openstack环境主机网络改网卡名为eth0,方便网络适配器命名vim /boot/grub2/grub.cfg在linux16行末加上net.ifnames0关机并多加上一个网络适配器自动命名为eth1[rootcontroller ~]# cd /etc/sysconfig/network-scripts/mv ifcfg-ens33 ifcfg-eth0vim ifcfg-eth0cp ifcfg-eth0 ifcfg-eth1vim ifcfg-eth1reboot添加解析hostnamectl set-hostname controllervim /etc/hosts定时同步yum install chronyvim /etc/chrony.conf为了允许其他节点可以连接到控制节点的 chrony 后台进程在/etc/chrony.conf 文件添加下面的键allow 10.0.0.0/24systemctl enable --now chronyd.serviceOpenStack包样本源配置https://docs.openstack.org/mitaka/zh_CN/install-guide-rdo/environment-packages.html[rootcontroller ~]# lsanaconda-ks.cfg mitaka.tar[rootcontroller ~]# tar xf mitaka.tar -C /opt/[rootcontroller ~]# cd /opt[rootcontroller opt]# lsmitaka[rootcontroller opt]# cd[rootcontroller ~]# vim /etc/yum.repos.d/openstack.repo更新系统系统所有软件包配置这里更新涉及内核更新完要重启[rootcontroller ~]# yum upgrade安装 OpenStack 客户端yum install -y python-openstackclientSQL数据库[rootcontroller ~]# yum install mariadb mariadb-server python2-PyMySQL[rootcontroller ~]# vim /etc/my.cnf.d/openstack.cnf[mysqld]bind-address 192.168.80.151default-storage-engine innodbinnodb_file_per_tablemax_connections 4096collation-server utf8_general_cicharacter-set-server utf8~[rootcontroller ~]# systemctl enable --now mariadb.service消息队列[rootcontroller ~]# yum install rabbitmq-server[rootcontroller ~]# systemctl enable --now rabbitmq-server.service[rootcontroller ~]# rabbitmqctl add_user openstack openstack 创建用户[rootcontroller ~]# rabbitmqctl set_permissions openstack .* .* .* 给openstack用户配置写和读权限记忆缓存[rootcontroller ~]# yum install memcached python-memcached[rootcontroller ~]# systemctl enable --now memcached.service[rootcontroller ~]# vim /etc/sysconfig/memcached[rootcontroller ~]# systemctl restart memcached.service[rootcontroller ~]# netstat -antlp认证服务安装和配置创建 Keystone 数据库CREATE DATABASE keystone;对keystone数据库授予恰当的权限GRANT ALL PRIVILEGES ON keystone.* TO keystonelocalhost \ IDENTIFIED BY keystone; GRANT ALL PRIVILEGES ON keystone.* TO keystone% \ IDENTIFIED BY keystone;yum install openstack-keystone httpd mod_wsgivim /etc/keystone/keystone.conf[rootcontroller ~]# openssl rand -hex 1029b9aac25df07dc0d8c5 写入配置文件初始化身份认证服务的数据库# su -s /bin/sh -c keystone-manage db_sync keystone有数据初始化成功初始化Fernet键# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone[rootcontroller ~]# vim /etc/httpd/conf/httpd.conf[rootcontroller ~]# vim /etc/httpd/conf.d/wsgi-keystone.conf5000 公共连接 35357 管理员连接Listen 5000 公共连接 Listen 35357 管理员连接 VirtualHost *:5000 WSGIDaemonProcess keystone-public processes5 threads1 userkeystone groupkeystone display-name%{GROUP} WSGIProcessGroup keystone-public WSGIScriptAlias / /usr/bin/keystone-wsgi-public WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On ErrorLogFormat %{cu}t %M ErrorLog /var/log/httpd/keystone-error.log CustomLog /var/log/httpd/keystone-access.log combined Directory /usr/bin Require all granted /Directory /VirtualHost VirtualHost *:35357 WSGIDaemonProcess keystone-admin processes5 threads1 userkeystone groupkeystone display-name%{GROUP} WSGIProcessGroup keystone-admin WSGIScriptAlias / /usr/bin/keystone-wsgi-admin WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On ErrorLogFormat %{cu}t %M ErrorLog /var/log/httpd/keystone-error.log CustomLog /var/log/httpd/keystone-access.log combined Directory /usr/bin Require all granted /Directory /VirtualHost创建服务实体和API端点存入配置的核心组件信息创建错了要把api全删了在重新创建创建用户非交互式测试是否成功创建 OpenStack 客户端环境脚本方便创建用户建议脚本[rootcontroller ~]# vim admin-openrcexport OS_PROJECT_DOMAIN_NAMEdefaultexport OS_USER_DOMAIN_NAMEdefaultexport OS_PROJECT_NAMEadminexport OS_USERNAMEadminexport OS_PASSWORDadminexport OS_AUTH_URLhttp://controller:35357/v3export OS_IDENTITY_API_VERSION3export OS_IMAGE_API_VERSION2[rootcontroller ~]# vim demo-openrcexport OS_PROJECT_DOMAIN_NAMEdefaultexport OS_USER_DOMAIN_NAMEdefaultexport OS_PROJECT_NAMEdemoexport OS_USERNAMEdemoexport OS_PASSWORDdemoexport OS_AUTH_URLhttp://controller:5000/v3export OS_IDENTITY_API_VERSION3export OS_IMAGE_API_VERSION2[rootcontroller ~]# source admin-openrc镜像服务[rootcontroller ~]# mysql -p1234MariaDB [(none)] GRANT ALL PRIVILEGES ON glance.* TO glancelocalhost IDENTIFIED BY glance;Query OK, 0 rows affected (0.00 sec)MariaDB [(none)] GRANT ALL PRIVILEGES ON glance.* TO glance% IDENTIFIED BY glance;Query OK, 0 rows affected (0.01 sec)[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack user create --domain default --password glance glance创建镜像服务的 API 端点[rootcontroller ~]# openstack endpoint create --region RegionOne \ image public http://controller:9292[rootcontroller ~]# openstack endpoint create --region RegionOne \ image internal http://controller:9292[rootcontroller ~]# openstack endpoint create --region RegionOne \ image admin http://controller:9292[rootcontroller ~]# yum install openstack-glance安全并配置组件[rootcontroller ~]# vim /etc/glance/glance-api.conf验证操作[rootcontroller ~]# openstack image create cirros \ --file cirros-0.6.0-x86_64-disk.img \ --disk-format qcow2 --container-format bare \ --public[rootcontroller ~]# openstack image list计算服务计算节点初始化配置按上边的配置完成至OpenStack包安装并配置控制节点创建 nova_api 和 nova 数据库CREATE DATABASE nova_api; CREATE DATABASE nova;设置权限MariaDB [(none)] GRANT ALL PRIVILEGES ON nova_api.* TO nova% IDENTIFIED BY nova;Query OK, 0 rows affected (0.00 sec)MariaDB [(none)] GRANT ALL PRIVILEGES ON nova.* TO nova% IDENTIFIED BY nova;Query OK, 0 rows affected (0.00 sec)创建 nova 用户[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack user create --domain default \ --password nova nova给 nova 用户添加 admin 角色[rootcontroller ~]# openstack role add --project service --user nova admin创建 nova 服务实体[rootcontroller ~]# openstack service create --name nova \ --description OpenStack Compute compute创建 Compute 服务 API 端点[rootcontroller ~]# openstack endpoint create --region RegionOne \ compute public http://controller:8774/v2.1/%\(tenant_id\)s[rootcontroller ~]# openstack endpoint create --region RegionOne \ compute internal http://controller:8774/v2.1/%\(tenant_id\)s[rootcontroller ~]# openstack endpoint create --region RegionOne \ compute admin http://controller:8774/v2.1/%\(tenant_id\)s安装软件包yum install openstack-nova-api openstack-nova-conductor \ openstack-nova-console openstack-nova-novncproxy \ openstack-nova-scheduler[DEFAULT] enabled_apis osapi_compute,metadata [api_database] connection mysqlpymysql://nova:NOVA_DBPASScontroller/nova_api [database] connection mysqlpymysql://nova:novacontroller/nova [DEFAULT] rpc_backend rabbit [oslo_messaging_rabbit] rabbit_host controller rabbit_userid openstack rabbit_password openstack[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username nova password nova[DEFAULT] ... my_ip 192.168.80.151[DEFAULT] ... use_neutron True firewall_driver nova.virt.firewall.NoopFirewallDriver[vnc] ... vncserver_listen $my_ip vncserver_proxyclient_address $my_ip[glance]... api_servers http://controller:9292[oslo_concurrency] ... lock_path /var/lib/nova/tmp同步Compute 数据库# su -s /bin/sh -c nova-manage api_db sync nova # su -s /bin/sh -c nova-manage db sync nova启动系统# systemctl enable openstack-nova-api.service \ openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-conductor.service openstack-nova-novncproxy.service # systemctl start openstack-nova-api.service \ openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-conductor.service openstack-nova-novncproxy.service安装和配置计算节点在[DEFAULT] 和 [oslo_messaging_rabbit]部分配置RabbitMQ消息队列的连接[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password openstack在 “[DEFAULT]” 和 “[keystone_authtoken]” 部分配置认证服务访问[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username nova password nova在 [DEFAULT] 部分配置 my_ip 选项my_ip 192.168.80.152在 [DEFAULT] 部分使能 Networking 服务use_neutron True firewall_driver nova.virt.firewall.NoopFirewallDriver在[vnc]部分启用并配置远程控制台访问[vnc] ... enabled True vncserver_listen 0.0.0.0 vncserver_proxyclient_address $my_ip novncproxy_base_url http://controller:6080/vnc_auto.html在 [glance] 区域配置镜像服务 API 的位置[glance] ... api_servers http://controller:9292在 [oslo_concurrency] 部分配置锁路径[oslo_concurrency] ... lock_path /var/lib/nova/tmp确定您的计算节点是否支持虚拟机的硬件加速[rootcompute1 ~]# egrep -c (vmx|svm) /proc/cpuinfo2如果这个命令返回了 zero 值那么你的计算节点不支持硬件加速。你必须配置 libvirt 来使用 QEMU 去代替 KVM,代替后比较慢在 /etc/nova/nova.conf 文件的 [libvirt] 区域做出如下的编辑[libvirt] ... virt_type qemu启动服务[rootcompute1 ~]# systemctl enable libvirtd.service openstack-nova-compute.service[rootcompute1 ~]# systemctl start libvirtd.service openstack-nova-compute.service计算服务配置成功注意完成每一个服务后过滤日志下的error,检查各模块错误避免启动云平台时报错[rootcompute1 ~]# grep -i error /var/log/nova/nova-compute.logNetworking 服务安装并配置控制节点创建neutron 数据库并赋予访问权限设置密码[rootcontroller yum.repos.d]# mysql -p1234MariaDB [(none)] CREATE DATABASE neutron;MariaDB [(none)] GRANT ALL PRIVILEGES ON neutron.* TO neutronlocalhost \- IDENTIFIED BY neutron;MariaDB [(none)] GRANT ALL PRIVILEGES ON neutron.* TO neutron% IDENTIFIED BY neutron;创建服务证书[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack user create --domain default --password neutron neutron[rootcontroller ~]# openstack role add --project service --user neutron admin[rootcontroller ~]# openstack service create --name neutron \ --description OpenStack Networking network创建网络服务API端点[rootcontroller ~]# openstack endpoint create --region RegionOne \ network public http://controller:9696[rootcontroller ~]# openstack endpoint create --region RegionOne \ network internal http://controller:9696[rootcontroller ~]# openstack endpoint create --region RegionOne \ network admin http://controller:9696共有网络配置[rootcontroller ~]# yum install openstack-neutron openstack-neutron-ml2 \ openstack-neutron-linuxbridge ebtables[rootcontroller ~]# vim /etc/neutron/neutron.conf在 [database] 部分配置数据库访问[database] ... connection mysqlpymysql://neutron:NEUTRON_DBPASScontroller/neutron在[DEFAULT]部分启用ML2插件并禁用其他插件[DEFAULT] ... core_plugin ml2 service_plugins 在 “[DEFAULT]” 和 “[oslo_messaging_rabbit]”部分配置 “RabbitMQ” 消息队列的连接[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password openstack在 “[DEFAULT]” 和 “[keystone_authtoken]” 部分配置认证服务访问[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username neutron password neutron在[DEFAULT]和[nova]部分配置网络服务来通知计算节点的网络拓扑变化[DEFAULT] ... notify_nova_on_port_status_changes True notify_nova_on_port_data_changes True [nova] ... auth_url http://controller:35357 auth_type password project_domain_name default user_domain_name default region_name RegionOne project_name service username nova password nova在 [oslo_concurrency] 部分配置锁路径[oslo_concurrency] ... lock_path /var/lib/neutron/tmp[rootcontroller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini在[ml2]部分启用flat和VLAN网络[ml2] ... type_drivers flat,vlan在[ml2]部分禁用私有网络[ml2] ... tenant_network_types 在[ml2]部分启用Linuxbridge机制[ml2] ... mechanism_drivers linuxbridge在[ml2] 部分启用端口安全扩展驱动[ml2] ... extension_drivers port_security在[ml2_type_flat]部分配置公共虚拟网络为flat网络[ml2_type_flat] ... flat_networks provider在 [securitygroup]部分启用 ipset 增加安全组规则的高效性[securitygroup] ... enable_ipset True配置Linuxbridge代理[rootcontroller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini在[linux_bridge]部分将公共虚拟网络和公共物理网络接口对应起来[linux_bridge] physical_interface_mappings provider:PROVIDER_INTERFACE_NAME将PUBLIC_INTERFACE_NAME 替换为底层的物理公共网络接口。请查看ref:environment-networking for more information。在[vxlan]部分禁止VXLAN覆盖网络[vxlan] enable_vxlan False在 [securitygroup]部分启用安全组并配置 Linuxbridge iptables firewall driver:[securitygroup] ... enable_security_group True firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver配置DHCP代理[rootcontroller ~]# vim /etc/neutron/dhcp_agent.ini在[DEFAULT]部分配置Linuxbridge驱动接口DHCP驱动并启用隔离元数据这样在公共网络上的实例就可以通过网络来访问元数据[DEFAULT] ... interface_driver neutron.agent.linux.interface.BridgeInterfaceDriver dhcp_driver neutron.agent.linux.dhcp.Dnsmasq enable_isolated_metadata True配置元数据代理[rootcontroller ~]# openssl rand -hex 1010a56df4ac79d1db0e7d[rootcontroller ~]# vim /etc/neutron/metadata_agent.ini在[DEFAULT] 部分配置元数据主机以及共享密码[DEFAULT] ... nova_metadata_ip controller metadata_proxy_shared_secret 10a56df4ac79d1db0e7d为计算节点配置网络服务[rootcontroller ~]# vim /etc/nova/nova.conf在[neutron]部分配置访问参数启用元数据代理并设置密码[neutron] ... url http://controller:9696 auth_url http://controller:35357 auth_type password project_domain_name default user_domain_name default region_name RegionOne project_name service username neutron password neutron service_metadata_proxy True metadata_proxy_shared_secret 10a56df4ac79d1db0e7d完成安装网络服务初始化脚本需要一个超链接 /etc/neutron/plugin.ini指向ML2插件配置文件/etc/neutron/plugins/ml2/ml2_conf.ini。如果超链接不存在使用下面的命令创建它# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini同步数据库# su -s /bin/sh -c neutron-db-manage --config-file /etc/neutron/neutron.conf \ --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head neutron重启计算API 服务# systemctl restart openstack-nova-api.service当系统启动时启动 Networking 服务并配置它启动网络选项一OpenStack Docs: 安装并配置控制节点 官方文档[rootcontroller ~]# systemctl enable neutron-server.service \ neutron-linuxbridge-agent.service neutron-dhcp-agent.service \ neutron-metadata-agent.service[rootcontroller ~]# systemctl start neutron-server.service \ neutron-linuxbridge-agent.service neutron-dhcp-agent.service \ neutron-metadata-agent.service安装和配置计算节点[rootcompute1 ~]# yum install openstack-neutron-linuxbridge ebtables ipset[rootcompute1 ~]# vim /etc/neutron/neutron.conf在 “[DEFAULT]” 和 “[oslo_messaging_rabbit]”部分配置 “RabbitMQ” 消息队列的连接[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password openstack在 “[DEFAULT]” 和 “[keystone_authtoken]” 部分配置认证服务访问[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username neutron password neutron在 [oslo_concurrency] 部分配置锁路径[oslo_concurrency] ... lock_path /var/lib/neutron/tmp网络选项1公共网络配置Linuxbridge代理[rootcompute1 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini在[linux_bridge]部分将公共虚拟网络和公共物理网络接口对应起来[linux_bridge] physical_interface_mappings provider:eth1将PUBLIC_INTERFACE_NAME 替换为底层的物理公共网络接口。请查看ref:environment-networking for more information。在[vxlan]部分禁止VXLAN覆盖网络[vxlan] enable_vxlan False在 [securitygroup]部分启用安全组并配置 Linuxbridge iptables firewall driver:[securitygroup] ... enable_security_group True firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver为计算节点配置网络服务在[neutron] 部分配置访问参数[neutron] ... url http://controller:9696 auth_url http://controller:35357 auth_type password project_domain_name default user_domain_name default region_name RegionOne project_name service username neutron password neutron完成安装[rootcompute1 ~]# systemctl restart openstack-nova-compute.service[rootcompute1 ~]# systemctl enable --now neutron-linuxbridge-agent.service验证操作云主机创建流程启动一个实例创建虚拟网络[rootcontroller ~]# source admin-openrc[rootcontroller ~]# neutron net-create --shared --provider:physical_network provider \ --provider:network_type flat providerCreated a new network:[rootcontroller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini[rootcontroller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini在网络上创建一个子网$ neutron subnet-create --name provider \ --allocation-pool startSTART_IP_ADDRESS,endEND_IP_ADDRESS \ --dns-nameserver DNS_RESOLVER --gateway PROVIDER_NETWORK_GATEWAY \ provider PROVIDER_NETWORK_CIDR[rootcontroller ~]# neutron subnet-create --name provider --allocation-pool start192.168.80.100,end192.168.80.120 --dns-nameserver 114.114.114.114 --gateway 192.168.80.2 provider 192.168.80.0/24创建m1.nano规格的主机[rootcontroller ~]# source demo-openrc[rootcontroller ~]# ssh-keygen -q -N [rootcontroller ~]# openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey[rootcontroller ~]# openstack keypair list增加安全组规则添加规则到 default 安全组[rootcontroller ~]# openstack security group rule create --proto icmp default允许安全 shell (SSH) 的访问[rootcontroller ~]# openstack security group rule create --proto tcp --dst-port 22 default在公有网络上创建实例确定实例选项[rootcontroller ~]# . demo-openrc[rootcontroller ~]# openstack flavor list[rootcontroller ~]# openstack image list[rootcontroller ~]# openstack network list[rootcontroller ~]# openstack security group list创建实例[rootcontroller ~]# openstack server create --flavor m1.tiny --image cirros --nic net-id6d782e36-3778-4f24-93e0-cbf63a902ada--security-group default --key-name mykey provider-instancenet-id 为上边图片network ID[rootcontroller ~]# openstack server list使用虚拟控制台访问实例 有问题先解决镜像兼容问题获取你实例的 Virtual Network Computing (VNC) 会话URL并从web浏览器访问它[rootcontroller ~]# openstack console url show provider-instancewindows没解析controller,浏览器访问改成地址或者再windows的hosts下解析验证能否ping通公有网络的网关[rootcontroller ~]# ping -c 4 192.168.80.101验证是否能连上互联网[rootcontroller ~]# ping -c 4 openstack.org验证是否能远程访问实例验证控制节点或者其他公有网络上的主机能否ping通实例[rootcompute1 ~]# ping -c 4 192.168.80.101在控制节点或其他公有网络上的主机使用 SSH远程访问实例[rootcompute1 ~]# ssh cirros192.168.80.101账号密码在之前浏览器访问6080时出现镜像0.6.0与现版本openstack不兼容换为官方文档的0.3.4[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack image create cirros \ --file cirros-0.3.4-x86_64-disk.img \ --disk-format qcow2 --container-format bare \ --public[rootcontroller ~]# source demo-openrc[rootcontroller ~]# openstack image list[rootcontroller ~]# openstack server rebuild --image e04cba6d-0cd7-40f7-ae46-19cf55edd12b provider-instance镜像更改删除0.6.0镜像[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack image delete 0dcb3caa-f0c9-4d94-9d53-064003000f4a[rootcontroller ~]# source demo-openrc[rootcontroller ~]# openstack image listDashboard安装和配置[rootcontroller ~]# yum install openstack-dashboard[rootcontroller ~]# vim /etc/openstack-dashboard/local_settings编辑文件 /etc/openstack-dashboard/local_settings 并完成如下动作在 controller 节点上配置仪表盘以使用 OpenStack 服务OPENSTACK_HOST controller允许所有主机访问仪表板ALLOWED_HOSTS [*, ]配置 memcached 会话存储服务SESSION_ENGINE django.contrib.sessions.backends.cache CACHES { default: { BACKEND: django.core.cache.backends.memcached.MemcachedCache, LOCATION: controller:11211, } }把上边的注释掉再写入启用第3版认证API:OPENSTACK_KEYSTONE_URL http://%s:5000/v3 % OPENSTACK_HOST启用对域的支持OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT True配置API版本:OPENSTACK_API_VERSIONS { identity: 3, image: 2, volume: 2, }通过仪表盘创建用户时的默认域配置为 default :OPENSTACK_KEYSTONE_DEFAULT_DOMAIN default通过仪表盘创建的用户默认角色配置为 user OPENSTACK_KEYSTONE_DEFAULT_ROLE user如果您选择网络参数1禁用支持3层网络服务OPENSTACK_NEUTRON_NETWORK { ... enable_router: False, enable_quotas: False, enable_distributed_router: False, enable_ha_router: False, enable_lb: False, enable_firewall: False, enable_vpn: False, enable_fip_topology_check: False, }可以选择性地配置时区TIME_ZONE TIME_ZONE(Asia/Shanghai)[rootcontroller ~]# systemctl restart httpd.service memcached.service浏览器访问http://192.168.80.151/dashboard域dafualt账号密码都为admin 【openstack】
openstack环境主机网络改网卡名为eth0,方便网络适配器命名vim /boot/grub2/grub.cfg在linux16行末加上net.ifnames0关机并多加上一个网络适配器自动命名为eth1[rootcontroller ~]# cd /etc/sysconfig/network-scripts/mv ifcfg-ens33 ifcfg-eth0vim ifcfg-eth0cp ifcfg-eth0 ifcfg-eth1vim ifcfg-eth1reboot添加解析hostnamectl set-hostname controllervim /etc/hosts定时同步yum install chronyvim /etc/chrony.conf为了允许其他节点可以连接到控制节点的 chrony 后台进程在/etc/chrony.conf 文件添加下面的键allow 10.0.0.0/24systemctl enable --now chronyd.serviceOpenStack包样本源配置https://docs.openstack.org/mitaka/zh_CN/install-guide-rdo/environment-packages.html[rootcontroller ~]# lsanaconda-ks.cfg mitaka.tar[rootcontroller ~]# tar xf mitaka.tar -C /opt/[rootcontroller ~]# cd /opt[rootcontroller opt]# lsmitaka[rootcontroller opt]# cd[rootcontroller ~]# vim /etc/yum.repos.d/openstack.repo更新系统系统所有软件包配置这里更新涉及内核更新完要重启[rootcontroller ~]# yum upgrade安装 OpenStack 客户端yum install -y python-openstackclientSQL数据库[rootcontroller ~]# yum install mariadb mariadb-server python2-PyMySQL[rootcontroller ~]# vim /etc/my.cnf.d/openstack.cnf[mysqld]bind-address 192.168.80.151default-storage-engine innodbinnodb_file_per_tablemax_connections 4096collation-server utf8_general_cicharacter-set-server utf8~[rootcontroller ~]# systemctl enable --now mariadb.service消息队列[rootcontroller ~]# yum install rabbitmq-server[rootcontroller ~]# systemctl enable --now rabbitmq-server.service[rootcontroller ~]# rabbitmqctl add_user openstack openstack 创建用户[rootcontroller ~]# rabbitmqctl set_permissions openstack .* .* .* 给openstack用户配置写和读权限记忆缓存[rootcontroller ~]# yum install memcached python-memcached[rootcontroller ~]# systemctl enable --now memcached.service[rootcontroller ~]# vim /etc/sysconfig/memcached[rootcontroller ~]# systemctl restart memcached.service[rootcontroller ~]# netstat -antlp认证服务安装和配置创建 Keystone 数据库CREATE DATABASE keystone;对keystone数据库授予恰当的权限GRANT ALL PRIVILEGES ON keystone.* TO keystonelocalhost \ IDENTIFIED BY keystone; GRANT ALL PRIVILEGES ON keystone.* TO keystone% \ IDENTIFIED BY keystone;yum install openstack-keystone httpd mod_wsgivim /etc/keystone/keystone.conf[rootcontroller ~]# openssl rand -hex 1029b9aac25df07dc0d8c5 写入配置文件初始化身份认证服务的数据库# su -s /bin/sh -c keystone-manage db_sync keystone有数据初始化成功初始化Fernet键# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone[rootcontroller ~]# vim /etc/httpd/conf/httpd.conf[rootcontroller ~]# vim /etc/httpd/conf.d/wsgi-keystone.conf5000 公共连接 35357 管理员连接Listen 5000 公共连接 Listen 35357 管理员连接 VirtualHost *:5000 WSGIDaemonProcess keystone-public processes5 threads1 userkeystone groupkeystone display-name%{GROUP} WSGIProcessGroup keystone-public WSGIScriptAlias / /usr/bin/keystone-wsgi-public WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On ErrorLogFormat %{cu}t %M ErrorLog /var/log/httpd/keystone-error.log CustomLog /var/log/httpd/keystone-access.log combined Directory /usr/bin Require all granted /Directory /VirtualHost VirtualHost *:35357 WSGIDaemonProcess keystone-admin processes5 threads1 userkeystone groupkeystone display-name%{GROUP} WSGIProcessGroup keystone-admin WSGIScriptAlias / /usr/bin/keystone-wsgi-admin WSGIApplicationGroup %{GLOBAL} WSGIPassAuthorization On ErrorLogFormat %{cu}t %M ErrorLog /var/log/httpd/keystone-error.log CustomLog /var/log/httpd/keystone-access.log combined Directory /usr/bin Require all granted /Directory /VirtualHost创建服务实体和API端点存入配置的核心组件信息创建错了要把api全删了在重新创建创建用户非交互式测试是否成功创建 OpenStack 客户端环境脚本方便创建用户建议脚本[rootcontroller ~]# vim admin-openrcexport OS_PROJECT_DOMAIN_NAMEdefaultexport OS_USER_DOMAIN_NAMEdefaultexport OS_PROJECT_NAMEadminexport OS_USERNAMEadminexport OS_PASSWORDadminexport OS_AUTH_URLhttp://controller:35357/v3export OS_IDENTITY_API_VERSION3export OS_IMAGE_API_VERSION2[rootcontroller ~]# vim demo-openrcexport OS_PROJECT_DOMAIN_NAMEdefaultexport OS_USER_DOMAIN_NAMEdefaultexport OS_PROJECT_NAMEdemoexport OS_USERNAMEdemoexport OS_PASSWORDdemoexport OS_AUTH_URLhttp://controller:5000/v3export OS_IDENTITY_API_VERSION3export OS_IMAGE_API_VERSION2[rootcontroller ~]# source admin-openrc镜像服务[rootcontroller ~]# mysql -p1234MariaDB [(none)] GRANT ALL PRIVILEGES ON glance.* TO glancelocalhost IDENTIFIED BY glance;Query OK, 0 rows affected (0.00 sec)MariaDB [(none)] GRANT ALL PRIVILEGES ON glance.* TO glance% IDENTIFIED BY glance;Query OK, 0 rows affected (0.01 sec)[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack user create --domain default --password glance glance创建镜像服务的 API 端点[rootcontroller ~]# openstack endpoint create --region RegionOne \ image public http://controller:9292[rootcontroller ~]# openstack endpoint create --region RegionOne \ image internal http://controller:9292[rootcontroller ~]# openstack endpoint create --region RegionOne \ image admin http://controller:9292[rootcontroller ~]# yum install openstack-glance安全并配置组件[rootcontroller ~]# vim /etc/glance/glance-api.conf验证操作[rootcontroller ~]# openstack image create cirros \ --file cirros-0.6.0-x86_64-disk.img \ --disk-format qcow2 --container-format bare \ --public[rootcontroller ~]# openstack image list计算服务计算节点初始化配置按上边的配置完成至OpenStack包安装并配置控制节点创建 nova_api 和 nova 数据库CREATE DATABASE nova_api; CREATE DATABASE nova;设置权限MariaDB [(none)] GRANT ALL PRIVILEGES ON nova_api.* TO nova% IDENTIFIED BY nova;Query OK, 0 rows affected (0.00 sec)MariaDB [(none)] GRANT ALL PRIVILEGES ON nova.* TO nova% IDENTIFIED BY nova;Query OK, 0 rows affected (0.00 sec)创建 nova 用户[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack user create --domain default \ --password nova nova给 nova 用户添加 admin 角色[rootcontroller ~]# openstack role add --project service --user nova admin创建 nova 服务实体[rootcontroller ~]# openstack service create --name nova \ --description OpenStack Compute compute创建 Compute 服务 API 端点[rootcontroller ~]# openstack endpoint create --region RegionOne \ compute public http://controller:8774/v2.1/%\(tenant_id\)s[rootcontroller ~]# openstack endpoint create --region RegionOne \ compute internal http://controller:8774/v2.1/%\(tenant_id\)s[rootcontroller ~]# openstack endpoint create --region RegionOne \ compute admin http://controller:8774/v2.1/%\(tenant_id\)s安装软件包yum install openstack-nova-api openstack-nova-conductor \ openstack-nova-console openstack-nova-novncproxy \ openstack-nova-scheduler[DEFAULT] enabled_apis osapi_compute,metadata [api_database] connection mysqlpymysql://nova:NOVA_DBPASScontroller/nova_api [database] connection mysqlpymysql://nova:novacontroller/nova [DEFAULT] rpc_backend rabbit [oslo_messaging_rabbit] rabbit_host controller rabbit_userid openstack rabbit_password openstack[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username nova password nova[DEFAULT] ... my_ip 192.168.80.151[DEFAULT] ... use_neutron True firewall_driver nova.virt.firewall.NoopFirewallDriver[vnc] ... vncserver_listen $my_ip vncserver_proxyclient_address $my_ip[glance]... api_servers http://controller:9292[oslo_concurrency] ... lock_path /var/lib/nova/tmp同步Compute 数据库# su -s /bin/sh -c nova-manage api_db sync nova # su -s /bin/sh -c nova-manage db sync nova启动系统# systemctl enable openstack-nova-api.service \ openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-conductor.service openstack-nova-novncproxy.service # systemctl start openstack-nova-api.service \ openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-conductor.service openstack-nova-novncproxy.service安装和配置计算节点在[DEFAULT] 和 [oslo_messaging_rabbit]部分配置RabbitMQ消息队列的连接[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password openstack在 “[DEFAULT]” 和 “[keystone_authtoken]” 部分配置认证服务访问[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username nova password nova在 [DEFAULT] 部分配置 my_ip 选项my_ip 192.168.80.152在 [DEFAULT] 部分使能 Networking 服务use_neutron True firewall_driver nova.virt.firewall.NoopFirewallDriver在[vnc]部分启用并配置远程控制台访问[vnc] ... enabled True vncserver_listen 0.0.0.0 vncserver_proxyclient_address $my_ip novncproxy_base_url http://controller:6080/vnc_auto.html在 [glance] 区域配置镜像服务 API 的位置[glance] ... api_servers http://controller:9292在 [oslo_concurrency] 部分配置锁路径[oslo_concurrency] ... lock_path /var/lib/nova/tmp确定您的计算节点是否支持虚拟机的硬件加速[rootcompute1 ~]# egrep -c (vmx|svm) /proc/cpuinfo2如果这个命令返回了 zero 值那么你的计算节点不支持硬件加速。你必须配置 libvirt 来使用 QEMU 去代替 KVM,代替后比较慢在 /etc/nova/nova.conf 文件的 [libvirt] 区域做出如下的编辑[libvirt] ... virt_type qemu启动服务[rootcompute1 ~]# systemctl enable libvirtd.service openstack-nova-compute.service[rootcompute1 ~]# systemctl start libvirtd.service openstack-nova-compute.service计算服务配置成功注意完成每一个服务后过滤日志下的error,检查各模块错误避免启动云平台时报错[rootcompute1 ~]# grep -i error /var/log/nova/nova-compute.logNetworking 服务安装并配置控制节点创建neutron 数据库并赋予访问权限设置密码[rootcontroller yum.repos.d]# mysql -p1234MariaDB [(none)] CREATE DATABASE neutron;MariaDB [(none)] GRANT ALL PRIVILEGES ON neutron.* TO neutronlocalhost \- IDENTIFIED BY neutron;MariaDB [(none)] GRANT ALL PRIVILEGES ON neutron.* TO neutron% IDENTIFIED BY neutron;创建服务证书[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack user create --domain default --password neutron neutron[rootcontroller ~]# openstack role add --project service --user neutron admin[rootcontroller ~]# openstack service create --name neutron \ --description OpenStack Networking network创建网络服务API端点[rootcontroller ~]# openstack endpoint create --region RegionOne \ network public http://controller:9696[rootcontroller ~]# openstack endpoint create --region RegionOne \ network internal http://controller:9696[rootcontroller ~]# openstack endpoint create --region RegionOne \ network admin http://controller:9696共有网络配置[rootcontroller ~]# yum install openstack-neutron openstack-neutron-ml2 \ openstack-neutron-linuxbridge ebtables[rootcontroller ~]# vim /etc/neutron/neutron.conf在 [database] 部分配置数据库访问[database] ... connection mysqlpymysql://neutron:NEUTRON_DBPASScontroller/neutron在[DEFAULT]部分启用ML2插件并禁用其他插件[DEFAULT] ... core_plugin ml2 service_plugins 在 “[DEFAULT]” 和 “[oslo_messaging_rabbit]”部分配置 “RabbitMQ” 消息队列的连接[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password openstack在 “[DEFAULT]” 和 “[keystone_authtoken]” 部分配置认证服务访问[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username neutron password neutron在[DEFAULT]和[nova]部分配置网络服务来通知计算节点的网络拓扑变化[DEFAULT] ... notify_nova_on_port_status_changes True notify_nova_on_port_data_changes True [nova] ... auth_url http://controller:35357 auth_type password project_domain_name default user_domain_name default region_name RegionOne project_name service username nova password nova在 [oslo_concurrency] 部分配置锁路径[oslo_concurrency] ... lock_path /var/lib/neutron/tmp[rootcontroller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini在[ml2]部分启用flat和VLAN网络[ml2] ... type_drivers flat,vlan在[ml2]部分禁用私有网络[ml2] ... tenant_network_types 在[ml2]部分启用Linuxbridge机制[ml2] ... mechanism_drivers linuxbridge在[ml2] 部分启用端口安全扩展驱动[ml2] ... extension_drivers port_security在[ml2_type_flat]部分配置公共虚拟网络为flat网络[ml2_type_flat] ... flat_networks provider在 [securitygroup]部分启用 ipset 增加安全组规则的高效性[securitygroup] ... enable_ipset True配置Linuxbridge代理[rootcontroller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini在[linux_bridge]部分将公共虚拟网络和公共物理网络接口对应起来[linux_bridge] physical_interface_mappings provider:PROVIDER_INTERFACE_NAME将PUBLIC_INTERFACE_NAME 替换为底层的物理公共网络接口。请查看ref:environment-networking for more information。在[vxlan]部分禁止VXLAN覆盖网络[vxlan] enable_vxlan False在 [securitygroup]部分启用安全组并配置 Linuxbridge iptables firewall driver:[securitygroup] ... enable_security_group True firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver配置DHCP代理[rootcontroller ~]# vim /etc/neutron/dhcp_agent.ini在[DEFAULT]部分配置Linuxbridge驱动接口DHCP驱动并启用隔离元数据这样在公共网络上的实例就可以通过网络来访问元数据[DEFAULT] ... interface_driver neutron.agent.linux.interface.BridgeInterfaceDriver dhcp_driver neutron.agent.linux.dhcp.Dnsmasq enable_isolated_metadata True配置元数据代理[rootcontroller ~]# openssl rand -hex 1010a56df4ac79d1db0e7d[rootcontroller ~]# vim /etc/neutron/metadata_agent.ini在[DEFAULT] 部分配置元数据主机以及共享密码[DEFAULT] ... nova_metadata_ip controller metadata_proxy_shared_secret 10a56df4ac79d1db0e7d为计算节点配置网络服务[rootcontroller ~]# vim /etc/nova/nova.conf在[neutron]部分配置访问参数启用元数据代理并设置密码[neutron] ... url http://controller:9696 auth_url http://controller:35357 auth_type password project_domain_name default user_domain_name default region_name RegionOne project_name service username neutron password neutron service_metadata_proxy True metadata_proxy_shared_secret 10a56df4ac79d1db0e7d完成安装网络服务初始化脚本需要一个超链接 /etc/neutron/plugin.ini指向ML2插件配置文件/etc/neutron/plugins/ml2/ml2_conf.ini。如果超链接不存在使用下面的命令创建它# ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini同步数据库# su -s /bin/sh -c neutron-db-manage --config-file /etc/neutron/neutron.conf \ --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head neutron重启计算API 服务# systemctl restart openstack-nova-api.service当系统启动时启动 Networking 服务并配置它启动网络选项一OpenStack Docs: 安装并配置控制节点 官方文档[rootcontroller ~]# systemctl enable neutron-server.service \ neutron-linuxbridge-agent.service neutron-dhcp-agent.service \ neutron-metadata-agent.service[rootcontroller ~]# systemctl start neutron-server.service \ neutron-linuxbridge-agent.service neutron-dhcp-agent.service \ neutron-metadata-agent.service安装和配置计算节点[rootcompute1 ~]# yum install openstack-neutron-linuxbridge ebtables ipset[rootcompute1 ~]# vim /etc/neutron/neutron.conf在 “[DEFAULT]” 和 “[oslo_messaging_rabbit]”部分配置 “RabbitMQ” 消息队列的连接[DEFAULT] ... rpc_backend rabbit [oslo_messaging_rabbit] ... rabbit_host controller rabbit_userid openstack rabbit_password openstack在 “[DEFAULT]” 和 “[keystone_authtoken]” 部分配置认证服务访问[DEFAULT] ... auth_strategy keystone [keystone_authtoken] ... auth_uri http://controller:5000 auth_url http://controller:35357 memcached_servers controller:11211 auth_type password project_domain_name default user_domain_name default project_name service username neutron password neutron在 [oslo_concurrency] 部分配置锁路径[oslo_concurrency] ... lock_path /var/lib/neutron/tmp网络选项1公共网络配置Linuxbridge代理[rootcompute1 ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini在[linux_bridge]部分将公共虚拟网络和公共物理网络接口对应起来[linux_bridge] physical_interface_mappings provider:eth1将PUBLIC_INTERFACE_NAME 替换为底层的物理公共网络接口。请查看ref:environment-networking for more information。在[vxlan]部分禁止VXLAN覆盖网络[vxlan] enable_vxlan False在 [securitygroup]部分启用安全组并配置 Linuxbridge iptables firewall driver:[securitygroup] ... enable_security_group True firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver为计算节点配置网络服务在[neutron] 部分配置访问参数[neutron] ... url http://controller:9696 auth_url http://controller:35357 auth_type password project_domain_name default user_domain_name default region_name RegionOne project_name service username neutron password neutron完成安装[rootcompute1 ~]# systemctl restart openstack-nova-compute.service[rootcompute1 ~]# systemctl enable --now neutron-linuxbridge-agent.service验证操作云主机创建流程启动一个实例创建虚拟网络[rootcontroller ~]# source admin-openrc[rootcontroller ~]# neutron net-create --shared --provider:physical_network provider \ --provider:network_type flat providerCreated a new network:[rootcontroller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini[rootcontroller ~]# vim /etc/neutron/plugins/ml2/linuxbridge_agent.ini在网络上创建一个子网$ neutron subnet-create --name provider \ --allocation-pool startSTART_IP_ADDRESS,endEND_IP_ADDRESS \ --dns-nameserver DNS_RESOLVER --gateway PROVIDER_NETWORK_GATEWAY \ provider PROVIDER_NETWORK_CIDR[rootcontroller ~]# neutron subnet-create --name provider --allocation-pool start192.168.80.100,end192.168.80.120 --dns-nameserver 114.114.114.114 --gateway 192.168.80.2 provider 192.168.80.0/24创建m1.nano规格的主机[rootcontroller ~]# source demo-openrc[rootcontroller ~]# ssh-keygen -q -N [rootcontroller ~]# openstack keypair create --public-key ~/.ssh/id_rsa.pub mykey[rootcontroller ~]# openstack keypair list增加安全组规则添加规则到 default 安全组[rootcontroller ~]# openstack security group rule create --proto icmp default允许安全 shell (SSH) 的访问[rootcontroller ~]# openstack security group rule create --proto tcp --dst-port 22 default在公有网络上创建实例确定实例选项[rootcontroller ~]# . demo-openrc[rootcontroller ~]# openstack flavor list[rootcontroller ~]# openstack image list[rootcontroller ~]# openstack network list[rootcontroller ~]# openstack security group list创建实例[rootcontroller ~]# openstack server create --flavor m1.tiny --image cirros --nic net-id6d782e36-3778-4f24-93e0-cbf63a902ada--security-group default --key-name mykey provider-instancenet-id 为上边图片network ID[rootcontroller ~]# openstack server list使用虚拟控制台访问实例 有问题先解决镜像兼容问题获取你实例的 Virtual Network Computing (VNC) 会话URL并从web浏览器访问它[rootcontroller ~]# openstack console url show provider-instancewindows没解析controller,浏览器访问改成地址或者再windows的hosts下解析验证能否ping通公有网络的网关[rootcontroller ~]# ping -c 4 192.168.80.101验证是否能连上互联网[rootcontroller ~]# ping -c 4 openstack.org验证是否能远程访问实例验证控制节点或者其他公有网络上的主机能否ping通实例[rootcompute1 ~]# ping -c 4 192.168.80.101在控制节点或其他公有网络上的主机使用 SSH远程访问实例[rootcompute1 ~]# ssh cirros192.168.80.101账号密码在之前浏览器访问6080时出现镜像0.6.0与现版本openstack不兼容换为官方文档的0.3.4[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack image create cirros \ --file cirros-0.3.4-x86_64-disk.img \ --disk-format qcow2 --container-format bare \ --public[rootcontroller ~]# source demo-openrc[rootcontroller ~]# openstack image list[rootcontroller ~]# openstack server rebuild --image e04cba6d-0cd7-40f7-ae46-19cf55edd12b provider-instance镜像更改删除0.6.0镜像[rootcontroller ~]# source admin-openrc[rootcontroller ~]# openstack image delete 0dcb3caa-f0c9-4d94-9d53-064003000f4a[rootcontroller ~]# source demo-openrc[rootcontroller ~]# openstack image listDashboard安装和配置[rootcontroller ~]# yum install openstack-dashboard[rootcontroller ~]# vim /etc/openstack-dashboard/local_settings编辑文件 /etc/openstack-dashboard/local_settings 并完成如下动作在 controller 节点上配置仪表盘以使用 OpenStack 服务OPENSTACK_HOST controller允许所有主机访问仪表板ALLOWED_HOSTS [*, ]配置 memcached 会话存储服务SESSION_ENGINE django.contrib.sessions.backends.cache CACHES { default: { BACKEND: django.core.cache.backends.memcached.MemcachedCache, LOCATION: controller:11211, } }把上边的注释掉再写入启用第3版认证API:OPENSTACK_KEYSTONE_URL http://%s:5000/v3 % OPENSTACK_HOST启用对域的支持OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT True配置API版本:OPENSTACK_API_VERSIONS { identity: 3, image: 2, volume: 2, }通过仪表盘创建用户时的默认域配置为 default :OPENSTACK_KEYSTONE_DEFAULT_DOMAIN default通过仪表盘创建的用户默认角色配置为 user OPENSTACK_KEYSTONE_DEFAULT_ROLE user如果您选择网络参数1禁用支持3层网络服务OPENSTACK_NEUTRON_NETWORK { ... enable_router: False, enable_quotas: False, enable_distributed_router: False, enable_ha_router: False, enable_lb: False, enable_firewall: False, enable_vpn: False, enable_fip_topology_check: False, }可以选择性地配置时区TIME_ZONE TIME_ZONE(Asia/Shanghai)[rootcontroller ~]# systemctl restart httpd.service memcached.service浏览器访问http://192.168.80.151/dashboard域dafualt账号密码都为admin