企业官网建设流程全解析

如可做网站,dw做的网站如何上传云服务,网站设计注册,iis7 无法添加网站哈哈#xff0c;今天开始部署服务器应用中最麻烦的一个开源软件OpenStack#xff0c;尤其在国产化OS上面部署OpenStack的材料太少了#xff0c;我写两篇记文章记录下在UOS的服务器1070e版本上完整的部署起OpenStack来#xff0c;运行一个基础环境的OpenStack最小需要两个节…哈哈今天开始部署服务器应用中最麻烦的一个开源软件OpenStack尤其在国产化OS上面部署OpenStack的材料太少了我写两篇记文章记录下在UOS的服务器1070e版本上完整的部署起OpenStack来运行一个基础环境的OpenStack最小需要两个节点而且计算节点不推荐虚拟化嵌套环境建议使用物理测试。因为是OpenStack的基础环境搭建我这里使用两个节点每个节点两块网卡的搭建。1. 环境准备配置域名解析在controller和compute节点上修改/etc/hosts添加一下内容(记得修改主机名)#vim /etc/hosts10.20.21.XXX controller10.12.21.XXX compute配置防火墙和Selinux在controller和compute节点上编辑selinux配置文件#vim /etc/selinux/config修改为SELINUXdisabledcontroller和compute节点关闭防火墙#systemctl disable firewalld.service --now配置YUM仓库需开启everything、OpenStack-v仓库配置时间同步controller和compute安装chrony服务#yum install chrony -y编辑/etc/chrony.conf文件例如#vim /etc/chrony.confservertime.xxxxx.comiburst(根据自己本地时间服务器配置)配置完时间源后重启服务#systemctl start chronyd#systemctl enable chonyd双节点验证#chronyc sources -v2. 部署OpenStack-上篇2.1 安装客户端两节点安装客户端#yum install -y python3-openstackclient openstack-selinux2.2 安装mariadb数据库controller节点执行#yum install -y mariadb mariadb-server python3-PyMySQL修改配置文件:#vim /etc/my.cnf.d/mariadb-server.cnf[server]bind-addressxxx.xxx.xxx.xxxx(controller节点1的网卡1的ipdefault-storage-engineinnodbinnodb_file_per_tableonmax_connections4096collation-serverutf8_general_cicharacter-set-serverutf8启动数据库服务#systemctl enable mariadb.service#systemctl start mariadb.service#systemctl status mariadb.service配置数据库密码# mysql_secure_installationEnter current password for root (enter for none):回车Set root password? [Y/n] yNew password: 000000Re-enter new password: 000000Remove anonymous users? [Y/n] yDisallow root login remotely? [Y/n] nRemove test database and access to it? [Y/n] yReload privilege tables now? [Y/n] y测试数据库是否可正常登录很重要的步骤#mysql -uroot -p0000002.3 安装消息队列服务两节点安装客户端安装rabbitmq消息队列在controller节点执行#yum install rabbitmq-server -y#systemctl start rabbitmq-server.service#systemctl enable rabbitmq-server.service#systemctl status rabbitmq-server.service添加用户并赋予权限#rabbitmqctl add_user rabbitmq 000000#rabbitmqctl set_permissions rabbitmq .* .* .*修改rabbitmq参数#echo ulimit -n 65536 /etc/profile#source /etc/profile#mkdir /etc/systemd/system/rabbitmq-server.service.d#cat /etc/systemd/system/rabbitmq-server.service.d/limits.conf EOF[Service]LimitNOFILE65536EOF#systemctl daemon-reload2.4 安装memcachecontroller节点执行#yum install memcached -y编辑/etc/sysconfig/memcached修改以下内容#vim /etc/sysconfig/memcachedOPTIONS-l 127.0.0.1,::1,controller启动服务#systemctl start memcached.service#systemctl enable memcached.service#systemctl status memcached.service2.5 安装认证服务创建Keystone数据库controller节点执行#mysql -uroot -p000000CREATE DATABASE keystone;GRANT ALL PRIVILEGES ON keystone.* TO keystonelocalhost IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON keystone.* TO keystone% IDENTIFIED BY 000000;flush privileges;安装Keystone软件包#yum install openstack-keystone httpd python3-mod_wsgi -y配置Keystone修改/etc/keystone/keystone.conf在各自域修改以下内容#vim /etc/keystone/keystone.conf[database]connectionmysqlpymysql://keystone:000000controller/keystone[token]providerfernet同步数据库#su -s /bin/sh -c keystone-manage db_sync keystone查看数据库有输出即为成功#mysql -hcontroller -ukeystone -p000000 -e use keystone;show tables;初始化密钥库#keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone#keystone-manage credential_setup --keystone-user keystone --keystone-group keystone配置引导服务此处000000为登录OpenStack时用到的密码。#keystone-manage bootstrap --bootstrap-password 000000 \--bootstrap-admin-url http://controller:35357/v3/ \--bootstrap-internal-url http://controller:5000/v3/ \--bootstrap-public-url http://controller:5000/v3/ \--bootstrap-region-id RegionOne配置Apache服务编辑/etc/httpd/conf/httpd.conf修改为以下内容#vim /etc/httpd/conf/httpd.confServerName controller创建文件连接并修改#ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/用以下内容替换/etc/httpd/conf.d/wsgi-keystone.conf文件内容#vim /etc/httpd/conf.d/wsgi-keystone.confListen 5000Listen 35357VirtualHost *:5000WSGIDaemonProcess keystone-public processes5 threads1 userkeystone groupkeystone display-name%{GROUP}WSGIProcessGroup keystone-publicWSGIScriptAlias / /usr/bin/keystone-wsgi-publicWSGIApplicationGroup %{GLOBAL}WSGIPassAuthorization OnErrorLogFormat %{cu}t %MErrorLog /var/log/httpd/keystone-error.logCustomLog /var/log/httpd/keystone-access.log combinedDirectory /usr/binRequire all granted/Directory/VirtualHostVirtualHost *:35357WSGIDaemonProcess keystone-admin processes5 threads1 userkeystone groupkeystone display-name%{GROUP}WSGIProcessGroup keystone-adminWSGIScriptAlias / /usr/bin/keystone-wsgi-adminWSGIApplicationGroup %{GLOBAL}WSGIPassAuthorization OnErrorLogFormat %{cu}t %MErrorLog /var/log/httpd/keystone-error.logCustomLog /var/log/httpd/keystone-access.log combinedDirectory /usr/binRequire all granted/Directory/VirtualHost启动服务#systemctl enable httpd.service#systemctl start httpd.service设置环境变量# export OS_USERNAMEadmin# export OS_PASSWORD000000# export OS_PROJECT_NAMEadmin# export OS_USER_DOMAIN_NAMEDefault# export OS_PROJECT_DOMAIN_NAMEDefault# export OS_AUTH_URLhttp://controller:35357/v3# export OS_IDENTITY_API_VERSION3创建项目创建service项目#openstack project create --domain default --description Service Project service创建demo项目#openstack project create --domain default --description Demo Project demo创建demo用户#openstack user create --domain default --password-prompt demo设置密码建议先使用000000创建user角色#openstack role create user添加user角色到demo项目和用户#openstack role add --project demo --user demo user创建环境变量脚本#vim ~/admin-openrcexport OS_PROJECT_DOMAIN_NAMEDefaultexport OS_USER_DOMAIN_NAMEDefaultexport OS_PROJECT_NAMEadminexport OS_USERNAMEadminexport OS_PASSWORD000000export OS_AUTH_URLhttp://controller:5000/v3export OS_IDENTITY_API_VERSION3export OS_IMAGE_API_VERSION2#vim ~/demo-openrc (我基本不会用到demo这个项目)export OS_PROJECT_DOMAIN_NAMEDefaultexport OS_USER_DOMAIN_NAMEDefaultexport OS_PROJECT_NAMEdemoexport OS_USERNAMEdemoexport OS_PASSWORD000000export OS_AUTH_URLhttp://controller:5000/v3export OS_IDENTITY_API_VERSION3export OS_IMAGE_API_VERSION2验证环境变量脚本#source ~/admin-openrc#openstack token issue2.6 安装镜像服务创建Glance数据库#mysql -uroot -p000000CREATE DATABASE glance;GRANT ALL PRIVILEGES ON glance.* TO glancelocalhost IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON glance.* TO glance% IDENTIFIED BY 000000;flush privileges;创建用户#openstack user create --domain default --password-prompt glance密码推荐000000添加admin角色到glance用户和service项目中#openstack role add --project service --user glance admin创建服务#openstack service create --name glance --description OpenStack Image image创建glance服务端点#openstack endpoint create --region RegionOne image public \http://controller:9292#openstack endpoint create --region RegionOne image internal \http://controller:9292#openstack endpoint create --region RegionOne image admin \http://controller:9292安装Glance软件包#yum install openstack-glance -y配置Glance在对应的域修改glance配置文件/etc/glance/glance-api.conf#vim /etc/glance/glance-api.conf[database]connectionmysqlpymysql://glance:000000controller/glance[keystone_authtoken]auth_uri http://controller:5000auth_url http://controller:5000memcached_servers controller:11211auth_type passwordproject_domain_name Defaultuser_domain_name Defaultproject_name serviceusername glancepassword 000000[paste_deploy]flavorkeystone[glance_store]storesfile,httpdefault_storefilefilesystem_store_datadir/var/lib/glance/images/同步数据库#su -s /bin/sh -c glance-manage db_sync glance启动服务#systemctl enable openstack-glance-api.service#systemctl start openstack-glance-api.service上传镜像测试如果能连上公网建议是下载官网的推荐的cirros镜像因为它真的小#wget http://download.cirros-cloud.net/0.5.0/cirros-0.5.0-x86_64-disk.img#glance image-create --name cirros-0.5.0 --disk-format qcow2 --container-format bare --progress cirros-0.5.0-x86_64-disk.img#openstack image list2.7 安装placement创建placement数据库#mysql -uroot -p000000CREATE DATABASE placement;GRANT ALL PRIVILEGES ON placement.* TO placementlocalhost IDENTIFIED BY 000000;GRANT ALL PRIVILEGES ON placement.* TO placement% IDENTIFIED BY 000000;flush privileges;创建用户#openstack user create --domain default --password-prompt placement密码推荐000000添加admin角色到placement用户#openstack role add --project service --user placement admin创建服务创建placement服务实体#openstack service create --name placement --description Placement API placement创建placement服务端点#openstack endpoint create --region RegionOne placement public http://controller:8778#openstack endpoint create --region RegionOne placement internal http://controller:8778#openstack endpoint create --region RegionOne placement admin http://controller:8778安装软件包#yum install -y openstack-placement-api配置placement#vim /etc/placement/placement.conf[placement_database]connection mysqlpymysql://placement:000000controller/placement[api]auth_strategy keystone[keystone_authtoken]auth_url http://controller:5000/v3memcached_servers controller:11211auth_type passwordproject_domain_name defaultuser_domain_name defaultproject_name serviceusername placementpassword 000000编辑/etc/httpd/conf.d/00-placement-api.conf添加以下内容在#SSLCertificateKeyFile ...下面添加#vim /etc/httpd/conf.d/00-placement-api.confDirectory /usr/binIfVersion 2.4Require all granted/IfVersionIfVersion 2.4Order allow,denyAllow from all/IfVersion/Directory重启服务#systemctl restart httpd.service同步数据库#su -s /bin/sh -c placement-manage db sync placement今天就先部署到了这里真正比较难部署和配置还是在后面配置Neutron和ovs。