cetc55-先电云基础架构平台软件部署手册国赛项目

云基础架构部署手版本修订说-20161028-20170420Trove组件，添加系统卸载-2017111添加LbaasFwaasnginx 安装CentOS7说 配置yum 通过安装服 安装Openstack 配置解 配置和 安装ntp服 通过安装服 安装Mysql数据库服 安装Mongo数据库服 安装 安装Keystone认证服 通过安装keystone服 安装keystone服务软件 创建Keystone数据 为keystone服务创建数据库 创建令 创建签名密钥和....................................................................................................... 创建admin- 安装Glance镜像服 通过安装glance服 创建Glance数据 创建用 创建Endpoint和API端 启动服 安装Nova计算服 通过安装nova服 安装Nova计算服务软件 创建Nova数据 创建用 创建Endpoint和API端 启动服 验证 安装Nova计算服务软件 配置Nova服 启 清除....................................................................................................................安装Neutron网络服 通过安装neutron服 通过创建neutron网 创建Neutron数据 创建用 创建Endpoint和API端 安装neutron网络服务软件 配置Neutron服 编辑内 安装软件 配置Neutron服 选择Neutron网络模 操 安装Dashboard服 通过安装dashboard服 配 启动服 ................................................................................................................................... 安装Cinder块服 通过安装Cinder服 创建用 创建Endpoint和API端 配置Cinder服 启动服 安装块软 修改Cinder配置文 验 安装Swift对象服 通过安装Swift服 创建用 创建Endpoint和API端 配置 修改Swift配置文 创建用 创建Endpoint和API端 配置trove.conf文 启动服 创建数据库............................................................................................................ 安装Heat编配服 通过安装heat服 安装heat编配服务软件 创建Endpoint和API端 配置Heat服 nginx模 安装Ceilometer服 通过安装Ceilometer服 安装Ceilometer服务软件 创建数据 创建用 创建Endpoint和API端 配置 启动服 组 安装软件 配置 安装Alarm服 通过安装alarm服 创建keystone用 创建Endpoint和 配置 修改 运行 系统卸 X -2.2版本升级说明 1所示，IP1云计算控制节1本次搭建采节点安装即controllernode控制节点和computenode计算节点enp8s0sdb为例。作为cinder和swift磁盘，搭建ftp服务器作为搭建云平台的yum源。配置CentOS7【CentOS7CentOS7CentOS6.5CentOS7 pute~]#parted(parted)mkpartswift702G803G //创建swift分区，从702G到803G pute~]#mkfs.xfs/dev/md126p5controller节点enp8s0:enp9s0:#hostnamectlset-hostnamectrl+d退出重新登陆compute节点enp8s0:enp9s0:#hostnamectlset-hostnamectrl+d退出重新登陆yum#Controllercomputeyum#mv repo在/etc/yum.repos.d创建centos.repo 在/etc/yum.repos.d创建centos.repo iso[root@controller~]#mount-oloopCentOS-7-x86_64-DVD-1511.iso [root@controller~]#mkdir/opt/centos[root@controller~]#cp-rvf/mnt/*/opt/centos/[root@controller~]#umount 【挂载 [root@controller~]#mount-oloopXianDian- [root@controller~]#cp-rvf/mnt/*/opt/[root@controller~]# ftp服务器，开启并设置自启[root@controller~]#yuminstallvsftpd–y[root@controller~vietc/vsftpd/vsftpd.confanon_root=/opt/[root@controller~]#systemctlstartvsftpd[root@controller~]#systemctlenablevsftpd关闭并设置开机不自 systemctlstopfirewalldsystemctldisablefirewalldyum #yumcleanall#yumlistcontrollercompute#yuminstall-xiandian-通过安装服 ，通过进行一键安装。如下 节点 #安装完成后同时重启[root@controller~]#rebootcontrollercompute#yum-yinstallopenstack-utilsopenstack-selinuxpython-openstackclient#yumupgrade配置解controller compute 配置和selinux#vi/etc/selinux/config#systemctlstop#systemctldisable#yumremove-yNetworkManagerfirewalld#yum-yinstalliptables-services#systemctlenableiptables#systemctlrestartiptables#iptables-F#iptables-X#iptables-#serviceiptablesntpcontrollercompute#yum-yinstallcontroller节点编辑/etc/ntp.conf文件serverfudge stratumntp#servicentpdstart#chkconfigntpdcompute#ntpdate#chkconfigntpdate通过安装服 ，通过进行一键安装。如下Controller执 Mysql#yuminstall f文件[mysqld]中添加default-storage-engine=innodbcollation-server=utf8_general_ciinit-connect='SETNAMESutf8'character-set-server=utf8#systemctlenablemariadb.service#systemctlstartmariadb.serviceMysql#systemctldaemon-reload#servicemariadbrestartRemoveanonymoususers?[Y/n]yDisallowrootloginremoy?[Y/n]nRemovetestdatabaseandaccesstoit?[Y/n]Reloadprivilegetablesnow?[Y/n]（2）compute#yum-y Mongo#yuminstall-ymongodb-server/etc/mongod.conf文件bind_ip行smallfiles#systemctlenablemongod.service#systemctlstartmongod.serviceRabbitMQ#yuminstall-yrabbitmq-serversystemctlenablerabbitmq-server.servicesystemctlrestartrabbitmq-server.servicerabbitmqctladd_useropenstack000000rabbitmqctlset_permissionsopenstack".*"".*"#yuminstallmemcachedpython-memcachedsystemctlenablememcached.servicesystemctlrestartmemcached.serviceKeystone通过安装keystone服 ，通过进行一键安装。如下Controller执 keystoneyuminstall-yopenstack-keystonehttpdKeystone#mysql–uroot-p（此处数据库为之前安装Mysql设置的mysql>GRANTALLPRIVILEGESONkeystone.*TO'keystone'@'localhost' mysql>GRANTALLPRIVILEGESONkeystone.*TO'keystone'@'%' IDENTIFIEDBYmysql> #su-s/bin/sh-c"keystone-managedb_sync"#ADMIN_TOKEN=$(opensslrand-hex -- #openstack-config--set/etc/keystone/keystone.conftoken #keystone-managefernet_setup--keystone-userkeystone--keystone-group修改/etc/httpd/conf/httpd.conf配置文件将 替换ServerNameListenListen group=keystonedisplay-name=%{GROUP}WSGIProcessGroupkeystone-publicWSGIScriptAlias//usr/bin/keystone-wsgi-publicWSGIApplicationGroup%{GLOBAL}WSGIPassAuthorizationOnErrorLogFormat"%{cu}t%M"<Directory/usr/bin>Requireallgranted group=keystonedisplay-name=%{GROUP}WSGIProcessGroupkeystone-adminWSGIScriptAlias//usr/bin/keystone-wsgi-adminWSGIApplicationGroup%{GLOBAL}WSGIPassAuthorizationOnErrorLogFormat"%{cu}t<DirectoryRequireall#systemctlenablehttpd.service#systemctlstarthttpd.serviceexportOS_TOKEN=$ADMIN_TOKENexportOS_URL=exportOS_IDENTITY_API_VERSION=3openstackservicecreate--namekeystone--description"OpenStackIdentity"identityopenstackendpointcreate--regionRegionOneidentitypublicopenstackendpointcreate--regionRegionOneidentityinternalopenstackendpointcreate--regionRegionOneidentityadmin create--description"Default"openstackprojectcreate-- default--description"AdminProject"adminopenstackusercreate--default--password000000adminopenstackrolecreateopenstackroleadd--projectadmin--useradminopenstackprojectcreate--default--description"ServiceProject"serviceopenstackprojectcreate--default--description"DemoProject"demoopenstackusercreate-- default--password000000demoopenstackrolecreateuseropenstackroleadd--projectdemo--userdemo#unsetOS_TOKENadmin环境变量admin-exportOS_PROJECT__NAME=defaultexportOS_USER__NAME=defaultexportOS_PROJECT_NAME=adminexportOS_USERNAME=adminexportOS_AUTH_URL=exportOS_IDENTITY_API_VERSION=3export#sourceadmin-Glance通过安装glance服 ，通过进行一键安装。如下Controller执 Glance#yuminstall-yopenstack-Glance#mysql-uroot-mysql>GRANTALLPRIVILEGESONglance.*TO'glance'@'localhost'IDENTIFIEDBYmysql>GRANTALLPRIVILEGESONglance.*TO'glance'@'%'IDENTIFIEDBY #su-s/bin/sh-c"glance-managedb_sync"openstackusercreate-- default--password000000glanceopenstackroleadd--projectservice--userglanceadmin openstack-config--set/etc/glance/glance-api.confkeystone_authtokenmemcached_serversopenstack-config--set/etc/glance/glance-api.confkeystone_authtokenauth_typeopenstack-config--set/etc/glance/glance-api.confkeystone_authtokenproject__nameopenstack-config--set/etc/glance/glance-api.confkeystone_authtokenuser__nameopenstack-config--set/etc/glance/glance-api.confkeystone_authtokenproject_nameserviceopenstack-config--set/etc/glance/glance-api.confkeystone_authtokenusernameglanceopenstack-config--set/etc/glance/glance-api.confkeystone_authtokenpassword000000openstack-config--set/etc/glance/glance-api.confpaste_deployflavorkeystone openstack-config--set/etc/glance/glance-api.confglance_storestoresfile,httpopenstack-config--set/etc/glance/glance-api.confglance_storedefault_storefile -- -- openstack-config--set/etc/glance/glance-registry.confkeystone_authtokenmemcached_servers project__namedefaultopenstack-config--set/etc/glance/glance-registry.confkeystone_authtokenuser__name openstack-config--set/etc/glance/glance-registry.confkeystone_authtokenusernameglanceopenstack-config--set/etc/glance/glance-registry.confkeystone_authtokenpassword000000openstack-config--set/etc/glance/glance-registry.confpaste_deployflavorkeystone EndpointAPIopenstackservicecreate--nameglance--description"OpenStackImage"imageopenstackendpointcreate--regionRegionOneimagepublicopenstackendpointcreate--regionRegionOneimageinternalopenstackendpointcreate--regionRegionOneimageadminsystemctlenableopenstack-glance-api.serviceopenstack-glance-registry.service首先（Wget）提供的系统镜像到本地，本次以上传CentOS6.5x86_64镜像为例。#sourceadmin-#glanceimage-create--name"CentOS7.0"--disk-format --progress Nova通过安装nova服 ，通过进行一键安装。如下 执行 Nova#yuminstall-yopenstack-nova-apiopenstack-nova-conductoropenstack-nova-consoleopenstack-nova-novncproxyopenstack-nova-schedulerNova#mysql-uroot-mysql>GRANTALLPRIVILEGESONnova.*TO'nova'@'localhost'IDENTIFIEDBYmysql>GRANTALLPRIVILEGESONnova.*TO'nova'@'%'IDENTIFIEDBYmysql>createdatabaseIFNOTEXISTSmysql>GRANTALLPRIVILEGESONnova_api.*TO'nova'@'localhost'IDENTIFIEDBY'NOVA_DBPASS';mysql>GRANTALLPRIVILEGESONnova_api.*TO'nova'@'%'IDENTIFIEDBY'NOVA_DBPASS';openstack-config--set/etc/nova/nova.confdatabaseconnectionopenstack-config--set/etc/nova/nova.confapi_databaseconnectionsu-s/bin/sh-c"nova-managedbsync"su-s/bin/sh-c"nova-manageapi_dbsync"openstackusercreate-- default--password000000novaopenstackroleadd--projectservice--usernovaadminopenstack-config--set/etc/nova/nova.confDEFAULTenabled_apisopenstack-config--set/etc/nova/nova.confDEFAULTrpc_backend openstack-config--set/etc/nova/nova.confDEFAULTauth_strategy openstack-config--set/etc/nova/nova.confDEFAULTmy_ip0openstack-config--set/etc/nova/nova.confDEFAULTuse_neutronTrueopenstack-config--set/etc/nova/nova.confDEFAULTfirewall_driveropenstack-config--set/etc/nova/nova.confDEFAULTmetadata_listenopenstack-config--set/etc/nova/nova.confDEFAULTmetadata_listen_port8775openstack-config--set/etc/nova/nova.confoslo_messaging_rabbitrabbit_hostcontrolleropenstack-config--set/etc/nova/nova.confoslo_messaging_rabbitrabbit_useridopenstack-config--set/etc/nova/nova.confoslo_messaging_rabbit openstack-config--set/etc/nova/nova.confkeystone_authtokenopenstack-config--set/etc/nova/nova.confkeystone_authtokenopenstack-config--set/etc/nova/nova.confkeystone_authtokenmemcached_serversopenstack-config--set/etc/nova/nova.confkeystone_authtokenauth_typepasswordopenstack-config--set/etc/nova/nova.confkeystone_authtokenproject__namedefaultopenstack-config--set/etc/nova/nova.confkeystone_authtokenuser__namedefaultopenstack-config--set/etc/nova/nova.confkeystone_authtokenproject_nameserviceopenstack-config--set/etc/nova/nova.confkeystone_authtokenusername openstack-config--set/etc/nova/nova.confkeystone_authtokenpassword000000openstack-config--set/etc/nova/nova.confvncvncserver_listen0openstack-config--set/etc/nova/nova.confvncvncserver_proxyclient_address0openstack-config--set/etc/nova/nova.confglanceapi_serversopenstack-config--set/etc/nova/nova.confoslo_concurrencylock_path/var/lib/nova/tmpEndpointAPIopenstackservicecreate--namenova--description"OpenStackCompute"computeopenstackendpointcreate--regionRegionOnecomputepublicopenstackendpointcreate--regionRegionOnecomputeinternalopenstackendpointcreate--regionRegionOnecomputesystemctlenableopenstack-nova-api.service systemctlstartopenstack-nova-api.service openstack-nova-scheduler.serviceopenstack-nova-conductor.service#novaimage-Novayuminstalllvm2-yum pute-Novaopenstack-config--set/etc/nova/nova.confDEFAULTrpc_backend openstack-config--set/etc/nova/nova.confDEFAULTauth_strategy openstack-config--set/etc/nova/nova.confoslo_messaging_rabbitrabbit_hostopenstack-config--set/etc/nova/nova.confoslo_messaging_rabbitrabbit_useridopenstackopenstack-config--set/etc/nova/nova.confoslo_messaging_rabbit openstack-config--set/etc/nova/nova.confkeystone_authtokenopenstack-config--set/etc/nova/nova.confkeystone_authtokenopenstack-config--set/etc/nova/nova.confkeystone_authtokenmemcached_serversopenstack-config--set/etc/nova/nova.confkeystone_authtokenauth_typepasswordopenstack-config--set/etc/nova/nova.confkeystone_authtokenproject__namedefaultopenstack-config--set/etc/nova/nova.confkeystone_authtokenuser__namedefaultopenstack-config--set/etc/nova/nova.confkeystone_authtokenproject_nameserviceopenstack-config--set/etc/nova/nova.confkeystone_authtokenusername openstack-config--set/etc/nova/nova.confkeystone_authtokenpassword000000openstack-config--set/etc/nova/nova.confDEFAULTmy_ip0openstack-config--set/etc/nova/nova.confDEFAULTuse_neutronTrueopenstack-config--set/etc/nova/nova.confDEFAULTfirewall_driveropenstack-config--set/etc/nova/nova.confvncenabledopenstack-config--set/etc/nova/nova.confvncvncserver_listenopenstack-config--set/etc/nova/nova.confvncvncserver_proxyclient_address openstack-config--set/etc/nova/nova.confvncnovncproxy_base_urlopenstack-config--set/etc/nova/nova.confglanceapi_serversopenstack-config--set/etc/nova/nova.confoslo_concurrencylock_path/var/lib/nova/tmpopenstack-config--set/etc/nova/nova.conflibvirtinject_keyTrue#egrep-c'(vmx|svm)'#openstack-config--set/etc/nova/nova.conflibvirtvirt_typesystemctlenable systemctlstart 清除 iptables-Fiptables-Xiptables-Neutron通过安装neutron服 ，通过进行一键安装。如下 执 - 通过创建neutron网 ，通过进行一键安装。如下flat网 执 - gre网 执 - vlan网 执 - #mysql-uroot-mysql>GRANTALLPRIVILEGESONneutron.*TO'neutron'@'localhost'IDENTIFIEDBY mysql>GRANTALLPRIVILEGESONneutron.*TO'neutron'@'%'IDENTIFIEDBYopenstackusercreate-- default--password000000neutronopenstackroleadd--projectservice--userneutronadminEndpointAPIopenstackservicecreate--nameneutron--description"OpenStackNetworking"networkopenstackendpointcreate--regionRegionOnenetworkpublicopenstackendpointcreate--regionRegionOnenetworkinternalopenstackendpointcreate--regionRegionOnenetworkadmin#yuminstall-yopenstack-neutronopenstack-neutron-ml2openstack-neutron-linuxbridge openstack-neutron-openvswitchopenstack-neutron-lbaaspython-neutron-lbaashaproxyopenstack-config--set/etc/neutron/neutron.confdatabaseconnectionopenstack-config--set/etc/neutron/neutron.confoslo_messaging_rabbitrabbit_hostopenstack-config--set/etc/neutron/neutron.confoslo_messaging_rabbitrabbit_useridopenstack-config--set/etc/neutron/neutron.confoslo_messaging_rabbitrabbit_passwordopenstack-config--set/etc/neutron/neutron.confDEFAULTcore_plugin openstack-config--set/etc/neutron/neutron.confDEFAULTservice_plugins openstack-config--set/etc/neutron/neutron.confDEFAULTallow_overlap_ips openstack-config--set/etc/neutron/neutron.confDEFAULTauth_strategykeystoneopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenmemcached_serversopenstack-config--set/etc/neutron/neutron.confkeystone_authtoken openstack-config--set/etc/neutron/neutron.confkeystone_authtokenproject__nameopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenuser__nameopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenproject_name openstack-config--set/etc/neutron/neutron.confkeystone_authtokenusername openstack-config--set/etc/neutron/neutron.confkeystone_authtokenpassword openstack-config--set/etc/neutron/neutron.confDEFAULT openstack-config--set/etc/neutron/neutron.confDEFAULT openstack-config--set/etc/neutron/neutron.conf novaauth_url openstack-config--set/etc/neutron/neutron.conf novaauth_type openstack-config--set/etc/neutron/neutron.conf novaproject__name openstack-config--set/etc/neutron/neutron.conf novauser__name openstack-config--set/etc/neutron/neutron.conf novaregion_name openstack-config--set/etc/neutron/neutron.conf novaproject_name openstack-config--set/etc/neutron/neutron.conf novausername openstack-config--set nova openstack-config--set/etc/neutron/neutron.confoslo_concurrencyopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2type_driversopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2mechanism_driversopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2extension_driversopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.inisecuritygroupenable_security_grouptrueopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.inisecuritygroupfirewall_driveropenstack-config--set openstack-config-- openstack-config--set openstack-config--set openstack-config-- openstack-config-- openstack-config-- openstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovsintegration_bridgebr-intopenstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.inisecuritygroupfirewall_driveriptables_hybridopenstack-config--set openstack-config--set openstack-config-- openstack-config--set openstack-config--set /etc/nova/nova.confDEFAULTmetadata_listenopenstack-config--set /etc/nova/nova.confDEFAULTmetadata_listen_port8775openstack-config--set /etc/nova/nova.confDEFAULTscheduler_default_filters openstack-config--set openstack-config--set /etc/nova/nova.confneutron openstack-config-- openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config-- openstack-config-- openstack-config-- openstack-config-- openstack-config--set /etc/nova/nova.confneutronmetadata_proxy_shared_secretsysctlln-s/etc/neutron/plugins/ml2/ml2_conf.inisu-s/bin/sh-c"neutron-db-manage--config-file /etc/neutron/plugins/ml2/ml2_conf.iniupgradehead"systemctlrestartopenvswitchsystemctlenableopenvswitchovs-vsctladd-brbr-intsystemctlrestartopenstack-nova-systemctlenableneutron-server.service neutron-dhcp-agent.serviceneutron-metadata-agent.servicesystemctlrestartneutron-server.service neutron-dhcp-agent.serviceneutron-metadata-agent.servicesystemctlenableneutron-l3-agent.servicesystemctlrestartneutron-l3-yuminstallopenstack-neutron-linuxbridgeebtablesipsetopenstack-neutronopenstack-neutron-ml2openstack-neutron-openvswitch–yopenstack-config--set/etc/neutron/neutron.confDEFAULTrpc_backendrabbitopenstack-config--set/etc/neutron/neutron.confoslo_messaging_rabbitrabbit_hostopenstack-config--set/etc/neutron/neutron.confoslo_messaging_rabbitrabbit_useridopenstack-config--set/etc/neutron/neutron.confoslo_messaging_rabbitrabbit_passwordopenstack-config--set/etc/neutron/neutron.confDEFAULTauth_strategykeystoneopenstack-config--set/etc/neutron/neutron.confDEFAULTcore_plugin openstack-config--set/etc/neutron/neutron.confDEFAULTservice_plugins openstack-config--set/etc/neutron/neutron.confkeystone_authtokenopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenmemcached_serversopenstack-config--set/etc/neutron/neutron.confkeystone_authtoken openstack-config--set/etc/neutron/neutron.confkeystone_authtokenproject__nameopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenuser__nameopenstack-config--set/etc/neutron/neutron.confkeystone_authtokenproject_name openstack-config--set/etc/neutron/neutron.confkeystone_authtokenusername openstack-config--set/etc/neutron/neutron.confkeystone_authtokenpassword openstack-config--set/etc/neutron/neutron.confoslo_concurrencyopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2type_driversopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2mechanism_driversopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2extension_driversopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.inisecuritygroupenable_security_grouptrueopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.inisecuritygroupfirewall_driveropenstack-config-- openstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniagentprevent_arp_spoofingTrueopenstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovsintegration_bridgebr-intopenstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.inisecuritygroupfirewall_driveriptables_hybridopenstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confneutron openstack-config--set /etc/nova/nova.confDEFAULTuse_neutronTrueopenstack-config--set openstack-config--set openstack-config--set /etc/nova/nova.confDEFAULTvif_plugging_is_fatal openstack-config-- 300sysctlln-s/etc/neutron/plugins/ml2/ml2_conf.ini/etc/neutron/plugin.inisystemctlrestartopenvswitchsystemctlenableopenvswitchovs-vsctladd-brbr-intsystemctl systemctlrestart puteneutron-metadata-agentsystemctlrestartneutron-openvswitch-agent以下任意选择式进行安#source#source/etc/keystone/admin-openrc.sh#ovs-vsctladd-brbr-ex#ovs-vsctladd-portbr-exenp9s0#systemctlrestartnetwork#openstack-config--set /etc/neutron/plugins/ml2/ml2_conf.iniml2_type_flatflat_networks#openstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2#openstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovs #systemctlrestartneutron-openvswitch-openstack-config--set/etc/neutron/neutron.confDEFAULTservice_pluginsrouter,lbaasopenstack-config--set/etc/neutron/neutron_lbaas.confservice_providersservice_provideropenstack-config--set/etc/neutron/lbaas_agent.iniDEFAULTdevice_driveropenstack-config--set/etc/neutron/lbaas_agent.iniDEFAULTinterface_driveropenstack-config--set/etc/neutron/lbaas_agent.inihaproxyuser_groupneutron-db-manage--servicelbaasupgradesystemctlrestartneutron-serverneutron-lbaas-agentsystemctlenabledneutron-serverneutron-lbaas-agent#ovs-vsctladd-brbr-#ovs-vsctladd-portbr-exenp9s0#systemctlrestartnetwork#openstack-config--set /etc/neutron/plugins/ml2/ml2_conf.iniml2_type_flatflat_networks#openstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2#openstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovs #systemctlrestartneutron-openvswitch-ControllertenantID=`openstackprojectlist|grepservice|awk'{printneutronnet-create--tenant-id$tenantIDsharednet1--shared--provider:network_typeopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2_type_gretunnel_id_rangesovs-vsctladd-brbr-ovs-vsctladd-portbr-exenp9s0systemctlrestartnetworkopenstack-config--set /etc/neutron/l3_agent.iniDEFAULT openstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovs openstack-config-- openstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovslocal_ipopenstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovsenable_tunnelingTrueopenstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovsbridge_mapsexternal:br-exopenstack-config--set/etc/neutron/neutron.confDEFAULTservice_pluginsopenstack-config--set/etc/neutron/neutron_lbaas.confservice_providersservice_provideropenstack-config--set/etc/neutron/lbaas_agent.iniDEFAULTdevice_driveropenstack-config--set/etc/neutron/lbaas_agent.iniDEFAULTinterface_driveropenstack-config--set/etc/neutron/lbaas_agent.inihaproxyuser_groupopenstack-config--set/etc/neutron/neutron.confservice_providersopenstack-config--set/etc/neutron/fwaas_driver.inifwaasdriverneutron-db-manage--servicelbaasupgradeneutron-db-manage--subprojectneutron-fwaasupgradesystemctlrestartneutron-systemctlrestartneutron-l3-agentneutron-openvswitch-agentsystemctlrestartneutron-lbaas-agentovs-vsctladd-brbr-ovs-vsctladd-portbr-exenp9s0systemctlrestartnetworkopenstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovs openstack-config-- openstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovslocal_ipopenstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovsenable_tunnelingTrueopenstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovsbridge_mapsexternal:br-exopenstack-config--set /etc/neutron/plugins/ml2/ml2_conf.iniml2_type_flatflat_networksopenstack-config--set/etc/neutron/plugins/ml2/ml2_conf.iniml2_type_vlannetwork_vlan_rangesphysnet1:$minvlan:$maxvlan(最小vlan号：最大vlanID号)openstack-config--set/etc/neutron/plugins/ml2/openvswitch_agent.inisecuritygroupfirewall_driveriptables_hybridsystemctlrestartneutron-serverovs-vsctladd-brbr-exovs-vsctladd-portbr-exenp9s0systemctlrestartnetworkopenstack-config--set /etc/neutron/l3_agent.iniDEFAULT openstack-config--set /etc/neutron/plugins/ml2/openvswitch_agent.iniovs systemctlrestartneutron-openvswitch-agentsystemctlrestartneutron-l