OpenStack

• OpenStack
• Mailing lists
• Complete list
  
• General list
• Markmail
  
• OpenStack Python SDK
• Python APIs: The best-kept secret of OpenStack (IBM)
• libcloud
• Getting started
• Rootwrap
  

• OpenStack vs AWS
• Desplegament / Deployment
• RDO Project
• PackStack
• Wiki
• stackforge/packstack (github)
  
• Packstack (Google slides)
  
• [Creeu un entorn libvirt / Create a libvirt environment]
  
• Install OS on all nodes and:
  
• disable NetworkManager:
• systemctl stop NetworkManager
• systemctl disable NetworkManager
• temporarily enable access to internet: PackStack will require access to yum repositories from each node
  
• Installation (from controller node)
  
• yum update -y
• yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-kilo/rdo-release-kilo-1.noarch.rpm
• yum install -y http://rdo.fedorapeople.org/openstack-kilo/rdo-release-kilo.rpm
  
• rpms in: https://repos.fedorapeople.org/repos/openstack/openstack-kilo/el7/
  
• yum install -y openstack-packstack
• also installs openstack-puppet-modules
  
• Run modes
  
• All in one node:
• packstack --allinone
• Several nodes (answers file):
• packstack --gen-answer-file packstack-answers.txt
• if needed, replace own ip address in one nic by ip address in another nic:
• sed -i 's/192.168.0.12/192.168.2.191/g' packstack-answers.txt
  
• edit answers file packstack-answers.txt:
• Correspondència:
• What are the NIC in Nova config file used for?

• 	nova.conf	when using:
  CONFIG_NOVA_COMPUTE_PRIVIF	DEFAULT/flat_interface
  CONFIG_NOVA_NETWORK_PUBIF	DEFAULT/public_interface
  CONFIG_NOVA_NETWORK_PRIVIF	DEFAULT/flat_interface	nova.network.manager.FlatDHCPManager nova.network.manager.FlatManager
  	DEFAULT/vlan_interface	nova.network.manager.VlanManager

  
  
• Exemple:
• CONFIG_NEUTRON_INSTALL=y
CONFIG_HEAT_INSTALL=y
CONFIG_TROVE_INSTALL=y
#CONFIG_CEILOMETER_INSTALL=n

CONFIG_CONTROLLER_HOST=192.168.2.191
CONFIG_MARIADB_HOST=192.168.2.191
CONFIG_KEYSTONE_LDAP_URL=ldap://192.168.2.191
CONFIG_MONGODB_HOST=192.168.2.191
CONFIG_REDIS_MASTER_HOST=192.168.2.191

CONFIG_NOVA_COMPUTE_HOSTS=192.168.2.190
CONFIG_NOVA_COMPUTE_PRIVIF=eth1

CONFIG_NETWORK_HOSTS=192.168.2.192
CONFIG_LBAAS_INSTALL=y
CONFIG_NEUTRON_L2_AGENT=openvswitch
CONFIG_NEUTRON_OVS_TUNNEL_IF=eth2

# ML2
CONFIG_NEUTRON_ML2_TYPE_DRIVERS=flat,vlan,gre,vxlan
CONFIG_NEUTRON_ML2_TENANT_NETWORK_TYPES=gre
CONFIG_NEUTRON_ML2_MECHANISM_DRIVERS=openvswitch
CONFIG_NEUTRON_ML2_TUNNEL_ID_RANGES=1:1000
CONFIG_NEUTRON_ML2_FLAT_NETWORKS=external

CONFIG_STORAGE_HOST=192.168.2.193
CONFIG_CINDER_VOLUMES_SIZE=2G
CONFIG_SAHARA_HOST=192.168.2.191

CONFIG_PROVISION_DEMO=n
#CONFIG_PROVISION_DEMO_FLOATRANGE=172.24.4.224/28
• EXCLUDE_SERVERS=<serverIP>,<serverIP>,...
• # still valid?:
CONFIG_NEUTRON_SERVER_HOST=10.15.0.7
CONFIG_NEUTRON_L3_HOSTS=10.15.0.7
CONFIG_NEUTRON_DHCP_HOSTS=10.15.0.7
CONFIG_NEUTRON_LBAAS_HOSTS=10.15.0.7
CONFIG_NEUTRON_METADATA_HOSTS=10.15.0.7
CONFIG_NEUTRON_OVS_TENANT_NETWORK_TYPE=gre
CONFIG_NEUTRON_OVS_TUNNEL_RANGES=1000:3000
CONFIG_NEUTRON_OVS_TUNNEL_IF=eth2
  
• packstack --answer-file packstack-answers.txt
• Problemes
• Error: Could not start Service[httpd]: Execution of '/usr/bin/systemctl start httpd' returned 1: Job for httpd.service failed. See 'systemctl status httpd.service' and 'journalctl -xn' for details.
• Solució / Solution
• yum install php
• Error: Local ip for ovs agent must be set when tunneling is enabled at /var/tmp/packstack/09af05e965264d70bd1cbe4ea172569d/modules/neutron/manifests/agents/ml2/ovs.pp:113 on node network-node...
• #RDO 2 node packstack puupet fails on netron install on compute node with error
  
• Local ip for OVS must be set #107 (puppetlabs/puppetlabs-openstack)
  
• Local ip for ovs agent must be set when tunneling is enabled
• /usr/share/openstack-puppet/modules/neutron/manifests/agents/ml2/ovs.pp (provided by openstack-puppet-modules-2015.1.2-1.el7.noarch)
  
• Interactive mode:
• packstack
• Logs
• /var/tmp/packstack/.../openstack-setup.log
• Config
• /etc/{nova, glance, cinder, neutron ...}
  
• Post-installation checks:
• NTP
  
• controller node
• ./keystonerc_admin
  
• nova list
• neutron net-list
• Fix Horizon:
• Login page: "Something went wrong!"
• Bug 1218894 - Horizon: Re login failed after timeout
• Solució / Solution:
• curl -o openstack-dashboard-2015.1.0-6.el7.noarch.rpm http://cbs.centos.org/kojifiles/packages/python-django-horizon/2015.1.0/6.el7/noarch/openstack-dashboard-2015.1.0-6.el7.noarch.rpm

• curl -o python-django-horizon-2015.1.0-6.el7.noarch.rpm http://cbs.centos.org/kojifiles/packages/python-django-horizon/2015.1.0/6.el7/noarch/python-django-horizon-2015.1.0-6.el7.noarch.rpm
• yum install openstack-dashboard-2015.1.0-6.el7.noarch.rpm python-django-horizon-2015.1.0-6.el7.noarch.rpm
• optional:
• curl -o openstack-dashboard-theme-2015.1.0-6.el7.noarch.rpm http://cbs.centos.org/kojifiles/packages/python-django-horizon/2015.1.0/6.el7/noarch/openstack-dashboard-theme-2015.1.0-6.el7.noarch.rpm
  
• yum install openstack-dashboard-theme-2015.1.0-6.el7.noarch.rpm
• systemctl restart httpd
  
• Allow connection from the "API network"
• /etc/httpd/conf.d/15-horizon_vhost.conf
• ServerAlias 192.168.2.191
  ServerAlias 192.168.0.12
  
• Allowed hosts for Django (not needed any more?)
• sed -i '/^ALLOWED_HOSTS/ s/=.*/= [ "*" ]/' /etc/openstack-dashboard/local_settings

• service httpd restart
  
• Usage (from controller node)
  
• Admin user
• . /root/keystonerc_admin
• Create a disk image
• glance image-create --copy-from http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img --is-public true --container-format bare --disk-format qcow2 --name cirros
• glance image-create --copy-from http://cloud.centos.org/centos/7/images/CentOS-7-x86_64-GenericCloud-1503.qcow2 --is-public true --container-format bare --disk-format qcow2 --name centos7

• glance image-list
  
• Create external network
• neutron net-create ext-net --router:external

• neutron net-list
• neutron subnet-create --disable-dhcp ext-net 172.16.13.0/24
• neutron subnet-list
• real external network (To create the external network):
• neutron net-create ext-net --router:external --provider:physical_network external --provider:network_type flat
• neutron subnet-create ext-net EXTERNAL_NETWORK_CIDR --name ext-subnet \
  --allocation-pool start=FLOATING_IP_START,end=FLOATING_IP_END \
  --disable-dhcp --gateway EXTERNAL_NETWORK_GATEWAY
• neutron subnet-create ext-net 192.168.0.0/24 --name ext-subnet --allocation-pool start=192.168.0.150,end=192.168.0.200 --disable-dhcp --gateway 192.168.0.1
• Create a flavor for testing
• nova flavor-create m1.nano auto 128 1 1
• nova flavor-list
• Create a non-admin user: demo
  
• keystone tenant-create --name demo
• keystone tenant-list
• keystone user-create --name demo --tenant demo --pass demo
• keystone user-list

• /root/keystonerc_demo
• export OS_USERNAME=demo
export OS_TENANT_NAME=demo
export OS_PASSWORD=demo
export OS_AUTH_URL=http://192.168.2.191:35357/v2.0/
export PS1='[\u@\h \W(keystone_demo)]\$ '
  
• Demo user
• . /root/keystonerc_demo
• Create an ssh keypair
• ssh-keygen -t rsa -b 2048 -N '' -f id_rsa_demo
• nova keypair-add --pub-key id_rsa_demo.pub demo
• nova keypair-list
  
• Create tenant networks
• Create a private network:
• neutron net-create net0
• neutron subnet-create --name net0-subnet0 --dns-nameserver 8.8.8.8 net0 10.0.0.0/24
• Create a router and connect it to the private network and the external network:
• neutron router-create extrouter

• neutron router-gateway-set extrouter ext-net

• neutron router-interface-add extrouter net0-subnet0
• neutron net-list
• Create security rules and add them to default security group (ICMP, SSH allowed by default in created instances)
  
• neutron security-group-list
  
• neutron security-group-rule-create --protocol icmp default

• neutron security-group-rule-create --protocol tcp --port-range-min 22 --port-range-max 22 default
• neutron security-group-show default
  
• Booting an instance
• NET_ID=$(nova net-list | awk '/ net0 / { print $2 }')
  
• nova boot --poll --flavor m1.nano --image cirros --nic net-id=$NET_ID --key-name demo test0
• nova list
• nova show test0
• Errors
• compute node: /var/log/nova/nova-compute.log: NovaException: Unexpected vif_type=binding_failed
  
• vm fails with error vif_type=binding_failed using gre tunnels
• Instance fails to spawn with Unexpected vif_type=binding_failed [closed]
  
• Access to the instance (tricky)
• from network node:
• ip netns
• ip netns exec qdhcp... ip addr
• ip netns exec qdhcp... ping 10.0.0.3
• ip netns exec qdhcp... ssh cirros@10.0.0.3
• cirros / cubswin:)
• Access from external network: Floating IP
• Allocate a floating ip address from the external network:
  
• nova floating-ip-create ext-net
• nova floating-ip-list
• Assign it to the new instance:
• nova add-floating-ip test0 172.16.13.3
• Problems with network, from an instance:
• [Errno -1] Package does not match intended download. Suggestion: run yum --enablerepo=updates clean metadata
  Trying other mirror.
• Solution
• MTU is too big for GRE tunnel; you should reduce its size on the instance. DHCP server can do it for you:
• To configure the DHCP agent
• 2. (Optional)
  
• External network connectivity
• Real world
• In our demo:
• ip addr add 172.16.13.1/24 dev br-ex

• iptables -t nat -I POSTROUTING 1 -s 172.16.13.0/24 -j MASQUERADE
• Browser access
•  http://$YOURIP/dashboard
• admin / <keystonerc_admin>
• http://<controller-node-address>/nagios
  
• nagiosadmin / ...
  
• Adding a compute node
• RDO: Multinode OpenStack using Packstack (YouTube) (slides)
• packstack ...

• Neutron with existing external network
  
• Creating CentOS and Fedora images ready for Openstack
• Mageia
• urpmi virt-manager libguestfs-tools
  
• virt-manager
• New virtual machine
• network: ftp://ftp.cesca.cat/centos/7/os/x86_64/
• DVD image: ...iso
• name: centos7
  
• start
• ip a
• ifup eth0
• yum install http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm
• yum -y update
• snapshot from physical computer
• virsh snapshot-create-as centos7 fresh_install "Fresh Centos7 install" --atomic --reuse-external
• install rdo on virtual machine:
• yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-kilo/rdo-release-kilo-1.noarch.rpm
• clone image
• # virt-sysprep -d centos7
• clone
• network:
• physical
• Connection details -> Virtual networks
  
• Add: "data", 192.169.100.0/24, Isolated virtual network
  
• virtual:
• Add hardware
• Network
• Virtual network "data"
• Device model: "virtio" (to have "ethX" instead of "ens9")
  
• add fixed network entry for controller (from physical computer):
• sudo virsh net-update data add-last ip-dhcp-host --xml "<host mac='`sudo virsh domiflist centos7-controller|grep data|awk '{print $5}'`' ip='192.168.100.10'/>" --live --config
• Multi-node Openstack with Neutron with libvirt, netsted kvm, virt-manager and qcow2 images
• Appendix A. Removing PackStack Deployments
• Red Hat Enterprise Linux OpenStack Platform. Getting Started Guide
  
• Part III. Deploying OpenStack using PackStack
• 5
• 6
• 6.2. Running PackStack Interactively
  
• DevStack (automatically create an OpenStack infrastructure for development)
  
• openstack-dev/devstack (github)
• FAQ
• VirtualBox

• VirtualBox network		VirtualBox instance network	OpenStack
  	host			Single Node
  Bridged	192.168.0.x	Adapter type: virtio-net Promiscuous mode: allow all	management network	Adapter 1 (eth0): BOOTPROTO=none IPADDR0=192.168.0.201 PREFIX0=24 DEFROUTE=yes GATEWAY0=192.168.0.1 DNS1=192.168.0.1 ONBOOT=yes USERCTL=no
  			external network	Adapter 2 (eth1): BOOTPROTO=none DEFROUTE=no ONBOOT=yes USERCTL=no

• Passos / Steps
1. su
2. [adduser stack; password stack]
3. apt-get install sudo -y || yum install -y sudo
   
4. echo "stack ALL=(ALL) NOPASSWD: ALL" >> /etc/sudoers
5. disable firewall:
• sudo service iptables save
  sudo systemctl disable firewalld
  sudo systemctl enable iptables
  sudo systemctl stop firewalld
  sudo systemctl start iptables
  
6. (login as stack)
   
7. sudo apt-get install git -y || sudo yum install -y git
   
8. git clone https://git.openstack.org/openstack-dev/devstack
9. cd devstack
10. cp samples/local.conf .
    
11. local.conf
• Q: How do I run a specific OpenStack milestone?
• [[local|localrc]]
CINDER_BRANCH=master
GLANCE_BRANCH=master
HORIZON_BRANCH=master
KEYSTONE_BRANCH=master
KEYSTONECLIENT_BRANCH=master
NOVA_BRANCH=master
NOVACLIENT_BRANCH=master
NEUTRON_BRANCH=master
SWIFT_BRANCH=master
  
• nova network
• [[local|localrc]]
FLOATING_RANGE=192.168.0.224/27
FIXED_RANGE=10.0.0.0/24
FIXED_NETWORK_SIZE=256
FLAT_INTERFACE=eth0
• Neutron
• Using DevStack with Neutron Networking
• [[local|localrc]]
FLOATING_RANGE=192.168.0.224/27
FIXED_RANGE=10.0.0.0/24
PUBLIC_NETWORK_GATEWAY=192.168.0.1
disable_service n-net
enable_service q-svc
enable_service q-agt
enable_service q-dhcp
enable_service q-meta
enable_service q-l3
Q_USE_SECGROUP=True
ENABLE_TENANT_VLANS=True
TENANT_VLAN_RANGE=1000:1999
PHYSICAL_NETWORK=default
OVS_PHYSICAL_BRIDGE=br-ex
  
• Manila
  
• Configure Load-Balancer in Kilo
• Multi-host
  
12. ./stack.sh
13. http://.../
    
14. ./unstack.sh
    
• Serveis / Services

• 	openstack endpoint create
  	--publicurl	--internalurl	--adminurl		conf file
  keystone	http://$CONTROLLER_NAME:5000/v2.0		http://$CONTROLLER_NAME:35357/v2.0	identity
  glance	http://$CONTROLLER_NAME:9292			image
  nova	http://$CONTROLLER_NAME:8774/v2/%\(tenant_id\)s			compute
  neutron	http://$CONTROLLER_NAME:9696			network
  cinder	http://$CONTROLLER_NAME:8776/v2/%\(tenant_id\)s			volume
  	http://$CONTROLLER_NAME:8776/v2/%\(tenant_id\)s			volumev2
  heat	http://$CONTROLLER_NAME:8004/v1/%\(tenant_id\)s			orchestration
  	http://$CONTROLLER_NAME:8000/v1			cloudformation
  ceilometer	http://$CONTROLLER_NAME:8777			metering
  trove	http://$CONTROLLER_NAME:8779/v1.0/%\(tenant_id\)s			database
  designate	http://$CONTROLLER_NAME:9001			dns

  
  
• Endpoint
• admin
• source admin-openrc.sh
• openstack endpoint list
• openstack endpoint show ...
• request
• credentials
• admin-opensrc.sh
• export OS_USERNAME=admin
  export OS_PASSWORD=...
  export OS_AUTH_URL=http://controller-node:35357/v3
  export OS_TENANT_NAME=admin
• myuser-opensrc.sh
• export OS_USERNAME=my_user
  export OS_PASSWORD=...
  export OS_AUTH_URL=http://controller-node:5000/v3
  export OS_TENANT_NAME=my_tenant_name
  
• Python
• Option 1:
• my_user.sh
• export OS_PROJECT_DOMAIN_ID=default
export OS_USER_DOMAIN_ID=default
export OS_PROJECT_NAME=my_tenant
export OS_TENANT_NAME=my_tenant
export OS_USERNAME=my_user
export OS_PASSWORD=my_password
export OS_AUTH_URL=http://controller-node:5000/v3
  
• utils_keystone.py
• import logging
from keystoneclient import session as ks_session
from keystoneclient.auth.identity import generic
from designateclient.v1 import Client
from designateclient.v1.records import Record
from django.conf import settings
logger = logging.getLogger(__name__)
def _get_keystone_session():
    """
    Connect to Keystone and get a session.
    """
    session = ks_session.Session()
    auth_args = {
        'auth_url': os.environ['OS_AUTH_URL'],
        'domain_id': '',
        'domain_name': '',
        'project_id': '',
        'project_name': os.environ['OS_TENANT_NAME'],
        'project_domain_name': '',
        'project_domain_id': os.environ['OS_PROJECT_DOMAIN_ID'],
    }
    auth_args.update({
        'username': os.environ['OS_USERNAME'],
        'user_id': '',
        'password': os.environ['OS_PASSWORD'],
        'user_domain_id': os.environ['OS_USER_DOMAIN_ID'],
        'user_domain_name': '',
    })
    session.auth = generic.Password(**auth_args)
    session.all_tenants = False
    session.edit_managed = False
    return session
def _get_designate_client():
    """
    Get a Designate client
    """    
    session = _get_keystone_session()    
    region_name=''
    service_type='dns'
    all_tenants=False
    edit_managed=False    
    client = Client(
                region_name=region_name,
                service_type=service_type,
                session=session,
                all_tenants=all_tenants,
                edit_managed=edit_managed
                )
    return client    
def designate_get_domains():
    """
    Get all domains in Designate.
    """
    client = _get_designate_client()
    return client.domains.list()
def designate_create_a_record(name, data):
    """
    Add an A record to the default domain.
    """
    try:
        client = _get_designate_client()
        domain_id = settings.DESIGNATE['DEFAULT_DOMAIN_ID']
        # Create a new Record object
        record_name = "%s.%s" % (name, settings.DESIGNATE['DEFAULT_DOMAIN'])
        record = Record(name=record_name, type="A", data=data)        
        # Send the Create Record API call
        record = client.records.create(domain_id, record)
        logger.debug("[designate_create_a_record] Successfully created A record: %s -> %s" % (record_name, data))
    except Exception as e:
        logger.error("[designate_create_a_record] Error: %s" % e)
        raise e    
def designate_delete_a_record(name):
    """
    Remove an A record from the default domain.
    """
    try:
        client = _get_designate_client()
        domain_id = settings.DESIGNATE['DEFAULT_DOMAIN_ID']
        # Create a new Record object
        record_name = "%s.%s" % (name, settings.DESIGNATE['DEFAULT_DOMAIN'])        
        # get the record_id
        record_id = None
        records = client.records.list(domain_id)
        for record in records:
            logger.debug("[designate_delete_a_record] record: %s"% record)
            if record_name==record.name:
                record_id = record.id
                break        
        # Send the Create Record API call
        if record_id:
            record = client.records.delete(domain_id, record_id)
            logger.debug("[designate_create_a_record] Successfully removed A record: %s" % (record_name))
        else:
            raise Exception("Record %s not found"% record_name)        
    except Exception as e:
        logger.error("[designate_delete_a_record] Error: %s" % e)
        raise e

  
• Option 2:
• credentials.py
• #!/usr/bin/env python
import os
def get_keystone_creds():
    d = {}
    d['username'] = os.environ['OS_USERNAME']
    d['password'] = os.environ['OS_PASSWORD']
    d['auth_url'] = os.environ['OS_AUTH_URL']
    d['tenant_name'] = os.environ['OS_TENANT_NAME']
    return d
def get_nova_creds():
    d = {}
    d['username'] = os.environ['OS_USERNAME']
    d['api_key'] = os.environ['OS_PASSWORD']
    d['auth_url'] = os.environ['OS_AUTH_URL']
    d['project_id'] = os.environ['OS_TENANT_NAME']
    return d
  
• my_file.py
• from credentials import get_keystone_creds
import keystoneclient.v2_0.client as ksclient
creds = get_keystone_creds()
keystone = ksclient.Client(**creds)
designate_endpoint = keystone.service_catalog.url_for(service_type='dns',
                                                   endpoint_type='publicURL')
• ...
• curl
• curl -X GET http://controller-node:5000 | python -m json.tool
• curl -X GET http://controller-node:9292 | python -m json.tool
  
• Problemes / Problems
  
• WARNING: [...] Configuring admin URI using auth fragments. This is deprecated, use 'identity_uri' instead.
• Solució / Solution
• Identity_uri in Auth Token Middleware
• WARNING keystonemiddleware.auth_token [-] Configuring auth_uri to point to the public identity endpoint is required; clients may not be able to authenticate against an admin endpoint
• Solució / Solution
  
• Identity
• Keystone
• Problemes / Problems
• /var/log/httpd/keystone_wsgi_main_error.log
• Target WSGI script '/var/www/cgi-bin/keystone/main' cannot be loaded as Python module.
• raise exception.ConfigFileNotFound(config_file=paste_config_value)
  [...] ConfigFileNotFound: An unexpected error prevented the server from fulfilling your request.
  [...]
  ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option
• /var/log/httpd/keystone_wsgi_admin_error.log
• Target WSGI script '/var/www/cgi-bin/keystone/admin' cannot be loaded as Python module.
• raise exception.ConfigFileNotFound(config_file=paste_config_value)
  [...] ConfigFileNotFound: An unexpected error prevented the server from fulfilling your request.
  [...]
  ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option
• Solution
• Bug 1174795 - keystone fails to start: raise exception.ConfigFileNotFound(config_file=paste_config_value)
• You should only have oslo.config installed from yum/rpm, and not from pip:
• pip uninstall oslo.config
• yum reinstall python-oslo-config
  
• Compute
• Nova
• nova host list
• nova host-describe ...
• usage:
  
• nova hypervisor-stats
• nova hypervisor-list
• nova hypervisor-show 1
• Problems
• Nova hypervisor-stats returns wrong data (bug #1326147)
  
• Deleted hypervisors are wrongly taken into account
  
• Solution
• Remove Old or Failed Hosts from Openstack
  
• from controller node:
  
• mysql -u root -p
• use nova;
• identify the deleted compute node (with id=xx) and delete it:
  
• SELECT id,deleted,deleted_at,vcpus,memory_mb FROM compute_nodes;
  
• DELETE FROM compute_nodes WHERE id=xx;
• identify the deleted compute node (with id=yy) and delete it:
• SELECT * FROM services;
• DELETE FROM services WHERE id=yy;
• check that all is ok now:
• nova hypervisor-stats
• Dashboard
• Horizon
• /usr/share/openstack-dashboard/
  
• Database
• Trove
• Creation of Trove-Compatible Images for RDO
• diskimage-builder
• trove-image-elements
• Problems
• DB instance goes into ERROR state when trove setup with devstack
• Trove instance error status with poll time out error
• Solution
• check that Cinder is working
• ...
  
• DNS
• Designate
• Components (architecture)

• component	command	systemctl start
  Designate API	designate-api	designate-api.service
  Designate Central	designate-central	designate-central.service
  Designate MiniDNS	designate-mdns	designate-mdns.service
  Designate Pool Manager	designate-pool-manager	designate-pool-manager.service

  
  
• Installation
• Install Bind
• Designate, a DNSaaS component for OpenStack
• Development Environment on Ubuntu
• Installing Kilo on Ubuntu
  
• BIND9 Backend
  
• Designate workshop
• Designate/Atlanta/Workshop 1
  
• RPM
• ftp://ftp.muug.mb.ca/mirror/fedora/linux/development/rawhide/i386/os/Packages/
• openstack-designate-agent-2015.1.0-2.fc23.noarch.rpm
• openstack-designate-api-2015.1.0-2.fc23.noarch.rpm
• openstack-designate-central-2015.1.0-2.fc23.noarch.rpm
• openstack-designate-common-2015.1.0-2.fc23.noarch.rpm
• openstack-designate-mdns-2015.1.0-2.fc23.noarch.rpm
• openstack-designate-pool-manager-2015.1.0-2.fc23.noarch.rpm
• openstack-designate-sink-2015.1.0-2.fc23.noarch.rpm
• python-designate-2015.1.0-2.fc23.noarch.rpm
• Development Environment on Ubuntu
• openstack user create --password $DESIGNATE_PASS designate
openstack role add --project service --user designate admin
openstack service create --name designate \
  --description "OpenStack DNS service" dns
openstack endpoint create \
  --publicurl http://controller:9001 \
  --internalurl http://controller:9001 \
  --adminurl http://controller:9001 \
  --region RegionOne \
  dns
# Python client
yum install python-designateclient
  
• Getting started (readthedocs)
  
• Backends
• Bind
• PowerDNS
• ...
  
• CLI
• yum install python-designateclient
• Docs
  
• setup server
• designate server-create --name ns1.mysubdomain.mydomain.org.
• designate server-list
• don't forget to add an A record for ns1.mysubdomain.mydomain.org.
• designate-dashboard
• README.rst
• cd designate-dashboard
• python setup.py install
  
• /usr/share/openstack-dashboard/openstack_dashboard/settings.py
•     import designatedashboard.enabled    # ADD THIS LINE
    ...
    INSTALLED_APPS = list(INSTALLED_APPS)  # Make sure it's mutable
    settings.update_dashboards([
       openstack_dashboard.enabled,
       openstack_dashboard.local.enabled,
       designatedashboard.enabled,      # ADD THIS LINE TOO
    ], HORIZON_CONFIG, INSTALLED_APPS)
  
• Usage
• CLI
• How To Create and Manage Domains
• REST
• REST API Documentation
  
• Secondary zones
  
• Network
• Neutron
• Diagrames / Diagrams
• ...
• ...
  

  ip netns	ip netns exec q... ip addr		network	router	grep Assigning /var/log/neutron/openvswitch-agent.log
  	ovs-vsctl list-ports br-int				network ID	vlan
  qdhcp-0aa9a0c6-72aa-490a-a31a-cc589d22eefb	13: tapa3892e32-d4	10.0.0.2/24	demo-net		0aa9a0c6-72aa-490a-a31a-cc589d22eefb	4
  qrouter-4fac1a12-8716-44e1-b379-10cd7577f23a	8: qg-acd45006-c9	83.10.2.180/24	ext-net + floating IPs	demo-router	06d4ec1d-cb19-46cb-a29c-ab1e9c6e7198	2
  	12: qr-964c592d-0e	10.0.0.1/24	demo-net
  qdhcp-cf8ad94e-8b9a-4973-ac53-0f303dac281f	9: tapf3c8bbd8-4e	10.0.1.2/24	user-net		cf8ad94e-8b9a-4973-ac53-0f303dac281f	1
  qdhcp-86618f27-5593-4528-8fd2-5fc3e077aa12	18: tapb480367e-01	10.254.0.2/28	manila_service_network		86618f27-5593-4528-8fd2-5fc3e077aa12	3
  qrouter-c58720bc-2af7-41ed-a62b-e5060b88d13c	11: qg-6f8c4e89-f9	83.10.2.183/24 83.10.2.187/32 83.10.2.185/32 83.10.2.181/32 83.10.2.189/32 83.10.2.184/32 83.10.2.186/32	ext-net + floating IPs	user-router
  	14: qr-825c2f90-e0	10.0.1.1/24	user-net
  	19: qr-bd9fc043-65	10.254.0.1/28	manila_service_network

• Info
• ovs-vsctl show
  
• Problemes
• RDO Networking: Common issues
• ip netns exec qdhcp-cf8ad94e-8b9a-4973-ac53-0f303dac281f ping 10.0.1.87 -> "Destination Host Unreachable"
• Solution
• check that all is correct (specially IP addresses) running in network node:
• ovs-vsctl show
  
• Orchestration
• Heat
• Autoscaling
• Autoscaling with Heat on Devstack
• Autoscaling with Heat and Ceilometer
  
• Storage
• Introduction To Object Storage

• 						examples
  	description	accessible from	organisation	structure	protocols	OpenStack	other
  block storage	filesystem	single OS	directory tree	hierarchical	SAN iSCSI local disks JBOD RAID	Cinder
  file storage	external, mounted locally	several OS			NFS CIFS	Manila	NAS
  object storage	external	application	containers	flat	API	Swift	Public Amazon S3 Rackspace Cloud Files Private EMC Atmos

  
  
• 5 Reasons to Use Object Storage Instead of NAS for Private Clouds
• Difference between Object Storage And File Storage
• Block storage (Cinder)
  
• /usr/lib/python2.7/site-packages/cinder/volume/drivers/
  
• NFS
• Configure an NFS storage back end
• Problemes / Problems
  
• Permission denied (root)
  
• cannot create a volume when root squash is set to on for gluster storage 
• [Openstack] Cinder and NFS: permission denied when creating a volume (31st July 2015)
  
• [openstack-dev] [cinder] NFS mount as cinder user instead of root (2nd October 2015)
• [openstack-dev] [cinder] NFS mount as cinder user instead of root
• /etc/cinder/cinder.conf (in storage node):
  
• nas_secure_file_permissions = true
nas_secure_file_operations = true
• OSError: [Errno 13] Permission denied: '/var/lock/cinder'
• Solució / Solution:
  
• mkdir /var/lock/cinder
• chown cinder.cinder /var/lock/cinder
• Fujitsu Eternus DX
• FUJITSU ETERNUS DX iSCSI and FC drivers
• ETERNUS DX for OpenStack cloud solution
• Configuration guide (NFS) (pdf)
• 1.1 Unified configuration
• SAN +NAS
  
• ETERNUS DX for OpenStack cloud solution
• Kilo
• Removing Fujitsu driver for no reported CI
  
• [RFE] Request for Integration of Fujitsu ETERNUS Cinder driver [NEEDINFO]
• cinder.conf
• /etc/cinder/cinder_fujitsu_eternus_dx.xml
  
• Previous versions
• ETERNUS OpenStack VolumeDriver
• ETERNUS OpenStack VolumeDriver 1.1 User’s Guide (pdf)
• FUJITSU ETERNUS DX iSCSI and FC drivers
• cinder.volume.drivers.fujitsu_eternus_dx_common Namespace Reference
  
• Manila
• KiloDevstack
• Presentation (pdf)
  
• Manage and unmanage shares
• "add existing NAS": driver_manage_share_servers = False
• Installation
• Quick start
  

• 	Cinder	Manila
  controller	cinder-api cinder-scheduler	manila-api manil-scheduler
  compute		manila-share
  network storage	cinder-volume	cinder-volume

  
  
• RPM
• https://repos.fedorapeople.org/repos/openstack/openstack-kilo/el7/
• Openstack Manila Multi-Node setup
• Examples of config:
• controller node (manila-api, manila-scheduler)
  
• /etc/manila/manila.conf
• ...
  
• compute node (manila-share):
• /etc/manila/manila.conf
• example from http://docs.openstack.org/developer/manila/adminref/quick_start.html#basic-configuration-of-manila
• plus the following
• ...
• Setup
• create a default share type:
• source admin-openrc.sh

• manila service-list

• manila type-create default_share_type True

• manila type-list
• create a share network:
• source demo-openrc.sh

• neutron net-list

• SHARE_NETWORK_NAME=demo_share_network

• DEMO_NET_ID=$(neutron net-list | awk '/ demo-net / { print $2 }')

• DEMO_SUBNET_ID=$(neutron net-list | awk '/ demo-net / { print $6 }')

• manila share-network-create \
    --name $SHARE_NETWORK_NAME \
    --neutron-net-id $DEMO_NET_ID \
    --neutron-subnet-id $DEMO_SUBNET_ID

• manila share-network-list
  
• create a share:
  
• SHARE_NAME=demoshare
  
• manila create NFS 1 --name $SHARE_NAME --share-network $SHARE_NETWORK_NAME

• manila access-allow $SHARE_NAME ip 0.0.0.0/0 --access-level rw

• manila list
• Usage
• ...
• Problemes / Problems
• [Openstack] [manila] Cannot access Manila instance from compute node
  
• Components and nodes where services run (should not be virtualized):
  

  		conf	logs	systemctl	controller	network	compute
  common				ntpd.service	x	x	x
  				mariadb.service	x
  				rabbitmq-server.service	x
  keystone		/etc/keystone/keystone.conf		memcached.service	x
  				httpd.service	x
  glance		/etc/glance/glance-api.conf /etc/glance/glance-registry.conf		openstack-glance-api.service	x
  				openstack-glance-registry.service	x
  nova		/etc/nova/nova.conf		openstack-nova-api.service	x
  	nova service-list			openstack-nova-cert.service	x
  	nova service-list			openstack-nova-consoleauth.service	x
  	nova service-list			openstack-nova-scheduler.service	x
  	nova service-list			openstack-nova-conductor.service	x
  				openstack-nova-novncproxy.service	x
  				libvirtd.service			x
  	nova service-list	/etc/nova/nova.conf		openstack-nova-compute.service			x
  neutron		/etc/neutron/neutron.conf /etc/neutron/plugins/ml2/ml2_conf.ini		neutron-server.service	x
  				openvswitch.service			x
  	neutron agent-list			neutron-openvswitch-agent.service		x	x
  		/etc/neutron/l3_agent.ini		neutron-l3-agent.service		x
  		/etc/neutron/dhcp_agent.ini		neutron-dhcp-agent.service		x
  		/etc/neutron/metadata_agent.ini		neutron-metadata-agent.service		x
  				neutron-ovs-cleanup.service		x
  dashboard		/etc/openstack-dashboard/local_settings		httpd.service	x
  				memcached.service	x

  
  

• 					Node					Notes
  					Controller	Compute	Network	Block Storage	Object Storage
  								[1-]	[2-]
  	Networks	management network			x	x	x	x	x
  		tunnel network				x	x
  		storage network				x		[x]	[x]
  		external network					x
  Project / Component			base	customize	SQL Database Service MySQL Database Service Cache Memcached Message Queue RabbitMQ Qpid ZeroMQ HAProxy Pacemaker Network Time Service NTP	queue SQL database	Pacemaker
  Dashboard		Horizon	Django	*	httpd
  Compute		Nova		*	Compute Management API nova-api / nova-api-metadata Compute core nova-scheduler nova-conductor Networking for VMs ?(nova-network) Console interface nova-consoleauth nova-novncproxy (VNC) nova-spicehtml5proxy (SPICE) nova-xvpnvncproxy (VNC) nova-cert (x509) Image management (Ec2 scenario) nova-objectstore euca2ools CLI clients nova	KVM Hypervisor Compute core nova-compute Compute Networking ?(nova-network)				CirrOS
  	Bare Metal Provisioning	Ironic
  Storage	Object storage	Swift	Paste	*	[Object Storage Proxy Service] swift-proxy				Object Storage Account Service Object Storage Container Service Object Storage Object Service swift-objects
  	Block Storage	Cinder			[Block Storage Management] cinder-api cinder-scheduler cinder-volume			iSCSI Target Service Block Storage Volume Service cinder-volume
  	Shared Filesystems	Manila
  Networking		Neutron			Networking Management neutron-server Networking ML2 Plug-in	Open vSwitch Networking ML2 Plug-in Networking Open vSwitch Agent neutron-openvswitch-agent	Open vSwitch Networking MP2 Plug-in Networking Open vSwitch Agent neutron-openvswitch-agent Networking L3 Agent neutron-l3-agent Networking DHCP Agent neutron-dhcp-agent Networking Metadata Agent neutron-metadata-agent
  	DNS	Designate
  		Neutron/LBaaS
  Shared services	Identity service	Keystone			Identity keystone
  	Key management	Barbican
  	Image service	Glance			Image Service glance-api glance-registry backends file /var/lib/glance/images				glance-volume
  	Telemetry service	Ceilometer			[Telemetry Management] [Telemetry Agent(s)]	[Telemetry agent]		[Telemetry agent]
  	Orchestration service	Heat			[Orchestration]
  		TripleO (OpenStack on OpenStack)
  	Database service	Trove			[Data Processing Service]
  	Data processing	Sahara (Hadoop, Spark)
  	Message service	Zaqar
  	Marketplace

• Documentació / Documentation
  

• 							services
  			info	architecture	hardware / infrastructure	management	identity	image	compute	network	dashboard	block storage	object storage	shared filesystem	telemetry	database	orchestration	data processing	DNS	messaging
  Wiki							Keystone	Glance	Nova	Neutron LBaaS	Horizon	Cinder	Swift	Manila KiloDevstack	Ceilometer	Trove	Heat Autoscaling	Sahara	Designate	Zaqar
  Configuration Guides / Operations and Administration Guides	Architecture Design Guide		*	2. General purpose 6. Multi-site 7. Hybrid 8. Massive scalable 9. Specialized cases					3. Compute focused	5. Network focused (CDN, VoIP...)		4. Storage focused
  	Configuration Reference (config files)		*			A. Firewalls and default ports	7. Identity service	8. Image service	3. Compute	9. Networking	4. Dashboard	2. Block Storage Volume drivers NFS driver	10. Object Storage		12. Telemetry	5. Database service	11. Orchestration	6. Data processing service
  	Cloud Administration Guide		*	1. Get started Conceptual architecture Logical architecture Services			1. Get started Identity service 2. Identity management	1. Get started Image service	1. Get started Compute service 4. Compute	1. Get started Networking service 7. Networking intro: LBaaS... plugin config agents config: LBaaS... architecture scenarios: vSwitch...	1. Get started Dashboard service 3. Dashboard	1. Get started Block Storage service 6. Block Storage  Configure an NFS storage backend	1. Get started Object storage service 5. Object Storage		1. Get started Telemetry module 8. Telemetry hypervisors network	1. Get started Database service 9. Database	1. Get started Orchestration module 10. Orchestration	1. Get started Data processing service
  	High Availability Guide
  	Networking guide									x
  	Operations Guide	Architecture	*	1. Examples Architectures (availability, scalability)	2. Provisioning and Deployment 5. Scaling	3. Designing for Cloud Controllers and Cloud Management			4. Compute Nodes Overcommit: CPU (cpu_allocation_ratio): 16:1 RAM (ram_allocation_ratio): 1.5:1	7. Network Design		6. Storage Decisions
  		Operations			14. Backup and Recovery		9. Managing Projects and Users 10. User-facing operations: Security groups, Associating Security groups	10. User-facing operations: Images, Taking snapshots	10. User-facing operations: Flavors, Instances, Instances in the database 15. Customization: Nova	10. User-facing operations: FloatingIPs 12. Network Troubleshooting	15. Customization: Horizon	10. User-facing operations: Block Storage, Attaching Block Storage	15. Customization: Swift		13. Logging and monitoring
  	Security Guide
  	Virtual Machine Image Guide							*
  Install guides	Installation Guide for Red Hat Enterprise Linux 7, CentOS 7, and Fedora 20		*	1. Architecture	2. Basic environment		3. Add the Identity service	4. Add the Image service	5. Add the Compute service 14. Launch an instance	6. Add a networking component	7. Add the dashboard	8. Add the Block Storage service	9. Add Object Storage		11. Add the Telemetry module	12. Add the Database service (kilo draft)	10. Add the Orchestration module	13. Add the Data processing service
  	Installation Guide for Ubuntu 14.04 (LTS)
  	Installation Guide for openSUSE 13.1 and SUSE Linux Enterprise Server 11 SP3
  User Guides	API Quick Start
  	End User Guide	1. Dashboard						Upload and manage images	Launch and manage instances	Create and manage networks	Log in to the dashboard	Create and manage volumes	Create and manage object containers			Create and manage databases	Launch and manage stacks
  		2. Command-line clients (cheat sheet)					Configure access and security for instances	Manage images Use snapshots to migrate instances	Launch instances Manage instances and hosts (Floating IPs) Provide user-data to instances	Create and manage networks		Manage volumes	Manage objects and containers		Measure cloud resources	Create and manage databases	Create and manage stacks
  		3. Python SDK					python-keystoneclient Configure access and security for instances	python-glanceclient Manage images	python-novaclient Compute	python-neutronclient Networking			Assign CORS headers to requests Schedule objects for deletion						python-designateclient Python bindings
  		4. HOT Guide															4. HOT Guide
  	Admin User Guide	1. Dashboard
  		2. CLI				Manage services	Manage projects, users and roles	Manage images	Manage flavors			Manage volumes							How To Create and Manage Domains
  	Open source software for application development
  	Command-line Interface Reference
  Contributor Guides	Developer	services					Keystone Barbican (key)	Glance	Nova Ironic	Neutron	Horizon	Cinder	Swift	Manila	Ceilometer	Trove Building guest images	Heat	Sahara	Designate	Zaqar
  		Official CLI (Reference manual)								8. Networking command-line client (neutron)			python-swiftclient
  		API							Compute API v2.1 (EXPERIMENTAL) Compute API v2 (CURRENT)	Networking API v2.0 (CURRENT)		Block Storage API v2			Telemetry API v2 (CURRENT)				REST API Documentation
  	Source	Git							openstack/nova	openstack/neutron openstack/neutron-lbaas	openstack/horizon	openstack/cinder		openstack/manila devstack/plugin.sh		openstack/trove			openstack/designate openstack/designate-dashboard
  	Issues (bugs)	Launchpad										Cinder		Manila
  				architecture	infrastructure	management	identity	image	compute	network	dashboard	block storage	object storage	shared filesystem	telemetry	database	orchestration	data processing	DNS	messaging

  
  

• 		list	create	retrieve	update	delete
  identity
  network	net	neutron net-list	neutron net-create ext-net --router:external \ --provider:physical_network external --provider:network_type flat neutron net-create demo-net	neutron net-show ext-net neutron net-show demo-net		neutron net-delete ext-net neutron net-delete demo-net
  	subnet	neutron subnet-list	neutron subnet-create ext-net EXTERNAL_NETWORK_CIDR --name ext-subnet \   --allocation-pool start=FLOATING_IP_START,end=FLOATING_IP_END \   --disable-dhcp --gateway EXTERNAL_NETWORK_GATEWAY neutron subnet-create demo-net TENANT_NETWORK_CIDR \   --name demo-subnet --gateway TENANT_NETWORK_GATEWAY	neutron subnet-show ext-subnet neutron subnet-show demo-subnet	neutron subnet-update ext-subnet --name="ext-subnet-new" neutron subnet-update ext-subnet --allocation-pool start=195.10.2.180,end=195.10.2.190	neutron subnet-delete ext-subnet neutron subnet-delete demo-subnet
  	router	neutron router-list	neutron router-create demo-router neutron router-interface-add demo-router demo-subnet neutron router-gateway-set demo-router ext-net	neutron router-show demo-router		neutron router-gateway-clear demo-router neutron router-interface-delete demo-router demo-subnet neutron router-delete demo-router
  image		nova image-list
  compute	keypair	nova keypair-list	ssh-keygen -t rsa -b 2048 -N '' -f ~/.ssh/keys/id_rsa_demo nova keypair-add --pub-key id_rsa_demo.pub demo-key [nova keypair-add demo-key]		nova keypair-delete demo-key
  	flavor	nova flavor-list
  	security group	nova secgroup-list
  	instance	nova list	DEMO_NET_ID=$(nova net-list | awk '/ demo-net / { print $2 }') nova boot --flavor m1.tiny --image cirros-0.3.4-x86_64 --nic net-id=$DEMO_NET_ID \ --security-group default --key-name demo-key demo-instance1	nova show demo-instance1		nova stop demo-instance1 nova delete demo-instance1

  
  
• OpenStack Operations Guide
• Architecture
1. Example architectures
• Legacy Networking (nova)
  
• OpenStack Networking (neutron)
  
• Table 1.1, “Node types”
• Example hardware
  
• Table 1.3, “OpenStack component configuration”
• Availability, Scalability
• Figure 1.5, “Network node”
• network-01, network-02
  
2. Provisioning and deployment
• Automated Deployment
• Automated Configuration
• Puppet, Chef, Juju, ...
• Remote management
• IPMI (out-of-band management)
  
3. Designing for Cloud Controllers and Cloud Management
• Separation of services (Table 3.2)
  
4. Compute nodes
• Choosing a CPU (support for virtualization?)
• Choosing a Hypervisor
• Instance Storage Solutions
  

• 	shared files ystem	non-shared file system
  on compute	x	x
  off compute	x

• Issues with Live Migration (KVM live block migration)
• Choice of distributed file system: NFS, GlusterFS, MooseFS, Lustre
• Overcommiting: VM = (OR*PC)/VC
  
5. Scaling
• Table 5.1, “OpenStack default flavors”
• Segregating Your Cloud: cells, regions, availability zones, host aggregates
  
6. Storage Decisions
   
7. Network Design
   
• Operations
8. Lay of the land
9. ...
• OpenStack Cloud Administration Guide
• 4. Compute
• Troubleshoot Compute
• 7. Networking
• Introduction to Networking
  
• Load-Balancer-as-a-Service (LBaaS) overview
• Plug-in configurations
• Configure neutron agents
• Configure Load-Balancer-as-a-Service (LBaaS)
  
• Architecture Design Guide
• 5. Network focused (CDN, video conference, HPC, ...)
• Is OpenStack Object Store a Base for a Video CDN?
• 7. Hybrid (private - public)
  
• OpenStack Configuration Reference
• 2. Block Storage
• Fujitsu Eternus
  
• DevStack
  
• All-in-one single machine
  
• Development
• API
• Using Curl to Interact with a RESTful API
  
• Create an OpenStack instance with just Curl
1. curl -d '{"auth":{"passwordCredentials":{"username": "demo", "password": "demo_password"},"tenantName": "demo"}}' -H "Content-Type: application/json" http://controller:5000/v2.0/tokens | python -m json.tool
2. alternatively: use a file with credentials
   
• credentials.json
• {
    "auth": {
        "passwordCredentials": {
            "password": "demo_password",
            "username": "demo"
        },
        "tenantName": "demo"
    }
}
  
• curl -d @credentials.json -H "Content-Type: application/json" http://controller:5000/v2.0/tokens | python -m json.tool > response.json

3. inspect response.json file and note access.token.id: it will be used as Token_ID in the next step
   
4. curl -X GET -H "Accept: application/json" -H "X-Auth-Token: <Token_ID>" http://controller:8774/v2/<Tenant_ID>/flavors | python -m json.tool
• TaskFlow (github)
• Jobs
• Engines
• Install guides
• OpenStack Training Guides
• Start Here
• Appendix B: Building the Training Cluster (VirtualBox)
• Associate Training Guide
• 7. Network Node
• Figure 7.1: Network diagram
  
• OpenStack Installation Guide for Red Hat Enterprise Linux, CentOS, and Fedora (Juno) (Kilo)
1. Architecture
• Three-node with OpenStack Networking (neutron): controller, network, compute, (block storage, object storage)
• Two-node with legacy networking (nova-network): controller, compute, (block storage, object storage)
2. Basic environment (see Figure 7.1, Figure B.1, Figure 6.1) IMPORTANT: VirtualBox does not support nested virtualization; use kvm instead
• Multi-node Openstack with Neutron with libvirt, netsted kvm, virt-manager and qcow2 images
• ...
  

• libvirt network			Controller	Network	Compute	Block Storage
  management	192.168.2.0/24	management network	Adapter 2 (eth1): HWADDR=... BOOTPROTO=none # CONFIG_CONTROLLER_HOST IPADDR0=192.168.2.191 PREFIX0=24 DEFROUTE=yes GATEWAY0=192.168.2.1 DNS1=192.168.2.1 ONBOOT=yes USERCTL=no	Adapter 2 (eth1): HWADDR=... BOOTPROTO=none # CONFIG_NETWORK_HOSTS IPADDR0=192.168.2.192 PREFIX0=24 DEFROUTE=yes GATEWAY0=192.168.2.1 DNS1=192.168.2.1 ONBOOT=yes USERCTL=no	Adapter 2 (eth1): HWADDR=... BOOTPROTO=none # CONFIG_NOVA_COMPUTE_HOSTS IPADDR0=192.168.2.190 PREFIX0=24 DEFROUTE=yes GATEWAY0=192.168.2.1 DNS1=192.168.2.1 ONBOOT=yes USERCTL=no	Adapter 2 (eth1): HWADDR=... BOOTPROTO=none # CONFIG_STORAGE_HOST IPADDR0=192.168.2.193 PREFIX0=24 DEFROUTE=yes GATEWAY0=192.168.2.1 DNS1=192.168.2.1 ONBOOT=yes USERCTL=no
  tunnel	192.168.4.0/24	tunnel network / data network		Adapter 3 (eth2) (CONFIG_NEUTRON_OVS_TUNNEL_IF): HWADDR=... BOOTPROTO=none IPADDR0=192.168.4.192 PREFIX0=24 DEFROUTE=no ONBOOT=yes USERCTL=no	Adapter 3 (eth2) (CONFIG_NOVA_COMPUTE_PRIVIF): HWADDR=... BOOTPROTO=none IPADDR0=192.168.4.190 PREFIX0=24 DEFROUTE=no ONBOOT=yes USERCTL=no
  storage	192.168.5.0/24	storage network			Adapter 3 (eth3): HWADDR=... BOOTPROTO=none IPADDR0=192.168.5.190 PREFIX0=24 DEFROUTE=no ONBOOT=yes USERCTL=no	Adapter 3 (eth2): HWADDR=... BOOTPROTO=none IPADDR0=192.168.5.193 PREFIX0=24 DEFROUTE=no ONBOOT=yes USERCTL=no
  default	192.168.122.0/24	external network	Adapter 1 (eth0): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no	Adapter 1 (eth0): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no	(to be disabled after config) Adapter 1 (eth0): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no	(to be disabled after config) Adapter 1 (eth0): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no

  
  

• VirtualBox network			VirtualBox instance network	OpenStack
  		host			Controller Node	Network Node	Compute Node	BlockStorage Node	ObjectStorage Node
  									#1	#2
  Host-only network	vboxnet0	10.0.0.1	Adapter type: virtio-net Promiscuous mode: allow all	management network	Adapter 1 (eth0): HWADDR=... BOOTPROTO=none IPADDR0=10.0.0.11 PREFIX0=24 DEFROUTE=yes GATEWAY0=10.0.0.1 DNS1=10.0.0.1 ONBOOT=yes USERCTL=no	Adapter 1 (eth0): HWADDR=... BOOTPROTO=none IPADDR0=10.0.0.21 PREFIX0=24 DEFROUTE=yes GATEWAY0=10.0.0.1 DNS1=10.0.0.1 ONBOOT=yes USERCTL=no	Adapter 1 (eth0): HWADDR=... BOOTPROTO=none IPADDR0=10.0.0.31 PREFIX0=24 DEFROUTE=yes GATEWAY0=10.0.0.1 DNS1=10.0.0.1 ONBOOT=yes USERCTL=no	Adapter 1 (eth0): HWADDR=... BOOTPROTO=none IPADDR0=10.0.0.41 PREFIX0=24 DEFROUTE=yes GATEWAY0=10.0.0.1 DNS1=10.0.0.1 ONBOOT=yes USERCTL=no	Adapter 1 (eth0): HWADDR=... BOOTPROTO=none IPADDR0=10.0.0.51 PREFIX0=24 DEFROUTE=yes GATEWAY0=10.0.0.1 DNS1=10.0.0.1 ONBOOT=yes USERCTL=no	Adapter 1 (eth0): HWADDR=... BOOTPROTO=none IPADDR0=10.0.0.52 PREFIX0=24 DEFROUTE=yes GATEWAY0=10.0.0.1 DNS1=10.0.0.1 ONBOOT=yes USERCTL=no
  	vboxnet1	10.0.1.1		tunnel network / data network		Adapter 2 (eth1): HWADDR=... BOOTPROTO=none IPADDR0=10.0.1.21 PREFIX0=24 DEFROUTE=no ONBOOT=yes USERCTL=no	Adapter 2 (eth1): HWADDR=... BOOTPROTO=none IPADDR0=10.0.1.31 PREFIX0=24 DEFROUTE=no ONBOOT=yes USERCTL=no
  	vboxnet2	10.0.2.1		storage network					Adapter 2 (eth1):	Adapter 2 (eth1):
  Bridged		192.168.0.x		API network	Adapter 2 (eth1): HWADDR=... BOOTPROTO=dhcp DEFROUTE=no ONBOOT=yes USERCTL=no
  				external network		Adapter 3 (eth2): HWADDR=... BOOTPROTO=none DEFROUTE=no ONBOOT=yes USERCTL=no
  NAT (should only be active at setup: yum,...; check that it is the default gateway: routel)		(10.0.x.1)	Adapter type: virtio-net		Adapter 3 (eth2): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no	Adapter 4 (eth3): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no	Adapter 3 (eth2): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no	Adapter 2 (eth1): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no	Adapter 3 (eth2): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no	Adapter 3 (eth2): HWADDR=... BOOTPROTO=dhcp DEFROUTE=yes ONBOOT=no USERCTL=no

• Network config for CentOS
• check network interfaces
  
• ip a
• check the route
  
• routel
• set hostname
• hostnamectl set-hostname my_hostname
• disable firewall
  
• systemctl stop firewalld.service
• systemctl disable firewalld.service
• OpenStack packages:
  
• yum install yum-plugin-priorities
• yum install http://dl.fedoraproject.org/pub/epel/7/x86_64/e/epel-release-7-5.noarch.rpm

• yum install https://repos.fedorapeople.org/repos/openstack/openstack-kilo/rdo-release-kilo-1.noarch.rpm
• yum upgrade

• yum install openstack-selinux
• Database:
• yum install mariadb mariadb-server MySQL-python
• mysql_secure_installation
• Messaging server
• yum install rabbitmq-server
3. Add the Identity Service (keystone)
   
• API endpoints:
  

  	identity	image	compute	network
  admin	http://controller:35357/v2.0	http://controller:9292	http://controller:8774/v2/%\(tenant_id\)s	http://controller:9696
  internal	http://controller:5000/v2.0
  public

  
  
4. Add the Image Service (glance)
5. Add the Compute Service (nova)
6. Add a networking component
• Details
• Neutron configuration files (and iptables rules) for a two node setup (txt)
  
• Neutron Network Namespaces and IPtables--A Technical Deep Dive
• Networking in too much detail (RDO)
  
• The lay of the land (graphic: br-int, br-ex)
  
• iptables
• The OpenStack network (IBM)
• iptables
  
• OpenStack networking (neutron)
• neutron-server
• plug-ins
• FWaaS
• LBaaS
  
• Cisco
• NEC OpenFlow
• Open vSwitch
• Linux bridging
• Ryu NOS
• VMWare NSX
  
• agents
• L3
• DHCP
• plug-in agent
• Create initial networks
• External network (admin)
• neutron net-create ext-net --router:external True --provider:physical_network external --provider:network_type flat
• External subnet (admin)
  
• neutron subnet-create ext-net --name ext-subnet --allocation-pool start=192.168.100.101,end=192.168.100.200 --disable-dhcp --gateway 192.168.100.1 192.168.100.0/24
• Tenant network (demo)
• neutron net-create demo-net
• Tenat subnet (demo)
• neutron subnet-create demo-net --name demo-subnet --gateway 192.168.1.1 192.168.1.0/24
• Router (demo)
• neutron router-create demo-router
• neutron router-interface-add demo-router demo-subnet
• neutron router-gateway-set demo-router ext-net
• From external network, ping the router:
• ping 192.168.100.101
  
• Legacy networking (nova-network)
7. Dashboard
8. Add the Block Storage service
• VirtualBox: add a second disk
• CentOS:
• make partitions on /dev/sdb
• fdisk /dev/sdb
• n (new partition)
  
• p (primary)
  
• (enter) (all size)
  
• p (print the partition table)
• w (write and quit)
  
• create filesystem in the new partition
• mkfs.xfs /dev/sdb1
9. Add Object Storage
• VirtualBox: add two more disks
• CentOS:
• make partitions on /dev/sdb and /dev/sdc
  
• fdisk /dev/sdb
• n (new partition)
  
• p (primary)
  
• (enter) (all size)
  
• p (print the partition table)
• w (write and quit)
  
10. ...
11. ...
12. ...
13. ...
14. Launch an instance
• Launch an instance with OpenStack Neetworking (neutron)
• source demo-openrc.sh
• key pair
• ssh-keygen
• nova keypair-add --pub-key ~/.ssh/id_rsa.pub demo-key
• launch instance
• neutron net-list
• nova boot --flavor m1.tiny --image cirros-0.3.3-x86_64 --nic net-id=DEMO_NET_ID --security-group default --key-name demo-key demo-instance1
• nova list
  
• access the instance
• nova get-vnc-console demo-instance1 novnc
• cirros / cubswin:)
  
• access the instance remotely
• nova secgroup-add-rule default icmp -1 -1 0.0.0.0/0
• nova secgroup-add-rule default tcp 22 22 0.0.0.0/0
• neutron floatingip-create ext-net
• 192.168.0.102
• nova floating-ip-associate demo-instance1 192.168.0.102
• attach a block storage volume
• nova volume-list
• nova volume-attach demo-instance1 VOLUME_ID
  
• Installation summary:
  

  node		identity (keystone)	image (glance)	compute (nova)	network (neutron)	network (nova-network)	block storage (cinder)	object storage (swift)
  controller-node	mysql -u root -p	CREATE DATABASE keystone; GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \   IDENTIFIED BY 'KEYSTONE_DBPASS'; GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \   IDENTIFIED BY 'KEYSTONE_DBPASS';	CREATE DATABASE glance; GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'localhost' \   IDENTIFIED BY 'GLANCE_DBPASS'; GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' \   IDENTIFIED BY 'GLANCE_DBPASS';	CREATE DATABASE nova; GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost' \   IDENTIFIED BY 'NOVA_DBPASS'; GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' \   IDENTIFIED BY 'NOVA_DBPASS';	CREATE DATABASE neutron; GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'localhost' \ IDENTIFIED BY 'NEUTRON_DBPASS'; GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' \ IDENTIFIED BY 'NEUTRON_DBPASS';		CREATE DATABASE cinder; GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'localhost' \   IDENTIFIED BY 'CINDER_DBPASS'; GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' \   IDENTIFIED BY 'CINDER_DBPASS';
  	source admin-openrc.sh	export OS_SERVICE_TOKEN=ADMIN_TOKEN export OS_SERVICE_TOKEN=294a4c8a8a475f9b9836 export OS_SERVICE_ENDPOINT=http://controller:35357/v2.0
  		keystone tenant-create --name admin --description "Admin Tenant" keystone user-create --name admin --pass ADMIN_PASS --email EMAIL_ADDRESS keystone role-create --name admin keystone user-role-add --user admin --tenant admin --role admin keystone tenant-create --name demo --description "Demo Tenant" keystone user-create --name demo --tenant demo --pass DEMO_PASS --email EMAIL_ADDRESS keystone tenant-create --name service --description "Service Tenant"	keystone user-create --name glance --pass GLANCE_PASS keystone user-role-add --user glance --tenant service --role admin	keystone user-create --name nova --pass NOVA_PASS keystone user-role-add --user nova --tenant service --role admin	keystone user-create --name neutron --pass NEUTRON_PASS keystone user-role-add --user neutron --tenant service --role admin		keystone user-create --name cinder --pass CINDER_PASS keystone user-role-add --user cinder --tenant service --role admin	keystone user-create --name swift --pass SWIFT_PASS keystone user-role-add --user swift --tenant service --role admin
  		keystone service-create --name keystone --type identity --description "OpenStack Identity" keystone endpoint-create --service-id $(keystone service-list | awk '/ identity / {print $2}')  --publicurl http://controller:5000/v2.0 --internalurl http://controller:5000/v2.0 --adminurl http://controller:35357/v2.0 --region regionOne	keystone service-create --name glance --type image --description "OpenStack Image Service" keystone endpoint-create --service-id $(keystone service-list | awk '/ image / {print $2}') --publicurl http://controller:9292 --internalurl http://controller:9292 --adminurl http://controller:9292 --region regionOne	keystone service-create --name nova --type compute --description "OpenStack Compute" keystone endpoint-create --service-id $(keystone service-list | awk '/ compute / {print $2}') --publicurl http://controller:8774/v2/%\(tenant_id\)s --internalurl http://controller:8774/v2/%\(tenant_id\)s --adminurl http://controller:8774/v2/%\(tenant_id\)s --region regionOne	keystone service-create --name neutron --type network --description "OpenStack Networking" keystone endpoint-create --service-id $(keystone service-list | awk '/ network / {print $2}') --publicurl http://controller:9696 --adminurl http://controller:9696 --internalurl http://controller:9696 --region regionOne		keystone service-create --name cinder --type volume --description "OpenStack Block Storage" keystone service-create --name cinderv2 --type volumev2 --description "OpenStack Block Storage" keystone endpoint-create   --service-id $(keystone service-list | awk '/ volume / {print $2}')   --publicurl http://controller:8776/v1/%\(tenant_id\)s   --internalurl http://controller:8776/v1/%\(tenant_id\)s   --adminurl http://controller:8776/v1/%\(tenant_id\)s  --region regionOne keystone endpoint-create   --service-id $(keystone service-list | awk '/ volumev2 / {print $2}')   --publicurl http://controller:8776/v2/%\(tenant_id\)s  --internalurl http://controller:8776/v2/%\(tenant_id\)s  --adminurl http://controller:8776/v2/%\(tenant_id\)s  --region regionOne	keystone service-create --name swift --type object-store --description "OpenStack Object Storage" keystone endpoint-create --service-id $(keystone service-list | awk '/ object-store / {print $2}') --publicurl 'http://controller:8080/v1/AUTH_%(tenant_id)s'  --internalurl 'http://controller:8080/v1/AUTH_%(tenant_id)s'  --adminurl http://controller:8080--region regionOne
  	yum install	yum install openstack-keystone python-keystoneclient	yum install openstack-glance python-glanceclient	yum install openstack-nova-api openstack-nova-cert openstack-nova-conductor \   openstack-nova-console openstack-nova-novncproxy openstack-nova-scheduler \   python-novaclient	yum install openstack-neutron openstack-neutron-ml2 python-neutronclient which		yum install openstack-cinder python-cinderclient python-oslo-db	yum install openstack-swift-proxy python-swiftclient python-keystone-auth-token python-keystonemiddleware memcached
  	/etc/*/*.conf	...	...	...	/etc/neutron/neutron.conf [database] ... connection = mysql://neutron:NEUTRON_DBPASS@controller/neutron [DEFAULT] ... rpc_backend = rabbit rabbit_host = controller rabbit_password = RABBIT_PASS [DEFAULT] ... auth_strategy = keystone [keystone_authtoken] ... auth_uri = http://controller:5000/v2.0 identity_uri = http://controller:35357 admin_tenant_name = service admin_user = neutron admin_password = NEUTRON_PASS [DEFAULT] ... core_plugin = ml2 service_plugins = router allow_overlapping_ips = True [DEFAULT] ... notify_nova_on_port_status_changes = True notify_nova_on_port_data_changes = True nova_url = http://controller:8774/v2 nova_admin_auth_url = http://controller:35357/v2.0 nova_region_name = regionOne nova_admin_username = nova nova_admin_tenant_id = SERVICE_TENANT_ID nova_admin_password = NOVA_PASS [DEFAULT] ... verbose = True /etc/neutron/plugins/ml2/ml2_conf.ini [ml2] ... type_drivers = flat,gre tenant_network_types = gre mechanism_drivers = openvswitch [ml2_type_gre] ... tunnel_id_ranges = 1:1000 [securitygroup] ... enable_security_group = True enable_ipset = True firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver /etc/nova/nova.conf [DEFAULT] ... network_api_class = nova.network.neutronv2.api.API security_group_api = neutron linuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver firewall_driver = nova.virt.firewall.NoopFirewallDriver [neutron] ... url = http://controller:9696 auth_strategy = keystone admin_auth_url = http://controller:35357/v2.0 admin_tenant_name = service admin_username = neutron admin_password = NEUTRON_PASS [neutron] ... service_metadata_proxy = True metadata_proxy_shared_secret = METADATA_SECRET	/etc/nova/nova.conf [DEFAULT] ... network_api_class = nova.network.api.API security_group_api = nova	/etc/cinder/cinder.conf [database] ... connection = mysql://cinder:CINDER_DBPASS@controller/cinder [DEFAULT] ... rpc_backend = rabbit rabbit_host = controller rabbit_password = RABBIT_PASS [DEFAULT] ... auth_strategy = keystone [keystone_authtoken] ... auth_uri = http://controller:5000/v2.0 identity_uri = http://controller:35357 admin_tenant_name = service admin_user = cinder admin_password = CINDER_PASS [DEFAULT] ... my_ip = 10.0.0.11 [DEFAULT] ... verbose = True	curl -o /etc/swift/proxy-server.conf https://raw.githubusercontent.com/openstack/swift/stable/juno/etc/proxy-server.conf-sample /etc/swift/proxy-server.conf [DEFAULT] ... bind_port = 8080 user = swift swift_dir = /etc/swift [pipeline:main] pipeline = authtoken cache healthcheck keystoneauth proxy-logging proxy-server [app:proxy-server] ... allow_account_management = true account_autocreate = true [filter:keystoneauth] use = egg:swift#keystoneauth ... operator_roles = admin,_member_ [filter:authtoken] paste.filter_factory = keystonemiddleware.auth_token:filter_factory ... auth_uri = http://controller:5000/v2.0 identity_uri = http://controller:35357 admin_tenant_name = service admin_user = swift admin_password = SWIFT_PASS delay_auth_decision = true [filter:cache] ... memcache_servers = 127.0.0.1:11211
  	populate db	su -s /bin/sh -c "keystone-manage db_sync" keystone	su -s /bin/sh -c "glance-manage db_sync" glance	su -s /bin/sh -c "nova-manage db sync" nova			su -s /bin/sh -c "cinder-manage db sync" cinder
  	systemctl	systemctl enable openstack-keystone.service systemctl start openstack-keystone.service	systemctl enable openstack-glance-api.service openstack-glance-registry.service systemctl start openstack-glance-api.service openstack-glance-registry.service	systemctl enable openstack-nova-api.service openstack-nova-cert.service   openstack-nova-consoleauth.service openstack-nova-scheduler.service  openstack-nova-conductor.service openstack-nova-novncproxy.service systemctl start openstack-nova-api.service openstack-nova-cert.service  openstack-nova-consoleauth.service openstack-nova-scheduler.service openstack-nova-conductor.service openstack-nova-novncproxy.service		systemctl restart openstack-nova-api.service openstack-nova-scheduler.service   openstack-nova-conductor.service	systemctl enable openstack-cinder-api.service openstack-cinder-scheduler.service systemctl start openstack-cinder-api.service openstack-cinder-scheduler.service
  	initial rings							cd /etc/swift swift-ring-builder account.builder create 10 3 1 swift-ring-builder account.builder add r1z1-10.0.0.51:6002/sdb1 100 swift-ring-builder account.builder add r1z1-10.0.0.51:6002/sdc1 100 swift-ring-builder account.builder add r1z1-10.0.0.52:6002/sdb1 100 swift-ring-builder account.builder add r1z1-10.0.0.52:6002/sdc1 100 swift-ring-builder account.builder swift-ring-builder account.builder rebalance swift-ring-builder container.builder create 10 3 1 swift-ring-builder container.builder add r1z1-10.0.0.51:6001/sdb1 100 swift-ring-builder container.builder add r1z1-10.0.0.51:6001/sdc1 100 swift-ring-builder container.builder add r1z1-10.0.0.52:6001/sdb1 100 swift-ring-builder container.builder add r1z1-10.0.0.52:6001/sdc1 100 swift-ring-builder container.builder swift-ring-builder container.builder rebalance swift-ring-builder object.builder create 10 3 1 swift-ring-builder object.builder add r1z1-10.0.0.51:6000/sdb1 100 swift-ring-builder object.builder add r1z1-10.0.0.51:6000/sdc1 100 swift-ring-builder object.builder add r1z1-10.0.0.52:6000/sdb1 100 swift-ring-builder object.builder add r1z1-10.0.0.52:6000/sdc1 100 swift-ring-builder object.builder swift-ring-builder object.builder rebalance scp account.ring.gz root@10.0.0.51:/etc/swift scp account.ring.gz root@10.0.0.52:/etc/swift scp container.ring.gz root@10.0.0.51:/etc/swift scp container.ring.gz root@10.0.0.52:/etc/swift scp object.ring.gz root@10.0.0.51:/etc/swift scp object.ring.gz root@10.0.0.52:/etc/swift
  	finalize swift installation							curl -o /etc/swift/swift.conf https://raw.githubusercontent.com/openstack/swift/stable/juno/etc/swift.conf-sample /etc/swift/swift.conf [swift-hash] ... swift_hash_path_suffix = HASH_PATH_PREFIX swift_hash_path_prefix = HASH_PATH_SUFFIX [storage-policy:0] ... name = Policy-0 default = yes scp swift.conf root@10.0.0.51:/etc/swift scp swift.conf root@10.0.0.52:/etc/swift chown -R swift:swift /etc/swift systemctl enable openstack-swift-proxy.service memcached.service systemctl start openstack-swift-proxy.service memcached.service
  compute-node	yum install			yum install openstack-nova-compute sysfsutils	yum install openstack-neutron-ml2 openstack-neutron-openvswitch
  	/etc/*/*.conf				/etc/neutron/neutron.conf [database] [DEFAULT] ... rpc_backend = rabbit rabbit_host = controller rabbit_password = RABBIT_PASS [DEFAULT] ... auth_strategy = keystone [keystone_authtoken] ... auth_uri = http://controller:5000/v2.0 identity_uri = http://controller:35357 admin_tenant_name = service admin_user = neutron admin_password = NEUTRON_PASS [DEFAULT] ... core_plugin = ml2 service_plugins = router allow_overlapping_ips = True [DEFAULT] ... verbose = True /etc/neutron/plugins/ml2/ml2_conf.ini [ml2] ... type_drivers = flat,gre tenant_network_types = gre mechanism_drivers = openvswitch [ml2_type_gre] ... tunnel_id_ranges = 1:1000 [securitygroup] ... enable_security_group = True enable_ipset = True firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver [ovs] ... local_ip = INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS enable_tunneling = True [agent] ... tunnel_types = gre /etc/nova/nova.conf [DEFAULT] ... network_api_class = nova.network.neutronv2.api.API security_group_api = neutron linuxnet_interface_driver = nova.network.linux_net.LinuxOVSInterfaceDriver firewall_driver = nova.virt.firewall.NoopFirewallDriver [neutron] ... url = http://controller:9696 auth_strategy = keystone admin_auth_url = http://controller:35357/v2.0 admin_tenant_name = service admin_username = neutron admin_password = NEUTRON_PASS
  	systemctl			systemctl enable libvirtd.service openstack-nova-compute.service systemctl start libvirtd.service openstack-nova-compute.service	systemctl enable openvswitch.service systemctl start openvswitch.service
  network-node	prerequisites				/etc/sysctl.conf net.ipv4.ip_forward=1 net.ipv4.conf.all.rp_filter=0 net.ipv4.conf.default.rp_filter=0 sysctl -p
  	yum install				yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-openvswitch
  	/etc/*/*.conf				/etc/neutron/neutron.conf [database] [DEFAULT] ... rpc_backend = rabbit rabbit_host = controller rabbit_password = RABBIT_PASS [DEFAULT] ... auth_strategy = keystone [keystone_authtoken] ... auth_uri = http://controller:5000/v2.0 identity_uri = http://controller:35357 admin_tenant_name = service admin_user = neutron admin_password = NEUTRON_PASS [DEFAULT] ... core_plugin = ml2 service_plugins = router allow_overlapping_ips = True [DEFAULT] ... verbose = True /etc/neutron/plugins/ml2/ml2_conf.ini [ml2] ... type_drivers = flat,gre tenant_network_types = gre mechanism_drivers = openvswitch [ml2_type_flat] ... flat_networks = external [ml2_type_gre] ... tunnel_id_ranges = 1:1000 [securitygroup] ... enable_security_group = True enable_ipset = True firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver [ovs] ... local_ip = INSTANCE_TUNNELS_INTERFACE_IP_ADDRESS enable_tunneling = True bridge_mappings = external:br-ex [agent] ... tunnel_types = gre /etc/neutron/l3_agent.ini [DEFAULT] ... interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver use_namespaces = True external_network_bridge = br-ex router_delete_namespaces = True [DEFAULT] ... verbose = True /etc/neutron/dhcp_agent.ini [DEFAULT] ... interface_driver = neutron.agent.linux.interface.OVSInterfaceDriver dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq use_namespaces = True dhcp_delete_namespaces = True [DEFAULT] ... verbose = True /etc/neutron/metadata_agent.ini [DEFAULT] ... auth_url = http://controller:5000/v2.0 auth_region = regionOne admin_tenant_name = service admin_user = neutron admin_password = NEUTRON_PASS [DEFAULT] ... nova_metadata_ip = controller [DEFAULT] ... metadata_proxy_shared_secret = METADATA_SECRET [DEFAULT] ... verbose = True
  	OVS+conf				systemctl enable openvswitch.service systemctl start openvswitch.service ovs-vsctl add-br br-ex ovs-vsctl add-port br-ex INTERFACE_NAME
  block1-node	LVM						systemctl enable lvm2-lvmetad.service systemctl start lvm2-lvmetad.service pvcreate /dev/sdb1 vgcreate cinder-volumes /dev/sdb1 /etc/lvm/lvm.conf devices { ... filter = [ "a/sdb/", "r/.*/"]
  	yum install						yum install openstack-cinder targetcli python-oslo-db MySQL-python
  	/etc/*/*.conf						/etc/cinder/cinder.conf [database] ... connection = mysql://cinder:CINDER_DBPASS@controller/cinder [DEFAULT] ... rpc_backend = rabbit rabbit_host = controller rabbit_password = RABBIT_PASS [DEFAULT] ... auth_strategy = keystone [keystone_authtoken] ... auth_uri = http://controller:5000/v2.0 identity_uri = http://controller:35357 admin_tenant_name = service admin_user = cinder admin_password = CINDER_PASS [DEFAULT] ... my_ip = MANAGEMENT_INTERFACE_IP_ADDRESS [DEFAULT] ... glance_host = controller [DEFAULT] ... iscsi_helper = lioadm [DEFAULT] ... verbose = True
  	systemctl						systemctl enable openstack-cinder-volume.service target.service systemctl start openstack-cinder-volume.service target.service
  object1-node object2-node	prerequisites (disc addicional)							yum install xfsprogs rsync mkfs.xfs /dev/sdb1 mkfs.xfs /dev/sdc1 mkdir -p /srv/node/sdb1 mkdir -p /srv/node/sdc1 /etc/fstab /dev/sdb1 /srv/node/sdb1 xfs noatime,nodiratime,nobarrier,logbufs=8 0 2 /dev/sdc1 /srv/node/sdc1 xfs noatime,nodiratime,nobarrier,logbufs=8 0 2 mount /srv/node/sdb1 mount /srv/node/sdc1 /etc/rsync.d uid = swift gid = swift log file = /var/log/rsyncd.log pid file = /var/run/rsyncd.pid address = MANAGEMENT_INTERFACE_IP_ADDRESS [account] max connections = 2 path = /srv/node/ read only = false lock file = /var/lock/account.lock [container] max connections = 2 path = /srv/node/ read only = false lock file = /var/lock/container.lock [object] max connections = 2 path = /srv/node/ read only = false lock file = /var/lock/object.lock systemctl enable rsyncd.service systemctl start rsyncd.service
  	yum install							yum install openstack-swift-account openstack-swift-container openstack-swift-object
  	conf							curl -o /etc/swift/account-server.conf https://raw.githubusercontent.com/openstack/swift/stable/juno/etc/account-server.conf-sample /etc/swift/account-server.conf [DEFAULT] ... bind_ip = MANAGEMENT_INTERFACE_IP_ADDRESS bind_port = 6002 user = swift swift_dir = /etc/swift devices = /srv/node [pipeline:main] pipeline = healthcheck recon account-server [filter:recon] ... recon_cache_path = /var/cache/swift curl -o /etc/swift/container-server.conf https://raw.githubusercontent.com/openstack/swift/stable/juno/etc/container-server.conf-sample /etc/swift/container-server.conf [DEFAULT] ... bind_ip = MANAGEMENT_INTERFACE_IP_ADDRESS bind_port = 6001 user = swift swift_dir = /etc/swift devices = /srv/node [pipeline:main] pipeline = healthcheck recon container-server [filter:recon] ... recon_cache_path = /var/cache/swift curl -o /etc/swift/object-server.conf https://raw.githubusercontent.com/openstack/swift/stable/juno/etc/object-server.conf-sample /etc/swift/object-server.conf [DEFAULT] ... bind_ip = MANAGEMENT_INTERFACE_IP_ADDRESS bind_port = 6000 user = swift swift_dir = /etc/swift devices = /srv/node [pipeline:main] pipeline = healthcheck recon object-server [filter:recon] ... recon_cache_path = /var/cache/swift
  	postrequisites							chown -R swift:swift /srv/node mkdir -p /var/cache/swift chown -R swift:swift /var/cache/swift
  	finalize installation							chown -R swift:swift /etc/swift systemctl enable openstack-swift-account.service openstack-swift-account-auditor.service \   openstack-swift-account-reaper.service openstack-swift-account-replicator.service systemctl start openstack-swift-account.service openstack-swift-account-auditor.service \   openstack-swift-account-reaper.service openstack-swift-account-replicator.service systemctl enable openstack-swift-container.service openstack-swift-container-auditor.service \   openstack-swift-container-replicator.service openstack-swift-container-updater.service systemctl start openstack-swift-container.service openstack-swift-container-auditor.service \   openstack-swift-container-replicator.service openstack-swift-container-updater.service systemctl enable openstack-swift-object.service openstack-swift-object-auditor.service \   openstack-swift-object-replicator.service openstack-swift-object-updater.service systemctl start openstack-swift-object.service openstack-swift-object-auditor.service \   openstack-swift-object-replicator.service openstack-swift-object-updater.service
  		identity (keystone)	image (glance)	compute (nova)	network (neutron)	network (nova-network)	block storage (cinder)	object storage (swift)

  
  
• OpenStack Installation Guide for Ubuntu 14.04
• Build a cloud (Ubuntu)
  
• Ch 1: Architecture
• Fuel
• Wiki
  
• DistributedTaskManagement (Celery)
• TaskFlow
  
• Related projects
• StackForge
• Murano (application catalogue)
• puppet-openstack
• puppetlabs-openstack
  
• Other
• Hosting Hybrid (Bare-metal + Virtualized) Applications on OpenStack
• Open Source Platform for Real Time and Distributed Video Transcoding in Cloud Computing Environment
• 
  

• ManageIQ
• VirtualBox
  
• curl -O -L http://manageiq.org/download/manageiq-openstack-stable.qc2
• qemu-img convert -O vdi manageiq-openstack-stable.qc2 manageiq-openstack-stable.vdi

http://www.francescpinyol.cat/openstack.html
Primera versió: / First version: 18.III.2015
Darrera modificació: 26 de gener de 2016 / Last update: 26th Jannuary 2016