Neutron 计算节点安装

执行范围#

仅计算节点(compute / 11.0.1.40)

1. 安装软件包#

Terminal window
yum install -y openstack-neutron-linuxbridge ebtables ipset

2. 拉起 Provider 网卡#

写入 /etc/sysconfig/network-scripts/ifcfg-ens34

DEVICE=ens34
TYPE=Ethernet
BOOTPROTO=none
ONBOOT=yes
Terminal window
systemctl restart network

3. 配置 /etc/neutron/neutron.conf#

Terminal window
crudini --set /etc/neutron/neutron.conf DEFAULT transport_url rabbit://openstack:000000@controller
crudini --set /etc/neutron/neutron.conf DEFAULT auth_strategy keystone
crudini --set /etc/neutron/neutron.conf keystone_authtoken www_authenticate_uri http://controller:5000
crudini --set /etc/neutron/neutron.conf keystone_authtoken auth_url http://controller:5000
crudini --set /etc/neutron/neutron.conf keystone_authtoken memcached_servers controller:11211
crudini --set /etc/neutron/neutron.conf keystone_authtoken auth_type password
crudini --set /etc/neutron/neutron.conf keystone_authtoken project_domain_name default
crudini --set /etc/neutron/neutron.conf keystone_authtoken user_domain_name default
crudini --set /etc/neutron/neutron.conf keystone_authtoken project_name service
crudini --set /etc/neutron/neutron.conf keystone_authtoken username neutron
crudini --set /etc/neutron/neutron.conf keystone_authtoken password 000000
crudini --set /etc/neutron/neutron.conf oslo_concurrency lock_path /var/lib/neutron/tmp

4. 配置 Linux Bridge Agent#

/etc/neutron/plugins/ml2/linuxbridge_agent.ini

Terminal window
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini linux_bridge physical_interface_mappings provider:ens34
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan enable_vxlan True
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan local_ip 11.0.1.40
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini vxlan l2_population true
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup enable_security_group True
crudini --set /etc/neutron/plugins/ml2/linuxbridge_agent.ini securitygroup firewall_driver neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

5. 内核桥接过滤#

Terminal window
modprobe br_netfilter
echo 'net.bridge.bridge-nf-call-iptables = 1' >> /etc/sysctl.conf
echo 'net.bridge.bridge-nf-call-ip6tables = 1' >> /etc/sysctl.conf
sysctl -p

6. 更新 Nova neutron 段#

Terminal window
crudini --set /etc/nova/nova.conf neutron url http://controller:9696
crudini --set /etc/nova/nova.conf neutron auth_url http://controller:5000
crudini --set /etc/nova/nova.conf neutron auth_type password
crudini --set /etc/nova/nova.conf neutron project_domain_name default
crudini --set /etc/nova/nova.conf neutron user_domain_name default
crudini --set /etc/nova/nova.conf neutron region_name RegionOne
crudini --set /etc/nova/nova.conf neutron project_name service
crudini --set /etc/nova/nova.conf neutron username neutron
crudini --set /etc/nova/nova.conf neutron password 000000

7. 启动服务#

Terminal window
systemctl restart openstack-nova-compute.service
systemctl enable neutron-linuxbridge-agent.service
systemctl restart neutron-linuxbridge-agent.service

8. 验收#

计算节点:

Terminal window
systemctl is-active neutron-linuxbridge-agent
ip link show ens34

控制节点:

Terminal window
source /etc/keystone/admin-openrc.sh
openstack network agent list
# compute 节点 Linux bridge agent 为 alive / UP

下一步:Dashboard 安装

文章目录

文章目录