#!/bin/bash
selinux=`cat /etc/selinux/config | grep "SELINUX=" | awk -F"=" 'NR==2{print $2}'`
if [ $selinux != "disabled" ]
then
echo "正在为您关闭selinux 并重新启动系统，重启后重新执行本脚本"
sed -i "s/SELINUX\=.*/SELINUX\=disabled/g" /etc/selinux/config
reboot
else
echo "selinux 已经关闭，可以执行脚本"
fi
yum install centos-release-openstack-stein -y 
yum install python-openstackclient openstack-selinux -y
yum clean all
yum list
 nodeipx=                                       # 允许node网段同步时间,ip前两位，例如：xxx.xxx
etc=$(ip a | grep -w "BROADCAST" | awk -F ":" 'NR==1{print $2}')
                                                        # 过滤网卡名
                                                        # BROADCAST [ˈbrɔdˌkæst]  广播，是外网卡
ip=$(ip a | grep -w $etc | awk -F" " 'NR==2{print $2}' )
                                                        # 用外网卡名字找改行信息，打印第二行第二列
echo " 
$ip  linux-node1.openstack  
" >> /etc/hosts 
sed -i  "s/\/24//g" /etc/hosts          # 将尾巴  /24  替换为空格
                                                        # -g  特殊字符转义,  \  特殊字符转译符号，将符号 /  转译 不被识别
                                                # 关闭 iptables
systemctl start firewalld.service
systemctl stop firewalld.service
systemctl disable firewalld.service
yum install -y chrony 
echo "
allow $nodeipx/16
" >> /etc/chrony.conf           #  允许网段同步时间
systemctl enable chronyd.service 
systemctl start chronyd.service
timedatectl set-timezone Asia/Shanghai  
timedatectl status
                                                # 设置同步时间和时区
#Base
yum install -y http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-8.noarch.rpm
yum install -y centos-release-openstack-liberty
yum install -y python-openstackclient
##MySQL
yum install -y mariadb mariadb-server MySQL-python
##RabbitMQ
yum install -y rabbitmq-server
##Keystone
yum install -y openstack-keystone httpd mod_wsgi memcached python-memcached
##Glance
yum install -y openstack-glance python-glance python-glanceclient
##Nova
yum install -y openstack-nova-api openstack-nova-cert openstack-nova-conductor openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler python-novaclient
##Neutron linux-node1.example.com
yum install -y openstack-neutron openstack-neutron-ml2 openstack-neutron-linuxbridge python-neutronclient ebtables ipset
##Dashboard
yum install -y openstack-dashboard
##Cinder
yum install -y openstack-cinder python-cinderclient
cp /usr/share/mysql/my-medium.cnf /etc/my.cnf   
 systemctl enable mariadb.service 
 ln -s '/usr/lib/systemd/system/mariadb.service' '/etc/systemd/system/multi-user.target.wants/mariadb.service'
mysql_install_db --datadir="/var/lib/mysql" --user="mysql" 
                                                # 初始化数据库
systemctl start mariadb.service
#################################################################
mysql -e "set password = password('eisccn');"
                                                # mysql 初始没有密码， 直接mysql 进入数据库。-e 是脚本模式，然后设置面登密码为eisccn
##  ====创建数据库开始====
mysql -uroot -peisccn -e "
drop database if exists keystone;
CREATE DATABASE keystone;
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';
drop database if exists glance;
CREATE DATABASE glance;
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';
GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'glance';
drop database if exists nova;
CREATE DATABASE nova;
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';
GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'nova';
drop database if exists neutron;
CREATE DATABASE neutron;
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';
GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';
drop database if exists cinder;
CREATE DATABASE cinder;
GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY 'cinder';
GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'cinder';
flush privileges;
show databases;
"
#####################   创建数据库结束   ######################
systemctl enable rabbitmq-server.service
ln -s '/usr/lib/systemd/system/rabbitmq-server.service' '/etc/systemd/system/multi-user.target.wants/rabbitmq-server.service'
 systemctl start rabbitmq-server.service
 rabbitmqctl add_user openstack openstack   
rabbitmqctl set_permissions openstack ".*" ".*" ".*"  
rabbitmq-plugins list  
rabbitmq-plugins enable rabbitmq_management             #启动插件
 systemctl restart rabbitmq-server.service
yum install -y lsof
lsof -i:15672
################
#获取主机IP地址
eth=$(ip a| grep "BROADCAST" | awk -F ":" 'NR==1{print $2}' | sed "s/ //g") ; echo "网卡名为："$eth ;
                                                                                # 命令 ip a 查看网卡 过滤；BROADCAST  [ˈbrɔːdkɑːst] >广播；字段的行
                                                                                # awk -F ":" 以冒号为分隔符 ; 选择第一行，第二列，sed删空格
                                                                                # 符号  ; 分号表示第一条命令结束，第二条开始
ethCatalog=$(find / -name "*$eth" | grep "/etc/" | sed "s/ //g" ) ;  echo "网卡路径为: "  $ethCatalog
                                                                                # find 查找网卡名称的路径，grep 过滤/etc 目录下网卡名称。sed删除空格
ip=$(cat $ethCatalog | grep IPADDR | awk -F "=" 'NR==1{print $2}' | sed "s/ //g") ; echo "IP地址为: " $ip
                                                                                # 查看网卡文件，过滤IPADDR的行，awk -F"=" 分隔符是等于符号，打印第一行第二列
################
echo "
guest 登陆：http://$ip:15672
初始登陆密码：guest/guest
登陆后，点击： 导航栏的 Admin --- openstack --- 展开 Update this user 
写入密码 eisccn  确认密码eisccn  再输入管理权限用户组  administrator ； 点击 Update User 更新账户信息
之后退出使用 openstack 账户登录,账户/密码：openstack/eisccn
完成后，请确认继续搭建环境：
"
read -p "您是否已经登陆配置修改新账户；接下来安装 openstack组件！！！！！！！！
                                y|继续          任意键退出
" openstack
echo $openstack
case "$openstack" in 
y|Y) echo "您确认了继续操作";;
*)echo "您否定了继续操作，退出脚本;  case 的其他所有情况 * 号  不加双引号"
exit;;
esac
######################    获取行号，并插入内容  ################################
# 查一行，插一行，不然行号会变；  \n 换行
Random=`openssl rand -hex 10` ; echo " Random [ˈrændəm] 随机，生成10位随机数: $Random"
file="cat /etc/keystone/keystone.conf " ; echo $file
NRDEFAULT=`cat -n $file | grep "\[DEFAULT\]" | awk -F" " 'NR==1{print $1}'` ; echo $NRDEFAULT
                                                                        # 查找标签：[DEFAULT] 所在行，将print $1  改为 print $0 为打印第一行中的所有列信息
sed -i "$NRDEFAULT a\admin_token = $Random \nverbose = true" $file
                                                                        # $NRDEFAULT 是指定第一行   a\ 的下面插入字符串， \n 是换行符号
NRdatabase=`cat -n $file | grep "\[database\]" | awk -F" " 'NR==1{print $1}'` ; echo $NRdatabase
echo "写入IP地址 $ip"
sed -i "$NRdatabase a\connection = mysql://keystone:keystone@127.0.0.1/keystone" $file
                                                                        # 设置数据库连接 写到database下
NRmemcache=`cat -n $file | grep "\[memcache\]" | awk -F" " 'NR==1{print $1}'` ; echo $NRmemcache
sed -i "$NRmemcache a\servers = $ip:11211" $file
NRrevoke=`cat -n $file | grep "\[revoke\]" | awk -F" " 'NR==1{print $1}'` ; echo $NRrevoke
sed -i "$NRrevoke  a\driver = sql" $file
NRtoken=`cat -n $file | grep "\[token\]" | awk -F" " 'NR==2{print $1}'` ; echo $NRtoken
sed -i "$NRtoken a\provider = uuid \ndriver = memcache" $file
cat $file|grep -v "^#"|grep -v "^$"
#########################################################################
su -s /bin/sh -c "keystone-manage db_sync" keystone
                                                                        # 创建数据库，使用同步
ll /var/log/keystone/keystone.log                       # 之所以上面 su 切换是因为这个日志文件属主
# 数据库检查表,生产环境密码不要用keystone，查看时间并改成复杂点的密码：set password = password('eisccn');
mysql -h $ip -u keystone -pkeystone -e "
select now();
"
systemctl enable memcached
ln -s '/usr/lib/systemd/system/memcached.service' '/etc/systemd/system/multi-user.target.wants/memcached.service'
systemctl start memcached
sed -i "s/#ServerName.*/ServerName $ip\:80/g" /etc/httpd/conf/httpd.conf
#######################################
# 修改文件： wsgi-keystone.conf
conf=`find / -name "wsgi-keystone.conf"` ; echo $conf
sed -i "1 a\Listen 35357" $conf
echo "
<VirtualHost *:35357>
WSGIDaemonProcess keystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
WSGIProcessGroup keystone-admin
WSGIScriptAlias / /usr/bin/keystone-wsgi-admin
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
<IfVersion >= 2.4>
ErrorLogFormat "%{cu}t %M"
</IfVersion>
ErrorLog /var/log/httpd/keystone-error.log
CustomLog /var/log/httpd/keystone-access.log combined
<Directory /usr/bin>
<IfVersion >= 2.4>
Require all granted
</IfVersion>
<IfVersion < 2.4>
Order allow,deny
Allow from all
</IfVersion>
</Directory>
</VirtualHost>
" >> $conf
#######################################
systemctl enable httpd
ln -s '/usr/lib/systemd/system/httpd.service' '/etc/systemd/system/multi-user.target.wants/httpd.service'
systemctl start httpd
yum install -y net-tools
netstat -lntup|grep httpd                               # 查看启用的端口，grep过滤httpd的进程
TOKEN=`cat /etc/keystone/keystone.conf | grep "^admin_token =" | awk -F" " '{print $3}' | sed "s/ //g"` ; echo $TOKEN
export OS_TOKEN=$TOKEN
export OS_URL=http://$ip:35357/v3
export OS_IDENTITY_API_VERSION=3
openstack project create --domain default --description "Admin Project" admin
openstack user create --domain default --password-prompt admin
openstack role create admin
openstack role add --project admin --user admin admin
openstack project create --domain default --description "Demo Project" demo
openstack user create --domain default --password=demo demo
openstack role create user
openstack role add --project demo --user demo user
openstack project create --domain default --description "Service Project" service
openstack user list
openstack project list
openstack service create --name keystone --description "OpenStack Identity" identity
openstack endpoint create --region RegionOne identity public http://$ip:5000/v2.0
openstack endpoint create --region RegionOne identity internal http://$ip:5000/v2.0
openstack endpoint create --region RegionOne identity admin http://$ip:35357/v2.0
openstack endpoint list