openstack/openstack-manuals
Code Issues Proposed changes

Add a note about restrictive firewall on rhel

Browse Source 
RHEL/Centos/SL has a restrictive firewall by default, which
if left in an unaltered state prevents compute nodes from
talking to the controller (and therefore and unsuccessful
installation)

Since changing this is very basic sysadmin practice, just add
a small warning.

Change-Id: I5d564f612aaa6e7b14892bef79538dd3e387bfc9
Closes-Bug: 1241981
This commit is contained in:
Tom Fifield
2014-01-07 09:22:45 +08:00
parent f62fc1aeb5
commit 60cfb9879c
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
doc/install-guide/ch_basics.xml
View File

@@ -86,6 +86,13 @@
<prompt>#</prompt> <userinput>chkconfig firewalld off</userinput>
<prompt>#</prompt> <userinput>chkconfig iptables on</userinput></screen>
</note>
<warning os="centos;rhel"><para>
RHEL and derivatives including CentOS and Scientific Linux enable a
restrictive firewall by default. During this installation, certain steps
will fail unless you alter this setting or disable the firewall. For
further information about securing your installation, refer to the
<link xlink:href="http://docs.openstack.org/sec/">OpenStack Security Guide</link>.</para>
</warning>
<para os="opensuse;sles">When you set up your system, use the
traditional network scripts and do not use <systemitem
class="service">NetworkManager</systemitem>. You can change