From Fedora Project Wiki

Line 13: Line 13:
 
* keystone + dashboard cleanup steps
 
* keystone + dashboard cleanup steps
 
* keystone should come prepared with nova-volume and glance services out of the box in /etc/keystone/default_catalog.templates . keystone data script probably needs tweaking as well
 
* keystone should come prepared with nova-volume and glance services out of the box in /etc/keystone/default_catalog.templates . keystone data script probably needs tweaking as well
 +
** apevec: I'll propose that upstream, now that catalogs have sql backed: https://github.com/openstack/keystone/commit/37d223ecdb392f3b46079418a7b82398afca2128
 
* I think we can drop the nova auth section from 'Basic Setup'... we still do 'nova-manage network create', but use the 'nova' tool for keypair setup and instance launching. Someone needs to try it though. (crobinso: besides, doing those auth steps on e3 nova gives me an error: https://answers.launchpad.net/nova/+question/146517 Just running nova-api didn't help. Had to cd /var/lib/nova/CA and run ./genrootca.sh)
 
* I think we can drop the nova auth section from 'Basic Setup'... we still do 'nova-manage network create', but use the 'nova' tool for keypair setup and instance launching. Someone needs to try it though. (crobinso: besides, doing those auth steps on e3 nova gives me an error: https://answers.launchpad.net/nova/+question/146517 Just running nova-api didn't help. Had to cd /var/lib/nova/CA and run ./genrootca.sh)
 
** Yes there is a separate cert server that should be started an that runs the genrootca for us. I've updated that in the testday notes, so I'll update here too
 
** Yes there is a separate cert server that should be started an that runs the genrootca for us. I've updated that in the testday notes, so I'll update here too

Revision as of 13:49, 5 March 2012

TODO items (anybody feel free to add/delete)

openstack-config-set /etc/nova/nova.conf DEFAULT libvirt_type qemu
  • keystone + dashboard cleanup steps
  • keystone should come prepared with nova-volume and glance services out of the box in /etc/keystone/default_catalog.templates . keystone data script probably needs tweaking as well
  • I think we can drop the nova auth section from 'Basic Setup'... we still do 'nova-manage network create', but use the 'nova' tool for keypair setup and instance launching. Someone needs to try it though. (crobinso: besides, doing those auth steps on e3 nova gives me an error: https://answers.launchpad.net/nova/+question/146517 Just running nova-api didn't help. Had to cd /var/lib/nova/CA and run ./genrootca.sh)
    • Yes there is a separate cert server that should be started an that runs the genrootca for us. I've updated that in the testday notes, so I'll update here too
  • Setup the equivalent of 'novarc' but with keystone env? Horizon can generate one from the 'settings' panel, including one for use with the ec2 api.
  • is nbd still required or does libguestfs do this for us?
    • NBD is not required but faster. Especially when openstack itself is run within a vm
  • Make sure e4 novaclient let's us drop the stupid --version 1.1 arg for the 'nova' tool, if not we should fix it.
  • crobinso: I already had mysql-server installed with an unknown password, pulled in by random kde stuff. Might want to mention that mysql password can be reset with 'sudo mysqladmin -u root -p password'
  • easy command to check that services are running, since systemd seems pretty async: systemctl list-units --full | grep openstack
    • Probably one for an openstack-common or openstack-fedora package (which would also hold the openstack-db-setup script etc.)
  • crobinso: Not sure if I did anything wrong, but when I was in the westford office which has host networking on 10.0.0.* subnet, this recommended config killed my host connectivity. maybe we want to recommend a weirder subnet.
  • all the steps outside of 'Basic Setup' need a review