Ask Your Question

Bernd Bausch's profile - activity

2018-12-14 17:24:19 -0600 commented question Manage docker containers inside openstack instances via python API

You start by entering the error message into a search engine and select the results that best fit your problem.

Also, the sample programs I have seen include a call to set_missing_host_key_policy(). Perhaps that’s required?

2018-12-14 16:46:11 -0600 commented answer Access to openstack instance using python sdk

I misread your question as “OpenStack SDK”, sorry. Paramiko is a library that implements SSH. If you can access the instance with SSH from the command line, it should also work with Paramiko.

2018-12-14 16:41:08 -0600 answered a question Ansible: What are the network bridges for?

The bridges connect containers to the network. Each container has its own set of interfaces, and they must somehow be connected to the physical network infrastructure that links the container hosts. This connection is done through bridges.

While I know very little about OSA, if I understand the documentation page correctly, you have to create them (brctl addbr) and attach them to a physical interface or a VLAN interface (brctl addif). See also (with graphics).

2018-12-14 06:24:44 -0600 answered a question Access to openstack instance using python sdk

The SDK is for managing OpenStack objects - launch and delete instances, attach volumes, upload images etc. Access to instances is normally via network protocols such as ssh, http, etc, not via the SDK.

2018-12-13 22:27:57 -0600 answered a question we need High Availability feature that automatically should start the vi instances to another node from failed compute node without any manual intervention. Can someone help us with the idea to live migrate instances from failed compute node

What is a vi instance? You are not referring to the text editor, right?

You can't live migrate from a failed node. You can however evacuate instances from that node and restart them.

There is an OpenStack project named Masakari whose goal is to provide instance HA. It is still at an early stage, as far as I understand it.

2018-12-13 20:25:05 -0600 commented question Program is slower on VM than on physical node

You don't know how fast the program would run on the physical server used by AWS.

What hypervisor is configured? On the compute node, check nova.conf. Most probably it's libvirt; in which case what is the value of the virt_type config parameter? If qemu, your cloud emulates CPUs, thus slow.

2018-12-13 16:45:15 -0600 commented answer active directory 2008 and keystone integration

This is confusing; I don’t understand what the placement user is doing here. What are your OS_... environment variables set to?

Since this is a different problem, I suggest moving it to a new question.

2018-12-13 16:38:35 -0600 commented question Rocky Release using Ubuntu 18.04 with netplan

I don’t have an answer, but it seems you can still go back to the old way Or here:

There seems to be a migration tool, too: netplan ifupdown-migrate.

2018-12-13 16:28:51 -0600 commented question Openstack Multi Node external network problem

I can’t see your answer file because doesn’t work with mobile Apple devices, but did you follow these instructions:

I.e. you need to insert your home network interface in br-ex.

2018-12-13 05:43:28 -0600 commented answer Openstack private cloud

As long as they are on the same layer 2 network, i.e. can talk to each other with MAC addresses, it should be OK. Everybody uses virtual machines connected with virtual switches to deploy OpenStack for fun and study.

2018-12-13 05:40:54 -0600 commented question Instance not getting IP when ifconfig is used but can see on dashboard

DHCP servers don’t need to run on compute nodes but can. Linuxbridge agents must.

Something wrong with the connection between compute and controllers. Share computes’ ML2 and agent config (e.g.

2018-12-13 04:06:42 -0600 answered a question Openstack private cloud

You can run OpenStack on a single node without switch, but I doubt you want this answer. I think that OpenStack requires nodes to be on the same network, but if they are not connected via switch, perhaps you could connect them to an overlay network. How are your nodes connected if not via switch?

Floating IPs are managed by routers connected to provider networks, so the second answer is no. See also

2018-12-13 03:52:43 -0600 commented question Instance not getting IP when ifconfig is used but can see on dashboard

Yes I should have said Linuxbridge configuration instead of ML2. The installation guide doesn't use Openvswitch nor SRIOV though. Could the problem be there?

2018-12-13 03:50:26 -0600 commented question Instance not getting IP when ifconfig is used but can see on dashboard

When you get a 500 error listing Neutron agents something more fundamental than DHCP is wrong. Check the Neutron logs for clues.

2018-12-13 03:48:09 -0600 commented question active directory 2008 and keystone integration

Please use the 101010 button to turn your code into something readable.

The IBM instructions are for Juno, 4 years old or so. The driver config setting looks incorrect. Try setting it to ldap. See

2018-12-13 03:15:15 -0600 commented question Instance not getting IP when ifconfig is used but can see on dashboard

Instances get IP addresses via DHCP. By default, one DHCP server runs per network. Either the DHCP server is down or a network problem blocks DHCP.

openstack network agent list shows the DHCP server status.

Set the address manually and test connectivity to the router. Double-check ML2 config.

2018-12-12 19:12:01 -0600 answered a question REST API to find out openstack version

Not that easy. You can, in principle, run a heterogeneous cloud consisting of Rocky Nova, Queens Cinder etc. This is even supported during an upgrade: You upgrade one physical node after the other, while the cloud is running, and during the process you have a mix of version x and version x+1.

But of course, you don't want to mix versions in a production cloud, except for the short upgrade window.

You use nova-manage, cinder-manage etc to get the versions of each service, but these commands access the database and print the database version rather than making an API.

The best bet IMO is to retrieve the API version. Those services that support microversions will also provide the most recent microversion, from which you can derive the OpenStack version. For example Nova:

$ curl | python -m json.tool
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   381  100   381    0     0  27846      0 --:--:-- --:--:-- --:--:-- 29307
    "versions": [
            "id": "v2.0",
            "links": [
                    "href": "",
                    "rel": "self"
            "min_version": "",
            "status": "SUPPORTED",
            "updated": "2011-01-21T11:33:21Z",
            "version": ""
            "id": "v2.1",
            "links": [
                    "href": "",
                    "rel": "self"
            "min_version": "2.1",
            "status": "CURRENT",
            "updated": "2013-07-23T11:33:21Z",
            "version": "2.65"

The very last line, "version": "2.65", shows that this is Rocky.

2018-12-12 16:04:45 -0600 commented question Exception for imageservice java class for larger images

What’s the file size? Do you get a timeout when you use the openstack client?

It’s not quite clear what times out. Try separating image creation (“reservation”) and upload.

2018-12-12 07:59:22 -0600 commented question I'm getting an error while trying to run the script it's showing the following error can anyone please help?Thank you in advance :)

Third, did you run on a freshly installed system? If your system contains any Python libraries that are out of date or otherwise incompatible, anything can happen. Start from scratch: Reinstall the OS, clone the repo and run

2018-12-12 07:57:13 -0600 commented question I'm getting an error while trying to run the script it's showing the following error can anyone please help?Thank you in advance :)

Next, is there another error or warning message earlier in the log? Of course, given your local.conf, you have no log file. Add log file directives to local.conf and run again. Look for other errors or warnings.

2018-12-12 07:56:07 -0600 commented question I'm getting an error while trying to run the script it's showing the following error can anyone please help?Thank you in advance :)

I have several thoughts. First, a glitch? You are installing from the master branch of devstack, and copies the master branch from Keystone. Perhaps it's unstable at times. Have you considered using the stable/rocky branch of devstack? Add option -b stable/rocky to the clone command.

2018-12-12 01:42:24 -0600 answered a question Why does ceilometer not use gnocchi as default backend database?

I think it actually does, at least for Rocky. See the git repository.

It might be that the method you use to install Ceilometer configures a different pipeline.

2018-12-12 01:33:51 -0600 commented question I'm getting an error while trying to run the script it's showing the following error can anyone please help?Thank you in advance :)

Try formatting the output as code using the "101010" button, otherwise it's just a wall of unreadable text.

What is your local.conf? What command did you use to clone Devstack? Are you installing it on a freshly installed system? What distro do you use to run Devstack?

2018-12-11 23:58:46 -0600 answered a question Can anyone please explain how nova-compute service depends on libvirt-bin service ?

There is no service libvirt-bin. There is, however, a libvirt-bin software package. If that's what you mean: nova-compute manages VMs, and it uses libvirt to do that in most cases.

You can configure Nova so that it uses a different VM management method, for example native Xen, but most OpenStack clouds configure libvirt.

2018-12-11 16:52:35 -0600 commented answer can't ssh an instance

I would suspect some other device has the same IP address.

2018-12-11 16:48:59 -0600 commented question Starting with openstack ansible hardening

setup.cfg and are part of the software setup framework of all Python packages, not only in OpenStack.

Zuul is a central part of OpenStack testing and CI.

2018-12-11 16:45:46 -0600 commented question Starting with openstack ansible hardening

The project has a documentation site. You can also use the openstack-discuss mailing list; include [ansible-hardening] in the subject. They should have an IRC channel, too, but I currently don’t see it documented.

2018-12-11 16:39:13 -0600 answered a question Cleaning the volume

The point of a volume is that it conserves the data on it. If you want to wipe it, you have to do that yourself, but again, that defeat’s the volume’s purpose.

Why don’t you want to delete the volume?

2018-12-11 16:07:30 -0600 commented question Exception for imageservice java class for larger images

What exactly do you do to get this exception? Are you running programs that use OpenStack’s Java SDK?

2018-12-11 16:05:44 -0600 commented question ceph [errno 110] error connecting to the cluster

Looks like ceph.conf is not found. It doesn’t exist or is not at the expected location.

2018-12-11 08:32:30 -0600 commented answer can't ssh an instance

For all instances that you launch with mykey. But if you like you can create other keypairs and run instances with those.

2018-12-11 08:09:56 -0600 commented question ceph [errno 110] error connecting to the cluster

110 means "connection timed out". I guess Ceph is not running or not reachable.

2018-12-11 08:04:19 -0600 answered a question can't ssh an instance

Best practice is to not have passwords on cloud instances. If you have several hundred instances to look after, you either give them the same password (bad for security) or you have to remember several hundred passwords (good luck).

So, the standard practice is to use password-less ssh. You set up a keypair (openstack keypair create mykey > mykey.pem), launch the instance with the key (openstack server create --key-name mykey ...), and ssh into the instance using the private key (ssh -i mykey.pem ...).

i suggest you learn about ssh and keys, and Nova and keypairs.

2018-12-11 06:12:03 -0600 commented answer Docker with openstack

I have deployed Docker on VMs with one CPU and 2GB memory. Docker doesn’t load your system. What loads your system is the applications you run in containers. You know best what their requirements are.

2018-12-11 06:08:26 -0600 commented question cloud-init user-data flag

There is an issue with your network config or metadata server. Does the instance have any network connectivity? Is the metadata service running? Check with openstack network agent list.

Not sure what the ubuntu module is about. I will have a look at your parameters; don’t hold your breath.

2018-12-11 04:12:24 -0600 commented question cloud-init user-data flag

I use it and it works. On your instance, can you curl What is the precise error message from cloud-init? What user data do you send to the instance?

2018-12-11 04:08:50 -0600 answered a question Docker with openstack

You say:

systems/applications inside openstack instances using docker container

If you plan to run instances as Docker containers, you need to use the Nova Docker driver. I don't think it is still supported, though. Linux container instances (using LXD) are supported and are promoted by Canonical.

If you want to run Docker on instances, just deploy Docker on the instances. How? Any way you like; instances are just like physical machines as far as Docker is concerned. There are many options, but you can start at the Docker quick start series of web pages. Or use Magnum to deploy a Docker Swarm, Kubernetes or Mesos cluster on instances.