#安装和配置计算节点
#安装组件¶
yum install -y openstack-neutron-linuxbridge ebtables ipset openstack-neutron openstack-neutron-ml2
#配置通用组件
cp /etc/neutron/neutron.conf /etc/neutron/neutron.conf.bac
openstack-config --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
#请根据实际情况自行修改rabbitmq对应服务的ip
openstack-config --set /etc/neutron/neutron.conf DEFAULT transport_url rabbit://guest:[email protected]:5672
openstack-config --set /etc/neutron/neutron.conf database connection mysql+pymysql://neutron:loongson@controller:3306/neutron
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken www_authenticate_uri http://controller:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_url http://controller:5000
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken memcached_servers controller:11211
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken auth_type password
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken user_domain_name default
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken project_name service
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken username neutron
openstack-config --set /etc/neutron/neutron.conf keystone_authtoken password loongson
openstack-config --set /etc/neutron/neutron.conf oslo_concurrency lock_path /var/lib/neutron/tmp
#查看并核实已经修改的配置是否存在问题
egrep -v “#|$” /etc/neutron/neutron.conf
#tee /etc/neutron/neutron.conf <<-‘EOF’
#[DEFAULT]
#auth_strategy = keystone
#transport_url = rabbit://guest:[email protected]:5672
#[database]
#connection = mysql+pymysql://neutron:loongson@controller:3306/neutron
#[keystone_authtoken]
#www_authenticate_uri = http://controller:5000
#auth_url = http://controller:5000
#memcached_servers = controller:11211
#auth_type = password
#project_domain_name = default
#user_domain_name = default
#project_name = service
#username = neutron
#password = loongson
#[oslo_concurrency]
#lock_path = /var/lib/neutron/tmp
#EOF
#配置网络选项
cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bac
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan true
#请根据实际情况自行修改local_ip的值
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip 10.130.0.87
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group false
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver iptables
#请根据实际情况自行修改provider的值
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini linux_bridge physical_interface_mappings provider:enp0s3f0
egrep -v “#|KaTeX parse error: Expected 'EOF', got '#' at position 50: …idge_agent.ini #̲tee /etc/neutro…” /etc/neutron/plugins/ml2/ml2_conf.ini
#tee /etc/neutron/plugins/ml2/ml2_conf.ini <<-‘EOF’
#[DEFAULT]
#debug = true
#[ml2]
#type_drivers = flat,vlan,vxlan
#tenant_network_types = vxlan
#mechanism_drivers = linuxbridge,l2population
#extension_drivers = port_security
#[ml2_type_flat]
#flat_networks = provider
#[ml2_type_vxlan]
#vni_ranges = 1:1000
#[securitygroup]
#enable_ipset = true
#EOF
#备份linuxbridge_agent.ini配置
cp /etc/neutron/plugins/ml2/linuxbridge_agent.ini /etc/neutron/plugins/ml2/linuxbridge_agent.ini.bak
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan true
#请根据实际情况自行修改local_ip的值
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip 10.130.0.87
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population true
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group false
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver iptables
#请根据实际情况自行修改provider的值
openstack-config --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini linux_bridge physical_interface_mappings provider:enp0s3f0
egrep -v “#|KaTeX parse error: Expected 'EOF', got '#' at position 51: …idge_agent.ini #̲tee /etc/neutro…” /etc/neutron/l3_agent.ini
#tee /etc/neutron/l3_agent.ini <<-‘EOF’
#[DEFAULT]
#interface_driver = linuxbridge
#EOF
#备份dhcp_agent.ini配置
cp /etc/neutron/dhcp_agent.ini /etc/neutron/dhcp_agent.ini.bak
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT interface_driver linuxbridge
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT dhcp_driver neutron.agent.linux.dhcp.Dnsmasq
openstack-config --set /etc/neutron/dhcp_agent.ini DEFAULT enable_isolated_metadata true
egrep -v “#|KaTeX parse error: Expected 'EOF', got '#' at position 32: …dhcp_agent.ini #̲tee /etc/neutro…” /etc/neutron/metadata_agent.ini
#tee /etc/neutron/metadata_agent.ini <<-‘EOF’
#[DEFAULT]
#nova_metadata_host = controller
#metadata_proxy_shared_secret = devops
#EOF
#重启neutron-agent服务，并配置开机启动:
systemctl enable neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent
systemctl restart neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent
systemctl status neutron-linuxbridge-agent neutron-dhcp-agent neutron-metadata-agent neutron-l3-agent
#如果net.bridge.bridge-nf-call-iptables和net.bridge.bridge-nf-call-ip6tables的值为空，并且/proc/sys/net/bridge/不存在，执行modprobe br_netfilter重新加载
#配置/etc/nova/nova.conf
#注意：/etc/nova/nova.conf已在《6-nova-computer部署脚本.sh》中进行配置