[openstack-dev] [kolla] Deploying kolla from a container?

Jamie Hannaford jamie.hannaford at rackspace.com
Fri Apr 29 16:45:37 UTC 2016


But if I use eth0 (public internet) for network_interface and the VM's public IPv4 as the kolla_internal_vip_address, I'm not sure it'll work because the prechecks does the following:

TASK: [prechecks | Checking if kolla_internal_vip_address and kolla_external_vip_address are not pingable from any node] ***
failed: [localhost] => (item=172.99.69.125) => {"changed": false, "cmd": ["ping", "-c", "3", "172.99.69.125"], "delta": "0:00:02.002623", "end": "2016-04-29 16:42:27.298748", "failed": true, "failed_when_result": true, "item": "172.99.69.125", "rc": 0, "start": "2016-04-29 16:42:25.296125", "stdout_lines": ["PING 172.99.69.125 (172.99.69.125) 56(84) bytes of data.", "64 bytes from 172.99.69.125: icmp_seq=1 ttl=64 time=0.052 ms", "64 bytes from 172.99.69.125: icmp_seq=2 ttl=64 time=0.060 ms", "64 bytes from 172.99.69.125: icmp_seq=3 ttl=64 time=0.056 ms", "", "--- 172.99.69.125 ping statistics ---", "3 packets transmitted, 3 received, 0% packet loss, time 1999ms", "rtt min/avg/max/mdev = 0.052/0.056/0.060/0.003 ms"], "warnings": []}
stdout: PING 172.99.69.125 (172.99.69.125) 56(84) bytes of data.
64 bytes from 172.99.69.125: icmp_seq=1 ttl=64 time=0.052 ms
64 bytes from 172.99.69.125: icmp_seq=2 ttl=64 time=0.060 ms

Can the neutron_external_interface be any user-create Neutron private network, or does it have access to the public internet?

If there's some kind of guide that explains the networking configuration for an all-in-one VM on public cloud, that would be great!

Jamie
________________________________________
From: Michał Jastrzębski <inc007 at gmail.com>
Sent: 29 April 2016 15:06
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [kolla] Deploying kolla from a container?

So network interface is an inteface that APIs will bind into. That
means it's network which openstack stuff travels on.

Neutron_external_iface is iface tenant networks will be placed on. In
you r case you could use eth0 as network and eth1 as neutron external.
If it has IP that's ok...it simply won't be used anywhere:)

On 28 April 2016 at 21:48, Jamie Hannaford
<jamie.hannaford at rackspace.com> wrote:
> Okay, that makes sense. For a normal Ubuntu VM (in my case on Rackspace
> cloud), what would the networking configuration look like? Usually eth0 is
> the interface for the public internet, eth1 is servicenet, and I have eth2
> as an arbitrary neutron private network.
>
>
> For the `network_interface` config value I used eth2 and for
> `kolla_internal_vip_address` a free VIP on its subnet - does that sound
> right?
>
>
> For `neutron_external_interface`, it says in your dev guide that you can use
> a veth pair when there's only a single public interface on a machine, which
> is the case here. Is there any documentation available for how to do that?
>
>
> Jamie
>
>
> ________________________________
> From: Michał Jastrzębski <inc007 at gmail.com>
> Sent: 28 April 2016 04:36
> To: OpenStack Development Mailing List (not for usage questions)
> Subject: Re: [openstack-dev] [kolla] Deploying kolla from a container?
>
>
> Hey,
>
> So privileged containers are required by stuff like libvirt, and there isn't
> much we can do about it. Shared /run is required by openvswitch afair. We
> didn't try to run Kolla with swarm, but I'm afraid that privileged container
> and network host are unfortunately a must. OpenStack wasn't really build to
> be run in containers, so we had to make sacrifices here and there. We are
> experimenting with kubernates now, as it supports both priv containers and
> net host.
>
> Let me know what if I can be any help.
>
>
> Michal
>
> On Apr 27, 2016 5:27 PM, "Jamie Hannaford" <jamie.hannaford at rackspace.com>
> wrote:
>>
>> Hi,
>>
>>
>> Is it possible to deploy Kolla from a container rather than an
>> ubuntu/centos VM? I have a Swarm cluster, so I don't really want to leave
>> that ecosystem and start creating other cloud resources.
>>
>>
>> I got quite far with the dev guide, but the step which seems to throw a
>> spanner in the works is setting the MountFlags. You recommend either systemd
>> (15.04+) or `mount --make-shared /run` (14.04), both of which require a
>> container running in privileged mode, which I can't do on my swarm cluster.
>> Is there any workaround here?
>>
>>
>> Alternatively, is it possible to run a privileged container locally in
>> virtualbox and have it deploy to a remote Swarm cluster?
>>
>>
>> Any advice you have here would be really appreciated. Kolla looks like a
>> great project!
>>
>>
>> Jamie
>>
>>
>> ________________________________
>> Rackspace International GmbH a company registered in the Canton of Zurich,
>> Switzerland (company identification number CH-020.4.047.077-1) whose
>> registered office is at Pfingstweidstrasse 60, 8005 Zurich, Switzerland.
>> Rackspace International GmbH privacy policy can be viewed at
>> www.rackspace.co.uk/legal/swiss-privacy-policy - This e-mail message may
>> contain confidential or privileged information intended for the recipient.
>> Any dissemination, distribution or copying of the enclosed material is
>> prohibited. If you receive this transmission in error, please notify us
>> immediately by e-mail at abuse at rackspace.com and delete the original
>> message. Your cooperation is appreciated.
>>
>> __________________________________________________________________________
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

________________________________
Rackspace International GmbH a company registered in the Canton of Zurich, Switzerland (company identification number CH-020.4.047.077-1) whose registered office is at Pfingstweidstrasse 60, 8005 Zurich, Switzerland. Rackspace International GmbH privacy policy can be viewed at www.rackspace.co.uk/legal/swiss-privacy-policy - This e-mail message may contain confidential or privileged information intended for the recipient. Any dissemination, distribution or copying of the enclosed material is prohibited. If you receive this transmission in error, please notify us immediately by e-mail at abuse at rackspace.com and delete the original message. Your cooperation is appreciated.



More information about the OpenStack-dev mailing list