'apt-get' is more primitive command than 'apt'. In addition, 'apt' is the most recommended interface.[1] [1]https://debian-handbook.info/browse/stable/sect.apt-get.html Change-Id: I40dd27f3856a84f936236679cd0201b079a2172e
14 KiB
Install and configure controller node
This section describes how to install and configure the Compute service, code-named nova, on the controller node.
Prerequisites
Before you install and configure the Compute service, you must create databases, service credentials, and API endpoints.
To create the databases, complete these steps:
Use the database access client to connect to the database server as the
root
user:$ mysql -u root -p
Create the
nova_api
andnova
databases:mysql> CREATE DATABASE nova_api; mysql> CREATE DATABASE nova;
Grant proper access to the databases:
mysql> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'localhost' \ IDENTIFIED BY 'NOVA_DBPASS'; mysql> GRANT ALL PRIVILEGES ON nova_api.* TO 'nova'@'%' \ IDENTIFIED BY 'NOVA_DBPASS'; mysql> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \ IDENTIFIED BY 'NOVA_DBPASS'; mysql> GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \ IDENTIFIED BY 'NOVA_DBPASS';
Replace
NOVA_DBPASS
with a suitable password.Exit the database access client.
Source the
admin
credentials to gain access to admin-only CLI commands:$ . admin-openrc
To create the service credentials, complete these steps:
Create the
nova
user:$ openstack user create --domain default \ --password-prompt nova User Password: Repeat User Password: +---------------------+----------------------------------+ | Field | Value | +---------------------+----------------------------------+ | domain_id | default | | enabled | True | | id | 8a7dbf5279404537b1c7b86c033620fe | | name | nova | | password_expires_at | None | +---------------------+----------------------------------+
Add the
admin
role to thenova
user:$ openstack role add --project service --user nova admin
Note
This command provides no output.
Create the
nova
service entity:$ openstack service create --name nova \ --description "OpenStack Compute" compute +-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | OpenStack Compute | | enabled | True | | id | 060d59eac51b4594815603d75a00aba2 | | name | nova | | type | compute | +-------------+----------------------------------+
Create the Compute service API endpoints:
$ openstack endpoint create --region RegionOne \ compute public http://controller:8774/v2.1/%\(tenant_id\)s +--------------+-------------------------------------------+ | Field | Value | +--------------+-------------------------------------------+ | enabled | True | | id | 3c1caa473bfe4390a11e7177894bcc7b | | interface | public | | region | RegionOne | | region_id | RegionOne | | service_id | 060d59eac51b4594815603d75a00aba2 | | service_name | nova | | service_type | compute | | url | http://controller:8774/v2.1/%(tenant_id)s | +--------------+-------------------------------------------+ $ openstack endpoint create --region RegionOne \ compute internal http://controller:8774/v2.1/%\(tenant_id\)s +--------------+-------------------------------------------+ | Field | Value | +--------------+-------------------------------------------+ | enabled | True | | id | e3c918de680746a586eac1f2d9bc10ab | | interface | internal | | region | RegionOne | | region_id | RegionOne | | service_id | 060d59eac51b4594815603d75a00aba2 | | service_name | nova | | service_type | compute | | url | http://controller:8774/v2.1/%(tenant_id)s | +--------------+-------------------------------------------+ $ openstack endpoint create --region RegionOne \ compute admin http://controller:8774/v2.1/%\(tenant_id\)s +--------------+-------------------------------------------+ | Field | Value | +--------------+-------------------------------------------+ | enabled | True | | id | 38f7af91666a47cfb97b4dc790b94424 | | interface | admin | | region | RegionOne | | region_id | RegionOne | | service_id | 060d59eac51b4594815603d75a00aba2 | | service_name | nova | | service_type | compute | | url | http://controller:8774/v2.1/%(tenant_id)s | +--------------+-------------------------------------------+
Install and configure components
obs
Install the packages:
# zypper install openstack-nova-api openstack-nova-scheduler \ openstack-nova-conductor openstack-nova-consoleauth \ openstack-nova-novncproxy iptables
rdo
Install the packages:
# yum install openstack-nova-api openstack-nova-conductor \ openstack-nova-console openstack-nova-novncproxy \ openstack-nova-scheduler
ubuntu
Install the packages:
# apt install nova-api nova-conductor nova-consoleauth \ nova-novncproxy nova-scheduler
debian
Install the packages:
# apt install nova-api nova-conductor nova-consoleauth \ nova-consoleproxy nova-scheduler
Note
nova-api-metadata
is included in thenova-api
package, and can be selected through debconf.Note
A unique
nova-consoleproxy
package provides thenova-novncproxy
,nova-spicehtml5proxy
, andnova-xvpvncproxy
packages. To select packages, edit the/etc/default/nova-consoleproxy
file or use the debconf interface. You can also manually edit the/etc/default/nova-consoleproxy
file, and stop and start the console daemons.
Edit the
/etc/nova/nova.conf
file and complete the following actions:rdo or obs
In the
[DEFAULT]
section, enable only the compute and metadata APIs:[DEFAULT] ... enabled_apis = osapi_compute,metadata
In the
[api_database]
and[database]
sections, configure database access:[api_database] ... connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova_api [database] ... connection = mysql+pymysql://nova:NOVA_DBPASS@controller/nova
Replace
NOVA_DBPASS
with the password you chose for the Compute databases.In the
[DEFAULT]
section, configureRabbitMQ
message queue access:[DEFAULT] ... transport_url = rabbit://openstack:RABBIT_PASS@controller
Replace
RABBIT_PASS
with the password you chose for theopenstack
account inRabbitMQ
.In the
[DEFAULT]
and[keystone_authtoken]
sections, configure Identity service access:[DEFAULT] ... auth_strategy = keystone [keystone_authtoken] ... auth_uri = http://controller:5000 auth_url = http://controller:35357 memcached_servers = controller:11211 auth_type = password project_domain_name = default user_domain_name = default project_name = service username = nova password = NOVA_PASS
Replace
NOVA_PASS
with the password you chose for thenova
user in the Identity service.Note
Comment out or remove any other options in the
[keystone_authtoken]
section.In the
[DEFAULT]
section, configure themy_ip
option to use the management interface IP address of the controller node:[DEFAULT] ... my_ip = 10.0.0.11
debian
The
.config
and.postinst
maintainer scripts of thenova-common
package detect automatically the IP address which goes in themy_ip
directive of the[DEFAULT]
section. This value will normally still be prompted, and you can check that it is correct in the nova.conf afternova-common
is installed:[DEFAULT] ... my_ip = 10.0.0.11
In the
[DEFAULT]
section, enable support for the Networking service:[DEFAULT] ... use_neutron = True firewall_driver = nova.virt.firewall.NoopFirewallDriver
Note
By default, Compute uses an internal firewall driver. Since the Networking service includes a firewall driver, you must disable the Compute firewall driver by using the
nova.virt.firewall.NoopFirewallDriver
firewall driver.In the
[vnc]
section, configure the VNC proxy to use the management interface IP address of the controller node:[vnc] ... vncserver_listen = $my_ip vncserver_proxyclient_address = $my_ip
In the
[glance]
section, configure the location of the Image service API:[glance] ... api_servers = http://controller:9292
obs
- In the
[oslo_concurrency]
section, configure the lock path:
[oslo_concurrency] ... lock_path = /var/run/nova
rdo
In the
[oslo_concurrency]
section, configure the lock path:[oslo_concurrency] ... lock_path = /var/lib/nova/tmp
ubuntu
In the
[oslo_concurrency]
section, configure the lock path:[oslo_concurrency] ... lock_path = /var/lib/nova/tmp
ubuntu
- Due to a packaging bug, remove the
log-dir
option from the[DEFAULT]
section.
rdo or ubuntu or debian
Populate the Compute databases:
# su -s /bin/sh -c "nova-manage api_db sync" nova # su -s /bin/sh -c "nova-manage db sync" nova
Note
Ignore any deprecation messages in this output.
Finalize installation
obs
Start the Compute services and configure them to start when the system boots:
# systemctl enable openstack-nova-api.service \ openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-conductor.service openstack-nova-novncproxy.service # systemctl start openstack-nova-api.service \ openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-conductor.service openstack-nova-novncproxy.service
rdo
Start the Compute services and configure them to start when the system boots:
# systemctl enable openstack-nova-api.service \ openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-conductor.service openstack-nova-novncproxy.service # systemctl start openstack-nova-api.service \ openstack-nova-consoleauth.service openstack-nova-scheduler.service \ openstack-nova-conductor.service openstack-nova-novncproxy.service
ubuntu or debian
Restart the Compute services:
# service nova-api restart # service nova-consoleauth restart # service nova-scheduler restart # service nova-conductor restart # service nova-novncproxy restart