National Vocational Skills Competition Cloud Computing--Higher Vocational Group Competition Question Paper ③ (Private Cloud)

The first session topic: OpenStack platform deployment and operation and maintenance

An enterprise plans to use OpenStack to build an enterprise cloud platform to achieve elastic management of resource pools, centralized management of enterprise applications, unified security authentication and authorization, and other management.
The system architecture is shown in Figure 1, and the IP address planning is shown in Table 1.

Instructions:
1. x in the table is the examination position number;
2. According to the information given in the chart, check the hardware connection and network device configuration to ensure that the network connection is normal;
3. The resource packages and attachments required for the exam are given in the exam seat information table;
4. During the competition, please do not change the password of the server system, otherwise the competition system may not be able to detect and score properly, and the responsibility lies with the contestants themselves.

Task 1 Basic operation and maintenance tasks (5 points)

1. According to the IP address plan in Table 1, set the IP address of each server node to ensure normal network communication. Set the host name of cloud server 1 as Controller and the host name of cloud server 2 as Compute, and modify the hosts file to map the IP address to the host name. , turn off the firewall and set it to not start at boot, and set SELinux to Permissive mode.
2. Upload the provided CentOS-7-x86_64-DVD-1804.iso and OpenStackQueens.iso CD images to the /root directory of the Controller server, then create the centos directory and openstack directory respectively in the /opt directory, and copy the image file CentOS- Mount 7-x86_64-DVD-1804.iso to the centos directory, and mount the image file OpenStackQueens.iso to the openstack directory.
3. Use the software package in the centos directory to install the vsftp server on the Controller node, set it to start automatically at boot, and use FTP to provide the yum warehouse service. Set the yum source files ftp.repo of the controller node and compute node respectively. The ftp server address uses the IP form. .
4．Deploy the chrony server on the Controller node, allow other nodes to synchronize time, start the service and set it to start at startup; specify the controller node as the upstream NTP server on the compute node, restart the service and set it to start at startup.
5. Use blank partitions to divide two 100G partitions on the compute node.

Task 2 OpenStack construction task (15 points)

1. Install the quickinstall software package on the control node and computing node respectively, and configure the basic variables in the script file according to Table 2 (the configuration script file is /etc/cloudconfig/openrc.sh).

2. Use the /usr/local/bin/openstack-install-mysql.sh script to install Mariadb, Memcached, etcd services on the controller node.
3. Use the /usr/local/bin/openstack-install-keystone.sh script to install the Keystone service on the controller node.
4．Use the /usr/local/bin/openstack-install-glance.sh script to install the glance service on the controller node.
5. Use the /usr/local/bin/openstack-install-nova -controller.sh script and /usr/local/bin/openstack-install-nova -compute.sh script to install the Nova service on the controller node and compute node respectively.
6．Modify the /usr/local/bin/openstack-install-neutron -controller.sh script and the /usr/local/bin/openstack-install-neutron -controller.sh script on the controller node and compute node respectively to install the Neutron service. Use vlan for the network. model.
7. Use the /usr/local/bin/openstack-install-heat.sh script dashboad service on the controller node.
8. Modify the /usr/local/bin/openstack-install-cinder -controller/compute.sh script on the controller node and compute node respectively to install the cinder service.

Task 3 OpenStack cloud platform operation and maintenance (15 points)

1. Use the provided cloud security framework component to optimize the keystone security policy in http://172.17.x.10/dashboard from http to https.
2. On the openstack private cloud platform, add controller node resources to the cloud platform (that is, the controller node is also used as a compute node).
3. On the openstack private cloud platform, configure the cloud host internal network intnet and external network extnet (use vlan network mode, the cloud host floating IP network segment is 172.18.x.0/24, the gateway is 172.18.x.1, where x is the test bit number), and complete the connection between the internal network and the external network.
4．Upload the CentOS_7.5_x86_64.qcow2 file from the PC to the controller node, and use glance related commands to upload the image on the openstack private cloud platform. The image source is CentOS_7.5_x86_64.qcow2, named Gmirror1, min _ram is 2048M, and min_disk is 30G .
5. On the openstack private cloud platform, use the command to create a cloud host type named myflavor, with a memory of 1024MB, a hard disk of 20GB, and a virtual core count of 2.
6．On the openstack private cloud platform, based on the "Gmirror1" image, "myflavor" host type, intsubnet network, bind the floating IP, create a cloud host VM1 by using the command, and start VM1 (if an error occurs during the startup process, troubleshoot and Resolve the error) and remotely log in to VM1 using the PC function.
7. On the openstack private cloud platform, create a volume type named "lvm", create a 40G cloud disk with the volume type lvm, and attach it to the virtual machine VM1.
8. On cloud host VM1, partition and format the attached cloud disk and permanently mount it to the /opt directory.
9. Write a shell script named /root/openstack/deletevm.sh in the Controller node to release cloud host VM1, and execute the script to complete the instance release.
10．Use the image Openstack-error-3 to rebuild the cloud host "all-in-one" (account: root, password: 000000). In the openstack platform in the rebuilt cloud host, the virtual machine cannot be created and the scheduler is always displayed. Please use the error message to troubleshoot the error so that the cloud platform can be used normally.

Task 4 OpenStack cloud platform operation and maintenance development (15 points, this task only announces the exam scope, not the competition questions)

This task contains 2-4 subtasks, which involve writing Python scripts to call the OpenStack API to manage and operate the Openstack cloud platform. Use the automated operation and maintenance tool ansible to perform operation and maintenance operations such as batch system configuration, batch program deployment, and batch running of commands on cloud hosts.

If you need the environment, you can send a private message to the blogger! !