OpenStack Havana 部署在Ubuntu 12.04 Server 【OVS+GRE】（三）——计算节点的安装

序：OpenStack Havana 部署在Ubuntu 12.04 Server 【OVS+GRE】

计算节点：

1.准备结点

• 安装好ubuntu 12.04 Server 64bits后，进入root模式进行安装：

sudo su - 

• 添加Havana源：

#apt-get install python-software-properties
#add-apt-repository cloud-archive:havana

• 升级系统：

apt-get update
apt-get upgrade
apt-get dist-upgrade

• 安装ntp服务：

apt-get install ntp

• 配置ntp服务从控制节点同步时间：

 

sed -i 's/server 0.ubuntu.pool.ntp.org/#server 0.ubuntu.pool.ntp.org/g' /etc/ntp.conf
sed -i 's/server 1.ubuntu.pool.ntp.org/#server 1.ubuntu.pool.ntp.org/g' /etc/ntp.conf
sed -i 's/server 2.ubuntu.pool.ntp.org/#server 2.ubuntu.pool.ntp.org/g' /etc/ntp.conf
sed -i 's/server 3.ubuntu.pool.ntp.org/#server 3.ubuntu.pool.ntp.org/g' /etc/ntp.conf

#Set the network node to follow up your conroller node
sed -i 's/server ntp.ubuntu.com/server 10.10.10.2/g' /etc/ntp.conf

service ntp restart

 

2.配置网络

• 如下配置网络/etc/network/interfaces:

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
address 10.10.10.4
netmask 255.255.255.0

auto eth0:1
iface eth0:1 inet static
address 10.20.20.4
netmask 255.255.255.0

#因为安装包的时候，还是通过apt-get来下载的，所以还是要分配一个可以连外网的IP，安装部署测试完成之后，可以将其down掉

auto eth0:2     
iface eth0:2 inet static
address 192.168.122.4
netmask 255.255.255.0
gateway 192.168.122.1
dns-nameservers 192.168.122.1

• 开启路由转发：

sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf
sysctl -p

3.KVM

• 确保你的硬件启动virtualization,如果不支持也没关系，因为我们本身就在KVM虚拟机上配置，后面将虚拟化器指定为QEMU即可:

apt-get install cpu-checker
kvm-ok

• 安装kvm并配置它：

apt-get install -y kvm libvirt-bin pm-utils

• 在/etc/libvirt/qemu.conf配置文件中启用cgroup_device_aci数组：

cgroup_device_acl = [
"/dev/null", "/dev/full", "/dev/zero",
"/dev/random", "/dev/urandom",
"/dev/ptmx", "/dev/kvm", "/dev/kqemu",
"/dev/rtc", "/dev/hpet","/dev/net/tun"
]

• 删除默认的虚拟网桥：

virsh net-destroy default
virsh net-undefine default

• 更新/etc/libvirt/libvirtd.conf配置文件：

listen_tls = 0
listen_tcp = 1
auth_tcp = "none"

• 编辑libvirtd_opts变量在/etc/init/libvirt-bin.conf配置文件中：

env libvirtd_opts="-d -l"

• 编辑/etc/default/libvirt-bin文件，没有的话就新建：

libvirtd_opts="-d -l"

• 重启libvirt服务使配置生效：

service libvirt-bin restart

4.OpenVSwitch

• 安装OpenVSwitch软件包：

apt-get install  openvswitch-switch openvswitch-datapath-dkms openvswitch-datapath-source

module-assistant auto-install openvswitch-datapath

service openvswitch-switch restart

• 创建网桥：

ovs-vsctl add-br br-int

5.Neutron

• 安装Neutron OpenVSwitch代理：

apt-get install neutron-plugin-openvswitch-agent

• 编辑OVS配置文件/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini:

 

[OVS]
tenant_network_type = gre
tunnel_id_ranges = 1:1000
integration_bridge = br-int
tunnel_bridge = br-tun
local_ip = 10.20.20.4
enable_tunneling = True

#Firewall driver for realizing quantum security group function
[SECURITYGROUP]
firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

 

• 编辑/etc/neutron/neutron.conf

 

rabbit_host = 10.10.10.2

[keystone_authtoken]
auth_host = 10.10.10.2
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = neutron
admin_password = admin
signing_dir = /var/lib/neutron/keystone-signing

[database]
connection = mysql://neutronUser:neutronPass@10.10.10.2/neutron

 

• 重启服务：

service neutron-plugin-openvswitch-agent restart

6.Nova

• 安装nova组件：

apt-get install nova-compute-kvm python-guestfs

• 注意：如果你的宿主机不支持kvm虚拟化，可把nova-compute-kvm换成nova-compute-qemu
• 同时/etc/nova/nova-compute.conf配置文件中的libvirt_type=qemu

• 在/etc/nova/api-paste.ini配置文件中修改认证信息：

[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
auth_host = 10.10.10.2
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = nova
admin_password = admin
signing_dirname = /tmp/keystone-signing-nova
# Workaround for https://bugs.launchpad.net/nova/+bug/1154809
auth_version = v2.0

• 编辑修改/etc/nova/nova.conf

[DEFAULT]
# This file is configuration of nova
logdir=/var/log/nova
state_path=/var/lib/nova
lock_path=/run/lock/nova
verbose=True
api_paste_config=/etc/nova/api-paste.ini
compute_scheduler_driver=nova.scheduler.simple.SimpleScheduler
nova_url=http://10.10.10.2:8774/v1.1/
sql_connection=mysql://novaUser:novaPass@10.10.10.2/nova
root_helper=sudo nova-rootwrap /etc/nova/rootwrap.conf

#Availability_zone
#default_availability_zone=fbw

# Auth
use_deprecated_auth=false
auth_strategy=keystone

# Rabbit MQ
my_ip=10.10.10.4
rabbit_host=10.10.10.2
rpc_backend = nova.rpc.impl_kombu

# Imaging service
glance_host=10.10.10.2
glance_api_servers=10.10.10.2:9292
image_service=nova.image.glance.GlanceImageService

# Vnc configuration
novnc_enabled=true
novncproxy_base_url=http://192.168.122.2:6080/vnc_auto.html
novncproxy_port=6080
vncserver_proxyclient_address=10.10.10.4 # diffrente from every node，与控制节点不一样
vncserver_listen=0.0.0.0

# Network settings
network_api_class=nova.network.neutronv2.api.API
neutron_url=http://10.10.10.2:9696
neutron_auth_strategy=keystone
neutron_admin_tenant_name=service
neutron_admin_username=neutron
neutron_admin_password=admin
neutron_admin_auth_url=http://10.10.10.2:35357/v2.0
libvirt_vif_driver=nova.virt.libvirt.vif.LibvirtHybridOVSBridgeDriver
linuxnet_interface_driver=nova.network.linux_net.LinuxOVSInterfaceDriver

#If you want Neutron + Nova Security groups
firewall_driver=nova.virt.firewall.NoopFirewallDriver
security_group_api=neutron

#If you want Nova Security groups only, comment the two lines above and uncomment line -1-.
#-1-firewall_driver=nova.virt.libvirt.firewall.IptablesFirewallDriver

#Metadata
service_neutron_metadata_proxy = true
neutron_metadata_proxy_shared_secret = helloOpenStack

# Compute #
compute_driver=libvirt.LibvirtDriver

# Cinder #
volume_api_class=nova.volume.cinder.API
osapi_volume_listen_port=5900

# Ceilemeter #
instance_usage_audit=True
instance_usage_audit_period=hour
notify_on_state_change=vm_and_task_state
notification_driver=nova.openstack.common.notifier.rpc_notifier
notification_driver=ceilometer.compute.nova_notifier

• 重启nova-*服务：

cd /etc/init.d/; for i in $( ls nova-* ); do service $i restart; done;cd $OLDPWD

• 检查所有nova服务是否正常启动：

nova-manage service list

7. 为监控服务安装计算代理

• 安装监控服务：

ap-get install ceilometer-agent-compute

• 配置修改/etc/nova/nova.conf, 这个在前面已经配好了:

...
[DEFAULT]
...
instance_usage_audit=True
instance_usage_audit_period=hour
notify_on_state_change=vm_and_task_state
notification_driver=nova.openstack.common.notifier.rpc_notifier
notification_driver=ceilometer.compute.nova_notifier

• 重启服务：

service ceilometer-agent-compute restart

至此，OpenStack基本的服务已经配置完毕，接下来你就可以创建基本的虚拟网络，启动虚拟机，并分配给网络和可供外网访问的浮动IP。

至于如何通过neutron创建内网、外网，和路由，我推荐直接在dashboard的界面中来建立，当然也可以参照Awy的博文用neutron的命令去创建，或者参考官方文档，这里就不再赘述了。

不过要让外网能访问虚拟机，记得要修改安全组规则，增加icmp、ssh（tcp 22）访问规则即可。

希望，这几篇博文能帮助你成功部署基本的OpenStack环境，同也给自己做个记录，免得过一段时间又全忘了，出了问题，又不知道哪里没配好了。