信息安全仿真环境十一

计算节点计算服务

• 主要配置

mv /etc/nova/nova.conf /etc/nova/nova.conf.bakvim /etc/nova/nova.conf[DEFAULT]
compute_driver = libvirt.LibvirtDriver
log_dir = /var/log/nova
state_path = /var/lib/nova
transport_url = rabbit://nova:b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7@192.168.8.200
use_neutron = True
firewall_driver = nova.virt.firewall.NoopFirewallDriver
cpu_allocation_ratio = 2.0[keystone_authtoken]
www_authenticate_uri = http://192.168.8.200:5000/v3
auth_url = http://192.168.8.200:5000/v3
memcached_servers = 192.168.8.200:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = nova
password = b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7# 镜像服务 (Glance)
[glance]
api_servers = http://192.168.8.200:9292# 网络服务 (Neutron)
[neutron]
auth_url = http://192.168.8.200:5000
auth_type = password
project_domain_name = Default
user_domain_name = Default
region_name = RegionOne
project_name = service
username = neutron
password = b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7
service_metadata_proxy = True
metadata_proxy_shared_secret = b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7# Libvirt
[libvirt]
virt_type = qemu
cpu_mode = host-passthrough
#cpu_mode = none
disk_cachemodes = file=writeback
hw_disk_discard = unmap
inject_password = true
inject_key = true
inject_partition = -1
# 磁盘格式（默认为 qcow2，支持稀疏存储）
images_type = qcow2# VNC 控制台
[vnc]
enabled = True
server_listen = 192.168.8.201
server_proxyclient_address = 192.168.8.201
novncproxy_base_url = http://192.168.8.200:6080/vnc_auto.html# Placement API (资源跟踪)
[placement]
region_name = RegionOne
project_domain_name = Default
project_name = service
auth_type = password
user_domain_name = Default
auth_url = http://192.168.8.200:5000/v3
username = placement
password = b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7[cinder]
auth_url = http://192.168.8.200:5000/v3
auth_type = password
username = cinder
password = b3a7f8c9d2e4a1b3c5d7e9f0a1b3c5d7
project_name = service
user_domain_name = Default
project_domain_name = Default
region_name = RegionOne
# 使用内部端点
endpoint_type = internalURL[oslo_concurrency]
lock_path = /var/lib/nova/tmp

• 检查

systemctl restart nova-compute
systemctl status nova-compute
systemctl enable nova-computetail -f /var/log/nova-compute.logopenstack compute service list
+--------------------------------------+----------------+----------+----------+---------+-------+----------------------------+
| ID                                   | Binary         | Host     | Zone     | Status  | State | Updated At                 |
+--------------------------------------+----------------+----------+----------+---------+-------+----------------------------+
| d920df18-6d08-4a12-8f78-9a5fee212be2 | nova-scheduler | control  | internal | enabled | up    | 2025-09-07T10:23:39.000000 |
| 073659d8-4692-42a8-b78c-c1c87270a6a0 | nova-conductor | control  | internal | enabled | up    | 2025-09-07T10:23:42.000000 |
| 1bb52e64-a2ae-4c9c-8aa2-8ea3eeb97831 | nova-compute   | compute1 | nova     | enabled | up    | 2025-09-07T10:23:42.000000 |
+--------------------------------------+----------------+----------+----------+---------+-------+----------------------------+