今天想独自通过逐步安装所有模块，进而了解下依赖关系，以及熟悉下每个部分，但是按照官方文档http://docs.openstack.org/操作，还是没有配置完
上司让我干脆用dibian，ubuntu系列，然后直接通过devstack来进行安装，我就不浪费时间折腾了，不论什么环境，今晚一定要配置弄完~！
先记录一下CentOS7.0安装过程中的一些步骤，主要是Controller这个结点
1: 要求
Controller Node
Network Node
Compute Node
2：Linux
最好安装minimal
VMware里需要先创建虚拟机，然后添加ISO，才能手动进行选择minimal
3：网络
CentOS7 默认不开启网络，需要
（1）ip addr查看网卡名
（2）vi打开网卡配置文件，将onboot修改成yes即可
修改hostname：
$ vi /etc/hosts
# controller
10.240.153.104 controller
$ vi /etc/sysconfig/network-scripts/ifcfg-eno16777736
HOSTNAME=controller
$ hostname controller
4：ntp
yum install ntp
备注：上海交大的NTP服务器202.120.2.101
Controller:
vi /etc/ntp.conf，修改ntp server中间的host
server 0.centos.pool.ntp.org iburst
server 1.centos.pool.ntp.org iburst
server 2.centos.pool.ntp.org iburst
server 3.centos.pool.ntp.org iburst
修改成：
server 202.120.2.101 iburst
server 202.120.2.101 iburst
server 202.120.2.101 iburst
server 202.120.2.101 iburst
5：yum
yum install http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm
yum install http://rdo.fedorapeople.org/openstack-kilo/rdo-release-kilo.rpm
yum upgrade
这里会更新一些软件，包括新版本的内核，需要reboot操作系统，然后重新选择内核版本
yum install openstack-selinux
6：SQL database
yum install mariadb mariadb-server MySQL-python
[root@localhost ~]# vi /etc/my.cnf.d/mariadb_openstack.cnf
[root@localhost ~]# cat /etc/my.cnf.d/mariadb_openstack.cnf
[mysqld]
bind-address = 10.240.153.104
default-storage-engine = innodb
innodb_file_per_table
collation-server = utf8_general_ci
init-connect = 'SET NAMES utf8'
character-set-server = utf8
[root@localhost ~]# systemctl enable mariadb.service
ln -s '/usr/lib/systemd/system/mariadb.service' '/etc/systemd/system/multi-user.target.wants/mariadb.service'
[root@localhost ~]# systemctl start mariadb.service
[root@localhost ~]# mysql_secure_installation
enter
Y
lihui
lihui
Y
后面全部Y
7：Message queue
yum install rabbitmq-server
systemctl enable rabbitmq-server.service
systemctl start rabbitmq-server.service
rabbitmqctl add_user openstack lihui
rabbitmqctl set_permissions openstack ".*" ".*" ".*"
$ mysql -u root -p
CREATE DATABASE keystone;
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'lihui';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'lihui';
# openssl rand -hex 10
#yum install openstack-keystone httpd mod_wsgi python-openstackclient memcached python-memcached
安装过程中，会比较缓慢，有些包还会报错，可多yum几次或者按照提示手动下载对应RPM进行安装
systemctl enable memcached.service
systemctl start memcached.service
vi /etc/keystone/keystone.conf
[DEFAULT]
...
admin_token = ADMIN_TOKEN
[database]
...
connection = mysql://keystone:lihui@controller/keystone
[memcache]
servers = localhost:11211
[token]
provider = keystone.token.providers.uuid.Provider
driver = keystone.token.persistence.backends.sql.Token
[revoke]
driver = keystone.contrib.revoke.backends.sql.Revoke
[DEFAULT]
#verbose = false修改成verbose = True
[root@localhost ~]# su -s /bin/sh -c "keystone-manage db_sync" keystone
Traceback (most recent call last):
File "/usr/bin/keystone-manage", line 44, in <module>
cli.main(argv=sys.argv, config_files=config_files)
File "/usr/lib/python2.7/site-packages/keystone/cli.py", line 584, in main
config.setup_logging()
File "/usr/lib/python2.7/site-packages/keystone/config.py", line 56, in setup_logging
log.setup(CONF, 'keystone')
File "/usr/lib/python2.7/site-packages/oslo_log/log.py", line 211, in setup
_setup_logging_from_conf(conf, product_name, version)
File "/usr/lib/python2.7/site-packages/oslo_log/log.py", line 263, in _setup_logging_from_conf
filelog = logging.handlers.WatchedFileHandler(logpath)
File "/usr/lib64/python2.7/logging/handlers.py", line 392, in __init__
logging.FileHandler.__init__(self, filename, mode, encoding, delay)
File "/usr/lib64/python2.7/logging/__init__.py", line 902, in __init__
StreamHandler.__init__(self, self._open())
File "/usr/lib64/python2.7/logging/__init__.py", line 925, in _open
stream = open(self.baseFilename, self.mode)
IOError: [Errno 13] Permission denied: '/var/log/keystone/keystone.log'
注意：
如果是root来执行，去掉su，就不抱错了
8: Apache HTTP server
[root@localhost ~]# vi /etc/httpd/conf/httpd.conf
[root@localhost ~]# cat /etc/httpd/conf/httpd.conf | grep controller
ServerName controller
[root@localhost ~]# vi /etc/httpd/conf.d/wsgi-keystone.conf
[root@localhost ~]# cat /etc/httpd/conf.d/wsgi-keystone.conf
Listen 5000
Listen 35357
<VirtualHost *:5000>
WSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-public
WSGIScriptAlias / /var/www/cgi-bin/keystone/main
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
LogLevel info
ErrorLogFormat "%{cu}t %M"
ErrorLog /var/log/httpd/keystone-error.log
CustomLog /var/log/httpd/keystone-access.log combined
</VirtualHost>
<VirtualHost *:35357>
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-admin
WSGIScriptAlias / /var/www/cgi-bin/keystone/admin
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
LogLevel info
ErrorLogFormat "%{cu}t %M"
ErrorLog /var/log/httpd/keystone-error.log
CustomLog /var/log/httpd/keystone-access.log combined
</VirtualHost>
mkdir -p /var/www/cgi-bin/keystone
curl http://git.openstack.org/cgit/openstack/keystone/plain/httpd/keystone.py?h=stable/kilo | tee /var/www/cgi-bin/keystone/main /var/www/cgi-bin/keystone/admin
chown -R keystone:keystone /var/www/cgi-bin/keystone
chmod 755 /var/www/cgi-bin/keystone/*
systemctl enable httpd.service
systemctl start httpd.service
[root@localhost ~]# openssl rand -hex 10
ecb91222a82cfbdb3af9
[root@localhost ~]# export OS_TOKEN=ecb91222a82cfbdb3af9
[root@localhost ~]# echo $OS_TOKEN
ecb91222a82cfbdb3af9
[root@localhost ~]# export OS_URL=http://controller:35357/v2.0
[root@localhost ~]# history | grep create
openstack service create --name keystone --description "OpenStack Identity" identity
history | grep create
[root@localhost ~]# !196
openstack service create --name keystone --description "OpenStack Identity" identity
ERROR: openstack Internal Server Error (HTTP 500)
看了下log信息：
Traceback (most recent call last):
File "/usr/bin/keystone-manage", line 44, in <module>
cli.main(argv=sys.argv, config_files=config_files)
File "/usr/lib/python2.7/site-packages/keystone/cli.py", line 584, in main
config.setup_logging()
File "/usr/lib/python2.7/site-packages/keystone/config.py", line 56, in setup_logging
log.setup(CONF, 'keystone')
File "/usr/lib/python2.7/site-packages/oslo_log/log.py", line 211, in setup
_setup_logging_from_conf(conf, product_name, version)
File "/usr/lib/python2.7/site-packages/oslo_log/log.py", line 263, in _setup_logging_from_conf
filelog = logging.handlers.WatchedFileHandler(logpath)
File "/usr/lib64/python2.7/logging/handlers.py", line 392, in __init__
logging.FileHandler.__init__(self, filename, mode, encoding, delay)
File "/usr/lib64/python2.7/logging/__init__.py", line 902, in __init__
StreamHandler.__init__(self, self._open())
File "/usr/lib64/python2.7/logging/__init__.py", line 925, in _open
stream = open(self.baseFilename, self.mode)
IOError: [Errno 13] Permission denied: '/var/log/keystone/keystone.log'
居然还是报的上面su -s那一步同步数据库的错误~！我是root执行，貌似IOError是这个文件打开权限问题~！
