废话了#xff0c;正式开始 1. 安装nova#xff1a; 下面所有操作都在控制节点 1.1 创建Nova数据库 # mysql -uroot -p000000 CREATE DATABA…哈哈今天接的部署openstack也不知道领导为什么不是kolla的方案直接去部署openstack算了不废话了正式开始1. 安装nova下面所有操作都在控制节点1.1 创建Nova数据库# mysql -uroot -p000000CREATE DATABASE nova_api;CREATE DATABASE nova;CREATE DATABASE nova_cell0;GRANT ALL PRIVILEGES ON nova_api.* TO novalocalhost IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON nova_api.* TO nova% IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON nova.* TO novalocalhost IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON nova.* TO nova% IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON nova_cell0.* TO novalocalhost IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON nova_cell0.* TO nova% IDENTIFIED BY 000000;flush privileges;1.2 创建用户# openstack user create --domain default --password-prompt nova密码还是还是延续000000添加admin角色到nova用户# openstack role add --project service --user nova admin1.3 创建服务创建nova# openstack service create --name nova --description OpenStack Compute compute创建nova服务端点openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.11.4 安装软件包# yum install -y openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler这里是nova的控制节点如果控制节点需要跑虚拟机的话还需要部署nova-computer相关的rpm包1.5 配置Nova在对应的域修改nova配置文件/etc/nova/nova.conf# vim /etc/nova/nova.conf[DEFAULT]enabled_apisosapi_compute,metadatatransport_urlrabbit://rabbitmq:000000controllermy_ip10.20.21.XXX[api_database]connectionmysqlpymysql://nova:000000controller/nova_api[database]connectionmysqlpymysql://nova:000000controller/nova[api]auth_strategykeystone[keystone_authtoken]auth_url http://controller:5000/v3memcached_servers controller:11211auth_type passwordproject_domain_name defaultuser_domain_name defaultproject_name serviceusername novapassword 000000[vnc]enabledtrueserver_listen$my_ipserver_proxyclient_address$my_ip[glance]api_servershttp://controller:9292[oslo_concurrency]lock_path/var/lib/nova/tmp[placement]os_region_nameRegionOneproject_domain_nameDefaultproject_nameserviceauth_typepassworduser_domain_nameDefaultauth_urlhttp://controller:5000/v3usernameplacementpassword0000001.6 同步数据库同步nova_api数据库# su -s /bin/sh -c nova-manage api_db sync nova注册cell0数据库# su -s /bin/sh -c nova-manage cell_v2 map_cell0 nova创建cell1单元格# su -s /bin/sh -c nova-manage cell_v2 create_cell --namecell1 --verbose nova同步nova数据库# su -s /bin/sh -c nova-manage db sync nova1.7 验证配置# nova-manage cell_v2 list_cells1.8 启动服务# systemctl enable openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service# systemctl start openstack-nova-api.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service2. 部署计算节点下面所有操作都在物理计算节点2.1 安装软件包# yum install openstack-nova-compute -y2.2 配置Nova在对应的域修改nova配置文件/etc/nova/nova.conf# vim /etc/nova/nova.conf[DEFAULT]enabled_apisosapi_compute,metadatatransport_urlrabbit://rabbitmq:000000controllermy_ip10.12.21.XXXcompute节点ip[api]auth_strategykeystone[keystone_authtoken]auth_urlhttp://controller:5000/v3memcached_serverscontroller:11211auth_typepasswordproject_domain_namedefaultuser_domain_namedefaultproject_nameserviceusernamenovapassword000000[vnc]enabledTrueserver_listen0.0.0.0server_proxyclient_address$my_ipnovncproxy_base_urlhttp://controller:6080/vnc_auto.html[glance]api_servershttp://controller:9292[oslo_concurrency]lock_path/var/lib/nova/tmp[placement]os_region_nameRegionOneproject_domain_nameDefaultproject_nameserviceauth_typepassworduser_domain_nameDefaultauth_urlhttp://controller:5000/v3usernameplacementpassword000000处理器架构为arm64需要在计算节点执行如下操作。修改/usr/share/AAVMF目录所有者及属组编辑/etc/libvirt/qemu.conf文件增加nvram配置。# chown -R nova:nova /usr/share/AAVMF# vim /etc/libvirt/qemu.confnvram [/usr/share/AAVMF/AAVMF_CODE.fd:/usr/share/AAVMF/AAVMF_VARS.fd,/usr/share/edk2/aarch64/QEMU_EFI-pflash.raw:/usr/share/edk2/aarch64/vars-template-pflash.raw]2.3 虚拟机硬件加速确认确认计算节点是否支持虚拟机硬件加速x86_64处理器为x86_64架构时可通过运行如下命令确认是否支持硬件加速# egrep -c (vmx|svm) /proc/cpuinfo如果返回值为0则不支持硬件加速需要配置libvirt使用QEMU而不是默认的KVM。编辑/etc/nova/nova.conf的[libvirt]部分[libvirt]virt_type qemu如果返回值为1或更大的值则支持硬件加速不需要进行额外的配置。确认计算节点是否支持虚拟机硬件加速arm64处理器为arm64架构时可通过运行如下命令确认是否支持硬件加速# virt-host-validate显示FAIL时表示不支持硬件加速需要配置libvirt使用QEMU而不是默认的KVM。显示如下QEMU: Checking if device /dev/kvm exists: FAIL (Check that CPU and firmware supports virtualization and kvm module is loaded)编辑/etc/nova/nova.conf的[libvirt]部分[libvirt]virt_type qemu显示PASS时表示支持硬件加速不需要进行额外的配置。显示如下QEMU: Checking if device /dev/kvm exists: PASS2.4 启动服务# systemctl enable libvirtd.service openstack-nova-compute.service# systemctl start libvirtd.service openstack-nova-compute.service2.5 验证服务回到controller节点执行注意注意注意# openstack compute service list --service nova-compute# su -s /bin/sh -c nova-manage cell_v2 discover_hosts --verbose nova3. 部署网络组件下面所有操作都在物理控制节点3.1 创建Neutron数据库# mysql -uroot -p000000CREATE DATABASE neutron;GRANT ALL PRIVILEGES ON neutron.* TO neutronlocalhost IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON neutron.* TO neutron% IDENTIFIED BY 000000;flush privileges;3.2 创建用户# openstack user create --domain default --password-prompt neutron密码还是默认的000000添加admin角色到neutron用户# openstack role add --project service --user neutron admin3.3 创建服务创建neutron服务#openstack service create --name neutron --description OpenStack Networking network创建neutron服务端点# openstack endpoint create --region RegionOne network public http://controller:9696# openstack endpoint create --region RegionOne network internal http://controller:9696# openstack endpoint create --region RegionOne network admin http://controller:96963.4 使用LinuxBridge模式LinuxBridge模式和OpenVSwitch模式只需选择其中一种进行配置3.5 控制节点安装包# yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge ebtables -y配置Neutron在对应的域修改neutron配置文件/etc/neutron/neutron.conf# vim /etc/neutron/neutron.conf[DEFAULT]core_pluginml2service_pluginsroutertransport_urlrabbit://rabbitmq:000000controllerauth_strategykeystonenotify_nova_on_port_status_changestruenotify_nova_on_port_data_changestrue[database]connectionmysqlpymysql://neutron:000000controller/neutron[keystone_authtoken]auth_urihttp://controller:5000auth_urlhttp://controller:35357memcached_serverscontroller:11211auth_typepasswordproject_domain_namedefaultuser_domain_namedefaultproject_nameserviceusernameneutronpassword000000[oslo_concurrency]lock_path/var/lib/neutron/tmp[nova]#文件内新增nova域auth_urlhttp://controller:35357auth_typepasswordproject_domain_namedefaultuser_domain_namedefaultregion_nameRegionOneproject_nameserviceusernamenovapassword000000修改ml2_conf配置文件/etc/neutron/plugins/ml2/ml2_conf.ini,添加以下域# vim /etc/neutron/plugins/ml2/ml2_conf.ini[ml2]type_driversflat,vlan,vxlantenant_network_typesvxlanmechanism_driverslinuxbridge,l2populationextension_driversport_security[ml2_type_flat]flat_networksprovider[ml2_type_vxlan]vni_ranges1:1000[securitygroup]enable_ipsettrue修改linuxbridge配置文件/etc/neutron/plugins/ml2/linuxbridge_agent.ini# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge]physical_interface_mappingsprovider:eth1[vxlan]enable_vxlantruelocal_ip10.12.20.XXXl2_populationtrue[securitygroup]enable_security_grouptruefirewall_driverneutron.agent.linux.iptables_firewall.IptablesFirewallDriverlocal_ip配置为物理网卡IP。vxlan网络的二层隧道流量将从具有此IP的网卡传输。本文档示例中使用管理网卡eth0 IP生产中可使用另外单独的网卡physical_interface_mappings需要在provider:后输入连接到provider网络的业务网卡名。在本文档示例中为eth1在对应的域修改l3_agent配置文件/etc/neutron/l3_agent.ini#vim /etc/neutron/l3_agent.ini[DEFAULT]interface_driverlinuxbridge在对应的域修改dhcp_agent配置文件/etc/neutron/dhcp_agent.ini# vim /etc/neutron/dhcp_agent.ini[DEFAULT]interface_driverlinuxbridgedhcp_driverneutron.agent.linux.dhcp.Dnsmasqenable_isolated_metadatatrue在对应的域修改metadata_agent配置文件/etc/neutron/metadata_agent.ini此处000000为数据库密码# vim /etc/neutron/metadata_agent.ini[DEFAULT]nova_metadata_hostcontrollermetadata_proxy_shared_secret000000在对应的域修改nova配置文件/etc/nova/nova.conf#vim /etc/nova/nova.conf[neutron]url http://controller:9696auth_urlhttp://controller:35357auth_typepasswordproject_domain_namedefaultuser_domain_namedefaultregion_nameRegionOneproject_nameserviceusernameneutronpassword000000service_metadata_proxytruemetadata_proxy_shared_secret000000配置网桥过滤器# echo net.bridge.bridge-nf-call-iptables 1 /etc/sysctl.conf# echo net.bridge.bridge-nf-call-ip6tables 1 /etc/sysctl.conf# cat /etc/sysctl.conf# modprobe br_netfilter# sysctl -p# sed -i $amodprobe br_netfilter /etc/rc.local禁用IPV6# echo net.ipv6.conf.all.disable_ipv6 1 /etc/sysctl.conf# echo net.ipv6.conf.default.disable_ipv6 1 /etc/sysctl.conf# sysctl -p创建链接# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini同步数据库# su -s /bin/sh -c neutron-db-manage --config-file \/etc/neutron/neutron.conf --config-file \/etc/neutron/plugins/ml2/ml2_conf.ini upgrade head neutron重启Nova服务# systemctl restart openstack-nova-api.service启动Neutron服务# systemctl enable neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.servicesystemctl start neutron-server.service neutron-linuxbridge-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service3.6 计算节点安装软件包# yum install openstack-neutron-linuxbridge ebtables ipset -y配置Neutron在对应的域修改neutron配置文件/etc/neutron/neutron.conf# vim /etc/neutron/neutron.conf[DEFAULT]transport_urlrabbit://rabbitmq:000000controllerauth_strategykeystone[keystone_authtoken]auth_urihttp://controller:5000auth_urlhttp://controller:35357memcached_serverscontroller:11211auth_typepasswordproject_domain_namedefaultuser_domain_namedefaultproject_nameserviceusernameneutronpassword000000[oslo_concurrency]lock_path /var/lib/neutron/tmp修改linuxbridge配置文件/etc/neutron/plugins/ml2/linuxbridge_agent.ini# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini[linux_bridge]physical_interface_mappingsprovider:eth1[vxlan]enable_vxlantruelocal_ip10.12.20.XXXl2_populationtrue[securitygroup]enable_security_grouptruefirewall_driverneutron.agent.linux.iptables_firewall.IptablesFirewallDriver在对应的域修改nova配置文件/etc/nova/nova.conf#vim /etc/nova/nova.conf[neutron]urlhttp://controller:9696auth_urlhttp://controller:35357auth_typepasswordproject_domain_namedefaultuser_domain_namedefaultregion_nameRegionOneproject_nameserviceusernameneutronpassword000000配置网桥过滤器# echo net.bridge.bridge-nf-call-iptables 1 /etc/sysctl.conf# echo net.bridge.bridge-nf-call-ip6tables 1 /etc/sysctl.conf# cat /etc/sysctl.conf# modprobe br_netfilter# sysctl -p# sed -i $amodprobe br_netfilter /etc/rc.local禁用IPV6# echo net.ipv6.conf.all.disable_ipv6 1 /etc/sysctl.conf# echo net.ipv6.conf.default.disable_ipv6 1 /etc/sysctl.conf# sysctl -p重启Nova服务# systemctl restart openstack-nova-compute.service启动Neutron服务# systemctl start neutron-linuxbridge-agent.service# systemctl enable neutron-linuxbridge-agent.service验证Neutron服务controller节点执行注意注意注意# openstack network agent list3.6 OpenvSwitch模式在控制节点执行安装软件包# yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-openvswitch openvswitch ebtables配置Neutron在对应的域修改neutron配置文件/etc/neutron/neutron.conf# vim /etc/neutron/neutron.conf[DEFAULT]transport_url rabbit://rabbitmq:000000controllerauth_strategy keystonecore_plugin ml2service_plugins routerallow_overlapping_ips truenotify_nova_on_port_status_changes truenotify_nova_on_port_data_changes true[database]connection mysqlpymysql://neutron:000000controller/neutron[keystone_authtoken]auth_uri http://controller:5000auth_url http://controller:35357memcached_servers controller:11211auth_type passwordproject_domain_name defaultuser_domain_name defaultproject_name serviceusername neutronpassword 000000[oslo_concurrency]lock_path /var/lib/neutron/tmp[nova]#文件内新增nova域auth_url http://controller:35357auth_type passwordproject_domain_name defaultuser_domain_name defaultregion_name RegionOneproject_name serviceusername novapassword 000000修改ml2_conf配置文件/etc/neutron/plugins/ml2/ml2_conf.ini,添加以下域#vim /etc/neutron/plugins/ml2/ml2_conf.ini[ml2]type_drivers flat,vlan,vxlantenant_network_types vxlanmechanism_drivers openvswitch,l2populationextension_drivers port_security[ml2_type_flat]flat_networks provider[ml2_type_vxlan]vni_ranges 1:1000[securitygroup]enable_ipset true修改ovs配置文件/etc/neutron/plugins/ml2/openvswitch_agent.ini,添加以下域#vim /etc/neutron/plugins/ml2/openvswitch_agent.ini[ovs]integration_bridge br-inttunnel_bridge br-tunlocal_ip 10.100.1.110bridge_mappings provider:br-ex[agent]tunnel_types vxlan,grel2_population truearp_responder true[securitygroup]enable_security_group Truefirewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriverlocal_ip配置为物理网卡IP。vxlan网络的二层隧道流量将从具有此IP的网卡传输。本文档示例中使用管理网卡eth0 IP生产中可使用另外单独的网卡。在对应的域修改l3_agent配置文件/etc/neutron/l3_agent.ini#vim /etc/neutron/l3_agent.ini[DEFAULT]interface_driver openvswitchexternal_network_bridge br-ex在对应的域修改dhcp_agent配置文件/etc/neutron/dhcp_agent.ini#vim /etc/neutron/dhcp_agent.ini[DEFAULT]interface_driver openvswitchdhcp_driver neutron.agent.linux.dhcp.Dnsmasqenable_isolated_metadata true在对应的域修改metadata_agent配置文件/etc/neutron/metadata_agent.ini#vim /etc/neutron/metadata_agent.ini[DEFAULT]nova_metadata_host controllermetadata_proxy_shared_secret 000000在对应的域修改nova配置文件/etc/nova/nova.conf#vim /etc/nova/nova.conf[neutron]url http://controller:9696auth_url http://controller:35357auth_type passwordproject_domain_name defaultuser_domain_name defaultregion_name RegionOneproject_name serviceusername neutronpassword 000000service_metadata_proxy truemetadata_proxy_shared_secret 000000启动服务#systemctl enable openvswitch#systemctl start openvswitch#systemctl status openvswitch建立网桥此处网卡名为连接Provider网络的业务网卡名。ovs-vsctl add-br br-exovs-vsctl add-port br-exeth1ovs-vsctl show创建连接# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini同步数据库# su -s /bin/sh -c neutron-db-manage --config-file \/etc/neutron/neutron.conf --config-file \/etc/neutron/plugins/ml2/ml2_conf.ini upgrade head neutron重启Nova服务# systemctl restart openstack-nova-api.service启动Neutron服务# systemctl enable neutron-server.service neutron-openvswitch-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service# systemctl start neutron-server.service neutron-openvswitch-agent.service neutron-dhcp-agent.service neutron-metadata-agent.service neutron-l3-agent.service在计算节点执行安装软件包# yum install openvswitch openstack-neutron-openvswitch ebtables ipset -y配置Neutron在对应的域修改neutron配置文件/etc/neutron/neutron.conf# vim /etc/neutron/neutron.conf[DEFAULT]transport_url rabbit://rabbitmq:000000controllerauth_strategy keystone[keystone_authtoken]auth_uri http://controller:5000auth_url http://controller:35357memcached_servers controller:11211auth_type passwordproject_domain_name defaultuser_domain_name defaultproject_name serviceusername neutronpassword 000000[oslo_concurrency]lock_path /var/lib/neutron/tmp修改ovs配置文件/etc/neutron/plugins/ml2/openvswitch_agent.ini,添加以下域# vim /etc/neutron/plugins/ml2/openvswitch_agent.ini[ovs]integration_bridge br-inttunnel_bridge br-tunlocal_ip 10.100.1.20bridge_mappings provider:br-ex[agent]tunnel_types vxlan,grel2_population truearp_responder true[securitygroup]enable_security_group Truefirewall_driver neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver在对应的域修改nova配置文件/etc/nova/nova.conf# vim /etc/nova/nova.conf[neutron]url http://controller:9696auth_url http://controller:35357auth_type passwordproject_domain_name defaultuser_domain_name defaultregion_name RegionOneproject_name serviceusername neutronpassword 000000启动服务安装ovs模块如无pip命令安装python3-pip# pip3 install ovs启动服务# systemctl enable openvswitch# systemctl start openvswitch# systemctl status openvswitch建立网桥此处网卡名为连接Provider网络的业务网卡名。ovs-vsctl add-br br-exovs-vsctl add-port br-exeth1ovs-vsctl show重启Nova服务# systemctl restart openstack-nova-compute.service# systemctl status openstack-nova-compute.service启动Neutron服务# systemctl start neutron-openvswitch-agent.service# systemctl enable neutron-openvswitch-agent.service# systemctl status neutron-openvswitch-agent.service验证Neutron服务controller节点执行# openstack network agent list4. 部署计算节点安装Web服务4.1 安装软件包controller节点执行# yum install -y openstack-dashboard4.2 配置Dashboard找到对应地方修改dashboard配置文件local_settings如没有相应字段则添加#vim /etc/openstack-dashboard/local_settingsALLOWED_HOSTS [*, two.example.com]WEBROOT /dashboard/CACHES {default: {BACKEND: django.core.cache.backends.memcached.MemcachedCache,LOCATION: controller:11211,},}SESSION_ENGINE django.contrib.sessions.backends.cacheOPENSTACK_HOST controllerOPENSTACK_KEYSTONE_URL http://%s:5000/v3 % OPENSTACK_HOSTOPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT TrueOPENSTACK_API_VERSIONS {identity: 3,image: 2,volume: 2,}OPENSTACK_KEYSTONE_DEFAULT_DOMAIN DefaultOPENSTACK_KEYSTONE_DEFAULT_ROLE user修改openstack-dashboard.conf配置文件在第3-4行空白处添加如下字段# vim /etc/httpd/conf.d/openstack-dashboard.confWSGIApplicationGroup %{GLOBAL}4.3重启服务# systemctl restart httpd.service memcached.service# systemctl status httpd.service memcached.service4.4访问Web服务地址http://10.12.20.XXX/dashboard域default用户admin密码0000005. 验证创建云主机controller节点执行5.1创建KeyPair# ssh-keygen -q -N # openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey# openstack keypair list5.2 创建网络创建provider网络配置链接外网# source ~/admin-openrc# openstack network create --share --external --provider-physical-network provider --provider-network-type flat provider设置provider地址池ip地址池为创建网桥所用的IP网段#openstack subnet create --network provider --allocation-pool start10.100.1.100,end10.100.1.200--gateway10.100.1.1--subnet-range10.100.1.0/24provider创建self-service网络内网nat网络# openstack network create selfservice设置self-service地址池可随意设置#openstack subnet create --network selfservice --gateway 10.100.2.1 --subnet-range 10.100.2.0/24 selfservice5.3 创建路由# openstack router create router添加self-service网络到router接口# neutron router-interface-add router selfservice为router设置网关# neutron router-gateway-set router provider验证router# ip netns查看网络# neutron router-port-list router5.4 创建实例类型0实例编号1cpu1024内存20磁盘大小name实例类型名称也可在web页面进行创建# openstack flavor create --id0--vcpus1--ram1024--disk20name5.5 查看镜像及网络# openstack image list# openstack subnet list5.6 创建实例# openstack server create --flavorflavor-id--imageimage-id server-name--networknetwork-idflavor-id实例类型ID或者名称image-id镜像ID或者名称server-name实例名称network-id网络ID或者名称请根据实际情况替换使用5.7 查看实例终于搭建起来~ 恭喜一下自己~