ubuntu14.04安装openstack_mitaka

我已经帮你们脱了很多坑，别担心，可以安装成功

图片显示有问题，如果有意者想要图片，可以加我微信：patrickstar12358，我有图文

关于Ubuntu的安装需要注意两点；

1、设置LVM

2、设置/boot、/、Swap的大小

 

 节点1：controller,用户名密码为haoyun,123456

参考http://jingpin.jikexueyuan.com/article/35461.html进行lvm分区！

节点2：compute 用户名密码为haoyun,123456

进入root:

Ubuntu系统,在Linux终端输入命令回车:

　　sudo su - root
210.72.145.44 (国家授时中心服务器IP地址)

关闭iptables防火墙: sudo ufw disable和selinux: selinux默认ubuntu不安装,iptables默认也是全开放的.？

MariaDB密码是123456

 

安装到sql database时:出现

那个三个点是不是要查看之前版本来进行配置?这里先忽略

                                                           

重启mysql报错: Checking for corrupt, notcleanly closed and upgrade

needingtables,这个不知道要不要处理，网上说这个只是个提示，告诉你在做什么。不管它?查阅到貌似这指令不知道能不能处理: 经过几个小时的折腾，发现下面的这个命令有用：

dpkg-reconfigure mysql-server-5.1
配置数据库的时候,以下是配置过程,我总觉得对后面会有影响
 

root@controller:~#mysql_secure_installation

/usr/bin/mysql_secure_installation:379: /usr/bin/mysql_secure_installation: find_mysql_client: not found

 

NOTE: RUNNINGALL PARTS OF THIS SCRIPT IS RECOMMENDED FOR ALL MariaDB

      SERVERS IN PRODUCTION USE!  PLEASE READ EACH STEP CAREFULLY!

 

In order to loginto MariaDB to secure it, we'll need the current

password forthe root user.  If you've just installedMariaDB, and

you haven't setthe root password yet, the password will be blank,

so you shouldjust press enter here.

 

Enter currentpassword for root (enter for none):

OK,successfully used password, moving on...

 

Setting theroot password ensures that nobody can log into the MariaDB

root userwithout the proper authorisation.

 

You alreadyhave a root password set, so you can safely answer 'n'.

 

Change the rootpassword? [Y/n] Y

 ... skipping.

 

By default, aMariaDB installation has an anonymous user, allowing anyone

to log intoMariaDB without having to have a user account created for

them.  This is intended only for testing, and tomake the installation

go a bitsmoother.  You should remove them beforemoving into a

productionenvironment.

 

Removeanonymous users? [Y/n]Y

 ... Success!

 

Normally, rootshould only be allowed to connect from 'localhost'.  This

ensures thatsomeone cannot guess at the root password from the network.

 

Disallow rootlogin remotely? [Y/n] Y

 ... skipping.

 

By default,MariaDB comes with a database named 'test' that anyone can

access.  This is also intended only for testing, andshould be removed

before movinginto a production environment.

 

Remove testdatabase and access to it? [Y/n] Y

 ... skipping.

 

Reloading theprivilege tables will ensure that all changes made so far

will takeeffect immediately.

 

Reloadprivilege tables now? [Y/n]

 ... Success!

 

Cleaning up...

 

All done!  If you've completed all of the above steps,your MariaDB

installationshould now be secure.

 

Thanks forusing MariaDB!

 

NoSql服务我们不装,这个针对计费服务才要装的

 

Rabbit消息队列的密码是123456,用户为openstack

 

验证服务,建议开启防火墙.

装身份认证的时候，你肯定会遇到坑：

connection = mysql+pymysql://keystone:KEYSTONE_DBPASS@controller/keystone

把controller改为你的管理网络即可！

身份服务:LDAP

三个组件：

提供身份验证服务的服务器

驱动：？

中间件模块：

When installing OpenStack Identityservice, you must register each service in your OpenStack installation.Identity service can then track which OpenStack services are installed, andwhere they are located on the network.
执行数据库操作，感觉没生效
GRANT ALL PRIVILEGES ON keystone.* TO'keystone'@'%' IDENTIFIED BY '123456';
Query OK, 0 rows affected (0.00 sec)
第一次的管理员token值：b765cd316d0385c24e33

 

This guide uses the Apache HTTPserver with
mod_wsgi to serve Identity service requestson ports 5000 and 35357. By default, the keystone service still listens onthese ports. Therefore, this guide manually disables the keystone service.应该是keystone在安装过后占用了端口。

 

报错：

 

1.    Each service that you add to yourOpenStack environment requires one or more service entities and three APIendpoint variants in the Identity service.
admin user密码为123456

demo密码123456

Any roles that you create must map to roles specified inthepolicy.json file in the configuration file directory of eachOpenStack service. The default policy
for most services grants administrativeaccess to theadmin role. For more information, see theOperations
Guide - Managing Projects and Users.

 

 

镜像文件路径：/var/lib/glance/images/

GLANCE_DBPASS密码123456

Create the glance user:密码123456

 

报错：怀疑是需要在装identic服务时要注册进去

When installing OpenStack Identity service,you must register each service in your OpenStack installation. Identity servicecan then track which OpenStack services are installed, and where they arelocated on the network.
这个就是下面的操作啊。

Before you install and configure the Image service, youmust create a database, service credentials, and API endpoints.

 

感觉有坑，我就建了admin-openrc.sh注意后缀

 

Comment out or remove any other options in the
[keystone_authtoken] section.然而并没有

 

报错，原来自己不是root来执行。

 

This section describes how to install and configure theCompute service on a compute node

 

配置compute主机，我用的myip是compute的ip

 

By default, Compute uses an internal firewall service.Since Networking includes a firewall service, you must disable the Computefirewall service by using thenova.virt.firewall.NoopFirewallDriver
firewall driver.

 

o   In the[vnc] section, enable and configure remoteconsole access:

o   [vnc]
o   ...
o   enabled = True
o   vncserver_listen = 0.0.0.0
o   vncserver_proxyclient_address = $my_ip
o   novncproxy_base_url =http://controller:6080/vnc_auto.html

The servercomponent listens on all IP addresses and the proxy component only listens onthe management interface IP address of the compute node. The base URL indicatesthe location where you can use a web browser to
access remote consoles ofinstances on this compute node.感觉有深度，好像说的是你可以使用代理url连接远程控制台。
 

neutron user密码123456

 

Replace PROVIDER_INTERFACE_NAME with the name of the underlying provider physical networkinterface. SeeHost
networking for more information.我设置为PROVIDER,后来检查发现，如果你这里没配置正确，后面neutron
agent-list会异常，所以这里的PROVIDER是指你的物理网卡！

 

Replace METADATA_SECRET with a suitable secret for the metadata proxy.我改为123456

 

验证网络1的时候：The output should indicate threeagents on the controller node and one agent on each compute node.
我缺乏了两项！怀疑是我主机网络问题！
 

如果配置UTC不正确，会导致dashboard500错误

 

o   SESSION_ENGINE ='django.contrib.sessions.backends.cache'
o    
o   CACHES = {
o       'default': {
o            'BACKEND':'django.core.cache.backends.memcached.MemcachedCache',
o            'LOCATION': 'controller:11211',
o       }
o   }

这个本身是有的，CACHES开始，否则会报错