openstackiaas試題2020****年全國(guó)職業(yè)院校技能?賽改?試點(diǎn)賽?職組“云計(jì)算”競(jìng)賽賽卷第?場(chǎng)次題?：OpenStack平臺(tái)部署與運(yùn)維某企業(yè)擬使?OpenStack搭建?個(gè)企業(yè)云平臺(tái)，以實(shí)現(xiàn)資源池化彈性管理、企業(yè)應(yīng)?集中管理、統(tǒng)?安全認(rèn)證和授權(quán)等管理。系統(tǒng)架構(gòu)如圖1所?，IP地址規(guī)劃如表1所?。表1IP地址規(guī)劃設(shè)備名稱主機(jī)名接?IP地址說(shuō)明云服務(wù)器1Controllereth0192.168.x.10/24Vlan10eth1192.168.y.10/24Vlan20云服務(wù)器2Computeeth0192.168.x.20/24Vlan10eth1192.168.y.20/24Vlan20PC-1本地連接172.24.z.2/24Vlan1交換機(jī)Vlan1172.24.z.1/24PC機(jī)使?Vlan10192.168.x.1/24服務(wù)器使?說(shuō)明：Vlan20192.168.y.1/24虛擬機(jī)使?1．表中的x，y為vlan號(hào)，每?有兩個(gè)vlan號(hào)；z為?位號(hào)；3．考試所需要的資源包與附件均在考位信息表中給出；4．競(jìng)賽過(guò)程中，為確保服務(wù)器的安全，請(qǐng)??修改服務(wù)器密碼；在考試系統(tǒng)提交信息時(shí)，請(qǐng)確認(rèn)??的IP地址，?戶名和密碼。任務(wù)1基礎(chǔ)運(yùn)維任務(wù)（5分）1．根據(jù)表1中的IP地址規(guī)劃，設(shè)置各服務(wù)器節(jié)點(diǎn)的IP地址，確保?絡(luò)正常通信，設(shè)置云服務(wù)器1主機(jī)名為Controller，云服務(wù)器2主機(jī)名為Compute，并修改hosts?件將IP地址映射為主機(jī)名，關(guān)閉防?墻并設(shè)置為開(kāi)機(jī)不啟動(dòng)，設(shè)置SELinux為Permissive模式。2．將提供的CentOS-7-x86_64-DVD-1804.iso和chinaskill_cloud_iaas.iso光盤(pán)鏡像上傳到Controller節(jié)點(diǎn)/root?錄下，然后在/opt?錄下分別創(chuàng)建centos?錄和openstack?錄，并將鏡像?件CentOS-7-x86_64-DVD-1804.iso掛載到centos?錄下，將鏡像?件chinaskill_cloud_iaas.iso掛載到openstack?錄下。3．在Controller節(jié)點(diǎn)上利?centos?錄中的軟件包安裝vsftp服務(wù)器，設(shè)置開(kāi)機(jī)?啟動(dòng)，并使?ftp提供yum倉(cāng)庫(kù)服務(wù)，分別設(shè)置controller節(jié)點(diǎn)和compute節(jié)點(diǎn)的yum源?件ftp.repo，其中ftp服務(wù)器地址使?IP形式。4．在Controller節(jié)點(diǎn)上部署chrony服務(wù)器，允許其他節(jié)點(diǎn)同步時(shí)間，啟動(dòng)服務(wù)并設(shè)置為開(kāi)機(jī)啟動(dòng)；在compute節(jié)點(diǎn)上指定controller節(jié)點(diǎn)為上游NTP服務(wù)器，重啟服務(wù)并設(shè)為開(kāi)機(jī)啟動(dòng)。5．在compute節(jié)點(diǎn)上利?空?分區(qū)劃分2個(gè)100G分區(qū)。任務(wù)2OpenStack搭建任務(wù)（10分）1．在控制節(jié)點(diǎn)和計(jì)算節(jié)點(diǎn)上分別安裝quickinstall軟件包，根據(jù)表2配置腳本?件中基本變量（配置腳本?件為/etc/cloudconfig/openrc.sh）。表2云平臺(tái)配置信息服務(wù)名稱變量參數(shù)/密碼Mysqlroot000000Keystone000000Glance000000Nova000000Neutron000000Heat000000Zun000000KeystoneDOMAIN_NAMEdemoAdmin000000Rabbit000000Glance000000Nova000000Neutron000000Heat000000Zun000000NeutronMetadata000000ExternalNetworkenp9s0（外?卡名）1[root@controller~]#sh/usr/local/bin/openstack-install-mysql.sh1[root@controller~]#sh/usr/local/bin/openstack-install-mysql.sh在controller節(jié)點(diǎn)上使?/usr/local/bin/openstack-install-keystone.sh腳本安裝Keystone服務(wù)。4．在controller節(jié)點(diǎn)上使?/usr/local/bin/openstack-install-glance.sh腳本安裝glance服務(wù)。在controller節(jié)點(diǎn)和compute節(jié)點(diǎn)上分別使?/usr/local/bin/openstack-install-nova-controller.sh腳本、/usr/local/bin/openstack-install-nova-compute.sh腳本安裝Nova服務(wù)。在controller節(jié)點(diǎn)和compute節(jié)點(diǎn)上分別修改/usr/local/bin/openstack-install-neutron-controller.sh腳本、/usr/local/bin/openstack-install-neutron-compute.sh腳本分別安裝Neutron服務(wù)，?絡(luò)選?vlan模式。7．在controller節(jié)點(diǎn)上使?/usr/local/bin/openstack-install-dashboad.sh腳本安裝dashboad服務(wù)。8．在controller節(jié)點(diǎn)和compute節(jié)點(diǎn)上分別修改/usr/local/bin/openstack-install–cinder-controller.sh腳本、/usr/local/bin/openstack-install-cinder-compute.sh腳本安裝cinder服務(wù)。任務(wù)3OpenStack云平臺(tái)運(yùn)維（10分）1．在openstack私有云平臺(tái)上，基于cirros-0.3.4-x86_64-disk.img鏡像，使?命令創(chuàng)建?個(gè)名為cirros的鏡像。112345678910111213141516171819202122[root@controller~]#source/etc/keystone/admin-openrc.sh[root@controller~]#glanceimage-create--namecirros--disk-formatqcow2--container-formatbare--filecirros-0.3.4-x86_64-disk.img+------------------+--------------------------------------+|Property|Value|+------------------+--------------------------------------+|checksum|443b7623e27ecf03dc9e01ee93f67afe ||container_format|bare||created_at|disk_format|2022-03-04T02:17:25Z|qcow2|||id|min_disk|min_ram|name|owner|protected|size|status|tags|782d2e39-4a1d-4b11-9992-b2989f073cdd||0|0|cirros||||f641f1ab736249c28b4ccd262bbcc5b7||False|12716032|active|[]|||||updated_at |2022-03-04T02:17:25Z|virtual_size |None|||visibility|shared|+------------------+--------------------------------------+123456123456789101112[root@controller~]#source/etc/keystone/admin-openrc.sh[root@controller~]#openstackflavorcreate--id1--ram1024--disk10--vcpus1Fmin+----------------------------+-------+|Field|Value|+----------------------------+-------+|OS-FLV-DISABLED:disabled|False||OS-FLV-EXT-DATA:ephemeral|0 ||disk|id|name|10||1 ||Fmin||os-flavor-access:is_public|True||properties||17+----------------------------+-------+18[root@controller~]#13|ram|1024|14|rxtx_factor|1.0|15|swap| |16|vcpus|1 |在openstack私有云平臺(tái)上，使?命令創(chuàng)建云主機(jī)?絡(luò)extnet，??extsubnet，虛擬機(jī)浮動(dòng)IP?段為192.168.y.0/24（其中y是vlan號(hào)），?關(guān)為192.168.y.1，?絡(luò)使?vlan模式。1[root@controller~]#openstacknetworkcreate--provider-network-typevlan--provider-physical-networkprovider--externalextnet2+---------------------------+--------------------------------------+3|Field |Value |4+---------------------------+--------------------------------------+5|admin_state_up |UP |6|availability_zone_hints| |7|availability_zones | |8|created_at |2022-03-04T02:25:29Z |9|description | |10|dns_domain |None |11|id |936209e3-a4a4-4440-93b0-1e5d2cd0ce48|12|ipv4_address_scope |None |13|ipv6_address_scope |None |14|is_default |False |15|is_vlan_transparent |None |16|mtu |1500 |17|name |extnet |18|port_security_enabled |True |19|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |20|provider:network_type |vlan |21|provider:physical_network|provider |22|provider:segmentation_id|134 |23|qos_policy_id |None |24|revision_number |5 |25|router:external |External |26|segments |None |27|shared |False |28|status |ACTIVE |29|subnets | |30|tags | |31|updated_at |2022-03-04T02:25:29Z |32+---------------------------+--------------------------------------+33[root@controller~]#openstacksubnetcreate--subnet-range/24--gateway--networkextnetextsubnet34+-------------------+--------------------------------------+35|Field |Value |36+-------------------+--------------------------------------+37|allocation_pools|-54 |38|cidr |/24 |39|created_at |2022-03-04T02:25:40Z |40|description | |41|dns_nameservers| |42|enable_dhcp |True |43|gateway_ip | |44|host_routes | |45|id |d98d0b9b-1c34-4726-991b-4cf848eb63de|46|ip_version |4 |47|ipv6_address_mode|None |48|ipv6_ra_mode |None |49|name |extsubnet |50|network_id |936209e3-a4a4-4440-93b0-1e5d2cd0ce48|51|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |52|revision_number|0 |53|segment_id |None |54|service_types | |55|subnetpool_id |None |56|tags | |57|updated_at |2022-03-04T02:25:40Z |58+-------------------+--------------------------------------+59[root@controller~]#4．在openstack私有云平臺(tái)上，使?命令創(chuàng)建云主機(jī)內(nèi)?intnet，??inttsubnet，虛擬機(jī)???段為10.10.x.0/24（其中x號(hào)），?關(guān)為10.10.x.11[root@controller~]#openstacknetworkcreate--internal--provider-network-typevxlanintnet2+---------------------------+--------------------------------------+3|Field |Value |4+---------------------------+--------------------------------------+5|admin_state_up |UP |6|availability_zone_hints| |7|availability_zones | |8|created_at |2022-03-04T02:31:05Z |9|description | |10|dns_domain |None |11|id |c788def4-2829-4b84-9cfe-3583ec3cd8b7|12|ipv4_address_scope |None |13|ipv6_address_scope |None |14|is_default |False |15|is_vlan_transparent |None |16|mtu |1450 |17|name |intnet |18|port_security_enabled |True |19|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |20|provider:network_type |vxlan |21|provider:physical_network|None |22|provider:segmentation_id|179 |23|qos_policy_id |None |24|revision_number |2 |25|router:external |Internal |26|segments |None |27|shared |False |28|status |ACTIVE |29|subnets | |30|tags | |31|updated_at |2022-03-04T02:31:05Z |32+---------------------------+--------------------------------------+33[root@controller~]#openstacksubnetcreate--subnet-range/24--gateway--networkintnetintsubnet34+-------------------+--------------------------------------+35|Field |Value |36+-------------------+--------------------------------------+37|allocation_pools|-54 |38|cidr |/24 |39|created_at |2022-03-04T02:32:21Z |40|description | |41|dns_nameservers| |42|enable_dhcp |True |43|gateway_ip | |44|host_routes | |45|id |1b7e56b7-1365-4b18-8082-c4623a44bbb0|46|ip_version |4 |47|ipv6_address_mode|None |48|ipv6_ra_mode |None |49|name |intsubnet |50|network_id |c788def4-2829-4b84-9cfe-3583ec3cd8b7|51|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |52|revision_number|0 |53|segment_id |None |54|service_types | |55|subnetpool_id |None |56|tags | |57|updated_at |2022-03-04T02:32:21Z |58+-------------------+--------------------------------------+59[root@controller~]#1212345678910111213141516171819202122232425[root@controller~]#openstackroutercreateext-router+-------------------------+--------------------------------------+|Field|Value|+-------------------------+--------------------------------------+|admin_state_up|UP||availability_zone_hints|||availability_zones|created_at|description|distributed||2022-03-04T02:34:03Z||False|||||external_gateway_info|None||flavor_id|ha|id|name|project_id|None|False|||0b96b68a-06b6-4349-ba29-edead021a775||ext-router||f641f1ab736249c28b4ccd262bbcc5b7||revision_number|routes|status|tags|updated_at|1|||ACTIVE|||||2022-03-04T02:34:03Z|+-------------------------+--------------------------------------+[root@controller~]#openstackrouterset--external-gatewayextnetext-router[root@controller~]#openstackrouteraddsubnetext-routerintsubnet[root@controller~]#在openstack私有云平臺(tái)上，基于“cirros”鏡像、1vCPU/1G/10G的flavor、intsubnet的?絡(luò)，綁定浮動(dòng)IP，使?命令創(chuàng)建?臺(tái)虛擬機(jī)VM1，啟動(dòng)VM1，并使?PC機(jī)能遠(yuǎn)程登錄到VM1。1[root@controller~]#openstackservercreateVM1--flavorFmin--imagecirros--nicnet-id=c788def4-2829-4b84-9cfe-3583ec3cd8b7--security-group4e72[root@controller~]#openstackfloatingipcreateextnet3+---------------------+--------------------------------------+4|Field |Value |5+---------------------+--------------------------------------+6|created_at |2022-03-04T02:41:49Z |7|description | |8|fixed_ip_address |None |9|floating_ip_address| |10|floating_network_id|936209e3-a4a4-4440-93b0-1e5d2cd0ce48|11|id |1f11bce0-f4ea-4614-a590-e46701a42e02|12|name | |13|port_id |None |14|project_id |f641f1ab736249c28b4ccd262bbcc5b7 |15|qos_policy_id |None |16|revision_number |0 |17|router_id |None |18|status |DOWN |19|subnet_id |None |20|updated_at |2022-03-04T02:41:49Z |21+---------------------+--------------------------------------+22[root@controller~]#openstackserveraddfloatingipVM123#遠(yuǎn)程登錄實(shí)例需要在安全組中開(kāi)放所ICMP協(xié)議如下圖24#如果?賽?到命令?創(chuàng)建安全組25#egress是出?ingress是??26[root@controller~]#openstacksecuritygrouprulecreate668e8b7a-2df5-442d-9fed-fb5f1539868c--protocolicmp--ingress--remote-ip/027[root@controller~]#openstacksecuritygrouprulecreate668e8b7a-2df5-442d-9fed-fb5f1539868c--protocoltcp--dst-port22--ingress--remote-ip0.0.oo正在示6oo

＿＿方向以太網(wǎng)類型(EtheTy伈）IP協(xié)議玩口范臣l遠(yuǎn)示IP均盤(pán)遠(yuǎn)主全組 動(dòng)出O1Pv4任何任/0口口入口心叫何何ICMP任何部響/000.0()I()defII入口。入口4[f',6TCP何22(SSH)任00.01)1()of"1[root@controller~]#openstackvolumetypecreatelvm2+-------------+ +3|Field |Value |4+-------------+--------------------------------------+5|description|None |6|id |f9ff2d93-9e40-4d6b-8d25-b72672be8a92||is_public|True ||name |lvm |9+-------------+--------------------------------------+10[root@controller~]#openstackvolumetypecreatelvm11+-------------+ +12|Field |Value |13+-------------+ +14|description|None |15|id |f9ff2d93-9e40-4d6b-8d25-b72672be8a92||is_public|True ||name |lvm |18+-------------+ +19[root@controller~]#openstackvolumecreate--size40--typelvmlvm20+---------------------+ +21|Field |Value |22+-----------------