openstackiaas“云计算”竞赛赛卷试题VIP

openstackiaas试题2020****年全国职业院校技能⼤赛改⾰试点赛⾼职组“云计算”竞赛赛卷第⼀场次题⽬：OpenStack平台部署与运维某企业拟使⽤OpenStack搭建⼀个企业云平台，以实现资源池化弹性管理、企业应⽤集中管理、统⼀安全认证和授权等管理。系统架构如图1所⽰，IP地址规划如表1所⽰。表1IP地址规划设备名称主机名接⼝IP地址说明云服务器1Controllereth0192.168.x.10/24Vlan10eth1192.168.y.10/24Vlan20云服务器2Computeeth0192.168.x.20/24Vlan10eth1192.168.y.20/24Vlan20PC-1本地连接172.24.z.2/24Vlan1交换机Vlan1172.24.z.1/24PC机使⽤Vlan10192.168.x.1/24服务器使⽤说明：Vlan20192.168.y.1/24虚拟机使⽤1．表中的x，y为vlan号，每⼈有两个vlan号；z为⼯位号；3．考试所需要的资源包与附件均在考位信息表中给出；4．竞赛过程中，为确保服务器的安全，请⾃⾏修改服务器密码；在考试系统提交信息时，请确认⾃⼰的IP地址，⽤户名和密码。任务1基础运维任务（5分）1．根据表1中的IP地址规划，设置各服务器节点的IP地址，确保⽹络正常通信，设置云服务器1主机名为Controller，云服务器2主机名为Compute，并修改hosts⽂件将IP地址映射为主机名，关闭防⽕墙并设置为开机不启动，设置SELinux为Permissive模式。2．将提供的CentOS-7-x86_64-DVD-1804.iso和chinaskill_cloud_iaas.iso光盘镜像上传到Controller节点/root⽬录下，然后在/opt⽬录下分别创建centos⽬录和openstack⽬录，并将镜像⽂件CentOS-7-x86_64-DVD-1804.iso挂载到centos⽬录下，将镜像⽂件chinaskill_cloud_iaas.iso挂载到openstack⽬录下。3．在Controller节点上利⽤centos⽬录中的软件包安装vsftp服务器，设置开机⾃启动，并使⽤ftp提供yum仓库服务，分别设置controller节点和compute节点的yum源⽂件ftp.repo，其中ftp服务器地址使⽤IP形式。4．在Controller节点上部署chrony服务器，允许其他节点同步时间，启动服务并设置为开机启动；在compute节点上指定controller节点为上游NTP服务器，重启服务并设为开机启动。5．在compute节点上利⽤空⽩分区划分2个100G分区。任务2OpenStack搭建任务（10分）1．在控制节点和计算节点上分别安装quickinstall软件包，根据表2配置脚本⽂件中基本变量（配置脚本⽂件为/etc/cloudconfig/openrc.sh）。表2云平台配置信息服务名称变量参数/密码Mysqlroot000000Keystone000000Glance000000Nova000000Neutron000000Heat000000Zun000000KeystoneDOMAIN_NAMEdemoAdmin000000Rabbit000000Glance000000Nova000000Neutron000000Heat000000Zun000000NeutronMetadata000000ExternalNetworkenp9s0（外⽹卡名）1[root@controller~]#sh/usr/local/bin/openstack-install-mysql.sh1[root@controller~]#sh/usr/local/bin/openstack-install-mysql.sh在controller节点上使⽤/usr/local/bin/openstack-install-keystone.sh脚本安装Keystone服务。4．在controller节点上使⽤/usr/local/bin/openstack-install-glance.sh脚本安装glance服务。在controller节点和compute节点上分别使⽤/usr/local/bin/openstack-install-nova-controller.sh脚本、/usr/local/bin/openstack-install-nova-compute.sh脚本安装Nova服务。在controller节点和compute节点上分别修改/usr/local/bin/openstack-install-neutron-controller.sh脚本、/usr/local/bin/openstack-install-neutron-compute.sh脚本分别安装Neutron服务，⽹络选⽤vlan模式。7．在controller节点上使⽤/usr/local/bin/openstack-install-dashboad.sh脚本安装dashboad服务。8．在controller节点和compute节点上分别修改/usr/local/bin/openstack-install–cinder-controller.sh脚本、/usr/local/bin/openstack-install-cinder-compute.sh脚本安装cinder服务。任务3OpenStack云平台运维（10分）1．在openstack私有云平台上，基于cirros-0.3.4-x86_64-disk.img镜像，使⽤命令创建⼀个名为cirros的镜像。112345678910111213141516171819202122[root@controller~]#source/etc/keystone/admin-openrc.sh[root@controller~]#glanceimage-create--namecirros--disk-formatqcow2--container-formatbare--filecirros-0.3.4-x86_64-disk.img+------------------+--------------------------------------+|Property|Value|+------------------+--------------------------------------+|checksum|443b7623e27ecf03dc9e01ee93f67afe ||container_format|bare||created_at|disk_format|2022-03-04T02:17:25Z|qcow2|||id|min_disk|min_ram|name|owner|protected|size|status|tags|782d2e39-4a1d-4b11-9992-b2989f073cdd||0|0|cirros||||f641f1ab736249c28b4ccd262bbcc5b7||False|12716032|active|[]|||||updated_at |2022-03-04T02:17:25Z|virtual_size |None|||visibility|shared|+------------------+--------------------------------------+123456123456789101112[root@controller~]#source/etc/keystone/admin-openrc.sh[root@controller~]#openstackflavorcreate--id1--ram1024--disk10--vcpus1Fmin+----------------------------+-------+|Field|Value|+----------------------------+-------+|OS-FLV-DISABLED:disabled|False||OS-FLV-EXT-DATA:ephemeral|0 ||disk|id|name|10||1 ||Fmin||os-flavor-access:is_public|True||properties||17+----------------------------+-------+18[root@controller~]#13|ram|1024|14|rxtx_factor|1.0|15|swap| |16|vcpus|1 |在openstack私有云平台上，使⽤命令创建云主机⽹络extnet，⼦⽹extsubnet，虚拟机浮动IP⽹段为192.168.y.0/24（其中y是vlan号），⽹关为192.168.y.1，⽹络使⽤vlan模式。1[root@controller~]#openstacknetworkcreate--provider-network-typevlan--provider-physical-networkprovider--externalextnet2+---------------------------+--------------------------------------+3|Field |Value |4+---------------------------+--------------------------------------+5|admin_state_up |UP |6|availability_zone_hints| |7|availability_zones | |8|created_at |2022-03-04T02:25:29Z |9|description | |10|dns_domain |None |11|id |936209e3-a4a4-4440-93b0-1e5d2cd0ce48|12|ipv4_address_scope |None |13|ipv6_address_scope |None |14|is_default |False |15|is_vlan_transparent |None |16|mtu |1500 |17|name |extnet |18|port_security_enabled |True |19|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |20|provider:network_type |vlan |21|provider:physical_network|provider |22|provider:segmentation_id|134 |23|qos_policy_id |None |24|revision_number |5 |25|router:external |External |26|segments |None |27|shared |False |28|status |ACTIVE |29|subnets | |30|tags | |31|updated_at |2022-03-04T02:25:29Z |32+---------------------------+--------------------------------------+33[root@controller~]#openstacksubnetcreate--subnet-range/24--gateway--networkextnetextsubnet34+-------------------+--------------------------------------+35|Field |Value |36+-------------------+--------------------------------------+37|allocation_pools|-54 |38|cidr |/24 |39|created_at |2022-03-04T02:25:40Z |40|description | |41|dns_nameservers| |42|enable_dhcp |True |43|gateway_ip | |44|host_routes | |45|id |d98d0b9b-1c34-4726-991b-4cf848eb63de|46|ip_version |4 |47|ipv6_address_mode|None |48|ipv6_ra_mode |None |49|name |extsubnet |50|network_id |936209e3-a4a4-4440-93b0-1e5d2cd0ce48|51|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |52|revision_number|0 |53|segment_id |None |54|service_types | |55|subnetpool_id |None |56|tags | |57|updated_at |2022-03-04T02:25:40Z |58+-------------------+--------------------------------------+59[root@controller~]#4．在openstack私有云平台上，使⽤命令创建云主机内⽹intnet，⼦⽹inttsubnet，虚拟机⼦⽹⽹段为10.10.x.0/24（其中x号），⽹关为10.10.x.11[root@controller~]#openstacknetworkcreate--internal--provider-network-typevxlanintnet2+---------------------------+--------------------------------------+3|Field |Value |4+---------------------------+--------------------------------------+5|admin_state_up |UP |6|availability_zone_hints| |7|availability_zones | |8|created_at |2022-03-04T02:31:05Z |9|description | |10|dns_domain |None |11|id |c788def4-2829-4b84-9cfe-3583ec3cd8b7|12|ipv4_address_scope |None |13|ipv6_address_scope |None |14|is_default |False |15|is_vlan_transparent |None |16|mtu |1450 |17|name |intnet |18|port_security_enabled |True |19|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |20|provider:network_type |vxlan |21|provider:physical_network|None |22|provider:segmentation_id|179 |23|qos_policy_id |None |24|revision_number |2 |25|router:external |Internal |26|segments |None |27|shared |False |28|status |ACTIVE |29|subnets | |30|tags | |31|updated_at |2022-03-04T02:31:05Z |32+---------------------------+--------------------------------------+33[root@controller~]#openstacksubnetcreate--subnet-range/24--gateway--networkintnetintsubnet34+-------------------+--------------------------------------+35|Field |Value |36+-------------------+--------------------------------------+37|allocation_pools|-54 |38|cidr |/24 |39|created_at |2022-03-04T02:32:21Z |40|description | |41|dns_nameservers| |42|enable_dhcp |True |43|gateway_ip | |44|host_routes | |45|id |1b7e56b7-1365-4b18-8082-c4623a44bbb0|46|ip_version |4 |47|ipv6_address_mode|None |48|ipv6_ra_mode |None |49|name |intsubnet |50|network_id |c788def4-2829-4b84-9cfe-3583ec3cd8b7|51|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |52|revision_number|0 |53|segment_id |None |54|service_types | |55|subnetpool_id |None |56|tags | |57|updated_at |2022-03-04T02:32:21Z |58+-------------------+--------------------------------------+59[root@controller~]#1212345678910111213141516171819202122232425[root@controller~]#openstackroutercreateext-router+-------------------------+--------------------------------------+|Field|Value|+-------------------------+--------------------------------------+|admin_state_up|UP||availability_zone_hints|||availability_zones|created_at|description|distributed||2022-03-04T02:34:03Z||False|||||external_gateway_info|None||flavor_id|ha|id|name|project_id|None|False|||0b96b68a-06b6-4349-ba29-edead021a775||ext-router||f641f1ab736249c28b4ccd262bbcc5b7||revision_number|routes|status|tags|updated_at|1|||ACTIVE|||||2022-03-04T02:34:03Z|+-------------------------+--------------------------------------+[root@controller~]#openstackrouterset--external-gatewayextnetext-router[root@controller~]#openstackrouteraddsubnetext-routerintsubnet[root@controller~]#在openstack私有云平台上，基于“cirros”镜像、1vCPU/1G/10G的flavor、intsubnet的⽹络，绑定浮动IP，使⽤命令创建⼀台虚拟机VM1，启动VM1，并使⽤PC机能远程登录到VM1。1[root@controller~]#openstackservercreateVM1--flavorFmin--imagecirros--nicnet-id=c788def4-2829-4b84-9cfe-3583ec3cd8b7--security-group4e72[root@controller~]#openstackfloatingipcreateextnet3+---------------------+--------------------------------------+4|Field |Value |5+---------------------+--------------------------------------+6|created_at |2022-03-04T02:41:49Z |7|description | |8|fixed_ip_address |None |9|floating_ip_address| |10|floating_network_id|936209e3-a4a4-4440-93b0-1e5d2cd0ce48|11|id |1f11bce0-f4ea-4614-a590-e46701a42e02|12|name | |13|port_id |None |14|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |15|qos_policy_id |None |16|revision_number |0 |17|router_id |None |18|status |DOWN |19|subnet_id |None |20|updated_at |2022-03-04T02:41:49Z |21+---------------------+--------------------------------------+22[root@controller~]#openstackserveraddfloatingipVM123#远程登录实例需要在安全组中开放所ICMP协议如下图24#如果⽐赛⽤到命令⾏创建安全组25#egress是出⼝ingress是⼊⼝26[root@controller~]#openstacksecuritygrouprulecreate668e8b7a-2df5-442d-9fed-fb5f1539868c--protocolicmp--ingress--remote-ip/027[root@controller~]#openstacksecuritygrouprulecreate668e8b7a-2df5-442d-9fed-fb5f1539868c--protocoltcp--dst-port22--ingress--remote-ip0.0.oo正在示6oo

＿＿方向以太网类型(EtheTy伈）IP协议玩口范臣l远示IP均盘远主全组 动出O1Pv4任何任/0口口入口心叫何何ICMP任何部响/000.0()I()defII入口。入口4[f',6TCP何22(SSH)任00.01)1()of"1[root@controller~]#openstackvolumetypecreatelvm2+-------------+ +3|Field |Value |4+-------------+--------------------------------------+5|description|None |6|id |f9ff2d93-9e40-4d6b-8d25-b72672be8a92||is_public|True ||name |lvm |9+-------------+--------------------------------------+10[root@controller~]#openstackvolumetypecreatelvm11+-------------+ +12|Field |Value |13+-------------+ +14|description|None |15|id |f9ff2d93-9e40-4d6b-8d25-b72672be8a92||is_public|True ||name |lvm |18+-------------+ +19[root@controller~]#openstackvolumecreate--size40--typelvmlvm20+---------------------+ +21|Field |Value |22+-----------------