CINDER块存储存储环境LVM[rootcontroller ~]# vim answers.txt536CONFIG_CINDER_BACKENDlvm544CONFIG_CINDER_VOLUMES_CREATEy547CONFIG_CINDER_VOLUME_NAMEcinder-volumes554CONFIG_CINDER_VOLUMES_SIZE20G安装环境查看[rootcontroller ~ 09:07:21]# vgs cinder-volumesConfiguration settingsnapshot_autoextend_percentinvalid. Its not part of any section. Configuration setting snapshot_autoextend_threshold invalid. Its not part of any section. VG#PV #LV #SN Attr VSize VFreecinder-volumes110wz--n-20.60g1012.00m查看cinderapi服务状态[rootcontroller ~ 09:55:12]# systemctl status openstack-cinder-api.service● openstack-cinder-api.service - OpenStack Cinder API Server Loaded: loaded(/usr/lib/systemd/system/openstack-cinder-api.service;enabled;Active: active(running)since Wed2026-05-20 09:06:39 CST;50min ago Main PID:1751(cinder-api)Tasks:5(limit:65255)Memory:264.3M CGroup: /system.slice/openstack-cinder-api.service ├─1751 /usr/bin/python3 /usr/bin/cinder-api --config-file /usr/share/ci├─3016 /usr/bin/python3 /usr/bin/cinder-api --config-file /usr/share/ci├─3017 /usr/bin/python3 /usr/bin/cinder-api --config-file /usr/share/ci├─3018 /usr/bin/python3 /usr/bin/cinder-api --config-file /usr/share/ci└─3019 /usr/bin/python3 /usr/bin/cinder-api --config-file /usr/share/ci查看cinder配置文件[rootcontroller ~ 09:57:30]# cd /etc/cinder/[rootcontroller cinder10:26:47]# lsapi-paste.ini resource_filters.json rootwrap.d cinder.conf rootwrap.conf volumes[rootcontroller cinder]# vim cinder.conf592#scheduler_default_filters AvailabilityZoneFilter,CapacityFilter,CapabilitiesFilter593595#scheduler_default_weighers CapacityWeigher596601# Default scheduler driver to use (string value)602#scheduler_driver cinder.scheduler.filter_scheduler.FilterSchedulerAZfilter配置cinder配置文件[rootcontroller ~]# cd /etc/cinder/[rootcontroller cinder]# lsapi-paste.ini cinder.conf resource_filters.json rootwrap.conf rootwrap.d volumes[rootcontroller cinder]# vim cinder.conf592scheduler_default_filtersAvailabilityZoneFilter,CapacityFilter,CapabilitiesFilter#该配置文件的节点的AZ设置为az1395storage_availability_zoneaz1#创建卷时不指定az默认使用nova AZ401default_availability_zonenova[rootcontroller cinder]# systemctl restart openstack-cinder*验证AZ[rootcontroller ~10:33:20]# source keystonerc_admin[rootcontroller ~(keystone_admin)]# openstack volume create --size 1 volume1Availability zonenovais invalid.(HTTP400)(Request-ID: req-f2a05837-f3c2-4f92-8563-f192e1c3b2e7)[rootcontroller ~(keystone_admin)]# openstack volume create --size 1 --availability-zone az2 volume1Availability zoneaz2is invalid.(HTTP400)(Request-ID: req-10b81a3b-4eef-43f6-833a-f320dcde0621)[rootcontroller ~(keystone_admin)]# openstack volume create --size 1 --availability-zone az1 volume1-----------------------------------------------------------|Field|Value|-----------------------------------------------------------|attachments|[]||availability_zone|az1||bootable|false||consistencygroup_id|None||created_at|2026-05-20T02:34:30.940711||description|None||encrypted|False||id|af046e5a-06ff-4766-98f0-9d151f1d7b58||migration_status|None||multiattach|False||name|volume1||properties|||replication_status|None||size|1||snapshot_id|None||source_volid|None||status|creating||type|iscsi||updated_at|None||user_id|a0fba58b2ccd41e582f443a4be9c25b4|-----------------------------------------------------------查看cinder配置文件[rootcontroller ~(keystone_admin)]# vim /etc/cinder/cinder.conf5261[lvm]5262volume_backend_namelvm5263volume_drivercinder.volume.drivers.lvm.LVMVolumeDriver5264target_ip_address192.168.108.105265target_helperlioadm5266volume_groupcinder-volumes5267volumes_dir/var/lib/cinder/volumesSwift对象存储[rootcontroller ~]# umount /srv/node/swiftloopback #卸载原来的swift虚拟设备分区[rootcontroller ~]# cd /srv/node #切换到swift目录[rootcontroller node]# lsswiftloopback[rootcontroller node]# rm -rf swiftloopback/ #删除原来的swift挂载目录[rootcontroller node]# mkdir obs1 obs2 #创建新的挂载目录分别挂载sdb1,sbd2#配置挂载文件将obs1-sdb1,obs2-sdb2分别挂载关联[rootcontroller node]# vim /etc/fstab #下面三行话一句注释两句添加#/srv/loopback-device/swiftloopback /srv/node/swiftloopback ext4noatime,nodiratime,nofail,loop,user_xattr00/dev/sdb1 /srv/node/obs1 xfs defaults00/dev/sdb2 /srv/node/obs2 xfs defaults00[rootcontroller node]# mount -a #挂载mount:(hint)your fstab has been modified, but systemd still uses the old version;usesystemctl daemon-reloadto reload.[rootcontroller node]# df #查看现象Filesystem 1K-blocks Used Available Use% Mounted on devtmpfs3904608039046080% /dev tmpfs3924792439247881% /dev/shm tmpfs39247921765239071401% /run tmpfs3924792039247920% /sys/fs/cgroup /dev/mapper/cs-root7336448068671046649737610% / /dev/mapper/cs-home1310816929469641301347281% /home /dev/sda1103833623412480421223% /boot tmpfs78495607849560% /run/user/0 /dev/sdb110475520106088103694322% /srv/node/obs1 /dev/sdb210474496106088103684082% /srv/node/obs2#修改obs1目录与obs2目录权限[rootcontroller node]# chown swift:swift obs1[rootcontroller node]# chown swift:swift obs2[rootcontroller node]# lltotal0drwxr-xr-x2swift swift6Sep2914:04 obs1 drwxr-xr-x2swift swift6Sep2914:04 obs2#创建swift ring[rootcontroller node]# cd /etc/swift/[rootcontroller swift]# lsaccount.builder account-server.conf container-reconciler.conf containerserver.conf object-expirer.conf object-server.conf swift.conf account.ring.gz backups container.ring.gz internalclient.conf object.ring.gz proxy-server account-server container.builder container-server object.builder object-server proxy-server.conf[rootcontroller swift]# swift-ring-builder container.builder create --helpswift-ring-builderbuilder_filecreatepart_powerreplicasmin_part_hoursCreatesbuilder_filewith2^part_powerpartitions andreplicas.min_part_hoursis number of hours to restrict moving a partitionmorethan once.[rootcontroller swift]# swift-ring-builder container.builder create 12 2 1[rootcontroller swift]# swift-ring-builder account.builder create 12 2 1[rootcontroller swift]# swift-ring-builder object.builder create 12 2 1#12表示ring分区数量为2^12#2表示2个副本#1表示最少1个小时后才能更改ring配置#查看配置文件分别查看account,containerobeject的bind_port记录下来[rootcontroller swift]# cat account-server.conf | grep bind_portbind_port6002[rootcontroller swift]# cat container-server.conf | grep bind_portbind_port6001[rootcontroller swift]# cat object-server.conf | grep bind_portbind_port6000[rootcontroller swift]# swift-ring-builder account.builder add z1-192.168.108.10:6002/obs1100WARNING: No region specifiedforz1-192.168.108.10:6002/obs1. Defaulting to region1.[rootcontroller swift]# swift-ring-builder account.builder add z2-192.168.108.10:6002/obs2100[rootcontroller swift]# swift-ring-builder container.builder add z1-192.168.108.10:6001/obs1100[rootcontroller swift]# swift-ring-builder container.builder add z2-192.168.108.10:6001/obs2100[rootcontroller swift]# swift-ring-builder object.builder add z1-192.168.108.10:6000/obs1100[rootcontroller swift]# swift-ring-builder object.builder add z2-192.168.108.10:6000/obs2100#再平衡[rootcontroller swift]# swift-ring-builder account.builder rebalanceReassigned8192(200.00%)partitions. Balance is now0.00. Dispersion is now0.00[rootcontroller swift]# swift-ring-builder object.builder rebalanceReassigned8192(200.00%)partitions. Balance is now0.00. Dispersion is now0.00[rootcontroller swift]# swift-ring-builder container.builder rebalanceReassigned8192(200.00%)partitions. Balance is now0.00. Dispersion is now0.00[rootcontroller obs1]# find /srv/node -name *data/srv/node/obs1/objects/317/0fe/13d34c83bb5eed122321759e90f6e0fe/1727591964.07735.data /srv/node/obs2/objects/317/0fe/13d34c83bb5eed122321759e90f6e0fe/1727591964.07735.dataheat编排管理#查看heat相关进程[rootcontroller ~]# ps -e | grep heat1721? 00:00:02 heat-api-cfn1722? 00:00:02 heat-api1776? 00:00:08 heat-engine2717? 00:00:00 heat-api-cfn2722? 00:00:00 heat-api-cfn2728? 00:00:00 heat-api-cfn2730? 00:00:00 heat-api-cfn2751? 00:00:00 heat-api2752? 00:00:00 heat-api2754? 00:00:00 heat-api2756? 00:00:00 heat-api3048? 00:00:00 heat-engine3056? 00:00:00 heat-engine3057? 00:00:00 heat-engine3059? 00:00:00 heat-engine#查看heat相关服务[rootcontroller ~]# systemctl status openstack-heat-*heat.txtheat_template_version:2018-08-31 description: Simple template to deploy a stack with one virtual machine instances parameters: image_name_1: type: string label: Image ID description: SCOIMAGE Specify an image nameforinstance1 default: b0c17194-5342-4434-8d6e-486b30c43412#替换自己的image idpublic_net: type: string label: Network ID description: SCONETWORK Network to be usedforthe compute instance default: 269378c7-b696-4daa-9afc-682db446d09d#替换自己的外网 idresources: mykey: type: OS::Nova::KeyPair properties: save_private_key:truename: mykey web_secgroup: type: OS::Neutron::SecurityGroup properties: rules: - protocol: tcp remote_ip_prefix:0.0.0.0/0 port_range_min:22port_range_max:22- protocol: icmp private_net: type: OS::Neutron::Net properties: name: private_net private_subnet: type: OS::Neutron::Subnet properties: network_id:{get_resource: private_net}cidr:192.168.99.0/24ip_version:4vrouter: type: OS::Neutron::Router properties: external_gateway_info: network:{get_param: public_net}vrouter_interface: type: OS::Neutron::RouterInterface properties: router_id:{get_resource: vrouter}subnet_id:{get_resource: private_subnet}instance_port: type: OS::Neutron::Port properties: network:{get_resource: private_net}security_groups: - default -{get_resource: web_secgroup}fixed_ips: - subnet_id:{get_resource: private_subnet}floating_ip: type: OS::Neutron::FloatingIP properties: floating_network_id:{get_param: public_net}association: type: OS::Neutron::FloatingIPAssociation properties: floatingip_id:{get_resource: floating_ip}port_id:{get_resource: instance_port}instance1: type: OS::Nova::Server properties: image:{get_param: image_name_1}key_name:{get_resource: mykey}flavor: flaovr_web#替换自己创建的flavor名字networks: - port:{get_resource:instance_port}outputs: private_key: description: Private key value:{get_attr:[mykey, private_key]}neutron网络管理Neutron架构[rootcontroller ~(keystone_admin)]# mysqlWelcome to the MariaDB monitor. Commands end with;or\g. Your MariaDB connectionidis8516Server version:10.3.10-MariaDB MariaDB Server Copyright(c)2000,2018, Oracle, MariaDB Corporation Ab and others. Typehelp;or\hforhelp. Type\ctoclearthe current input statement. MariaDB[(none)]use neutron;Reading table informationforcompletion of table andcolumnnames You can turn off this feature to get a quicker startup with-ADatabase changed MariaDB[neutron]show tables;-----------------------------------------|Tables_in_neutron|-----------------------------------------|address_scopes||agents||alembic_version|~~~网络实验#确认配置[rootcontroller ~]# vim /etc/neutron/plugins/ml2/ml2_conf.ini[ml2]type_driversgeneve,flattenant_network_typesgenevemechanism_driversovnpath_mtu0extension_driversport_security,qos[securitygroup]enable_security_groupTrue[ml2_type_geneve]max_header_size38vni_ranges10:100[ml2_type_flat]flat_networks*[ovn]ovn_nb_connectiontcp:192.168.108.10:6641ovn_sb_connectiontcp:192.168.108.10:6642ovn_metadata_enabledTrue[rootcontroller ~16:29:03]# ovn-nbctl showswitch 30d53067-df9e-4202-afad-516b182d6b26(neutron-5d137a7b-012d-470b-b8ba-2844f498b676)(aka waiwang)port provnet-05d13d2d-87cf-4a7e-ab04-57a073acfc3e type: localnet addresses:[unknown]port d6bb70aa-01ab-4166-98d1-d8b4e4b12063 type: localport addresses:[fa:16:3e:be:53:9a 192.168.108.100][rootcontroller ~16:33:07]# ovn-nbctl showswitch 18ab250f-ecdf-4349-ad44-8443756485ae(neutron-6f34b788-02c7-48b3-8e0e-26fa202339ac)(aka neiwang-1)port 6efc45ae-6a42-4d60-b74e-70d515b20a55 type: localport addresses:[fa:16:3e:5f:20:f8 192.168.11.2]switch 30d53067-df9e-4202-afad-516b182d6b26(neutron-5d137a7b-012d-470b-b8ba-2844f498b676)(aka waiwang)port provnet-05d13d2d-87cf-4a7e-ab04-57a073acfc3e type: localnet addresses:[unknown]port d6bb70aa-01ab-4166-98d1-d8b4e4b12063 type: localport addresses:[fa:16:3e:be:53:9a 192.168.108.100][rootcontroller ~16:35:06]# ovn-nbctl showswitch 18ab250f-ecdf-4349-ad44-8443756485ae(neutron-6f34b788-02c7-48b3-8e0e-26fa202339ac)(aka neiwang-1)port 6efc45ae-6a42-4d60-b74e-70d515b20a55 type: localport addresses:[fa:16:3e:5f:20:f8 192.168.11.2]port 87043f74-64fd-436e-94a2-45142f2af63f type: router router-port: lrp-87043f74-64fd-436e-94a2-45142f2af63f switch 30d53067-df9e-4202-afad-516b182d6b26(neutron-5d137a7b-012d-470b-b8ba-2844f498b676)(aka waiwang)port d7ecee03-c2d0-4c6a-acb8-78073cc52f9e type: router router-port: lrp-d7ecee03-c2d0-4c6a-acb8-78073cc52f9e port provnet-05d13d2d-87cf-4a7e-ab04-57a073acfc3e type: localnet addresses:[unknown]port d6bb70aa-01ab-4166-98d1-d8b4e4b12063 type: localport addresses:[fa:16:3e:be:53:9a 192.168.108.100]router 54f03aa7-72bf-4ae5-b202-d7f526563286(neutron-364b3a38-98c3-4055-b01e-b47d4f47082d)(aka router1)port lrp-d7ecee03-c2d0-4c6a-acb8-78073cc52f9e mac:fa:16:3e:1f:7c:13networks:[192.168.108.127/24]gateway chassis:[0150897f-9f02-49a5-9fd9-7ca0d361b609]port lrp-87043f74-64fd-436e-94a2-45142f2af63f mac:fa:16:3e:9e:cb:c0networks:[192.168.11.1/24]nat 95ebc642-94d3-483f-b43b-b292566eeaf1 external ip:192.168.108.127logical ip:192.168.11.0/24type:snat[rootcontroller ~]# ovn-nbctl showswitch 9e269a0c-5049-4c20-b602-ce42d722017c(neutron-c5a25fa7-559f-4e62-8bf0- 7ebcd8c8a1f1)(aka neiwang-1)port 0e42719e-b450-4fbf-a222-be6402b2bb93 addresses:[fa:16:3e:33:e8:8b 192.168.11.4]port 9da6f7af-22e3-44fc-8465-90334f8abeea type: router router-port: lrp-9da6f7af-22e3-44fc-8465-90334f8abeea port 3ff7bcb4-c9be-4e6d-b14c-cff503adfae6 addresses:[fa:16:3e:bd:e5:c5 192.168.11.169]port 3b975511-7c63-495e-969c-1424e69770dc type: localport addresses:[fa:16:3e:dd:ea:9d 192.168.11.2]switch e69d7e37-9a0d-4abe-81c8-9d10c2246178(neutron-e79063ae-1291-42b2-8519- ec0ce0a421e1)(aka waiwang)port 43b284b0-ebc8-4bd3-8c59-77dcec8d33dd type: localport addresses:[fa:16:3e:be:d3:41 192.168.108.100]port c0354999-1e15-436f-b15f-be2d3b17c5b4 type: router router-port: lrp-c0354999-1e15-436f-b15f-be2d3b17c5b4 port provnet-50a84802-b570-4cad-be3e-cb934c259c48 type: localnet addresses:[unknown]router 9374d9e7-b8b0-4d6e-924d-c9fdef6662e5(neutron-a75adc8f-9668-4fe1-b6ebb4573d574ae0)(aka router1)port lrp-9da6f7af-22e3-44fc-8465-90334f8abeea mac:fa:16:3e:78:18:6cnetworks:[192.168.11.1/24]port lrp-c0354999-1e15-436f-b15f-be2d3b17c5b4 mac:fa:16:3e:82:b8:23networks:[192.168.108.185/24]gateway chassis:[46cd64c9-2f35-4dfb-9351-e0b1693daf8b]nat d6fae190-e948-475c-b5b1-a9258a8b7c65 external ip:192.168.108.185logical ip:192.168.11.0/24type: snat“9374d9e7-b8b0-4d6e-924d-c9fdef6662e5 (neutron-a75adc8f-9668-4fe1-b6ebb4573d574ae0) (aka router1)port lrp-9da6f7af-22e3-44fc-8465-90334f8abeeamac: “fa:16:3e:78:18:6c”networks: [“192.168.11.1/24”]port lrp-c0354999-1e15-436f-b15f-be2d3b17c5b4mac: “fa:16:3e:82:b8:23”networks: [“192.168.108.185/24”]gateway chassis: [46cd64c9-2f35-4dfb-9351-e0b1693daf8b]nat d6fae190-e948-475c-b5b1-a9258a8b7c65external ip: “192.168.108.185”logical ip: “192.168.11.0/24”type: snat“