Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 699394 Details for
Bug 909137
Nova - Update to the latest Folsom stable release 2012.2.3
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
rhos folsom 2.1 (snap-3) config notes on rhel-6.4 -- added for reference.
rhos-folsom-on-6.4.txt (text/plain), 58.03 KB, created by
Kashyap Chamarthy
on 2013-02-19 10:12:02 UTC
(
hide
)
Description:
rhos folsom 2.1 (snap-3) config notes on rhel-6.4 -- added for reference.
Filename:
MIME Type:
Creator:
Kashyap Chamarthy
Created:
2013-02-19 10:12:02 UTC
Size:
58.03 KB
patch
obsolete
>*** [1] Config *** >------------------- > >#=====================# >[tuser1@interceptor ~]$ sudo yum repolist >Loaded plugins: product-id, subscription-manager >This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register. >rhel-64 | 3.9 kB 00:00 >rhos-2.1 | 2.6 kB 00:00 >repo id repo name status >rhel-64 Red Hat Enterprise Linux 6.4 3,648 >rhos-2.1 Red Hat OpenStack 2.1 134 >repolist: 3,782 >[tuser1@interceptor ~]$ >#=====================# >[root@interceptor ~]# useradd tuser1 >[root@interceptor ~]# passwd tuser1 >Changing password for user tuser1. >New password: >BAD PASSWORD: it is based on a dictionary word >BAD PASSWORD: is too simple >Retype new password: >passwd: all authentication tokens updated successfully. >#=====================# >[root@interceptor ~]# visudo >[root@interceptor ~]# grep tuser1 /etc/sudoers >tuser1 ALL=(ALL) NOPASSWD: ALL >[root@interceptor ~]# usermod -G wheel tuser1 >[root@interceptor ~]# su tuser1 - >[tuser1@interceptor root]$ groups | grep -i wheel >tuser1 wheel >[tuser1@interceptor root]$ >#=====================# > > >*** [2] Keystone *** >--------------------- > >#=====================# >[tuser1@interceptor ~]$ sudo yum install openstack-utils dnsmasq-utils -y >#=====================# >[tuser1@interceptor ~]$ sudo yum install -y openstack-keystone -y >[tuser1@interceptor ~]$ sudo openstack-db --init --service keystone >#=====================# > >Setting up KeyStone: >#=====================# >[tuser1@interceptor ~]$ export SERVICE_TOKEN=$(openssl rand -hex 10) >[tuser1@interceptor ~]$ echo $SERVICE_TOKEN >51251dedd2ffc67570a1 >[tuser1@interceptor ~]$ export SERVICE_ENDPOINT=http://127.0.0.1:35357/v2.0 >[tuser1@interceptor ~]$ echo $SERVICE_ENDPOINT >http://127.0.0.1:35357/v2.0 >[tuser1@interceptor ~]$ echo $SERVICE_TOKEN > /tmp/ks_admin_token >[tuser1@interceptor ~]$ >#=====================# >[tuser1@interceptor ~]$ sudo openstack-config --set /etc/keystone/keystone.conf DEFAULT admin_token $SERVICE_TOKEN >[tuser1@interceptor ~]$ >#=====================# >[tuser1@interceptor ~]$ sudo service openstack-keystone start >Starting keystone: [ OK ] >[tuser1@interceptor ~]$ sudo chkconfig openstack-keystone on >[tuser1@interceptor ~]$ >#=====================# >[tuser1@interceptor ~]$ ps -ef | grep -i keystone-all >keystone 4054 1 1 01:52 ? 00:00:00 /usr/bin/python /usr/bin/keystone-all --config-file /etc/keystone/keystone.conf >tuser1 4063 3714 0 01:53 pts/1 00:00:00 grep -i keystone-all >[tuser1@interceptor ~]$ >#=====================# >[tuser1@interceptor ~]$ grep ERROR /var/log/keystone/keystone.log >[tuser1@interceptor ~]$ >#=====================# >[tuser1@interceptor ~]$ keystone user-create --name admin --pass secret >+----------+-------------------------------------------------------------------------------------------------------------------------+ >| Property | Value | >+----------+-------------------------------------------------------------------------------------------------------------------------+ >| email | | >| enabled | True | >| id | e34da0f70aaa4b86b97857299d66155f | >| name | admin | >| password | $6$rounds=40000$lQ.onh8aAC5tDcAA$fkyqqZ/ejJtDgd6a.FyMsAqU.yexuS6lSXhcr4EW1FjL1wB6u.vjC7QGZFXki/FmD/328Xfy9EhsH0sdFna9P/ | >| tenantId | | >+----------+-------------------------------------------------------------------------------------------------------------------------+ >[tuser1@interceptor ~]$ keystone role-create --name admin >+----------+----------------------------------+ >| Property | Value | >+----------+----------------------------------+ >| id | e0c3bba332db415ca61ba2cc03471884 | >| name | admin | >+----------+----------------------------------+ >[tuser1@interceptor ~]$ keystone tenant-create --name admin >+-------------+----------------------------------+ >| Property | Value | >+-------------+----------------------------------+ >| description | | >| enabled | True | >| id | 5aaa100a372248dd9c658f8b7775784c | >| name | admin | >+-------------+----------------------------------+ >[tuser1@interceptor ~]$ >#=====================# >[tuser1@interceptor ~]$ keystone user-role-add --user-id e34da0f70aaa4b86b97857299d66155f --role-id e0c3bba332db415ca61ba2cc03471884 --tenant-id 5aaa100a372248dd9c658f8b7775784c >[tuser1@interceptor ~]$ >#=====================# >[tuser1@interceptor ~]$ keystone user-role-add --user-id e34da0f70aaa4b86b97857299d66155f --role-id e0c3bba332db415ca61ba2cc03471884 --tenant-id 5aaa100a372248dd9c658f8b7775784c >#=====================# >[tuser1@interceptor ~]$ export OS_USERNAME=admin >[tuser1@interceptor ~]$ export OS_TENANT_NAME=admin >[tuser1@interceptor ~]$ export OS_PASSWORD=secret >[tuser1@interceptor ~]$ export OS_AUTH_URL=http://127.0.0.1:35357/v2.0/ >[tuser1@interceptor ~]$ export PS1='[\u@\h \W(keystone_admin)]\$ ' >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~]$ vi keystonerc_admin >[tuser1@interceptor ~]$ cat keystonerc_admin >export OS_USERNAME=admin >export OS_TENANT_NAME=admin >export OS_PASSWORD=secret >export OS_AUTH_URL=http://127.0.0.1:35357/v2.0/ >export PS1='[\u@\h \W(keystone_admin)]\$ ' >#=====================# >[tuser1@interceptor ~]$ unset SERVICE_TOKEN >[tuser1@interceptor ~]$ unset SERVICE_ENDPOINT >#=====================# >[tuser1@interceptor ~]$ . ~/keystonerc_admin >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone user-list >No handlers could be found for logger "keystoneclient.v2_0.client" >+----------------------------------+-------+---------+-------+ >| id | name | enabled | email | >+----------------------------------+-------+---------+-------+ >| e34da0f70aaa4b86b97857299d66155f | admin | True | | >+----------------------------------+-------+---------+-------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone service-create --name=keystone --type=identity --description="Keystone Identity Service" >No handlers could be found for logger "keystoneclient.v2_0.client" >+-------------+----------------------------------+ >| Property | Value | >+-------------+----------------------------------+ >| description | Keystone Identity Service | >| id | b019c85fd45a4e5c9c993aaaeebafbc0 | >| name | keystone | >| type | identity | >+-------------+----------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone endpoint-create --service_id b019c85fd45a4e5c9c993aaaeebafbc0 \ >> --publicurl 'http://127.0.0.1:5000/v2.0' \ >> --adminurl 'http://127.0.0.1:35357/v2.0' \ >> --internalurl 'http://127.0.0.1:5000/v2.0' >No handlers could be found for logger "keystoneclient.v2_0.client" >+-------------+----------------------------------+ >| Property | Value | >+-------------+----------------------------------+ >| adminurl | http://127.0.0.1:35357/v2.0 | >| id | 128c662d8c354d7e819a908a7d401951 | >| internalurl | http://127.0.0.1:5000/v2.0 | >| publicurl | http://127.0.0.1:5000/v2.0 | >| region | regionOne | >| service_id | b019c85fd45a4e5c9c993aaaeebafbc0 | >+-------------+----------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone user-create --name user1 --pass secret >+----------+-------------------------------------------------------------------------------------------------------------------------+ >| Property | Value | >+----------+-------------------------------------------------------------------------------------------------------------------------+ >| email | | >| enabled | True | >| id | 320ce46de7e24a75a7ff8906d7355ff7 | >| name | user1 | >| password | $6$rounds=40000$AWyIrNgi9dwtwWL8$xE05Jg4S9Gh4jsRSvqYa2AO/AohcQJP10ueKKponT6aqQnwp4e3VbFjeZ8epMePGVATrvuS..6h7AtgT156uR. | >| tenantId | | >+----------+-------------------------------------------------------------------------------------------------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ keystone role-create --name user >+----------+----------------------------------+ >| Property | Value | >+----------+----------------------------------+ >| id | 584ad616ee0c4076b90c26e47d2ad009 | >| name | user | >+----------+----------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ keystone tenant-create --name rhos >+-------------+----------------------------------+ >| Property | Value | >+-------------+----------------------------------+ >| description | | >| enabled | True | >| id | 57ff99aae24b4035b52177a722c4091f | >| name | rhos | >+-------------+----------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone user-role-add --user-id 320ce46de7e24a75a7ff8906d7355ff7 \ >> --role-id 584ad616ee0c4076b90c26e47d2ad009 \ >> --tenant-id 57ff99aae24b4035b52177a722c4091f >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ cat keystonerc_user1 >export OS_USERNAME=user1 >export OS_TENANT_NAME=rhos >export OS_PASSWORD=secret >export OS_AUTH_URL=http://127.0.0.1:5000/v2.0/ >export PS1='[\u@\h \W(keystone_user1)]\$ ' >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ . ~/keystonerc_user1 >[tuser1@interceptor ~(keystone_user1)]$ keystone user-list >You are not authorized to perform the requested action: admin_required (HTTP 403) >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ keystone token-get >+-----------+----------------------------------+ >| Property | Value | >+-----------+----------------------------------+ >| expires | 2012-01-13T21:02:58Z | >| id | 9db2c59a43f24c3889d6bc0778cba384 | >| tenant_id | 57ff99aae24b4035b52177a722c4091f | >| user_id | 320ce46de7e24a75a7ff8906d7355ff7 | >+-----------+----------------------------------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >***[3] Glance *** >----------------- > >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo yum install openstack-glance -y >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-db --init --service glance >Please enter the password for the 'root' MySQL user: >Verified connectivity to MySQL. >Creating 'glance' database. >Asking openstack-glance to sync the database. >Complete! >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/glance/glance-api.conf paste_deploy flavor keystone >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/glance/glance-api.conf \ >> keystone_authtoken admin_tenant_name admin_user admin_password $(cat /tmp/ks_admin_token) >[tuser1@interceptor ~(keystone_user1)]$ cat /tmp/ks_admin_token >51251dedd2ffc67570a1 >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/glance/glance-registry.conf \ >> paste_deploy flavor keystone >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/glance/glance-registry.conf \ >> keystone_authtoken admin_tenant_name admin_user admin_password $(cat /tmp/ks_admin_token) >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo service openstack-glance-registry start >Starting openstack-glance-registry: [ OK ] >[tuser1@interceptor ~(keystone_user1)]$ sudo service openstack-glance-api start >Starting openstack-glance-api: [ OK ] >[tuser1@interceptor ~(keystone_user1)]$ sudo chkconfig openstack-glance-registry on >[tuser1@interceptor ~(keystone_user1)]$ sudo chkconfig openstack-glance-api on >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ . ~/keystonerc_admin >[tuser1@interceptor ~(keystone_admin)]$ keystone service-create --name=glance --type=image --description="Glance Image Service" >+-------------+----------------------------------+ >| Property | Value | >+-------------+----------------------------------+ >| description | Glance Image Service | >| id | d0d16080fbb748c7b18ae543b82e2d37 | >| name | glance | >| type | image | >+-------------+----------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone endpoint-create --service_id d0d16080fbb748c7b18ae543b82e2d37 \ >> --publicurl http://127.0.0.1:9292/v1 \ >> --adminurl http://127.0.0.1:9292/v1 \ >> --internalurl http://127.0.0.1:9292/v1 >+-------------+----------------------------------+ >| Property | Value | >+-------------+----------------------------------+ >| adminurl | http://127.0.0.1:9292/v1 | >| id | 27ac8fde791a40019136d7b9899be3bd | >| internalurl | http://127.0.0.1:9292/v1 | >| publicurl | http://127.0.0.1:9292/v1 | >| region | regionOne | >| service_id | d0d16080fbb748c7b18ae543b82e2d37 | >+-------------+----------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ . ~/keystonerc_user1 >[tuser1@interceptor ~(keystone_user1)]$ vi keystonerc_user1 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ . ~/keystonerc_user1 >[tuser1@interceptor ~(keystone_user1)]$ glance image-list >Request returned failure status. >Invalid OpenStack Identity credentials. >[tuser1@interceptor ~(keystone_user1)]$ > > >Fixing the above mess with updating the keystone auth section in glance-api.conf ; glance-registry.conf >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_tenant_name admin >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_user admin >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/glance/glance-api.conf keystone_authtoken admin_password secret >[tuser1@interceptor ~(keystone_user1)]$ sudo grep -A6 keystone_authtoken /etc/glance/glance-api.conf >[keystone_authtoken] >auth_host = 127.0.0.1 >auth_port = 35357 >auth_protocol = http >admin_tenant_name = admin >admin_user = admin >admin_password = secret >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo less /etc/glance/glance-registry.conf >[tuser1@interceptor ~(keystone_admin)]$ sudo openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_tenant_name admin >[tuser1@interceptor ~(keystone_admin)]$ sudo openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_user admin >[tuser1@interceptor ~(keystone_admin)]$ sudo openstack-config --set /etc/glance/glance-registry.conf keystone_authtoken admin_password secret >[tuser1@interceptor ~(keystone_admin)]$ sudo grep -A6 keystone_authtoken /etc/glance/glance-registry.conf >[keystone_authtoken] >auth_host = 127.0.0.1 >auth_port = 35357 >auth_protocol = http >admin_tenant_name = admin >admin_user = admin >admin_password = secret >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo service openstack-glance-api restart >Stopping openstack-glance-api: [ OK ] >Starting openstack-glance-api: [ OK ] >[tuser1@interceptor ~(keystone_admin)]$ sudo service openstack-glance-registry restart >Stopping openstack-glance-registry: [ OK ] >Starting openstack-glance-registry: [ OK ] >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ glance image-list > >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > > >Add images to glance >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ #wget http://berrange.fedorapeople.org/images/2012-11-15/f17-x86_64-openstack-sda.qcow2 >[tuser1@interceptor ~(keystone_admin)]$ glance image-create --name="fedora-17" --is-public=true --disk-format=qcow2 --container-format bare < f17-x86_64-openstack-sda.qcow2 >+------------------+--------------------------------------+ >| Property | Value | >+------------------+--------------------------------------+ >| checksum | 1f104b5667768964d5df8c4ad1d7cd27 | >| container_format | bare | >| created_at | 2012-01-12T23:04:40 | >| deleted | False | >| deleted_at | None | >| disk_format | qcow2 | >| id | 1e6292f9-82bd-4cdb-969e-c863cb1c6692 | >| is_public | True | >| min_disk | 0 | >| min_ram | 0 | >| name | fedora-17 | >| owner | 5aaa100a372248dd9c658f8b7775784c | >| protected | False | >| size | 251985920 | >| status | active | >| updated_at | 2012-01-12T23:04:42 | >+------------------+--------------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ glance image-list >+--------------------------------------+-----------+-------------+------------------+-----------+--------+ >| ID | Name | Disk Format | Container Format | Size | Status | >+--------------------------------------+-----------+-------------+------------------+-----------+--------+ >| 1e6292f9-82bd-4cdb-969e-c863cb1c6692 | fedora-17 | qcow2 | bare | 251985920 | active | >+--------------------------------------+-----------+-------------+------------------+-----------+--------+ >[tuser1@interceptor ~(keystone_admin)]$ glance image-show 1e6292f9-82bd-4cdb-969e-c863cb1c6692 >+------------------+--------------------------------------+ >| Property | Value | >+------------------+--------------------------------------+ >| checksum | 1f104b5667768964d5df8c4ad1d7cd27 | >| container_format | bare | >| created_at | 2012-01-12T23:04:40 | >| deleted | False | >| disk_format | qcow2 | >| id | 1e6292f9-82bd-4cdb-969e-c863cb1c6692 | >| is_public | True | >| min_disk | 0 | >| min_ram | 0 | >| name | fedora-17 | >| owner | 5aaa100a372248dd9c658f8b7775784c | >| protected | False | >| size | 251985920 | >| status | active | >| updated_at | 2012-01-12T23:04:42 | >+------------------+--------------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >[tuser1@interceptor ~(keystone_admin)]$ . ~/keystonerc_user1 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >***[4] Cinder *** >----------------- > >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo yum install openstack-cinder -y >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-db --init --service cinder >Please enter the password for the 'root' MySQL user: >Verified connectivity to MySQL. >Creating 'cinder' database. >Asking openstack-cinder to sync the database. >Command failed, please check log for more info >2012-01-13 04:39:59 5018 CRITICAL cinder [-] (OperationalError) unable to open database file None None >ERROR 1146 (42S02) at line 1: Table 'cinder.migrate_version' doesn't exist >Final sanity check failed. >Please file a bug report on bugzilla.redhat.com against the openstack-cinder package. >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo grep ^sql_connection /etc/cinder/cinder.conf >sql_connection=mysql://cinder:cinder@localhost/cinder >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >#=====================# >$ sudo openstack-db --init --service cinder >Please enter the password for the 'root' MySQL user: >Verified connectivity to MySQL. >Creating 'cinder' database. >ERROR 1007 (HY000) at line 1: Can't create database 'cinder'; database exists >Asking openstack-cinder to sync the database. >Command failed, please check log for more info >2012-01-13 05:26:21 5417 CRITICAL cinder [-] No module named kombu >Complete! >#=====================# > >The database seems to have partially created, ket >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ mysql -u root -predhat >Welcome to the MySQL monitor. Commands end with ; or \g. >Your MySQL connection id is 150 >Server version: 5.1.66 Source distribution > >Copyright (c) 2000, 2012, Oracle and/or its affiliates. All rights reserved. > >Oracle is a registered trademark of Oracle Corporation and/or its >affiliates. Other names may be trademarks of their respective >owners. > >Type 'help;' or '\h' for help. Type '\c' to clear the current input statement. > >mysql> drop database cinder ; >Query OK, 16 rows affected (0.25 sec) > >mysql> quit >Bye >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >(refer to the mysql-comds.txt) > > >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ #sudo openstack-db --drop --service cinder >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >To avoid the error of "python kumbu", uncomment the below line in cinder.conf >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo grep rpc_backend /etc/cinder/cinder.conf >rpc_backend=cinder.openstack.common.rpc.impl_qpid >#=====================# > >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo grep ^sql_connection /etc/cinder/cinder.conf >sql_connection=mysql://cinder:cinder@localhost/cinder >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo openstack-db --init --service cinder >Please enter the password for the 'root' MySQL user: >Verified connectivity to MySQL. >Creating 'cinder' database. >Asking openstack-cinder to sync the database. >Complete! >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >Configure 'cinder' to use keystone for authentication >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ #sudo openstack-config --set /etc/cinder/cinder.conf DEFAULT auth_strategy keystone > >[tuser1@interceptor ~(keystone_admin)]$ sudo openstack-config --set /etc/cinder/cinder.conf keystone_authtoken admin_tenant_name admin >[tuser1@interceptor ~(keystone_admin)]$ sudo openstack-config --set /etc/cinder/cinder.conf keystone_authtoken admin_user admin >[tuser1@interceptor ~(keystone_admin)]$ sudo openstack-config --set /etc/cinder/cinder.conf keystone_authtoken admin_password secret >[tuser1@interceptor ~(keystone_admin)]$ sudo grep -A6 keystone_authtoken /etc/cinder/cinder.conf >[keystone_authtoken] >admin_tenant_name = admin >admin_user = admin >admin_password = secret > ># ># Options to be passed to keystoneclient.auth_token middleware >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >Setup (dummy) cinder volumes >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo grep -q /etc/cinder/volumes /etc/tgt/targets.conf || sudo sed -i '1iinclude /etc/cinder/volumes/*' /etc/tgt/targets.conf >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >tuser1@interceptor ~(keystone_admin)]$ sudo service tgtd start >Starting SCSI target daemon: [ OK ] >[tuser1@interceptor ~(keystone_admin)]$ >[tuser1@interceptor ~(keystone_admin)]$ sudo chkconfig tgtd on >[tuser1@interceptor ~(keystone_admin)]$ sudo truncate --size 20G ~/cinder-volumes >[tuser1@interceptor ~(keystone_admin)]$ sudo losetup -fv ~/cinder-volumes >Loop device is /dev/loop0 >[tuser1@interceptor ~(keystone_admin)]$ sudo vgcreate cinder-volumes /dev/loop0 > No physical volume label read from /dev/loop0 > Physical volume "/dev/loop0" successfully created > Volume group "cinder-volumes" successfully created >[tuser1@interceptor ~(keystone_admin)]$ sudo vgdisplay cinder-volumes > --- Volume group --- > VG Name cinder-volumes > System ID > Format lvm2 > Metadata Areas 1 > Metadata Sequence No 1 > VG Access read/write > VG Status resizable > MAX LV 0 > Cur LV 0 > Open LV 0 > Max PV 0 > Cur PV 1 > Act PV 1 > VG Size 20.00 GiB > PE Size 4.00 MiB > Total PE 5119 > Alloc PE / Size 0 / 0 > Free PE / Size 5119 / 20.00 GiB > VG UUID OPfmLv-9A1O-LVLr-L70I-WN0O-gFME-dqR8Ui > >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >Start up Cinder services >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ for srv in api scheduler volume ; do \ >> sudo service openstack-cinder-$srv start ; \ >> done >Starting openstack-cinder-api: [ OK ] >Starting openstack-cinder-scheduler: [ OK ] >Starting openstack-cinder-volume: [ OK ] >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ for srv in api scheduler volume ; do \ >> sudo chkconfig openstack-cinder-$srv on ; \ >> done >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > > >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo grep -i ERROR /var/log/cinder/* >[tuser1@interceptor ~(keystone_admin)]$ sudo grep CRITICAL /var/log/cinder/* >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > > >Register Cinder API as an endpoint with Keystone. >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ . ~/keystonerc_admin >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone service-create --name=cinder --type=volume --description="Cinder Volume Service" >+-------------+----------------------------------+ >| Property | Value | >+-------------+----------------------------------+ >| description | Cinder Volume Service | >| id | 4e27c8d114294c3e8f003581e2fdf5df | >| name | cinder | >| type | volume | >+-------------+----------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone endpoint-create --service_id 4e27c8d114294c3e8f003581e2fdf5df \ >> --publicurl "http://127.0.0.1:8776/v1/\$(tenant_id)s" \ >> --adminurl "http://127.0.0.1:8776/v1/\$(tenant_id)s" \ >> --internalurl "http://127.0.0.1:8776/v1/\$(tenant_id)s" >+-------------+----------------------------------------+ >| Property | Value | >+-------------+----------------------------------------+ >| adminurl | http://127.0.0.1:8776/v1/$(tenant_id)s | >| id | df08bbe593de455c8b8eac2f85dc255d | >| internalurl | http://127.0.0.1:8776/v1/$(tenant_id)s | >| publicurl | http://127.0.0.1:8776/v1/$(tenant_id)s | >| region | regionOne | >| service_id | 4e27c8d114294c3e8f003581e2fdf5df | >+-------------+----------------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >Set up your environment to use the credentials for your regular user. Then test out the cinder client application. The list command shows configured volumes. Since you have not created any volumes no output will be returned: >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ . ~/keystonerc_user1 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >tuser1@interceptor ~(keystone_user1)]$ cinder list > >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >***[5] Nova *** >----------------- > >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo yum install -y openstack-nova >#=====================# > > >Initializing 'nova' service fails at the beginning. >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-db --init --service nova >Please enter the password for the 'root' MySQL user: >Verified connectivity to MySQL. >Creating 'nova' database. >Asking openstack-nova to sync the database. >Command failed, please check log for more info >2012-01-16 19:47:17 7689 CRITICAL nova [-] (OperationalError) unable to open database file None None >ERROR 1146 (42S02) at line 1: Table 'nova.migrate_version' doesn't exist >Final sanity check failed. >Please file a bug report on bugzilla.redhat.com against the openstack-nova package. >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >So, let's drop the db, first >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-db --drop --service nova >Please enter the password for the 'root' MySQL user: >Verified connectivity to MySQL. >Dropping 'nova' database. >Complete! >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >To avoid the above error, uncomment the below line in /etc/nova/nova.conf >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo grep ^sql_connection /etc/nova/nova.conf >sql_connection=mysql://nova:nova@localhost/nova >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >To avoid the error of "python kumbu", uncomment the below line in cinder.conf >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo grep rpc_backend /etc/nova/nova.conf >rpc_backend=nova.openstack.common.rpc.impl_qpid >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-db --init --service nova >Please enter the password for the 'root' MySQL user: >Verified connectivity to MySQL. >Creating 'nova' database. >Asking openstack-nova to sync the database. >Complete! >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >Explicitly configure Nova to make use of Keystone for authentication >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/nova/nova.conf DEFAULT auth_strategy keystone >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/nova/api-paste.ini \ >> filter:authtoken admin_token $(cat /tmp/ks_admin_token) >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >Let's configure both flat_interface and public_interface to point to eth2 >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/nova/nova.conf DEFAULT flat_interface eth2 >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/nova/nova.conf DEFAULT public_interface eth2 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >Turn off Qpid (for test deployment. >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo yum install -y qpid-cpp-server >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo sed -i -e 's/auth=.*/auth=no/g' /etc/qpidd.conf >[tuser1@interceptor ~(keystone_user1)]$ grep auth /etc/qpidd.conf >auth=no >[tuser1@interceptor ~(keystone_user1)]$ sudo service qpidd start >Starting Qpid AMQP daemon: [ OK ] >[tuser1@interceptor ~(keystone_user1)]$ sudo chkconfig qpidd on >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >Start libvirtd >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo service libvirtd start >Starting libvirtd daemon: [ OK ] >[tuser1@interceptor ~(keystone_user1)]$ sudo chkconfig libvirtd on >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo service messagebus start >Starting system message bus: [ OK ] >[tuser1@interceptor ~(keystone_user1)]$ sudo chkconfig messagebus on >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >Configure Nova to use Cinder for volumes: >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/nova/nova.conf DEFAULT \ >> volume_api_class nova.volume.cinder.API >[tuser1@interceptor ~(keystone_user1)]$ sudo openstack-config --set /etc/nova/nova.conf DEFAULT \ >> enabled_apis ec2,osapi_compute,metadata >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >Start Nova >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ for srv in api cert network objectstore scheduler compute ; do \ >> sudo service openstack-nova-$srv start ; \ >> done >Starting openstack-nova-api: [ OK ] >Starting openstack-nova-cert: [ OK ] >Starting openstack-nova-network: [ OK ] >Starting openstack-nova-objectstore: [ OK ] >Starting openstack-nova-scheduler: [ OK ] >Starting openstack-nova-compute: [ OK ] >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ for srv in api cert network objectstore scheduler compute ; do \ >> sudo chkconfig openstack-nova-$srv on ; \ >> done >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >Register Nova compute API as an endpoint with Keystone. >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ . ~/keystonerc_admin >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone service-create --name=nova --type=compute --description="Nova Compute Service" >+-------------+----------------------------------+ >| Property | Value | >+-------------+----------------------------------+ >| description | Nova Compute Service | >| id | 230a7026a7a34650aa91c0e70338eaa2 | >| name | nova | >| type | compute | >+-------------+----------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ keystone endpoint-create --service_id 230a7026a7a34650aa91c0e70338eaa2 \ >> --publicurl "http://127.0.0.1:8774/v1.1/\$(tenant_id)s" \ >> --adminurl "http://127.0.0.1:8774/v1.1/\$(tenant_id)s" \ >> --internalurl "http://127.0.0.1:8774/v1.1/\$(tenant_id)s" >+-------------+------------------------------------------+ >| Property | Value | >+-------------+------------------------------------------+ >| adminurl | http://127.0.0.1:8774/v1.1/$(tenant_id)s | >| id | 06223f1ef4c7463485e130a5e575ac8f | >| internalurl | http://127.0.0.1:8774/v1.1/$(tenant_id)s | >| publicurl | http://127.0.0.1:8774/v1.1/$(tenant_id)s | >| region | regionOne | >| service_id | 230a7026a7a34650aa91c0e70338eaa2 | >+-------------+------------------------------------------+ >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >Setup the env. to use credentials for regular user, test nova client. >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ . ~/keystonerc_user1 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova list > >[tuser1@interceptor ~(keystone_user1)]$ nova image-list >+--------------------------------------+-----------+--------+--------+ >| ID | Name | Status | Server | >+--------------------------------------+-----------+--------+--------+ >| 1e6292f9-82bd-4cdb-969e-c863cb1c6692 | fedora-17 | ACTIVE | | >+--------------------------------------+-----------+--------+--------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > > >#=====================# >Address: 10.65.207.50 00001010.01000001.11001111.0011 0010 >Netmask: 255.255.255.240 = 28 11111111.11111111.11111111.1111 0000 >Wildcard: 0.0.0.15 00000000.00000000.00000000.0000 1111 >=> >Network: 10.65.207.48/28 00001010.01000001.11001111.0011 0000 (Class A) >Broadcast: 10.65.207.63 00001010.01000001.11001111.0011 1111 >HostMin: 10.65.207.49 00001010.01000001.11001111.0011 0001 >HostMax: 10.65.207.62 00001010.01000001.11001111.0011 1110 >Hosts/Net: 14 (Private Internet) >#=====================# > > >Creating a nova network fails with 'keystone_user1' : >(Bz -- https://bugzilla.redhat.com/show_bug.cgi?id=903671 ) >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo nova-manage network create demonet 10.65.207.48/28 50 60 --bridge=demonetbr0 >Command failed, please check log for more info >2012-01-17 22:55:28 CRITICAL nova [req-ec6280c0-7d0c-402a-9c0a-7bf9c62c7eaf None None] 'vlan_start' >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >So, let's source the keyston 'admin' >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ . ~/keystonerc_admin >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >Uncomment this line and restart all openstack services >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo egrep -i ^network_manager /etc/nova/nova.conf >network_manager=nova.network.manager.FlatDHCPManager >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# >[root@interceptor nova]# for j in `for i in $(ls -1 /etc/init.d/openstack-nova-*) ; do $i status | grep running ; done | awk '{print $1}'` ; do service $j restart ; done >Stopping openstack-nova-api: [ OK ] >Starting openstack-nova-api: [ OK ] >Stopping openstack-nova-cert: [ OK ] >Starting openstack-nova-cert: [ OK ] >Stopping openstack-nova-compute: [ OK ] >Starting openstack-nova-compute: [ OK ] >Stopping openstack-nova-network: [ OK ] >Starting openstack-nova-network: [ OK ] >Stopping openstack-nova-objectstore: [ OK ] >Starting openstack-nova-objectstore: [ OK ] >Stopping openstack-nova-scheduler: [ OK ] >Starting openstack-nova-scheduler: [ OK ] >[root@interceptor nova]# >#=====================# > >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ sudo nova-manage network create demonet 10.65.207.50/28 50 60 --bridge=demonetbr0 >[tuser1@interceptor ~(keystone_admin)]$ >#=====================# > >Now, let's add a key-pair and boot an image >#=====================# >[tuser1@interceptor ~(keystone_admin)]$ . ~/keystonerc_user1 >[tuser1@interceptor ~(keystone_user1)]$ nova keypair-add oskey > oskey.priv >[tuser1@interceptor ~(keystone_user1)]$ >[tuser1@interceptor ~(keystone_user1)]$ chmod 600 oskey.priv >[tuser1@interceptor ~(keystone_user1)]$ >[tuser1@interceptor ~(keystone_user1)]$ nova keypair-list >+-------+-------------------------------------------------+ >| Name | Fingerprint | >+-------+-------------------------------------------------+ >| oskey | 20:c9:c4:34:ce:98:71:6f:7c:bf:17:a6:d7:6d:d4:fd | >+-------+-------------------------------------------------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova flavor-list >+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+-------------+ >| ID | Name | Memory_MB | Disk | Ephemeral | Swap | VCPUs | RXTX_Factor | Is_Public | extra_specs | >+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+-------------+ >| 1 | m1.tiny | 512 | 0 | 0 | | 1 | 1.0 | True | {} | >| 2 | m1.small | 2048 | 20 | 0 | | 1 | 1.0 | True | {} | >| 3 | m1.medium | 4096 | 40 | 0 | | 2 | 1.0 | True | {} | >| 4 | m1.large | 8192 | 80 | 0 | | 4 | 1.0 | True | {} | >| 5 | m1.xlarge | 16384 | 160 | 0 | | 8 | 1.0 | True | {} | >+----+-----------+-----------+------+-----------+------+-------+-------------+-----------+-------------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova image-list >+--------------------------------------+-----------+--------+--------+ >| ID | Name | Status | Server | >+--------------------------------------+-----------+--------+--------+ >| 1e6292f9-82bd-4cdb-969e-c863cb1c6692 | fedora-17 | ACTIVE | | >+--------------------------------------+-----------+--------+--------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova boot --flavor 2 --key_name oskey --image 1e6292f9-82bd-4cdb-969e-c863cb1c6692 fedora >+------------------------+--------------------------------------+ >| Property | Value | >+------------------------+--------------------------------------+ >| OS-DCF:diskConfig | MANUAL | >| OS-EXT-STS:power_state | 0 | >| OS-EXT-STS:task_state | scheduling | >| OS-EXT-STS:vm_state | building | >| accessIPv4 | | >| accessIPv6 | | >| adminPass | KRUPWCw7HWKo | >| config_drive | | >| created | 2012-01-17T19:11:24Z | >| flavor | m1.small | >| hostId | | >| id | 49d46adf-28dd-4be9-9630-8ae3505fd662 | >| image | fedora-17 | >| key_name | oskey | >| metadata | {} | >| name | fedora | >| progress | 0 | >| security_groups | [{u'name': u'default'}] | >| status | BUILD | >| tenant_id | 57ff99aae24b4035b52177a722c4091f | >| updated | 2012-01-17T19:11:24Z | >| user_id | 320ce46de7e24a75a7ff8906d7355ff7 | >+------------------------+--------------------------------------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova list >+--------------------------------------+--------+--------+----------+ >| ID | Name | Status | Networks | >+--------------------------------------+--------+--------+----------+ >| 49d46adf-28dd-4be9-9630-8ae3505fd662 | fedora | BUILD | | >+--------------------------------------+--------+--------+----------+ >[tuser1@interceptor ~(keystone_user1)]$ > >[tuser1@interceptor ~(keystone_user1)]$ nova list >+--------------------------------------+--------+--------+----------+ >| ID | Name | Status | Networks | >+--------------------------------------+--------+--------+----------+ >| 49d46adf-28dd-4be9-9630-8ae3505fd662 | fedora | ERROR | | >+--------------------------------------+--------+--------+----------+ >[tuser1@interceptor ~(keystone_user1)]$ > > >[tuser1@interceptor ~(keystone_user1)]$ openstack-status >== Nova services == >openstack-nova-api: active >openstack-nova-cert: active >openstack-nova-compute: active >openstack-nova-network: active >openstack-nova-scheduler: active >openstack-nova-volume: inactive (disabled on boot) >== Glance services == >openstack-glance-api: active >openstack-glance-registry: active >== Keystone service == >openstack-keystone: active >== Cinder services == >openstack-cinder-api: active >openstack-cinder-scheduler: active >openstack-cinder-volume: active >== Support services == >libvirtd: active >tgtd: active >qpidd: inactive >== Keystone users == >You are not authorized to perform the requested action: admin_required (HTTP 403) >== Glance images == >ID Name Disk Format Container Format Size >------------------------------------ ------------------------------ -------------------- -------------------- -------------- >1e6292f9-82bd-4cdb-969e-c863cb1c6692 fedora-17 qcow2 bare 251985920 >== Nova instance flavors == >Could not read /etc/nova/nova.conf. Re-running with sudo >m1.medium: Memory: 4096MB, VCPUS: 2, Root: 40GB, Ephemeral: 0Gb, FlavorID: 3, Swap: 0MB, RXTX Factor: 1.0, public, ExtraSpecs {} >m1.large: Memory: 8192MB, VCPUS: 4, Root: 80GB, Ephemeral: 0Gb, FlavorID: 4, Swap: 0MB, RXTX Factor: 1.0, public, ExtraSpecs {} >m1.tiny: Memory: 512MB, VCPUS: 1, Root: 0GB, Ephemeral: 0Gb, FlavorID: 1, Swap: 0MB, RXTX Factor: 1.0, public, ExtraSpecs {} >m1.xlarge: Memory: 16384MB, VCPUS: 8, Root: 160GB, Ephemeral: 0Gb, FlavorID: 5, Swap: 0MB, RXTX Factor: 1.0, public, ExtraSpecs {} >m1.small: Memory: 2048MB, VCPUS: 1, Root: 20GB, Ephemeral: 0Gb, FlavorID: 2, Swap: 0MB, RXTX Factor: 1.0, public, ExtraSpecs {} >== Nova instances == >+--------------------------------------+--------+--------+----------+ >| ID | Name | Status | Networks | >+--------------------------------------+--------+--------+----------+ >| 49d46adf-28dd-4be9-9630-8ae3505fd662 | fedora | ERROR | | >+--------------------------------------+--------+--------+----------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >Place, selinux in permissive >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo setenforce 0 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova boot --flavor 2 --key_name oskey --image 1e6292f9-82bd-4cdb-969e-c863cb1c6692 fedora >+------------------------+--------------------------------------+ >| Property | Value | >+------------------------+--------------------------------------+ >| OS-DCF:diskConfig | MANUAL | >| OS-EXT-STS:power_state | 0 | >| OS-EXT-STS:task_state | scheduling | >| OS-EXT-STS:vm_state | building | >| accessIPv4 | | >| accessIPv6 | | >| adminPass | sk3hWTG9rpRp | >| config_drive | | >| created | 2012-01-17T19:24:03Z | >| flavor | m1.small | >| hostId | | >| id | 49fc2941-f594-4104-b86c-f708e5e415b9 | >| image | fedora-17 | >| key_name | oskey | >| metadata | {} | >| name | fedora | >| progress | 0 | >| security_groups | [{u'name': u'default'}] | >| status | BUILD | >| tenant_id | 57ff99aae24b4035b52177a722c4091f | >| updated | 2012-01-17T19:24:03Z | >| user_id | 320ce46de7e24a75a7ff8906d7355ff7 | >+------------------------+--------------------------------------+ >[tuser1@interceptor ~(keystone_user1)]$ >[tuser1@interceptor ~(keystone_user1)]$ nova list >+--------------------------------------+--------+--------+----------+ >| ID | Name | Status | Networks | >+--------------------------------------+--------+--------+----------+ >| 49d46adf-28dd-4be9-9630-8ae3505fd662 | fedora | ERROR | | >| 49fc2941-f594-4104-b86c-f708e5e415b9 | fedora | BUILD | | >+--------------------------------------+--------+--------+----------+ >[tuser1@interceptor ~(keystone_user1)]$ nova list >+--------------------------------------+--------+--------+----------+ >| ID | Name | Status | Networks | >+--------------------------------------+--------+--------+----------+ >| 49d46adf-28dd-4be9-9630-8ae3505fd662 | fedora | ERROR | | >| 49fc2941-f594-4104-b86c-f708e5e415b9 | fedora | ACTIVE | | >+--------------------------------------+--------+--------+----------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >=> Debugging the above failure, we don't have an IP yet for the guest. > >Install nova-novncproxy, apparantly it's depended: >#=====================# >[root@interceptor tuser1(keystone_user1)]# sudo yum install nova-novncproxy -y > >[root@interceptor tuser1(keystone_user1)]# /etc/init.d/openstack-nova-novncproxy start >Starting openstack-nova-novncproxy: [ OK ] >[root@interceptor tuser1(keystone_user1)]# >#=====================# > > > >[tuser1@interceptor ~(keystone_user1)]$ nova list >+--------------------------------------+---------+--------+-------------------+ >| ID | Name | Status | Networks | >+--------------------------------------+---------+--------+-------------------+ >| b3243d2b-0927-41ab-a482-d1d4e21e5427 | fedora3 | ACTIVE | | >| 11c1997a-b1ff-46ef-b96c-f329576de8d6 | fedora4 | ACTIVE | net1=10.65.207.50 | >+--------------------------------------+---------+--------+-------------------+ >[tuser1@interceptor ~(keystone_user1)]$ > > >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova stop b3243d2b-0927-41ab-a482-d1d4e21e5427 >[tuser1@interceptor ~(keystone_user1)]$ nova delete b3243d2b-0927-41ab-a482-d1d4e21e5427 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > >***[6] Some read-only reconnaisance operations with virsh and qemu-img*** >----------------- > >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo virsh list > Id Name State >---------------------------------------------------- > 2 instance-00000002 running > >[tuser1@interceptor ~(keystone_user1)]$ sudo virt-cat instance-00000002 /var/log/messages | grep 'dhclient.*bound to' >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo virsh domblklist 2 >Target Source >------------------------------------------------ >vda /var/lib/nova/instances/instance-00000002/disk >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ sudo virsh dominfo instance-00000002 >Id: 2 >Name: instance-00000002 >UUID: 49fc2941-f594-4104-b86c-f708e5e415b9 >OS Type: hvm >State: running >CPU(s): 1 >CPU time: 18.5s >Max memory: 2097152 KiB >Used memory: 2097152 KiB >Persistent: yes >Autostart: disable >Managed save: no >Security model: selinux >Security DOI: 0 >Security label: unconfined_u:system_r:svirt_t:s0:c778,c859 (permissive) > >[tuser1@interceptor ~(keystone_user1)]$ >0 bash 1 bash >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ qemu-img info /var/lib/nova/instances/instance-00000002/disk >image: /var/lib/nova/instances/instance-00000002/disk >file format: qcow2 >virtual size: 20G (21474836480 bytes) >disk size: 7.3M >cluster_size: 65536 >backing file: /var/lib/nova/instances/_base/06a057b9c7b0b27e3b496f53d1e88810a0d1d5d3_20 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ qemu-img info /var/lib/nova/instances/_base/06a057b9c7b0b27e3b496f53d1e88810a0d1d5d3_20 >image: /var/lib/nova/instances/_base/06a057b9c7b0b27e3b496f53d1e88810a0d1d5d3_20 >file format: raw >virtual size: 20G (21474836480 bytes) >disk size: 740M >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >=> Network Information <= >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova network-list >+--------------------------------------+-------+-----------------+ >| ID | Label | Cidr | >+--------------------------------------+-------+-----------------+ >| 8fd731f5-f4af-47ad-98c7-9b15c3401f11 | net1 | 10.65.207.48/28 | >+--------------------------------------+-------+-----------------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova-manage network list >Could not read /etc/nova/nova.conf. Re-running with sudo >id IPv4 IPv6 start address DNS1 DNS2 VlanID project uuid >1 10.65.207.48/28 None 10.65.207.50 8.8.4.4 None None None 8fd731f5-f4af-47ad-98c7-9b15c3401f11 >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova network-show 8fd731f5-f4af-47ad-98c7-9b15c3401f11 >+------------+--------------------------------------+ >| Property | Value | >+------------+--------------------------------------+ >| broadcast | 10.65.207.63 | >| cidr | 10.65.207.48/28 | >| cidr_v6 | None | >| dns1 | 8.8.4.4 | >| dns2 | None | >| gateway | 10.65.207.49 | >| gateway_v6 | None | >| id | 8fd731f5-f4af-47ad-98c7-9b15c3401f11 | >| label | net1 | >| netmask | 255.255.255.240 | >| netmask_v6 | None | >+------------+--------------------------------------+ >[tuser1@interceptor ~(keystone_user1)]$ >#=====================# > > >=> All the 'actual configurations' for OpenStack services are stored in : >#=====================# >/usr/share/nova/nova-dist.conf >/usr/share/cinder/cinder-dist.conf >usr/share/glance/openstack-glance-* >#=====================# > > >***[7] ssh into the instance *** > >#=====================# >[tuser1@interceptor ~(keystone_user1)]$ nova list >+--------------------------------------+---------+--------+-------------------+ >| ID | Name | Status | Networks | >+--------------------------------------+---------+--------+-------------------+ >| 11c1997a-b1ff-46ef-b96c-f329576de8d6 | fedora4 | ACTIVE | net1=10.65.207.50 | >+--------------------------------------+---------+--------+-------------------+ >[tuser1@interceptor ~(keystone_user1)]$ > >[tuser1@interceptor ~(keystone_user1)]$ ssh -i oskey.priv root@10.65.207.50 >The authenticity of host '10.65.207.50 (10.65.207.50)' can't be established. >RSA key fingerprint is c6:9f:4b:aa:d5:3e:46:18:d4:7c:ce:a7:9b:ab:11:87. >Are you sure you want to continue connecting (yes/no)? yes >Warning: Permanently added '10.65.207.50' (RSA) to the list of known hosts. >reverse mapping checking getaddrinfo for dhcp207-50.lab.eng.pnq.redhat.com [10.65.207.50] failed - POSSIBLE BREAK-IN ATTEMPT! >[root@fedora4 ~]# >
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=699394">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 909137
: 699394