gilangvperdana

General

You want to create an Ubuntu VM on top of openstack as a Instance Gateway

Goals

My instance in openstack must be connected to the internet (0.0.0.0/0) via VM Gateway because only from this gateway is internet connection allowed, but apart from that my instance still needs to be able to connect to the client aka be able to SSH.

Topology

• Segment 192.168.203.0/24
• Gateway 192.168.203.1
• VM Gateway 192.168.203.2

gilangvperdana

General

I just curios about Proxy, so i will install Squid for Proxy Server & Connect it to client

Squid Installation

apt update -y
apt install -y squid

Squid Configuration

gilangvperdana

General

If you want to forward packet from your windows server to local server you can use this command

Command

Use case : i want to forward If user call 192.168.100.233 port 8006 it will be forwarded to 192.168.100.254 port 8006

netsh interface portproxy add v4tov4 listenport=8006 listenaddress=192.168.100.233 connectport=8006 connectaddress=192.168.100.254

gilangvperdana

General

If you have an issue while deploying an ISO to Openstack (maybe need some drive like VirtIO on Windows ISO, etc) you can use 3rd party KVM Management like virt-manager.

Case

We failed to deploy an Windows Server directly from ISO, disk not detected while first setup on Openstack & it's same when we try to deploy RHEL & Ubuntu desktop. We need to try attach the ISO from CDROM on Console, but on openstack it not supported.

Virt-manager

Virt-manager are powerfull tools to contact the KVM virtualization to organize your Instance deployment like Ordering your bootable, attach CDROM, change Protocol for Storage, CDROM to SATA/ISCSI/etc.

Unfortunately

gilangvperdana

General

If you want to integrate Horizon authentication with User on AD/LDAP you can follow this step. This step is confirmed work as expected on Openstack Kolla Ansible Caracal Ubuntu 22.04 LTS.

Pre-requisites

• Horizon with Multidomain Authentication
• AD / LDAP
• Reachable AD / LDAP Server from all Openstack Management Interface

Configure Keystone

gilangvperdana

General

If you need an external SAN (TrueNAS) for storage backend on Cinder Openstack, you can follow this guidance. Tested on me on Openstack Kolla-ansible Caracal Ubuntu 22.04 LTS.

Pre-requisites

• Openstack Caracal with Cinder ISCSI Backend Enabled
• TrueNAS
• TrueNAS Cinder Driver (https://github.com/iXsystems/cinder)
• Makesure your TrueNAS endpoint reachable from Management Interface all Openstack Nodes

Create Dataset on Truenas

gilangvperdana

General

If you want to add routing to Private Network like Pritunl Server, you can follow this step for OpenVPN CLI

Edit server.conf

Assume 192.168.10.0/24 are network we want to reach from OpenVPN Client

nano /etc/openvpn/server.conf

push route "192.168.10.0 255.255.255.0"

gilangvperdana

General

I have a TrueNAS node & i want to integrate it with Cinder. How to? here we go.

Pre-requirement

• Openstack Cluster with Cinder Enabled (i use Kolla Ansible for Deployer)
• TrueNAS with Pool & Dataset allocation

Enable Cinder with ISCSI Backend

nano /etc/kolla/globals.yaml

gilangvperdana

ceph health detail
ceph -s

ceph tell osd.* config get osd_max_backfills
ceph tell osd.* config get osd_max_backfills 2

ceph tell osd.* config get osd_recovery_max_active
ceph tell osd.* config set osd_recovery_max_active 4

ceph pg deep-scrub $numberpg

gilangvperdana

Installation with Cephadm

apt update -y && apt-get full-upgrade -y
apt install cephadm

 cephadm add-repo --release quincy
 cephadm install
 cephadm install  ceph-common