openstack 搭建詳細(xì)步驟

一、openstack單點(diǎn)部署

1、配置虛擬機(jī)NAT網(wǎng)絡(luò)連接

查看vmware的NAT網(wǎng)絡(luò)默認(rèn)配置

|   |   |
| --- | --- |
|   | vmwarestation軟件點(diǎn)擊 上方“編輯”，選擇“虛擬網(wǎng)絡(luò)編輯器” |
|   | 找到vmnet10，是NAT模式，子網(wǎng)地址是172.25.2.0,子網(wǎng)掩碼是：255.255.255.0. |
|   | 再點(diǎn)擊“NAT設(shè)置”，可看到它的網(wǎng)關(guān):172.25.2.2 |

配置當(dāng)前虛擬機(jī)的網(wǎng)絡(luò)配置

|   |   |
| --- | --- |
|   | vmwarestation軟件點(diǎn)擊 上方“虛擬機(jī)”，選擇“設(shè)置”； |
|   | 首先沒有NAT網(wǎng)卡的，點(diǎn)擊“添加”，添加一個(gè)新的網(wǎng)絡(luò)適配器。 |
|   | 已經(jīng)創(chuàng)建號(hào)NAT網(wǎng)卡的，進(jìn)行如下配置： |
|   | 網(wǎng)絡(luò)連接模式改為："自定義（U）：特定虛擬網(wǎng)絡(luò)" |
|   | 在下拉選項(xiàng)中，選中“VMnet10(NAT模式)” |

配置linux網(wǎng)絡(luò)

|   |   |
| --- | --- |
|   |# 進(jìn)入網(wǎng)絡(luò)配置目錄 |
|   |cd/etc/sysconfig/network-scripts |
|   |# 編輯nat網(wǎng)卡的配置 |
|   | vi ifcfg-ens33 |
|   |# 修改或添加如下信息： |
|   | BOOTPROTO=static |
|   | ONBOOT=yes|
|   | IPADDR=172.25.2.101 |
|   | NETMASK=255.255.255.0 |
|   | GATEWAY=172.25.2.2 |
|   | DNS=8.8.8.8 |
|   |   |
|   |# 在vi編輯器中,輸入:wq進(jìn)行保存退出 |
|   | vi /etc/resolv.conf |
|   | 加入： |
|   | nameserver 8.8.8.8 |
|   | 輸入:wq進(jìn)行保存退出 |
|   |   |
|   |# 關(guān)閉防火墻 |
|   | systemctl stop firewalld.service |
|   | systemctldisablefirewalld.service |
|   |   |
|   |# 重啟網(wǎng)絡(luò) |
|   | systemctl restart network |
|   |   |
|   |# 測(cè)試 |
|   | ping www.baidu.com |

2、yum源配置

|   |   |
| --- | --- |
|   |# 關(guān)閉網(wǎng)絡(luò)管理 |
|   | systemctldisableNetworkManager |
|   |# 關(guān)閉selinux，修改文件為disabled |
|   | sed -i's/SELINUX=enforcing/SELINUX=disabled/g' /etc/selinux/config |
|   |# selinux修改生效 |
|   | setenforce 0 |
|   |   |
|   |##################################更新yum源################################# |
|   |# 將官方的yum源備份到一個(gè)新目錄： |
|   |mkdir/etc/yum.repos.d/repo.bak/ |
|   |mv/etc/yum.repos.d/*.repo repo.bak/ |
|   |   |
|   |# 更新下載阿里源 |
|   | curl -o /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repo |
|   |   |
|   |# 清理yum |
|   | yum clean all |
|   | yum makecache |
|   |   |
|   |# 更新yum信息 |
|   | yum update -y |
|   |   |
|   |# 查看當(dāng)前存在的openstack版本安裝源 |
|   | yum list | grep openstack |
|   |   |
|   |# 安裝安裝源 |
|   | yum install -y centos-release-openstack-queens |
|   |   |
|   |# 調(diào)整倉(cāng)庫(kù)配置文件 |
|   | vi /etc/yum.repos.d/CentOS-QEMU-EV.repo |
|   |# 將文件中/$contentdir/改為/centos-7/ |
|   |   |
|   |# 添加epel-repo源 |
|   | curl -o /etc/yum.repos.d/epel-7.repo http://mirrors.aliyun.com/repo/epel-7.repo |
|   |   |
|   |# 添加openstack.queens.repo文件信息 |
|   |cat> /etc/yum.repos.d/openstack-queens.repo <

	

	二、國(guó)賽雙節(jié)點(diǎn)部署

	1、準(zhǔn)備虛擬機(jī)

	
|   |   |
| --- | --- |
|   | 創(chuàng)建虛擬機(jī)前，創(chuàng)建好vmnet2(僅主機(jī)模式),vmnet10(NAT模式)網(wǎng)卡，檢查對(duì)應(yīng)的適配器是否創(chuàng)建成功。 |
|   | 準(zhǔn)備兩臺(tái)vmware虛擬機(jī)，手動(dòng)最小化安裝2臺(tái)Centos7.2系統(tǒng)，第一個(gè)網(wǎng)卡為僅主機(jī)模式，第二個(gè)網(wǎng)卡為NAT模式，配置CPU虛擬機(jī)，4G以上內(nèi)存，50G以上硬盤。 |

	

	master節(jié)點(diǎn)網(wǎng)卡：

	
|   |   |
| --- | --- |
|   |TYPE=Ethernet |
|   |BOOTPROTO=static |
|   |DEFROUTE=yes|
|   |PEERDNS=yes|
|   |PEERROUTES=yes|
|   |IPV4_FAILURE_FATAL=no|
|   |IPV6INIT=yes|
|   |IPV6_AUTOCONF=yes|
|   |IPV6_DEFROUTE=yes|
|   |IPV6_PEERDNS=yes|
|   |IPV6_PEERROUTES=yes|
|   |IPV6_FAILURE_FATAL=no|
|   |NAME=eno16777736 |
|   |UUID=f34abd2e-89c9-4daf-a28c-54765164d59d |
|   |DEVICE=eno16777736 |
|   |ONBOOT=yes|
|   |IPADDR=192.168.16.10|
|   |NETMASK=255.255.255.0|

	

	Node節(jié)點(diǎn)網(wǎng)卡：

	
|   |   |
| --- | --- |
|   |TYPE=Ethernet |
|   |BOOTPROTO=static |
|   |DEFROUTE=yes|
|   |PEERDNS=yes|
|   |PEERROUTES=yes|
|   |IPV4_FAILURE_FATAL=no|
|   |IPV6INIT=yes|
|   |IPV6_AUTOCONF=yes|
|   |IPV6_DEFROUTE=yes|
|   |IPV6_PEERDNS=yes|
|   |IPV6_PEERROUTES=yes|
|   |IPV6_FAILURE_FATAL=no|
|   |NAME=eno16777736 |
|   |UUID=8bbcc106-d60f-48cc-aafd-2bde0154fa2e |
|   |DEVICE=eno16777736 |
|   |ONBOOT=yes|
|   |IPADDR=192.168.16.20|
|   |NETMASK=255.255.255.0|

	

	2、鏡像掛載

	鏡像上傳到master節(jié)點(diǎn)，然后完成掛載即可。

	
|   |   |
| --- | --- |
|   |# 掛載linux鏡像 |
|   |cd/root/; |
|   | mount -o loop CentOS-7-x86_64-DVD-1511.iso /mnt/; |
|   |mkdir/opt/centos7.2; |
|   |cp-rvf /mnt/* /opt/centos7.2/ |
|   | umount /mnt/; |
|   |   |
|   |# 掛載iaas鏡像 |
|   |cd/root/; |
|   | mount -o loop XianDian-IaaS-v2.2.iso /mnt/; |
|   |mkdir/opt/iaas; |
|   |cp-rvf /mnt/* /opt/iaas; |
|   | umount /mnt/; |

	

	3、本地yum配置

	分別配置控制節(jié)點(diǎn)和計(jì)算節(jié)點(diǎn)的yum

	
|   |   |
| --- | --- |
|   |# 控制節(jié)點(diǎn)： |
|   | rm -rf /etc/yum.repos.d/CentOS-*; |
|   | cat > /etc/yum.repos.d/local.repo <
|   |   |
| --- | --- |
|   |# 計(jì)算節(jié)點(diǎn)：(如果沒有可以后面再配) |
|   | rm -rf /etc/yum.repos.d/CentOS-*; |
|   | cat > /etc/yum.repos.d/local.repo << EOF |
| ? ? | [centos] |
| ? ? | name=centos |
| ? ? | baseurl=ftp://192.168.16.10/centos7.2 |
| ? ? | gpgcheck=0 |
| ? ? | enabled=1 |
| ? ? | [iaas] |
| ? ? | name=iass |
| ? ? | baseurl=ftp://192.168.16.10/iaas/iaas-repo |
| ? ? | gpgcheck=0 |
| ? ? | enabled=1 |
| ? ? | EOF |

	

	為計(jì)算節(jié)點(diǎn)提供ftp訪問方式

	
|   |   |
| --- | --- |
|   |# 控制節(jié)點(diǎn)——yum緩存清理 |
|   | yum clean all |
|   | yum makecache |
|   |   |
|   |# 控制節(jié)點(diǎn)——安裝vsftpd和ftp |
|   | yum install -y vsftpd |
|   | yum install -y ftp |
|   | rpm -qa| grep vsftpd |
|   |   |
|   |# 控制節(jié)點(diǎn)——修改vsftpd配置文件 |
|   | 在/etc/vsftpd/vsftpd.conf中添加一行代碼： |
|   | anon_root=/opt |
|   |   |
|   |# 控制節(jié)點(diǎn)——安裝網(wǎng)絡(luò)工具包 |
|   | yum install net-tools |
|   |   |
|   |# 重啟vsftpd服務(wù) |
|   | systemctl restart vsftpd |
|   |# 開機(jī)啟動(dòng)vsftpd |
|   | systemctlenablevsftpd |
|   |   |
|   |# 控制節(jié)點(diǎn)、計(jì)算節(jié)點(diǎn)——關(guān)閉防火墻 |
|   | setenforce 0; |
|   | iptables -F; |
|   | iptables -X; |
|   | iptables -Z; |
|   | systemctl stop firewalld; |
|   | systemctldisablefirewalld; |
|   |   |
|   |# 計(jì)算節(jié)點(diǎn) |
|   | yum clean all |
|   | yum makecache |

	

	4、給計(jì)算節(jié)點(diǎn)（node）添加新磁盤并分區(qū)

	在vmware上給計(jì)算節(jié)點(diǎn)虛擬機(jī)添加一個(gè)新磁盤

	虛擬機(jī)——> 設(shè)置——> 添加——> 硬盤——> scsi模式——> 創(chuàng)建新虛擬磁盤——> 20G，拆分為多個(gè)文件——> 完成

	
|   |   |
| --- | --- |
|   |# 重啟計(jì)算節(jié)點(diǎn)虛擬機(jī) |
|   | reboot |
|   |   |
|   |# 查看當(dāng)前虛擬機(jī)的磁盤情況 |
|   | fdisk -l |
|   |# 可以看到Disk /dev/sdb: 21.5 GB是完全空閑的 |
|   |   |
|   |# 創(chuàng)建兩個(gè)空白磁盤空間 |
|   | fdisk /dev/sdb |
|   | n,p,回車,回車,+10G |
|   | n,p,回車,回車,回車 |
|   | w  |

	

	5、在controller和compute節(jié)點(diǎn)安裝iaas-xiandian包

	
|   |   |
| --- | --- |
|   |# 控制節(jié)點(diǎn)、計(jì)算節(jié)點(diǎn)分別執(zhí)行，安裝軟件包 |
|   | yum install -y iaas-xiandian |

	

	控制節(jié)點(diǎn)、計(jì)算節(jié)點(diǎn)編輯修改配置文件/etc/xiandian/openrc.sh

	
|   |   |
| --- | --- |
|   |##--------------------system Config--------------------## |
|   |##Controller Server Manager IP. example:x.x.x.x |
|   | HOST_IP=192.168.16.10 |
|   |   |
|   |##Controller HOST Password. example:000000 |
|   | HOST_PASS=000000 |
|   |   |
|   |##Controller Server hostname. example:controller |
|   | HOST_NAME=controller |
|   |   |
|   |##Compute Node Manager IP. example:x.x.x.x |
|   | HOST_IP_NODE=192.168.16.20 |
|   |   |
|   |##Compute HOST Password. example:000000 |
|   | HOST_PASS_NODE=000000 |
|   |   |
|   |##Compute Node hostname. example:compute |
|   | HOST_NAME_NODE=compute |
|   |   |
|   |##--------------------Chrony Config-------------------## |
|   |##Controller network segment IP. example:x.x.0.0/16(x.x.x.0/24) |
|   | network_segment_IP=192.168.16.0/24 |
|   |   |
|   |##--------------------Rabbit Config ------------------## |
|   |##user for rabbit. example:openstack |
|   | RABBIT_USER=openstack |
|   |   |
|   |##Password for rabbit user .example:000000 |
|   | RABBIT_PASS=000000 |
|   |   |
|   |##--------------------MySQL Config---------------------## |
|   |##Password for MySQL root user . exmaple:000000 |
|   | DB_PASS=000000 |
|   |   |
|   |##--------------------Keystone Config------------------## |
|   |##Password for Keystore admin user. exmaple:000000 |
|   | DOMAIN_NAME=demo |
|   | ADMIN_PASS=000000 |
|   | DEMO_PASS=000000 |
|   |   |
|   |##Password for Mysql keystore user. exmaple:000000 |
|   | KEYSTONE_DBPASS=000000 |
|   |   |
|   |##--------------------Glance Config--------------------## |
|   |##Password for Mysql glance user. exmaple:000000 |
|   | GLANCE_DBPASS=000000 |
|   |   |
|   |##Password for Keystore glance user. exmaple:000000 |
|   | GLANCE_PASS=000000 |
|   |   |
|   |##--------------------Nova Config----------------------## |
|   |##Password for Mysql nova user. exmaple:000000 |
|   | NOVA_DBPASS=000000 |
|   |   |
|   |##Password for Keystore nova user. exmaple:000000 |
|   | NOVA_PASS=000000 |
|   |   |
|   |##--------------------Neturon Config-------------------## |
|   |##Password for Mysql neutron user. exmaple:000000 |
|   | NEUTRON_DBPASS=000000 |
|   |   |
|   |##Password for Keystore neutron user. exmaple:000000 |
|   | NEUTRON_PASS=000000 |
|   |   |
|   |##metadata secret for neutron. exmaple:000000 |
|   | METADATA_SECRET=000000 |
|   |   |
|   |##Tunnel Network Interface. example:x.x.x.x |
|   | INTERFACE_IP=192.168.16.10/192.168.16.20 |
|   |   |
|   |##External Network Interface. example:eth1  第二張網(wǎng)卡 |
|   | INTERFACE_NAME=eno33554960 |
|   |   |
|   |##External Network The Physical Adapter. example:provider |
|   | Physical_NAME=provider |
|   |   |
|   |##First Vlan ID in VLAN RANGE for VLAN Network. exmaple:101 |
|   | minvlan=1 |
|   |   |
|   |##Last Vlan ID in VLAN RANGE for VLAN Network. example:200 |
|   | maxvlan=2000 |
|   |   |
|   |##--------------------Cinder Config--------------------## |
|   |##Password for Mysql cinder user. exmaple:000000 |
|   | CINDER_DBPASS=000000 |
|   |   |
|   |##Password for Keystore cinder user. exmaple:000000 |
|   | CINDER_PASS=000000 |
|   |   |
|   |##Cinder Block Disk. example:md126p3 |
|   | BLOCK_DISK=sdb1 |
|   |   |
|   |##--------------------Swift Config---------------------## |
|   |##Password for Keystore swift user. exmaple:000000 |
|   | SWIFT_PASS=000000 |
|   |   |
|   |##The NODE Object Disk for Swift. example:md126p4. |
|   | OBJECT_DISK=sdb2 |
|   |   |
|   |##The NODE IP for Swift Storage Network. example:x.x.x.x. |
|   | STORAGE_LOCAL_NET_IP=192.168.16.20 |
|   |   |
|   |##--------------------Heat Config----------------------## |
|   |##Password for Mysql heat user. exmaple:000000 |
|   | HEAT_DBPASS=000000 |
|   |   |
|   |##Password for Keystore heat user. exmaple:000000 |
|   | HEAT_PASS=000000 |
|   |   |
|   |##--------------------Zun Config-----------------------## |
|   |##Password for Mysql Zun user. exmaple:000000 |
|   | ZUN_DBPASS=000000 |
|   |   |
|   |##Password for Keystore Zun user. exmaple:000000 |
|   | ZUN_PASS=000000 |
|   |   |
|   |##Password for Mysql Kuryr user. exmaple:000000 |
|   | KURYR_DBPASS=000000 |
|   |   |
|   |##Password for Keystore Kuryr user. exmaple:000000 |
|   | KURYR_PASS=000000 |
|   |   |
|   |##--------------------Ceilometer Config----------------## |
|   |##Password for Gnocchi ceilometer user. exmaple:000000 |
|   | CEILOMETER_DBPASS=000000 |
|   |   |
|   |##Password for Keystore ceilometer user. exmaple:000000 |
|   | CEILOMETER_PASS=000000 |
|   |   |
|   |##--------------------AODH Config----------------## |
|   |##Password for Mysql AODH user. exmaple:000000 |
|   | AODH_DBPASS=000000 |
|   |   |
|   |##Password for Keystore AODH user. exmaple:000000 |
|   | AODH_PASS=000000 |
|   |   |
|   |##--------------------Barbican Config----------------## |
|   |##Password for Mysql Barbican user. exmaple:000000 |
|   | BARBICAN_DBPASS=000000 |
|   |   |
|   |##Password for Keystore Barbican user. exmaple:000000 |
|   | BARBICAN_PASS=000000 |

	

	6、腳本安裝openstack平臺(tái)

	
|   |   |
| --- | --- |
|   | 控制節(jié)點(diǎn)、計(jì)算節(jié)點(diǎn)分別執(zhí)行如下腳本安裝基礎(chǔ)服務(wù)： |
|   | iaas-pre-host.sh |
|   |   |
|   | 控制節(jié)點(diǎn)部署mysql數(shù)據(jù)庫(kù)服務(wù)： |
|   | iaas-install-mysql.sh |
|   |   |
|   | 控制節(jié)點(diǎn)部署keystone服務(wù)： |
|   | iaas-install-keystore.sh |
|   |   |
|   | 控制節(jié)點(diǎn)部署glance服務(wù)： |
|   | iaas-install-glance.sh |
|   |   |
|   | 控制節(jié)點(diǎn)部署nova服務(wù)： |
|   | iaas-install-nova-controller.sh |
|   | 計(jì)算節(jié)點(diǎn)部署nova服務(wù) |
|   | iaas-install-nova-compute.sh |
|   |   |
|   |   |
|   | 控制節(jié)點(diǎn)部署neutron |
|   | iaas-install-neutron-controller.sh |
|   | 錯(cuò)誤處理——修改腳本： |
|   | vi /usr/local/bin/iaas-install-neutron-controller-gre.sh |
|   | 將最后一行的 |
|   | systemctl enabled neutron-lbaas-agent  改為  systemctl enable neutron-lbaas-agent |
|   | 再執(zhí)行下面的腳本： |
|   | iaas-install-neutron-controller-gre.sh |
|   |   |
|   | 計(jì)算節(jié)點(diǎn)部署neutron |
|   | iaas-install-neutron-compute.sh |
|   | iaas-install-neutron-compute-gre.sh |
|   |   |
|   | 控制節(jié)點(diǎn)部署dashboard |
|   | iaas-install-dashboard.sh |

	

	三、Openstack平臺(tái)使用

	兩節(jié)點(diǎn)部署，192.168.16.10為控制節(jié)點(diǎn)。192.168.16.20為計(jì)算節(jié)點(diǎn)。

	1、創(chuàng)建鏡像

	
|   |   |
| --- | --- |
|   |# 控制節(jié)點(diǎn)上，找到qcow2鏡像 |
|   | [root@controller ~]#cd/opt/iaas/images/ |
|   | [root@controller images]#ls|
|   | CentOS_6.5_x86_64_XD.qcow2 CentOS_7.2_x86_64_XD.qcow2 MySQL_5.6_XD.qcow2 |
|   |   |
|   |# 上傳鏡像致Glance服務(wù) |
|   |# 在控制節(jié)點(diǎn)，通過glance命令，將qcow2鏡像上傳到平臺(tái) |
|   | [root@controller images]#source/etc/keystone/admin-openrc.sh |
|   | [root@controller images]# glance image-create --name"centos7.2"--disk-format qcow2 --container-format bare --progress < CentOS_7.2_x86_64_XD.qcow2 |

	

	2、創(chuàng)建虛擬機(jī)

	（1）創(chuàng)建外部網(wǎng)絡(luò)

	選擇菜單欄 項(xiàng)目——> 網(wǎng)絡(luò)——> 網(wǎng)絡(luò)。單擊 創(chuàng)建網(wǎng)絡(luò) ，來創(chuàng)建虛擬機(jī)網(wǎng)絡(luò)。

	創(chuàng)建網(wǎng)絡(luò)名net-gre，配置子網(wǎng)名稱為net-subnet，網(wǎng)絡(luò)地址為192.168.20.0/24，網(wǎng)關(guān)為192.168.20.2。

	再配置DHCP地址池，激活DHCP，配置DNS為114.114.114.114。點(diǎn)擊“已創(chuàng)建”創(chuàng)建網(wǎng)絡(luò)。

	選擇菜單欄 管理員——> 系統(tǒng)——> 網(wǎng)絡(luò)。對(duì)已創(chuàng)建的net-gre網(wǎng)絡(luò)，點(diǎn)擊 “編輯網(wǎng)絡(luò)”，在彈框中勾選“外部網(wǎng)絡(luò)”。

	（2）創(chuàng)建內(nèi)部網(wǎng)絡(luò)

	選擇菜單欄 項(xiàng)目——> 網(wǎng)絡(luò)——> 網(wǎng)絡(luò)。單擊 創(chuàng)建網(wǎng)絡(luò) ，來創(chuàng)建虛擬機(jī)網(wǎng)絡(luò)。

	創(chuàng)建網(wǎng)絡(luò)名int-gre，配置子網(wǎng)名稱為 int-subnet，網(wǎng)絡(luò)地址為10.10.0.0/24，網(wǎng)關(guān)為10.10.0.1。

	配置DHCP地址池，激活DHCP。點(diǎn)擊“已創(chuàng)建”創(chuàng)建網(wǎng)絡(luò)。

	（3）創(chuàng)建路由器

	選擇菜單欄 項(xiàng)目——> 網(wǎng)絡(luò)——> 路由。單擊 新建路由，來創(chuàng)建路由。

	創(chuàng)建路由名稱為route，外部網(wǎng)絡(luò)選擇 net-gre。點(diǎn)擊“新建路由”創(chuàng)建路由。

	在route路由中內(nèi)部網(wǎng)絡(luò)接口：

	單擊新建的路由名稱，選擇 接口 標(biāo)簽。點(diǎn)擊 "增加接口"按鈕。

	在彈框中，選擇 int-gre 內(nèi)部網(wǎng)絡(luò)，再點(diǎn)擊 提交 。

	（4）安全組配置

	管理訪問策略安全組，選擇菜單欄 項(xiàng)目——> 計(jì)算——> 訪問&安全。單擊default安全組 管理規(guī)則 按鈕。

	點(diǎn)擊 添加規(guī)則 ，選擇"所有ICMP協(xié)議"，單擊 添加 按鈕；選擇"所有TCP協(xié)議"，單擊 添加 按鈕；選擇"所有UDP協(xié)議"，單擊 添加 按鈕。

	（5）創(chuàng)建云主機(jī)

	創(chuàng)建云主機(jī)，選擇菜單欄 項(xiàng)目——> 計(jì)算——> 云主機(jī)。單擊右側(cè) "創(chuàng)建云主機(jī)"按鈕。

	云主機(jī)名稱為：test，數(shù)量：1。選擇centos7.2鏡像；選擇m1.small資源類型；選擇int-gre網(wǎng)絡(luò)。然后單擊"啟動(dòng)實(shí)例"按鈕創(chuàng)建實(shí)例。

	選擇菜單欄 項(xiàng)目——> 計(jì)算——> 云主機(jī)。在主機(jī)下拉框中選擇 "綁定浮動(dòng)IP"菜單命令。在彈框中點(diǎn)擊 "+"分配一個(gè)地址，單擊 "分配IP"按鈕。點(diǎn)擊 "關(guān)聯(lián)"按鈕，關(guān)聯(lián)浮動(dòng)IP地址。

	（6）連接云主機(jī)

	打開CMD窗口，通過ping命令測(cè)試連通云主機(jī)。

	使用secureCRT工具，連接云主機(jī)，用戶名：root,密碼：000000。

	四、Keystone服務(wù)運(yùn)維

	在Openstack框架中，keystone(Openstack Identity Service)的功能是負(fù)責(zé)驗(yàn)證身份、校驗(yàn)服務(wù)規(guī)則和發(fā)布服務(wù)令牌的，它實(shí)現(xiàn)了Openstack的Identity API.keystone可分解為兩個(gè)功能：權(quán)限管理和服務(wù)目錄。

	https://www.cnblogs.com/mh20131118/p/12942346.html

	https://www.cnblogs.com/linuxk/p/9282996.html

	1、keystone運(yùn)維命令

	
|   |   |
| --- | --- |
|   |# 環(huán)境配置 |
|   |source/etc/keystone/admin-openrc.sh |
|   |# 創(chuàng)建 hqs用戶 |
|   | openstack user create --password ps1234 --email hqs@example.com --domain demo hqs |
|   |# 創(chuàng)建acme項(xiàng)目 |
|   | openstack project create --domain demo acme |
|   |# 創(chuàng)建角色 |
|   | openstack role create compute-user |
|   |# 綁定用戶和項(xiàng)目權(quán)限 |
|   |# 添加的用戶需要分配一定的權(quán)限，需要把用戶關(guān)聯(lián)綁定到對(duì)應(yīng)的項(xiàng)目和角色 |
|   | openstack role add --user hqs --project acme compute-user |

	

	2、keystone查詢命令

	
|   |   |
| --- | --- |
|   |# 用戶列表查詢 |
|   | [root@controller ~]# openstack user list |
|   | +----------------------------------+---------+ |
|   | | ID                | Name  | |
|   | +----------------------------------+---------+ |
|   | | 0f217182b5af448c988f5464c706a337 | admin  | |
|   | | 1579d0526c8b4cf0ba1158960054fde0 | neutron | |
|   | | 408d6f8e000847a3a9a0f799a1ea2ef6 | hqs   | |
|   | | 560d1dca91184856822e3750ea2f4afb | nova  | |
|   | | 5ca7355fbe4f4b87b352a72f9c4b4a66 | cinder | |
|   | | 93443c8fc497495e8bb9033a1a52fc1d | demo  | |
|   | | d5bcfce4e83d4ef696bcd87599399429 | swift  | |
|   | | e255b170101c41d3b839dbb013daef02 | glance | |
|   | +----------------------------------+---------+ |
|   |# 查詢hqs用戶詳細(xì)信息 |
|   | [root@controller ~]# openstack user show hqs |
|   | +-----------+----------------------------------+ |
|   | | Field   | Value              | |
|   | +-----------+----------------------------------+ |
|   | | domain_id | 90f55d85d1824e2ca27318eefc57535e | |
|   | | email   | hqs@example.com         | |
|   | | enabled  | True               | |
|   | |id    | 408d6f8e000847a3a9a0f799a1ea2ef6 | |
|   | | name   | hqs               | |
|   | +-----------+----------------------------------+ |
|   |# 查詢當(dāng)前openstack平臺(tái)所有項(xiàng)目 |
|   | [root@controller ~]# openstack project list |
|   | +----------------------------------+---------+ |
|   | | ID                | Name  | |
|   | +----------------------------------+---------+ |
|   | | 015510f69fd74453a700a529b7bee827 | demo  | |
|   | | 168c9d9e5cf448c2a3dab6335590566a | service | |
|   | | 386dbfcf77e444c7872e4e23d5829fcc | admin  | |
|   | | b66f515463e54b229b1d61d9313717ff | acme  | |
|   | +----------------------------------+---------+ |
|   |# 查詢acme項(xiàng)目詳情 |
|   | [root@controller ~]# openstack project show acme |
|   | +-------------+----------------------------------+ |
|   | | Field    | Value              | |
|   | +-------------+----------------------------------+ |
|   | | description |                 | |
|   | | domain_id  | 90f55d85d1824e2ca27318eefc57535e | |
|   | | enabled   | True               | |
|   | |id     | b66f515463e54b229b1d61d9313717ff | |
|   | | is_domain  | False              | |
|   | | name    | acme               | |
|   | | parent_id  | 90f55d85d1824e2ca27318eefc57535e | |
|   | +-------------+----------------------------------+ |
|   |# 查詢所有keystone角色 |
|   | [root@controller ~]# openstack role list |
|   | +----------------------------------+--------------+ |
|   | | ID                | Name     | |
|   | +----------------------------------+--------------+ |
|   | | 0190945cf6a84b60bb2f4631f85c30fa | compute-user | |
|   | | 4c438257d4a24e4aa4d4fcbeff248bce | user     | |
|   | | d8ac2f3e57664b7abee701d82c9bbf16 | admin    | |
|   | +----------------------------------+--------------+ |
|   |# 查詢compute-user角色詳細(xì)信息 |
|   | [root@controller ~]# openstack role show compute-user |
|   | +-----------+----------------------------------+ |
|   | | Field   | Value              | |
|   | +-----------+----------------------------------+ |
|   | | domain_id | None               | |
|   | |id    | 0190945cf6a84b60bb2f4631f85c30fa | |
|   | | name   | compute-user           | |
|   | +-----------+----------------------------------+ |
|   |# 查看平臺(tái)所有服務(wù)所使用的端點(diǎn)地址 |
|   | [root@controller ~]# openstack endpoint list |
|   | +------------+-----------+--------------+--------------+---------+-----------+---------------+ |
|   | | ID     | Region  | Service Name | Service Type | Enabled | Interface | URL      | |
|   | +------------+-----------+--------------+--------------+---------+-----------+---------------+ |
|   | | 14f90cb0cb | RegionOne | nova     | compute   | True  | internal | http://contro | |
|   | .... |

	

	五、Nova組件詳解

	計(jì)算節(jié)點(diǎn)通過Nova Computer進(jìn)行虛擬機(jī)創(chuàng)建，通過libvirt調(diào)用kvm創(chuàng)建虛擬機(jī)，nova之間通信通過rabbitMQ隊(duì)列進(jìn)行通信。

	Nova位于Openstack架構(gòu)的中心，其他服務(wù)或者組件（比如Glance、Cinder、Neutron等）對(duì)它提供支持，另外它本身的架構(gòu)也比較復(fù)雜。

	作用：

	?

	1. Nova是OpenStack最核心的服務(wù)模塊，負(fù)責(zé)管理和維護(hù)云計(jì)算環(huán)境的計(jì)算資源，負(fù)責(zé)整個(gè)云環(huán)境虛擬機(jī)生命周期的管理。

	?

	2. Nova是OpenStack的計(jì)算服務(wù)，負(fù)責(zé)維護(hù)和管理的網(wǎng)絡(luò)和存儲(chǔ)，提供計(jì)算服務(wù)。

	https://www.cnblogs.com/mh20131118/p/12939358.html

	https://www.cnblogs.com/linuxk/p/9454258.html

	1、安全組相關(guān)操作：

	
|   |   |
| --- | --- |
|   | nova |
|   |   secgroup-add-default-rule  Add a rule to thesetof rules that will be |
|   |                 added to the'default'security groupfornew |
|   |                 tenants (nova-network only). |
|   |   secgroup-add-group-rule   Add asourcegroup rule to a security group. |
|   |   secgroup-add-rule      Add a rule to a security group. |
|   |   secgroup-create       Create a security group. |
|   |   secgroup-delete       Delete a security group. |
|   |   secgroup-delete-default-rule |
|   |                 Delete a rule from thesetof rules that will |
|   |                 be added to the'default'security groupfor|
|   |                 new tenants (nova-network only). |
|   |   secgroup-delete-group-rule Delete asourcegroup rule from a security |
|   |                 group. |
|   |   secgroup-delete-rule    Delete a rule from a security group. |
|   |   secgroup-list        List securitygroupsforthe current tenant. |
|   |   secgroup-list-default-rules |
|   |                 List rules that will be added to the'default'|
|   |                 security groupfornew tenants. |
|   |   secgroup-list-rules     List rulesfora security group. |
|   |   secgroup-update       Update a security group. |
|   |   |
|   |# 安全組查看： |
|   | [root@controller ~]# nova secgroup-list |
|   | +--------------------------------------+---------+------------------------+ |
|   | | Id                  | Name  | Description      | |
|   | +--------------------------------------+---------+------------------------+ |
|   | | 486eaa38-8e3d-4214-96bc-e6fee9b81be6 | default | Default security group | |
|   | +--------------------------------------+---------+------------------------+ |
|   |   |
|   |# 安全組創(chuàng)建 |
|   | [root@controller ~]# nova secgroup-create hqs'Most great security group'|
|   | +--------------------------------------+------+---------------------------+ |
|   | | Id                  | Name | Description        | |
|   | +--------------------------------------+------+---------------------------+ |
|   | | 1f2e9304-2fa0-45ac-a407-9816c72a1190 | hqs | Most great security group | |
|   | +--------------------------------------+------+---------------------------+ |
|   |   |
|   |# 安全組更新 |
|   | [root@controller ~]# nova secgroup-update 218faa36-c250-40d5-9775-534049e5771a hqs111'One of the most great security group '|
|   | +--------------------------------------+--------+---------------------------------------+ |
|   | | Id                  | Name  | Description              | |
|   | +--------------------------------------+--------+---------------------------------------+ |
|   | | 218faa36-c250-40d5-9775-534049e5771a | hqs111 | One of the most great security group | |
|   | +--------------------------------------+--------+---------------------------------------+ |
|   |   |
|   |# 安全組刪除 |
|   | [root@controller ~]# nova secgroup-delete hqs111 |
|   |   |
|   |# 安全組規(guī)則查看 |
|   | [root@controller ~]# nova secgroup-list-rules hqs |
|   | +-------------+-----------+---------+----------+--------------+ |
|   | | IP Protocol | From Port | To Port | IP Range | Source Group | |
|   | +-------------+-----------+---------+----------+--------------+ |
|   | +-------------+-----------+---------+----------+--------------+ |
|   | [root@controller ~]# nova secgroup-list-rules default |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | IP Protocol | From Port | To Port | IP Range | Source Group | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | tcp     | 1     | 65535  | 0.0.0.0/0 |       | |
|   | | udp     | 1     | 65535  | 0.0.0.0/0 |       | |
|   | | icmp    | -1    | -1   | 0.0.0.0/0 |       | |
|   | |       |      |     |      | default   | |
|   | |       |      |     |      | default   | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   |   |
|   |# 安全組規(guī)則添加 |
|   | [root@controller ~]# nova secgroup-add-rule hqs icmp -1 -1 0.0.0.0/0 |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | IP Protocol | From Port | To Port | IP Range | Source Group | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | icmp    | -1    | -1   | 0.0.0.0/0 |       | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | [root@controller ~]# nova secgroup-add-rule hqs udp 1 65535 0.0.0.0/0 |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | IP Protocol | From Port | To Port | IP Range | Source Group | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | udp     | 1     | 65535  | 0.0.0.0/0 |       | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | [root@controller ~]# nova secgroup-add-rule hqs tcp 1 65535 0.0.0.0/0 |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | IP Protocol | From Port | To Port | IP Range | Source Group | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | tcp     | 1     | 65535  | 0.0.0.0/0 |       | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   |   |
|   |# 安全組規(guī)則刪除 |
|   | [root@controller ~]# nova secgroup-delete-rule hqs icmp -1 -1 0.0.0.0/0 |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | IP Protocol | From Port | To Port | IP Range | Source Group | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | icmp    | -1    | -1   | 0.0.0.0/0 |       | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | [root@controller ~]# nova secgroup-list-rules hqs |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | IP Protocol | From Port | To Port | IP Range | Source Group | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   | | udp     | 1     | 65535  | 0.0.0.0/0 |       | |
|   | | tcp     | 1     | 65535  | 0.0.0.0/0 |       | |
|   | +-------------+-----------+---------+-----------+--------------+ |
|   |   |

	

	2、云主機(jī)類型操作

	
|   |   |
| --- | --- |
|   | nova |
|   | flavor-access-add      Add flavor accessforthe given tenant. |
|   | flavor-access-list     Print access information about the given |
|   | flavor. |
|   | flavor-access-remove    Remove flavor accessforthe given tenant. |
|   | flavor-create        Create a new flavor. |
|   | flavor-delete        Delete a specific flavor |
|   | flavor-key         Set orunsetextra_specfora flavor. |
|   | flavor-list         Print a list of available'flavors'(sizes of |
|   | servers). |
|   | flavor-show         Show details about the given flavor. |
|   |   |
|   |# 云主機(jī)類型列表查看 |
|   | [root@controller ~]# nova flavor-list |
|   | +--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+ |
|   | | ID                  | Name   | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public | |
|   | +--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+ |
|   | | 1                  | m1.tiny  | 512    | 1  | 0     |   | 1   | 1.0     | True   | |
|   | | 2                  | m1.small | 2048   | 20  | 0     |   | 1   | 1.0     | True   | |
|   | | 3                  | m1.medium | 4096   | 40  | 0     |   | 2   | 1.0     | True   | |
|   | | 4                  | m1.large | 8192   | 80  | 0     |   | 4   | 1.0     | True   | |
|   | | 5                  | m1.xlarge | 16384   | 160 | 0     |   | 8   | 1.0     | True   | |
|   | | 7645393e-4f46-473a-85bf-6ea69669dac2 | m1-hqs  | 512    | 10  | 0     |   | 1   | 1.0     | True   | |
|   | +--------------------------------------+-----------+-----------+------+-----------+------+-------+-------------+-----------+ |
|   |   |
|   |# 云主機(jī)類型添加 |
|   | [root@controller ~]# nova flavor-create m1.hqs 6 1024 10 1 |
|   | +----+--------+-----------+------+-----------+------+-------+-------------+-----------+ |
|   | | ID | Name  | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public | |
|   | +----+--------+-----------+------+-----------+------+-------+-------------+-----------+ |
|   | | 6 | m1.hqs | 1024   | 10  | 0     |   | 1   | 1.0     | True   | |
|   | +----+--------+-----------+------+-----------+------+-------+-------------+-----------+ |
|   |   |
|   |# 云主機(jī)類型詳情查看 |
|   | [root@controller ~]# nova flavor-show m1.hqs |
|   | +----------------------------+--------+ |
|   | | Property          | Value | |
|   | +----------------------------+--------+ |
|   | | OS-FLV-DISABLED:disabled  | False | |
|   | | OS-FLV-EXT-DATA:ephemeral | 0   | |
|   | | disk            | 10   | |
|   | | extra_specs        | {}   | |
|   | |id            | 6   | |
|   | | name            | m1.hqs | |
|   | | os-flavor-access:is_public | True  | |
|   | | ram            | 1024  | |
|   | | rxtx_factor        | 1.0  | |
|   | | swap            |    | |
|   | | vcpus           | 1   | |
|   | +----------------------------+--------+ |
|   |   |
|   |# 云主機(jī)類型刪除 |
|   | [root@controller ~]# nova flavor-delete m1-hqs |

	

	3、云主機(jī)實(shí)例操作

	
|   |   |
| --- | --- |
|   |# 實(shí)例列表查看 |
|   | nova list |
|   |   |
|   |# 實(shí)例詳情查看 |
|   | nova show  |
|   |   |
|   |# 實(shí)例創(chuàng)建 |
|   | nova boot <實(shí)例名稱> |
|   |# 可選參數(shù)： |
|   | --flavor        虛擬機(jī)類型 |
|   | --image         可選用的鏡像 |
|   | --image-with    鏡像的元數(shù)據(jù)屬性 |
|   | --boot-volume    啟動(dòng)邏輯卷的ID |
|   | --snapshot    快照. |
|   | --min-count      Boot at least  servers (limited by |
|   | quota). |
|   | --max-count      Boot up to  servers (limited by |
|   | quota). |
|   | --meta       元數(shù)據(jù)Record arbitrary key/value metadata to |
|   | /meta_data.json on the metadata server. Can be |
|   | specified multipletimes. |
|   | --file   文件Store arbitrary files from  locally |
|   | to  on the new server. Limited by |
|   | the injected_files quota value. |
|   | --key-name      密鑰名稱Key name of keypair that should be created |
|   | earlier with thecommandkeypair-add. |
|   | --user-data     注入的用戶數(shù)據(jù)user data file to pass to be exposed by the |
|   | metadata server. |
|   | --availability-zone  |
|   | 可用域The availability zoneforserver placement. |
|   | --security-groups  |
|   | 安全組Comma separated list of security group names. |
|   | --block-device-mapping  |
|   | 塊存儲(chǔ)格式化Block device mappinginthe format =:::. |
|   | --block-device key1=value1[,key2=value2...]  塊設(shè)備參數(shù) |
|   | --swap       交換空間大小Create and attach alocalswap block device of |
|   |  MB. |
|   | --ephemeral size=[,format=] |
|   | 連接塊存儲(chǔ)的大小Create and attach alocalephemeral block |
|   | device of  GB and format it to . |
|   | --hint       自定義數(shù)據(jù)Send arbitrary key/value pairs to the |
|   | schedulerforcustom use. |
|   | --nic  |
|   | 配置網(wǎng)絡(luò)Create a NIC on the server. Specify option |
|   | multipletimesto create multiple NICs. net- |
|   |id: attach NIC to network with this UUID net- |
|   | name: attach NIC to network with this name |
|   | (either port-id or net-id or net-name must be |
|   | provided), v4-fixed-ip: IPv4 fixed addressfor|
|   | NIC (optional), v6-fixed-ip: IPv6 fixed |
|   | addressforNIC (optional), port-id: attach |
|   | NIC to port with this UUID (either port-id or |
|   | net-id must be provided). |
|   | --config-drive     驅(qū)動(dòng)配置Enable config drive. |
|   | --poll            顯示創(chuàng)建進(jìn)度Report the new server boot progressuntilit |
|   | completes. |
|   | --admin-pass      Admin passwordforthe instance. |
|   | --access-ip-v4     Alternative access IPv4 of the instance. |
|   | --access-ip-v6     Alternative access IPv6 of the instance. |
|   | --description   Descriptionforthe server. (Supported by API |
|   | versions'2.19'-'2.latest') |
|   |   |
|   |   |
|   |# 1、查看鏡像 |
|   | glance image-list |
|   |# 2、查看規(guī)格 |
|   | nova flavor-list |
|   |# 3、查看安全組 |
|   | nova secgroup-list |
|   |# 4、查看可用的網(wǎng)絡(luò) |
|   | neutron net-list |
|   |   |
|   | nova boot   |
|   | --image centos7.2    |
|   | --availability-zone nova  |
|   | --flavor m1.hqs   |
|   | --security-groups hqs  |
|   | --nic net-id=64306052-bcec-4209-ac4c-45b9d2de4dde  |
|   | caocao-server1 |
|   |   |
|   |# 5、實(shí)例創(chuàng)建 |
|   | [root@controller images]# nova boot test-server --image centos7.2 --flavor m1.lxh --availability-zone nova --security-groups hqs --nic net-id=451fd2af-e1eb-4437-bf71-53b5f91c10b5 |
|   | +--------------------------------------+--------------------------------------------------+ |
|   | | Property               | Value                      | |
|   | +--------------------------------------+--------------------------------------------------+ |
|   | | OS-DCF:diskConfig          | MANUAL                      | |
|   | | OS-EXT-AZ:availability_zone     | nova                       | |
|   | | OS-EXT-SRV-ATTR:host         | -                        | |
|   | | OS-EXT-SRV-ATTR:hostname       | test-server                   | |
|   | | OS-EXT-SRV-ATTR:hypervisor_hostname | -                        | |
|   | | OS-EXT-SRV-ATTR:instance_name    | instance-0000000d                | |
|   | | OS-EXT-SRV-ATTR:kernel_id      |                         | |
|   | | OS-EXT-SRV-ATTR:launch_index     | 0                        | |
|   | | OS-EXT-SRV-ATTR:ramdisk_id      |                         | |
|   | | OS-EXT-SRV-ATTR:reservation_id    | r-zoria5fn                    | |
|   | | OS-EXT-SRV-ATTR:root_device_name   | -                        | |
|   | | OS-EXT-SRV-ATTR:user_data      | -                        | |
|   | | OS-EXT-STS:power_state        | 0                        | |
|   | | OS-EXT-STS:task_state        | scheduling                    | |
|   | | OS-EXT-STS:vm_state         | building                     | |
|   | | OS-SRV-USG:launched_at        | -                        | |
|   | | OS-SRV-USG:terminated_at       | -                        | |
|   | | accessIPv4              |                         | |
|   | | accessIPv6              |                         | |
|   | | adminPass              | ejFD96k8DUkW                   | |
|   | | config_drive             |                         | |
|   | | created               | 2021-10-19T0245Z               | |
|   | | description             | -                        | |
|   | | flavor                | m1.lxh (111)                   | |
|   | | hostId                |                         | |
|   | | host_status             |                         | |
|   | |id                 | 22d0a54b-2a6f-4ea8-8729-dc07055c19e5       | |
|   | | image                | centos7.2 (8aec8782-c6af-41d8-a225-ada5a2af13dc) | |
|   | | key_name               | -                        | |
|   | | locked                | False                      | |
|   | | metadata               | {}                        | |
|   | | name                 | test-server                   | |
|   | | os-extended-volumes:volumes_attached | []                        | |
|   | | progress               | 0                        | |
|   | | security_groups           | hqs                       | |
|   | | status                | BUILD                      | |
|   | | tenant_id              | 386dbfcf77e444c7872e4e23d5829fcc         | |
|   | | updated               | 2021-10-19T0255Z               | |
|   | | user_id               | 0f217182b5af448c988f5464c706a337         | |
|   | +--------------------------------------+--------------------------------------------------+ |
|   |   |
|   |# 實(shí)例停止 |
|   | [root@controller ~]# nova stop hqs_server |
|   | Request to stop server hqs_server has been accepted. |
|   |   |
|   |# 實(shí)例啟動(dòng) |
|   | [root@controller ~]# nova start hqs_server |
|   | Request to start server hqs_server has been accepted. |
|   |   |
|   |# 實(shí)例重啟 |
|   | [root@controller ~]# nova reboot hqs_server |
|   | Request to reboot server  has been accepted. |
|   | [root@controller ~]# nova list |
|   | +--------------------------------------+------------+---------+----------------+-------------+----------------------------------+ |
|   | | ID                  | Name    | Status | Task State   | Power State | Networks             | |
|   | +--------------------------------------+------------+---------+----------------+-------------+----------------------------------+ |
|   | | b51590fc-33cc-4d54-8e54-c0530e912d2b | hqs_server | REBOOT | reboot_started | Running   | int-gre=172.25.2.8        | |
|   | | c6cabeed-1176-4634-b493-b6be7c351a03 |test   | SHUTOFF | -       | Shutdown  | int-gre=172.25.2.3, 192.168.20.4 | |
|   | +--------------------------------------+------------+---------+----------------+-------------+----------------------------------+ |
|   |   |
|   |# 實(shí)例掛起 |
|   | [root@controller ~]# nova pausetest|
|   | [root@controller ~]# nova list |
|   | +--------------------------------------+------------+--------+----------------+-------------+----------------------------------+ |
|   | | ID                  | Name    | Status | Task State   | Power State | Networks             | |
|   | +--------------------------------------+------------+--------+----------------+-------------+----------------------------------+ |
|   | | b51590fc-33cc-4d54-8e54-c0530e912d2b | hqs_server | REBOOT | reboot_started | Running   | int-gre=172.25.2.8        | |
|   | | c6cabeed-1176-4634-b493-b6be7c351a03 |test   | PAUSED | -       | Paused   | int-gre=172.25.2.3, 192.168.20.4 | |
|   | +--------------------------------------+------------+--------+----------------+-------------+----------------------------------+ |
|   |   |
|   |# 實(shí)例刪除 |
|   | [root@controller ~]# nova delete hqs_server |
|   | Request to delete server hqs_server has been accepted. |
|   | [root@controller ~]# nova list |
|   | +--------------------------------------+------+--------+------------+-------------+----------------------------------+ |
|   | | ID                  | Name | Status | Task State | Power State | Networks             | |
|   | +--------------------------------------+------+--------+------------+-------------+----------------------------------+ |
|   | | c6cabeed-1176-4634-b493-b6be7c351a03 |test| PAUSED | -     | Paused   | int-gre=172.25.2.3, 192.168.20.4 | |
|   | +--------------------------------------+------+--------+------------+-------------+----------------------------------+ |

	

	4、浮動(dòng)IP

	
|   |   |
| --- | --- |
|   | nova |
|   | floating-ip-associate    Associate a floating IP address to a server. |
|   | floating-ip-bulk-create   Bulk create floating IPs |
|   | by range (nova-network only). |
|   | floating-ip-bulk-delete   Bulk delete floating IPs by range (nova- |
|   | network only). |
|   | floating-ip-bulk-list    List all floating IPs (nova-network only). |
|   | floating-ip-create     Allocate a floating IPforthe current tenant. |
|   | floating-ip-delete     De-allocate a floating IP. |
|   | floating-ip-disassociate  Disassociate a floating IP address from a |
|   | server. |
|   | floating-ip-list      List floating IPs. |
|   | floating-ip-pool-list    List all floating IP pools. |
|   |   |
|   |# 創(chuàng)建浮動(dòng)IP |
|   |# 語(yǔ)法：nova floating-ip-create  |
|   | [root@controller nova]# nova floating-ip-create net-gre |
|   | +--------------------------------------+--------------+-----------+----------+---------+ |
|   | | Id                  | IP      | Server Id | Fixed IP | Pool  | |
|   | +--------------------------------------+--------------+-----------+----------+---------+ |
|   | | fcb2439d-ba4f-4467-ad60-34726d57aba4 | 192.168.37.5 | -     | -    | net-gre | |
|   | +--------------------------------------+--------------+-----------+----------+---------+ |
|   |   |
|   |# 浮動(dòng)IP的列表信息 |
|   | [root@controller nova]# nova floating-ip-list |
|   | +--------------------------------------+--------------+-----------+----------+---------+ |
|   | | Id                  | IP      | Server Id | Fixed IP | Pool  | |
|   | +--------------------------------------+--------------+-----------+----------+---------+ |
|   | | fcb2439d-ba4f-4467-ad60-34726d57aba4 | 192.168.37.5 | -     | -    | net-gre | |
|   | +--------------------------------------+--------------+-----------+----------+---------+ |
|   |   |
|   |# 浮動(dòng)IP地址池信息 |
|   | [root@controller nova]# nova floating-ip-pool-list |
|   | +---------+ |
|   | | name  | |
|   | +---------+ |
|   | | net-gre | |
|   | +---------+ |
|   |   |
|   |# 查看浮動(dòng)IP詳細(xì)信息 |
|   | [root@controller nova]# openstack ip floating show 192.168.37.5 |
|   | +---------------------+--------------------------------------+ |
|   | | Field        | Value                | |
|   | +---------------------+--------------------------------------+ |
|   | | description     |                   | |
|   | | dns_domain     |                   | |
|   | | dns_name      |                   | |
|   | | fixed_ip_address  | None                 | |
|   | | floating_ip_address | 192.168.37.5             | |
|   | | floating_network_id | 847163a4-65dd-456e-a839-4f810cce80cf | |
|   | |id         | fcb2439d-ba4f-4467-ad60-34726d57aba4 | |
|   | | port_id       | None                 | |
|   | | project_id     | 386dbfcf77e444c7872e4e23d5829fcc   | |
|   | | router_id      | None                 | |
|   | | status       | DOWN                 | |
|   | +---------------------+--------------------------------------+ |
|   |   |
|   |# 浮動(dòng)ip關(guān)聯(lián)給實(shí)例 |
|   |# 語(yǔ)法：nova floating-ip-associate [--fixed-address ]  
 |
|   |# 參數(shù)： |
|   |#     Name or ID of server.（nova list） |
|   |# 
    IP Address.(nova floating-ip-list) |
|   | [root@controller nova]# nova floating-ip-associate caocao-server1 192.168.37.5 |
|   | [root@controller nova]# nova list |
|   | +--------------------------------------+----------------+--------+------------+-------------+---------------------------------+ |
|   | | ID                  | Name      | Status | Task State | Power State | Networks            | |
|   | +--------------------------------------+----------------+--------+------------+-------------+---------------------------------+ |
|   | | e2c75e51-1a3b-4a0b-8765-d7ff6e8188e3 | caocao-server1 | ACTIVE | -     | Running   | int-gre=10.10.0.3, 192.168.37.5 | |
|   | +----------------------- |
|   |   |
|   |# 浮動(dòng)IP解除關(guān)聯(lián)實(shí)例 |
|   |# 語(yǔ)法：nova floating-ip-disassociate  
 |
|   | [root@controller nova]# nova floating-ip-disassociate caocao-server1 192.168.37.5 |
|   | [root@controller nova]# nova list |
|   | +--------------------------------------+----------------+--------+------------+-------------+-------------------+ |
|   | | ID                  | Name      | Status | Task State | Power State | Networks     | |
|   | +--------------------------------------+----------------+--------+------------+-------------+-------------------+ |
|   | | e2c75e51-1a3b-4a0b-8765-d7ff6e8188e3 | caocao-server1 | ACTIVE | -     | Running   | int-gre=10.10.0.3 | |
|   | +--------------------------------------+----------------+--------+------------+-------------+-------------------+ |
|   |   |
|   |# 解除關(guān)聯(lián)并刪除浮動(dòng)IP |
|   | [root@controller nova]# nova floating-ip-associate caocao-server1 192.168.37.5 |
|   | [root@controller nova]# nova floating-ip-delete 192.168.37.5 |
|   | [root@controller nova]# nova list |
|   | +--------------------------------------+----------------+--------+------------+-------------+-------------------+ |
|   | | ID                  | Name      | Status | Task State | Power State | Networks     | |
|   | +--------------------------------------+----------------+--------+------------+-------------+-------------------+ |
|   | | e2c75e51-1a3b-4a0b-8765-d7ff6e8188e3 | caocao-server1 | ACTIVE | -     | Running   | int-gre=10.10.0.3 | |
|   | +--------- |
|   | [root@controller nova]# nova floating-ip-list |
|   | +----+----+-----------+----------+------+ |
|   | | Id | IP | Server Id | Fixed IP | Pool | |
|   | +----+----+-----------+----------+------+ |
|   | +----+----+-----------+----------+------+ |

	

	5、密鑰管理

	
|   |   |
| --- | --- |
|   | nova |
|   | keypair-add         Create a new key pairforuse with servers. |
|   | keypair-delete       Delete keypair given by its name. (Supported |
|   | by API versions'2.0'-'2.latest') [hint: use |
|   |'--os-compute-api-version'flag to showhelp|
|   | messageforproper version] |
|   | keypair-list        Print a list of keypairsfora user (Supported |
|   | by API versions'2.0'-'2.latest') [hint: use |
|   |'--os-compute-api-version'flag to showhelp|
|   | messageforproper version] |
|   | keypair-show        Show details about the given keypair. |
|   | (Supported by API versions'2.0'-'2.latest') |
|   | [hint: use'--os-compute-api-version'flag to |
|   | showhelpmessageforproper version] |
|   |   |
|   |# 查看密鑰列表 |
|   | [root@controller ~]# nova keypair-list |
|   | +------+------+-------------------------------------------------+ |
|   | | Name | Type | Fingerprint                   | |
|   | +------+------+-------------------------------------------------+ |
|   | |test| ssh | 5cd8b9cbeb52048c:1e | |
|   | +------+------+-------------------------------------------------+ |
|   |   |
|   |# 查看密鑰詳情 |
|   | [root@controller ~]# nova keypair-showtest|
|   | +-------------+-------------------------------------------------+ |
|   | | Property  | Value                      | |
|   | +-------------+-------------------------------------------------+ |
|   | | created_at | 2021-10-28T1412.000000           | |
|   | | deleted   | False                      | |
|   | | deleted_at | -                        | |
|   | | fingerprint | 5cd8b9cbeb52048c:1e | |
|   | |id     | 1                        | |
|   | | name    |test                      | |
|   | |type    | ssh                       | |
|   | | updated_at | -                        | |
|   | | user_id   | 0f217182b5af448c988f5464c706a337        | |
|   | +-------------+-------------------------------------------------+ |
|   | Public key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDc/qEc2ihvE7aLgSVH0lt5PDBwEYXW0CqMx8sGJPT1p3r0mxdJiti9pJxBRoX+oOhA/LFssaOGvtHDK79Njs3HynrXkxvKo6UfmBNQzt2z5C3nTP2U17JY2wrOh7YyYdhuuRirCLNHQk4hM1YY9BbPrCLjLlQ8Gms6vdgDCgT1gXuRppBTfQKrIKKRk6d5vIqBMoGM3fCaM34DiqwOS/uq8gQM8T/io9h6XrTKWznmZgzaFJ2S3XUZhAliSEgkraxZIM8L3QWumMlBVryYVUX6QEKv29hNWYZF/bxUqfQx50vBuIfHlKgkcccAVDy6OoZNmd6T1rdJXEdW+MWobHu7 Generated-by-Nova |
|   |   |
|   |# 創(chuàng)建密鑰 |
|   | [root@controller ~]# nova keypair-add hqs --key-type ssh |
|   | -----BEGIN RSA PRIVATE KEY----- |
|   | MIIEpwIBAAKCAQEAw3YnZk1ej5j3+CjpWalgmVWxrdAVZGfpC3Qklz+0RW7p4nTn |
|   | VlkGL7mWEgx7fmRaBzZuwUuSuvFB79zWhGZqh7Dt0Zeibyy48u3AtZtDY1ZVkvss |
|   | Vq7zOdUgg+2C8Em7KTAXsuf1I7KPxgJHX7j9pluN8zBQKiYYi4K+RPCVtisw3ev0 |
|   | Ey5vi7e1IuUawXpjWnGe+/yzCZWgL8X2uhyYH0cJUmO3PbFuX0aoZr/JsLbMfkeL |
|   | 0hCDkpKgkx8L/VD6C8FW+Z3mfJGxJtGwakb+BGyOYZ3j/Sv7bh03QKPgViqJ9CGa |
|   | WL5/y8dYmFLYM45Gb60FLWPSHWLmH9SFnmV7UwIDAQABAoIBABkiGUDbU/xs8/2x |
|   | 7Qd9cxFkZntuFUIa5ml1nrrgEyMWdvaKh7Cfs97xIy3g8wQ2jSj+Q9GRESX+nbbl |
|   | E6RksvANvRbFQ7q96m46ShxQAaNFV62VpIbk6huWnx63rK2PHYTXTUTQ9MGJVVll |
|   | s53IYL1CaodJwBUbXu6ZejPNJ8MLoyom7cH89uaP5K8Ej7pHObaxMBCkSylU0vcG |
|   | qJp0Gu1NbnQ823EYm5QeEqUfG8xLyXKOvAq3scZHg5hqdD6SDVOYm3uQM8TF8zkY |
|   | SSTYrwktj7g7vP6ZQ0zY3k/s/zxMbTIurwwNm8L93tPcgtJUMw+fPYu3OHr9nhBt |
|   | aeFJ6AkCggCBANoJLHA6j5Jgj0uLy+ur8BmU8qSCJ7Nmx3JZFj2ELoZcLzjniHqH |
|   | 14QHqnBgFxaUAvmpy8wCMnIKrk83FdEkgk2vwSlsr1uEiz+MNHKqapWwiezR87HB |
|   | 5XsgtHpOsBlTpzQlOL7TJX7kCtZYgyGbQJvLMeek+cqy2YsNp28AgFulAoIAgQDl |
|   | fr5dBmEMBtTVaAjZFlyhJIXpf93QeC9KTtCLJ0QXAVPpCLlnulC8W4JfuZDTFqOr |
|   | gnx1y84DfyoZ4/K6zPNfqguRRzE2sxMNDLNZeyZiA10uZwEh+AJtCf54FU2xZtVP |
|   | 1eZ7I4QMR2jaDSj5nWgF90DYHoWLxOEeIVnTnFoplwKCAIANyxrGls3SYs1t6BAk |
|   | fqIX3DZldd5xGQVxFHW1upD+6wIJxYv6xHE75wg/R7TuNrrhdH5yD4mFcWuJk2CL |
|   | 9JVRuNatejS1w3LTuFjxEBriEWMIWlfiXPPZkD4aprO5RnODdv9aAx2SI3cUDFFv |
|   | ZNT3hilIEEXFLv9YLqry+MMmCQKCAIBpG+OUN5e7KmXQWBW1V8iVBWVPzICLOoBu |
|   | SCq7kQBeiP0lfhlsqKjRnBfaP+NUysmrg9f9G5r/fv6JXR2O8M+GwRsLLtAbfWj8 |
|   | URTTptOtkFzdI9Ag/rYdurYRybAL0E1ig1VMkLep6Ard06kwqic6lEPeuBvyJ/nz |
|   | EtNRWArzgQKCAIAQDXQbP+20nzHoWqy1sFYIpOYrC+pZGX3tZb8DfAKrhrL+FkGe |
|   | PSe6bNwgWVDEUwTyvoPUexvAVi7nZ1sqMw/Ar+KxCXcti+dzZZZa3typLQMceOr2 |
|   | wFfpNMT/Kq2DTrgkXN+jpFczv/R0kNn5bOB/DIm8JUeN44k97lMzIrD7TA== |
|   | -----END RSA PRIVATE KEY----- |
|   |   |
|   |# 刪除密鑰 |
|   | [root@controller ~]# nova keypair-list |
|   | +------+------+-------------------------------------------------+ |
|   | | Name | Type | Fingerprint                   | |
|   | +------+------+-------------------------------------------------+ |
|   | | hqs | ssh | e2e91d4552380db8:b9 | |
|   | |test| ssh | 5cd8b9cbeb52048c:1e | |
|   | +------+------+-------------------------------------------------+ |
|   | [root@controller ~]# nova keypair-delete hqs |
|   | [root@controller ~]# nova keypair-list |
|   | +------+------+-------------------------------------------------+ |
|   | | Name | Type | Fingerprint                   | |
|   | +------+------+-------------------------------------------------+ |
|   | |test| ssh | 5cd8b9cbeb52048c:1e | |
|   | +------+------+-------------------------------------------------+ |

	

	6、配額管理

	
|   |   |
| --- | --- |
|   |# 待補(bǔ)全 |
|   | [root@controller ~]# openstack quota show admin |
|   | +----------------------+----------------------------------+ |
|   | | Field        | Value              | |
|   | +----------------------+----------------------------------+ |
|   | | backup_gigabytes   | 1000               | |
|   | | backups       | 10                | |
|   | | cores        | 20                | |
|   | | firewall       | 10                | |
|   | | firewall_policy   | 10                | |
|   | | firewall_rule    | 100               | |
|   | | fixed-ips      | -1                | |
|   | | floating-ips     | 50                | |
|   | | gigabytes      | 1000               | |
|   | | health_monitor    | -1                | |
|   | | injected-file-size  | 10240              | |
|   | | injected-files    | 5                | |
|   | | injected-path-size  | 255               | |
|   | | instances      | 10                | |
|   | | key-pairs      | 100               | |
|   | | member        | -1                | |
|   | | network       | 10                | |
|   | | per_volume_gigabytes | -1                | |
|   | | pool         | 10                | |
|   | | port         | 50                | |
|   | | project       | 386dbfcf77e444c7872e4e23d5829fcc | |
|   | | properties      | 128               | |
|   | | ram         | 51200              | |
|   | | rbac_policy     | 10                | |
|   | | router        | 10                | |
|   | | secgroup-rules    | 100               | |
|   | | secgroups      | 10                | |
|   | | server_group_members | 10                | |
|   | | server_groups    | 10                | |
|   | | snapshots      | 10                | |
|   | | subnet        | 10                | |
|   | | subnetpool      | -1                | |
|   | | vip         | 10                | |
|   | | volumes       | 10                | |
|   | +----------------------+----------------------------------+ |

	

	六、Neutron網(wǎng)絡(luò)服務(wù)

	
|   |   |
| --- | --- |
|   |# 查看網(wǎng)絡(luò)列表信息 |
|   | [root@controller ~]# openstack network list |
|   | +--------------------------------------+---------+--------------------------------------+ |
|   | | ID                  | Name  | Subnets               | |
|   | +--------------------------------------+---------+--------------------------------------+ |
|   | | 847163a4-65dd-456e-a839-4f810cce80cf | net-gre | 757f4819-48aa-4026-aff2-8e78b4161691 | |
|   | | 64306052-bcec-4209-ac4c-45b9d2de4dde | int-gre | d3aa832b-8bcf-4a7b-9692-540b468a711b | |
|   | +--------------------------------------+---------+--------------------------------------+ |
|   |   |
|   |# 查看網(wǎng)絡(luò)詳細(xì)信息 |
|   | [root@controller ~]# openstack network show net-gre |
|   | +---------------------------+--------------------------------------+ |
|   | | Field           | Value                | |
|   | +---------------------------+--------------------------------------+ |
|   | | admin_state_up      | UP                  | |
|   | | availability_zone_hints  |                   | |
|   | | availability_zones    | nova                 | |
|   | | created_at        | 2021-10-18T1838         | |
|   | | description        |                   | |
|   | |id            | 847163a4-65dd-456e-a839-4f810cce80cf | |
|   | | ipv4_address_scope    | None                 | |
|   | | ipv6_address_scope    | None                 | |
|   | | is_default        | False                | |
|   | | mtu            | 1458                 | |
|   | | name           | net-gre               | |
|   | | port_security_enabled   | True                 | |
|   | | project_id        | 386dbfcf77e444c7872e4e23d5829fcc   | |
|   | | provider:network_type   | gre                 | |
|   | | provider:physical_network | None                 | |
|   | | provider:segmentation_id | 99                  | |
|   | | router_external      | Internal               | |
|   | | shared          | False                | |
|   | | status          | ACTIVE                | |
|   | | subnets          | 757f4819-48aa-4026-aff2-8e78b4161691 | |
|   | | tags           | []                  | |
|   | | updated_at        | 2021-10-18T1825         | |
|   | +---------------------------+--------------------------------------+ |
|   |   |
|   |# 創(chuàng)建網(wǎng)絡(luò) |
|   | [root@controller ~]# openstack network create int-gre-test --project admin |
|   | +---------------------------+--------------------------------------+ |
|   | | Field           | Value                | |
|   | +---------------------------+--------------------------------------+ |
|   | | admin_state_up      | UP                  | |
|   | | availability_zone_hints  |                   | |
|   | | availability_zones    |                   | |
|   | | created_at        | 2021-10-28T1407         | |
|   | | description        |                   | |
|   | | headers          |                   | |
|   | |id            | 8e16c3a3-53f2-4ab7-b77f-3f1c1bf22dc6 | |
|   | | ipv4_address_scope    | None                 | |
|   | | ipv6_address_scope    | None                 | |
|   | | mtu            | 1458                 | |
|   | | name           | int-gre-test             | |
|   | | port_security_enabled   | True                 | |
|   | | project_id        | 386dbfcf77e444c7872e4e23d5829fcc   | |
|   | | provider:network_type   | gre                 | |
|   | | provider:physical_network | None                 | |
|   | | provider:segmentation_id | 91                  | |
|   | | router_external      | Internal               | |
|   | | shared          | False                | |
|   | | status          | ACTIVE                | |
|   | | subnets          |                   | |
|   | | tags           | []                  | |
|   | | updated_at        | 2021-10-28T1407         | |
|   | +---------------------------+--------------------------------------+ |
|   |   |
|   |# 更新網(wǎng)絡(luò) |
|   | [root@controller ~]# openstack networkset int-gre-test --enable--name int-test-gre |
|   | [root@controller ~]# openstack network list |
|   | +--------------------------------------+--------------+--------------------------------------+ |
|   | | ID                  | Name     | Subnets               | |
|   | +--------------------------------------+--------------+--------------------------------------+ |
|   | | 847163a4-65dd-456e-a839-4f810cce80cf | net-gre   | 757f4819-48aa-4026-aff2-8e78b4161691 | |
|   | | 64306052-bcec-4209-ac4c-45b9d2de4dde | int-gre   | d3aa832b-8bcf-4a7b-9692-540b468a711b | |
|   | | 8e16c3a3-53f2-4ab7-b77f-3f1c1bf22dc6 | int-test-gre |                   | |
|   | +--------------------------------------+--------------+--------------------------------------+ |
|   | [root@controller ~]# openstack network show int-test-gre |
|   | +---------------------------+--------------------------------------+ |
|   | | Field           | Value                | |
|   | +---------------------------+--------------------------------------+ |
|   | | admin_state_up      | UP                  | |
|   | | availability_zone_hints  |                   | |
|   | | availability_zones    |                   | |
|   | | created_at        | 2021-10-28T1407         | |
|   | | description        |                   | |
|   | |id            | 8e16c3a3-53f2-4ab7-b77f-3f1c1bf22dc6 | |
|   | | ipv4_address_scope    | None                 | |
|   | | ipv6_address_scope    | None                 | |
|   | | mtu            | 1458                 | |
|   | | name           | int-test-gre             | |
|   | | port_security_enabled   | True                 | |
|   | | project_id        | 386dbfcf77e444c7872e4e23d5829fcc   | |
|   | | provider:network_type   | gre                 | |
|   | | provider:physical_network | None                 | |
|   | | provider:segmentation_id | 91                  | |
|   | | router_external      | Internal               | |
|   | | shared          | False                | |
|   | | status          | ACTIVE                | |
|   | | subnets          |                   | |
|   | | tags           | []                  | |
|   | | updated_at        | 2021-10-28T1404         | |
|   | +---------------------------+--------------------------------------+ |
|   |   |
|   |# 刪除網(wǎng)絡(luò) |
|   | [root@controller ~]# openstack network delete int-gre-test |

	

	鏈接：https://www.cnblogs.com/zhengyan6/p/16204860.html