CloudStack 云计算平台框架

前言

CloudStack 和OpenStack 一样都是IaaS层 开源框架，可以管理XenServer、ESXI、KVM、OVM等主流虚拟机，相对OpenStack比较简单、稳定；

二、Cloud Stack架构

Zone：相当于现实中的1个数据中心，它是CloudStack中最大的一个单元

Pod(机柜):1个Zone包含N个Pod

Pod(集群):1个Pod包含N个Cluster

Host(主机)：1个Cluster包含N个Host

三、基于centos7安装Cloud Stack4.8.0

1.下载cloudstack4.8.0

Management

Common

Agent

2.修改hostname 和 hosts文件

agent1

vim /etc/hostname

192.168.226.159 master1

vim /etc/hosts

检查主机名是否修改成功？

[root@master1 zhanggen]# hostname --fqdn
master1

hostname --fqdn

3.关闭Selinux和Firewalld

setenforce
systemctl stop firewalld.service

setenforce 0 && systemctl stop firewalld.service

4.安装epel yum源

yum -y install epel*

yum -y install epel*

5.安装 ntp服务 保证主从间时间同步 

 yum -y install ntp

yum -y install ntp

启动ntpd服务

[root@master1 zhanggen]# chkconfig ntpd on
注意：正在将请求转发到“systemctl enable ntpd.service”。
Created symlink from /etc/systemd/system/multi-user.target.wants/ntpd.service to /usr/lib/systemd/system/ntpd.service.
[root@master1 zhanggen]# systemctl enable ntpd.service
[root@master1 zhanggen]# 

systemctl enable ntpd.service

6.安装nfs服务

yum -y install nfs-utils

yum -y install nfs-utils

配置

/export/secondary *(rw,async,no_root_squash,no_subtree_check)

vim /etc/exports

LOCKD_TCPPORT=
LOCKD_UDPPORT=
MOUNTD_PORT=
STATD_PORT=
RQUOTAD_PORT=
STATD_OUTGOING_PORT=

vim /etc/sysconfig/nfs

启动nfs、rpcbind 服务

systemctl start nfs

systemctl start nfs

[root@master1 /]# systemctl start rpcbind

systemctl start rpcbind

7.master1主节点和 agent从节点挂载NFS

master1主节点

[root@master1 /]# echo "/dev/sdb /export/secondary ext4 defaults 0 0 " >> /etc/fstab
[root@master1 /]# 

echo "/dev/sdb /export/secondary ext4 defaults 0 0 " >> /etc/fstab

agent1从节点

[root@agent1 export]#  echo "/dev/sdb /export/primary ext4 defaults 0 0 " >> /etc/fstab
[root@agent1 export]#  mount -a
[root@agent1 export]# df
文件系统          1K-块    已用     可用 已用% 挂载点
/dev/sda3           % /
devtmpfs                     % /dev
tmpfs                      % /dev/shm
tmpfs                     % /run
tmpfs                        % /sys/fs/cgroup
/dev/sda1                % /boot
tmpfs                          % /run/user/
/dev/sdb               % /export/primary
[root@agent1 export]# 

echo "/dev/sdb /export/primary ext4 defaults 0 0 " >> /etc/fstab

检查NFS是否挂载成功

[root@agent1 export]# showmount -e master1
Export list for master1:
/export/secondary *
[root@agent1 export]# 

showmount -e master1

8.master节点

CloudStack管理端安装

cloudstack-management-4.8.0-1.el7.centos.x86_64.rpm 和 cloudstack-common-4.8.0-1.el7.centos.x86_64.rpm

[root@master1 Desktop]# ls
cloudstack-common-4.8.-.el7.centos.x86_64.rpm
cloudstack-management-4.8.-.el7.centos.x86_64.rpm
[root@master1 Desktop]# yum install cloudstack-management-4.8.-.el7.centos.x86_64.rpm cloudstack-common-4.8.-.el7.centos.x86_64.rpm

yum install cloudstack-management-4.8.0-1.el7.centos.x86_64.rpm cloudstack-common-4.8.0-1.el7.centos.x86_64.rpm

yum install mariadb-server mariadb
 systemctl enable mariadb

mariadb 安装

[mysqld]
datadir=/var/lib/mysql
socket=/var/lib/mysql/mysql.sock
# Disabling symbolic-links is recommended to prevent assorted security risks
symbolic-links=
# Settings user and group are ignored when systemd is used.
# If you need to run mysqld under a different user or group,
# customize your systemd unit file for mariadb according to the
# instructions in http://fedoraproject.org/wiki/Systemd

[mysqld_safe]
log-error=/var/log/mariadb/mariadb.log
pid-file=/var/run/mariadb/mariadb.pid

#
# include all files from the config directory
#
!includedir /etc/my.cnf.d

vim /etc/my.cnf

[root@master1 /]# mysqladmin -uroot password .com
[root@master1 /]# mysql -uroot -p
Enter password:
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is
Server version: 5.5.-MariaDB MariaDB Server

Copyright (c) , , Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> delete from mysql.user where user='';
Query OK,  rows affected (0.00 sec)

MariaDB [(none)]> 

设置mysql密码删除空用户

[root@master1 /]# mysql -uroot -p123.com -e "GRANT ALL PRIVILEGES ON *.* TO root@'%' IDENTIFIED BY '123.com'";
[root@master1 /]#

给root用户授权

9.Agent 节点 安装KVM代理

[root@agent1 Desktop]# yum -y install cloudstack-agent-4.8.-.el7.centos.x86_64.rpm cloudstack-common-4.8.-.el7.centos.x86_64.rpm

yum -y install cloudstack-agent-4.8.0-1.el7.centos.x86_64.rpm cloudstack-common-4.8.0-1.el7.centos.x86_64.rpm

10.Master节点初始化数据库

[root@master1 Desktop]# rpm -qa | grep cloud
cloudstack-management-4.8.-.el7.centos.x86_64
cloudstack-common-4.8.-.el7.centos.x86_64
[root@master1 Desktop]# cloudstack-setup-databases cloud:.com@localhost --deploy-as=root:.com
Mysql user name:cloud                                                           [ OK ]
Mysql user password:******                                                      [ OK ]
Mysql server ip:localhost                                                       [ OK ]
Mysql server port:                                                          [ OK ]
Mysql root user name:root                                                       [ OK ]
Mysql root user password:******                                                 [ OK ]
Checking Cloud database files ...                                               [ OK ]
Checking local machine hostname ...                                             [ OK ]
Checking SELinux setup ...                                                      [ OK ]
Detected local IP address as 192.168.226.159, will use as cluster management server node IP[ OK ]
Preparing /etc/cloudstack/management/db.properties                              [ OK ]
Applying /usr/share/cloudstack-management/setup/create-database.sql             [ OK ]
Applying /usr/share/cloudstack-management/setup/create-schema.sql               [ OK ]
Applying /usr/share/cloudstack-management/setup/create-database-premium.sql     [ OK ]
Applying /usr/share/cloudstack-management/setup/create-schema-premium.sql       [ OK ]
Applying /usr/share/cloudstack-management/setup/server-setup.sql                [ OK ]
Applying /usr/share/cloudstack-management/setup/templates.sql                   [ OK ]
Processing encryption ...                                                       [ OK ]
Finalizing setup ...                                                            [ OK ]

CloudStack has successfully initialized database, you can check your database configuration in /etc/cloudstack/management/db.properties

[root@master1 Desktop]# mysql -uroot -p123.com
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is
Server version: 5.5.-MariaDB MariaDB Server

Copyright (c) , , Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

MariaDB [(none)]> show databases;
+--------------------+
| Database           |
+--------------------+
| information_schema |
| cloud              |
| cloud_usage        |
| mysql              |
| performance_schema |
| test               |
+--------------------+
 rows in set (0.04 sec)

MariaDB [(none)]> 

cloudstack-setup-databases cloud:123.com@localhost --deploy-as=root:123.com Mysql user name:cloud

11.启动Master

[root@master1 management]# cloudstack-setup-management --tomcat7
Starting to configure CloudStack Management Server:
Configure Firewall ...        [OK]
Configure CloudStack Management Server ...[OK]
CloudStack Management Server setup is Done!
[root@master1 management]# systemctl status cloudstack-management.service
● cloudstack-management.service - CloudStack Management Server
   Loaded: loaded (/usr/lib/systemd/system/cloudstack-management.service; enabled; vendor preset: disabled)
   Active: active (running) since 三 -- :: CST; 5s ago
 Main PID:  (java)
   CGroup: /system.slice/cloudstack-management.service
           └─ /usr/lib/jvm/jre/bin/java -Djava.awt.headless=true -Dcom.sun.management.jmxremote=false -Xmx2g -XX:+HeapDumpOnOutOfMem...

4月  :: master1 server[]: Apr ,  :: PM org.apache.catalina.core.StandardEngine startInternal
4月  :: master1 server[]: INFO: Starting Servlet Engine: Apache Tomcat/7.0.
4月  :: master1 server[]: Apr ,  :: PM org.apache.catalina.startup.HostConfig deployDirectory
4月  :: master1 server[]: INFO: Deploying web application directory /usr/share/cloudstack-management/webapps/client
4月  :: master1 server[]: Apr ,  :: PM org.apache.catalina.loader.WebappClassLoaderBase validateJarFile
4月  :: master1 server[]: INFO: validateJarFile(/usr/share/cloudstack-management/webapps/client/WEB-INF/lib/servlet-...t.class
4月  :: master1 server[]: Apr ,  :: PM org.apache.catalina.loader.WebappClassLoaderBase validateJarFile
4月  :: master1 server[]: INFO: validateJarFile(/usr/share/cloudstack-management/webapps/client/WEB-INF/lib/servlet-...t.class
4月  :: master1 server[]: Apr ,  :: PM org.apache.catalina.loader.WebappClassLoaderBase validateJarFile
4月  :: master1 server[]: INFO: validateJarFile(/usr/share/cloudstack-management/webapps/client/WEB-INF/lib/tomcat-e...t.class
Hint: Some lines were ellipsized, use -l to show in full.
[root@master1 management]# ss -tnl
State      Recv-Q Send-Q                         Local Address:Port                                        Peer Address:Port
LISTEN                                                    *:                                                   *:*
LISTEN                                                   *:                                                    *:*
LISTEN                                         192.168.122.1:                                                     *:*
LISTEN                                                   *:                                                    *:*
LISTEN                                                   *:                                                     *:*
LISTEN                                           127.0.0.1:                                                    *:*
LISTEN                                           127.0.0.1:                                                     *:*
LISTEN                                                   *:                                                    *:*
LISTEN                                                    *:                                                   *:*
LISTEN                                                    *:                                                  *:*
LISTEN                                                  :::                                                   :::*
LISTEN                                                  :::                                                 :::*
LISTEN                                                  :::                                                  :::*
LISTEN                                                  :::                                                   :::*
LISTEN                                                  :::                                                    :::*
LISTEN                                                   :::                                                 :::*
LISTEN                                                 :::                                                   :::*
LISTEN                                                  :::                                                   :::*
LISTEN                                                   :::                                                  :::*
LISTEN                                                   :::    

cloudstack-setup-management --tomcat7

12.访问

http://192.168.226.159:8080/client/

默认user ：admin 默认密码：password

13.下载KVM模板

[root@master1 Desktop]# /usr/share/cloudstack-common/scripts/storage/secondary/cloud-install-sys-tmplt -m /export/secondary/ -f /home/zhanggen/Desktop/systemvm64template-4.6.-ovm.raw.bz2 -h kvm -F
Uncompressing to /usr/share/cloudstack-common/scripts/storage/secondary/3a2c5a43-2dd0--b225-.qcow2.tmp (type bz2)...could take a long time
Moving to /export/secondary/template/tmpl/////3a2c5a43-2dd0-4130-b225-535221756540.qcow2...could take a while
Successfully installed system VM template /home/zhanggen/Desktop/systemvm64template-4.6.-ovm.raw.bz2 to /export/secondary/template/tmpl///
[root@master1 Desktop]# cd /export/secondary/
lost+found/ template/
[root@master1 Desktop]# cd /export/secondary/template/tmpl///
[root@master1 ]# ls
3a2c5a43-2dd0--b225-.qcow2  template.properties
[root@master1 ]# 

加载kvm模板

14.Agent libvert配置文件

CloudStack也是通过libverd来管理kvm的所有要修改 agent节点配置文件

vnc_listen = "0.0.0.0"

vim /etc/libvirt/qemu.conf

listen_tls =
listen_tcp =
tcp_port = ""
auth_tcp = "none"
mdns_adv =

vim /etc/libvirt/libvirtd.conf

四、配置CloudStack

查看管理节点日志

tail -f /var/log/cloudstack/management/management-server.log

 查看Agent节点日志

tail -f /var/log/cloudstack/agent/agent.log 

1.添加资源

 2.基本资源

3.设置DNS

 4.设置网卡名称

4.设置网络

注意网段不要包含master 和agent的IP，避免造成IP冲突

5.设置管理网络 

就是管理虚拟机用得网络，注意不要和上面的IP冲突

 6.设置集群名称

7.添加agent节点

设置agent节点

8.  设置主存储

主存储 就是Agent上的存储路径，通过网络挂载到 Master 节点的NFS路径

9.设置二级存储

二级存储就是 Master节点中 NFS路径

10.添加资源成功

五、搭建网络镜像仓库

搭建http服务器，用于管理ISO镜像和虚拟机模板，通过url下载镜像、模板

1.安装Nginx

yum -y install nginx
systemctl start nginx

安装Nginx

2.修改Nginx配置文件成为文件目录服务器

    access_log  /var/log/nginx/access.log  main;
    autoindex on;
    autoindex_exact_size on;
    autoindex_localtime on;
    sendfile            on;

/etc/nginx/nginx.conf

 3.开放secstrage.allow权限

4.重启cloudstack-management.service

[root@master1 html]# systemctl restart cloudstack-management.service
[root@master1 html]# 

六、注册ISO镜像

1.组册ISO

七、添加实例

资源和镜像全有了，也该添加虚拟机实例了

1.添加实例

 2.选择通过ISO镜像的方式创建虚拟机

八、python3调用CloudStack的API

import requests
import urllib,hmac,base64,hashlib

api_url='http://192.168.226.159:8080/client/api'
api_key='Y3-zVsLYyBjf1sJr73Eb_17BitmsErXrvc6oIJBQBVjaIn2SbOvapI7gTs5Lycw8DqbzWu3NyVu8urR6ldcMyQ'
security_key='JqNOR8WtSvSS7wdDRhmwQn1VU8HBc5LbgWIImdzpRsvojYLvS1ClIGgBe_t40j7BaOtSHU7cMEe803QvN6FcdQ'

def get_url(cmd): #获取加密后的签名+拼接URL
    arges={
    "apikey":api_key.lower(),
    "command":cmd.lower(),
    "response":"json"
    }
    sig_url=urllib.parse.urlencode(arges)
    hmac_byte=hmac.new(bytes(security_key,'utf-8'),bytes(sig_url,'utf-8'),hashlib.sha1 ).digest()
    base64_str=base64.b64encode(hmac_byte).strip()
    sig = urllib.parse.quote_plus(base64_str)

    full_url = api_url + '?' + 'command=' + cmd + '&apikey=' + api_key + '&response=json' + '&signature=' + sig
    return full_url

urI=get_url(cmd='listHosts')

print(requests.get(url=urI).json())

获取主机

参考