本文档以RDO的方式安装单节点、单网卡的Openstack。
RDO是可在Red Hat Enterprise Linux、Fedora及其变体上运行的社区支持OpenStack版本。部署简单方便，RDO中包含核心的OpenStack组件 – Nova、Glance、Keystone、Cinder、Neutron、Swift和Horizon，还有用于云应用协调的孵化项目 – Heat，以及用于资源监视和计量的Ceilometer。利用红帽开发的安装工具 – PackStack，可以实现非常简便轻松的安装过程。
RDO的ALL IN ONE安装方式主要用于测试环境，安装所需要的环境比较容易实现，生产环境推荐使用真实物理机，多节点并逐个安装各组件的方式进行。
一、安装环境：
服务器：vmware虚拟机 系统：CentOS6.5 内核版本：2.6.32-431.3.1.el6.x86_64
网卡：一块(eth0) IP:192.168.8.229 netmask:255.255.255.0 gateway：192.168.8.1(办公网络)
二、配置国内源
Shell
cd/etc/yum.repos.d/
wget http://mirrors.163.com/.help/CentOS6-Base-163.repo
yum list
三、设置FQDN
因为RDO的安装方式是通过puppet进行安装需要用到FQDN的命名方式，所以主机名要这样设置，名字可以随意取
vim/etc/sysconfig/network
controller.domain.cc
hostname controller.domain.cc
[root@controller~]# hostname -f
controller.domain.cc
四、修改HOST文件
vi/etc/hosts
192.168.8.229controller.domain.cc
五、 配置cinder-volumes
给cinder-volumes单独一个分区，可以提高性能，我在安装系统的时候预留了一块分区未挂载。如果未预留，可以给虚拟机加一块硬盘做来此分区。
fdisk-l
pvcreate/dev/sda5
vgcreate cinder-volumes/dev/sda5
六、安装packstack
yum install-yhttp://rdo.fedorapeople.org/openstack/openstack-havana/rdo-release-havana.rpm
yum install-yopenstack-packstack
yum-yupdate
yum更新后重启服务器
七、关闭selinux
vi/etc/selinux/config
#SELINUX=enforcing
SELINUX=disabled
八、开始安装
因为我们提前配置了cinder-volumes所以在安装命令中取消cinder-volumes的配置
packstack--allinone--provision-demo=nCONFIG_CINDER_VOLUMES_CREATE=n
九、安装过程
[root@controller~]# packstack --allinone --provision-demo=n CONFIG_CINDER_VOLUMES_CREATE=n
Welcome toInstaller setup utility
Packstack changed given value torequired value/root/.ssh/id_rsa.pub
Installing:
Clean Up... [DONE]
Setting up ssh keys...root@192.168.8.229'spassword:
root@192.168.8.229'spassword:
[DONE]
Discovering hosts'details... [DONE]
Adding pre install manifest entries... [DONE]
Adding MySQL manifest entries... [DONE]
Adding QPID manifest entries... [DONE]
Adding Keystone manifest entries... [DONE]
Adding Glance Keystone manifest entries... [DONE]
Adding Glance manifest entries... [DONE]
Installing dependencies forCinder... [DONE]
Adding Cinder Keystone manifest entries... [DONE]
Adding Cinder manifest entries... [DONE]
Checking ifthe Cinder server hasacinder-volumes vg...[DONE]
Adding Nova API manifest entries... [DONE]
Adding Nova Keystone manifest entries... [DONE]
Adding Nova Cert manifest entries... [DONE]
Adding Nova Conductor manifest entries... [DONE]
Adding Nova Compute manifest entries... [DONE]
Adding Nova Scheduler manifest entries... [DONE]
Adding Nova VNC Proxy manifest entries... [DONE]
Adding Nova Common manifest entries... [DONE]
Adding Openstack Network-related Nova manifest entries...[DONE]
Adding Neutron API manifest entries... [DONE]
Adding Neutron Keystone manifest entries... [DONE]
Adding Neutron L3 manifest entries... [DONE]
Adding Neutron L2 Agent manifest entries... [DONE]
Adding Neutron DHCP Agent manifest entries... [DONE]
Adding Neutron LBaaS Agent manifest entries... [DONE]
Adding Neutron Metadata Agent manifest entries... [DONE]
Adding OpenStack Client manifest entries... [DONE]
Adding Horizon manifest entries... [DONE]
Adding Swift Keystone manifest entries... [DONE]
Adding Swift builder manifest entries... [DONE]
Adding Swift proxy manifest entries... [DONE]
Adding Swift storage manifest entries... [DONE]
Adding Swift common manifest entries... [DONE]
Adding Ceilometer manifest entries... [DONE]
Adding Ceilometer Keystone manifest entries... [DONE]
Adding Nagios server manifest entries... [DONE]
Adding Nagios host manifest entries... [DONE]
Adding post install manifest entries... [DONE]
Preparing servers... [DONE]
Installing Dependencies... [DONE]
Copying Puppet modules andmanifests... [DONE]
Applying Puppet manifests...
Applying192.168.8.229_prescript.pp
192.168.8.229_prescript.pp: [DONE]
Applying192.168.8.229_mysql.pp
Applying192.168.8.229_qpid.pp
192.168.8.229_mysql.pp: [DONE]
192.168.8.229_qpid.pp: [DONE]
Applying192.168.8.229_keystone.pp
Applying192.168.8.229_glance.pp
Applying192.168.8.229_cinder.pp
192.168.8.229_keystone.pp: [DONE]
192.168.8.229_glance.pp: [DONE]
192.168.8.229_cinder.pp: [DONE]
Applying192.168.8.229_api_nova.pp
192.168.8.229_api_nova.pp: [DONE]
Applying192.168.8.229_nova.pp
192.168.8.229_nova.pp: [DONE]
Applying192.168.8.229_neutron.pp
192.168.8.229_neutron.pp: [DONE]
Applying192.168.8.229_osclient.pp
Applying192.168.8.229_horizon.pp
192.168.8.229_osclient.pp: [DONE]
192.168.8.229_horizon.pp: [DONE]
Applying192.168.8.229_ring_swift.pp
192.168.8.229_ring_swift.pp: [DONE]
Applying192.168.8.229_swift.pp
Applying192.168.8.229_ceilometer.pp
Applying192.168.8.229_nagios.pp
Applying192.168.8.229_nagios_nrpe.pp
192.168.8.229_swift.pp: [DONE]
192.168.8.229_nagios.pp: [DONE]
192.168.8.229_ceilometer.pp: [DONE]
192.168.8.229_nagios_nrpe.pp: [DONE]
Applying192.168.8.229_postscript.pp
192.168.8.229_postscript.pp: [DONE]
[DONE]
Finalizing... [DONE]
****Installation completed successfully******
Additional information:
*Anewanswerfile was created in:/root/packstack-answers-20140122-060833.txt
*Timesynchronization installation was skipped.Please note that unsynchronized timeon server instances might be problem forsome OpenStack components.
*Did notcreateacinder volume group,one already existed
*File/root/keystonerc_admin has been created on OpenStack client host192.168.8.229.Tousethe commandline tools you need tosource the file.
*Toaccess the OpenStack Dashboard browse tohttp://192.168.8.229/dashboard.
Please,findyour login credentials stored inthe keystonerc_admin inyour home directory.
*TouseNagios,browse tohttp://192.168.8.229/nagios username:nagiosadmin,password:cd40bf59e297418d
*The installation log fileisavailable at:/var/tmp/packstack/20140122-060832-eVf1sO/openstack-setup.log
*The generated manifests are available at:/var/tmp/packstack/20140122-060832-eVf1sO/manifest
安装过程中可能会因为源的问题中断，加上应答文件再次执行即可
packstack--answer-file=/root/packstack-answers-20140121-232841.txt
安装完成后，重启服务器
十、配置网络
安装好以后配置网络
# cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE=eth0
ONBOOT=yes
HWADDR=00:E0:81:D8:43:BE
TYPE=OVSPort
DEVICETYPE=ovs
OVS_BRIDGE=br-ex
ifcfg-br-ex 是一个openvswitch 的连接外网的bridge。因为RDO目前的BUG，安装后成后并没有ifcfg-br-ex被创建，需要手动新增。
# cat /etc/sysconfig/network-scripts/ifcfg-br-ex
DEVICE=br-ex
DEVICETYPE=ovs
TYPE=OVSBridge
BOOTPROTO=static
IPADDR=192.168.8.229
NETMASK=255.255.255.0
GATEWAY=192.168.8.1
ONBOOT=yes
重启网卡
十、安装镜像
安装完成后，用户、密码以及认证地址等环境变量被保存在/root/keystonerc_admin中，命令行下执行命令的时候需要先导入此文件或写到/etc/profile中。
十一、配置安全组规则
打开tcp:22端口和icmp协议的访问权限
Shell
|
1
2
|
neutron security-group-rule-create--protocol icmp--direction ingress default
neutron security-group-rule-create--protocol tcp--port-range-min22--port-range-max22--direction ingress default
|
查看新增的2个规则
Shell
|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
|
[root@controller~(keystone_admin)]# neutron security-group-rule-list
+--------------------------------------+----------------+-----------+----------+------------------+--------------+
|id |security_group|direction|protocol|remote_ip_prefix|remote_group|
+--------------------------------------+----------------+-----------+----------+------------------+--------------+
|058625eb-7ca6-4717-bc80-f3e645f1b664|default |ingress | | |default |
|1cf19202-07e4-4413-a4b2-566fb3aef72c|default |ingress | | |default |
|2482ca61-9f4d-4cf9-a81c-c1ee22df1cc0|default |egress | | | |
|40c6cfb5-231f-4427-9655-9194268a33b5|default |egress | | | |
|57df7a08-c3fd-4696-8f63-32571ccecb24|default |egress | | | |
|8391e869-b371-46bf-958e-d89615165fd1|default |ingress |icmp |0.0.0.0/0 | |
|890dbd60-242c-4cfb-9eba-f8a755907d8c|default |ingress |tcp |0.0.0.0/0 | |
|96218b0c-338e-472c-befb-c2a3eb2db6ef|default |egress | | | |
|a29a3323-595f-4c7b-bdae-53614a62cb1e|default |egress | | | |
|adc87cfb-5a71-4549-bb15-ffc2ab1b862c|default |egress | | | |
|c952a552-50cc-4432-8f64-2ad305fe5496|default |ingress | | |default |
|d0426da9-5c31-4670-878c-cdb5771dc71e|default |ingress | | |default |
|d4620fb7-19fc-41cb-be14-5f70858b1b01|default |ingress | | |default |
|e468de96-1593-495a-bda9-64657b53a9a0|default |ingress | | |default |
+--------------------------------------+----------------+-----------+----------+------------------+--------------+
[root@controller~(keystone_admin)]# neutron security-group-rule-show 8391e869-b371-46bf-958e-d89615165fd1
+-------------------+--------------------------------------+
|Field |Value |
+-------------------+--------------------------------------+
|direction |ingress |
|ethertype |IPv4 |
|id |8391e869-b371-46bf-958e-d89615165fd1|
|port_range_max | |
|port_range_min | |
|protocol |icmp |
|remote_group_id | |
|remote_ip_prefix |0.0.0.0/0 |
|security_group_id|6d8aa78f-1f81-4a7d-ac25-5ac5483e82e2|
|tenant_id |02da2e92dd6b4478b09aa63b20a11b5a |
+-------------------+--------------------------------------+
[root@controller~(keystone_admin)]# neutron security-group-rule-show 890dbd60-242c-4cfb-9eba-f8a755907d8c
+-------------------+--------------------------------------+
|Field |Value |
+-------------------+--------------------------------------+
|direction |ingress |
|ethertype |IPv4 |
|id |890dbd60-242c-4cfb-9eba-f8a755907d8c|
|port_range_max |22 |
|port_range_min |22 |
|protocol |tcp |
|remote_group_id | |
|remote_ip_prefix |0.0.0.0/0 |
|security_group_id|6d8aa78f-1f81-4a7d-ac25-5ac5483e82e2|
|tenant_id |02da2e92dd6b4478b09aa63b20a11b5a |
+-------------------+--------------------------------------+
|
(未完待续)
遇到的问题及解决方法：
（先把遇到的问题写在这里怕以后忘记）
配置域名访问web界面后报错：
Shell
|
1
2
3
4
5
6
7
8
9
|
2014-01-2208:55:57,3236935ERROR django.requestInternal Server Error:/dashboard/
Traceback(most recent call last):
File"/usr/lib/python2.6/site-packages/django/core/handlers/base.py",line89,inget_response
response=middleware_method(request)
File"/usr/lib/python2.6/site-packages/django/middleware/common.py",line55,inprocess_request
host=request.get_host()
File"/usr/lib/python2.6/site-packages/django/http/__init__.py",line223,inget_host
"Invalid HTTP_HOST header (you may need to set ): %s"%host)
SuspiciousOperation:Invalid HTTP_HOST header(you may need toset ALLOWED_HOSTS):openstack.domain.cc
|
原因：django有个ALLOWED_HOSTS的配置，有允许的域名可以解析到服务器IP上。
解决方法：在/etc/openstack-dashboard/local_settings 里面找到ALLOWED_HOSTS在其中加入想要解析的域名，修改后的样子：
Shell
|
1
|
ALLOWED_HOSTS=['192.168.8.229','controller.domain.cn','localhost','openstack.domain.cc',]
|
重启apache