Openstack之一：环境准备及基础服务

# mysql_secure_installation

[root@mysql2 yum.repos.d]# vim /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
192.168.7.106 mysql1 mysql1.blog.net #只需要解析前面部分，不需要全部解析域名
192.168.7.107 mysql2 mysql2.blog.net

# systemctl enable rabbitmq-server.service
# systemctl start rabbitmq-server.service
# rabbitmq-plugins enable rabbitmq_management #开启web管理界面插件
# systemctl   restart rabbitmq-server   #重启rabbitMQ服务

[root@mysql1 ~]# scp /var/lib/rabbitmq/.erlang.cookie  192.168.7.107:/var/lib/rabbitmq/  # 保证两遍的cookie文件一致

[root@rabbitmq-mysql1 ~]# systemctl  restart rabbitmq-server
[root@rabbitmq-mysql2 ~]# systemctl  restart rabbitmq-server

5672：消费者访问的端口
15672：web管理端口
25672：集群状态通信端口

[root@rabbitmq-server1 ~]# systemctl  stop  rabbitmq-server
[root@rabbitmq-server2 ~]# systemctl  stop  rabbitmq-server
[root@rabbitmq-server3 ~]# systemctl  stop  rabbitmq-server
[root@rabbitmq-server1 ~]# rabbitmq-server -detached
[root@rabbitmq-server2 ~]# rabbitmq-server -detached
[root@rabbitmq-server3 ~]# rabbitmq-server -detached

[root@mysql1 ~]# rabbitmqctl  cluster_status
Cluster status of node rabbit@mysql1
[{nodes,[{disc,[rabbit@mysql1]}]},
 {running_nodes,[rabbit@mysql1]},
 {cluster_name,<<"rabbit@mysql1">>},
 {partitions,[]},
 {alarms,[{rabbit@mysql1,[]}]}]

[root@mysql2 ~]# rabbitmqctl  cluster_status
Cluster status of node rabbit@mysql2
[{nodes,[{disc,[rabbit@mysql2]}]},
 {running_nodes,[rabbit@mysql2]},
 {cluster_name,<<"rabbit@mysql2">>},
 {partitions,[]},
 {alarms,[{rabbit@mysql2,[]}]}]

[root@rabbitmq-server1 ~]# rabbitmqctl  stop_app #停止应程序
[root@rabbitmq-server1 ~]# rabbitmqctl   reset #清空元数据

[root@mysql1 ~]# rabbitmqctl  join_cluster rabbit@mysql2 --ram #将rabbitmq-server1添加到集群当中，并成为内存节点，不加--ram默认是磁盘节点
 Clustering node rabbit@mysql1 with rabbit@mysql2

[root@mysql1 ~]# rabbitmqctl  cluster_status     #查询集群添加后的状态
Cluster status of node rabbit@mysql1
[{nodes,[{disc,[rabbit@mysql2]},{ram,[rabbit@mysql1]}]},
 {alarms,[{rabbit@mysql2,[]}]}]

[root@mysql1 ~]# rabbitmqctl  start_app  #添加完集群之后不要忘记启动app应用程序

[root@mysql1 ~]# rabbitmqctl set_policy  ha-all "#"  ‘{"ha-mode":"all"}‘
Setting policy "ha-all" for pattern "#" to "{\"ha-mode\":\"all\"}" with priority "0"    #"#"为任意0个或多个即为所有，也可以使用"^test"匹配开头，还可以使用其他正则匹配

[root@mysql1 ~]# rabbitmqctl  add_user openstack openstack123  #创建openstack账号，密码为openstack123
Creating user "openstack"
[root@mysql1 ~]# rabbitmqctl set_permissions openstack ".*" ".*" ".*"  #授予openstack用户账号读写权限
Setting permissions for user "openstack" in vhost "/"

[root@mysql1 ~]# yum install memcached -y

PORT="11211"
USER="memcached"
MAXCONN="4096"  #最大连接数改为4096
CACHESIZE="1024" #内存改为1G
OPTIONS="-l 0.0.0.0,::1" #监听端口改为0.0.0.0

[root@mysql1 ~]# scp /etc/sysconfig/memcached 192.168.7.107:/etc/sysconfig/
[root@mysql1 ~]# systemctl start memcached
[root@mysql1 ~]# systemctl enable  memcached

[root@openstack-1 ~]# yum install python2-PyMySQL   -y
[root@openstack-1 ~]# yum install python-memcached -y

[root@mysql1 ~]# yum install haproxy keepalived  -y

global_defs {
   notification_email {
     acassen@firewall.loc
     failover@firewall.loc
     sysadmin@firewall.loc
   }
   notification_email_from Alexandre.Cassen@firewall.loc
   smtp_server 192.168.200.1
   smtp_connect_timeout 30
   router_id LVS_DEVEL
   vrrp_skip_check_adv_addr
   vrrp_iptables   #添加此项，就不会出现iptables防火墙规则
   vrrp_strict
   vrrp_garp_interval 0
   vrrp_gna_interval 0
}

vrrp_instance VI_1 {
    state MASTER  #默认为MASTER角色
    interface eth0
    virtual_router_id 51
    priority 100   #优先级改为100
    advert_int 1
    authentication {
        auth_type PASS
        auth_pass 1111
    }
    virtual_ipaddress {
        192.168.7.248 dev eth0 label eth0:0   #添加VIP地址
    }
}

[root@mysql1 ~]# systemctl start keepalived

[root@mysql1 ~]# yum install haproxy keepalived  -y

global
maxconn 100000 
#chroot /usr/local/haproxy  #不是源码编译，暂时注释掉
#stats socket /var/lib/haproxy/haproxy.sock mode 600 level admin
user haproxy
group haproxy
daemon
nbproc 2   绑定两个cpu就开启下面两个，绑定四个就开启四个
cpu-map 1 0
cpu-map 2 1
#cpu-map 3 2
#cpu-map 4 3
pidfile /usr/local/haproxy/run/haproxy.pid
log 127.0.0.1 local3 info
 
defaults
option http-keep-alive
option  forwardfor
maxconn 100000
mode http
timeout connect 300000ms
timeout client  300000ms
timeout server  300000ms
 
listen stats
 mode http
 bind 0.0.0.0:9999
 stats enable
 log global
 stats uri     /haproxy-status
 stats auth    haadmin:q1w2e3r4ys

listen openstack_web_port
    bind 192.168.7.248:3306 #监听后端数据库服务
    mode tcp
    log global
    server 192.168.7.106 192.168.7.106:3306 check inter 3000 fall 3 rise 5

listen openstack_rabbitmq_port
    bind 192.168.7.248:5672  #监听后端rabbitmq服务
    mode tcp
    log global
    server 192.168.7.106 192.168.7.106:5672 check inter 3000 fall 3 rise 5
    server 192.168.7.107 192.168.7.107:5672 check inter 3000 fall 3 rise 5 backup


listen openstack_rabbitmq_port
    bind 192.168.7.248:11211   #监听后端memcached服务
    mode tcp
    log global
    server 192.168.7.106 192.168.7.106:11211 check inter 3000 fall 3 rise 5
    server 192.168.7.107 192.168.7.107:11211 check inter 3000 fall 3 rise 5 backup

[root@mysql1 ~]# systemctl start haproxy

[root@openstack-1 ~]# telnet 192.168.7.248 3306
Trying 192.168.7.248...
Connected to 192.168.7.248.
Escape character is ‘^]‘.
HHost ‘192.168.7.100‘ is not allowed to connect to this MariaDB serverConnection closed by foreign host.  #由于没有授权，暂时不能连接

[root@openstack-1 ~]# telnet 192.168.7.248 5672
Trying 192.168.7.248...
Connected to 192.168.7.248.
Escape character is ‘^]‘.

[root@openstack-1 ~]# telnet 192.168.7.248 11211
Trying 192.168.7.248...
Connected to 192.168.7.248.
Escape character is ‘^]‘.