Bii o ṣe le Fi sori ẹrọ Syeed awọsanma tirẹ pẹlu OpenStack ni RHEL/CentOS 7

OpenStack jẹ pẹpẹ sọfitiwia ọfẹ ati ṣiṣi eyiti o pese IAAS (iṣẹ amayederun-bi-iṣẹ) fun awọn awọsanma ilu ati ni ikọkọ.

Syeed OpenStack ni ọpọlọpọ awọn iṣẹ akanṣe ti o jọmọ ti o ṣakoso ohun elo, ibi ipamọ, awọn orisun nẹtiwọọki ti datacenter, gẹgẹbi: Iṣiro, Iṣẹ Aworan, Ibi ipamọ Àkọsílẹ, Iṣẹ idanimọ, Nẹtiwọọki, Ibi ipamọ Nkan, Telemetry, Orchestration ati Database.

Isakoso ti awọn paati wọn le ṣakoso nipasẹ wiwo orisun wẹẹbu tabi pẹlu iranlọwọ ti laini aṣẹ OpenStack.

Itọsọna yii yoo ṣe itọsọna fun ọ lori bawo ni o ṣe le ran awọn amayederun awọsanma ti ara ẹni pẹlu OpenStack ti a fi sori ẹrọ ni oju ipade kan ni CentOS 7 tabi RHEL 7 tabi awọn pinpin Fedora nipa lilo awọn ibi ipamọ rdo, botilẹjẹpe imuṣiṣẹ le ṣee waye lori awọn apa pupọ.

Fifi sori Kere ti CentOS 7
Fifi sori Pọọku ti RHEL 7

Igbesẹ 1: Awọn atunto Eto Ibẹrẹ

1. Ṣaaju ki o to bẹrẹ nidi ipade lati le ran awọn amayederun awọsanma ti ara rẹ, buwolu wọle akọkọ pẹlu akọọlẹ gbongbo ki o rii daju pe eto naa ti di imudojuiwọn.

2. Itele, gbejade aṣẹ ss -tulpn lati ṣe atokọ gbogbo awọn iṣẹ ṣiṣe.

# ss -tulpn

3. Itele, ṣe idanimọ, da duro, mu ṣiṣẹ ati yọ awọn iṣẹ ti ko wulo, ni akọkọ ifiweranṣẹ, NetworkManager ati firewalld. Ni ipari daemon nikan ti yoo ṣiṣẹ lori ẹrọ rẹ yẹ ki o jẹ sshd.

# systemctl stop postfix firewalld NetworkManager
# systemctl disable postfix firewalld NetworkManager
# systemctl mask NetworkManager
# yum remove postfix NetworkManager NetworkManager-libnm

4. Muu eto imulo Selinux patapata lori ẹrọ nipasẹ ipinfunni awọn ofin isalẹ. Tun ṣatunkọ /etc/selinux/config faili ki o ṣeto laini SELINUX lati imuṣiṣẹ si alaabo bi a ti ṣe apejuwe lori sikirinifoto isalẹ.

# setenforce 0
# getenforce
# vi /etc/selinux/config

5. Lori igbesẹ ti n tẹle nipa lilo aṣẹ hostnamectl lati ṣeto orukọ olupin Linux rẹ. Ropo oniyipada FQDN ni ibamu.

# hostnamectl set-hostname cloud.centos.lan

6. Lakotan, fi sori ẹrọ ntpdate pipaṣẹ lati le muuṣiṣẹpọ akoko pẹlu olupin NTP lori awọn agbegbe rẹ nitosi isunmọtosi ti ara rẹ.

# yum install ntpdate

Igbesẹ 2: Fi OpenStack sori ẹrọ ni CentOS ati RHEL

7. OpenStack yoo gbe kalẹ lori Node rẹ pẹlu iranlọwọ ti package PackStack ti a pese nipasẹ ibi ipamọ rdo (RPM Pinpin ti OpenStack).

Lati le mu awọn ibi ipamọ rdo ṣiṣẹ lori RHEL 7 ṣiṣe aṣẹ isalẹ.

# yum install https://www.rdoproject.org/repos/rdo-release.rpm

Lori CentOS 7, ibi ipamọ Awọn afikun pẹlu RPM ti o ṣiṣẹ ibi ipamọ OpenStack. Awọn afikun ti tẹlẹ ti muu ṣiṣẹ, nitorinaa o le fi RPM sori ẹrọ ni rọọrun lati ṣeto ibi ipamọ OpenStack:

# yum install -y centos-release-openstack-mitaka
# yum update -y

8. Bayi o to akoko lati fi sori ẹrọ package PackStack. Packstack duro fun iwulo kan eyiti o ṣe iranlọwọ imuṣiṣẹ lori awọn apa pupọ fun oriṣiriṣi awọn paati ti OpenStack nipasẹ awọn isopọ SSH ati awọn modulu Puppet.

Fi package Packstat sori ẹrọ ni Linux pẹlu aṣẹ atẹle:

# yum install  openstack-packstack

9. Ni igbesẹ ti n tẹle ina faili idahun fun Packstack pẹlu awọn atunto aiyipada eyi ti yoo ṣatunkọ nigbamii pẹlu awọn ipilẹ ti a beere lati le fi sori ẹrọ fifi sori ẹrọ iduro ti Openstack (ẹyọkan).

Faili naa yoo ni orukọ lẹhin timestamp ọjọ lọwọlọwọ nigbati o ba ti ipilẹṣẹ (ọjọ, oṣu ati ọdun).

# packstack --gen-answer-file='date +"%d.%m.%y"'.conf
# ls

10. Bayi ṣatunkọ faili iṣeto idahun idahun ti o ṣẹda pẹlu olootu ọrọ kan.

# vi 13.04.16.conf

ki o rọpo awọn ipele atẹle lati baamu awọn iye isalẹ. Lati le ni aabo rọpo awọn aaye ọrọigbaniwọle ni ibamu.

CONFIG_NTP_SERVERS=0.ro.pool.ntp.org

Jọwọ kan si http://www.pool.ntp.org/en/ atokọ olupin lati lo olupin NTP ti gbogbo eniyan nitosi ipo ti ara rẹ.

CONFIG_PROVISION_DEMO=n

CONFIG_KEYSTONE_ADMIN_PW=your_password  for Admin user

Wọle dasibodu OpenStack nipasẹ HTTP pẹlu ṣiṣiṣẹ SSL.

CONFIG_HORIZON_SSL=y

Ọrọ igbaniwọle root fun olupin MySQL.

CONFIG_MARIADB_PW=mypassword1234

Ṣeto ọrọ igbaniwọle kan fun olumulo nagiosadmin lati le wọle si panẹli wẹẹbu Nagios.

CONFIG_NAGIOS_PW=nagios1234

11. Lẹhin ti o pari ṣiṣatunkọ fipamọ ati pa faili naa. Pẹlupẹlu, ṣii faili iṣeto ni olupin SSH ati laini iyasilẹ PermitRootLogin nipa yiyọ hashtag iwaju bi a ti ṣe apejuwe lori sikirinifoto isalẹ.

# vi /etc/ssh/sshd_config

Lẹhinna tun bẹrẹ iṣẹ SSH lati ṣe afihan awọn ayipada.

# systemctl restart sshd

Igbesẹ 3: Bẹrẹ Fifi sori Openstack Lilo Faili Idahun Packstack

12. Lakotan bẹrẹ ilana fifi sori ẹrọ Openstack nipasẹ faili idahun ti a ṣatunkọ loke nipasẹ ṣiṣe sintasi aṣẹ isalẹ:

# packstack --answer-file 13.04.16.conf

13. Lọgan ti fifi sori ẹrọ ti awọn paati OpenStack ti pari ni aṣeyọri, oluṣeto yoo ṣe afihan awọn ila diẹ pẹlu awọn ọna asopọ dasibodu agbegbe fun OpenStack ati Nagios ati awọn iwe-ẹri ti o nilo tẹlẹ ti tunto loke lati le buwolu wọle lori awọn panẹli mejeji.

Awọn iwe eri naa tun wa ni ipamọ labẹ itọsọna ile rẹ ni keystonerc_admin faili.

14. Ti fun diẹ ninu awọn idi ilana fifi sori ẹrọ pari pẹlu aṣiṣe nipa iṣẹ httpd, ṣii faili /etc/httpd/conf.d/ssl.conf ati rii daju pe o sọ asọye laini atẹle bi a ti ṣe apejuwe rẹ ni isalẹ.

#Listen 443 https

Lẹhinna tun bẹrẹ daemon Apache lati lo awọn ayipada.

# systemctl restart httpd.service

Akiyesi: Ni ọran ti o ko tun le lọ kiri lori oju opo wẹẹbu Openstack lori ibudo 443 tun bẹrẹ ilana fifi sori ẹrọ lati ibẹrẹ pẹlu aṣẹ kanna ti a fun fun imuṣiṣẹ akọkọ.

# packstack --answer-file /root/13.04.16.conf

Igbesẹ 4: Latọna wiwọle Dasibodu OpenStack

15. Lati le wọle si oju opo wẹẹbu OpenStack lati ọdọ olupin latọna jijin ninu LAN rẹ lilö kiri si ẹrọ IP Adirẹsi rẹ tabi FQDN/dasibodu nipasẹ ilana HTTPS.

Nitori otitọ pe o nlo Ijẹrisi Iforukọsilẹ ti Ara ẹni ti oniṣowo Alaṣẹ Ijẹrisi ti ko ni igbẹkẹle aṣiṣe yẹ ki o han lori ẹrọ lilọ kiri ayelujara rẹ.

Gba aṣiṣe ati buwolu wọle si dasibodu pẹlu abojuto olumulo ati ọrọ igbaniwọle ti o ṣeto lori paramita CONFIG_KEYSTONE_ADMIN_PW lati faili idahun ti a ṣeto loke.

https://192.168.1.40/dashboard

16. Ni omiiran, ti o ba jade lati fi paati Nagios sori ẹrọ fun OpenStack, o le lọ kiri lori panẹli wẹẹbu Nagios ni URI atẹle yii ki o wọle pẹlu iṣeto awọn iwe eri ni faili idahun.

https://192.168.1.40/nagios

Gbogbo ẹ niyẹn! Bayi o le bẹrẹ iṣeto agbegbe awọsanma ti inu rẹ. Bayi tẹle atẹle ikẹkọ ti yoo ṣalaye bi o ṣe le sopọ NIC ti ara olupin si wiwo afara openstack ati ṣakoso Openstack lati panẹli wẹẹbu.