{"draftJsState":{"blocks":[{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[{"length":614,"offset":0,"style":"ITALIC"},{"length":614,"offset":0,"style":"BOLD"}],"text":"Openstack — это бесплатное облачное решение с открытым исходным кодом, которое позволяет создать частную платформу IaaS (инфраструктура как услуга) с помощью различных дополнительных услуг. Каждый сервис в OpenStack предлагает интерфейс прикладного программирования (API) для облегчения интеграции. Ключевые компоненты, доступные в OpenStack, будут предоставлять вычислительные, сетевые ресурсы и ресурсы хранения. Им можно управлять из интерфейса командной строки с помощью openstack или через интуитивно понятную панель управления, откуда вы можете администрировать облако OpenStack и контролировать его ресурсы.","type":"unstyled","key":"ao2m7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"В этой статье мы подробно рассмотрим шаги, необходимые для локальной настройки частного облака OpenStack на вашем компьютере с Debian 12 Linux. Это установка с одним узлом, которая подходит только для обучения и тестирования в домашних лабораториях. Мы используем ручной метод установки других решений, таких как Kolla и OpenStack Ansible.","type":"unstyled","key":"b7ler"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Прежде чем приступить к этой настройке, убедитесь, что ваша машина соответствует следующим минимальным требованиям.","type":"unstyled","key":"b07ht"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Свежая установка Debian 12 Linux\nВключение расширения виртуализации CPU в BIOS\nПользователь root или пользователь с привилегиями sudo\n2 виртуальных ЦПУ\n8 ГБ ОЗУ\nЕмкость диска 20 ГБ\nХорошее подключение к Интернету","type":"unstyled","key":"dp1hb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Давайте начнем!.\n1. Подготовьте среду","type":"unstyled","key":"dl889"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Наша среда имеет следующие переменные:","type":"unstyled","key":"63tkn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"IP-адрес сервера Debian 12: 192.168.1.2\nИмя хоста сервера Debian 12: openstack.kalyuzhnyy.ru\nСетевой интерфейс: eno1\nРегион OpenStack по умолчанию: RegionOne\nДомен по умолчанию: по умолчанию","type":"unstyled","key":"44vpk"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Задайте имя хоста сервера.","type":"unstyled","key":"b6b3m"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sudo hostnamectl set-hostname openstack.kalyuzhnyy.ru","type":"unstyled","key":"d0mjm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Отредактируйте файл /etc/hosts для сопоставления IP-адреса вашего сервера с настроенным именем хоста.","type":"unstyled","key":"65uib"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"$ sudo vim /etc/hosts\n192.168.1.2 openstack.kalyuzhnyy.ru osp01","type":"unstyled","key":"bcg8p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Обновите систему, прежде чем приступать к другим настройкам. Предполагается, что вы работаете на чистой машине Debian.","type":"unstyled","key":"fn1t0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sudo apt update && sudo apt upgrade -y","type":"unstyled","key":"73u4b"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Может потребоваться перезагрузка. Просто подтвердите.","type":"unstyled","key":"4pme9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[ -e /var/run/reboot-required ] && sudo reboot","type":"unstyled","key":"da2qm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Настройте синхронизацию времени NTP.","type":"unstyled","key":"dvu1"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Использование Systemd timesyncd","type":"unstyled","key":"2g4te"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Откройте файл timesyncd.conf файл для редактирования и обновите адрес на вашем NTP сервере.","type":"unstyled","key":"b95f2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"$ sudo vim /etc/systemd/timesyncd.conf\n[Time]\nNTP=192.168.1.1","type":"unstyled","key":"beq1q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапустите службу systemd-timesyncd.","type":"unstyled","key":"19hbg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sudo systemctl restart systemd-timesyncd","type":"unstyled","key":"eaker"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Подтвердите статус","type":"unstyled","key":"5nm6g"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sudo timedatectl timesync-status","type":"unstyled","key":"2c6hr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Использование Chrony","type":"unstyled","key":"dg9rr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите Chrony и настройте NTP сервер для корректировки времени. NTP использует 123/UDP.","type":"unstyled","key":"aubfu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sudo apt -y install chrony vim","type":"unstyled","key":"ae2d8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Вы можете изменить NTP-серверы или использовать стандартное управление.","type":"unstyled","key":"72llr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"$ sudo vim /etc/chrony/chrony.conf\npool 2.debian.pool.ntp.org iburst","type":"unstyled","key":"2s4sa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите часовой пояс в соответствии с вашим текущим местоположением","type":"unstyled","key":"8fq3j"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sudo timedatectl set-timezone Africa/Nairobi\nsudo timedatectl set-ntp true","type":"unstyled","key":"21bu0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Подтвердите настройки","type":"unstyled","key":"30t4e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"$ timedatectl\nLocal time: Wed 2024-01-31 21:47:22 EAT\nUniversal time: Wed 2024-01-31 18:47:22 UTC\nRTC time: Wed 2024-01-31 18:47:22\nTime zone: Africa/Nairobi (EAT, +0300)\nSystem clock synchronized: yes\nNTP service: active\nRTC in local TZ: no","type":"unstyled","key":"f7crm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапуск службы хроники","type":"unstyled","key":"dilcv"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sudo systemctl restart chrony","type":"unstyled","key":"87ie8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Ручная синхронизация времени в системе.","type":"unstyled","key":"epelf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"$ sudo chronyc sources\nMS Name/IP address Stratum Poll Reach LastRx Last sample\n===============================================================================\n^- ntp1.icolo.io 2 6 37 57 +770us[ +770us] +/- 13ms\n^* ntp0.icolo.io 2 6 37 57 -15us[ -895us] +/- 13ms\n^- time.cloudflare.com 3 6 37 58 +3221us[+3221us] +/- 71ms\n^- time.cloudflare.com 3 6 37 59 +3028us[+2156us] +/- 71ms","type":"unstyled","key":"235hc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"2. Установите MariaDB, RabbitMQ, Memcached","type":"unstyled","key":"dlonp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"С этого момента мы можем переключиться на учетную запись пользователя root.","type":"unstyled","key":"dlbqn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"$ sudo -i\n# or\n$ sudo su -","type":"unstyled","key":"8rlvq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установка сервера базы данных MariaDB","type":"unstyled","key":"2e53a"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install mariadb-server -y","type":"unstyled","key":"4r1ag"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Настройте максимальное количество подключений к базе данных, чтобы избежать тайм-аутов подключения.","type":"unstyled","key":"6m6ba"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/mysql/mariadb.conf.d/50-server.cnf\nmax_connections = 700","type":"unstyled","key":"e23ra"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапустите службу MariaDB после внесения изменений.","type":"unstyled","key":"16m50"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl restart mariadb","type":"unstyled","key":"banst"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Также установите пакет расширения Python MySQL.","type":"unstyled","key":"c8m8d"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install python3-pymysql","type":"unstyled","key":"agv66"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"После этого выполните установку RabbitMQ, Memcached и веб-сервера Nginx.","type":"unstyled","key":"e2hk6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install memcached rabbitmq-server nginx libnginx-mod-stream","type":"unstyled","key":"3e2jf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте пользователя RabbitMQ для OpenStack, установите пароль и предоставьте права.","type":"unstyled","key":"7mbck"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"rabbitmqctl add_user openstack StrongPassw0rd01\nrabbitmqctl set_permissions openstack \".*\" \".*\" \".*\"","type":"unstyled","key":"asjhc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Отключите веб-страницу nginx по умолчанию.","type":"unstyled","key":"79v4c"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"unlink /etc/nginx/sites-enabled/default","type":"unstyled","key":"5sboa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапустите службы.","type":"unstyled","key":"6ogs4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl restart mariadb rabbitmq-server memcached nginx","type":"unstyled","key":"n43g"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"3. Установка и настройка Keystone","type":"unstyled","key":"eidv8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Сервис OpenStack Identity (Keystone) — это единая точка интеграции для аутентификации, авторизации и каталога сервисов.","type":"unstyled","key":"765im"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте базу данных и получите пользователя с соответствующими разрешениями.","type":"unstyled","key":"442er"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# mysql\ncreate database keystone;\ngrant all privileges on keystone.* to keystone@'localhost' identified by 'StrongPassw0rd01';\nflush privileges;\nexit;","type":"unstyled","key":"dhtcj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите Keystone и его зависимости, включая клиент OpenStack.","type":"unstyled","key":"mik6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install keystone python3-openstackclient apache2 python3-oauth2client libapache2-mod-wsgi-py3 -y","type":"unstyled","key":"2d14a"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Отвечайте «Нет» на все вопросы.","type":"unstyled","key":"48qgu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Отредактируйте файл конфигурации keystone и измените адрес, а также настройте параметры подключения к базе данных и поставщика токенов.","type":"unstyled","key":"fknp9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/keystone/keystone.conf\n# Specify Memcache Server on line 363\nmemcache_servers = localhost:11211","type":"unstyled","key":"9hc80"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Add MariaDB connection information around line 543:\n[database]\nconnection = mysql+pymysql://keystone:StrongPassw0rd01@localhost/keystone","type":"unstyled","key":"4o9ev"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Set token provider in line 2169\nprovider = fernet","type":"unstyled","key":"6f603"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Заполните базу данных службы удостоверений данными, выполнив приведенные ниже команды.","type":"unstyled","key":"46irr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"su -s /bin/bash keystone -c \"keystone-manage db_sync\"","type":"unstyled","key":"2fjjg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Безопасно игнорируйте ошибку \"Исключение игнорируется в:...\".","type":"unstyled","key":"bibpf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Далее мы инициализируем репозитории ключей Fernet:","type":"unstyled","key":"1ai53"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone\nkeystone-manage credential_setup --keystone-user keystone --keystone-group keystone","type":"unstyled","key":"9vvop"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Запустите службу идентификации. В последней версии OpenStack идентификация keystone может быть запущена на одном и том же порту для всех интерфейсов.","type":"unstyled","key":"42cpf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"export controller=$(hostname -f)","type":"unstyled","key":"2ngfq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"keystone-manage bootstrap --bootstrap-password StrongPassw0rd01 \\\n--bootstrap-admin-url https://$controller:5000/v3/ \\\n--bootstrap-internal-url https://$controller:5000/v3/ \\\n--bootstrap-public-url https://$controller:5000/v3/ \\\n--bootstrap-region-id RegionOne","type":"unstyled","key":"34f6d"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите полное доменное имя сервера в соответствии с ранее установленным в файле конфигурации Apache.","type":"unstyled","key":"6kep"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/apache2/apache2.conf\nServerName openstack.kalyuzhnyy.ru","type":"unstyled","key":"vbrr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте конфигурацию Apache VirtualHost для keystone. Это позволит нам получить доступ к API с использованием FQDN, а не IP-адреса.","type":"unstyled","key":"58r1u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/apache2/sites-available/keystone.conf","type":"unstyled","key":"542oh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Измените и вставьте следующее содержимое. Но не забудьте заменить пути SSL на свои.\n1. Использование Let's Encrypt","type":"unstyled","key":"52g9k"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Ознакомьтесь со следующим руководством по использованию Let's Encrypt.","type":"unstyled","key":"d2v43"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Как сгенерировать SSL-сертификаты Let's Encrypt на Linux\nСгенерируйте SSL-сертификат Let's Encrypt с помощью Cloudflare в частной сети\nКак сгенерировать SSL-сертификат Let's Encrypt Wildcard","type":"unstyled","key":"fm4er"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"В этом примере используются следующие SSL-сертификаты.","type":"unstyled","key":"4i8e5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/cert.pem\n/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/privkey.pem\n/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/chain.pem","type":"unstyled","key":"blorm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"2. Использование OpenSSL","type":"unstyled","key":"1enc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Для самоподписанных сертификатов OpenSSL, сгенерированных следующим образом.","type":"unstyled","key":"6edg9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/ssl/openssl.cnf\n[ home.cloudlabske.io ]\nsubjectAltName = DNS:openstack.kalyuzhnyy.ru","type":"unstyled","key":"4banj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Generate certificates\ncd /etc/ssl/private\nopenssl genrsa -aes128 2048 > openstack_server.key\nopenssl rsa -in server.key -out openstack_server.key\nopenssl req -utf8 -new -key openstack_server.key -out openstack_server.csr\nopenssl x509 -in openstack_server.csr -out openstack_server.crt -req -signkey openstack_server.key -extfile /etc/ssl/openssl.cnf -extensions openstack.kalyuzhnyy.ru -days 3650\nchmod 600 server.key","type":"unstyled","key":"9nr1f"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Пути к ключу и сертификатам будут.","type":"unstyled","key":"a64j9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"/etc/ssl/private/openstack_server.crt\n/etc/ssl/private/openstack_server.key","type":"unstyled","key":"arsq8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Измените приведенное ниже содержимое в соответствии с вашей средой.","type":"unstyled","key":"9s7mr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Listen 5000","type":"unstyled","key":"dq6qn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\nSSLEngine on\nSSLHonorCipherOrder on\nSSLCertificateFile /etc/letsencrypt/live/openstack.kalyuzhnyy.ru/cert.pem\nSSLCertificateKeyFile /etc/letsencrypt/live/openstack.kalyuzhnyy.ru/privkey.pem\nSSLCertificateChainFile /etc/letsencrypt/live/openstack.kalyuzhnyy.ru/chain.pem\nWSGIScriptAlias / /usr/bin/keystone-wsgi-public\nWSGIDaemonProcess keystone-public processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}\nWSGIProcessGroup keystone-public\nWSGIApplicationGroup %{GLOBAL}\nWSGIPassAuthorization On\nLimitRequestBody 114688","type":"unstyled","key":"qope"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"= 2.4>\nErrorLogFormat \"%{cu}t %M\"\n","type":"unstyled","key":"bftqr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"ErrorLog /var/log/apache2/keystone.log\nCustomLog /var/log/apache2/keystone_access.log combined","type":"unstyled","key":"b16pa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\nRequire all granted\n\n","type":"unstyled","key":"c53c8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Alias /identity /usr/bin/keystone-wsgi-public\n\nSetHandler wsgi-script\nOptions +ExecCGI","type":"unstyled","key":"17lrf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"WSGIProcessGroup keystone-public\nWSGIApplicationGroup %{GLOBAL}\nWSGIPassAuthorization On\n","type":"unstyled","key":"camm2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Включите обязательные модули Apache и веб-конфигурацию keystone.","type":"unstyled","key":"25ucq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"a2enmod ssl\na2ensite keystone\nsystemctl disable --now keystone\nsystemctl restart apache2","type":"unstyled","key":"au5ht"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Сгенерируйте файл доступа к keystone для клиента OpenStack.","type":"unstyled","key":"buh02"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"export controller=$(hostname -f)","type":"unstyled","key":"9vgui"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"tee ~/keystonerc<> ~/.bashrc","type":"unstyled","key":"6cbrq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание проектов","type":"unstyled","key":"rrid"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте проект службы, который будет содержать уникального пользователя для каждой службы, добавляемой в среду.","type":"unstyled","key":"4g9rr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"root@osp01 ~(keystone)$ openstack project create --domain default --description \"Service Project\" service\n+-------------+----------------------------------+\n| Field | Value |\n+-------------+----------------------------------+\n| description | Service Project |\n| domain_id | default |\n| enabled | True |\n| id | 1067895d9b99452b8d1758eda755c7bc |\n| is_domain | False |\n| name | service |\n| options | {} |\n| parent_id | default |\n| tags | [] |\n+-------------+----------------------------------+","type":"unstyled","key":"ev7fo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"root@osp01 ~(keystone)$ openstack project list\n+----------------------------------+---------+\n| ID | Name |\n+----------------------------------+---------+\n| 1067895d9b99452b8d1758eda755c7bc | service |\n| 9a102dfdf9a54e8382fefdca727b2553 | admin |\n+----------------------------------+---------+\nroot@osp01 ~(keystone)$","type":"unstyled","key":"df4b4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"4. Установка и настройка Glance (сервис изображений)","type":"unstyled","key":"32v06"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Служба OpenStack Image (glance) позволяет пользователям кластера обнаруживать, регистрировать и извлекать образы виртуальных машин с помощью REST API. С помощью API вы можете запрашивать метаданные образа виртуальной машины и получать фактическое изображение. Образы виртуальных машин доступны через службу образов в различных местах.","type":"unstyled","key":"c1kak"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте пользователя и пароль базы данных для обзора. В базе данных будут храниться метаданные образа виртуальной машины.","type":"unstyled","key":"3neph"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# mysql\ncreate database glance;\ngrant all privileges on glance.* to glance@'localhost' identified by 'StrongPassw0rd01';\nflush privileges;\nexit;","type":"unstyled","key":"36gcb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавление пользователя в проект сервиса Keystone.","type":"unstyled","key":"3i4ds"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack user create --domain default --project service --password StrongPassw0rd01 glance\n+---------------------+----------------------------------+\n| Field | Value |\n+---------------------+----------------------------------+\n| default_project_id | 1067895d9b99452b8d1758eda755c7bc |\n| domain_id | default |\n| enabled | True |\n| id | a4af040dceff40d1a01beb14d268a7d9 |\n| name | glance |\n| options | {} |\n| password_expires_at | None |\n+---------------------+----------------------------------+","type":"unstyled","key":"76s15"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте роль администратора в проект пользователя и службы glance:","type":"unstyled","key":"7o98g"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack role add --project service --user glance admin","type":"unstyled","key":"6u5gs"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте сущность службы glance:","type":"unstyled","key":"ap7p8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack service create --name glance --description \"OpenStack Image service\" image\n+-------------+----------------------------------+\n| Field | Value |\n+-------------+----------------------------------+\n| description | OpenStack Image service |\n| enabled | True |\n| id | db9cb71d9f2b41128784458b057d468d |\n| name | glance |\n| type | image |\n+-------------+----------------------------------+","type":"unstyled","key":"1p7s0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Сохраните полное доменное имя контроллера в качестве переменной для удобства использования.","type":"unstyled","key":"cnn8i"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"export controller=$(hostname -f)","type":"unstyled","key":"7m4f8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте конечные точки API службы изображений в регионе по умолчанию RegionOne. Мы создадим публичные, административные и внутренние конечные точки.","type":"unstyled","key":"7vom8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne image public https://$controller:9292\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | 5f5a8246813e436ab31ebeb37b1bb843 |\n| interface | public |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | db9cb71d9f2b41128784458b057d468d |\n| service_name | glance |\n| service_type | image |\n| url | https://openstack.kalyuzhnyy.ru:9292 |\n+--------------+----------------------------------------+","type":"unstyled","key":"fh177"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne image internal https://$controller:9292\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | 953c077f90944774a205f5244aa28ce8 |\n| interface | internal |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | db9cb71d9f2b41128784458b057d468d |\n| service_name | glance |\n| service_type | image |\n| url | https://openstack.kalyuzhnyy.ru:9292 |\n+--------------+----------------------------------------+","type":"unstyled","key":"44ibc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne image admin https://$controller:9292\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | 3788fbdc728f4e8fab7d370ba2559103 |\n| interface | admin |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | db9cb71d9f2b41128784458b057d468d |\n| service_name | glance |\n| service_type | image |\n| url | https://openstack.kalyuzhnyy.ru:9292 |\n+--------------+----------------------------------------+","type":"unstyled","key":"46os2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите пакет OpenStack Glance","type":"unstyled","key":"8ujvr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install glance -y","type":"unstyled","key":"15jmg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Ответ «Нет» для всех вариантов автоматической настройки.\nНастройка Glance API","type":"unstyled","key":"60lcf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"API принимает вызовы Image API для обнаружения, извлечения и хранения изображений.","type":"unstyled","key":"f5eps"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте резервную копию текущего файла конфигурации Glance API.","type":"unstyled","key":"d9q0t"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"mv /etc/glance/glance-api.conf /etc/glance/glance-api.conf.orig","type":"unstyled","key":"4ekgf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте новый файл конфигурации Glance API.","type":"unstyled","key":"4fc95"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/glance/glance-api.conf","type":"unstyled","key":"7pogs"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Вставьте и измените приведенные ниже значения в соответствии с вашей средой.","type":"unstyled","key":"491v0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"В [DEFAULT] , настройка подключения RabbitMQ\nВ [glance_store] , настройка локального хранилища файловой системы и расположения файлов образов\nВ [database] раздел, настройка доступа к базе данных\nВ [keystone_authtoken] и [paste_deploy] , настроить доступ к сервису Identity","type":"unstyled","key":"212c1"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[DEFAULT]\nbind_host = 127.0.0.1\n# RabbitMQ connection info\ntransport_url = rabbit://openstack:StrongPassw0rd01@localhost\nenforce_secure_rbac = true","type":"unstyled","key":"8t0gl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[glance_store]\nstores = file,http\ndefault_store = file\nfilesystem_store_datadir = /var/lib/glance/images/","type":"unstyled","key":"apn73"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[database]\n# MariaDB connection info\nconnection = mysql+pymysql://glance:StrongPassw0rd01@localhost/glance","type":"unstyled","key":"f9uru"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# keystone auth info\n[keystone_authtoken]\nwww_authenticate_uri = https://openstack.kalyuzhnyy.ru:5000\nauth_url = https://openstack.kalyuzhnyy.ru:5000\nmemcached_servers = 127.0.0.1:11211\nauth_type = password\nproject_domain_name = default\nuser_domain_name = default\nproject_name = service\nusername = glance\npassword = StrongPassw0rd01\n# if using self-signed certs on Apache2 Keystone, turn to [true]\ninsecure = false","type":"unstyled","key":"2vbfu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[paste_deploy]\nflavor = keystone","type":"unstyled","key":"5ce08"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[oslo_policy]\nenforce_new_defaults = true","type":"unstyled","key":"4qcug"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите новые права доступа к файлам.","type":"unstyled","key":"fqsei"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"chown root:glance /etc/glance/glance-api.conf\nchmod 640 /etc/glance/glance-api.conf","type":"unstyled","key":"6hqop"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Заполните базу данных службы изображений:","type":"unstyled","key":"1k7dn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"su -s /bin/bash -c \"glance-manage db_sync\" glance","type":"unstyled","key":"7uucr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Запустите и включите службу Glance.","type":"unstyled","key":"8c8fm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl restart glance-api && systemctl enable glance-api","type":"unstyled","key":"6ircp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Настройка Nginx","type":"unstyled","key":"poqa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/nginx/nginx.conf","type":"unstyled","key":"fj4t8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Изменяйте, добавляя данные подключения Glance в запрос прокси для. Не забудьте установить правильные значения для адреса прослушивания, SSL-сертификата и ключа.","type":"unstyled","key":"ekk4c"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Add the following to the end of file\nstream {\nupstream glance-api {\nserver 127.0.0.1:9292;\n}\nserver {\nlisten 192.168.1.2:9292 ssl;\nproxy_pass glance-api;\n}\nssl_certificate \"/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/fullchain.pem\";\nssl_certificate_key \"/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/privkey.pem\";\n}","type":"unstyled","key":"5fqp4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапустите веб-сервис nginx, когда закончите.","type":"unstyled","key":"2qsuc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl restart nginx","type":"unstyled","key":"fl2t5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"5. Установка и настройка Nova","type":"unstyled","key":"aoone"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"OpenStack Compute является важной частью системы IaaS (инфраструктура как услуга). Она обеспечивает хостинг и управление системами облачных вычислений.","type":"unstyled","key":"9oc85"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Компоненты сервиса OpenStack Compute.","type":"unstyled","key":"22qso"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Служба nova-api: принимает вызовы вычислительного API конечных пользователей и отвечает на них.\nnova-api-metadata service: Принимает запросы метаданных от экземпляров.\nnova-compute service — рабочий демон, который создает и завершает работу экземпляров виртуальных машин с помощью API гипервизора.\nСлужба nova-scheduler: принимает запрос экземпляра виртуальной машины из очереди и определяет, на каком узле вычислительного сервера он выполняется.\nмодуль nova-conductor: Выступает посредником во взаимодействиях между сервисом nova-compute и базой данных.\nДемон nova-novncproxy: Предоставляет прокси для доступа к работающим экземплярам через VNC-соединение.\nnova-spicehtml5proxy daemon: Предоставляет прокси для доступа к работающим экземплярам через SPICE-соединение.\nОчередь: центральный узел для передачи сообщений между демонами\nБаза данных SQL: хранит большинство состояний времени сборки и выполнения для облачной инфраструктуры, включая доступные типы экземпляров, используемые экземпляры, доступные сети и проекты.","type":"unstyled","key":"8hur2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"1) Подготовьте предварительные условия для настройки","type":"unstyled","key":"e621l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"В этом руководстве мы выбираем виртуализацию KVM с libvirt. Установите KVM и другие необходимые утилиты.","type":"unstyled","key":"fbtu5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install qemu-kvm libvirt-daemon libvirt-daemon-system bridge-utils libosinfo-bin virtinst","type":"unstyled","key":"e78vk"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Убедитесь, что в BIOS включены расширения виртуализации ЦП.","type":"unstyled","key":"d7j3f"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# lsmod | grep kvm\nkvm_intel 380928 0\nkvm 1142784 1 kvm_intel\nirqbypass 16384 1 kvm","type":"unstyled","key":"c59v"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте пользователя и базу данных на MariaDB для Nova, Nova API, Placement, Nova cell.","type":"unstyled","key":"4tv6s"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# mysql\ncreate database nova;\ngrant all privileges on nova.* to nova@'localhost' identified by 'StrongPassw0rd01';","type":"unstyled","key":"5h2ro"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"create database nova_api;\ngrant all privileges on nova_api.* to nova@'localhost' identified by 'StrongPassw0rd01';","type":"unstyled","key":"5jdeb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"create database placement;\ngrant all privileges on placement.* to placement@'localhost' identified by 'StrongPassw0rd01';","type":"unstyled","key":"21ukm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"create database nova_cell0;\ngrant all privileges on nova_cell0.* to nova@'localhost' identified by 'StrongPassw0rd01';","type":"unstyled","key":"2oa82"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"flush privileges;\nexit","type":"unstyled","key":"6svrc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте пользователя nova:","type":"unstyled","key":"44kes"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack user create --domain default --project service --password StrongPassw0rd01 nova\n+---------------------+----------------------------------+\n| Field | Value |\n+---------------------+----------------------------------+\n| default_project_id | 1067895d9b99452b8d1758eda755c7bc |\n| domain_id | default |\n| enabled | True |\n| id | 424afd4671ad49268bdbd14fe32b6fe2 |\n| name | nova |\n| options | {} |\n| password_expires_at | None |\n+---------------------+----------------------------------+","type":"unstyled","key":"am299"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте роль admin пользователю nova:","type":"unstyled","key":"98ff3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack role add --project service --user nova admin","type":"unstyled","key":"bsglh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавление пользователя размещения в проект сервиса","type":"unstyled","key":"7tmk3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack user create --domain default --project service --password StrongPassw0rd01 placement","type":"unstyled","key":"2aq88"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте роль администратора пользователю места размещения:","type":"unstyled","key":"cli7i"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack role add --project service --user placement admin","type":"unstyled","key":"f0g3n"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание сервисной записи nova","type":"unstyled","key":"fsdc8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack service create --name nova --description \"OpenStack Compute service\" compute\n+-------------+----------------------------------+\n| Field | Value |\n+-------------+----------------------------------+\n| description | OpenStack Compute service |\n| enabled | True |\n| id | ba737aa8b0a240fab38bdf49b31a60f0 |\n| name | nova |\n| type | compute |\n+-------------+----------------------------------+","type":"unstyled","key":"65h7h"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте запись службы размещения.","type":"unstyled","key":"7b25l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack service create --name placement --description \"OpenStack Compute Placement service\" placement\n+-------------+-------------------------------------+\n| Field | Value |\n+-------------+-------------------------------------+\n| description | OpenStack Compute Placement service |\n| enabled | True |\n| id | ae365b6e32ec4db985ec9c6e7f685ae1 |\n| name | placement |\n| type | placement |\n+-------------+-------------------------------------+","type":"unstyled","key":"7ruh3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Определение узла Nova API","type":"unstyled","key":"4am9l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"export controller=$(hostname -f)","type":"unstyled","key":"806hd"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание общедоступной конечной точки для nova.","type":"unstyled","key":"6ho3n"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne compute public https://$controller:8774/v2.1/%\$tenant_id\$s\n+--------------+-----------------------------------------------------------+\n| Field | Value |\n+--------------+-----------------------------------------------------------+\n| enabled | True |\n| id | 50890db0f27443ddb547d24786340330 |\n| interface | public |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | ba737aa8b0a240fab38bdf49b31a60f0 |\n| service_name | nova |\n| service_type | compute |\n| url | https://openstack.kalyuzhnyy.ru:8774/v2.1/%(tenant_id)s |\n+--------------+-----------------------------------------------------------+","type":"unstyled","key":"7kdn0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание частной конечной точки для nova.","type":"unstyled","key":"116mn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne compute internal https://$controller:8774/v2.1/%\$tenant_id\$s\n+--------------+-----------------------------------------------------------+\n| Field | Value |\n+--------------+-----------------------------------------------------------+\n| enabled | True |\n| id | 96b3abd5ca314429b0602a2bc153af77 |\n| interface | internal |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | ba737aa8b0a240fab38bdf49b31a60f0 |\n| service_name | nova |\n| service_type | compute |\n| url | https://openstack.kalyuzhnyy.ru:8774/v2.1/%(tenant_id)s |\n+--------------+-----------------------------------------------------------+","type":"unstyled","key":"efh22"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание конечной точки администратора для nova.","type":"unstyled","key":"42s7d"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne compute admin https://$controller:8774/v2.1/%\$tenant_id\$s\n+--------------+-----------------------------------------------------------+\n| Field | Value |\n+--------------+-----------------------------------------------------------+\n| enabled | True |\n| id | 8fcd6f0a2d4c4816b09ca214e311597a |\n| interface | admin |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | ba737aa8b0a240fab38bdf49b31a60f0 |\n| service_name | nova |\n| service_type | compute |\n| url | https://openstack.kalyuzhnyy.ru:8774/v2.1/%(tenant_id)s |\n+--------------+-----------------------------------------------------------+","type":"unstyled","key":"drsc3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание общедоступной, частной и административной конечной точки для nova.","type":"unstyled","key":"25r5a"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne placement public https://$controller:8778\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | 2fc42dd9223d41aea94779daa6a80e19 |\n| interface | public |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | ae365b6e32ec4db985ec9c6e7f685ae1 |\n| service_name | placement |\n| service_type | placement |\n| url | https://openstack.kalyuzhnyy.ru:8778 |\n+--------------+----------------------------------------+","type":"unstyled","key":"b4r5u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne placement internal https://$controller:8778\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | fd284797981540c2b219139edbdbdf69 |\n| interface | internal |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | ae365b6e32ec4db985ec9c6e7f685ae1 |\n| service_name | placement |\n| service_type | placement |\n| url | https://openstack.kalyuzhnyy.ru:8778 |\n+--------------+----------------------------------------+","type":"unstyled","key":"e8mo8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne placement admin https://$controller:8778\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | 4c40f9d36e384c6685b9f56e7d951329 |\n| interface | admin |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | ae365b6e32ec4db985ec9c6e7f685ae1 |\n| service_name | placement |\n| service_type | placement |\n| url | https://openstack.kalyuzhnyy.ru:8778 |\n+--------------+----------------------------------------+","type":"unstyled","key":"531ml"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"2) Установка и настройка сервисов Nova","type":"unstyled","key":"7nv20"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установка пакетов Nova","type":"unstyled","key":"4gu36"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install nova-api nova-scheduler nova-conductor nova-novncproxy python3-novaclient placement-api","type":"unstyled","key":"5bdsn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Резервное копирование текущего конфигурационного файла Nova","type":"unstyled","key":"1tirm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"mv /etc/nova/nova.conf /etc/nova/nova.conf.orig","type":"unstyled","key":"d49aj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание новой конфигурации","type":"unstyled","key":"56mue"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/nova/nova.conf","type":"unstyled","key":"gi8j"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Вставьте во время изменения настроек в файле. Настройка подключения RabbitMQ, VNC, Glance API,","type":"unstyled","key":"66ivj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[DEFAULT]\nallow_resize_to_same_host = True\nosapi_compute_listen = 127.0.0.1\nosapi_compute_listen_port = 8774\nmetadata_listen = 127.0.0.1\nmetadata_listen_port = 8775\nstate_path = /var/lib/nova\nenabled_apis = osapi_compute,metadata\nlog_dir = /var/log/nova\n# RabbitMQ connection details\ntransport_url = rabbit://openstack:StrongPassw0rd01@localhost","type":"unstyled","key":"1qjob"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[api]\nauth_strategy = keystone","type":"unstyled","key":"floe8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[vnc]\nenabled = True\nnovncproxy_host = 127.0.0.1\nnovncproxy_port = 6080\nnovncproxy_base_url = https://openstack.kalyuzhnyy.ru:6080/vnc_auto.html","type":"unstyled","key":"2gobi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Glance connection info\n[glance]\napi_servers = https://openstack.kalyuzhnyy.ru:9292","type":"unstyled","key":"31qqq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[oslo_concurrency]\nlock_path = $state_path/tmp","type":"unstyled","key":"upv5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# MariaDB connection info\n[api_database]\nconnection = mysql+pymysql://nova:StrongPassw0rd01@localhost/nova_api","type":"unstyled","key":"28d57"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[database]\nconnection = mysql+pymysql://nova:StrongPassw0rd01@localhost/nova","type":"unstyled","key":"auk85"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Keystone auth info\n[keystone_authtoken]\nwww_authenticate_uri = https://openstack.kalyuzhnyy.ru:5000\nauth_url = https://openstack.kalyuzhnyy.ru:5000\nmemcached_servers = localhost:11211\nauth_type = password\nproject_domain_name = default\nuser_domain_name = default\nproject_name = service\nusername = nova\npassword = StrongPassw0rd01\n# if using self-signed certs on Apache2 Keystone, turn to [true]\ninsecure = false","type":"unstyled","key":"7v3k5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[placement]\nauth_url = https://openstack.kalyuzhnyy.ru:5000\nos_region_name = RegionOne\nauth_type = password\nproject_domain_name = default\nuser_domain_name = default\nproject_name = service\nusername = placement\npassword = StrongPassw0rd01\n# if using self-signed certs on Apache2 Keystone, turn to [true]\ninsecure = false","type":"unstyled","key":"1m23s"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[wsgi]\napi_paste_config = /etc/nova/api-paste.ini","type":"unstyled","key":"b8r83"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[oslo_policy]\nenforce_new_defaults = true","type":"unstyled","key":"f6r9n"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите права собственности и разрешения.","type":"unstyled","key":"64rpq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"chgrp nova /etc/nova/nova.conf\nchmod 640 /etc/nova/nova.conf","type":"unstyled","key":"44v9j"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установка типа прокси консоли для Nova","type":"unstyled","key":"3748i"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sudo sed -i 's/^NOVA_CONSOLE_PROXY_TYPE=.*/NOVA_CONSOLE_PROXY_TYPE=novnc/g' /etc/default/nova-consoleproxy","type":"unstyled","key":"avt06"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Конфигурация размещения резервных токов","type":"unstyled","key":"frg5p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"mv /etc/placement/placement.conf /etc/placement/placement.conf.orig","type":"unstyled","key":"fgoa2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание нового конфигурационного файла для размещения Nova","type":"unstyled","key":"38vqb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/placement/placement.conf","type":"unstyled","key":"7tlkf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Настройте и вставьте конфигурации в файл.","type":"unstyled","key":"4k6om"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[DEFAULT]\ndebug = false","type":"unstyled","key":"cd486"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[api]\nauth_strategy = keystone","type":"unstyled","key":"albl6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[keystone_authtoken]\nwww_authenticate_uri = https://openstack.kalyuzhnyy.ru:5000\nauth_url = https:/openstack.kalyuzhnyy.ru:5000\nmemcached_servers = localhost:11211\nauth_type = password\nproject_domain_name = default\nuser_domain_name = default\nproject_name = service\nusername = placement\npassword = StrongPassw0rd01\n# if using self-signed certs on Apache2 Keystone, turn to [true]\ninsecure = false","type":"unstyled","key":"fe3og"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[placement_database]\nconnection = mysql+pymysql://placement:StrongPassw0rd01@localhost/placement","type":"unstyled","key":"hgd5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание API для размещения","type":"unstyled","key":"9qsu9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/apache2/sites-available/placement-api.conf","type":"unstyled","key":"8hll2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Вот содержимое, которое нужно поместить в файл. Здесь ничего менять не нужно.","type":"unstyled","key":"el101"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Listen 127.0.0.1:8778","type":"unstyled","key":"6b1b9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\nWSGIScriptAlias / /usr/bin/placement-api\nWSGIDaemonProcess placement-api processes=5 threads=1 user=placement group=placement display-name=%{GROUP}\nWSGIProcessGroup placement-api\nWSGIApplicationGroup %{GLOBAL}\nWSGIPassAuthorization On\nLimitRequestBody 114688","type":"unstyled","key":"8mue5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"= 2.4>\nErrorLogFormat \"%{cu}t %M\"\n","type":"unstyled","key":"7k640"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"ErrorLog /var/log/apache2/placement_api_error.log\nCustomLog /var/log/apache2/placement_api_access.log combined","type":"unstyled","key":"3e8qj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\nRequire all granted\n\n","type":"unstyled","key":"d4lpd"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Alias /placement /usr/bin/placement-api\n\nSetHandler wsgi-script\nOptions +ExecCGI","type":"unstyled","key":"fqvm3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"WSGIProcessGroup placement-api\nWSGIApplicationGroup %{GLOBAL}\nWSGIPassAuthorization On\n","type":"unstyled","key":"3e88r"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите правильные права доступа к файлам","type":"unstyled","key":"3m78b"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"chgrp placement /etc/placement/placement.conf\nchmod 640 /etc/placement/placement.conf","type":"unstyled","key":"bgqq7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Обновите адрес привязки UWSGI на localhost.","type":"unstyled","key":"7uldg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sed -i -e \"s/UWSGI_BIND_IP=.*/UWSGI_BIND_IP=\\\"127.0.0.1\\\"/\" /etc/init.d/nova-api\nsed -i -e \"s/UWSGI_BIND_IP=.*/UWSGI_BIND_IP=\\\"127.0.0.1\\\"/\" /etc/init.d/nova-api-metadata","type":"unstyled","key":"14t4u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Включите placement-api для веб-сайта apache.","type":"unstyled","key":"1bvsr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"a2ensite placement-api","type":"unstyled","key":"nqca"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапустите службы после завершения.","type":"unstyled","key":"bfvnr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl disable --now placement-api && systemctl restart apache2","type":"unstyled","key":"a5a5u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Откройте файл конфигурации Nginx.","type":"unstyled","key":"eo2br"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/nginx/nginx.conf","type":"unstyled","key":"audns"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Обновите, добавив линии цветом. Замените 192.168.1.2 на IP-адрес вашего сервера.","type":"unstyled","key":"1p7od"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"stream {\nupstream glance-api {\nserver 127.0.0.1:9292;\n}\nserver {\nlisten 192.168.1.2:9292 ssl;\nproxy_pass glance-api;\n}\nupstream nova-api {\nserver 127.0.0.1:8774;\n}\nserver {\nlisten 192.168.1.2:8774 ssl;\nproxy_pass nova-api;\n}\nupstream nova-metadata-api {\nserver 127.0.0.1:8775;\n}\nserver {\nlisten 192.168.1.2:8775 ssl;\nproxy_pass nova-metadata-api;\n}\nupstream placement-api {\nserver 127.0.0.1:8778;\n}\nserver {\nlisten 192.168.1.2:8778 ssl;\nproxy_pass placement-api;\n}\nupstream novncproxy {\nserver 127.0.0.1:6080;\n}\nserver {\nlisten 192.168.1.2:6080 ssl;\nproxy_pass novncproxy;\n}\nssl_certificate \"/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/fullchain.pem\";\nssl_certificate_key \"/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/privkey.pem\";\n}","type":"unstyled","key":"3afl0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Импортируйте все необходимые данные.","type":"unstyled","key":"a8ne2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Populate the placement database\nsu -s /bin/bash placement -c \"placement-manage db sync\"","type":"unstyled","key":"ejic3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Populate the nova-api database\nsu -s /bin/bash nova -c \"nova-manage api_db sync\"","type":"unstyled","key":"ape6e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Register the cell0 database\nsu -s /bin/bash nova -c \"nova-manage cell_v2 map_cell0\"","type":"unstyled","key":"7htvj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Populate the nova database\nsu -s /bin/bash nova -c \"nova-manage db sync\"","type":"unstyled","key":"9gmf0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Create the cell1 cell\nsu -s /bin/sh nova -c \"nova-manage cell_v2 create_cell --name cell1\"","type":"unstyled","key":"8v5ki"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Остановите услуги, связанные с операциями Nova.","type":"unstyled","key":"e9qod"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl stop nova-api nova-api-metadata nova-conductor nova-scheduler nova-novncproxy","type":"unstyled","key":"5ilbe"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапустите веб-сервер nginx","type":"unstyled","key":"8sfdg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl restart nginx","type":"unstyled","key":"8q6oa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Затем запустите другие службы","type":"unstyled","key":"qsvl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl enable --now nova-api nova-api-metadata nova-conductor nova-scheduler nova-novncproxy","type":"unstyled","key":"8ht8d"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Убедитесь, что nova cell0 и cell1 зарегистрированы правильно:","type":"unstyled","key":"7tlpl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# su -s /bin/sh -c \"nova-manage cell_v2 list_cells\" nova\n+-------+--------------------------------------+-----------------------------------+------------------------------------------------+----------+\n| Name | UUID | Transport URL | Database Connection | Disabled |\n+-------+--------------------------------------+-----------------------------------+------------------------------------------------+----------+\n| cell0 | 00000000-0000-0000-0000-000000000000 | none:/ | mysql+pymysql://nova:****@localhost/nova_cell0 | False |\n| cell1 | d3a70005-5861-427e-9bdf-984b15400d7e | rabbit://openstack:****@localhost | mysql+pymysql://nova:****@localhost/nova | False |\n+-------+--------------------------------------+-----------------------------------+------------------------------------------------+----------+","type":"unstyled","key":"fbbm0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перечислите зарегистрированные вычислительные службы.","type":"unstyled","key":"5rdup"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack compute service list\n+--------------------------------------+----------------+-------+----------+---------+-------+----------------------------+\n| ID | Binary | Host | Zone | Status | State | Updated At |\n+--------------------------------------+----------------+-------+----------+---------+-------+----------------------------+\n| 6f75eb27-9c66-41c0-b0fa-15f1a48cb25c | nova-conductor | osp01 | internal | enabled | up | 2024-02-02T07:21:04.000000 |\n| 802d523d-1f92-427b-9f90-691bf54268af | nova-scheduler | osp01 | internal | enabled | up | 2024-02-02T07:21:05.000000 |\n+--------------------------------------+----------------+-------+----------+---------+-------+----------------------------+","type":"unstyled","key":"9951q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"3) Установите Nova KVM Compute","type":"unstyled","key":"bfifp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установка вычислительного пакета Nova KVM","type":"unstyled","key":"71upm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install nova-compute nova-compute-kvm -y","type":"unstyled","key":"jjt2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Откройте файл конфигурации nova.","type":"unstyled","key":"7el5r"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/nova/nova.conf","type":"unstyled","key":"elmdj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Обновите настройки VNC следующим образом.","type":"unstyled","key":"h23v"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[vnc]\nenabled = True\nserver_listen = 192.168.1.2\nserver_proxyclient_address = 192.168.1.2\nnovncproxy_host = 127.0.0.1\nnovncproxy_port = 6080\novncproxy_host = 127.0.0.1\nnovncproxy_port = 6080\nnovncproxy_base_url = https://openstack.kalyuzhnyy.ru:6080/vnc_auto.html","type":"unstyled","key":"6lroi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапустите nova-compute, когда закончите","type":"unstyled","key":"3dir0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl restart nova-compute.service","type":"unstyled","key":"30aig"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Обнаружение ячеек и карты найденных хостов.","type":"unstyled","key":"5m08g"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"su -s /bin/bash nova -c \"nova-manage cell_v2 discover_hosts\"","type":"unstyled","key":"7l40h"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Ознакомьтесь с новым списком услуг nova host.","type":"unstyled","key":"mep5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack compute service list\n+--------------------------------------+----------------+-------+----------+---------+-------+----------------------------+\n| ID | Binary | Host | Zone | Status | State | Updated At |\n+--------------------------------------+----------------+-------+----------+---------+-------+----------------------------+\n| 6f75eb27-9c66-41c0-b0fa-15f1a48cb25c | nova-conductor | osp01 | internal | enabled | up | 2024-02-02T07:32:44.000000 |\n| 802d523d-1f92-427b-9f90-691bf54268af | nova-scheduler | osp01 | internal | enabled | up | 2024-02-02T07:32:45.000000 |\n| 83fd3604-7345-4258-a3a2-324900b04b8e | nova-compute | osp01 | nova | enabled | up | 2024-02-02T07:32:43.000000 |\n+--------------------------------------+----------------+-------+----------+---------+-------+----------------------------+","type":"unstyled","key":"dj510"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"6. Настройка сетевого сервиса (нейтрон)","type":"unstyled","key":"7egtr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"OpenStack Networking (нейтрон) обеспечивает интеграцию для создания и подключения к сетям интерфейсных устройств, управляемых другими сервисами OpenStack.","type":"unstyled","key":"bj74g"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Компоненты:","type":"unstyled","key":"16qs5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"neutron-server: Принимает и направляет запросы API к соответствующему подключаемому модулю OpenStack Networking для выполнения действий.\nПодключаемые модули и агенты OpenStack Networking: подключайте и отключайте порты, создавайте сети или подсети, а также предоставляйте IP-адресацию.\nОчередь сообщений: используется большинством установок OpenStack Networking для маршрутизации информации между нейтронным сервером и различными агентами","type":"unstyled","key":"2pddt"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"1) Подготовьте среду","type":"unstyled","key":"fkrtq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание базы данных и пользователя для сетевого сервиса Neutron.","type":"unstyled","key":"1kjql"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# mysql\ncreate database neutron_ml2;\ngrant all privileges on neutron_ml2.* to neutron@'localhost' identified by 'StrongPassw0rd01';\nflush privileges;\nexit","type":"unstyled","key":"86o2t"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Далее мы добавляем пользователя или сервис для Neutron на Keystone.","type":"unstyled","key":"9ape3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack user create --domain default --project service --password StrongPassw0rd01 neutron\n+---------------------+----------------------------------+\n| Field | Value |\n+---------------------+----------------------------------+\n| default_project_id | 1067895d9b99452b8d1758eda755c7bc |\n| domain_id | default |\n| enabled | True |\n| id | 71d4813059f5472f852a946bdaf272f4 |\n| name | neutron |\n| options | {} |\n| password_expires_at | None |\n+---------------------+----------------------------------+","type":"unstyled","key":"nme4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack role add --project service --user neutron admin","type":"unstyled","key":"162bu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack service create --name neutron --description \"OpenStack Networking service\" network\n+-------------+----------------------------------+\n| Field | Value |\n+-------------+----------------------------------+\n| description | OpenStack Networking service |\n| enabled | True |\n| id | 7da12e4154ad4f97b8f449f01d6a56ec |\n| name | neutron |\n| type | network |\n+-------------+----------------------------------+","type":"unstyled","key":"f5ebk"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание конечной точки обязательно.","type":"unstyled","key":"6448t"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Save your server\nexport controller=$(hostname -f)","type":"unstyled","key":"2ieul"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne network public https://$controller:9696\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | 3bc3eb0a234a46b68fa2190095f4cd53 |\n| interface | public |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | 7da12e4154ad4f97b8f449f01d6a56ec |\n| service_name | neutron |\n| service_type | network |\n| url | https://openstack.kalyuzhnyy.ru:9696 |\n+--------------+----------------------------------------+","type":"unstyled","key":"86qvp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne network internal https://$controller:9696\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | 2bc933e3f8fc4238874adc2cf0b764f9 |\n| interface | internal |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | 7da12e4154ad4f97b8f449f01d6a56ec |\n| service_name | neutron |\n| service_type | network |\n| url | https://openstack.kalyuzhnyy.ru:9696 |\n+--------------+----------------------------------------+","type":"unstyled","key":"b8rdv"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack endpoint create --region RegionOne network admin https://$controller:9696\n+--------------+----------------------------------------+\n| Field | Value |\n+--------------+----------------------------------------+\n| enabled | True |\n| id | fa110991eab34d4e9e1c639865ce2b14 |\n| interface | admin |\n| region | RegionOne |\n| region_id | RegionOne |\n| service_id | 7da12e4154ad4f97b8f449f01d6a56ec |\n| service_name | neutron |\n| service_type | network |\n| url | https://openstack.kalyuzhnyy.ru:9696 |\n+--------------+----------------------------------------+","type":"unstyled","key":"2gk7r"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"2) Установка и настройка Neutron","type":"unstyled","key":"duvim"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установка пакетов Neutron для OpenStack","type":"unstyled","key":"8nmkl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install neutron-server neutron-metadata-agent neutron-openvswitch-agent neutron-plugin-ml2 neutron-l3-agent neutron-metadata-agent openvswitch-switch python3-neutronclient neutron-dhcp-agent","type":"unstyled","key":"3sdrj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Резервное копирование текущего файла конфигурации.","type":"unstyled","key":"a3jtt"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"mv /etc/neutron/neutron.conf /etc/neutron/neutron.conf.orig","type":"unstyled","key":"9j60b"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание нового файла конфигурации","type":"unstyled","key":"fs2ug"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/neutron/neutron.conf","type":"unstyled","key":"cresp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Измените во время вставки предоставленное здесь содержимое.","type":"unstyled","key":"329sa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[DEFAULT]\nbind_host = 127.0.0.1\nbind_port = 9696\ncore_plugin = ml2\nservice_plugins = router\nauth_strategy = keystone\nstate_path = /var/lib/neutron\ndhcp_agent_notification = True\nallow_overlapping_ips = True\nnotify_nova_on_port_status_changes = True\nnotify_nova_on_port_data_changes = True","type":"unstyled","key":"2k3ce"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# RabbitMQ connection info\ntransport_url = rabbit://openstack:StrongPassw0rd01@localhost","type":"unstyled","key":"3u1vv"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[agent]\nroot_helper = sudo /usr/bin/neutron-rootwrap /etc/neutron/rootwrap.conf","type":"unstyled","key":"4tvui"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Keystone auth info\n[keystone_authtoken]\nwww_authenticate_uri = https://openstack.kalyuzhnyy.ru:5000\nauth_url = https://openstack.kalyuzhnyy.ru:5000\nmemcached_servers = localhost:11211\nauth_type = password\nproject_domain_name = default\nuser_domain_name = default\nproject_name = service\nusername = neutron\npassword = StrongPassw0rd01\n# if using self-signed certs on Apache2 Keystone, turn to [true]\ninsecure = false","type":"unstyled","key":"c6c1k"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# MariaDB connection info\n[database]\nconnection = mysql+pymysql://neutron:StrongPassw0rd01@localhost/neutron_ml2","type":"unstyled","key":"fvkob"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Nova auth info\n[nova]\nauth_url = https://openstack.kalyuzhnyy.ru:5000\nauth_type = password\nproject_domain_name = default\nuser_domain_name = default\nregion_name = RegionOne\nproject_name = service\nusername = nova\npassword = StrongPassw0rd01\n# if using self-signed certs on Apache2 Keystone, turn to [true]\ninsecure = false","type":"unstyled","key":"dffkn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[oslo_concurrency]\nlock_path = $state_path/tmp","type":"unstyled","key":"81ake"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[oslo_policy]\nenforce_new_defaults = true","type":"unstyled","key":"f51j"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Отредактируйте конфигурацию агента метаданных и установите хост, общий секрет прокси и адрес хоста memcache.","type":"unstyled","key":"1cu9e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/neutron/metadata_agent.ini\nnova_metadata_host = openstack.kalyuzhnyy.ru\nnova_metadata_protocol = https\n# specify any secret key you like\nmetadata_proxy_shared_secret = metadata_secret\n# specify Memcache server\nmemcache_servers = localhost:11211","type":"unstyled","key":"4pn7q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Сделайте резервную копию конфигурации ml2 и создайте новый.","type":"unstyled","key":"50lfo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"mv /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugins/ml2/ml2_conf.ini.orig\nvim /etc/neutron/plugins/ml2/ml2_conf.ini","type":"unstyled","key":"8jgi4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Обновите новые настройки, как показано ниже.","type":"unstyled","key":"e31ri"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[DEFAULT]","type":"unstyled","key":"dmcd"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[ml2]\ntype_drivers = flat,vlan,vxlan\ntenant_network_types =\nmechanism_drivers = openvswitch\nextension_drivers = port_security","type":"unstyled","key":"3iv6u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[ml2_type_flat]","type":"unstyled","key":"9ccq7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[ml2_type_vxlan]","type":"unstyled","key":"fd3bf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[securitygroup]\nenable_security_group = True\nenable_ipset = True","type":"unstyled","key":"d50ft"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Настройте агент уровня 3, установив драйвер интерфейса в openvswitch.","type":"unstyled","key":"7t6r6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/neutron/l3_agent.ini\ninterface_driver = openvswitch","type":"unstyled","key":"bhio2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Также драйвер интерфейса DHCP для openvswitch и включения dnsmasq dhcp драйвера.","type":"unstyled","key":"f2u8q"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/neutron/dhcp_agent.ini\n# Confirm in line 18\ninterface_driver = openvswitch","type":"unstyled","key":"681os"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# uncomment line 37\ndhcp_driver = neutron.agent.linux.dhcp.Dnsmasq","type":"unstyled","key":"ajlb3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте новый файл конфигурации агента Open vSwitch.","type":"unstyled","key":"bdhls"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"mv /etc/neutron/plugins/ml2/openvswitch_agent.ini /etc/neutron/plugins/ml2/openvswitch_agent.ini.orig\nvim /etc/neutron/plugins/ml2/openvswitch_agent.ini","type":"unstyled","key":"2dnbp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Настройте следующим образом:","type":"unstyled","key":"ghk3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[DEFAULT]","type":"unstyled","key":"5966t"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[agent]","type":"unstyled","key":"d394u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[ovs]","type":"unstyled","key":"eulsa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"[securitygroup]\nfirewall_driver = openvswitch\nenable_security_group = True\nenable_ipset = True","type":"unstyled","key":"3vj1l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание необходимых файлов и установка правильных прав доступа","type":"unstyled","key":"an3qa"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"touch /etc/neutron/fwaas_driver.ini\nchmod 640 /etc/neutron/{neutron.conf,fwaas_driver.ini}\nchmod 640 /etc/neutron/plugins/ml2/{ml2_conf.ini,openvswitch_agent.ini}\nchgrp neutron /etc/neutron/{neutron.conf,fwaas_driver.ini}\nchgrp neutron /etc/neutron/plugins/ml2/{ml2_conf.ini,openvswitch_agent.ini}","type":"unstyled","key":"4uqn1"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Откройте конфигурацию Nova и добавьте настройки нейтронной сети.","type":"unstyled","key":"a2fhi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/nova/nova.conf\n# add follows into the [DEFAULT] section\nvif_plugging_is_fatal = True\nvif_plugging_timeout = 300","type":"unstyled","key":"3pvps"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Add the following to the end : Neutron auth info\n# the value of [metadata_proxy_shared_secret] is the same with the one in [metadata_agent.ini]\n[neutron]\nauth_url = https://openstack.kalyuzhnyy.ru:5000\nauth_type = password\nproject_domain_name = default\nuser_domain_name = default\nregion_name = RegionOne\nproject_name = service\nusername = neutron\npassword = StrongPassw0rd01\nservice_metadata_proxy = True\nmetadata_proxy_shared_secret = metadata_secret\ninsecure = false","type":"unstyled","key":"eonap"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Обновите адрес привязки UWSGI_BIND_IP.","type":"unstyled","key":"5k4tn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"sed -i -e \"s/UWSGI_BIND_IP=.*/UWSGI_BIND_IP=\\\"127.0.0.1\\\"/\" /etc/init.d/neutron-api","type":"unstyled","key":"8ln15"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Обновление потоков nginx","type":"unstyled","key":"c2n6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/nginx/nginx.conf","type":"unstyled","key":"18k18"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте нейтронные восходящие и серверные параметры для проксирования.","type":"unstyled","key":"2ks3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"stream {\nupstream glance-api {\nserver 127.0.0.1:9292;\n}\nserver {\nlisten 192.168.1.2:9292 ssl;\nproxy_pass glance-api;\n}\nupstream nova-api {\nserver 127.0.0.1:8774;\n}\nserver {\nlisten 192.168.1.2:8774 ssl;\nproxy_pass nova-api;\n}\nupstream nova-metadata-api {\nserver 127.0.0.1:8775;\n}\nserver {\nlisten 192.168.1.2:8775 ssl;\nproxy_pass nova-metadata-api;\n}\nupstream placement-api {\nserver 127.0.0.1:8778;\n}\nserver {\nlisten 192.168.1.2:8778 ssl;\nproxy_pass placement-api;\n}\nupstream novncproxy {\nserver 127.0.0.1:6080;\n}\nserver {\nlisten 192.168.1.2:6080 ssl;\nproxy_pass novncproxy;\n}\nupstream neutron-api {\nserver 127.0.0.1:9696;\n}\nserver {\nlisten 192.168.1.2:9696 ssl;\nproxy_pass neutron-api;\n}\nssl_certificate \"/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/fullchain.pem\";\nssl_certificate_key \"/etc/letsencrypt/live/openstack.kalyuzhnyy.ru/privkey.pem\";\n}","type":"unstyled","key":"bk943"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создать символическую ссылку для ml2_conf.ini","type":"unstyled","key":"sk0e"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"ln -s /etc/neutron/plugins/ml2/ml2_conf.ini /etc/neutron/plugin.ini","type":"unstyled","key":"55ke4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Затем заполните базу данных нейтронов","type":"unstyled","key":"8gqg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"su -s /bin/bash neutron -c \"neutron-db-manage --config-file /etc/neutron/neutron.conf --config-file /etc/neutron/plugin.ini upgrade head\"","type":"unstyled","key":"60qtd"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Ожидаемый результат выполнения;","type":"unstyled","key":"b4khg"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"....\nINFO [alembic.runtime.migration] Running upgrade 1e0744e4ffea -> 6135a7bd4425\nINFO [alembic.runtime.migration] Running upgrade 6135a7bd4425 -> 8df53b0d2c0e\nINFO [alembic.runtime.migration] Running upgrade 8df53b0d2c0e -> 1bb3393de75d, add qos policy rule Packet Rate Limit\nINFO [alembic.runtime.migration] Running upgrade 1bb3393de75d -> c181bb1d89e4\nINFO [alembic.runtime.migration] Running upgrade c181bb1d89e4 -> ba859d649675\nINFO [alembic.runtime.migration] Running upgrade ba859d649675 -> e981acd076d3\nINFO [alembic.runtime.migration] Running upgrade e981acd076d3 -> 76df7844a8c6, add Local IP tables\nINFO [alembic.runtime.migration] Running upgrade 76df7844a8c6 -> 1ffef8d6f371, migrate RBAC registers from \"target_tenant\" to \"target_project\"\nINFO [alembic.runtime.migration] Running upgrade 1ffef8d6f371 -> 8160f7a9cebb, drop portbindingports table\nINFO [alembic.runtime.migration] Running upgrade 8160f7a9cebb -> cd9ef14ccf87\nINFO [alembic.runtime.migration] Running upgrade cd9ef14ccf87 -> 34cf8b009713\nINFO [alembic.runtime.migration] Running upgrade 34cf8b009713 -> I43e0b669096\nINFO [alembic.runtime.migration] Running upgrade I43e0b669096 -> 4e6e655746f6\nINFO [alembic.runtime.migration] Running upgrade 4e6e655746f6 -> 659cbedf30a1\nINFO [alembic.runtime.migration] Running upgrade 659cbedf30a1 -> 21ff98fabab1\nINFO [alembic.runtime.migration] Running upgrade 21ff98fabab1 -> 5881373af7f5\nINFO [alembic.runtime.migration] Running upgrade 7d9d8eeec6ad -> a8b517cff8ab\nINFO [alembic.runtime.migration] Running upgrade a8b517cff8ab -> 3b935b28e7a0\nINFO [alembic.runtime.migration] Running upgrade 3b935b28e7a0 -> b12a3ef66e62\nINFO [alembic.runtime.migration] Running upgrade b12a3ef66e62 -> 97c25b0d2353\nINFO [alembic.runtime.migration] Running upgrade 97c25b0d2353 -> 2e0d7a8a1586\nINFO [alembic.runtime.migration] Running upgrade 2e0d7a8a1586 -> 5c85685d616d\nOK\nroot","type":"unstyled","key":"48f8t"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Активируйте интерфейс OVS.","type":"unstyled","key":"8ja8f"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"ip link set up ovs-system","type":"unstyled","key":"9pkr5"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Остановите нейтронное обслуживание.","type":"unstyled","key":"ehc06"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl stop neutron-api neutron-rpc-server neutron-l3-agent neutron-dhcp-agent neutron-metadata-agent neutron-openvswitch-agent nova-api nova-compute nginx","type":"unstyled","key":"2j408"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Запуск нейтронного обслуживания.","type":"unstyled","key":"6j5jl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl start neutron-api neutron-rpc-server neutron-l3-agent neutron-dhcp-agent neutron-metadata-agent neutron-openvswitch-agent nova-api nova-compute nginx","type":"unstyled","key":"c40lu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Включите запуск служб при загрузке системы.","type":"unstyled","key":"vbcj"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl enable neutron-api neutron-rpc-server neutron-l3-agent neutron-dhcp-agent neutron-metadata-agent neutron-openvswitch-agent","type":"unstyled","key":"ehh1l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Подтвердите список сетевых агентов.","type":"unstyled","key":"f5v6p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack network agent list\n+--------------------------------------+--------------------+-------+-------------------+-------+-------+---------------------------+\n| ID | Agent Type | Host | Availability Zone | Alive | State | Binary |\n+--------------------------------------+--------------------+-------+-------------------+-------+-------+---------------------------+\n| 2c802774-b93a-45fb-b23b-aa9994237e23 | Metadata agent | osp01 | None | :-) | UP | neutron-metadata-agent |\n| 52e59a27-59c3-45a3-bca0-1c55dae3281e | L3 agent | osp01 | nova | :-) | UP | neutron-l3-agent |\n| 96e812a7-fb0f-4099-a989-1b203843d8c8 | Open vSwitch agent | osp01 | None | :-) | UP | neutron-openvswitch-agent |\n| e02cf121-ed3e-4a5e-9cf8-87dc28aa28be | DHCP agent | osp01 | nova | :-) | UP | neutron-dhcp-agent |\n+--------------------------------------+--------------------+-------+-------------------+-------+-------+---------------------------+","type":"unstyled","key":"5cvls"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"3) Настройка сети Neutron Flat","type":"unstyled","key":"2ig8p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Подтвердите активацию интерфейсов на сервере.","type":"unstyled","key":"2o306"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"$ ip link show\n1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\nlink/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00\n2: eno1: mtu 1500 qdisc fq_codel state UP mode DEFAULT group default qlen 1000\nlink/ether 1c:69:7a:ab:be:de brd ff:ff:ff:ff:ff:ff\naltname enp0s31f6\n3: ovs-system: mtu 1500 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000\nlink/ether 7e:b9:25:db:58:bd brd ff:ff:ff:ff:ff:ff\n4: br-int: mtu 1500 qdisc noop state DOWN mode DEFAULT group default qlen 1000\nlink/ether 9e:91:4a:20:26:4f brd ff:ff:ff:ff:ff:ff","type":"unstyled","key":"c18q9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Откройте файл настроек сети и настройте их так, чтобы они выглядели так, как показано ниже.","type":"unstyled","key":"1deeh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/network/interfaces\nauto eno1\niface eno1 inet manual","type":"unstyled","key":"4m3ra"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"auto br-eno1\niface br-eno1 inet static\naddress 192.168.1.2\nnetmask 255.255.255.0\ngateway 192.168.1.1\ndns-nameservers 192.168.1.1","type":"unstyled","key":"2te45"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"auto ovs-system\niface ovs-system inet manual","type":"unstyled","key":"45nkb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Заменять","type":"unstyled","key":"70uch"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"eno1 с именем вашего физического сетевого интерфейса\nbr–eno1 с мостом, который будет добавлен.\n192.168.1.2 с IP-адресом вашей машины и 255.255.255.0 в качестве сетевой маски\n192.168.1.1 также является шлюзом и DNS-сервером по адресу 192.168.1.1.","type":"unstyled","key":"c4hqo"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Введите имя интерфейса и имя моста в качестве переменных.","type":"unstyled","key":"fvcnu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"INT_NAME=eno1\nBR_NAME=br-eno1","type":"unstyled","key":"3f6ot"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте в систему мост OVS.","type":"unstyled","key":"ai693"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"ovs-vsctl add-br $BR_NAME\nip link set $INT_NAME up\nip link set $BR_NAME up","type":"unstyled","key":"bt7kl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавление порта на мост","type":"unstyled","key":"67q9h"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"ovs-vsctl add-port $BR_NAME $INT_NAME","type":"unstyled","key":"71r33"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Модифицировать openvswitch_agent.ini и делать физические сопоставления мостов.","type":"unstyled","key":"a8vk3"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/neutron/plugins/ml2/openvswitch_agent.ini\n# add a line undet [ovs] section\n[ovs]\nbridge_mappings = physnet1:br-eno1","type":"unstyled","key":"2lrs"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Поскольку мы используем плоскую сеть, укажите сеть как отображенную на мост выше.","type":"unstyled","key":"cqass"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/neutron/plugins/ml2/ml2_conf.ini\n[ml2_type_flat]\nflat_networks = physnet1","type":"unstyled","key":"50bqi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапуск нейтронного обслуживания.","type":"unstyled","key":"fbv76"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"systemctl restart neutron-api neutron-rpc-server neutron-openvswitch-agent","type":"unstyled","key":"5acf9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"4) Создание виртуальной сети","type":"unstyled","key":"4871r"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Определение идентификатора проекта","type":"unstyled","key":"ad594"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"projectID=$(openstack project list | grep service | awk '{print $2}')","type":"unstyled","key":"8umob"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание общей сети","type":"unstyled","key":"fk4ip"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack network create --project $projectID \\\n--share --provider-network-type flat --provider-physical-network physnet1 private\n+---------------------------+--------------------------------------+\n| Field | Value |\n+---------------------------+--------------------------------------+\n| admin_state_up | UP |\n| availability_zone_hints | |\n| availability_zones | |\n| created_at | 2024-02-02T08:45:27Z |\n| description | |\n| dns_domain | None |\n| id | 36577b59-f6e1-4844-a0d8-a277c9ddc780 |\n| ipv4_address_scope | None |\n| ipv6_address_scope | None |\n| is_default | False |\n| is_vlan_transparent | None |\n| mtu | 1500 |\n| name | private |\n| port_security_enabled | True |\n| project_id | 1067895d9b99452b8d1758eda755c7bc |\n| provider:network_type | flat |\n| provider:physical_network | physnet1 |\n| provider:segmentation_id | None |\n| qos_policy_id | None |\n| revision_number | 1 |\n| router:external | Internal |\n| segments | None |\n| shared | True |\n| status | ACTIVE |\n| subnets | |\n| tags | |\n| updated_at | 2024-02-02T08:45:27Z |\n+---------------------------+--------------------------------------+","type":"unstyled","key":"a2859"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создаем подсеть в сети, которую мы только что создали. Здесь мы используем;","type":"unstyled","key":"4uq0i"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Сеть: 192.168.1.0/24\nНачало работы DHCP: 192.168.1.101\nКонец DHCP: 192.168.1.149\nШлюз и DNS-сервер: 192.168.1.1","type":"unstyled","key":"8tudh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack subnet create subnet1 --network private \\\n--project $projectID --subnet-range 192.168.1.0/24 \\\n--allocation-pool start=192.168.1.101,end=192.168.1.149 \\\n--gateway 192.168.1.1 --dns-nameserver 192.168.1.1","type":"unstyled","key":"bbivm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Вывод списка сетей и подсетей, созданных на openstack.","type":"unstyled","key":"8nmt0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack network list\n+--------------------------------------+---------+--------------------------------------+\n| ID | Name | Subnets |\n+--------------------------------------+---------+--------------------------------------+\n| 36577b59-f6e1-4844-a0d8-a277c9ddc780 | private | 6f216cd7-acd3-4c31-bc5e-67875c5dcc09 |\n+--------------------------------------+---------+--------------------------------------+","type":"unstyled","key":"6bg0s"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack subnet list\n+--------------------------------------+---------+--------------------------------------+----------------+\n| ID | Name | Network | Subnet |\n+--------------------------------------+---------+--------------------------------------+----------------+\n| 6f216cd7-acd3-4c31-bc5e-67875c5dcc09 | subnet1 | 36577b59-f6e1-4844-a0d8-a277c9ddc780 | 192.168.1.0/24 |\n+--------------------------------------+---------+--------------------------------------+----------------+","type":"unstyled","key":"8g376"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"7. Добавьте Compute Flavors и ключ SSH","type":"unstyled","key":"68icf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"В OpenStack разновидности используются для определения вычислительной мощности, памяти и емкости хранилища вычислительных экземпляров nova. Тонкая его конфигурация оборудования для сервера.","type":"unstyled","key":"9s60j"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Образцы;","type":"unstyled","key":"7d16l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"m1.tiny Flavor с: процессором 1, памятью 2048M, корневым диском 20G\nm1.small Flavor с: процессором 2, памятью 4096, корневым диском 30 ГБ\nm1.medium Flavor с: процессором 2, памятью 8192, корневым диском 40 ГБ","type":"unstyled","key":"cr2m4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Ниже приведен пример создания ароматизаторов.","type":"unstyled","key":"4hn1p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack flavor create --id 1 --vcpus 1 --ram 2048 --disk 20 m1.tiny\nopenstack flavor create --id 2 --vcpus 1 --ram 4096 --disk 30 m1.small\nopenstack flavor create --id 3 --vcpus 1 --ram 8192 --disk 40 m1.medium","type":"unstyled","key":"80vad"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перечислите доступные разновидности в облаке OpenStack.","type":"unstyled","key":"7op3f"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"root@osp01 ~(keystone)$ openstack flavor list\n+----+-----------+------+------+-----------+-------+-----------+\n| ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public |\n+----+-----------+------+------+-----------+-------+-----------+\n| 1 | m1.tiny | 2048 | 20 | 0 | 1 | True |\n| 2 | m1.small | 4096 | 30 | 0 | 1 | True |\n| 3 | m1.medium | 8192 | 40 | 0 | 1 | True |\n+----+-----------+------+------+-----------+-------+-----------+","type":"unstyled","key":"3cb7c"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавление ключа SSH","type":"unstyled","key":"6n2s8"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Вы можете сгенерировать пару ключей SSH, если она не существует.","type":"unstyled","key":"clt13"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"ssh-keygen -q -N \"\"","type":"unstyled","key":"8u9lt"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте созданный ключ, присвоив ему имя.","type":"unstyled","key":"o30m"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack keypair create --public-key ~/.ssh/id_rsa.pub default-pubkey\n+-------------+-------------------------------------------------+\n| Field | Value |\n+-------------+-------------------------------------------------+\n| created_at | None |\n| fingerprint | 19:7b:5c:14:a2:21:7a:a3:dd:56:c6:e4:3a:22:e8:3f |\n| id | default-pubkey |\n| is_deleted | None |\n| name | default-pubkey |\n| type | ssh |\n| user_id | 61800deb7d664bbcb4f3eef188cc8dbc |\n+-------------+-------------------------------------------------+","type":"unstyled","key":"dva31"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack keypair list\n+----------------+-------------------------------------------------+------+\n| Name | Fingerprint | Type |\n+----------------+-------------------------------------------------+------+\n| default-pubkey | 19:7b:5c:14:a2:21:7a:a3:dd:56:c6:e4:3a:22:e8:3f | ssh |\n| jmutai-pubkey | 19:7b:5c:14:a2:21:7a:a3:dd:56:c6:e4:3a:22:e8:3f | ssh |\n+----------------+-------------------------------------------------+------+","type":"unstyled","key":"ccd67"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"8. Создание групп безопасности","type":"unstyled","key":"ditlb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Группа безопасности — это именованная коллекция правил доступа к сети, которые используются для ограничения типов трафика, имеющих доступ к экземплярам. При запуске экземпляра вы можете назначить ему одну или несколько групп безопасности. Если группы безопасности не создаются, новые экземпляры автоматически назначаются группе безопасности по умолчанию, если явно не указана другая группа безопасности.","type":"unstyled","key":"3ldqc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Группа безопасности по умолчанию называется default.","type":"unstyled","key":"ftqkh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack security group list\n+--------------------------------------+---------+------------------------+----------------------------------+------+\n| ID | Name | Description | Project | Tags |\n+--------------------------------------+---------+------------------------+----------------------------------+------+\n| c1ab8c8f-bd2e-43ab-8f6f-54a045885411 | default | Default security group | 9a102dfdf9a54e8382fefdca727b2553 | [] |\n+--------------------------------------+---------+------------------------+----------------------------------+------+","type":"unstyled","key":"7esm4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack security group rule list default\n+--------------------------------------+-------------+-----------+-----------+------------+-----------+--------------------------------------+----------------------+\n| ID | IP Protocol | Ethertype | IP Range | Port Range | Direction | Remote Security Group | Remote Address Group |\n+--------------------------------------+-------------+-----------+-----------+------------+-----------+--------------------------------------+----------------------+\n| 2a4aa470-935a-474a-a8bd-06623218a287 | None | IPv4 | 0.0.0.0/0 | | egress | None | None |\n| 6cf36173-e187-4ed2-82f4-f5ead4ad3134 | None | IPv6 | ::/0 | | egress | None | None |\n| 7d4af0e4-fb46-40b5-b447-8e7d22cbdb4d | None | IPv4 | 0.0.0.0/0 | | ingress | c1ab8c8f-bd2e-43ab-8f6f-54a045885411 | None |\n| a98b779a-f63a-44ff-834e-c3a557f2864d | None | IPv6 | ::/0 | | ingress | c1ab8c8f-bd2e-43ab-8f6f-54a045885411 | None |\n+--------------------------------------+-------------+-----------+-----------+------------+-----------+--------------------------------------+----------------------+","type":"unstyled","key":"c6v1b"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Давайте создадим группу безопасности, которая разрешает все входить и выходить.","type":"unstyled","key":"6pbnu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack security group create allow_all --description \"Allow all ports\"\nopenstack security group rule create --protocol TCP --dst-port 1:65535 --remote-ip 0.0.0.0/0 allow_all\nopenstack security group rule create --protocol ICMP --remote-ip 0.0.0.0/0 allow_all","type":"unstyled","key":"ditar"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перечислите группы безопасности, чтобы подтвердить, что он был создан.","type":"unstyled","key":"7fjtq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack security group list\n+--------------------------------------+-----------+------------------------+----------------------------------+------+\n| ID | Name | Description | Project | Tags |\n+--------------------------------------+-----------+------------------------+----------------------------------+------+\n| 287e76b4-337a-4c08-9e3d-84efd9274edb | allow_all | Allow all ports | 9a102dfdf9a54e8382fefdca727b2553 | [] |\n| c1ab8c8f-bd2e-43ab-8f6f-54a045885411 | default | Default security group | 9a102dfdf9a54e8382fefdca727b2553 | [] |\n+--------------------------------------+-----------+------------------------+----------------------------------+------+","type":"unstyled","key":"agh0u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Ниже представлена группа безопасности с ограниченным доступом. Разрешение доступа только к известным портам, например, 22, 80, 443, icmp","type":"unstyled","key":"2lffb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack security group create base --description \"Allow common ports\"\nopenstack security group rule create --protocol TCP --dst-port 22 --remote-ip 0.0.0.0/0 base\nopenstack security group rule create --protocol TCP --dst-port 80 --remote-ip 0.0.0.0/0 base\nopenstack security group rule create --protocol TCP --dst-port 443 --remote-ip 0.0.0.0/0 base\nopenstack security group rule create --protocol ICMP --remote-ip 0.0.0.0/0 base","type":"unstyled","key":"auaji"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"9. Добавьте образы ОС и создайте тестовую виртуальную машину","type":"unstyled","key":"fq1e6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"У нас есть отдельная статья о том, как загрузить облачные образы ОС в сервис изображений OpenStack Glance.","type":"unstyled","key":"cmegi"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Как загрузить образы облака виртуальных машин в OpenStack Glance","type":"unstyled","key":"43ai7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Подтвердите после загрузки, перечислив доступные изображения.","type":"unstyled","key":"cto91"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack image list\n+--------------------------------------+-----------------+--------+\n| ID | Name | Status |\n+--------------------------------------+-----------------+--------+\n| 37c638d5-caa0-4570-a126-2c9d64b262b4 | AlmaLinux-9 | active |\n| 3ae8095e-a774-468b-8376-c3d1b8a70bdf | CentOS-Stream-9 | active |\n| 83bf7ac6-9248-415b-ac89-269f2b70fdb4 | Debian-12 | active |\n| 02799133-06ed-483d-9121-e3791c12bb1c | Fedora-39 | active |\n+--------------------------------------+-----------------+--------+","type":"unstyled","key":"499tu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Подтвердите вкусы","type":"unstyled","key":"3hk00"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack flavor list\n+----+-----------+------+------+-----------+-------+-----------+\n| ID | Name | RAM | Disk | Ephemeral | VCPUs | Is Public |\n+----+-----------+------+------+-----------+-------+-----------+\n| 1 | m1.tiny | 2048 | 20 | 0 | 1 | True |\n| 2 | m1.small | 4096 | 30 | 0 | 1 | True |\n| 3 | m1.medium | 8192 | 40 | 0 | 1 | True |\n+----+-----------+------+------+-----------+-------+-----------+","type":"unstyled","key":"dp3d6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Список сетей","type":"unstyled","key":"7kekp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack network list\n+--------------------------------------+---------+--------------------------------------+\n| ID | Name | Subnets |\n+--------------------------------------+---------+--------------------------------------+\n| 36577b59-f6e1-4844-a0d8-a277c9ddc780 | private | 6f216cd7-acd3-4c31-bc5e-67875c5dcc09 |\n+--------------------------------------+---------+--------------------------------------+","type":"unstyled","key":"5frb0"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Подтвердите настроенные группы безопасности.","type":"unstyled","key":"ajpm2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack security group list\n+--------------------------------------+-----------+------------------------+----------------------------------+------+\n| ID | Name | Description | Project | Tags |\n+--------------------------------------+-----------+------------------------+----------------------------------+------+\n| 287e76b4-337a-4c08-9e3d-84efd9274edb | allow_all | Allow all ports | 9a102dfdf9a54e8382fefdca727b2553 | [] |\n| c1ab8c8f-bd2e-43ab-8f6f-54a045885411 | default | Default security group | 9a102dfdf9a54e8382fefdca727b2553 | [] |\n+--------------------------------------+-----------+------------------------+----------------------------------+------+","type":"unstyled","key":"5l86u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перечислите настроенные пары ключей на вашем OpenStack.","type":"unstyled","key":"69nv6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# openstack keypair list\n+----------------+-------------------------------------------------+------+\n| Name | Fingerprint | Type |\n+----------------+-------------------------------------------------+------+\n| default-pubkey | 19:7b:5c:14:a2:21:7a:a3:dd:56:c6:e4:3a:22:e8:3f | ssh |\n| jmutai-pubkey | 19:7b:5c:14:a2:21:7a:a3:dd:56:c6:e4:3a:22:e8:3f | ssh |\n+----------------+-------------------------------------------------+------+","type":"unstyled","key":"8unn9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создание экземпляра виртуальной машины в вычислительной среде Nova","type":"unstyled","key":"6v6d6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"openstack server create --flavor m1.small \\\n--image AlmaLinux-9 \\\n--security-group allow_all \\\n--network private \\\n--key-name default-pubkey \\\nAlmaLinux-9","type":"unstyled","key":"fu9j4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"10. Настройка Horizon — панель управления OpenStack","type":"unstyled","key":"18sba"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Horizon — это проект на основе Django, направленный на предоставление полной панели управления OpenStack вместе с расширяемой средой для создания новых панелей мониторинга из повторно используемых компонентов. Единственной основной службой, необходимой для работы панели управления, является служба идентификации.","type":"unstyled","key":"416oq"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Установите пакет openstack для панели управления.","type":"unstyled","key":"6anjh"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"apt install openstack-dashboard -y","type":"unstyled","key":"ac23c"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Открытый local_settings.py файл для редактирования.","type":"unstyled","key":"52aba"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/openstack-dashboard/local_settings.py","type":"unstyled","key":"v9dl"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# In line 99 : change Memcache server\nCACHES = {\n'default': {\n'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',\n'LOCATION': '127.0.0.1:11211',\n},\n}","type":"unstyled","key":"d5tv2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# In line 107 : add\nSESSION_ENGINE = \"django.contrib.sessions.backends.cache\"\n# line 120 : set Openstack Host\n# line 121 : comment out and add a line to specify URL of Keystone Host\nOPENSTACK_HOST = \"openstack.kalyuzhnyy.ru\"\n#OPENSTACK_KEYSTONE_URL = \"http://%s/identity/v3\" % OPENSTACK_HOST\nOPENSTACK_KEYSTONE_URL = \"https://openstack.kalyuzhnyy.ru:5000/v3\"\n# line 125 : set your timezone\nTIME_ZONE = \"Africa/Nairobi\"","type":"unstyled","key":"87hn6"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# Add to the end of file\nOPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True\nOPENSTACK_KEYSTONE_DEFAULT_DOMAIN = 'Default'","type":"unstyled","key":"47ks4"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# set [True] below if you are using self signed certificate\nOPENSTACK_SSL_NO_VERIFY = False","type":"unstyled","key":"41ueu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Также отредактируйте стандартный ssl-файл Apache.","type":"unstyled","key":"2ll1o"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/apache2/sites-available/default-ssl.conf\n# In line 31,32, configure path to your SSL certificate and key\nSSLCertificateFile /etc/letsencrypt/live/openstack.kalyuzhnyy.ru/cert.pem\nSSLCertificateKeyFile /etc/letsencrypt/live/openstack.kalyuzhnyy.ru/privkey.pem","type":"unstyled","key":"cffsp"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# In line 41 : uncomment and specify your chain file\nSSLCertificateChainFile /etc/letsencrypt/live/openstack.kalyuzhnyy.ru/chain.pem","type":"unstyled","key":"bbr9n"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"r\n# change to your Memcache server","type":"unstyled","key":"7mvge"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Укажите адрес Memcache","type":"unstyled","key":"1ra63"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"# vim /etc/openstack-dashboard/local_settings.d/_0006_debian_cache.py\nCACHES = {\n'default' : {\n#'BACKEND': 'django.core.cache.backends.locmem.LocMemCache'\n'BACKEND': 'django.core.cache.backends.memcached.MemcachedCache',\n'LOCATION': '127.0.0.1:11211',\n}\n}","type":"unstyled","key":"97f7"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Создайте новый конфигурационный файл Apache для панели управления OpenStack.","type":"unstyled","key":"4scuc"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"vim /etc/apache2/conf-available/openstack-dashboard.conf","type":"unstyled","key":"ban9u"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Добавьте содержимое ниже.","type":"unstyled","key":"aivca"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"WSGIScriptAlias / /usr/share/openstack-dashboard/wsgi.py process-group=horizon\nWSGIDaemonProcess horizon user=horizon group=horizon processes=3 threads=10 display-name=%{GROUP}\nWSGIProcessGroup horizon\nWSGIApplicationGroup %{GLOBAL}","type":"unstyled","key":"85iqm"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Alias /static /var/lib/openstack-dashboard/static/\nAlias /horizon/static /var/lib/openstack-dashboard/static/","type":"unstyled","key":"b0rn2"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\nRequire all granted\n","type":"unstyled","key":"bpv5l"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"\nRequire all granted\n","type":"unstyled","key":"e3hen"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Включение сайтов","type":"unstyled","key":"1sinb"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"a2enconf openstack-dashboard\na2enmod ssl\na2ensite default-ssl","type":"unstyled","key":"9ee4p"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Скопируйте файл политики.","type":"unstyled","key":"6i6hr"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"mv /etc/openstack-dashboard/policy /etc/openstack-dashboard/policy.org","type":"unstyled","key":"83cc9"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Перезапустите веб-сервер Apache.","type":"unstyled","key":"3i8tu"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"chown -R horizon /var/lib/openstack-dashboard/secret-key\nsystemctl restart apache2","type":"unstyled","key":"2aobf"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Теперь вы можете получить доступ к панели управления Horizon по адресу https://(имя хоста сервера)/\nopenstack dashboard","type":"unstyled","key":"5jplc"},{"data":{"image":{"id":"670cb9d2333b63768077be15"}},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"atomic:image","key":"9hrvn"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"Войдите в систему с помощью пользователя в Keystone и соответствующего пароля.","type":"unstyled","key":"e9c3m"},{"data":{},"depth":0,"entityRanges":[],"inlineStyleRanges":[],"text":"","type":"marker","key":"Yh0jpNfaDfKhUNOJSDIP"}],"entityMap":{}},"mentions":[]}