Installation

The following procedure can be used to install OpenStack Grizzly  on Ubuntu 12.04 LTS

All the commands in this procedure should be run as the root user

Add the repositories for installing OpenStack grizzly

apt-get install ubuntu-cloud-keyring python-software-properties software-properties-common python-keyring
echo deb http://ubuntu-cloud.archive.canonical.com/ubuntu precise-updates/grizzly main >> /etc/apt/sources.list.d/grizzly.list

Update to install the latest paackages

apt-get update
apt-get upgrade

The Support packages

Install the supporting packages

apt-get install -y mysql-server python-mysqldb rabbitmq-server ntp vlan bridge-utils

Change mysql configuration

sed -i 's/127.0.0.1/0.0.0.0/g' /etc/mysql/my.cnf
service mysql restart

Enable IP forwarding

sed -i 's/#net.ipv4.ip_forward=1/net.ipv4.ip_forward=1/' /etc/sysctl.conf
sysctl net.ipv4.ip_forward=1

Keystone (Authentication)

Install Keystone

apt-get install -y keystone

Create mysql database named keystone and add credentials

mysql -u root -p
CREATE DATABASE keystone;
GRANT ALL ON keystone.* TO 'keystoneUser'@'%' IDENTIFIED BY 'keystonePass';
quit;

Edit the file /etc/keystone/keystone.conf and edit the following line, so it looks like this

connection = mysql://keystoneUser:keystonePass@/keystone

Restart the keystone service and sync the database

service keystone restart
keystone-manage db_sync

Commands to create the authorization needed by other services

keystone tenant-create --name=admin
keystone tenant-create --name=service
keystone user-create --name=admin --pass=admin_pass --email=admin@domain.com
keystone role-create --name=admin
keystone role-create --name=KeystoneAdmin
keystone role-create --name=KeystoneServiceAdmin

Use the following commands to list the IDs needed to proceed with other commands

keystone user-list
keystone role-list
keystone tenant-list

Run the following commands

keystone user-role-add --user-id <admin_user_id> --role-id <admin_role_id> --tenant-id <admin_tenant_id>
keystone user-role-add --user-id <admin_user_id> --role-id <keystoneadmin_role_id> --tenant-id <admin_tenant_id>
keystone user-role-add --user-id <admin_user_id> --role-id <keystoneservice_role_id> --tenant-id <admin_tenant_id>

Create a role named “member”

keystone role-create --name=Member

Create user “nova”

keystone user-create --name=nova --pass=nova_pass --tenant-id <service_tenant_id> --email=nova@domain.com
keystone user-role-add --tenant-id <service_tenant_id> --user-id <nova_user_id> --role-id <admin_role_id>

Create user “glance”

keystone user-create --name=glance --pass=glance_pass --tenant-id <service_tenant_id> --email=glance@domain.com
keystone user-role-add --tenant-id <service_tenant_id> --user-id <glance_user_id> --role-id <admin_role_id>

Create user “quantum”

keystone user-create --name=quantum --pass=quantum_pass --tenant-id <service_tenant_id> --email=quantum@domain.com
keystone user-role-add --tenant-id <service_tenant_id> --user-id <quantum_tenant_id> --role-id <admin_role_id>

Create user “cinder”

keystone user-create --name=cinder --pass=cinder_pass --tenant-id <service_tenant_id> --email=cinder@domain.com
keystone user-role-add --tenant-id <service_tenant_id> --user-id <cinder_tenant_id> --role-id <admin_role_id>

Create services

keystone service-create --name nova --type compute --description 'OpenStack Compute Service'
keystone service-create --name cinder --type volume --description 'OpenStack Volume Service'
keystone service-create --name glance --type image --description 'OpenStack Image Service'
keystone service-create --name keystone --type identity --description 'OpenStack Identity
keystone service-create --name ec2 --type ec2 --description 'OpenStack EC2 service'
keystone service-create --name quantum --type network --description 'OpenStack Networking service'

Use the following command to retrieve the service IDs

keystone service-list

Create end-points

keystone endpoint-create --region  --service-id <nova_service_id> --publicurl 'http://<IP_address>:8774/v2/$(tenant_id)s' --adminurl 'http://<IP_address>:8774/v2/$(tenant_id)s' --internalurl 'http://<IP_address>:8774/v2/$(tenant_id)s'
keystone endpoint-create --region  --service-id <cinder_service_id> --publicurl 'http://<IP_address>:8776/v1/$(tenant_id)s' --adminurl 'http://<IP_address>:8776/v1/$(tenant_id)s' --internalurl 'http://<IP_address>:8776/v1/$(tenant_id)s'
keystone endpoint-create --region  --service-id <glance_service_id> --publicurl 'http://<IP_address>:9292/v2' --adminurl 'http://<IP_address>:9292/v2' --internalurl 'http://<IP_address>:9292/v2'
keystone endpoint-create --region  --service-id <keystone_service_id> --publicurl 'http://<IP_address>:5000/v2.0' --adminurl 'http://<IP_address>:35357/v2.0' --internalurl 'http://<IP_address>:5000/v2.0'
keystone endpoint-create --region  --service-id <EC2_service_id> --publicurl 'http://<IP_address>:8773/services/Cloud' --adminurl 'http://<IP_address>:8773/services/Admin' --internalurl 'http://'"$HOST_IP"':8773/services/Cloud'
keystone endpoint-create --region  --service-id <quantum_service_id> --publicurl 'http://<IP_address>:9696/' --adminurl 'http://<IP_address>:9696/' --internalurl 'http://<IP_address>:9696/'

Create a new file named “creds” and add following lines to it

export OS_TENANT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=admin_pass
export OS_AUTH_URL="http://<IP_address>:5000/v2.0/"

Now source the file and test it using keystone command

source creds
keystone user-list

Glance (Image Store)

Install Glance

apt-get install -y glance

Create database and credentials for Glance

mysql -u root -p
CREATE DATABASE glance;
GRANT ALL ON glance.* TO 'glanceUser'@'%' IDENTIFIED BY 'glancePass';
quit;

Update /etc/glance/glance-api-paste.ini with

[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
delay_auth_decision = true
auth_host = <IP_address>
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = service_pass

Update the /etc/glance/glance-registry-paste.ini with

[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
auth_host = <IP_address>
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = glance
admin_password = service_pass

Update /etc/glance/glance-api.conf with

sql_connection = mysql://glanceUser:glancePass@<IP_address>/glance

and

[paste_deploy]
flavor = keystone

Update the /etc/glance/glance-registry.conf with

sql_connection = mysql://glanceUser:glancePass@<IP_address>/glance

and

[paste_deploy]
flavor = keystone

Restart the services

service glance-api restart; service glance-registry restart

sync Glance database

glance-manage db_sync

Upload one image to check if Glance works

glance image-create --name Cirros --is-public true --container-format bare --disk-format qcow2 --location https://launchpad.net/cirros/trunk/0.3.0/+download/cirros-0.3.0-x86_64-disk.img
glance index

Nova (Compute)

Install Nova services

apt-get install -y nova-api nova-cert novnc nova-consoleauth nova-scheduler nova-novncproxy nova-doc nova-conductor nova-compute-kvm

Create and configure Database named Nova

mysql -u root -p
CREATE DATABASE nova;
GRANT ALL ON nova.* TO 'novaUser'@'%' IDENTIFIED BY 'novaPass';
quit;

Update /etc/nova/api-paste.ini with

[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
auth_host = <IP_address>
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = nova
admin_password = service_pass
signing_dirname = /tmp/keystone-signing-nova
# Workaround for https://bugs.launchpad.net/nova/+bug/1154809
auth_version = v2.0

Remove all the lines from /etc/nova/nova.conf and add the following lines

[DEFAULT]
logdir=/var/log/nova
state_path=/var/lib/nova
lock_path=/run/lock/nova
verbose=True
api_paste_config=/etc/nova/api-paste.ini
compute_scheduler_driver=nova.scheduler.simple.SimpleScheduler
rabbit_host=10.10.100.51
nova_url=http://10.10.100.51:8774/v1.1/
sql_connection=mysql://novaUser:novaPass@10.10.100.51/nova
root_helper=sudo nova-rootwrap /etc/nova/rootwrap.conf
# Auth
use_deprecated_auth=false
auth_strategy=keystone
# Imaging service
glance_api_servers=<IP_address>:9292
image_service=nova.image.glance.GlanceImageService
# Vnc configuration
novnc_enabled=true
novncproxy_base_url=http://<IP_address>:6080/vnc_auto.html
novncproxy_port=6080
vncserver_proxyclient_address=<IP_address>
vncserver_listen=0.0.0.0
# Network settings
network_api_class=nova.network.quantumv2.api.API
quantum_url=http://<IP_address>:9696
quantum_auth_strategy=keystone
quantum_admin_tenant_name=service
quantum_admin_username=quantum
quantum_admin_password=service_pass
quantum_admin_auth_url=http://<IP_address>:35357/v2.0
libvirt_vif_driver=nova.virt.libvirt.vif.LibvirtHybridOVSBridgeDriver
linuxnet_interface_driver=nova.network.linux_net.LinuxOVSInterfaceDriver
#If you want Quantum + Nova Security groups
firewall_driver=nova.virt.firewall.NoopFirewallDriver
security_group_api=quantum
#If you want Nova Security groups only, comment the two lines above and uncomment line -1-.
#-1-firewall_driver=nova.virt.libvirt.firewall.IptablesFirewallDriver
#Metadata
service_quantum_metadata_proxy = True
quantum_metadata_proxy_shared_secret = helloOpenStack
metadata_host = <IP_address>
metadata_listen = 127.0.0.1
metadata_listen_port = 8775
# Compute #
compute_driver=libvirt.LibvirtDriver
# Cinder #
volume_api_class=nova.volume.cinder.API
osapi_volume_listen_port=5900

Update /etc/nova/nova-compute.conf with

[DEFAULT]
libvirt_type=kvm
libvirt_ovs_bridge=br-int
libvirt_vif_type=ethernet
libvirt_vif_driver=nova.virt.libvirt.vif.LibvirtHybridOVSBridgeDriver
libvirt_use_virtio_for_bridges=True

Sync database

nova-manage db sync

Restart all Nova services

cd /etc/init.d/; for i in $( ls nova-* ); do sudo service $i restart; done

Check if all Nova services are working

nova-manage service list

OpenVswitch

Install OpenVswitch and support packages

apt-get install -y openvswitch-switch openvswitch-datapath-dkms

Add new OVS bridges

ovs-vsctl add-br br-int
ovs-vsctl add-br br-eth1
ovs-vsctl add-port br-eth1 ethx

Add the interface ethx(x should be replaced with 0,1,2,3 etc according to secondary interface of the machine)

Quantum (Networking Service)

Install quantum and supporting packages

apt-get install -y quantum-server quantum-plugin-openvswitch quantum-plugin-openvswitch-agent dnsmasq quantum-dhcp-agent quantum-l3-agent

Create a database named quantum and configure it

mysql -u root -p
CREATE DATABASE quantum;
GRANT ALL ON quantum.* TO 'quantumUser'@'%' IDENTIFIED BY 'quantumPass';
quit;

Update the file /etc/quantum/api-paste.ini with

[filter:authtoken]
paste.filter_factory = keystoneclient.middleware.auth_token:filter_factory
auth_host = <IP_address>
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = quantum
admin_password = service_pass

Update the file /etc/quantum/plugins/openvswitch/ovs_quantum_plugin.ini with

[DATABASE]
sql_connection = mysql://quantumUser:quantumPass@<IP_address>/quantum

 

[OVS]
tenant_network_type=vlan
enable_tunneling=False
integration_bridge=br-int
network_vlan_ranges = default:500:550
bridge_mappings = default:br-eth1

 

[SECURITYGROUP]
firewall_driver = quantum.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver

Update /etc/quantum/metadata_agent.ini with

auth_url = http://10.10.100.51:35357/v2.0
auth_region = RegionOne
admin_tenant_name = service
admin_user = quantum
admin_password = service_pass
nova_metadata_ip = 127.0.0.1
nova_metadata_port = 8775
metadata_proxy_shared_secret = helloOpenStack

Update /etc/quantum/quantum.conf with

[keystone_authtoken]
auth_host = <IP_address>
auth_port = 35357
auth_protocol = http
admin_tenant_name = service
admin_user = quantum
admin_password = service_pass
signing_dir = /var/lib/quantum/keystone-signing

Restart Quantum services

cd /etc/init.d/; for i in $( ls quantum-* ); do sudo service $i restart; done

Restart DNSmasq

service dnsmasq restart

If you want to use GRE mode, make the appropriate changes using the following link

https://fosskb.in/2013/09/10/gre-mode-in-openvswitch-on-openstack-grizzly/

Horizon (OpenStack-Dashboard)

Install Horizon and support packages

apt-get -y install openstack-dashboard memcached

Restart apache and memchached

service apache2 restart

service memcached restart

Now login to Dashboard using the URL

http://<IP_address>/horizon

Credentials

Login: admin
Password: admin_pass

Creating Custom Images

https://fosskb.in/2013/07/30/bundling-debian-7-x-image-for-openstack/

https://fosskb.in/2013/07/24/bundling-freebsd-9-image-for-openstack/