OpenstackOcata基礎配置文檔

（版本號：1.0）

文件版本歷史

文件版本修訂口期/修訂人審核口期/審核人批準日期/批準人修訂說明

1.01.0版發(fā)布

目錄

1.環(huán)境準備......................................................................4

1.1物理硬件..............................................................................4

1.2基礎組件安裝：.......................................................................4

2.數(shù)據(jù)庫及消息中間件集群安裝配置...............................................6

2.1Mariadb安裝配置......................................................................6

2.2RabbitMQ集群安裝配置................................................................6

3.Openstack組彳牛集群配置.........................................................7

3.1安裝配置Keystone集群.................................................................7

3.2安裝配置glance集群..................................................................10

3.3安裝配置nova集群....................................................................13

3.4安裝配置neutron集群.................................................................22

3.5安裝Dashboard集群...................................................................28

3.6安裝配置cinder集群..................................................................30

5.配置/etc/chrony.conf文件

serverocataliburst

6.開啟服務并設為隨機啟動

#systemctlenablechronyd.service

#systemctlstartchronyd.service

7.驗證服務，在控制節(jié)點執(zhí)行

chronycsources

1.2.2Memcache安裝

略。

1.2.3配置安裝openstack0版源文件

X.安裝不同版本的openslack需要配置不同版本的組件安裝包，可以使用在線鏡像源，也可以自

己制作本地鏡像源，下載官網(wǎng)標準的0版安裝源文件

#yuminstallcentos-release-openstack-ocata

2.更新yum源:

#yumupdate（這里需要注意是否要更新系統(tǒng)包和yumupgrade的區(qū)別）

1.2.4安裝opensatckcIient包

#yumupgrade

在所有節(jié)點均需安裝:

#yuminstallpython-openstackclient

#yuminstallopenstack-selinux

5/37

2.數(shù)據(jù)庫及消息中間件集群安裝配置

2.1Mariadb安裝配置

1.安裝軟件包

#yuminstallmariadbmariadb-serverpython2-PyMqSQL

2?編輯/etc/f.d/f

[mysqld]

bind-address=1

default-storage-engine=innodb

innodb_file_per_table=on

max_connections=4696

collation-server=itf8_general_ci

character-set-server=utf8

3.啟動服務并設為隨機啟動

#systemctlenablemariadb.service

#systemctlstartmariadb.service

4.確保數(shù)據(jù)庫服務

#mysql_secure_installation

2.2RabbitMQ集群安裝配置

略。

6/37

3.Openstack組件集群配置

3.1安裝配置Keystone集群

1.使用root登錄mysql

$mysql-uroot-p

2.創(chuàng)建keystone數(shù)據(jù)庫

CREATEDATABASEkeystone;

3.向keystone數(shù)據(jù)庫授權

GRANTALLPRIVILEGESONkeystone.*TO'keystonelocalhost'\

IDENTIFIEDBY'KEYSTONE_DBPASS'；

GRANTALLPRIVILEGESONkeystone.*TO'keystone%'\

IDENTIFIEDBY'KEYSTONE_DBPASS'；

4.安裝軟件包

#yuminstallopenstack-keystonehttpdmod_wsgi

5.0c!fi/etc/kestone/keystone.conf文件

[database]

connection=

[token]

provider=fernet

6.初始化Identity服務數(shù)據(jù)庫

#su-s/bin/sh-c"keystone-managedb_sync"keystone

7.初始化Fernet密鑰庫

7/37

#keystone-managefernet_setup--keystone-userkeystone--keystone-grojpkeys

tone

#keystone-managecredential_setup--keystone-userkeystone--keystone-group

keystone

8.拉起Identity服務（取代之前版本創(chuàng)建keystoneendpoint）

#keystone-managebootstrap--bootstrap-passwordsuccess-S--bootstrap-admin-

urlhttp://ocatal:35357/v3/--bootstrap-internal-urlhttp://ocatal:5000/v3/-

-bootstrap-public-urlhttp://ocatal:5000/v3/--bootstrap-region-idRegionOne

9.配置ApacheHTTP服務，編輯/etc/httpd/conf/httpd.conf文件

ocatal

10.添力口/etc/hltpd/conf.d/wsgi-keystone.conf文件

#In-s/usr/share/keystone/wsgi-keystone.conf/etc/httpd/conf.d/

11.啟動服務

#systemctlenablehttpd.service

#systemctlstarthttpd.service

12.輸入賬戶信息

#exportOS_USERNAME=admin

#exportOS_PASSWORD=SUCCESS-SS

#exportOS_PROJECT_NAME=admin

#exportOS_USER_DOMAIN_NAME=Default

#exportOS_PROJECT_DOMAIN_NAME=Defau11

#exportOS_AUTH_URL=http://ocatal:35357/v3

#exportOS_IDENTIT￥_API_VERSION=3

13.創(chuàng)建senice項H

$openstackprojectcreate--domaindefault\

8/37

--description"ServiceProject"service

14.創(chuàng)建demo項目

$openstackprojectcreate--domaindefault\

--description"DeiroProject"demo

15.創(chuàng)建demo用戶

$openstackusercreate--domaindefault\

--password-promptdemo

16.創(chuàng)建user角色

$openstackrolecreateuser

17.向demo項目和用戶添加user角色

$openstackroleadd--projectdemo--userdemouser

18.取消臨時用的授權token機制

編輯/etc/keystone/keys(one-paste.ini文件，從[pipeline:public_api],[pipeline:adinin_api],

[pipeline:api_v3]中刪除admin_token_atuh。

19.創(chuàng)建環(huán)境腳本用于登錄admin賬戶。

exportOS_PRO：ECT_DOMAIN_NAME=default

exportOS_USER_DOMAIN_NAME=default

exportOS_PRO3ECT_NAME=admin

exportOS_USERNAME=admin

exportOS_PASSWORD=SUCCESS-SS

exportOS_AUTH_URL=http://controller:35357/v3

exportOS_IDENTITY_API_VERSION=3

exportOS_IMAGE_API_VERSION=2

9/37

3.2安裝配置glance集群

1.用root用戶登錄mysqI

$mysql-uroot-p

2.創(chuàng)建glance數(shù)據(jù)庫

CREATEDATABASEglance;

3?向glance數(shù)據(jù)庫授權

GRANTALLPRIVILEGESONglance.*TO'glancelocalhost'\

IDENTIFIEDBY'GLANCE_DBPASS'；

GRANTALLPRIVILEGESONglance.*TO'glance'@'%'\

IDENTIFIEDBY'GLANCE_DBPASS'；

4.載入admin身份

$.admin-openrc

5.創(chuàng)建glance用戶

$openstackusercreate--domaindefault--password-promptglance

6.向glancefH戶和service項Fl授予admin角色

$openstackroleadd--projectservice--userglanceadmin

7?創(chuàng)建glance服務實體

$openstackservicecreate--nameglance\

--description"OpenStackImage"image

8?倉II建Image服務APIendpoints

$openstackendpointcreate--regionRegionOne\

10/37

imagepublichttp://controller:9292

$openstackendpointcreate--regionRegionOne\

imageinternalhttp://controller:9292

$openstackendpointcreate--regionRegionOne\

imageadminhttp://controller:9292

9.安裝軟件包

#yuminstallopenstack-glance

10.配置/ctc/glancc/glance-api.conf文件

[DEFAULT]

debug=true

verbose=true

[database]

connection=mysql+pymysql://glance:GLANCE_DBPASS@ocatal/glance

[glance_store]

default_store=rbd

show_image_direct_url=True

stores=rbd

rbd_store_pool=images

rbd_store_user=glance

rbd_store_ceph_conf=/etc/ceph/ceph.conf

[keystone_authtoken；

auth_uri=http://ocatal:5000

auth_url=http://ocatal:35357

memcached_servers=ocatal:11211

auth_type=passworc

project_domain_name=default

user_domain_name=cefault

projcct_namc-service

11/37

username=glance

password=SUCCESS-ASS

[paste_deploy]

flavor=keystone

11.B￡?/etc/glance/glance-registry.conf文件

[DEFAULT]

debug=true

verbose=true

[database]

connection=mysql+pymysql://glance:GLANCE_DBPASS@ocatal/glance

[kpy<;tnnA_Authtokpn"

auth_uri=http://ocatal:5000

auth_url=http://ocatal:35357

memcached_servers=ocatal:11211

auth_type=passworc

project_domain_name=default

user_domain_name=cefault

project_name=service

username=glance

password=SUCCESS-ASS

12.初始化數(shù)據(jù)庫

ftsu-s/bin/sh-c"glance-managedb_sync"glance

13.啟動服務并設為隨機啟動

#systemctlenableopenstack-glance-api.serviceopenstack-glance-registry.ser

vice

#systemctlstartopenstack-glance-api.serviceopenstack-glance-registry.serv

ice

12/37

3.3安裝配置nova集群

3.3.1控制節(jié)點配置

創(chuàng)建nova數(shù)據(jù)庫

1.創(chuàng)建nova數(shù)據(jù)庫

ftmysql-uroot-pl234156

MariaDB[(none)]>CREATEDATABASEnova_api;

MariaDB[(none)]>CREATEDATABASEnova;

MariaDB[(none)]>CREATEDATABASEnova_cell0;

2.創(chuàng)建數(shù)據(jù)庫用戶并賦予權限

MariaDB[(none)]>GRANTALLPRIVILEGESONnova_api.*TO'novalocalhost'\

IDENTIFIEDBY'NOVA_DBPASS'；

MariaDB[(none)]>GRANTALLPRIVILEGESONnova_api.*TO'nova'?'%'\

IDENTIFIEDBY'NOVA_DBPASS';

MariaDB[(none)]>GRANTALLPRIVILEGESONnova.*TO'novalocalhost'\

IDENTIFIEDBY'NOVA_DBPASS'；

MariaDB[(none)]>GRANTALLPRIVILEGESONnova.*TO'nova'@'%'\

IDENTIFIEDBY'NOVA_DBPASS'；

MariaDB[(none)]>GRANTALLPRIVILEGESONnova_cell0.*TO'novalocalhost'\

IDENTIFIEDBY'NOVA_DBPASS'；

MariaDB[(none)]>GHANrALLPRiVlLfcGESONnova_celie.*10'nova'0'%'\

IDENTIFIEDBY'NOVA_DBPASS'；

3.3.1.2創(chuàng)建nova服務及賦予權限

1.創(chuàng)建nova用戶及賦予admin權限

13/37

#source/root/admin

#openstackusercreate--domaindefault--password-promptnova

#openstackroleadd--projectservice--usernovaadmin

2.創(chuàng)建nova服務

#openstackservicecreate--namenova--description"OpenStackCompute"comput

e

3.創(chuàng)建ComputeserviceAPIendpoints

#openstackendpointcreate--regionRegionOnecomputepublichttp://ocatal:87

74/v2.1/%\(tenant_id\)s

#openstackendpointcreate--regionRegionOnecomputeinternalhttp://ocatal:

8774/v2.l/%\(tenant_id\)s

#openstackendpointcreate--regionRegionOnecomputeadmin

4.創(chuàng)建Placement服務的用戶

#openstackusercreate--domaindefault--password-promptplacement

5.向Placement用戶加入service項目并添加admin角色

#openstackroleadd--projectservice--userplacementadmin

6.在服務目錄中添加placementapi

#openstackservicecreate--nameplacement--description"PlacementAPI"plac

ement

7.倉!l建placement的endpoint

$openstackendpointcreate--regionRegionOneplacementpublichttp://ocatal:

8778

$openstackendpointcreate--regionRegionOneplacementinternalhttp://ocata

1:8778

14/37

$openstackendpointcreate--regionRegionOneplacementadminhttp://ocatal:8

778

33.1.3安裝nova軟件及修改配置文件

1.安裝nova軟件包

#yuminstallopenstack-nova-apiopenstack-nova-conductor\

openstack-nova-consoleopenstack-nova-novncproxy\

openstack-nova-scheduleropenstack-nova-placement-api

2.配置文件nova.conf

[DEFAULT]

my_ip=8

enabled_apis=osapi_compute,metadata

transport_url=rabbit://openstack:RABBIT_PASS@ocatal

[api]

auth_strategy=keystone

[api_database]

connection=mysql+pymysql://nova:NOVA_DBPASS@ocatal/nova_api

[cinder]

os_region_name=RegionOne

[database]

connection=mysql+pymysql://nova:NOVA_DBPASS@ocatal/nova

[glance]

api_servers=http://ocatal:9292

[keystone_authtoken]

auth_uri=http://ocatal:5000/v3

auth_url=http:〃ocatal:35357八3

memcached_servers=ocatal:11211

auth_type=passworc

15/37

project_domain_name=Default

user_domain_name=Default

project_name=service

username=nova

password=NOVA_PASS

[neutron]

url=http://ocatal:9696

auth_url=http://ocatal:35357/v3

auth_type=passworc

project_domain_name=default

user_domain_name=cefault

region_name=RegiorOne

project_name=service

username=neutron

password=SUCCESS-ASS

service_metadata_proxy=true

metadata_proxy_shared_secret=METADATA_SECRET

[oslo_roncurrpncy]

lock_path=/var/lib/nova/tmp

[placement]

os_region_name=RegionOne

project_domain_name=Default

project_name=service

auth_type=passworc

user_domain_name=Default

auth_url=http://ocatal:35357/v3

username=placement

password=PLACEMENT_PASS

[scheduler]

discover_hosts_in_cells_interval-3600

16/37

[vnc]

enabled=true

vncserver_lister=$my_ip

vncserver_proxyclient_address=$my_ip

3.由于發(fā)版錯誤，必須修正/etc/httpd/conf.d/00?nova?placement?api.conf

<Directory/usr/bin>

<IfVersion>=2.4>

Requireallgranted

</IfVersion>

<IfVersion<2.4>

Ordprallnw,dpny

Allowfromall

</IfVersion>

</Directory>

4.重啟httpd

#systemctlrestarthttpd

5.初始化nova■叩i數(shù)據(jù)庫

#su-s/bin/sh-c"nova-manageapi_dbsync"nova

6.注冊cell。數(shù)據(jù)庫

#su-s/bin/sh-c"nova-managecell_v2map_cell0"nova

7.創(chuàng)建celll

#su-s/bin/sh-c"nova-managecell_v2create_cell--name=celll--verbose"no

va

8.初始化nova數(shù)據(jù)庫

17/37

#su-s/bin/sh-c"nova-managedbsync"nova

9.驗證cellO和celll得到正確注冊

#nova-managecell_v2list_cells

IName|UUID|

|celll|109eld4b-536a-40d0-83c6-5fl21b82b650|

|cell0|00000000-6000-0000-0000-000000000000|

+------+--------------------------------------+

10.設置nova隨機啟動并啟動服務

#systemctlenableopenstack-nova-api.service\

openstack-nova-corsoleauth.serviceopenstack-nova-scheduler.service\

openstack-nova-corductor.serviceopenstack-nova-novncproxy.service

#systemctlstartopenstack-nova-api.service\

openstack-nova-corsoleauth.serviceopenstack-nova-scheduler.service\

openstack-nova-corductor.serviceopenstack-nova-novncproxy.service

3.3.2計算節(jié)點配置

計算節(jié)點安裝nova相關服務

1.新建計算節(jié)點computer!安裝nova包

#yuminstallopenstack-nova-compute

3?3?2?2配置nova.conf文件

1.按照以下過濾項配置nova.conf文件

18/37

[DEFAULT]

enabled_apis=osapi_compute,metadata

transport_url=rabbit://openstack:RABBIT_PASS@ocatal

my_ip=9

use_neutron=True

firewall_driver=nova.virt.firewall.NoopFirewallDriver

rbd_user=cinder

rbd_secret_uuid=457eb676-33da-42ec-9a8c-9293d545c337

[api]

auth_strategy=keystone

[glance]

api_servers=http://ocatal:9292

[keystone_authtoken]

auth_uri=http://ocatal:5000

auth_url=http://ocatal:35357

memcached_servers=ocatal:11211

auth_type=password

projprt_domain_namp=default

user_domain_name=cefault

project_name=service

username=nova

password=NOVA_PASS

[libvirt]

virt_type=qemu

images_type=rbd

images_rbd_ceph_conf=/etc/ceph/ceph.conf

rbd_user=cinder

rbd_secret_uuid=4S7eb676-33da-42ec-9a8c-9293d545c337

diskcachemodes="retwork=writeback"

inject_password-fslse

19/37

inject_key=false

inject_partition="2

hw_disk_discard=urmap

[neutron]

url=http://ocatal:9696

auth_url=http://ocatal:35357

auth_type=passworc

project_domain_name=default

user_domain_name=cefault

region_name=RegiorOne

project_name=service

username=neutron

password=SUCCESS-ASS

[placement]

os_region_name=RegionOne

project_domain_name=Default

project_name=service

auth_typp=password

user_domain_name=Default

auth_url=http://ocatal:35357/v3

username=placement

password=PLACEMENT_PASS

[vnc]

enabled=True

vncserver_listen=G.0.0.0

vncserver_proxyclient_address=$my_ip

novncproxy_base_url=http://ocatal:6080/vnc_auto.html

2.設置服務開機自啟動并啟動nova?compute服務

ftsystemctlenableopenstack-nova-compute

20/37

#systemctlrestartopenstack-nova-compute

3.3.23開啟熱遷移功能

1.在compute節(jié)點配置nova用戶

[rootusermod-s/bin/bashnova

[root:~]#passwdnova

[rootsunova

[nova:/root]$cd

[nova:~]#mkdir-p-m700.ssh

2.配置nova用戶在遷移源主機和目的主機間無密碼訪問

[nova:~]$ssh-keygen#所有compute主機執(zhí)行此句，回車過所有輸入信息

[nova:~]$ssh-copy-idnova@{compute}#把木主機外的所有主機名替換compute然后用no

va的密碼進行sshkey的復制

3.更改nova用戶文件權限

[rnnt:*?]#chown-Rnnva:nnva/var/1ih/nnva

[rootchmod700/var/lib/nova/.ssh

[rootchmod600/var/lib/nova/.ssh/authorized_keys

4.配置compute節(jié)點的libvirtd服務

->Edit/etc/libvirt/libvirtd.conf

lister)_tls=0

listen_tcp=1

auth_tcp="none”

->Edit/etc/sysconfig/libvirtd

LIBVIRTD_ARGS="--listen"

5.編輯compute節(jié)點的nova.conf的[libvirt]部分

21/37

[libvirt]

block_migration_flag=VIR_MIGRATE_UNDEFINE_S0URCE,VIR_MIGRATE_PEER2PEER,VIR

_MIGRATE_LIVE,VIR_MIGRATE_TUNNELLED,VIR_MIGRATE_NON_SHARED_INC

live_migration_flag=VIR_MIGRATE_UNDEFINE_SCURCE,VIR_MIGRATE_PEER2PEER,VIR

_MIGRATE_LIVE,VIR_MIGRATE_TUNNELLED

live_migration_uri=qemu+tcp://%s/system

6.重啟openstack-nova-compute和libvirtd

3.4安裝配置neutron集群

3.4.1控制節(jié)點配置

創(chuàng)建neutron數(shù)據(jù)庫

1.創(chuàng)建數(shù)據(jù)庫

#mysql-uroot-pl23456

MariaDB[(none)]>CREATEDATABASEneutron;

2.創(chuàng)建數(shù)據(jù)庫用戶并賦予權限

MariaDB[(none)]>GRANTALLPRIVILEGESONneutron.*TO'neutronlocalhost'

IDENTIFIEDBY'NEUTRON_DBPASS'；

MariaDB[(none)]>GRANTALLPRIVILEGESONneutron.*TO'neutron\

IDENTIFIEDBY'NEUTRON_DBPASS'；

3.在controller!上創(chuàng)建neutron用戶及賦予admin權限

#source/root/admin

#openstackusercreate--domaindefault--password-promptneutron

#openstackroleadd--projectservice--userneutronadmin

4.創(chuàng)建neutron服務

22/37

#openstackservicecreate--nameneutron\

--description"OpenStackNetworking"network

5.創(chuàng)建NetworkingserviceAPIendpoints

#openstackendpointcreate--regionRegionOne\

networkpublichttp://ocatal:9696

#openstackendpointcreate--regionRegionOne\

networkinternalhttp://ocatal:9696

#openstackendpointcreate--regionRegionOne\

networkadminhttp://ocatal:9696

安裝Self-servicenetworks

1.安裝neutronSelf-servicenetworks相關軟件

#yuminstallopenstack-neutronopenstack-neutron-ml2openstack-neutron-linuxb

ridgeebtables-y

2.按以下配置項配置

[DEFAULT]

core_plugin=ml2

service_plugins=router

allow_overlapping_ips=true

transport_url=rabbit://openstack:RABBIT_PASS@ocatal

authstrategy=keystone

notify_nova_on_port_status_changes=true

notify_nova_on_port_data_changes=true

[database]

connection=mysql+pymysql://neutron:NEUTRON_DBPASS@ocatal/neutron

[keystone_authtoken；

auth_uri-http://ocatal:5000/v3

23/37

auth_url=http://ocatal:35357/v3

memcached_servers=ocatal:11211

auth_type=passworc

project_domain_name=default

user_domain_name=cefault

project_name=service

username=neutron

password=SUCCESS-ASS

[matchmaker_redis]

[nova]

auth_url=http://ocatal:35357/v3

auth_type=passworc

project_domain_name=default

user_domain_name=cefault

region_name=RegiorOne

project_name=service

username=nova

password=NOVA_PAOS

[oslo_concurrency]

lock_path=/var/lib/neutron/tmp

配置ml2_conf.ini

1.SB8/etc/neutron/plugins/ml2/ml2_conf.ini

[DEFAULT]

[ml2]

type_drivers=vlan,vxlan

tenant_network_types=vxlan

mechanism_drivers=linuxbridge,12population

extension_drivers=port_security

24/37

[ml2_type_flat]

[ml2_type_geneve]

[ml2_type_gre]

[ml2_type_vlan]

network_vlan_ranges=provider:3135:3135

[ml2_type_vxlan]

vni_ranges=1:1000

[securitygroup]

enable_ipset=true

配置linuxbridge_agent.ini

1.@SS/etc/neutron/plugins/ml2/linuxbridge_agent.ini

[DEFAULT]

[agent]

[linux_bridge]

physical_interface_mappings=provider:ens33

[securitygroupj

enable_security_group=true

firewall_driver=neutron.agent.linux.iptables_firewall.IptablesFirewallDrive

r

[vxlan]

enable_vxlan=true

local_ip=8

12_population=true

配置13_agent.ini

1.配置/etc/neutron/l3_agent.ini

[DEFAULT]

25/37

interface_driver=linuxbridge

配置dhcp_agent.ini

1.@BS/etc/neutron/dhcp_agent.ini

[DEFAULT]

interface_driver=linuxbridge

dhcp_driver=neutron.agent.linux.dhcp.Dnsmasq

enable_isolated_metadata=true

配置metadata_agent.ini

1.HdM/etc/neutron/metadata_agent.ini

[DEFAULT]

nova_metadata_ip=ocatal

metadata_proxy_shared_secret=METADATA_SECRET

2.在controlled、2、3上創(chuàng)建軟鏈接

#In-s/etc/neutron/plugins/ml2/ml2_conf.ini/etc/neutron/plugin.ini

3.同步數(shù)據(jù)庫：

#su-s/bin/sh-c"neutron-db-manage--config-file/etc/neutron/neutron.conf

--config-file/etc/neutron/plugins/ml2/ml2_ccnf.iniupgradehead"neutron

4.重啟neutron相關服務并設置開機啟動

#systemctlrestartopenstack-nova-api.service

#systemctlenableneutron-server.service\

neutron-linuxbridge-agent.serviceneutron-dhcp-agent.service\

neutron-metadata-agent.serviceneutron-13-agent.service

26/37

#systemctlrestartneutron-server.service\

neutron-linuxbridge-agent.serviceneutron-dhcp-agent.service\

neutron-metadata-cgent.serviceneutron-13-agent.service

3.4.2計算節(jié)點配置

計算節(jié)點安裝neutron相關服務

1.計算節(jié)點安裝openstack-neutron-openvswitch

#yuminstallopenstack-neutron-linuxbridgeebtablesipset-y

配置neutron.conf

1.修改/etc/neutron/neutron.conf文件，按照如下過濾配置修改：

[DEFAULT]

auth_strategy=keystone

transport_url=rabbit://openstack:RABBIT_PASS@ocatal

[keystone_authtoken]

auth_uri=http://ocatal:5000/v3

auth_url=http://ocatal:35357/v3

memcached_servers=ocatal:11211

auth_type=passworc

project_domain_name=default

user_domain_name=cefault

project_name=service

username=neutron

password=SUCCESS-ASS

[oslo_concurrency]

lock_path=/var/lib/neutron/tmp

27/37

配置openvswitch_agent

1.配置openvswitch_agent.ini文件

[DEFAULT]

[agent]

Llinux_bridgeJ

physical_interface_mappings=provider:ens34

[securitygroup]

enable_security_group=true

firewall_driver=neutron.agent.linux.iptables_firewall.IptablesFirewallDrive

r

[vxlan]

enable_vxlan=true

local_ip=9

12_population=true

2.重啟計算節(jié)點服務：

#systemctlrestartopenstack-nova-compute.service

#systemctlenableneutnon-openvswitch-agent.service

#systemctlstartneutron-openvswitch-agent.service

I3.5安裝Dashboard集群

1.安裝軟件包

#yuminstallopenstack-dashboard

2?酉己置/etc/opcnstack-dashboard/local_settings文件

OPENSTACK_HOST="controller"

ALLOWED_HOSTS=['','']

SESSION_ENGINE="django.contrib.sessions.backends.cache

28/37

CACHES={

'default':{

'BACKEND':django.core.cache.backends.memcached.MemcachedCache',

'LOCATION':'controller:11211',

)

)

OPENSTACK_KEYSTONE_URL="http：//%S：