安装OpenStack计算服务nova
一、计算服务nova的介绍
1. 计算服务nova概览
使用OpenStack计算服务来托管和管理云计算系统。OpenStack计算服务是基础设施即服务(IaaS)系统的主要部分，模块主要由Python实现。
OpenStack计算组件请求OpenStack Identity服务进行认证；请求OpenStack Image服务提供磁盘镜像；为OpenStack dashboard提供用户与管理员接口。磁盘镜像访问限制在项目与用户上；配额以每个项目进行设定（例如，每个项目下可以创建多少实例）。OpenStack组件可以在标准硬件上水平大规模扩展，并且下载磁盘镜像启动虚拟机实例。
2. OpenStack计算服务由下列组件所构成
1）nova-api 服务
接收和响应来自最终用户的计算API请求，管理虚拟机(云主机)生命周期。
2）nova-api-metadata 服务
接受来自虚拟机发送的元数据请求。nova-api-metadata服务一般在安装nova-network服务的多主机模式下使用。
3）nova-compute服务
一个持续工作的守护进程，通过Hypervior的API来创建和销毁虚拟机实例，真正管理虚拟机的生命周期。
4）nova-scheduler 服务
拿到一个来自队列请求虚拟机实例，然后决定那台计算服务器主机来运行它。即nova调度器（挑选出最合适的nova-compute来创建虚机）
5）nova-conductor模块
媒介作用于nova-compute服务与数据库之间。它排除了由nova-compute服务对云数据库的直接访问。nova-conductor模块可以水平扩展。但是，不要将它部署在运行nova-compute服务的主机节点上。
6）nova-network worker 守护进程
与nova-compute服务类似，从队列中接受网络任务，并且操作网络。执行任务。例如创建桥接的接口或者改变IPtables的规则。
7）nova-consoleauth 守护进程
为web版的vnc提供访问令牌token。该服务必须为控制台代理运行才可奏效。
8）nova-novncproxy 守护进程
提供一个代理，用于访问正在运行的实例，通过VNC协议，支持基于浏览器的novnc客户端
9）nova客户端
用于用户作为租户管理员或最终用户来提交命令
10）队列
一个在守护进程间传递消息的中央集线器
11）SQL数据库
存储构建时和运行时的状态，为云基础设施，包括有：可用实例类型；使用中的实例；可用网络；项目
理论上，OpenStack计算可以支持任何和SQL-Alchemy所支持的后端数据库，通常使用SQLite3来做测试可开发工作，MySQL和PostgreSQL 作生产环境。
注：用户发起请求创建虚拟机，Nova-api收到请求，开始下发任务，Nova-compute（计算节点）有多台，Nova-api把任务安排给谁呢，怎么安排合理，nova-scheduler负责选节点，nova-scheduler需要知道每个计算节点资源情况，比如CPU、MEM，硬盘等等，把这些信息写到数据库，schedule从数据库Nova-db中根据资源情况去选择相应的计算节点，Nova-compute也需要连接数据库，去更新自己资源信息。假设有10000个计算节点，每个节点都要连接数据库，这样不安全，另一个如果数据库Nova-db的密码修改，则所有计算节点都需要修改，且需要重启计算节点，为了避免以上两点，nova-conductor出现了。只需在Nova-compute配置消息队列(rabbitmq)，所有的nova-compute计算节点通过消息队列去连接nova-conductor，nova-conductor帮助Nova-compute代理修改数据库中虚拟机的状态。
用户发起请求， Nova-api收到请求，通过消息队列发给Nova-schedule，Nova-schedule收到消息之后，去数据库查询nova-compute剩的资源，根据资源情况选择相应的nova-compute计算节点。同时所有的nova-compute计算节点通过消息队列去连接nova-conductor，nova-conductor帮助Nova-compute代理更新数据库自己的资源信息。
二、在控制节点上安装并配置Compute 服务，即 nova
1. 先决条件
在安装和配置 Compute 服务前，必须创建数据库服务的凭据以及 API endpoints
1）创建数据库
a.用数据库连接客户端以 root用户连接到数据库服务器
b.创建 nova_api 和 nova 数据库
c.对数据库进行正确的授权
d.退出数据库客户端
[root@controller ~]# mysql -uroot -p Enter password: Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB connection id is 28 Server version: 10.1.20-MariaDB MariaDB Server Copyright (c) 2000, 2016, Oracle, MariaDB Corporation Ab and others. Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. MariaDB [(none)]> CREATE DATABASE nova_api; Query OK, 1 row affected (0.00 sec) MariaDB [(none)]> CREATE DATABASE nova; Query OK, 1 row affected (0.00 sec) MariaDB [(none)]> show databases; +--------------------+ | Database | +--------------------+ | glance | | information_schema | | keystone | | mysql | | nova | | nova_api | | performance_schema | | test | +--------------------+ 8 rows in set (0.00 sec) MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' IDENTIFIED BY '123456'; Query OK, 0 rows affected (0.05 sec) MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' IDENTIFIED BY '123456'; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY '123456'; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY '123456'; Query OK, 0 rows affected (0.00 sec) MariaDB [(none)]> exit Bye [root@controller ~]#
2）获得 admin 凭证来获取只有管理员能执行的命令的访问权限
[root@controller ~]# source admin-openrc
3）创建服务证书
a.创建 nova 用户
[root@controller ~]# openstack user create --domain default --password-prompt nova User Password: Repeat User Password: +-----------+----------------------------------+ | Field | Value | +-----------+----------------------------------+ | domain_id | d9ffe8683c84401cbad69ac5a73482a8 | | enabled | True | | id | 1577541a71e34c269258f192a68f43f5 | | name | nova | +-----------+----------------------------------+
b.给 nova 用户添加 admin 角色
[root@controller ~]# openstack role add --project service --user nova admin
c.创建 nova 服务实体
[root@controller ~]# openstack service create --name nova --description "OpenStack Compute" compute +-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | OpenStack Compute | | enabled | True | | id | ece50d8aead24503bdf12514733b15f0 | | name | nova | | type | compute | +-------------+----------------------------------+
d.创建 Compute 服务 API 端点
[root@controller ~]# openstack endpoint create --region RegionOne compute public http://controller:8774/v2.1/%\(tenant_id\)s +--------------+-------------------------------------------+ | Field | Value | +--------------+-------------------------------------------+ | enabled | True | | id | 09e12e9565834868a038a73e2dfd6338 | | interface | public | | region | RegionOne | | region_id | RegionOne | | service_id | ece50d8aead24503bdf12514733b15f0 | | service_name | nova | | service_type | compute | | url | http://controller:8774/v2.1/%(tenant_id)s | +--------------+-------------------------------------------+ [root@controller ~]# openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1/%\(tenant_id\)s +--------------+-------------------------------------------+ | Field | Value | +--------------+-------------------------------------------+ | enabled | True | | id | 7346ea40061140b1874c364f21967d31 | | interface | internal | | region | RegionOne | | region_id | RegionOne | | service_id | ece50d8aead24503bdf12514733b15f0 | | service_name | nova | | service_type | compute | | url | http://controller:8774/v2.1/%(tenant_id)s | +--------------+-------------------------------------------+ [root@controller ~]# openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1/%\(tenant_id\)s +--------------+-------------------------------------------+ | Field | Value | +--------------+-------------------------------------------+ | enabled | True | | id | c31d4214852b4d22a6d4af48f519464c | | interface | admin | | region | RegionOne | | region_id | RegionOne | | service_id | ece50d8aead24503bdf12514733b15f0 | | service_name | nova | | service_type | compute | | url | http://controller:8774/v2.1/%(tenant_id)s | +--------------+-------------------------------------------+
2. 配置nova组件
1）安装软件包
[root@controller ~]# yum install openstack-nova-api openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler -y
2）编辑``/etc/nova/nova.conf``文件并完成下面的操作
[root@controller ~]# cp /etc/nova/nova.conf{,.bak} [root@controller ~]# grep -Ev "^$|#" /etc/nova/nova.conf.bak >/etc/nova/nova.conf [root@controller ~]# cat /etc/nova/nova.conf [DEFAULT] [api_database] [barbican] [cache] [cells] [cinder] [conductor] [cors] [cors.subdomain] [database] [ephemeral_storage_encryption] [glance] [guestfs] [hyperv] [image_file_url] [ironic] [keymgr] [keystone_authtoken] [libvirt] [matchmaker_redis] [metrics] [neutron] [osapi_v21] [oslo_concurrency] [oslo_messaging_amqp] [oslo_messaging_notifications] [oslo_messaging_rabbit] [oslo_middleware] [oslo_policy] [rdp] [serial_console] [spice] [ssl] [trusted_computing] [upgrade_levels] [vmware] [vnc] [workarounds] [xenserver]
a.在``[DEFAULT]``部分，只启用计算和元数据API
b.在``[api_database]``和``[database]``部分，配置数据库的连接
c.在 “[DEFAULT]” 和 “[oslo_messaging_rabbit]”部分，配置 “RabbitMQ” 消息队列访问
d.在 “[DEFAULT]” 和 “[keystone_authtoken]” 部分，配置认证服务访问
e.在 [DEFAULT 部分，配置``my_ip`` 来使用控制节点的管理接口的IP 地址
f.在 [DEFAULT] 部分，使能 Networking 服务
g.在``[vnc]``部分，配置VNC代理使用控制节点的管理接口IP地址
h.在 [glance] 区域，配置镜像服务 API 的位置
i.在 [oslo_concurrency] 部分，配置锁路径
注：使用openstack-config命令修改配置文件
[root@controller ~]# openstack-config --set /etc/nova/nova.conf DEFAULT enabled_apis osapi_compute,metadata [root@controller ~]# openstack-config --set /etc/nova/nova.conf api_database connection mysql+pymysql://nova:123456@controller/nova_api [root@controller ~]# openstack-config --set /etc/nova/nova.conf database connection mysql+pymysql://nova:123456@controller/nova [root@controller ~]# openstack-config --set /etc/nova/nova.conf DEFAULT rpc_backend rabbit [root@controller ~]# openstack-config --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_host controller [root@controller ~]# openstack-config --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_userid openstack [root@controller ~]# openstack-config --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_password 123456 [root@controller ~]# openstack-config --set /etc/nova/nova.conf DEFAULT auth_strategy keystone [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_uri http://controller:5000 [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_url http://controller:35357 [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken memcached_servers controller:11211 [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_type password [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken project_domain_name default [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken user_domain_name default [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken project_name service [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken username nova [root@controller ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken password 123456 [root@controller ~]# openstack-config --set /etc/nova/nova.conf DEFAULT my_ip 10.0.0.11 [root@controller ~]# openstack-config --set /etc/nova/nova.conf DEFAULT use_neutron True [root@controller ~]# openstack-config --set /etc/nova/nova.conf DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver [root@controller ~]# openstack-config --set /etc/nova/nova.conf vnc vncserver_listen '$my_ip' [root@controller ~]# openstack-config --set /etc/nova/nova.conf vnc vncserver_proxyclient_address '$my_ip' [root@controller ~]# openstack-config --set /etc/nova/nova.conf glance api_servers http://controller:9292 [root@controller ~]# openstack-config --set /etc/nova/nova.conf oslo_concurrency lock_path /var/lib/nova/tmp
[root@controller ~]# cat /etc/nova/nova.conf [DEFAULT] enabled_apis = osapi_compute,metadata #只启用计算和元数据API
rpc_backend = rabbit #配置消息队列
auth_strategy = keystone #配置认证服务
my_ip = 10.0.0.11 #配置``my_ip`` 来使用控制节点的管理接口的IP 地址
#使能 Networking 服务.默认情况下，计算服务使用内置的防火墙服务。由于网络服务包含了防火墙服务，必须使用``nova.virt.firewall.NoopFirewallDriver``防火墙服务来禁用掉计算服务内置的防火墙服务 use_neutron = True firewall_driver = nova.virt.firewall.NoopFirewallDriver
#[api_database]部分，配置数据库的连接 [api_database] connection = mysql+pymysql://nova:123456@controller/nova_api [barbican] [cache] [cells] [cinder] [conductor] [cors] [cors.subdomain]
#[database]部分，配置数据库的连接 [database] connection = mysql+pymysql://nova:123456@controller/nova [ephemeral_storage_encryption]
#在 [glance] 区域，配置镜像服务 API 的位置 [glance] api_servers = http://controller:9292 [guestfs] [hyperv] [image_file_url] [ironic] [keymgr]
#[keystone_authtoken]部分，配置认证服务访问 [keystone_authtoken] auth_uri = http://controller:5000 auth_url = http://controller:35357 memcached_servers = controller:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = nova password = 123456 [libvirt] [matchmaker_redis] [metrics] [neutron] [osapi_v21]
#[oslo_concurrency]部分路径 [oslo_concurrency] lock_path = /var/lib/nova/tmp [oslo_messaging_amqp] [oslo_messaging_notifications]
#[oslo_messaging_rabbit]部分消息队列访问 [oslo_messaging_rabbit] rabbit_host = controller rabbit_userid = openstack rabbit_password = 123456 [oslo_middleware] [oslo_policy] [rdp] [serial_console] [spice] [ssl] [trusted_computing] [upgrade_levels] [vmware]
#[vnc]部分，配置VNC代理使用控制节点的管理接口IP地址 [vnc] vncserver_listen = $my_ip vncserver_proxyclient_address = $my_ip [workarounds] [xenserver]
3）同步Compute 数据库
[root@controller ~]# su -s /bin/sh -c "nova-manage api_db sync" nova [root@controller ~]# su -s /bin/sh -c "nova-manage db sync" nova /usr/lib/python2.7/site-packages/pymysql/cursors.py:170: Warning: (1831, u'Duplicate index `block_device_mapping_instance_uuid_virtual_name_device_name_idx`. This is deprecated and will be disallowed in a future release.') result = self._query(query) /usr/lib/python2.7/site-packages/pymysql/cursors.py:170: Warning: (1831, u'Duplicate index `uniq_instances0uuid`. This is deprecated and will be disallowed in a future release.') result = self._query(query)
#注：忽略输出中任何不推荐使用的信息
#验证同步结果 [root@controller ~]# mysql -uroot -p nova -e "show tables" Enter password: +--------------------------------------------+ | Tables_in_nova | +--------------------------------------------+ | agent_builds | | aggregate_hosts | | aggregate_metadata | | aggregates | | allocations | | block_device_mapping | | bw_usage_cache | | cells | | certificates | | compute_nodes | | console_pools | | consoles | | dns_domains | | fixed_ips | | floating_ips | | instance_actions | | instance_actions_events | | instance_extra | | instance_faults | | instance_group_member | | instance_group_policy | | instance_groups | | instance_id_mappings | | instance_info_caches | | instance_metadata | | instance_system_metadata | | instance_type_extra_specs | | instance_type_projects | | instance_types | | instances | | inventories | | key_pairs | | migrate_version | | migrations | | networks | | pci_devices | | project_user_quotas | | provider_fw_rules | | quota_classes | | quota_usages | | quotas | | reservations | | resource_provider_aggregates | | resource_providers | | s3_images | | security_group_default_rules | | security_group_instance_association | | security_group_rules | | security_groups | | services | | shadow_agent_builds | | shadow_aggregate_hosts | | shadow_aggregate_metadata | | shadow_aggregates | | shadow_block_device_mapping | | shadow_bw_usage_cache | | shadow_cells | | shadow_certificates | | shadow_compute_nodes | | shadow_console_pools | | shadow_consoles | | shadow_dns_domains | | shadow_fixed_ips | | shadow_floating_ips | | shadow_instance_actions | | shadow_instance_actions_events | | shadow_instance_extra | | shadow_instance_faults | | shadow_instance_group_member | | shadow_instance_group_policy | | shadow_instance_groups | | shadow_instance_id_mappings | | shadow_instance_info_caches | | shadow_instance_metadata | | shadow_instance_system_metadata | | shadow_instance_type_extra_specs | | shadow_instance_type_projects | | shadow_instance_types | | shadow_instances | | shadow_key_pairs | | shadow_migrate_version | | shadow_migrations | | shadow_networks | | shadow_pci_devices | | shadow_project_user_quotas | | shadow_provider_fw_rules | | shadow_quota_classes | | shadow_quota_usages | | shadow_quotas | | shadow_reservations | | shadow_s3_images | | shadow_security_group_default_rules | | shadow_security_group_instance_association | | shadow_security_group_rules | | shadow_security_groups | | shadow_services | | shadow_snapshot_id_mappings | | shadow_snapshots | | shadow_task_log | | shadow_virtual_interfaces | | shadow_volume_id_mappings | | shadow_volume_usage_cache | | snapshot_id_mappings | | snapshots | | tags | | task_log | | virtual_interfaces | | volume_id_mappings | | volume_usage_cache | +--------------------------------------------+ [root@controller ~]# mysql -uroot -p nova_api -e "show tables" Enter password: +--------------------+ | Tables_in_nova_api | +--------------------+ | build_requests | | cell_mappings | | flavor_extra_specs | | flavor_projects | | flavors | | host_mappings | | instance_mappings | | migrate_version | | request_specs | +--------------------+
3.启动 Compute 服务并将其设置为随系统启动
[root@controller ~]# systemctl enable openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-api.service to /usr/lib/systemd/system/openstack-nova-api.service. Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-consoleauth.service to /usr/lib/systemd/system/openstack-nova-consoleauth.service. Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-scheduler.service to /usr/lib/systemd/system/openstack-nova-scheduler.service. Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-conductor.service to /usr/lib/systemd/system/openstack-nova-conductor.service. Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-novncproxy.service to /usr/lib/systemd/system/openstack-nova-novncproxy.service.
[root@controller ~]# systemctl start openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service
[root@controller ~]# systemctl status openstack-nova-api.service openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service ● openstack-nova-api.service - OpenStack Nova API Server Loaded: loaded (/usr/lib/systemd/system/openstack-nova-api.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2020-11-15 12:24:46 CST; 3min 24s ago Main PID: 92280 (nova-api) CGroup: /system.slice/openstack-nova-api.service ├─92280 /usr/bin/python2 /usr/bin/nova-api ├─92339 /usr/bin/python2 /usr/bin/nova-api └─92370 /usr/bin/python2 /usr/bin/nova-api Nov 15 12:23:58 controller systemd[1]: Starting OpenStack Nova API Server... Nov 15 12:24:42 controller sudo[92340]: nova : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/nova-rootwrap /etc/nova/root...save -c Nov 15 12:24:44 controller sudo[92344]: nova : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/bin/nova-rootwrap /etc/nova/root...tore -c Nov 15 12:24:46 controller systemd[1]: Started OpenStack Nova API Server. ● openstack-nova-consoleauth.service - OpenStack Nova VNC console auth Server Loaded: loaded (/usr/lib/systemd/system/openstack-nova-consoleauth.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2020-11-15 12:24:35 CST; 3min 35s ago Main PID: 92281 (nova-consoleaut) CGroup: /system.slice/openstack-nova-consoleauth.service └─92281 /usr/bin/python2 /usr/bin/nova-consoleauth Nov 15 12:23:58 controller systemd[1]: Starting OpenStack Nova VNC console auth Server... Nov 15 12:24:35 controller systemd[1]: Started OpenStack Nova VNC console auth Server. ● openstack-nova-scheduler.service - OpenStack Nova Scheduler Server Loaded: loaded (/usr/lib/systemd/system/openstack-nova-scheduler.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2020-11-15 12:24:35 CST; 3min 35s ago Main PID: 92282 (nova-scheduler) CGroup: /system.slice/openstack-nova-scheduler.service └─92282 /usr/bin/python2 /usr/bin/nova-scheduler Nov 15 12:23:58 controller systemd[1]: Starting OpenStack Nova Scheduler Server... Nov 15 12:24:35 controller systemd[1]: Started OpenStack Nova Scheduler Server. ● openstack-nova-conductor.service - OpenStack Nova Conductor Server Loaded: loaded (/usr/lib/systemd/system/openstack-nova-conductor.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2020-11-15 12:24:33 CST; 3min 36s ago Main PID: 92283 (nova-conductor) CGroup: /system.slice/openstack-nova-conductor.service └─92283 /usr/bin/python2 /usr/bin/nova-conductor Nov 15 12:23:58 controller systemd[1]: Starting OpenStack Nova Conductor Server... Nov 15 12:24:33 controller systemd[1]: Started OpenStack Nova Conductor Server. ● openstack-nova-novncproxy.service - OpenStack Nova NoVNC Proxy Server Loaded: loaded (/usr/lib/systemd/system/openstack-nova-novncproxy.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2020-11-15 12:23:58 CST; 4min 12s ago Main PID: 92284 (nova-novncproxy) CGroup: /system.slice/openstack-nova-novncproxy.service └─92284 /usr/bin/python2 /usr/bin/nova-novncproxy --web /usr/share/novnc/ Nov 15 12:23:58 controller systemd[1]: Started OpenStack Nova NoVNC Proxy Server. Hint: Some lines were ellipsized, use -l to show in full.
4.验证
[root@controller ~]# openstack compute service list +----+------------------+------------+----------+---------+-------+----------------------------+ | Id | Binary | Host | Zone | Status | State | Updated At | +----+------------------+------------+----------+---------+-------+----------------------------+ | 1 | nova-scheduler | controller | internal | enabled | up | 2020-11-15T04:29:32.000000 | | 2 | nova-conductor | controller | internal | enabled | up | 2020-11-15T04:29:32.000000 | | 3 | nova-consoleauth | controller | internal | enabled | up | 2020-11-15T04:29:33.000000 | +----+------------------+------------+----------+---------+-------+----------------------------+ [root@controller ~]# nova service-list +----+------------------+------------+----------+---------+-------+----------------------------+-----------------+ | Id | Binary | Host | Zone | Status | State | Updated_at | Disabled Reason | +----+------------------+------------+----------+---------+-------+----------------------------+-----------------+ | 1 | nova-scheduler | controller | internal | enabled | up | 2020-11-15T04:29:42.000000 | - | | 2 | nova-conductor | controller | internal | enabled | up | 2020-11-15T04:29:42.000000 | - | | 3 | nova-consoleauth | controller | internal | enabled | up | 2020-11-15T04:29:43.000000 | - | +----+------------------+------------+----------+---------+-------+----------------------------+-----------------+
三、在计算节点上配置计算服务nova-compute计算服务即nova
1. 先决条件
计算节点需支持对虚拟化的硬件加速。
[root@computer1 ~]# egrep -c '(vmx|svm)' /proc/cpuinfo 1
注：如果这个命令返回了 one or greater 的值，那么计算节点支持硬件加速且不需要额外的配置。如果这个命令返回了 zero 值，那么你的计算节点不支持硬件加速。你必须配置 libvirt 来使用 QEMU 去代替 KVM
在 /etc/nova/nova.conf 文件的 [libvirt] 区域做出如下的编辑：
[libvirt]
...
virt_type = qemu
2. 配置安装nova-compute组件
nova-compute调用libvirtd来创建虚拟机
1）安装软件包
[root@computer1 ~]# yum install openstack-nova-compute openstack-utils.noarch -y
2）编辑``/etc/nova/nova.conf``文件并完成下面的操作
[root@computer1 ~]# cp /etc/nova/nova.conf{,.bak} [root@computer1 ~]# grep -Ev "^$|#" /etc/nova/nova.conf.bak >/etc/nova/nova.conf [root@computer1 ~]# cat /etc/nova/nova.conf [DEFAULT] [api_database] [barbican] [cache] [cells] [cinder] [conductor] [cors] [cors.subdomain] [database] [ephemeral_storage_encryption] [glance] [guestfs] [hyperv] [image_file_url] [ironic] [keymgr] [keystone_authtoken] [libvirt] [matchmaker_redis] [metrics] [neutron] [osapi_v21] [oslo_concurrency] [oslo_messaging_amqp] [oslo_messaging_notifications] [oslo_messaging_rabbit] [oslo_middleware] [oslo_policy] [rdp] [serial_console] [spice] [ssl] [trusted_computing] [upgrade_levels] [vmware] [vnc] [workarounds] [xenserver]
a. 在``[DEFAULT]`` 和 [oslo_messaging_rabbit]部分，配置``RabbitMQ``消息队列的连接：
b. 在 “[DEFAULT]” 和 “[keystone_authtoken]” 部分，配置认证服务访问
c.在 [DEFAULT] 部分，配置 my_ip 选项（计算节点上的管理网络接口的IP 地址）
e.在 [DEFAULT] 部分，使能 Networking 服务
f.在``[vnc]``部分，启用并配置远程控制台访问
g.在 [glance] 区域，配置镜像服务 API 的位置
h.在 [oslo_concurrency] 部分，配置锁路径
使用openstack-config命令配置，首先获得 admin 凭证来获取只有管理员能执行的命令的访问权限
[root@computer1 ~]# source admin-openrc
修改配置文件
[root@computer1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT rpc_backend rabbit [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_host controller [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_userid openstack [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf oslo_messaging_rabbit rabbit_password 123456 [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT auth_strategy keystone [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_uri http://controller:5000 [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_url http://controller:35357 [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken memcached_servers controller:11211 [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_type password [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken project_domain_name default [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken user_domain_name default [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken project_name service [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken username nova [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken password 123456 [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT my_ip 10.0.0.12 [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT use_neutron True [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT firewall_driver nova.virt.firewall.NoopFirewallDriver [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf vnc enabled True [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf vnc vncserver_listen 0.0.0.0 [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf vnc novncproxy_base_url http://controller:6080/vnc_auto.html [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf vnc vncserver_proxyclient_address '$my_ip' [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf glance api_servers http://controller:9292 [root@computer1 ~]# openstack-config --set /etc/nova/nova.conf oslo_concurrency lock_path /var/lib/nova/tmp [root@computer1 ~]# vim /etc/nova/nova.conf [root@computer1 ~]# cat /etc/nova/nova.conf [DEFAULT] rpc_backend = rabbit #配置消息队列
auth_strategy = keystone #配置认证服务访问
my_ip = 10.0.0.12 #计算节点上的管理网络接口的IP 地址
use_neutron = True #使能 Networking 服务 firewall_driver = nova.virt.firewall.NoopFirewallDriver
[api_database] [barbican] [cache] [cells] [cinder] [conductor] [cors] [cors.subdomain] [database] [ephemeral_storage_encryption]
#在 [glance] 区域，配置镜像服务 API 的位置 [glance] api_servers = http://controller:9292
[guestfs] [hyperv] [image_file_url] [ironic] [keymgr]
#“[keystone_authtoken]” 部分，配置认证服务访问 [keystone_authtoken] auth_uri = http://controller:5000 auth_url = http://controller:35357 memcached_servers = controller:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = nova password = 123456
[libvirt] [matchmaker_redis] [metrics] [neutron] [osapi_v21]
#在 [oslo_concurrency] 部分，配置锁路径 [oslo_concurrency] lock_path = /var/lib/nova/tmp
[oslo_messaging_amqp] [oslo_messaging_notifications]
#[oslo_messaging_rabbit]部分，配置``RabbitMQ``消息队列的连接 [oslo_messaging_rabbit] rabbit_host = controller rabbit_userid = openstack rabbit_password = 123456
[oslo_middleware] [oslo_policy] [rdp] [serial_console] [spice] [ssl] [trusted_computing] [upgrade_levels] [vmware]
#在``[vnc]``部分，启用并配置远程控制台访问 [vnc] enabled = True vncserver_listen = 0.0.0.0 #服务器组件监听所有的 IP 地址 novncproxy_base_url = http://controller:6080/vnc_auto.html # URL 指示可以使用 web 浏览器访问位于该计算节点上实例的远程控制台的位置 vncserver_proxyclient_address = $my_ip #代理组件仅仅监听计算节点管理网络接口的 IP 地址
[workarounds] [xenserver]
3.启动计算服务及其依赖，并将其配置为随系统自动启动
[root@computer1 ~]# systemctl enable libvirtd.service openstack-nova-compute.service Created symlink from /etc/systemd/system/multi-user.target.wants/openstack-nova-compute.service to /usr/lib/systemd/system/openstack-nova-compute.service. [root@computer1 ~]# systemctl start libvirtd.service openstack-nova-compute.service [root@computer1 ~]# systemctl status libvirtd.service openstack-nova-compute.service ● libvirtd.service - Virtualization daemon Loaded: loaded (/usr/lib/systemd/system/libvirtd.service; enabled; vendor preset: enabled) Active: active (running) since Sun 2020-11-15 13:01:00 CST; 1min 45s ago Docs: man:libvirtd(8) https://libvirt.org Main PID: 82932 (libvirtd) Tasks: 17 (limit: 32768) CGroup: /system.slice/libvirtd.service └─82932 /usr/sbin/libvirtd Nov 15 13:00:58 computer1 systemd[1]: Starting Virtualization daemon... Nov 15 13:01:00 computer1 systemd[1]: Started Virtualization daemon. ● openstack-nova-compute.service - OpenStack Nova Compute Server Loaded: loaded (/usr/lib/systemd/system/openstack-nova-compute.service; enabled; vendor preset: disabled) Active: active (running) since Sun 2020-11-15 13:01:18 CST; 1min 27s ago Main PID: 82949 (nova-compute) Tasks: 22 CGroup: /system.slice/openstack-nova-compute.service └─82949 /usr/bin/python2 /usr/bin/nova-compute Nov 15 13:01:00 computer1 systemd[1]: Starting OpenStack Nova Compute Server... Nov 15 13:01:18 computer1 nova-compute[82949]: /usr/lib/python2.7/site-packages/pkg_resources/__init__.py:187: RuntimeWarning: You ha... Nov 15 13:01:18 computer1 nova-compute[82949]: stacklevel=1, Nov 15 13:01:18 computer1 systemd[1]: Started OpenStack Nova Compute Server. Hint: Some lines were ellipsized, use -l to show in full.
四、验证计算服务的操作
在控制节点上执行这些命令
1.获得 admin 凭证来获取只有管理员能执行的命令的访问权限
[root@controller ~]# source admin-openrc
2.列出服务组件，以验证是否成功启动并注册了每个进程
[root@controller ~]# openstack compute service list +----+------------------+------------+----------+---------+-------+----------------------------+ | Id | Binary | Host | Zone | Status | State | Updated At | +----+------------------+------------+----------+---------+-------+----------------------------+ | 1 | nova-scheduler | controller | internal | enabled | up | 2020-11-15T05:03:53.000000 | | 2 | nova-conductor | controller | internal | enabled | up | 2020-11-15T05:03:53.000000 | | 3 | nova-consoleauth | controller | internal | enabled | up | 2020-11-15T05:03:53.000000 | | 6 | nova-compute | computer1 | nova | enabled | up | 2020-11-15T05:03:55.000000 | +----+------------------+------------+----------+---------+-------+----------------------------+ [root@controller ~]# nova service-list +----+------------------+------------+----------+---------+-------+----------------------------+-----------------+ | Id | Binary | Host | Zone | Status | State | Updated_at | Disabled Reason | +----+------------------+------------+----------+---------+-------+----------------------------+-----------------+ | 1 | nova-scheduler | controller | internal | enabled | up | 2020-11-15T05:04:03.000000 | - | | 2 | nova-conductor | controller | internal | enabled | up | 2020-11-15T05:04:03.000000 | - | | 3 | nova-consoleauth | controller | internal | enabled | up | 2020-11-15T05:04:03.000000 | - | | 6 | nova-compute | computer1 | nova | enabled | up | 2020-11-15T05:04:05.000000 | - | +----+------------------+------------+----------+---------+-------+----------------------------+-----------------+
注：该输出应该显示三个服务组件在控制节点上启用，一个服务组件在计算节点上启用。
