PackStack - A utility which uses uses Puppet modules modules to deploy an OpenStack in Red H at linux or centos. An answer file can be passed to packstack to configure/customised openstack envi ronment. Answer file contains variable which is used during openstack installation by pac kstack. 1.Install centos 7 with minimal install 2 network ----> ----> NAT and host host only ---> compute Internet. Use Virtual Box or Vmware workstation RAM =3G, Disk = 20G ,VCPU=2
NAT so that virtual machine can use host
3.Rename interface to eth0 and eth1 if they are not Edit /etc/default/grub At the end of GRUB_CMDLINE_LINUX line append "net.ifnames=0 biosdevname=0" Save the file Type "grub2-mkconfig -o /boot/grub2/grub.cfg" Type "reboot" 4.Openstack is incompatible woth NetworkManage,so disable it before installing o penstack # systemctl disable NetworkManager.service #systemctl stop NetworkManager.service #systemctl start network.service #systemctl enable network.service 5.Disable selinux add hostname in etc/hosts file [root@openstack-liberty ~]# getenforce [root@openstack-liberty Enforcing [root@openstack-liberty [root@openstack-libert y ~]# setenforce 0 [root@openstack-liberty [root@openstack-libert y ~]# getenforce Permissive [root@openstack-liberty [root@openstack-libert y ~]# echo "192.168.4.101 stack-liberty" >> /etc/hosts
openstack-liberty.lab.com open
6.Install RDO liberty release [root@openstack-liberty [root@openstack-libert y ~]# yum install https://repos.fedorape https://repos.fedorapeople.org/repos/ope ople.org/repos/ope nstack/openstack-liberty/rdo-release-liberty-3.noarch.rpm 7.Install Packstack package. #yum install -y openstack-packstack 8.Generate answerfile #packstack --gen-answer-file /root/answer.txt 9.Edit Answer file as per your requirement. #vi /root/answer.txt [root@openstack-liberty ~]# diff /root/answer.txt /root/answer.txt.org|grep /root/answer.txt.org|grep '^< ' < CONFIG_HEAT_INSTALL=y
< CONFIG_NTP_SERVERS=pool.ntp.org < CONFIG_CINDER_VOLUMES_SIZE=10G < CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=physnet1:br-eth1 < CONFIG_NEUTRON_OVS_BRIDGE_IFACES=br-eth1:eth1 < CONFIG_NEUTRON_OVS_TUNNEL_IF=eth1 [root@openstack-liberty ~]# 10.Deploy openstack using answer file. #packstack --answer-file /root/answer.txt If any error fix that then rerun packstack Log: ================================================================================ =============================================== login as: root
[email protected]'s password: Last login: Wed Jun 15 07:10:53 2016 from 192.168.4.1 [root@openstack-liberty ~]# [root@openstack-liberty ~]# [root@openstack-liberty ~]# ip a 1: lo:
mtu 65536 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: eth0: mtu 1500 qdisc pfifo_fast state UP ql en 1000 link/ether 00:0c:29:c9:28:e3 brd ff:ff:ff:ff:ff:ff inet 192.168.4.101/24 brd 192.168.4.255 scope global eth0 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:fec9:28e3/64 scope link valid_lft forever preferred_lft forever 3: eth1: mtu 1500 qdisc pfifo_fast state UP ql en 1000 link/ether 00:0c:29:c9:28:ed brd ff:ff:ff:ff:ff:ff inet 172.16.0.101/24 brd 172.16.0.255 scope global eth1 valid_lft forever preferred_lft forever inet6 fe80::20c:29ff:fec9:28ed/64 scope link valid_lft forever preferred_lft forever [root@openstack-liberty ~]# cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 [root@openstack-liberty ~]# getenforce Enforcing [root@openstack-liberty ~]# setenforce 0 [root@openstack-liberty ~]# getenforce Permissive [root@openstack-liberty ~]# echo "192.168.4.101 openstack-liberty.lab.com open stack-liberty" >> /etc/hosts [root@openstack-liberty ~]# cat !$ cat /etc/hosts 127.0.0.1 localhost localhost.localdomain localhost4 localhost4.localdomain4 ::1 localhost localhost.localdomain localhost6 localhost6.localdomain6 192.168.4.101 openstack-liberty.lab.com openstack-liberty [root@openstack-liberty ~]# yum repolist Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile * base: mirror.nbrc.ac.in * extras: mirror.nbrc.ac.in * updates: mirror.nbrc.ac.in repo id repo n ame status !base/7/x86_64 CentOS -7 - Base 9,007 !extras/7/x86_64 CentOS -7 - Extras 310 !openstack-liberty/x86_64 OpenSt ack Liberty Repository 1,316 !updates/7/x86_64 CentOS -7 - Updates 1,687 repolist: 12,320 [root@openstack-liberty ~]# yum install https://repos.fedorapeople.org/repos/ope nstack/openstack-liberty/rdo-release-liberty-3.noarch.rpm Loaded plugins: fastestmirror rdo-release-liberty-3.noarch.rpm | 5.3 kB 00:00:00 Examining /var/tmp/yum-root-sb8CjV/rdo-release-liberty-3.noarch.rpm: rdo-release -liberty-3.noarch Marking /var/tmp/yum-root-sb8CjV/rdo-release-liberty-3.noarch.rpm as an update t o rdo-release-liberty-2.noarch Resolving Dependencies --> Running transaction check ---> Package rdo-release.noarch 0:liberty-2 will be updated ---> Package rdo-release.noarch 0:liberty-3 will be an update --> Finished Dependency Resolution Dependencies Resolved ================================================================================ ============================================================================= Package Arch Version Repository Size ================================================================================ ============================================================================= Updating: rdo-release noarch liberty-3 /rdo-release-liberty-3.noarch 1.7 k Transaction Summary ================================================================================ ============================================================================= Upgrade 1 Package Total size: 1.7 k Is this ok [y/d/N]: y Downloading packages: Running transaction check Running transaction test Transaction test succeeded Running transaction Updating : rdo-release-liberty-3.noarch 1/2 Cleanup
: rdo-release-liberty-2.noarch
Verifying
: rdo-release-liberty-3.noarch
2/2 1/2
Verifying
: rdo-release-liberty-2.noarch 2/2
Updated: rdo-release.noarch 0:liberty-3 Complete! [root@openstack-liberty ~]# packstack -h Usage: packstack [options] [--help] Options: --version show program's version number and exit -h, --help show this help message and exit --gen-answer-file=GEN_ANSWER_FILE Generate a template of an answer file. --answer-file=ANSWER_FILE Runs the configuration in non-interactive mode, extracting all information from theconfiguration file. using this option excludes all other options --install-hosts=INSTALL_HOSTS Install on a set of hosts in a single step. The format should be a comma separated list of hosts, the first is setup as a controller, and the others are setup as compute nodes.if only a single host is supplied then it is setup as an all in one installation. An answerfile will also be generated and should be used if Packstack needs to be run a second time --allinone Shorthand for --install-hosts= --novanetwork-pubif= --novacompute-privif=lo --novanetwork-privif=lo --os-swift-install=y --nagiosinstall=y , this option can be used to install an all in one OpenStack on this host -t TIMEOUT, --timeout=TIMEOUT The timeout for puppet Exec calls -o, --options Print details on options available in answer file(rst format) -d, --debug Enable debug in logging -y, --dry-run Don't execute, just generate manifests Global Options: --ssh-public-key=SSH_PUBLIC_KEY Path to a public key to install on servers. If a usable key has not been installed on the remote servers, the user is prompted for a password and this key is installed so the password will not be required again.
--rh-proxy-user=RH_PROXY_USER User name to use for Red Hat Subscription Manager's HTTP proxy. --rh-proxy-password=RH_PROXY_PASSWORD Password to use for Red Hat Subscription Manager's HTTP proxy.
RHN Satellite config: --rhn-satellite-username=RHN_SATELLITE_USERNAME User name to authenticate with the RHN Satellite server; if you intend to use an access key for Satellite authentication, leave this blank. --rhn-satellite-password=RHN_SATELLITE_PASSWORD
Password to authenticate with the RHN Satellite server; if you intend to use an access key for Satellite authentication, leave this blank. --rhn-satellite-activation-key=RHN_SATELLITE_ACTIVATION_KEY Access key for the Satellite server; if you intend to use a user name and password for Satellite authentication, leave this blank. --rhn-satellite-cacert=RHN_SATELLITE_CACERT Certificate path or URL of the certificate authority to verify that the connection with the Satellite server is secure. If you are not using Satellite in your deployment, leave this blank. --rhn-satellite-profile=RHN_SATELLITE_PROFILE Profile name that should be used as an identifier for the system in RHN Satellite (if required). --rhn-satellite-flags=RHN_SATELLITE_FLAGS Comma-separated list of flags passed to the rhnreg_ks command. Valid flags are: novirtinfo, norhnsd, nopackages ['novirtinfo', 'norhnsd', 'nopackages'] --rhn-satellite-proxy-host=RHN_SATELLITE_PROXY_HOST HTTP proxy to use when connecting to the RHN Satellite server (if required).
RHN Satellite proxy config: --rhn-satellite-proxy-username=RHN_SATELLITE_PROXY_USERNAME User name to authenticate with the Satellite-server HTTP proxy. --rhn-satellite-proxy-password=RHN_SATELLITE_PROXY_PASSWORD User password to authenticate with the Satelliteserver HTTP proxy.
SSL Config parameters: --ssl-cacert-file=SSL_CACERT_FILE Specify filepath for CA cert file. If CONFIG_SSL_CACERT_SELFSIGN is set to 'n' it has to be preexisting file. --ssl-cacert-key-file=SSL_CACERT_KEY_FILE Specify filepath for CA cert key file. If CONFIG_SSL_CACERT_SELFSIGN is set to 'n' it has to be preexisting file. --ssl-cert-dir=SSL_CERT_DIR Enter the path to use to store generated SSL certificates in. --ssl-cacert-selfsign=SSL_CACERT_SELFSIGN Specify 'y' if you want Packstack to pregenerate the CA Certificate.
SSL selfsigned CAcert Config parameters: --selfsign-cacert-subject-country=SELFSIGN_CACERT_SUBJECT_COUNTRY Enter the selfsigned CAcert subject country. --selfsign-cacert-subject-state=SELFSIGN_CACERT_SUBJECT_STATE Enter the selfsigned CAcert subject state. --selfsign-cacert-subject-location=SELFSIGN_CACERT_SUBJECT_LOCATION Enter the selfsigned CAcert subject location. --selfsign-cacert-subject-organization=SELFSIGN_CACERT_SUBJECT_ORGANIZATION Enter the selfsigned CAcert subject organization. --selfsign-cacert-subject-organizational-unit=SELFSIGN_CACERT_SUBJECT_ORGANI ZATIONAL_UNIT Enter the selfsigned CAcert subject organizational unit.
--selfsign-cacert-subject-common-name=SELFSIGN_CACERT_SUBJECT_COMMON_NAME Enter the selfsigned CAcert subject common name. --selfsign-cacert-subject-email=SELFSIGN_CACERT_SUBJECT_EMAIL AMQP Config parameters: --amqp-backend=AMQP_BACKEND Service to be used as the AMQP broker. Allowed values are: qpid, rabbitmq ['qpid', 'rabbitmq'] --amqp-host=AMQP_HOST IP address of the server on which to install the AMQP service. --amqp-enable-ssl=AMQP_ENABLE_SSL Specify 'y' to enable SSL for the AMQP service. ['y', 'n'] --amqp-enable-auth=AMQP_ENABLE_AUTH Specify 'y' to enable authentication for the AMQP service. ['y', 'n']
AMQP Config SSL parameters: --amqp-nss-certdb-pw=AMQP_NSS_CERTDB_PW Password for the NSS certificate database of the AMQP service.
AMQP Config Athentication parameters: --amqp-auth-user=AMQP_AUTH_USER User for AMQP authentication. --amqp-auth-password=AMQP_AUTH_PASSWORD Password for AMQP authentication. MariaDB Config parameters: --mariadb-host=MARIADB_HOST IP address of the server on which to install MariaDB. If a MariaDB installation was not specified in CONFIG_MARIADB_INSTALL, specify the IP address of an existing database server (a MariaDB cluster can also be specified). --mariadb-pw=MARIADB_PW Password for the MariaDB administrative user.
Keystone Config parameters: --keystone-db-passwd=KEYSTONE_DB_PASSWD Password to use for the Identity service (keystone) to access the database. --keystone-db-purge-enable=KEYSTONE_DB_PURGE_ENABLE Enter y if cron job for removing soft deleted DB rows should be created. --keystone-region=KEYSTONE_REGION Default region name to use when creating tenants in the Identity service. --keystone-admin-email=KEYSTONE_ADMIN_EMAIL Email address for the Identity service 'admin' user. Defaults to --keystone-admin-username=KEYSTONE_ADMIN_USERNAME User name for the Identity service 'admin' user. Defaults to 'admin'. --keystone-admin-passwd=KEYSTONE_ADMIN_PASSWD Password to use for the Identity service 'admin' user. --keystone-demo-passwd=KEYSTONE_DEMO_PASSWD Password to use for the Identity service 'demo' user. --keystone-service-name=KEYSTONE_SERVICE_NAME
Name of service to use to run the Identity service (keystone or httpd). ['keystone', 'httpd'] --keystone-identity-backend=KEYSTONE_IDENTITY_BACKEND Type of Identity service backend (sql or ldap). ['sql', 'ldap'] Keystone LDAP Identity Backend Config parameters: --keystone-ldap-url=KEYSTONE_LDAP_URL URL for the Identity service LDAP backend. --keystone-ldap-user-dn=KEYSTONE_LDAP_USER_DN User DN for the Identity service LDAP backend. Used to bind to the LDAP server if the LDAP server does not allow anonymous authentication. --keystone-ldap-user-password=KEYSTONE_LDAP_USER_PASSWORD User DN password for the Identity service LDAP backend. --keystone-ldap-suffix=KEYSTONE_LDAP_SUFFIX Base suffix for the Identity service LDAP backend. --keystone-ldap-query-scope=KEYSTONE_LDAP_QUERY_SCOPE Query scope for the Identity service LDAP backend. Use 'one' for onelevel/singleLevel or 'sub' for subtree/wholeSubtree ('base' is not actually used by the Identity service and is therefore deprecated). ['base', 'one', 'sub'] --keystone-ldap-page-size=KEYSTONE_LDAP_PAGE_SIZE Query page size for the Identity service LDAP backend. --keystone-ldap-user-subtree=KEYSTONE_LDAP_USER_SUBTREE User subtree for the Identity service LDAP backend. --keystone-ldap-user-filter=KEYSTONE_LDAP_USER_FILTER User query filter for the Identity service LDAP backend. --keystone-ldap-user-objectclass=KEYSTONE_LDAP_USER_OBJECTCLASS User object class for the Identity service LDAP backend. --keystone-ldap-user-id-attribute=KEYSTONE_LDAP_USER_ID_ATTRIBUTE User ID attribute for the Identity service LDAP backend. --keystone-ldap-user-name-attribute=KEYSTONE_LDAP_USER_NAME_ATTRIBUTE User name attribute for the Identity service LDAP backend. --keystone-ldap-user-mail-attribute=KEYSTONE_LDAP_USER_MAIL_ATTRIBUTE User email address attribute for the Identity service LDAP backend. --keystone-ldap-user-enabled-attribute=KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE User-enabled attribute for the Identity service LDAP backend. --keystone-ldap-user-enabled-mask=KEYSTONE_LDAP_USER_ENABLED_MASK Bit mask integer applied to user-enabled attribute for the Identity service LDAP backend. Indicate the bit that the enabled value is stored in if the LDAP server represents "enabled" as a bit on an integer rather than a boolean. A value of "0" indicates the mask is not used (default). If this is not set to "0", the typical value is "2", typically used when "CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE = userAccountControl". --keystone-ldap-user-enabled-default=KEYSTONE_LDAP_USER_ENABLED_DEFAULT Value of enabled attribute which indicates user is enabled for the Identity service LDAP backend. This should match an appropriate integer value if the LDAP
server uses non-boolean (bitmask) values to indicate whether a user is enabled or disabled. If this is not set as 'y', the typical value is "512". This is typically used when "CONFIG_KEYSTONE_LDAP_USER_ENABLED_ATTRIBUTE = userAccountControl". --keystone-ldap-user-enabled-invert=KEYSTONE_LDAP_USER_ENABLED_INVERT Specify 'y' if users are disabled (not enabled) in the Identity service LDAP backend (inverts boolean-enalbed values). Some LDAP servers use a boolean lock attribute where "y" means an account is disabled. Setting this to 'y' allows these lock attributes to be used. This setting will have no effect if "CONFIG_KEYSTONE_LDAP_USER_ENABLED_MASK" is in use. ['n', 'y'] --keystone-ldap-user-attribute-ignore=KEYSTONE_LDAP_USER_ATTRIBUTE_IGNORE Comma-separated list of attributes stripped from LDAP user entry upon update. --keystone-ldap-user-default-project-id-attribute=KEYSTONE_LDAP_USER_DEFAULT _PROJECT_ID_ATTRIBUTE Identity service LDAP attribute mapped to default_project_id for users. --keystone-ldap-user-allow-create=KEYSTONE_LDAP_USER_ALLOW_CREATE Specify 'y' if you want to be able to create Identity service users through the Identity service interface; specify 'n' if you will create directly in the LDAP backend. ['n', 'y'] --keystone-ldap-user-allow-update=KEYSTONE_LDAP_USER_ALLOW_UPDATE Specify 'y' if you want to be able to update Identity service users through the Identity service interface; specify 'n' if you will update directly in the LDAP backend. ['n', 'y'] --keystone-ldap-user-allow-delete=KEYSTONE_LDAP_USER_ALLOW_DELETE Specify 'y' if you want to be able to delete Identity service users through the Identity service interface; specify 'n' if you will delete directly in the LDAP backend. ['n', 'y'] --keystone-ldap-user-pass-attribute=KEYSTONE_LDAP_USER_PASS_ATTRIBUTE Identity service LDAP attribute mapped to password. --keystone-ldap-user-enabled-emulation-dn=KEYSTONE_LDAP_USER_ENABLED_EMULATI ON_DN DN of the group entry to hold enabled LDAP users when using enabled emulation. --keystone-ldap-user-additional-attribute-mapping=KEYSTONE_LDAP_USER_ADDITIO NAL_ATTRIBUTE_MAPPING List of additional LDAP attributes for mapping additional attribute mappings for users. The attribute-mapping format is :, where ldap_attr is the attribute in the LDAP entry and user_attr is the Identity API attribute. --keystone-ldap-group-subtree=KEYSTONE_LDAP_GROUP_SUBTREE Group subtree for the Identity service LDAP backend. --keystone-ldap-group-filter=KEYSTONE_LDAP_GROUP_FILTER Group query filter for the Identity service LDAP backend. --keystone-ldap-group-objectclass=KEYSTONE_LDAP_GROUP_OBJECTCLASS Group object class for the Identity service LDAP backend. --keystone-ldap-group-id-attribute=KEYSTONE_LDAP_GROUP_ID_ATTRIBUTE Group ID attribute for the Identity service LDAP
backend. --keystone-ldap-group-name-attribute=KEYSTONE_LDAP_GROUP_NAME_ATTRIBUTE Group name attribute for the Identity service LDAP backend. --keystone-ldap-group-member-attribute=KEYSTONE_LDAP_GROUP_MEMBER_ATTRIBUTE Group member attribute for the Identity service LDAP backend. --keystone-ldap-group-desc-attribute=KEYSTONE_LDAP_GROUP_DESC_ATTRIBUTE Group description attribute for the Identity service LDAP backend. --keystone-ldap-group-attribute-ignore=KEYSTONE_LDAP_GROUP_ATTRIBUTE_IGNORE Comma-separated list of attributes stripped from LDAP group entry upon update. --keystone-ldap-group-allow-create=KEYSTONE_LDAP_GROUP_ALLOW_CREATE Specify 'y' if you want to be able to create Identity service groups through the Identity service interface; specify 'n' if you will create directly in the LDAP backend. ['n', 'y'] --keystone-ldap-group-allow-update=KEYSTONE_LDAP_GROUP_ALLOW_UPDATE Specify 'y' if you want to be able to update Identity service groups through the Identity service interface; specify 'n' if you will update directly in the LDAP backend. ['n', 'y'] --keystone-ldap-group-allow-delete=KEYSTONE_LDAP_GROUP_ALLOW_DELETE Specify 'y' if you want to be able to delete Identity service groups through the Identity service interface; specify 'n' if you will delete directly in the LDAP backend. ['n', 'y'] --keystone-ldap-group-additional-attribute-mapping=KEYSTONE_LDAP_GROUP_ADDIT IONAL_ATTRIBUTE_MAPPING List of additional LDAP attributes used for mapping additional attribute mappings for groups. The attribute=mapping format is :, where ldap_attr is the attribute in the LDAP entry and group_attr is the Identity API attribute. --keystone-ldap-use-tls=KEYSTONE_LDAP_USE_TLS Specify 'y' if the Identity service LDAP backend should use TLS. ['n', 'y'] --keystone-ldap-tls-cacertdir=KEYSTONE_LDAP_TLS_CACERTDIR CA certificate directory for Identity service LDAP backend (if TLS is used). --keystone-ldap-tls-cacertfile=KEYSTONE_LDAP_TLS_CACERTFILE CA certificate file for Identity service LDAP backend (if TLS is used). --keystone-ldap-tls-req-cert=KEYSTONE_LDAP_TLS_REQ_CERT Certificate-checking strictness level for Identity service LDAP backend; valid options are: never, allow, demand. ['never', 'allow', 'demand'] Glance Config parameters: --glance-db-passwd=GLANCE_DB_PASSWD Password to use for the Image service (glance) to access the database. --glance-ks-passwd=GLANCE_KS_PASSWD Password to use for the Image service to authenticate with the Identity service. --glance-backend=GLANCE_BACKEND Storage backend for the Image service (controls how the Image service stores disk images). Valid options are: file or swift (Object Storage). The Object
Storage service must be enabled to use it as a working backend; otherwise, Packstack falls back to 'file'. ['file', 'swift'] Cinder Config parameters: --cinder-db-passwd=CINDER_DB_PASSWD Password to use for the Block Storage service (cinder) to access the database. --cinder-db-purge-enable=CINDER_DB_PURGE_ENABLE Enter y if cron job for removing soft deleted DB rows should be created.
POSTSCRIPT Config parameters: Puppet Config parameters: [root@openstack-liberty ~]# diff /root/answer.txt /root/answer.txt.org|grep '^<' < CONFIG_DEFAULT_PASSWORD=redhat < CONFIG_HEAT_INSTALL=y < CONFIG_NTP_SERVERS=pool.ntp.org < CONFIG_KEYSTONE_ADMIN_PW=redhat < CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=physnet1:br-eth1 < CONFIG_NEUTRON_OVS_BRIDGE_IFACES=br-eth1:eth1 < CONFIG_NEUTRON_OVS_TUNNEL_IF=eth1 < CONFIG_HORIZON_SSL=y < CONFIG_PROVISION_DEMO=n [root@openstack-liberty ~]# vi /root/answer.txt [root@openstack-liberty ~]# mv /root/answer.txt /root/answer.txt.jun16 [root@openstack-liberty ~]# cp -p /root/answer.txt.org /root/answer.txt [root@openstack-liberty ~]# vi /root/answer.txt [root@openstack-liberty ~]# [root@openstack-liberty ~]# [root@openstack-liberty ~]# diff /root/answer.txt /root/answer.txt.org 47c47 < CONFIG_HEAT_INSTALL=y --> CONFIG_HEAT_INSTALL=n 62c62 < CONFIG_NTP_SERVERS=pool.ntp.org --> CONFIG_NTP_SERVERS= 537c537 < CONFIG_CINDER_VOLUMES_SIZE=10G --> CONFIG_CINDER_VOLUMES_SIZE=20G 866c866 < CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=physnet1:br-eth1 --> CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS= 877c877 < CONFIG_NEUTRON_OVS_BRIDGE_IFACES=br-eth1:eth1 --> CONFIG_NEUTRON_OVS_BRIDGE_IFACES= 882c882 < CONFIG_NEUTRON_OVS_TUNNEL_IF=eth1 --> CONFIG_NEUTRON_OVS_TUNNEL_IF= [root@openstack-liberty ~]# diff /root/answer.txt /root/answer.txt.org|grep '^<' < CONFIG_HEAT_INSTALL=y < CONFIG_NTP_SERVERS=pool.ntp.org
< CONFIG_CINDER_VOLUMES_SIZE=10G < CONFIG_NEUTRON_OVS_BRIDGE_MAPPINGS=physnet1:br-eth1 < CONFIG_NEUTRON_OVS_BRIDGE_IFACES=br-eth1:eth1 < CONFIG_NEUTRON_OVS_TUNNEL_IF=eth1 [root@openstack-liberty ~]# packstack --answer-file /root/answer.txt Welcome to the Packstack setup utility The installation log file is available at: /var/tmp/packstack/20160615-213018-ao xN7Q/openstack-setup.log Installing: Clean Up [ DONE ] Discovering ip protocol version [ DONE ] Setting up ssh keys [ DONE ] Preparing servers [ DONE ] Pre installing Puppet and discovering hosts' details [ DONE ] Adding pre install manifest entries [ DONE ] Installing time synchronization via NTP [ DONE ] Setting up CACERT [ DONE ] Adding AMQP manifest entries [ DONE ] Adding MariaDB manifest entries [ DONE ] Fixing Keystone LDAP config parameters to be undef if empty[ DONE ] Adding Keystone manifest entries [ DONE ] Adding Glance Keystone manifest entries [ DONE ] Adding Glance manifest entries [ DONE ] Adding Cinder Keystone manifest entries [ DONE ] Checking if the Cinder server has a cinder-volumes vg[ DONE ] Adding Cinder manifest entries [ DONE ] Adding Nova API manifest entries [ DONE ] Adding Nova Keystone manifest entries [ DONE ] Adding Nova Cert manifest entries [ DONE ] Adding Nova Conductor manifest entries [ DONE ] Creating ssh keys for Nova migration [ DONE ] Gathering ssh host keys for Nova migration [ DONE ] Adding Nova Compute manifest entries [ DONE ] Adding Nova Scheduler manifest entries [ DONE ] Adding Nova VNC Proxy manifest entries [ DONE ] Adding OpenStack Network-related Nova manifest entries[ DONE ] Adding Nova Common manifest entries [ DONE ] Adding Neutron VPNaaS Agent manifest entries [ DONE ] Adding Neutron FWaaS Agent manifest entries [ DONE ] Adding Neutron LBaaS Agent manifest entries [ DONE ] Adding Neutron API manifest entries [ DONE ] Adding Neutron Keystone manifest entries [ DONE ] Adding Neutron L3 manifest entries [ DONE ] Adding Neutron L2 Agent manifest entries [ DONE ] Adding Neutron DHCP Agent manifest entries [ DONE ] Adding Neutron Metering Agent manifest entries [ DONE ] Adding Neutron Metadata Agent manifest entries [ DONE ] Adding Neutron SR-IOV Switch Agent manifest entries [ DONE ] Checking if NetworkManager is enabled and running [ DONE ] Adding OpenStack Client manifest entries [ DONE ] Adding Horizon manifest entries [ DONE ] Adding Swift Keystone manifest entries [ DONE ] Adding Swift builder manifest entries [ DONE ] Adding Swift proxy manifest entries [ DONE ] Adding Swift storage manifest entries [ DONE ] Adding Swift common manifest entries [ DONE ] Adding Heat manifest entries [ DONE ] Adding Provisioning Demo manifest entries [ DONE ]
Adding Provisioning Demo bridge manifest entries Adding Provisioning Glance manifest entries Adding MongoDB manifest entries Adding Redis manifest entries Adding Ceilometer manifest entries Adding Ceilometer Keystone manifest entries Adding Nagios server manifest entries Adding Nagios host manifest entries Adding post install manifest entries Copying Puppet modules and manifests Applying 192.168.4.101_prescript.pp 192.168.4.101_prescript.pp: Applying 192.168.4.101_chrony.pp 192.168.4.101_chrony.pp: Applying 192.168.4.101_amqp.pp Applying 192.168.4.101_mariadb.pp 192.168.4.101_amqp.pp: 192.168.4.101_mariadb.pp: Applying 192.168.4.101_keystone.pp Applying 192.168.4.101_glance.pp Applying 192.168.4.101_cinder.pp 192.168.4.101_keystone.pp: 192.168.4.101_glance.pp: 192.168.4.101_cinder.pp: Applying 192.168.4.101_api_nova.pp 192.168.4.101_api_nova.pp: Applying 192.168.4.101_nova.pp 192.168.4.101_nova.pp: Applying 192.168.4.101_neutron.pp 192.168.4.101_neutron.pp: Applying 192.168.4.101_osclient.pp Applying 192.168.4.101_horizon.pp 192.168.4.101_osclient.pp: 192.168.4.101_horizon.pp: Applying 192.168.4.101_ring_swift.pp 192.168.4.101_ring_swift.pp: Applying 192.168.4.101_swift.pp 192.168.4.101_swift.pp: Applying 192.168.4.101_heat.pp 192.168.4.101_heat.pp: Applying 192.168.4.101_provision_demo.pp 192.168.4.101_provision_demo.pp: Applying 192.168.4.101_provision_demo_bridge.pp 192.168.4.101_provision_demo_bridge.pp: Applying 192.168.4.101_provision_glance 192.168.4.101_provision_glance: Applying 192.168.4.101_mongodb.pp Applying 192.168.4.101_redis.pp 192.168.4.101_mongodb.pp: 192.168.4.101_redis.pp: Applying 192.168.4.101_ceilometer.pp 192.168.4.101_ceilometer.pp: Applying 192.168.4.101_nagios.pp Applying 192.168.4.101_nagios_nrpe.pp 192.168.4.101_nagios.pp: 192.168.4.101_nagios_nrpe.pp: Applying 192.168.4.101_postscript.pp 192.168.4.101_postscript.pp: Applying Puppet manifests Finalizing
[ [ [ [ [ [ [ [ [ [
DONE DONE DONE DONE DONE DONE DONE DONE DONE DONE
] ] ] ] ] ] ] ] ] ]
[ DONE ] [ DONE ] [ DONE ] [ DONE ]
[ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ] [ DONE ]
**** Installation completed successfully ****** Additional information: * File /root/keystonerc_admin has been created on OpenStack client host 192.168 .4.101. To use the command line tools you need to source the file. * To access the OpenStack Dashboard browse to http://192.168.4.101/dashboard . Please, find your login credentials stored in the keystonerc_admin in your home directory. * To use Nagios, browse to http://192.168.4.101/nagios username: nagiosadmin, p assword: 9bcbedb4f4294a06 * The installation log file is available at: /var/tmp/packstack/20160615-213018 -aoxN7Q/openstack-setup.log * The generated manifests are available at: /var/tmp/packstack/20160615-213018aoxN7Q/manifests [root@openstack-liberty ~]# [root@openstack-liberty -br-ex [root@openstack-liberty [root@openstack-liberty [root@openstack-liberty DEFROUTE=yes PEERDNS=yes PEERROUTES=yes NAME=eth0 ONBOOT=yes IPADDR=192.168.4.101 PREFIX=24 GATEWAY=192.168.4.2 DEVICE=br-ex DEVICETYPE=ovs OVSBOOTPROTO=none TYPE=OVSBridge [root@openstack-liberty DEVICE=eth0 DEVICETYPE=ovs TYPE=OVSPort OVS_BRIDGE=br-ex ONBOOT=yes BOOTPROTO=none [root@openstack-liberty
network-scripts(keystone_admin)]# cp -p ifcfg-eth0 ifcfg network-scripts(keystone_admin)]# vi ifcfg-eth0 network-scripts(keystone_admin)]# vi ifcfg-br-ex network-scripts]# cat ifcfg-br-ex
network-scripts]# cat ifcfg-eth0
network-scripts]#
[root@openstack-liberty network-scripts(keystone_admin)]# ping 8.8.8.8 PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data. 64 bytes from 8.8.8.8: icmp_seq=1 ttl=128 time=50.9 ms 64 bytes from 8.8.8.8: icmp_seq=2 ttl=128 time=18.8 ms ^C --- 8.8.8.8 ping statistics --2 packets transmitted, 2 received, 0% packet loss, time 1000ms rtt min/avg/max/mdev = 18.897/34.934/50.972/16.038 ms [root@openstack-liberty network-scripts(keystone_admin)]# ping www.google.com PING www.google.com (74.125.130.103) 56(84) bytes of data. 64 bytes from sb-in-f103.1e100.net (74.125.130.103): icmp_seq=1 ttl=128 time=53. 6 ms ^C64 bytes from 74.125.130.103: icmp_seq=2 ttl=128 time=53.1 ms
--- www.google.com ping statistics --2 packets transmitted, 2 received, 0% packet loss, time 1002ms rtt min/avg/max/mdev = 53.137/53.373/53.609/0.236 ms
