Openstack Installation and theory

openstack-installation

##############################
#  Openstack Installation on Os- {Redhat,Fedora,Centos}
##############################

# Redhat

subscription-manager repos --enable rhel-7-server-optional-rpms
subscription-manager repos --enable rhel-7-server-extras-rpms

yum update  all

systemctl stop NetworkManager  
systemctl disable NetworkManager

systemctl restart network

# Common installation steps

sudo yum install -y https://rdoproject.org/repos/rdo-release.rpm
sudo yum install -y openstack-packstack
packstack --allinone

packstack  --gen-answer-file=answerfile.txt

packstack --answer-file=answerfile.txt


## Ubuntu Manual Installation

touch /etc/apt/sources.list.d/ubuntu-cloud-archive-juno-trusty.list

cat >> /etc/apt/sources.list.d/ubuntu-cloud-archive-juno-trusty.list <<HERE
deb http://ubuntu-cloud.archive.canonical.com/ubuntu trusty-updates/juno main
HERE

apt-get update

apt-get install ubuntu-cloud-keyring && apt-get install python-software-properties  && apt-get update && apt-get dist-upgrade

apt-get install ntp -y && service ntp restart && apt-get install vlan bridge-utils -y && apt-get install mariadb-server python-mysqldb -y

apt-get install rabbitmq-server -y

apt-get install openswitch

mysql -u root -p <<EOF

CREATE DATABASE nova;

GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%' IDENTIFIED BY 'password';

CREATE DATABASE cinder;

GRANT ALL PRIVILEGES ON cinder.* TO 'cinder'@'%' IDENTIFIED BY 'password';

CREATE DATABASE glance;

GRANT ALL PRIVILEGES ON glance.* TO 'glance'@'%' IDENTIFIED BY 'password';

CREATE DATABASE neutron;

GRANT ALL PRIVILEGES ON neutron.* TO 'neutron'@'%' IDENTIFIED BY 'password';

CREATE DATABASE keystone;

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'password';

FLUSH PRIVILEGES;

connection = mysql://keystone:password@0.0.0.0/keystone
connection = mysql://glance:password@0.0.0.0/glance
connection = mysql://nova:password@0.0.0.0/nova
connection = mysql://cinder:password@0.0.0.0/cinder
connection = mysql://neutron:password@0.0.0.0/neutron

export OS_SERVICE_TOKEN=ADMIN
export OS_SERVICE_ENDPOINT=http://10.138.86.144:35357/v2.0



export OS_USERNAME=admin
export OS_PASSWORD=ADMIN
export OS_TENANT_NAME=admin
export OS_AUTH_URL=http://10.138.86.144:35357/v2.0

keystone tenant-create --name=admin --description="Admin Tenant" && keystone tenant-create --name=service --description="Service Tenant" && keystone user-create --name=admin --pass=ADMIN --email=admin@example.com && keystone role-create --name=admin && keystone user-role-add --user=admin --tenant=admin --role=admin && keystone service-create --name=keystone --type=identity --description="Keystone Identity Service" && keystone endpoint-create --service=keystone --publicurl=http://10.138.86.144:5000/v2.0 --internalurl=http://10.138.86.144:5000/v2.0 --adminurl=http://10.138.86.144:35357/v2.0

keystone user-create --name=glance --pass=password --email=glance@example.com && keystone user-role-add --user=glance --tenant=service --role=admin && keystone service-create --name=glance --type=image --description="Glance Image Service" && keystone endpoint-create --service=glance --publicurl=http://10.138.86.144:9292 --internalurl=http://10.138.86.144:9292 --adminurl=http://10.138.86.144:9292

keystone user-create --name=nova --pass=password --email=nova@example.com && keystone user-role-add --user=nova --tenant=service --role=admin && keystone service-create --name=nova --type=compute --description="OpenStack Compute" && keystone endpoint-create --service=nova --publicurl=http://10.138.86.144:8774/v2/%\(tenant_id\)s --internalurl=http://10.138.86.144:8774/v2/%\(tenant_id\)s --adminurl=http://10.138.86.144:8774/v2/%\(tenant_id\)s

keystone user-create --name=neutron --pass=password --email=neutron@example.com && keystone service-create --name=neutron --type=network --description="OpenStack Networking" && keystone user-role-add --user=neutron --tenant=service --role=admin && keystone endpoint-create --service=neutron --publicurl http://10.138.86.144:9696 --adminurl http://10.138.86.144:9696  --internalurl http://10.138.86.144:9696 

keystone user-create --name=cinder --pass=password --email=cinder@example.com && keystone user-role-add --user=cinder --tenant=service --role=admin && keystone service-create --name=cinder --type=volume --description="OpenStack Block Storage" && keystone endpoint-create --service=cinder --publicurl=http://10.138.86.144:8776/v1/%\(tenant_id\)s --internalurl=http://10.138.86.144:8776/v1/%\(tenant_id\)s --adminurl=http://10.138.86.144:8776/v1/%\(tenant_id\)s && keystone service-create --name=cinderv2 --type=volumev2 --description="OpenStack Block Storage v2"

auth_uri = http://10.138.86.144:5000/v2.0
identity_uri = http://10.138.86.144:35357
admin_tenant_name = service
admin_user = neutron
admin_password = password
signing_dir = $state_path/keystone-signing


### Network configuration in Ubuntu

Bind eth2 to the external bridge

ovs-vsctl add-port br-ex eth2
# Enable external network access under nested Open vSwitch
ifconfig br-ex promisc up
Update the external bridge configuration

vim /etc/network/interfaces
# Modify the corresponding configuration
auto eth2
iface eth2 inet manual
    up ifconfig $IFACE 0.0.0.0 up
    up ip link set $IFACE promisc on
    down ip link set $IFACE promisc off 
    down ifconfig $IFACE down
 
auto br-ex
iface br-ex inet static
    address {put_eth2_ip_here}
    netmask 255.255.255.0
    up ip link set $IFACE promisc on
    down ip link set $IFACE promisc off
Restart the network service

/etc/init.d/networking restart





### Neutron Configuration

#Clearing the default router settings
neutron router-gateway-clear router1
neutron subnet-delete public_subnet
neutron router-interface-delete router1 private_subnet
neutron subnet-delete private_subnet
neutron net-delete private
neutron router-delete router1


#First private subnet
neutron router-create router1
neutron net-create private
neutron subnet-create --name private_subnet private 192.168.100.0/24 --allocation-pool start=192.168.100.204,end=192.168.100.254 --dns-nameservers list=true 8.8.8.8 4.2.2.2
neutron router-interface-add router1 private_subnet

neutron net-create public --router:external=True
neutron subnet-create public 10.138.86.128/26 --name public_subnet --enable_dhcp=False --allocation-pool start=10.138.86.134,end=10.138.86.143 --gateway=10.138.86.129 --dns-nameservers list=true 8.8.8.8 4.2.2.2
neutron router-gateway-set router1 public

### Neutron Commands

neutron net-external-list
neutron router-list

How to Login to a instance

ip netns exec qrouter-67aca2e9-ed29-4516-93e8-b56a7580e259 ssh -i cloud.key core@$instance_ip

How to Ping to a instance

ip netns exec qrouter-3c0d40eb-12df-4a28-a37d-e9b80dc43507 ping -c 2 $instance_ip

In normal operation, a network interface is in non-promiscuous mode, which means
that when the interface receives a frame that is not directly addressed to it or is not a
broadcast frame, then the interface drops that frame. In order to serve in a bridge, the
physical network interface must be placed in promiscuous mode

Open vSwitch patch ports are used to connect Open vSwitch bridges to each other,
while Linux veth cables are used to connect Open vSwitch bridges to Linux bridges,
or Linux bridges to other Linux bridges.

For an Ethernet frame to travel from the virtual machine instance out through the
physical server interface, it will pass through nine devices inside the host:
• Tap interface: tapXXXX
• Linux bridge: qbrYYYY
• Veth pair: qvbYYYY, qvoYYYY
• OVS integration bridge: br-int
• OVS patch ports: int-br-ethX, phy-br-ethX
• OVS provider bridge: br-ethX
• Physical interface: ethX