Preparing your node

Preparing Ubuntu

After you install Ubuntu 12.04 Server 64bits, Go in sudo mode and don't leave it until the end of this guide:

sudo -i

1. Add Icehouse repositories:

apt-get install -y python-software-properties

add-apt-repository cloud-archive:icehouse

2. Update your system:

apt-get -y update && apt-get -y upgrade && apt-get -y dist-upgrade

It could be necessary to reboot your system in case you have a kernel upgrade

Networking

Only one NIC should have an internet access, the other is for most Openstack-related operations and configurations:

#For Exposing OpenStack API over the internet

auto eth1

iface eth1 inet static

address 10.43.1.55

netmask 255.255.255.0

gateway 10.43.1.1

dns-nameservers 172.20.25.111

#Not internet connected(used for OpenStack management)

auto eth0

iface eth0 inet static

address 192.168.10.55

netmask 255.255.255.0

Restart the networking service:

service networking restart

MySQL & RabbitMQ & Others

Install MySQL:

apt-get install -y mysql-server python-mysqldb

Configure mysql to accept all incoming requests:

sed -i 's/127.0.0.1/0.0.0.0/g' /etc/mysql/my.cnf

service mysql restart

2. Install RabbitMQ:

apt-get install -y rabbitmq-server

change the password of guest user for rabbitmq-server.

rabbitmqctl change_password guest root123

3. Install NTP service:

apt-get install -y ntp

Databases set up

Setting up Databases:

Either use the script:

wget https://raw2.github.com/Ch00k/OpenStack-Havana-Install-Guide/master/populate_database.sh

sh populate_database.sh

Or execute all of the following manually:

mysql -u root -p <your_mysql_root_password>

# Keystone

CREATE DATABASE keystone;

GRANT ALL ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'openstacktest';

GRANT ALL ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'openstacktest';

GRANT ALL ON keystone.* TO 'keystone'@'192.168.10.55' IDENTIFIED BY 'openstacktest';

GRANT ALL ON keystone.* TO 'keystone'@'10.43.1.55' IDENTIFIED BY 'openstacktest';

FLUSH PRIVILEGES;

quit;

(test database access and show databases with user keystone)

# Glance

mysql -u root -p your_mysql_root_password

CREATE DATABASE glance;

GRANT ALL ON glance.* TO 'glance'@'%' IDENTIFIED BY 'openstacktest';

GRANT ALL ON glance.* TO 'glance'@'localhost' IDENTIFIED BY 'openstacktest';

GRANT ALL ON glance.* TO 'glance'@'192.168.10.55' IDENTIFIED BY 'openstacktest';

GRANT ALL ON glance.* TO 'glance'@'10.43.1.55' IDENTIFIED BY 'openstacktest';

FLUSH PRIVILEGES;

quit;

(test database access and show databases with user glance)

# Neutron

mysql -u root -p your_mysql_root_password

CREATE DATABASE neutron;

GRANT ALL ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'openstacktest';

GRANT ALL ON neutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'openstacktest';

GRANT ALL ON neutron.* TO 'neutron'@'192.168.10.55' IDENTIFIED BY 'openstacktest';

GRANT ALL ON neutron.* TO 'neutron'@'10.43.1.55' IDENTIFIED BY 'openstacktest';

FLUSH PRIVILEGES;

quit;

(test database access and show databases with user neutron)

# Nova

mysql -u root -p your_mysql_root_password

CREATE DATABASE nova;

GRANT ALL ON nova.* TO 'nova'@'%' IDENTIFIED BY 'openstacktest';

GRANT ALL ON nova.* TO 'nova'@'localhost' IDENTIFIED BY 'openstacktest';

GRANT ALL ON nova.* TO 'nova'@'192.168.10.55' IDENTIFIED BY 'openstacktest';

GRANT ALL ON nova.* TO 'nova'@'10.43.1.55' IDENTIFIED BY 'openstacktest';

FLUSH PRIVILEGES;

quit;

(test database access and show databases with user nova)

# Cinder

mysql -u root -p your_mysql_root_password

CREATE DATABASE cinder;

GRANT ALL ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'openstacktest';

GRANT ALL ON cinder.* TO 'cinder'@'localhost' IDENTIFIED BY 'openstacktest';

GRANT ALL ON cinder.* TO 'cinder'@'192.168.10.55' IDENTIFIED BY 'openstacktest';

GRANT ALL ON cinder.* TO 'cinder'@'10.43.1.55' IDENTIFIED BY 'openstacktest';

FLUSH PRIVILEGES;

quit;

(test database access and show databases with user cinder)

Others

Install other services:

apt-get install -y vlan bridge-utils

Enable IP_Forwarding:

sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf

# To save you from rebooting, perform the following

sysctl net.ipv4.ip_forward=1

3. Keystone

Start by the keystone packages:

apt-get install -y keystone
Verify your keystone is running:

service keystone status
Adapt the connection attribute in the /etc/keystone/keystone.conf to the new database:

connection = mysql://keystone:openstacktest@192.168.10.55/keystone
Remove Keystone SQLite database:

rm /var/lib/keystone/keystone.db
Restart the identity service then synchronize the database:

service keystone restart

keystone-manage db_sync
Fill up the keystone database using the two scripts available in the Scripts folder of this git repository:

#Modify the HOST_IP and EXT_HOST_IP variables before executing the scripts

wget https://raw2.github.com/Ch00k/OpenStack-Havana-Install-Guide/master/keystone_basic.sh

wget https://raw2.github.com/Ch00k/OpenStack-Havana-Install-Guide/master/keystone_endpoints_basic.sh
sh keystone_basic.sh
sh keystone_endpoints_basic.sh
Create a simple credential file and load it so you won't be bothered later:

nano/vi keystone_source

#Paste the following:

export OS_TENANT_NAME=admin

export OS_USERNAME=admin

export OS_PASSWORD=openstacktest

export OS_AUTH_URL="http://10.43.1.55:5000/v2.0/"

# Load it:

source keystone_source

To test Keystone, just use a simple CLI command:

keystone user-list

4. Glance

apt-get install -y glance
Verify your glance services are running:

service glance-api status

service glance-registry status
Update the /etc/glance/glance-api-paste.ini and /etc/glance/glance-registry-paste.ini with:

[filter:authtoken]

paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory

auth_host = 192.168.10.55

auth_port = 35357

auth_protocol = http

admin_tenant_name = service

admin_user = glance

admin_password = openstacktest
Update /etc/glance/glance-api.conf and /etc/glance/glance-registry.conf with:

[DEFAULT]

sql_connection = mysql://glance:openstacktest@192.168.10.55/glance

[keystone_authtoken]

auth_host = 192.168.10.55

auth_port = 35357

auth_protocol = http

admin_tenant_name = service

admin_user = glance

admin_password = openstacktest

[paste_deploy]

flavor = keystone
Remove Glance's SQLite database:

rm /var/lib/glance/glance.sqlite
Restart the glance-api and glance-registry services:

service glance-api restart; service glance-registry restart
Synchronize the glance database:

glance-manage db_sync
Error:

root@openstack-sdn:~# glance-manage db_sync

2014-08-07 16:08:42.580 8119 CRITICAL glance [-] ValueError: Tables "migrate_version" have non utf8 collation, please make sure all tables are CHARSET=utf8
Solution:

mysql> use glance

Reading table information for completion of table and column names

You can turn off this feature to get a quicker startup with -A

Database changed

mysql> alter table migrate_version convert to character set utf8 collate utf8_unicode_ci;

Query OK, 1 row affected (0.26 sec)

Records: 1 Duplicates: 0 Warnings: 0

mysql> flush privileges;

Query OK, 0 rows affected (0.00 sec)

mysql> quit;
Restart the services again to take into account the new modifications:

service glance-registry restart; service glance-api restart
To test Glance, upload the cirros cloud image and Ubuntu cloud image:

glance image-create --name myFirstImage --is-public true --container-format bare --disk-format qcow2 --location https://launchpad.net/cirros/trunk/0.3.0/+download/cirros-0.3.0-x86_64-disk.img
Now list the image to see what you have just uploaded:

glance image-list

4. Neutron

OpenVSwitch

Install the openVSwitch:

apt-get install -y openvswitch-controller openvswitch-switch openvswitch-datapath-dkms
Restart openVSwitch:

service openvswitch-switch restart
Create the bridges:

#br-int will be used for VM integration

ovs-vsctl add-br br-int

#br-ex is used to make VMs to access the internet

ovs-vsctl add-br br-ex
OpenVSwitch (Part2, modify network parameters)

This will guide you to setting up the br-ex interface. Edit the eth1 in /etc/network/interfaces to become like this:

# VM internet Access

auto eth1

iface eth1 inet manual

up ifconfig $IFACE 0.0.0.0 up

up ip link set $IFACE promisc on

down ip link set $IFACE promisc off

down ifconfig $IFACE down
Add the eth1 to the br-ex:

#Internet connectivity will be lost after this step but this won't affect OpenStack's work

ovs-vsctl add-port br-ex eth1

If you want to get internet connection back, you can assign the eth1's IP address to the br-ex in the /etc/network/interfaces file:

auto br-ex

iface br-ex inet static

address 10.43.1.55

netmask 255.255.255.0

gateway 10.43.1.1

dns-nameservers 10.43.1.1
If you want IMMEDIATELY want your FULL networking features back I suggest:

reboot
source keystone_source (to get your environnment variables back)
Neutron-*
Install the Neutron components:

apt-get install -y neutron-server neutron-plugin-openvswitch neutron-plugin-openvswitch-agent dnsmasq neutron-dhcp-agent neutron-l3-agent neutron-metadata-agent
Verify all Neutron components are running:

cd /etc/init.d/; for i in $( ls neutron-* ); do sudo service $i status; cd; done
Edit /etc/neutron/api-paste.ini

[filter:authtoken]

paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory

auth_host = 192.168.10.55

auth_port = 35357

auth_protocol = http

admin_tenant_name = service

admin_user = neutron

admin_password = openstacktest
Edit the OVS plugin configuration file /etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini with::

#Under the database section

[DATABASE]

sql_connection=mysql://neutron:openstacktest@192.168.10.55/neutron

#Under the OVS section

[OVS]

tenant_network_type = gre

enable_tunneling = True

tunnel_id_ranges = 1:1000

integration_bridge = br-int

tunnel_bridge = br-tun

local_ip = 192.168.10.55

#Firewall driver for realizing neutron security group function

[SECURITYGROUP]

firewall_driver = neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
Update /etc/neutron/metadata_agent.ini:

# The Neutron user information for accessing the Neutron API.

auth_url = http://192.168.10.55:35357/v2.0

auth_region = RegionOne

admin_tenant_name = service

admin_user = neutron

admin_password = openstacktest

# IP address used by Nova metadata server

nova_metadata_ip = 192.168.10.55

# TCP Port used by Nova metadata server

nova_metadata_port = 8775

metadata_proxy_shared_secret = helloOpenStack
Edit your /etc/neutron/neutron.conf:

#RabbitMQ IP

rabbit_host = 192.168.10.55

rabbit_password = root123

[keystone_authtoken]

auth_host = 192.168.10.55

auth_port = 35357

auth_protocol = http

admin_tenant_name = service

admin_user = neutron

admin_password = openstacktest

signing_dir = /var/lib/neutron/keystone-signing

[DATABASE]

connection = mysql://neutron:openstacktest@192.168.10.55/neutron

# openstack-config --set /etc/neutron/neutron.conf DEFAULT \

notify_nova_on_port_status_changes True