Bionic check jobs are now passing so move these to voting and add gate/periodic jobs for bionic. Introduce a release note detailing the major changes and indicating a viable upgrade path from Xenial to Bionic. Change-Id: I0897e4f22b3949ce07a2ea0f2ee9c4f45c344e04
6.0 KiB
Prepare the deployment host
When you install OpenStack in a production environment, we recommend using a separate deployment host that contains Ansible and orchestrates the OpenStack-Ansible (OSA) installation on the target hosts. In a test environment, we recommend using one of the infrastructure target hosts as the deployment host.
To use a target host as a deployment host, follow the steps in :deploy_guide:Prepare the target hosts <targethosts.html> on the deployment host.
Configuring the operating system
Install the operating system
Install one of the following supported operating systems on the deployment hosts:
- Ubuntu server 16.04 (Xenial Xerus) LTS 64-bit
- Ubuntu server 18.04 (Bionic Beaver) LTS 64-bit
- Centos 7 64-bit
- openSUSE 42.X 64-bit
Configure at least one network interface to access the Internet or suitable local repositories.
Configure Ubuntu
Install additional software packages and configure Network Time Protocol (NTP). Before you begin, we recommend upgrading your system packages and kernel.
Update package source lists:
# apt-get update
Upgrade the system packages and kernel:
# apt-get dist-upgrade
Reboot the host.
Install additional software packages if they were not installed during the operating system installation:
# apt-get install aptitude build-essential git ntp ntpdate openssh-server python-dev sudo
Configure NTP to synchronize with a suitable time source.
Configure CentOS
Install additional software packages and configure Network Time Protocol (NTP). Before you begin, we recommend upgrading your system packages and kernel.
Upgrade the system packages and kernel
# yum upgrade
Reboot the host.
Install additional software packages if they were not installed during the operating system installation:
# yum install https://rdoproject.org/repos/openstack-/rdo-release-.rpm # yum install git ntp ntpdate openssh-server python-devel sudo '@Development Tools'
Configure NTP to synchronize with a suitable time source.
The
firewalld
service is enabled on most CentOS systems by default and its default ruleset prevents OpenStack components from communicating properly. Stop thefirewalld
service and mask it to prevent it from starting:# systemctl stop firewalld # systemctl mask firewalld
Note
There is future work planned to create proper firewall rules for OpenStack services in OpenStack-Ansible deployments. Until that work is complete, deployers must maintain their own firewall rulesets or disable the firewall entirely.
Configure openSUSE
Install additional software packages and configure Network Time Protocol (NTP). Before you begin, we recommend upgrading your system packages and kernel.
Upgrade the system packages and kernel
# zypper up
Reboot the host.
Install additional software packages if they were not installed during the operating system installation:
# zypper ar http://download.opensuse.org/repositories/Cloud:/OpenStack://openSUSE_Leap_42.3 OBS:Cloud:OpenStack: # zypper install git-core ntp openssh python-devel sudo gcc libffi-devel libopenssl-devel
Configure NTP to synchronize with a suitable time source.
Configure SSH keys
Ansible uses SSH with public key authentication to connect the
deployment host and target hosts. To reduce user interaction during
Ansible operations, do not include passphrases with key pairs. However,
if a passphrase is required, consider using the ssh-agent
and ssh-add
commands to temporarily store the passphrase
before performing Ansible operations.
Configure the network
Ansible deployments fail if the deployment server can't use Secure Shell (SSH) to connect to the containers.
Configure the deployment host (where Ansible is executed) to be on
the same layer 2 network as the network designated for container
management. By default, this is the br-mgmt
network. This
configuration reduces the rate of failure caused by connectivity
issues.
Select an IP address from the following example range to assign to the deployment host:
Container management: 172.29.236.0/22 (VLAN 10)
Install the source and dependencies
Install the source and dependencies for the deployment host.
Note
If you are installing with limited connectivity, please review :dev_docs:Installing with limited connectivity <user/limited-connectivity/index.html> before proceeding.
Clone the latest stable release of the OpenStack-Ansible Git repository in the
/opt/openstack-ansible
directory:# git clone -b https://git.openstack.org/openstack/openstack-ansible /opt/openstack-ansible
If git.openstack.org can not be accessed to run git clone, github.com can be used as an alternative repo:
# git clone -b https://github.com/openstack/openstack-ansible.git /opt/openstack-ansible
Change to the
/opt/openstack-ansible
directory, and run the Ansible bootstrap script:# scripts/bootstrap-ansible.sh