Dongcan Ye 8a4ffb4224 [install-guide] Add ipset installation in compute node

In some case, host may lack ipset utility(e.g., due to a
dependency issue). This will cause create vm failed if we
enable Neutron securitygroup in compute node.

We had already fixed in Neutron side, we using neutron-sanity-check
tool for check ipset installation. But this is insufficiency,
some guys may not know that tool.

So we install ipset in compute node.

backport: Mitaka

Change-Id: If071a9aa3d8bb5854de1abd4c9eb3eafb3b07817
Related-Bug: #1510680

2016-05-10 07:58:32 -06:00

5.7 KiB

Raw Blame History

Install and configure compute node

The compute node handles connectivity and security groups <security group> for instances.

ubuntu or rdo or obs

Install the components

ubuntu

# apt-get install neutron-linuxbridge-agent

rdo

https://bugzilla.redhat.com/show_bug.cgi?id=1334626

# yum install openstack-neutron-linuxbridge ebtables ipset

obs

# zypper install --no-recommends openstack-neutron-linuxbridge-agent

debian

Install and configure the Networking components

# apt-get install neutron-plugin-linuxbridge-agent

Respond to prompts for database management, Identity service credentials, service endpoint, and message queue credentials.
Select the ML2 plug-in:

Note

Selecting the ML2 plug-in also populates the service_plugins and allow_overlapping_ips options in the /etc/neutron/neutron.conf file with the appropriate values.

ubuntu or rdo or obs

Configure the common component

The Networking common component configuration includes the authentication mechanism, message queue, and plug-in.

Edit the /etc/neutron/neutron.conf file and complete the following actions:
- In the [database] section, comment out any connection options because compute nodes do not directly access the database.
- In the [DEFAULT] and [oslo_messaging_rabbit] sections, configure RabbitMQ message queue access:
```
[DEFAULT]
...
rpc_backend = rabbit

[oslo_messaging_rabbit]
...
rabbit_host = controller
rabbit_userid = openstack
rabbit_password = RABBIT_PASS
```
  Replace RABBIT_PASS with the password you chose for the openstack account in RabbitMQ.
- In the [DEFAULT] and [keystone_authtoken] sections, configure Identity service access:
```
[DEFAULT]
...
auth_strategy = keystone

[keystone_authtoken]
...
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = neutron
password = NEUTRON_PASS
```
  Replace NEUTRON_PASS with the password you chose for the neutron user in the Identity service.
  
  Note
  
  Comment out or remove any other options in the [keystone_authtoken] section.
rdo
- In the [oslo_concurrency] section, configure the lock path:
```
[oslo_concurrency]
...
lock_path = /var/lib/neutron/tmp
```

Configure networking options

Choose the same networking option that you chose for the controller node to configure services specific to it. Afterwards, return here and proceed to neutron-compute-compute.

neutron-compute-install-option1.rst neutron-compute-install-option2.rst

Configure Compute to use Networking

Edit the /etc/nova/nova.conf file and complete the following actions:

In the [neutron] section, configure access parameters:

[neutron]
...
url = http://controller:9696
auth_url = http://controller:35357
auth_type = password
project_domain_name = default
user_domain_name = default
region_name = RegionOne
project_name = service
username = neutron
password = NEUTRON_PASS

Replace NEUTRON_PASS with the password you chose for the neutron user in the Identity service.

Finalize installation

rdo

Restart the Compute service:

# systemctl restart openstack-nova-compute.service

Start the Linux bridge agent and configure it to start when the system boots:

# systemctl enable neutron-linuxbridge-agent.service
# systemctl start neutron-linuxbridge-agent.service

obs

The Networking service initialization scripts expect the variable NEUTRON_PLUGIN_CONF in the /etc/sysconfig/neutron file to reference the ML2 plug-in configuration file. Ensure that the /etc/sysconfig/neutron file contains the following:
```
NEUTRON_PLUGIN_CONF="/etc/neutron/plugins/ml2/ml2_conf.ini"
```

Restart the Compute service:

# systemctl restart openstack-nova-compute.service

Start the Linux Bridge agent and configure it to start when the system boots:

# systemctl enable openstack-neutron-linuxbridge-agent.service
# systemctl start openstack-neutron-linuxbridge-agent.service

ubuntu or debian

Restart the Compute service:
```
# service nova-compute restart
```

Restart the Linux bridge agent:

# service neutron-linuxbridge-agent restart

5.7 KiB Raw Blame History