curl http://elven.vip/ks/openstack/pike.install.sh>pike.install.sh && sh pike.install.sh

#!/bin/sh# openstack pike 單機(jī) 一鍵安裝# 環(huán)境 centos 7.4.1708 x86_64# 更多內(nèi)容 http://dwz.cn/openstack# Myde by Elven[[ `uname -r` = *el7* ]] && { echo '開啟安裝openstack pike'; } || { echo '請(qǐng)?jiān)贑entOS7.4 環(huán)境運(yùn)行';exit; }###########################################參數(shù)#獲取第一塊網(wǎng)卡名、ip地址Net=`ip add|egrep global|awk '{ print $NF }'|head -n 1`IP=`ip add|grep global|awk -F'[ /]+' '{ print $3 }'|head -n 1`echo "網(wǎng)卡名稱:$Net"echo "IP地址: $IP"#參數(shù)DBPass=elven2017  #SQL root密碼Node=controller   #節(jié)點(diǎn)名(controller不要改動(dòng))Netname=$Net    #網(wǎng)卡名稱MyIP=$IP      #IP地址VncProxy=$IP    #VNC代理外網(wǎng)IP地址Imgdir=/date/glance #自定義glance鏡像目錄VHD=/date/nova   #自定義Nova實(shí)例路徑Kvm=qemu      #QEMU或KVM ,KVM需要硬件支持###########################################1、設(shè)置echo '關(guān)閉selinux、防火墻'systemctl stop firewalld.servicesystemctl disable firewalld.servicefirewall-cmd --statesed -i '/^SELINUX=.*/c SELINUX=disabled' /etc/selinux/configsed -i 's/^SELINUXTYPE=.*/SELINUXTYPE=disabled/g' /etc/selinux/configgrep --color=auto '^SELINUX' /etc/selinux/configsetenforce 0echo '時(shí)間同步'/usr/sbin/ntpdate ntp6.aliyun.com echo "*/3 * * * * /usr/sbin/ntpdate ntp6.aliyun.com &> /dev/null" > /tmp/crontabcrontab /tmp/crontabecho '設(shè)置hostname'hostnamectl set-hostname $Nodeecho "$MyIP  $Node">>/etc/hosts#使用阿里源rm -f /etc/yum.repos.d/*wget -O /etc/yum.repos.d/CentOS-Base.repo http://mirrors.aliyun.com/repo/Centos-7.repowget -O /etc/yum.repos.d/epel.repo http://mirrors.aliyun.com/repo/epel-7.reposed -i '/aliyuncs.com/d' /etc/yum.repos.d/*.repo #刪除阿里內(nèi)網(wǎng)地址echo '自定義openstack源'wget -O /etc/yum.repos.d/Ali-pike.repo http://elven.vip/ks/openstack/Ali-pike.repoyum clean all && yum makecache #生成緩存###########################################2 安裝function installrpm() {echo 'OpenStack tools 安裝'yum install -y python-openstackclient openstack-selinux / python2-PyMySQL openstack-utils echo 'MariaDB安裝'yum install mariadb mariadb-server mariadb-galera-server -yyum install expect -yecho 'RabbitMQ安裝'yum install rabbitmq-server erlang socat -yecho 'Keystone安裝'yum install -y openstack-keystone httpd mod_wsgi memcached python-memcachedyum install apr apr-util -yecho '安裝Glance'yum install -y openstack-glance python-glanceecho '安裝nova'yum install -y openstack-nova-api openstack-nova-conductor / openstack-nova-console openstack-nova-novncproxy / openstack-nova-scheduler openstack-nova-placement-api / openstack-nova-computeecho '安裝neutron'yum install -y openstack-neutron openstack-neutron-ml2 / openstack-neutron-linuxbridge python-neutronclient ebtables ipsetecho '安裝dashboard'yum install openstack-dashboard -y}echo '安裝openstack'installrpmecho '再次安裝，防止下載失敗'installrpm###########################################3、配置# #------------------#####################echo 'SQL數(shù)據(jù)庫(kù)配置'cp /etc/my.cnf.d/openstack.cnf{,.bak}echo "#[mysqld]bind-address = 0.0.0.0default-storage-engine = innodbinnodb_file_per_tablemax_connections = 4096collation-server = utf8_general_cicharacter-set-server = utf8#">/etc/my.cnf.d/openstack.cnfecho '啟動(dòng)數(shù)據(jù)庫(kù)服務(wù)'systemctl enable mariadb.servicesystemctl start mariadb.servicesleep 5netstat -antp|grep mysqld#mysql_secure_installation #初始化設(shè)置密碼,自動(dòng)交互[[ -f /usr/bin/expect ]] || { yum install expect -y; } #若沒expect則安裝/usr/bin/expect << EOFset timeout 30spawn mysql_secure_installationexpect {  "enter for none" { send "/r"; exp_continue}  "Y/n" { send "Y/r" ; exp_continue}  "password:" { send "$DBPass/r"; exp_continue}  "new password:" { send "$DBPass/r"; exp_continue}  "Y/n" { send "Y/r" ; exp_continue}  eof { exit }}EOF#測(cè)試mysql -u root -p$DBPass -e "show databases;"[ $? = 0 ] || { echo "mariadb初始化失敗";exit; }echo '創(chuàng)建數(shù)據(jù)庫(kù)、用戶授權(quán)'mysql -u root -p$DBPass -e "create database keystone;grant all privileges on keystone.* to 'keystone'@'localhost' identified by 'keystone';grant all privileges on keystone.* to 'keystone'@'%' identified by 'keystone';create database glance;grant all privileges on glance.* to 'glance'@'localhost' identified by 'glance';grant all privileges on glance.* to 'glance'@'%' identified by 'glance';create database nova;grant all privileges on nova.* to 'nova'@'localhost' identified by 'nova';grant all privileges on nova.* to 'nova'@'%' identified by 'nova';create database nova_api;grant all privileges on nova_api.* to 'nova'@'localhost' identified by 'nova';grant all privileges on nova_api.* to 'nova'@'%' identified by 'nova';create database nova_cell0;grant all privileges on nova_cell0.* to 'nova'@'localhost' identified by 'nova';grant all privileges on nova_cell0.* to 'nova'@'%' identified by 'nova';create database neutron;grant all privileges on neutron.* to 'neutron'@'localhost' identified by 'neutron';grant all privileges on neutron.* to 'neutron'@'%' identified by 'neutron';flush privileges;select user,host from mysql.user;show databases;"## #------------------#####################echo 'RabbitMQ配置'echo 'NODENAME=rabbit@controller'>/etc/rabbitmq/rabbitmq-env.confsystemctl enable rabbitmq-server.servicesystemctl start rabbitmq-server.servicesleep 3rabbitmq-plugins enable rabbitmq_management #啟動(dòng)web插件端口15672sleep 6###########rabbit創(chuàng)建用戶及密碼rabbitmqctl add_user admin adminrabbitmqctl set_user_tags admin administratorrabbitmqctl add_user openstack openstack rabbitmqctl set_permissions openstack ".*" ".*" ".*" rabbitmqctl set_user_tags openstack administratorsystemctl restart rabbitmq-server.servicesleep 3netstat -antp|grep '5672'[[ `rabbitmqctl list_users|grep openstack|wc -l` = 1 ]] || { echo 'rabbit創(chuàng)建用戶失敗'; echo 'rabbit創(chuàng)建用戶失敗,請(qǐng)手動(dòng)執(zhí)行命令創(chuàng)建用戶'>>./error.install.log; }# #------------------######################Keystone#memcached啟動(dòng)cp /etc/sysconfig/memcached{,.bak}systemctl enable memcached.servicesystemctl start memcached.servicenetstat -antp|grep 11211echo 'Keystone 配置'cp /etc/keystone/keystone.conf{,.bak} #備份默認(rèn)配置Keys=$(openssl rand -hex 10) #生成隨機(jī)密碼echo $Keysecho "kestone $Keys">/root/openstack.logecho "[DEFAULT]admin_token = $Keysverbose = true[database]connection = mysql+pymysql://keystone:keystone@controller/keystone[token]provider = fernetdriver = memcache[memcache]servers = controller:11211">/etc/keystone/keystone.conf#初始化身份認(rèn)證服務(wù)的數(shù)據(jù)庫(kù)su -s /bin/sh -c "keystone-manage db_sync" keystone#檢查表是否創(chuàng)建成功mysql -h controller -ukeystone -pkeystone -e "use keystone;show tables;"#初始化密鑰存儲(chǔ)庫(kù)keystone-manage fernet_setup --keystone-user keystone --keystone-group keystonekeystone-manage credential_setup --keystone-user keystone --keystone-group keystone#設(shè)置admin用戶（管理用戶）和密碼keystone-manage bootstrap --bootstrap-password admin / --bootstrap-admin-url http://controller:35357/v3/ / --bootstrap-internal-url http://controller:5000/v3/ / --bootstrap-public-url http://controller:5000/v3/ / --bootstrap-region-id RegionOne#apache配置cp /etc/httpd/conf/httpd.conf{,.bak}echo "ServerName controller">>/etc/httpd/conf/httpd.confln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/#Apache HTTP 啟動(dòng)并設(shè)置開機(jī)自啟動(dòng)systemctl enable httpd.servicesystemctl restart httpd.servicesleep 3netstat -antp|egrep ':5000|:35357|:80'#創(chuàng)建 OpenStack 客戶端環(huán)境腳本#admin環(huán)境腳本echo "export OS_PROJECT_DOMAIN_NAME=defaultexport OS_USER_DOMAIN_NAME=default export OS_PROJECT_NAME=admin export OS_USERNAME=adminexport OS_PASSWORD=adminexport OS_AUTH_URL=http://controller:35357/v3export OS_IDENTITY_API_VERSION=3export OS_IMAGE_API_VERSION=2">./admin-openstack.sh#測(cè)試腳本是否生效source ./admin-openstack.shopenstack token issue#創(chuàng)建service項(xiàng)目,創(chuàng)建glance,nova,neutron用戶，并授權(quán)openstack project create --domain default --description "Service Project" serviceopenstack user create --domain default --password=glance glanceopenstack role add --project service --user glance adminopenstack user create --domain default --password=nova novaopenstack role add --project service --user nova adminopenstack user create --domain default --password=neutron neutronopenstack role add --project service --user neutron admin#創(chuàng)建demo項(xiàng)目(普通用戶密碼及角色)openstack project create --domain default --description "Demo Project" demoopenstack user create --domain default --password=demo demoopenstack role create useropenstack role add --project demo --user demo user#demo環(huán)境腳本echo "export OS_PROJECT_DOMAIN_NAME=defaultexport OS_USER_DOMAIN_NAME=defaultexport OS_PROJECT_NAME=demoexport OS_USERNAME=demoexport OS_PASSWORD=demoexport OS_AUTH_URL=http://controller:5000/v3export OS_IDENTITY_API_VERSION=3export OS_IMAGE_API_VERSION=2">./demo-openstack.sh#測(cè)試腳本是否生效source ./demo-openstack.shopenstack token issue# #------------------#####################echo 'Glance鏡像服務(wù)'# keystone上服務(wù)注冊(cè) ,創(chuàng)建glance服務(wù)實(shí)體,API端點(diǎn)（公有、私有、admin）source ./admin-openstack.sh || { echo "加載前面設(shè)置的admin-openstack.sh環(huán)境變量腳本";exit; }openstack service create --name glance --description "OpenStack Image" imageopenstack endpoint create --region RegionOne image public http://controller:9292openstack endpoint create --region RegionOne image internal http://controller:9292openstack endpoint create --region RegionOne image admin http://controller:9292cp /etc/glance/glance-api.conf{,.bak}cp /etc/glance/glance-registry.conf{,.bak}# images默認(rèn)/var/lib/glance/images/#Imgdir=/date/glancemkdir -p $Imgdirchown glance:nobody $Imgdirecho "鏡像目錄： $Imgdir"echo "#[database]connection = mysql+pymysql://glance:glance@controller/glance[keystone_authtoken]auth_uri = http://controller:5000/v3auth_url = http://controller:35357/v3memcached_servers = controller:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = glancepassword = glance[paste_deploy]flavor = keystone[glance_store]stores = file,httpdefault_store = filefilesystem_store_datadir = $Imgdir#">/etc/glance/glance-api.conf#echo "#[database]connection = mysql+pymysql://glance:glance@controller/glance[keystone_authtoken]auth_uri = http://controller:5000/v3auth_url = http://controller:35357/v3memcached_servers = controller:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = glancepassword = glance[paste_deploy]flavor = keystone#">/etc/glance/glance-registry.conf#同步數(shù)據(jù)庫(kù),檢查數(shù)據(jù)庫(kù)su -s /bin/sh -c "glance-manage db_sync" glancemysql -h controller -u glance -pglance -e "use glance;show tables;"#啟動(dòng)服務(wù)并設(shè)置開機(jī)自啟動(dòng)systemctl enable openstack-glance-api openstack-glance-registrysystemctl start openstack-glance-api openstack-glance-registrynetstat -antp|egrep '9292|9191' #檢測(cè)服務(wù)端口# #------------------######################創(chuàng)建Nova數(shù)據(jù)庫(kù)、用戶、認(rèn)證，前面已設(shè)置source ./admin-openstack.sh# keystone上服務(wù)注冊(cè) ,創(chuàng)建nova用戶、服務(wù)、API# nova用戶前面已建openstack service create --name nova --description "OpenStack Compute" computeopenstack endpoint create --region RegionOne compute public http://controller:8774/v2.1openstack endpoint create --region RegionOne compute internal http://controller:8774/v2.1openstack endpoint create --region RegionOne compute admin http://controller:8774/v2.1#創(chuàng)建placement用戶、服務(wù)、APIopenstack user create --domain default --password=placement placementopenstack role add --project service --user placement adminopenstack service create --name placement --description "Placement API" placementopenstack endpoint create --region RegionOne placement public http://controller:8778openstack endpoint create --region RegionOne placement internal http://controller:8778openstack endpoint create --region RegionOne placement admin http://controller:8778mkdir -p $VHDchown -R nova:nova $VHDecho 'nova配置'echo '#[DEFAULT]instances_path='$VHD'enabled_apis = osapi_compute,metadatatransport_url = rabbit://openstack:openstack@controllermy_ip = '$MyIP'use_neutron = Truefirewall_driver = nova.virt.firewall.NoopFirewallDriverosapi_compute_listen_port=8774[api_database]connection = mysql+pymysql://nova:nova@controller/nova_api[database]connection = mysql+pymysql://nova:nova@controller/nova[api]auth_strategy = keystone[keystone_authtoken]auth_uri = http://controller:5000auth_url = http://controller:35357memcached_servers = controller:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = novapassword = nova[vnc]enabled = truevncserver_listen = $my_ipvncserver_proxyclient_address = $my_ipnovncproxy_base_url = http://'$VncProxy':6080/vnc_auto.html[glance]api_servers = http://controller:9292[oslo_concurrency]lock_path = /var/lib/nova/tmp[placement]os_region_name = RegionOneproject_domain_name = Defaultproject_name = serviceauth_type = passworduser_domain_name = Defaultauth_url = http://controller:35357/v3username = placementpassword = placement[scheduler]discover_hosts_in_cells_interval = 300[libvirt]virt_type = '$Kvm'#'>/etc/nova/nova.confecho "#Placement API<Directory /usr/bin>  <IfVersion >= 2.4>   Require all granted  </IfVersion>  <IfVersion < 2.4>   Order allow,deny   Allow from all  </IfVersion></Directory>">>/etc/httpd/conf.d/00-nova-placement-api.confsystemctl restart httpdsleep 5#同步數(shù)據(jù)庫(kù)su -s /bin/sh -c "nova-manage api_db sync" novasu -s /bin/sh -c "nova-manage cell_v2 map_cell0" novasu -s /bin/sh -c "nova-manage cell_v2 create_cell --name=cell1 --verbose" novasu -s /bin/sh -c "nova-manage db sync" nova#檢測(cè)數(shù)據(jù)nova-manage cell_v2 list_cellsmysql -h controller -u nova -pnova -e "use nova_api;show tables;"mysql -h controller -u nova -pnova -e "use nova;show tables;" mysql -h controller -u nova -pnova -e "use nova_cell0;show tables;"# #------------------#####################echo 'Neutron服務(wù)'source ./admin-openstack.sh # 創(chuàng)建Neutron服務(wù)實(shí)體,API端點(diǎn)openstack service create --name neutron --description "OpenStack Networking" networkopenstack endpoint create --region RegionOne network public http://controller:9696openstack endpoint create --region RegionOne network internal http://controller:9696openstack endpoint create --region RegionOne network admin http://controller:9696#Neutron 備份配置cp /etc/neutron/neutron.conf{,.bak2}cp /etc/neutron/plugins/ml2/ml2_conf.ini{,.bak}ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.inicp /etc/neutron/plugins/ml2/linuxbridge_agent.ini{,.bak}cp /etc/neutron/dhcp_agent.ini{,.bak}cp /etc/neutron/metadata_agent.ini{,.bak}cp /etc/neutron/l3_agent.ini{,.bak}#配置echo '#[neutron]url = http://controller:9696auth_url = http://controller:35357auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultregion_name = RegionOneproject_name = serviceusername = neutronpassword = neutronservice_metadata_proxy = truemetadata_proxy_shared_secret = metadata#'>>/etc/nova/nova.conf#echo '[DEFAULT]nova_metadata_ip = controllermetadata_proxy_shared_secret = metadata#'>/etc/neutron/metadata_agent.ini#echo '#[ml2]tenant_network_types = type_drivers = vlan,flatmechanism_drivers = linuxbridgeextension_drivers = port_security[ml2_type_flat]flat_networks = provider[securitygroup]enable_ipset = True#'>/etc/neutron/plugins/ml2/ml2_conf.iniecho '#[linux_bridge]physical_interface_mappings = provider:'$Netname'[vxlan]enable_vxlan = false[agent]prevent_arp_spoofing = True[securitygroup]firewall_driver = neutron.agent.linux.iptables_firewall.IptablesFirewallDriverenable_security_group = True#'>/etc/neutron/plugins/ml2/linuxbridge_agent.ini#echo '#[DEFAULT]interface_driver = linuxbridgedhcp_driver = neutron.agent.linux.dhcp.Dnsmasqenable_isolated_metadata = true#'>/etc/neutron/dhcp_agent.ini#echo '[DEFAULT]core_plugin = ml2service_plugins = routerallow_overlapping_ips = truetransport_url = rabbit://openstack:openstack@controllerauth_strategy = keystonenotify_nova_on_port_status_changes = truenotify_nova_on_port_data_changes = true[keystone_authtoken]auth_uri = http://controller:5000auth_url = http://controller:35357memcached_servers = controller:11211auth_type = passwordproject_domain_name = defaultuser_domain_name = defaultproject_name = serviceusername = neutronpassword = neutron[nova]auth_url = http://controller:35357auth_type = passwordproject_domain_id = defaultuser_domain_id = defaultregion_name = RegionOneproject_name = serviceusername = novapassword = nova[database]connection = mysql://neutron:neutron@controller:3306/neutron[oslo_concurrency]lock_path = /var/lib/neutron/tmp #'>/etc/neutron/neutron.conf#echo '[DEFAULT]interface_driver = linuxbridge#'>/etc/neutron/l3_agent.ini##同步數(shù)據(jù)庫(kù)su -s /bin/sh -c "neutron-db-manage --config-file /etc/neutron/neutron.conf / --config-file /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron#檢測(cè)數(shù)據(jù)mysql -h controller -u neutron -pneutron -e "use neutron;show tables;" # #------------------######################dashboardecho '配置openstack Web'cp /etc/openstack-dashboard/local_settings{,.bak}Setfiles=/etc/openstack-dashboard/local_settingssed -i 's#_member_#user#g' $Setfilessed -i 's#OPENSTACK_HOST = "127.0.0.1"#OPENSTACK_HOST = "controller"#' $Setfiles##允許所有主機(jī)訪問#sed -i "/ALLOWED_HOSTS/cALLOWED_HOSTS = ['*', ]" $Setfiles#去掉memcached注釋#sed -in '153,158s/#//' $Setfiles sed -in '160,164s/.*/#&/' $Setfilessed -i 's#UTC#Asia/Shanghai#g' $Setfilessed -i 's#%s:5000/v2.0#%s:5000/v3#' $Setfilessed -i '/ULTIDOMAIN_SUPPORT/cOPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True' $Setfilessed -i "s@^#OPENSTACK_KEYSTONE_DEFAULT@OPENSTACK_KEYSTONE_DEFAULT@" $Setfilesecho '#setOPENSTACK_API_VERSIONS = {  "identity": 3,  "image": 2,  "volume": 2,}#'>>$Setfilessystemctl restart httpdsleep 5##########################################echo '啟動(dòng)服務(wù)'#Apache systemctl enable httpd.service#systemctl restart httpd haproxy#netstat -antp|egrep 'httpd'#glance服務(wù)systemctl enable openstack-glance-api openstack-glance-registrysystemctl restart openstack-glance-api openstack-glance-registry#nova服務(wù) systemctl enable openstack-nova-api.service / openstack-nova-consoleauth.service openstack-nova-scheduler.service / openstack-nova-conductor.service openstack-nova-novncproxy.service / libvirtd.service openstack-nova-compute.service#啟動(dòng)systemctl start openstack-nova-api.service / openstack-nova-consoleauth.service openstack-nova-scheduler.service / openstack-nova-conductor.service openstack-nova-novncproxy.service / libvirtd.service openstack-nova-compute.service#neutron服務(wù)systemctl enable neutron-server.service / neutron-linuxbridge-agent.service neutron-dhcp-agent.service / neutron-metadata-agent.service neutron-l3-agent.servicesystemctl start neutron-server.service / neutron-linuxbridge-agent.service neutron-dhcp-agent.service / neutron-metadata-agent.service neutron-l3-agent.service###########################################cheackecho "查看節(jié)點(diǎn)"source ./admin-openstack.sh openstack compute service listopenstack network agent list###########################################endecho '安裝完畢！數(shù)據(jù)庫(kù)root密碼 '$DBPass'登錄Web管理 http://'$MyIP'/dashboard域  default用戶 admin密碼 admin推薦 火狐瀏覽器'########################################### #在線安裝# yum install -y wget && wget -O pike.install.sh /  http://elven.vip/ks/openstack/pike.install.sh && sh pike.install.sh