jbdkz100's profile - activity

Resolved, after activating firewalld logging, I found out that the VXLAN upd port 8472 was the problem, I opened the port on both the controller and the compute node, and instances are not getting DHCP leases.

Resolved, after activating firewalld logging, I found out that the VXLAN upd port 8472 was the problem, I opened the port on both the controller and the compute node, and instances are not getting DHCP leases.

I have built a test Openstack Environment, identical to the Newton install guide, on virtual servers running CentOS7, I chose networking option 2, self-service network, as explained in the guide (see link):

https://docs.openstack.org/newton/install-guide-rdo/neutron-controller-install-option2.html

My Cirros instances only get assigned a DHCP address when the CentOS7 firewall is disabled on both Controller and Compute.

NICs on both Controller and Compute are in the public zone. I have issued the following commands on both for DHCP, VXLAN ports: firewall-cmd --zone=public --add-port=53/udp --permanent firewall-cmd --zone=public --add-port=67/udp --permanent firewall-cmd --zone=public --add-port=68/udp --permanent firewall-cmd --zone=public --add-port=4789/udp --permanent firewall-cmd --zone=public --add-service=dhcp --permanent firewall-cmd --reload

In addition, I opened up all firewall ports as specified in the following link:

http://docs.openstack.org/newton/config-reference/firewalls-default-ports.html

I have already opened up all ports on controller and compute in this Newton firewall guide: http://docs.openstack.org/newton/config-reference/firewalls-default-ports.html

I have chosen Network Option 2, or self service network in the install guide:

http://docs.openstack.org/newton/install-guide-rdo/overview.html#network2

VXLAN is enabled. Is UDP 4786 the only port I need to open?

I have built a test Openstack Environment, identical to the Newton install guide:

http://docs.openstack.org/newton/install-guide-rdo/

My Cirros images only get assigned a DHCP address when the CentOS7 firewall is disabled on both Controller and Compute.

NICs on both Controller and Compute are in the public zone. I have issued the following commands on both for DHCP ports:

firewall-cmd --zone=public --add-port=67/udp --permanent
firewall-cmd --zone=public --add-port=68/udp --permanent
firewall-cmd --reload

In addition, I have also issued the following commands on Controller and Compute:

firewall-cmd --zone=public --add-service=dhcp --permanent
firewall-cmd --reload

I want to install Newton in a test environment so as to teach myself about Openstack. I want install Newton on a Linux distro most widely used by a Managed Cloud Providers as I would eventually be seeking employment in this industry.

In searching the Internet, I have found several articles that Openstack is most widely installed on Ubuntu yet through research it looks like Rackspace is running it on RHEL.

Are there certain industries that one Linux distro is used more than another?

I have setup a test environment using the "OpenStack Installation Guide for Red Hat Enterprise Linux and CentOS" for Mitaka.

OpenStack Installation Guide for Red Hat Enterprise Linux and CentOS

I chose Option 2 for networking, which supports attaching instances to self-service networks.

Management Network: 10.0.0.0/24

Provider Network: 192.168.0.0/24

I have create two instances based on the Cirros image. Each Cirros Linux image can ping the other.

I have defined a floating IP address pool using the following commands:

 neutron net-create ext-net --router:external=True Create an external network for the pool.
Neutron subnet-create --allocation-pool start=10.0.0.40,end=10.0.0.50 --gateway 10.0.0.2 --disabled-dhcp est-net 10.0.0.0/24

I have create a router connecting "ext-net" to Local Network 10.0.0.0/24. I chose 192.168.0.1 as the IP address of the Internal Interface.

I have checked out Floating IP 10.0.0.44 and assigned it to a Cirros Linux instance. I am unable to ping anything on the 10.0.0.0/24 network.

Here is the traceroute from the instance with the floating IP:

Resolved!

my_ip parameter in /ect/nova/nova.conf on controller node was set to the wrong IP address. It was set to the management IP address of the compute node by mistake. I changed it to the management IP address of the controller node and now it is working.

I have created an OpenStack test environment based on the Martika release using the following instructions:

http://docs.openstack.org/mitaka/inst...

My test environment has both a management and provider networks, here are the IPs of my single Controller and Compute nodes:

controller Management Network 10.0.0.10 Provider Network 192.168.0.2

compute1 Management Network 10.0.0.11 Provider Network 192.168.0.3

I am able to create an instance but get the "Failed to connect to server (code: 1006) when try to connect to the console of my Cirros based instance.

"controller" resolves to 10.0.0.10 and is in the host file of all servers in the test OpenStack environment. Here are the relevant portions of the /etc/nova/nova.conf file from the compute node:

 [DEFAULT]
...
my_ip = 10.0.0.11

[vnc]
...
vncserver_listen = $my_ip
vncserver_proxyclient_address = $my_ip

[glance]
...
api_servers = http://controller:9292

Barry, this was a password issue with the Keystone database. It is working for me now.

Thanks for your help!

At this point, should I be able to start openstack-keystone service using systemctl start openstack-keystore.service I get the following error when I attempt "Job for openstack-keystone.service failed because the control process exited with error code.

Thanks Barry for your patience. Openstack-Linux was installed as a pre-req. There are no error messages in keystone.log every line is "INFO" migrate.versioning.api" I temp disabled SE Linux using command setenforce 0 this did not resolve the issue.

/var/log/keystone/keystone.log exists on my controller server. I can examine the contents using VIM. I do not get any permission errors when I type in vim /var/log/keystone/keystone.log as mentioned, I am logged in as root.

/var/log/keystone/keystone.log does exist on my controller server.

Thanks Barry, I did as you suggested but have the same issue. The only strange thing is when I ran su -s /bin/sh -c "keystone-manage db_sync" keystone I get the following error on the last line: IOError: [Errno 13] permission denied: '/var/log/keystone/keystone.log' I am logged in as root.

I am following the OpenStack procedure (below) and am at the service create step.

http://docs.openstack.org/mitaka/install-guide-rdo/keystone-services.html (http://docs.openstack.org/mitaka/inst...)

When I run as root:

openstack service create --name keystone --description "OpenStack Identity" identity

I get the following error:

Internal Server Error (HTTP 500)

When I run ps -aux | grep keystone I see 10 processes.

Thanks,

John