基于CentOS7安装部署ovirt（use）_centos ovirt

参考: ovirt一种基于kvm的开源虚拟化软件

centos7.6 kvm oVirt搭建使用 - 知乎

一、oVirt安装前准备

1.1 基本规划

ip地址         系统       主机名
192.168.1.1   centos7.6   oVirt-engine
192.168.1.2   centos7.6   node1

1.2 配置DNS

# vi /etc/resolv.conf
nameserver=114.114.114.114
search localdomain

配完后可以ping www.baidu.com看是否配置成功 

1.3 设置主机名

1.4 Ovrit部署虚拟机主要分为五部分

1. Vorit engine安装
2. 安装计算节点
3. 存储部署（此文档用的是NFS存储）
4. spice客户端安装
5. 创建虚拟机
6. 网络配置

1.5 环境准备

主机名为node1的虚拟机需要在虚拟机上开启嵌套虚拟化，CentOS7是否支持虚拟化，参考：《http://在 Centos7 的KVM虚拟机上启用嵌套虚拟化》

二、Vorit-engine安装及配置

2.1 安装Vorit-engine

添加官方oVir存储库并安装ovirt-engine程序包和依赖包(由于软件源问题会非常慢)

1). 设置安装源

yum install https://resources.ovirt.org/pub/yum-repo/ovirt-release43.rpm

2). 安装 ovirt-engine

yum install ovirt-engine 

2.2 配置oVirt-engine

ovirt-engine安装完成后需要运行首次配置向导，执行如下命令：

# engine-setup

 (配置向导比较多，需要注意的地方红色标出,未标出的直接回车下一步)

[ INFO  ] Stage: Initializing

[ INFO  ] Stage: Environment setup

          Configuration files: ['/etc/ovirt-engine-setup.conf.d/10-packaging-jboss.conf', '/etc/ovirt-engine-setup.conf.d/10-packaging.conf']

          Log file: /var/log/ovirt-engine/setup/ovirt-engine-setup-20190420195341-6bsbdg.log

          Version: otopi-1.7.7 (otopi-1.7.7-1.el7.centos)

[ INFO  ] Stage: Environment packages setup

[ INFO  ] Stage: Programs detection

[ INFO  ] Stage: Environment setup

[ INFO  ] Stage: Environment customization

         

          --== PRODUCT OPTIONS ==--

         （在这之前回出现是否安装一个什么集合，手动输入yes，然后又出现询问，手动输入yes，一共两个）

          Configure Engine on this host (Yes, No) [Yes]: 回车

          Configure ovirt-provider-ovn (Yes, No) [Yes]: 回车(OVN:Open Virtual Network,配置虚拟网络)

          Configure Image I/O Proxy on this host (Yes, No) [Yes]: 回车(Image I/O Proxy可以支持向oVirt平台中上传虚拟机的磁盘镜像)

          Configure WebSocket Proxy on this host (Yes, No) [Yes]: 回车(WebSocket Proxy用来支持使用noVNC远程登录虚拟机图形界面管理)

         

          * Please note * : Data Warehouse is required for the engine.

          If you choose to not configure it on this host, you have to configure

          it on a remote host, and then configure the engine on this host so

          that it can access the database of the remote Data Warehouse host.

          Configure Data Warehouse on this host (Yes, No) [Yes]: 回车(在本机配置数据库)

          Configure VM Console Proxy on this host (Yes, No) [Yes]: 回车(支持访问虚拟机的串口console通信)

         

          --== PACKAGES ==--

         

[ INFO  ] Checking for product updates...

[ INFO  ] No product updates found

         

          --== NETWORK CONFIGURATION ==--

         

          Host fully qualified DNS name of this server [localhost.localdomain]: 回车(使用默认hostname就行,反正是准备用IP地址访问无所谓)

[WARNING] Failed to resolve localhost.localdomain using DNS, it can be resolved only locally

          Setup can automatically configure the firewall on this system.

          Note: automatic configuration of the firewall may overwrite current settings.

          NOTICE: iptables is deprecated and will be removed in future releases

          Do you want Setup to configure the firewall? (Yes, No) [Yes]: no回车(没关防火墙选择yes,关了的话选择no)

         

          --== DATABASE CONFIGURATION ==--

         

          Where is the DWH database located? (Local, Remote) [Local]: 回车(DWH:Data WareHouse使用本地数据库)

          Setup can configure the local postgresql server automatically for the DWH to run. This may conflict with existing applications.

          Would you like Setup to automatically configure postgresql and create DWH database, or prefer to perform that manually? (Automatic, Manual) [Automatic]: 回车(自动配置PostGreSQL数据库)

          Where is the Engine database located? (Local, Remote) [Local]: 回车(Engine用到的数据库位于本机)

          Setup can configure the local postgresql server automatically for the engine to run. This may conflict with existing applications.

          Would you like Setup to automatically configure postgresql and create Engine database, or prefer to perform that manually? (Automatic, Manual) [Automatic]: 回车(使用安装程序自动创建Engine数据库)

         

          --== OVIRT ENGINE CONFIGURATION ==--

         

          Engine admin password: 输入后台管理员admin的密码回车

          Confirm engine admin password: 再输入一遍密码回车

          Application mode (Virt, Gluster, Both) [Both]: 回车

          Use default credentials (admin@internal) for ovirt-provider-ovn (Yes, No) [Yes]: 回车(使用默认的admin@internal内部管理员账号)

         

          --== STORAGE CONFIGURATION ==--

         

          Default SAN wipe after delete (Yes, No) [No]: 回车(yes的话在删除虚拟机的虚拟磁盘后会擦除存储设备上的对应块)

         

          --== PKI CONFIGURATION ==--

         

          Organization name for certificate [localdomain]: 回车

         

          --== APACHE CONFIGURATION ==--

         

          Setup can configure the default page of the web server to present the application home page. This may conflict with existing applications.

          Do you wish to set the application as the default page of the web server? (Yes, No) [Yes]: 回车(使用apache作为web服务器)

          Setup can configure apache to use SSL using a certificate issued from the internal CA.

          Do you wish Setup to configure that, or prefer to perform that manually? (Automatic, Manual) [Automatic]: 回车(自动配置CA证书)

         

          --== SYSTEM CONFIGURATION ==--

         

         

          --== MISC CONFIGURATION ==--

         

          Please choose Data Warehouse sampling scale:

          (1) Basic

          (2) Full

          (1, 2)[1]: 回车(使用基本的数据库示例初始化数据)

         

          --== END OF CONFIGURATION ==--

         

[ INFO  ] Stage: Setup validation

[WARNING] Cannot validate host name settings, reason: resolved host does not match any of the local addresses

[WARNING] Warning: Not enough memory is available on the host. Minimum requirement is 4096MB, and 16384MB is recommended.

          Do you want Setup to continue, with amount of memory less than recommended? (Yes, No) [No]: yes回车(因为是在虚拟机上装的,内存有点小,才会提示这个)

         

          --== CONFIGURATION PREVIEW ==--

         

          Application mode                        : both

          Default SAN wipe after delete           : False

          Update Firewall                         : False

          Host FQDN                               : localhost.localdomain

          Configure local Engine database         : True

          Set application as default page         : True

          Configure Apache SSL                    : True

          Engine database secured connection      : False

          Engine database user name               : engine

          Engine database name                    : engine

          Engine database host                    : localhost

          Engine database port                    : 5432

          Engine database host name validation    : False

          Engine installation                     : True

          PKI organization                        : localdomain

          Set up ovirt-provider-ovn               : True

          Configure WebSocket Proxy               : True

          DWH installation                        : True

          DWH database host                       : localhost

          DWH database port                       : 5432

          Configure local DWH database            : True

          Configure Image I/O Proxy               : True

          Configure VMConsole Proxy               : True

         

          Please confirm installation settings (OK, Cancel) [OK]: 回车

[ INFO  ] Stage: Transaction setup

[ INFO  ] Stopping engine service

[ INFO  ] Stopping ovirt-fence-kdump-listener service

[ INFO  ] Stopping dwh service

[ INFO  ] Stopping Image I/O Proxy service

[ INFO  ] Stopping vmconsole-proxy service

[ INFO  ] Stopping websocket-proxy service

[ INFO  ] Stage: Misc configuration

[ INFO  ] Stage: Package installation

[ INFO  ] Stage: Misc configuration

[ INFO  ] Upgrading CA

[ INFO  ] Initializing PostgreSQL

[ INFO  ] Creating PostgreSQL 'engine' database

[ INFO  ] Configuring PostgreSQL

[ INFO  ] Creating PostgreSQL 'ovirt_engine_history' database

[ INFO  ] Configuring PostgreSQL

[ INFO  ] Creating CA

[ INFO  ] Creating/refreshing DWH database schema

[ INFO  ] Configuring Image I/O Proxy

[ INFO  ] Setting up ovirt-vmconsole proxy helper PKI artifacts

[ INFO  ] Setting up ovirt-vmconsole SSH PKI artifacts

[ INFO  ] Configuring WebSocket Proxy

[ INFO  ] Creating/refreshing Engine database schema

[ INFO  ] Creating/refreshing Engine 'internal' domain database schema

[ INFO  ] Adding default OVN provider to database

[ INFO  ] Adding OVN provider secret to database

[ INFO  ] Setting a password for internal user admin

[ INFO  ] Generating post install configuration file '/etc/ovirt-engine-setup.conf.d/20-setup-ovirt-post.conf'

[ INFO  ] Stage: Transaction commit

[ INFO  ] Stage: Closing up

[ INFO  ] Starting engine service

[ INFO  ] Starting dwh service

[ INFO  ] Restarting ovirt-vmconsole proxy service

         

          --== SUMMARY ==--

         

[ INFO  ] Restarting httpd

          In order to configure firewalld, copy the files from

              /etc/ovirt-engine/firewalld to /etc/firewalld/services

              and execute the following commands:

              firewall-cmd --permanent --add-service ovirt-postgres

              firewall-cmd --permanent --add-service ovirt-https

              firewall-cmd --permanent --add-service ovn-central-firewall-service

              firewall-cmd --permanent --add-service ovirt-fence-kdump-listener

              firewall-cmd --permanent --add-service ovirt-imageio-proxy

              firewall-cmd --permanent --add-service ovirt-websocket-proxy

              firewall-cmd --permanent --add-service ovirt-http

              firewall-cmd --permanent --add-service ovirt-vmconsole-proxy

              firewall-cmd --permanent --add-service ovirt-provider-ovn

              firewall-cmd --reload

          The following network ports should be opened:

              tcp:2222

              tcp:35357

              tcp:443

              tcp:5432

              tcp:54323

              tcp:6100

              tcp:6641

              tcp:6642

              tcp:80

              tcp:9696

              udp:7410

          An example of the required configuration for iptables can be found at:

              /etc/ovirt-engine/iptables.example

          Please use the user 'admin@internal' and password specified in order to login

          Web access is enabled at:

              http://localhost.localdomain:80/ovirt-engine

              https://localhost.localdomain:443/ovirt-engine

          Internal CA 95:CB:1A:EA:A7:CC:48:A3:14:8F:79:8D:BC:07:4F:98:D7:EB:B4:19

          SSH fingerprint: SHA256:ltDYySFckI6bPO0OV+yzErG3YVqgA8zBnHZkEK3bWRs

[WARNING] Warning: Not enough memory is available on the host. Minimum requirement is 4096MB, and 16384MB is recommended.

         

          --== END OF SUMMARY ==--

     

[ INFO  ] Stage: Clean up

          Log file is located at /var/log/ovirt-engine/setup/ovirt-engine-setup-20190420195341-6bsbdg.log

[ INFO  ] Generating answer file '/var/lib/ovirt-engine/setup/answers/20190420195951-setup.conf'

[ INFO  ] Stage: Pre-termination

[ INFO  ] Stage: Termination

[ INFO  ] Execution of setup completed successfully

具体配置截图如下： 

2.3 修改oVirt-engine的web登陆方式（默认是以FQDN方式登陆）

[core@localhost ~]$ vi /etc/ovirt-engine/engine.conf.d/11-setup-sso.conf
# ovirt取消主机名解析
SSO_CALLBACK_PREFIX_CHECK=false

全部修改结果如下图： 

 修改完成后重启ovirt-engine服务：

# service ovirt-engine restart

2.4 浏览器访问

在windows浏览器中输入：https://ip/ovirt-engine

用户名：admin,密码为安装过程中设置的

1. 点击“管理门户”
2. 用户名admin
3. 密码：上述安装过程输入的密码

2.5 安装计算节点

2.5.1 在计算节点机器，执行如下命令​

# 1.设置安装源, 这里为官方oVir存储库
# yum install -y http://resources.ovirt.org/pub/yum-repo/ovirt-release43.rpm
 
# 2.安装软件
# yum -y install qemu-kvm libvirt virt-install bridge-utils vdsm
# yum install cockpit cockpit-ovirt-dashboard -y
 
# 3.启动服务并设置开机启动
# systemctl start libvirtd
# systemctl enable libvirtd

2.5.2 添加节点

在oVirt-engine界面上创建相应资源

输入节点的Ip地址和root密码 

此处忽略电源管理

点击事件可以看到过程

节点正在安装过程

添加完成之后可以看到节点信息 

三、创建虚拟机镜像

3.1 创建存储目录

在node1节点上面执行以下命令：

mkdir /images
chown -R vdsm /images/
mkdir /iso
chown -R vdsm /iso/

3.2 engine管理页面添加存储域

新建存储域 

新建镜像域 

创建成功

3.3 镜像拷贝

3.3.1 拷贝镜像

把系统的镜像拷贝到node1节点的以下路径：

/iso/2eb33fb7-ecae-490a-9463-15016a6c41fb/images/11111111-1111-1111-1111-111111111111

3.3.2 上传镜像文件

进行完上述操作，成功添加存储域后，查看node43的data目录，发现已经更新下级的文件夹

四、安装spice客户端

本文选用spice客户端来访问虚拟机，因此需要在使用windows的机子上安装一个virt-viewer（也就是官方推荐的remote-viewer客户端），官网直接下载即可，没什么技巧。使用linux的机子就更简单啦~直接yum install virt-viewer即可。

五、创建虚拟机

5.1 新建虚拟机配置

5.2 添加虚拟磁盘

点击新建实例镜像

编辑虚拟机配置，该项比较重要，不然会没法引导

5.3 高级配置

点击左下角的高级选项，根据需要自己定义内存大小，控制台图形界面类型可以选择spice或者是vnc

记得选择引导序列，需要把CD附加勾选上

配置好之后，点击确定稍等30秒左右，虚拟机创建成功。

 运行一次进行安装

5.5 调整引导顺序

点击确定会自动下载一个console.vv文件，在安装了remote-viewer的前提下，直接双击该文件即可打开虚拟机控制台。

六、网络配置

 安装的时候选择桥接模式，linux装成功后，选择手动，正确配置ip,掩码，网关，DNS,可直接用控制台工具，在桌面设置

6.1 点击控制台-进入Linux桌面

6.2 编辑-配置网络

Linux安装完成后，在控制台选择部署好的虚拟机，编辑-配置网络