红帽OpenStack部署（基于RHOSP 17/18版本）

# 所有节点禁用SELinux与防火墙（部署后按需启用）
sudo setenforce 0
sudo sed -i 's/SELINUX=enforcing/SELINUX=permissive/g' /etc/selinux/config
sudo systemctl stop firewalld && sudo systemctl disable firewalld

# 配置NTP时间同步
sudo dnf install chrony -y
sudo systemctl enable --now chronyd
sudo chronyc sources

# 注册系统并启用RHOSP订阅
sudo subscription-manager register --username <RHN用户> --password <密码>
sudo subscription-manager attach --pool=<RHOSP订阅池ID>

# 安装Director安装包
sudo dnf install -y python3-tripleoclient git

# 创建undercloud.conf模板
cat << EOF > undercloud.conf
[DEFAULT]
undercloud_hostname = director.example.com
container_images_file = /home/stack/containers-prepare-parameter.yaml
local_ip = 192.168.24.1/24
network_gateway = 192.168.24.1
network_cidr = 192.168.24.0/24
masquerade_network = 192.168.24.0/24
enable_telemetry = false
enable_ui = true
EOF

# 下载容器镜像清单
openstack tripleo container image prepare default --output-env-file containers-prepare-parameter.yaml

openstack undercloud install

# 导入节点硬件信息
openstack overcloud node import nodes.yaml

# 配置节点角色
openstack overcloud node configure --roles Control,Compute --all-manageable

# network_data.yaml
- name: External
  vip: true
  name_lower: external
  ip_subnet: '10.10.20.0/24'
  allocation_pools: [{'start': '10.10.20.100', 'end': '10.10.20.200'}]
  gateway_ip: '10.10.20.1'
  physical_network: 'external'
  type: 'flat'

openstack overcloud deploy \
  --templates \
  --ntp-server pool.ntp.org \
  --control-scale 3 \
  --compute-scale 2 \
  -e /usr/share/openstack-tripleo-heat-templates/environments/network-isolation.yaml \
  -e network_data.yaml \
  --timeout 240

# ceph-storage.yaml
parameter_defaults:
  CephClusterFSID: "4b5c8c0a-ff60-454b-a1b4-974953b865d3"
  CephMonitors: "10.10.10.101,10.10.10.102,10.10.10.103"
  CephClientKey: "AQD7hxJgqOeqJhAAnpJ5W7hY1VgQhQzQicvgLA=="
  NovaEnableRbdBackend: true
  GlanceBackend: rbd
  CinderBackend: rbd

# ovs-dpdk.yaml
parameter_defaults:
  NeutronMechanismDrivers: "ovn"
  NeutronOVNMetadataAgentDebug: true
  OvsDpdkSocketMemory: "1024,1024"
  OvsDpdkMemoryChannels: "4"
  NovaSchedulerDefaultFilters: "RetryFilter,AvailabilityZoneFilter,ComputeFilter,ComputeCapabilitiesFilter,ImagePropertiesFilter,ServerGroupAntiAffinityFilter,ServerGroupAffinityFilter"

# 查看Overcloud状态
openstack stack list
openstack server list

# 创建测试实例
openstack network create test-net
openstack subnet create --network test-net --subnet-range 192.168.100.0/24 test-subnet
openstack server create --image cirros --flavor m1.tiny --network test-net test-instance

# 启用Prometheus+Grafana监控
openstack overcloud metrics deploy --config-file metrics.yaml

# 查看服务日志
sudo journalctl -u neutron-server -f
sudo podman logs -f ceph_mon

# 部署OpenShift on OpenStack
openstack coe cluster create openshift-cluster \
  --cluster-template openshift-4.10 \
  --node-count 3 \
  --master-count 3 \
  --keypair my-keypair

# starlingx.yaml
parameter_defaults:
  StarlingXEnabled: true
  EdgeSiteName: "factory-1"
  EdgeKeystoneURL: "http://edge-auth.example.com:5000/v3"