[install-guide] Ubuntu release package updates
Update the following items for the Ubuntu release packages (2015.1): 1) Use RabbitMQ packages from the cloud archive repository. 2) Change default role from '_member_' to 'user' to avoid potential interference with an internal role. 3) Remove explicit configuration of 'log_dir' option in keystone. 4) Remove step to disable default host in Apache. 5) Update CirrOS image to 0.3.4. Some of these changes apply to all distributions. Change-Id: If1cdf839ebdc7655b89ab14df694a9c25f0c35cf Implements: blueprint installguide-kilo
This commit is contained in:
parent
20d31c4ed0
commit
ad246afa6a
@ -20,20 +20,6 @@
|
|||||||
with it.</para>
|
with it.</para>
|
||||||
<procedure>
|
<procedure>
|
||||||
<title>To install the message queue service</title>
|
<title>To install the message queue service</title>
|
||||||
<step os="ubuntu">
|
|
||||||
<para>Add the upstream repository key:</para>
|
|
||||||
<screen><prompt>#</prompt> <userinput>curl -O https://www.rabbitmq.com/rabbitmq-signing-key-public.asc</userinput>
|
|
||||||
<prompt>#</prompt> <userinput>apt-key add rabbitmq-signing-key-public.asc</userinput></screen>
|
|
||||||
</step>
|
|
||||||
<step os="ubuntu">
|
|
||||||
<para>Add the upstream repository:</para>
|
|
||||||
<screen><prompt>#</prompt> <userinput>echo "deb http://www.rabbitmq.com/debian/ testing main" \
|
|
||||||
> /etc/apt/sources.list.d/rabbitmq.list</userinput></screen>
|
|
||||||
</step>
|
|
||||||
<step os="ubuntu">
|
|
||||||
<para>Update the package database:</para>
|
|
||||||
<screen><prompt>#</prompt> <userinput>apt-get update</userinput></screen>
|
|
||||||
</step>
|
|
||||||
<step os="ubuntu;debian">
|
<step os="ubuntu;debian">
|
||||||
<para>Install the package:</para>
|
<para>Install the package:</para>
|
||||||
<screen><prompt>#</prompt> <userinput>apt-get install rabbitmq-server</userinput></screen>
|
<screen><prompt>#</prompt> <userinput>apt-get install rabbitmq-server</userinput></screen>
|
||||||
|
@ -53,7 +53,7 @@
|
|||||||
add the <literal>ResellerAdmin</literal> role:</para>
|
add the <literal>ResellerAdmin</literal> role:</para>
|
||||||
<programlisting language="ini">[filter:keystoneauth]
|
<programlisting language="ini">[filter:keystoneauth]
|
||||||
...
|
...
|
||||||
operator_roles = admin,_member_,ResellerAdmin</programlisting>
|
operator_roles = admin,user,ResellerAdmin</programlisting>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>In the <literal>[pipeline:main]</literal> section, add
|
<para>In the <literal>[pipeline:main]</literal> section, add
|
||||||
|
@ -31,7 +31,7 @@
|
|||||||
<step>
|
<step>
|
||||||
<para>Download an image from the Image service:</para>
|
<para>Download an image from the Image service:</para>
|
||||||
<screen>
|
<screen>
|
||||||
<prompt>$</prompt> <userinput>IMAGE_ID=$(glance image-list | grep 'cirros-0.3.3-x86_64' | awk '{ print $2 }')</userinput>
|
<prompt>$</prompt> <userinput>IMAGE_ID=$(glance image-list | grep 'cirros-0.3.4-x86_64' | awk '{ print $2 }')</userinput>
|
||||||
<prompt>$</prompt> <userinput>glance image-download $IMAGE_ID > /tmp/cirros.img</userinput></screen>
|
<prompt>$</prompt> <userinput>glance image-download $IMAGE_ID > /tmp/cirros.img</userinput></screen>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
|
@ -97,6 +97,11 @@
|
|||||||
storage.</para>
|
storage.</para>
|
||||||
</note>
|
</note>
|
||||||
</step>
|
</step>
|
||||||
|
<step>
|
||||||
|
<para>Configure <literal>user</literal> as the default role for
|
||||||
|
users that you create via the dashboard:</para>
|
||||||
|
<programlisting language="python">OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"</programlisting>
|
||||||
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>Optionally, configure the time zone:</para>
|
<para>Optionally, configure the time zone:</para>
|
||||||
<programlisting language="python">TIME_ZONE = "<replaceable>TIME_ZONE</replaceable>"</programlisting>
|
<programlisting language="python">TIME_ZONE = "<replaceable>TIME_ZONE</replaceable>"</programlisting>
|
||||||
|
@ -33,14 +33,14 @@
|
|||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>Download the source image into it:</para>
|
<para>Download the source image into it:</para>
|
||||||
<screen><prompt>$</prompt> <userinput>wget -P /tmp/images http://download.cirros-cloud.net/0.3.3/cirros-0.3.3-x86_64-disk.img</userinput></screen>
|
<screen><prompt>$</prompt> <userinput>wget -P /tmp/images http://download.cirros-cloud.net/0.3.4/cirros-0.3.4-x86_64-disk.img</userinput></screen>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>Upload the image to the Image service using the
|
<para>Upload the image to the Image service using the
|
||||||
<glossterm baseform="QEMU Copy On Write 2 (QCOW2)">QCOW2</glossterm>
|
<glossterm baseform="QEMU Copy On Write 2 (QCOW2)">QCOW2</glossterm>
|
||||||
disk format, <glossterm>bare</glossterm> container format, and
|
disk format, <glossterm>bare</glossterm> container format, and
|
||||||
public visibility so all projects can access it:</para>
|
public visibility so all projects can access it:</para>
|
||||||
<screen><prompt>$</prompt> <userinput>glance image-create --name "cirros-0.3.3-x86_64" --file /tmp/images/cirros-0.3.3-x86_64-disk.img \
|
<screen><prompt>$</prompt> <userinput>glance image-create --name "cirros-0.3.4-x86_64" --file /tmp/images/cirros-0.3.4-x86_64-disk.img \
|
||||||
--disk-format qcow2 --container-format bare --visibility public --progress</userinput>
|
--disk-format qcow2 --container-format bare --visibility public --progress</userinput>
|
||||||
<computeroutput>[=============================>] 100%
|
<computeroutput>[=============================>] 100%
|
||||||
+------------------+--------------------------------------+
|
+------------------+--------------------------------------+
|
||||||
@ -53,7 +53,7 @@
|
|||||||
| id | 38047887-61a7-41ea-9b49-27987d5e8bb9 |
|
| id | 38047887-61a7-41ea-9b49-27987d5e8bb9 |
|
||||||
| min_disk | 0 |
|
| min_disk | 0 |
|
||||||
| min_ram | 0 |
|
| min_ram | 0 |
|
||||||
| name | cirros-0.3.3-x86_64 |
|
| name | cirros-0.3.4-x86_64 |
|
||||||
| owner | ae7a98326b9c455588edd2656d723b9d |
|
| owner | ae7a98326b9c455588edd2656d723b9d |
|
||||||
| protected | False |
|
| protected | False |
|
||||||
| size | 13200896 |
|
| size | 13200896 |
|
||||||
@ -86,7 +86,7 @@
|
|||||||
<computeroutput>+--------------------------------------+---------------------+
|
<computeroutput>+--------------------------------------+---------------------+
|
||||||
| ID | Name |
|
| ID | Name |
|
||||||
+--------------------------------------+---------------------+
|
+--------------------------------------+---------------------+
|
||||||
| 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros-0.3.3-x86_64 |
|
| 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros-0.3.4-x86_64 |
|
||||||
+--------------------------------------+---------------------+</computeroutput></screen>
|
+--------------------------------------+---------------------+</computeroutput></screen>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
|
@ -123,13 +123,6 @@ driver = keystone.token.persistence.backends.memcache.Token</programlisting>
|
|||||||
<programlisting language="ini">[revoke]
|
<programlisting language="ini">[revoke]
|
||||||
...
|
...
|
||||||
driver = keystone.contrib.revoke.backends.sql.Revoke</programlisting>
|
driver = keystone.contrib.revoke.backends.sql.Revoke</programlisting>
|
||||||
</step>
|
|
||||||
<step>
|
|
||||||
<para>In the <literal>[DEFAULT]</literal> section, configure the
|
|
||||||
log directory:</para>
|
|
||||||
<programlisting language="ini">[DEFAULT]
|
|
||||||
...
|
|
||||||
log_dir = /var/log/keystone</programlisting>
|
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>(Optional) To assist with troubleshooting,
|
<para>(Optional) To assist with troubleshooting,
|
||||||
@ -202,7 +195,7 @@ admin_token = <replaceable>ADMIN_TOKEN</replaceable></programlisting>
|
|||||||
<screen><prompt>#</prompt> <userinput>openstack project create --description "Admin Tenant" admin</userinput>
|
<screen><prompt>#</prompt> <userinput>openstack project create --description "Admin Tenant" admin</userinput>
|
||||||
<prompt>#</prompt> <userinput>openstack user create --password <replaceable>ADMIN_PASS</replaceable> --email root@localhost admin</userinput>
|
<prompt>#</prompt> <userinput>openstack user create --password <replaceable>ADMIN_PASS</replaceable> --email root@localhost admin</userinput>
|
||||||
<prompt>#</prompt> <userinput>openstack role create admin</userinput>
|
<prompt>#</prompt> <userinput>openstack role create admin</userinput>
|
||||||
<prompt>#</prompt> <userinput>openstack role add --project demo --user demo _member_</userinput></screen>
|
<prompt>#</prompt> <userinput>openstack role add --project demo --user demo user</userinput></screen>
|
||||||
<informalfigure>
|
<informalfigure>
|
||||||
<mediaobject>
|
<mediaobject>
|
||||||
<imageobject>
|
<imageobject>
|
||||||
@ -396,10 +389,13 @@ Listen 35357
|
|||||||
in it:</para>
|
in it:</para>
|
||||||
<screen os="ubuntu;fedora;centos;rhel"><prompt>#</prompt> <userinput>chown -R keystone:keystone /var/www/cgi-bin/keystone</userinput>
|
<screen os="ubuntu;fedora;centos;rhel"><prompt>#</prompt> <userinput>chown -R keystone:keystone /var/www/cgi-bin/keystone</userinput>
|
||||||
<prompt>#</prompt> <userinput>chmod 755 /var/www/cgi-bin/keystone/*</userinput></screen>
|
<prompt>#</prompt> <userinput>chmod 755 /var/www/cgi-bin/keystone/*</userinput></screen>
|
||||||
<screen os="rhel;fedora;centos"><prompt>#</prompt> <userinput>restorecon /var/www/cgi-bin</userinput></screen>
|
|
||||||
<screen os="opensuse;sles"><prompt>#</prompt> <userinput>chown -R keystone:keystone /srv/www/cgi-bin/keystone</userinput>
|
<screen os="opensuse;sles"><prompt>#</prompt> <userinput>chown -R keystone:keystone /srv/www/cgi-bin/keystone</userinput>
|
||||||
<prompt>#</prompt> <userinput>chmod 755 /srv/www/cgi-bin/keystone/*</userinput></screen>
|
<prompt>#</prompt> <userinput>chmod 755 /srv/www/cgi-bin/keystone/*</userinput></screen>
|
||||||
</step>
|
</step>
|
||||||
|
<step os="rhel;centos;fedora">
|
||||||
|
<para>Restore the default SELinux security context:</para>
|
||||||
|
<screen><prompt>#</prompt> <userinput>restorecon /var/www/cgi-bin</userinput></screen>
|
||||||
|
</step>
|
||||||
<step os="opensuse;sles">
|
<step os="opensuse;sles">
|
||||||
<para>
|
<para>
|
||||||
Change the ownership of
|
Change the ownership of
|
||||||
|
@ -144,24 +144,24 @@ Repeat User Password:
|
|||||||
+------------+----------------------------------+</computeroutput></screen>
|
+------------+----------------------------------+</computeroutput></screen>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>Create the <literal>_member_</literal> role:</para>
|
<para>Create the <literal>user</literal> role:</para>
|
||||||
<screen><prompt>$</prompt> <userinput>openstack role create _member_</userinput>
|
<screen><prompt>$</prompt> <userinput>openstack role create user</userinput>
|
||||||
<computeroutput>+-------+----------------------------------+
|
<computeroutput>+-------+----------------------------------+
|
||||||
| Field | Value |
|
| Field | Value |
|
||||||
+-------+----------------------------------+
|
+-------+----------------------------------+
|
||||||
| id | 9fe2ff9ee4384b1894a90878d3e92bab |
|
| id | 9fe2ff9ee4384b1894a90878d3e92bab |
|
||||||
| name | _member_ |
|
| name | user |
|
||||||
+-------+----------------------------------+</computeroutput></screen>
|
+-------+----------------------------------+</computeroutput></screen>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>Add the <literal>_member_</literal> role to the
|
<para>Add the <literal>user</literal> role to the
|
||||||
<literal>demo</literal> project and user:</para>
|
<literal>demo</literal> project and user:</para>
|
||||||
<screen><prompt>$</prompt> <userinput>openstack role add --project demo --user demo _member_</userinput>
|
<screen><prompt>$</prompt> <userinput>openstack role add --project demo --user demo user</userinput>
|
||||||
<computeroutput>+-------+----------------------------------+
|
<computeroutput>+-------+----------------------------------+
|
||||||
| Field | Value |
|
| Field | Value |
|
||||||
+-------+----------------------------------+
|
+-------+----------------------------------+
|
||||||
| id | 9fe2ff9ee4384b1894a90878d3e92bab |
|
| id | 9fe2ff9ee4384b1894a90878d3e92bab |
|
||||||
| name | _member_ |
|
| name | user |
|
||||||
+-------+----------------------------------+</computeroutput></screen>
|
+-------+----------------------------------+</computeroutput></screen>
|
||||||
</step>
|
</step>
|
||||||
</substeps>
|
</substeps>
|
||||||
|
@ -129,12 +129,12 @@
|
|||||||
--os-project-name admin --os-username admin --os-auth-type password \
|
--os-project-name admin --os-username admin --os-auth-type password \
|
||||||
role list</userinput>
|
role list</userinput>
|
||||||
<computeroutput>Password:
|
<computeroutput>Password:
|
||||||
+----------------------------------+----------+
|
+----------------------------------+-------+
|
||||||
| ID | Name |
|
| ID | Name |
|
||||||
+----------------------------------+----------+
|
+----------------------------------+-------+
|
||||||
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
|
| 9fe2ff9ee4384b1894a90878d3e92bab | user |
|
||||||
| cd2cb9a39e874ea69e5d4b896eb16128 | admin |
|
| cd2cb9a39e874ea69e5d4b896eb16128 | admin |
|
||||||
+----------------------------------+----------+</computeroutput></screen>
|
+----------------------------------+-------+</computeroutput></screen>
|
||||||
<note>
|
<note>
|
||||||
<para>This command uses the password for the <literal>admin</literal>
|
<para>This command uses the password for the <literal>admin</literal>
|
||||||
user.</para>
|
user.</para>
|
||||||
|
@ -59,10 +59,10 @@
|
|||||||
<computeroutput>+--------------------------------------+---------------------+--------+--------+
|
<computeroutput>+--------------------------------------+---------------------+--------+--------+
|
||||||
| ID | Name | Status | Server |
|
| ID | Name | Status | Server |
|
||||||
+--------------------------------------+---------------------+--------+--------+
|
+--------------------------------------+---------------------+--------+--------+
|
||||||
| acafc7c0-40aa-4026-9673-b879898e1fc2 | cirros-0.3.3-x86_64 | ACTIVE | |
|
| acafc7c0-40aa-4026-9673-b879898e1fc2 | cirros-0.3.4-x86_64 | ACTIVE | |
|
||||||
+--------------------------------------+---------------------+--------+--------+</computeroutput></screen>
|
+--------------------------------------+---------------------+--------+--------+</computeroutput></screen>
|
||||||
<para>Your first instance uses the
|
<para>Your first instance uses the
|
||||||
<literal>cirros-0.3.3-x86_64</literal> image.</para>
|
<literal>cirros-0.3.4-x86_64</literal> image.</para>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>List available networks:</para>
|
<para>List available networks:</para>
|
||||||
@ -96,7 +96,7 @@
|
|||||||
<para>Launch the instance:</para>
|
<para>Launch the instance:</para>
|
||||||
<para>Replace <replaceable>DEMO_NET_ID</replaceable> with the ID of the
|
<para>Replace <replaceable>DEMO_NET_ID</replaceable> with the ID of the
|
||||||
<literal>demo-net</literal> tenant network.</para>
|
<literal>demo-net</literal> tenant network.</para>
|
||||||
<screen><prompt>$</prompt> <userinput>nova boot --flavor m1.tiny --image cirros-0.3.3-x86_64 --nic net-id=<replaceable>DEMO_NET_ID</replaceable> \
|
<screen><prompt>$</prompt> <userinput>nova boot --flavor m1.tiny --image cirros-0.3.4-x86_64 --nic net-id=<replaceable>DEMO_NET_ID</replaceable> \
|
||||||
--security-group default --key-name demo-key <replaceable>demo-instance1</replaceable></userinput>
|
--security-group default --key-name demo-key <replaceable>demo-instance1</replaceable></userinput>
|
||||||
<computeroutput>+--------------------------------------+------------------------------------------------------------+
|
<computeroutput>+--------------------------------------+------------------------------------------------------------+
|
||||||
| Property | Value |
|
| Property | Value |
|
||||||
@ -116,7 +116,7 @@
|
|||||||
| flavor | m1.tiny (1) |
|
| flavor | m1.tiny (1) |
|
||||||
| hostId | |
|
| hostId | |
|
||||||
| id | 05682b91-81a1-464c-8f40-8b3da7ee92c5 |
|
| id | 05682b91-81a1-464c-8f40-8b3da7ee92c5 |
|
||||||
| image | cirros-0.3.3-x86_64 (acafc7c0-40aa-4026-9673-b879898e1fc2) |
|
| image | cirros-0.3.4-x86_64 (acafc7c0-40aa-4026-9673-b879898e1fc2) |
|
||||||
| key_name | demo-key |
|
| key_name | demo-key |
|
||||||
| metadata | {} |
|
| metadata | {} |
|
||||||
| name | demo-instance1 |
|
| name | demo-instance1 |
|
||||||
|
@ -67,10 +67,10 @@
|
|||||||
<computeroutput>+--------------------------------------+---------------------+--------+--------+
|
<computeroutput>+--------------------------------------+---------------------+--------+--------+
|
||||||
| ID | Name | Status | Server |
|
| ID | Name | Status | Server |
|
||||||
+--------------------------------------+---------------------+--------+--------+
|
+--------------------------------------+---------------------+--------+--------+
|
||||||
| acafc7c0-40aa-4026-9673-b879898e1fc2 | cirros-0.3.3-x86_64 | ACTIVE | |
|
| acafc7c0-40aa-4026-9673-b879898e1fc2 | cirros-0.3.4-x86_64 | ACTIVE | |
|
||||||
+--------------------------------------+---------------------+--------+--------+</computeroutput></screen>
|
+--------------------------------------+---------------------+--------+--------+</computeroutput></screen>
|
||||||
<para>Your first instance uses the
|
<para>Your first instance uses the
|
||||||
<literal>cirros-0.3.3-x86_64</literal> image.</para>
|
<literal>cirros-0.3.4-x86_64</literal> image.</para>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>List available networks:</para>
|
<para>List available networks:</para>
|
||||||
@ -109,7 +109,7 @@
|
|||||||
<para>Launch the instance:</para>
|
<para>Launch the instance:</para>
|
||||||
<para>Replace <replaceable>DEMO_NET_ID</replaceable> with the ID of the
|
<para>Replace <replaceable>DEMO_NET_ID</replaceable> with the ID of the
|
||||||
<literal>demo-net</literal> tenant network.</para>
|
<literal>demo-net</literal> tenant network.</para>
|
||||||
<screen><prompt>$</prompt> <userinput>nova boot --flavor m1.tiny --image cirros-0.3.3-x86_64 --nic net-id=<replaceable>DEMO_NET_ID</replaceable> \
|
<screen><prompt>$</prompt> <userinput>nova boot --flavor m1.tiny --image cirros-0.3.4-x86_64 --nic net-id=<replaceable>DEMO_NET_ID</replaceable> \
|
||||||
--security-group default --key-name demo-key <replaceable>demo-instance1</replaceable></userinput>
|
--security-group default --key-name demo-key <replaceable>demo-instance1</replaceable></userinput>
|
||||||
<computeroutput>+--------------------------------------+------------------------------------------------------------+
|
<computeroutput>+--------------------------------------+------------------------------------------------------------+
|
||||||
| Property | Value |
|
| Property | Value |
|
||||||
@ -129,7 +129,7 @@
|
|||||||
| flavor | m1.tiny (1) |
|
| flavor | m1.tiny (1) |
|
||||||
| hostId | |
|
| hostId | |
|
||||||
| id | 45ea195c-c469-43eb-83db-1a663bbad2fc |
|
| id | 45ea195c-c469-43eb-83db-1a663bbad2fc |
|
||||||
| image | cirros-0.3.3-x86_64 (acafc7c0-40aa-4026-9673-b879898e1fc2) |
|
| image | cirros-0.3.4-x86_64 (acafc7c0-40aa-4026-9673-b879898e1fc2) |
|
||||||
| key_name | demo-key |
|
| key_name | demo-key |
|
||||||
| metadata | {} |
|
| metadata | {} |
|
||||||
| name | demo-instance1 |
|
| name | demo-instance1 |
|
||||||
|
@ -129,7 +129,7 @@
|
|||||||
<computeroutput>+--------------------------------------+---------------------+--------+--------+
|
<computeroutput>+--------------------------------------+---------------------+--------+--------+
|
||||||
| ID | Name | Status | Server |
|
| ID | Name | Status | Server |
|
||||||
+--------------------------------------+---------------------+--------+--------+
|
+--------------------------------------+---------------------+--------+--------+
|
||||||
| 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros-0.3.3-x86_64 | ACTIVE | |
|
| 38047887-61a7-41ea-9b49-27987d5e8bb9 | cirros-0.3.4-x86_64 | ACTIVE | |
|
||||||
+--------------------------------------+---------------------+--------+--------+</computeroutput></screen>
|
+--------------------------------------+---------------------+--------+--------+</computeroutput></screen>
|
||||||
</step>
|
</step>
|
||||||
</procedure>
|
</procedure>
|
||||||
|
@ -166,7 +166,7 @@ account_autocreate = true</programlisting>
|
|||||||
<programlisting language="ini">[filter:keystoneauth]
|
<programlisting language="ini">[filter:keystoneauth]
|
||||||
use = egg:swift#keystoneauth
|
use = egg:swift#keystoneauth
|
||||||
...
|
...
|
||||||
operator_roles = admin,_member_</programlisting>
|
operator_roles = admin,user</programlisting>
|
||||||
</step>
|
</step>
|
||||||
<step>
|
<step>
|
||||||
<para>In the <literal>[filter:authtoken]</literal> section,
|
<para>In the <literal>[filter:authtoken]</literal> section,
|
||||||
|
Loading…
Reference in New Issue
Block a user