Ask Your Question

ahmedmmm's profile - activity

2019-09-30 17:44:59 -0600 received badge  Famous Question (source)
2019-03-18 17:32:16 -0600 answered a question Problem with external/public network, even though I can see the floating IPs in the "attached devices" list of my physical router

yes, i face same issue i can't understand why it's not working over ESXi !

2019-03-17 20:02:25 -0600 received badge  Notable Question (source)
2019-03-17 10:15:25 -0600 answered a question can't ping external g/w

anyone know how to solve this issue?

2019-03-16 14:40:06 -0600 received badge  Popular Question (source)
2019-03-16 09:23:10 -0600 commented question can't ping external g/w

note: openstack AIO hosted as VM over ESXI host,and i configure virtual switch in esxi for this vSwitch in ESXi. openstack eth0 connected to this virtual switch that have vlan 10 because external subnet 10.252.12.32/27 should be exist in vlan 10.

from openstack side i should also tagged?

2019-03-16 09:23:10 -0600 commented question can't ping external g/w

external subnet 10.252.12.32/27 and gw is 10.252.12.33 openstack 10.252.12.60 so br-ex: 10.252.12.60 router interface :10.252.12.57

i deploy using this command packstack --allinone --provision-demo=n --os-neutron-ovs-bridge-mappings=extnet:br-ex --os-neutron-ovs-bridge-interfaces=br-ex:eth0

2019-03-16 05:15:07 -0600 answered a question can't ping external g/w

br-ex : 10.252.12.60 ( AIO IP) router external ip : 10.252.12.57 10.252.12.33 is external G/W.

2019-03-16 05:15:07 -0600 commented question can't ping external g/w

deployed by packstack,AOI server.

[root@os ~]# ifconfig
br-ex: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 10.252.12.60  netmask 255.255.255.224  broadcast 10.252.12.63
        inet6 fe80::ac9e:64ff:fe1d:cd44  prefixlen 64  scopeid 0x20<link>
        ether
2019-03-16 02:42:13 -0600 asked a question can't ping external g/w

Hi, i can't ping instance or ssh from outside,after tshoot i find router ip [10.252.12.57]can't reach it's external gw [10.252.12.33] External subnet: 10.252.12.32/27

1-tcpdump of pining external interface 10.252.12.33

[root@os ~(keystone_admin)]# ip netns exec qrouter-e5a061c1-6612-4c60-8066-927c0751f53f  tcpdump -i any icmp -nn
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on any, link-type LINUX_SLL (Linux cooked), capture size 262144 bytes
08:09:17.110553 IP 10.252.12.57 > 10.252.12.57: ICMP host 10.252.12.33 unreachable, length 92
08:09:17.110563 IP 10.252.12.57 > 10.252.12.57: ICMP host 10.252.12.33 unreachable, length 92
08:09:17.110570 IP 10.252.12.57 > 10.252.12.57: ICMP host 10.252.12.33 unreachable, length 92

2-ifconfig from router

[root@os ~(keystone_admin)]# ip netns exec qrouter-e5a061c1-6612-4c60-8066-927c0751f53f ifconfig
lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536
        inet 127.0.0.1  netmask 255.0.0.0
        inet6 ::1  prefixlen 128  scopeid 0x10<host>
        loop  txqueuelen 1000  (Local Loopback)
        RX packets 100  bytes 9800 (9.5 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 100  bytes 9800 (9.5 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

qg-3cbaae0b-e4: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1450
        inet 10.252.12.57  netmask 255.255.255.224  broadcast 10.252.12.63
        inet6 fe80::f816:3eff:fe38:4f76  prefixlen 64  scopeid 0x20<link>
        ether fa:16:3e:38:4f:76  txqueuelen 1000  (Ethernet)
        RX packets 39  bytes 2068 (2.0 KiB)
        RX errors 0  dropped 2  overruns 0  frame 0
        TX packets 184  bytes 9104 (8.8 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

qr-78dba6f1-fe: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1450
        inet 10.0.0.1  netmask 255.255.255.0  broadcast 10.0.0.255
        inet6 fe80::f816:3eff:fe98:5cdf  prefixlen 64  scopeid 0x20<link>
        ether fa:16:3e:98:5c:df  txqueuelen 1000  (Ethernet)
        RX packets 1332  bytes 136500 (133.3 KiB)
        RX errors 0  dropped 0  overruns 0  frame 0
        TX packets 1662  bytes 164677 (160.8 KiB)
        TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

3-route -n from router

[root@os ~(keystone_admin)]# ip netns exec qrouter-e5a061c1-6612-4c60-8066-927c0751f53f route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.252.12.33    0.0.0.0         UG    0      0        0 qg-3cbaae0b-e4
10.0.0.0        0.0.0.0         255.255.255.0   U     0      0        0 qr-78dba6f1-fe
10.252.12.32    0.0.0.0         255.255.255.224 U     0      0        0 qg-3cbaae0b-e4

4-ping instance ip [10.252.12.59] from router namespace[10.252.12.57] working fine

[root@os ~(keystone_admin)]# ip netns exec qrouter-e5a061c1-6612-4c60-8066-927c0751f53f ping 10.252.12.59
PING 10.252.12.59 (10.252.12.59 ...
(more)
2019-02-25 15:48:53 -0600 answered a question centos 7.6 new instillation [Failed to apply catalog: Could not authenticate]

after very long time of tshoot,issue solved!

this issue because i use http proxy in .bashrc and openstack component use http to communicate with each other, so to solve this issue : 1- add proxy from /etc/yum.conf file ( just add proxy=http://xxxx:port 2- in packstack answer file don't download test project because you will face errors to download cirrors image this from y to n -> CONFIG_PROVISION_DEMO=n

or if you want use test project change this URL to be local in your disk to avoid using proxy

CONFIG_PROVISION_UEC_IMAGE_DISK_URL=https://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-disk.img and CONFIG_PROVISION_UEC_IMAGE_KERNEL_URL=https://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-kernel CONFIG_PROVISION_UEC_IMAGE_RAMDISK_URL=https://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-initramfs

2019-02-25 08:08:25 -0600 answered a question centos 7.6 new instillation [Failed to apply catalog: Could not authenticate]

this is error appeared in packstack logs :

2019-02-25 13:42:16::ERROR::run_setup::1059::root:: Traceback (most recent call last): File "/usr/lib/python2.7/site-packages/packstack/installer/run_setup.py", line 1054, in main _main(options, confFile, logFile) File "/usr/lib/python2.7/site-packages/packstack/installer/run_setup.py", line 678, in _main runSequences() File "/usr/lib/python2.7/site-packages/packstack/installer/run_setup.py", line 645, in runSequences controller.runAllSequences() File "/usr/lib/python2.7/site-packages/packstack/installer/setup_controller.py", line 81, in runAllSequences sequence.run(config=self.CONF, messages=self.MESSAGES) File "/usr/lib/python2.7/site-packages/packstack/installer/core/sequences.py", line 109, in run step.run(config=config, messages=messages) File "/usr/lib/python2.7/site-packages/packstack/installer/core/sequences.py", line 50, in run self.function(config, messages) File "/usr/lib/python2.7/site-packages/packstack/plugins/puppet_950.py", line 214, in apply_puppet_manifest wait_for_puppet(currently_running, messages) File "/usr/lib/python2.7/site-packages/packstack/plugins/puppet_950.py", line 128, in wait_for_puppet validate_logfile(log) File "/usr/lib/python2.7/site-packages/packstack/modules/puppet.py", line 107, in validate_logfile raise PuppetError(message) PuppetError: Error appeared during Puppet run: 10.252.12.58_controller.pp Error: Failed to apply catalog: Could not authenticate^[[0m

2019-02-25 07:03:31 -0600 asked a question centos 7.6 new instillation [Failed to apply catalog: Could not authenticate]

hello, i try to install openstack last 3 versions [rocky,queens,pike] using packstack and everytime installition gives me error

ERROR : Error appeared during Puppet run: xxxxxxx_controller.pp Error: Failed to apply catalog: Could not authenticate

after checking packstack logs and full debug it's not show any new information so i opened /var/log/xxx and check openstack components logs, i noticed mariadb have error in both [packstack or devstack]

2019-02-24 22:34:03 140608686713024 [ERROR] mysqld: Server GSSAPI error (major 851968, minor 2529639093) : gss_acquire_cred failed -Unspecified GSS failure. Minor code may provide more information. Keytab FILE:/etc/krb5.keytab is nonexistent or empty. 2019-02-24 22:34:03 140608686713024 [ERROR] Plugin 'gssapi' init function returned error.

OS: Centos 7.6 with last updates , firewalld and selinux , network manager closed and VT enabled in this VM. Ram : 50G , HD: 200G