Browse Library
Sign In Start Free Trial
Close icon Search icon
Account
Browse Library Advanced Search Sign In Start Free Trial

Add to playlist

Create a Playlist

Modal Close icon
You need to login to use this feature.
  • Production Ready OpenStack - Recipes for Successful Environments
  • Toc
  • feedback
Production Ready OpenStack - Recipes for Successful Environments

Production Ready OpenStack - Recipes for Successful Environments

By : Arthur Berezin
3.5 (2)
close
Production Ready OpenStack - Recipes for Successful Environments

Production Ready OpenStack - Recipes for Successful Environments

3.5 (2)
By: Arthur Berezin

Overview of this book

OpenStack is the most popular open source cloud platform used by organizations building internal private clouds and by public cloud providers. OpenStack is designed in a fully distributed architecture to provide Infrastructure as a Service, allowing us to maintain a massively scalable cloud infrastructure. OpenStack is developed by a vibrant community of open source developers who come from the largest software companies in the world. The book provides a comprehensive and practical guide to the multiple uses cases and configurations that OpenStack supports. This book simplifies the learning process by guiding you through how to install OpenStack in a single controller configuration. The book goes deeper into deploying OpenStack in a highly available configuration. You'll then configure Keystone Identity Services using LDAP, Active Directory, or the MySQL identity provider and configure a caching layer and SSL. After that, you will configure storage back-end providers for Glance and Cinder, which will include Ceph, NFS, Swift, and local storage. Then you will configure the Neutron networking service with provider network VLANs, and tenant network VXLAN and GRE. Also, you will configure Nova's Hypervisor with KVM, and QEMU emulation, and you will configure Nova's scheduler filters and weights. Finally, you will configure Horizon to use Apache HTTPD and SSL, and you will customize the dashboard's appearance.
Table of Contents (11 chapters)
close
close
Preface
Preface
What this book covers
What you need for this book
Who this book is for
Conventions
Reader feedback
Customer support
Free Chapter
1
1. Introduction to OpenStack and its Deployment Using Packages
chevron up
1. Introduction to OpenStack and its Deployment Using Packages
Introduction
Configuring hosts prerequisites
Installing MariaDB database
Installing RabbitMQ
Installing Keystone – Identity service
Generating and configuring tokens PKIs
Installing Glance – images service
Installing Nova – Compute service
Installing Neutron – networking service
Configuring Neutron network node
Configuring compute node for Neutron
Installing Horizon – web user interface dashboard
2
2. Deploying OpenStack Using Staypuft OpenStack Installer
2. Deploying OpenStack Using Staypuft OpenStack Installer
Introduction
Setting up the environment
Installing Staypuft packages
Discovering hosts for provisioning
Creating a new OpenStack deployment
Configuring a network
Allocating hosts to roles
Configuring host networking
Deploying OpenStack
3
3. Deploying Highly Available OpenStack
3. Deploying Highly Available OpenStack
Introduction
Installing Pacemaker
Installing HAProxy
Configuring Galera cluster for MariaDB
Installing RabbitMQ with mirrored queues
Configuring highly available OpenStack services
4
4. Keystone Identity Service
4. Keystone Identity Service
Introduction
Configuring Keystone with the MariaDB backend
Generating and configuring tokens PKIs
Configuring Keystone with Microsoft Active Directory and LDAP
Configuring Keystone caching with Memcached
Securing Keystone with SSL
5
5. Glance Image Service
5. Glance Image Service
Introduction
Configuring Glance with the local file backend
Configuring Glance with the NFS backend
Configuring Glance with the Swift backend
Configuring Glance with the Ceph backend
Configuring Glance image caching
Configuring the Glance image size limit and storage quota
6
6. Cinder Block Storage Service
6. Cinder Block Storage Service
Introduction
Configuring Cinder with the logical volume management backend driver
Configuring Cinder with the Ceph RADOS block device backend driver
Configuring Cinder with the Network File System (NFS) backend driver
Configuring Cinder with the Ceph RBD backup driver
Configuring Cinder with multiple backends
Configuring Cinder scheduler filters and weighers
7
7. Neutron Networking Service
7. Neutron Networking Service
Introduction
Configuring Neutron VLAN provider network with ML2 and LinuxBridge
Configuring Neutron VXLAN and GRE tenant networks using Open vSwitch
Configuring the L3 agent with Open vSwitch
Configuring the DHCP service agent
Configuring LoadBalancer as a service
Configuring Firewall as a Service
8
8. Nova-Compute Service
8. Nova-Compute Service
Introduction
Configuring Nova Hypervisors
Configuring Nova-compute with KVM Hypervisor
Configuring Nova-compute with a QEMU Hypervisor emulation
Configuring Nova scheduler filters
Configuring Nova host aggregates
Configuring Nova host aggregates filters
Configuring Nova scheduler weights
9
9. Horizon Dashboard Service
9. Horizon Dashboard Service
Introduction
Securing Horizon with Secure Socket Layer
Configuring Horizon caching with memcached
Customizing Horizon dashboard appearance
10
Index
Index

Installing Nova – Compute service

Nova-Compute service implements the compute service, which is the main part of an IaaS cloud. Nova is responsible for launching and managing instance of virtual machines. The compute service scales horizontally on standard hardware.

Getting ready

In our environment, we deploy a Controller/Computes layout. In the first step, we need to configure management services on the controller node and only then to add compute nodes to the environment. On the controller node, first we need to prepare the database, create a Keystone account, then open the needed firewall ports.

Run the following steps on the controller node!

Create database

  1. Access the database instance using MySQL command:
    [root@controller ~]# mysql -u root -p
  2. Create Nova database:
    MariaDB [(none)]> CREATE DATABASE nova_db;
  3. Create Nova credentials and allow access:
    MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_db.* TO 'nova_db_user'@'localhost' IDENTIFIED BY 'nova_db_password';
MariaDB [(none)]> GRANT ALL PRIVILEGES ON nova_db.* TO 'nova_db_user'@'%' IDENTIFIED BY 'nova_db_password';
  4. Create Nova database tables:
    [root@controller ~]# su -s /bin/sh -c "nova-manage db sync" nova

Create Keystone service credentials and endpoint

  1. Create Nova service account in Keystone:
    [root@controller ~]# keystone user-create --name=nova --pass=nova_password
[root@controller ~]# keystone user-role-add --user=nova --tenant=services --role=admin
  2. Create an endpoint for Nova
    [root@controller ~]# keystone endpoint-create --service=nova--publicurl=http://10.10.0.1:8774/v2/%\(tenant_id\) |--internalurl=http://10.10.0.1:8774/v2/%\(tenant_id\s --adminurl=http://10.10.0.1:8774/v2/%\(tenant_id\)s

Open service firewall ports

  1. Add firewall rules:
    [root@controller ~]# firewall-cmd --permanent --add-port=8774/tcp
[root@controller ~]# firewall-cmd --permanent --add-port=6080/tcp
[root@controller ~]# firewall-cmd --permanent --add-port=6081/tcp
[root@controller ~]# firewall-cmd --permanent --add-port=5900-5999/tcp
  2. Reload firewall rules to take effect:
    [root@controller ~]# firewall-cmd --reload

Install service packages

Install service packages using yum command:

[root@controller ~]# yum install -y openstack-nova-api openstack-nova-cert openstack-nova-conductor  openstack-nova-console openstack-nova-novncproxy penstack-nova-scheduler python-novaclient

How to do it...

Follow these steps to configure Nova-Compute service:

Configure database connection

Using openstack-config command, we need to set the connection to the database:

[root@controller ~]# openstack-config --set /etc/nova/nova.conf database connection mysql://nova_db_user:nova_db_password@controller/nova_db
[root@controller ~]# su -s /bin/sh -c "nova-manage db sync" nova

Configure message broker

Set connection to RabbitMQ message broker:

[root@controller ~]# openstack-config --set /etc/nova/nova.conf DEFAULT rpc_backend rabbit
[root@controller ~]# openstack-config --set /etc/nova/nova.conf DEFAULT rabbit_host 10.10.0.1

Configure service

  1. Set local IP address of the controller:
    # openstack-config --set /etc/nova/nova.conf DEFAULT my_ip 10.10.0.1
# openstack-config --set /etc/nova/nova.conf DEFAULT vncserver_listen 10.10.0.1
# openstack-config --set /etc/nova/nova.conf DEFAULT vncserver_proxyclient_address 10.10.0.1
  2. Configure Keystone as an authentication method:
    # openstack-config --set /etc/nova/nova.conf DEFAULT auth_strategy keystone
# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_uri http://10.10.0.1:5000
# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_host 10.10.0.1
# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_protocol http
# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_port 35357
# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_user nova
# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_tenant_name services
# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_password nova_password

Start and enable Service

Using systemctl command, we can start and enable the service so that it starts after reboot:

[root@controller ~]# systemctl start openstack-nova-api
[root@controller ~]# systemctl start openstack-nova-cert
[root@controller ~]# systemctl start openstack-nova-consoleauth
[root@controller ~]# systemctl start openstack-nova-scheduler
[root@controller ~]# systemctl start openstack-nova-conductor
[root@controller ~]# systemctl start openstack-nova-novncproxy
[root@controller ~]# systemctl enable openstack-nova-api
[root@controller ~]# systemctl enable openstack-nova-cert
[root@controller ~]# systemctl enable openstack-nova-consoleauth
[root@controller ~]# systemctl enable openstack-nova-scheduler
[root@controller ~]# systemctl enable openstack-nova-conductor
[root@controller ~]# systemctl enable openstack-nova-novncproxy

Verify successful installation

On successful Nova installation and configuration, you should be able to execute this:

[root@el7-icehouse-controller ~(keystone_admin)]# nova image-list

+-------------------+---------------------+--------+--------+
| ID                | Name                | Status | Server |
+-------------------+---------------------+--------+--------+
| eb9c6911-...      | cirros-0.3.2-x86_64 | ACTIVE |        |
+-------------------+---------------------+--------+--------+

After the controller node is successfully installed and configured, we may add additional compute nodes to the OpenStack environment.

Configure compute nodes

Now we can proceed and configure the compute services on the compute node.

Run the following steps on the compute node!

Install service packages

Using yum command, install Nova-Compute package:

# yum install openstack-nova-compute

Configure database connection

Configure the Nova database connection:

[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf database connection mysql://nova_db_user:nova_db_password@controller/nova_db

Configure message broker

Configure Nova to access the message broker:

[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT rpc_backend rabbit
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT rabbit_host 10.10.0.1

Configure service

  1. Edit /etc/nova/nova.conf for the compute node to use Keystone authentication:
    [root@compute1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT auth_strategy keystone
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_uri http://controller:5000
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_host controller
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_protocol http
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken auth_port 35357
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_user nova
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_tenant_name service
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf keystone_authtoken admin_password nova_password
  2. Configure the remote console for instances terminal access:
    [root@compute1 ~]# openstack-config --set /etc/nova/nova.conf
DEFAULT my_ip 192.168.200.159
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf
DEFAULT vnc_enabled True
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf DE
\FAULT vncserver_listen 0.0.0.0
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT vncserver_proxyclient_address 192.168.200.159
[root@compute1 ~]# openstack-config --set /etc/nova/nova.conf \DEFAULT novncproxy_base_url http://controller:6080/vnc_auto.html
  3. Configure which glance service to use to retrieve images:
    [root@compute1 ~]# openstack-config --set /etc/nova/nova.conf DEFAULT glance_host controller

    Note

    If you are installing the compute node on a virtual machine, configure Nova to the user QEMU emulation instated of the default KVM backend. To configure QEMU, run the following command:

    [root@compute1 ~]# openstack-config --set /etc/nova/nova.conf libvirt virt_type qemu

Start and enable Service

Using systemctl command, start and enable the service:

[root@compute1 ~]# systemctl start libvirtd
[root@compute1 ~]# systemctl start openstack-nova-compute
[root@compute1 ~]# systemctl enable libvirtd
[root@compute1 ~]# systemctl enable openstack-nova-compute
End of Section 9
Next Section
bookmark search playlist font-size

Change the font size

margin-width

Change margin width

day-mode

Change background colour

Close icon Search
Country selected
Close icon Your notes and bookmarks

Delete Bookmark

Modal Close icon
Are you sure you want to delete it?
Cancel
Yes, Delete