[openstack-dev] [E] [openstack-ansible] Cannot connect to proxy server from infra1-repo-container

Gordon, Kent S kent.gordon at verizonwireless.com
Thu Dec 7 14:02:25 UTC 2017


On Thu, Dec 7, 2017 at 3:24 AM, Goutham Pratapa
<pratapagoutham at gmail.com> wrote:
> Hi,
>
> We are trying test environment deployment with OpenStack-ansible pike
> release. After executing setup-hosts.yaml, the lxc-containers were created.
> We have an issue while doing
> apt-get update in infra-repo-container as it couldn't connect to the proxy
> server.
> The strange thing is that the infra-repo-container is not showing ip on any
> interface when checked with ip r.
>
> Could you please help us with this issue. Below are some logs on the
> container and on the host.
>
> E: Failed to fetch
> http://security.ubuntu.com/ubuntu/dists/xenial-security/main/binary-amd64/Packages
> Something wicked happened resolving 'xx.xx.xx.xx:8080' (-9 - Address family
> for hostname not supported)
>
> root at infra1-repo-container-a7a137c4:/# ping xx.xx.xx.xx (proxy server)
> connect: Network is unreachable
>
> On Container:
>
> root at infra1-repo-container-a7a137c4:/# cat /etc/network/interfaces
> # The loopback network interface
> auto lo
> iface lo inet loopback
> # LXC interface, this is ALWAYS assumed to be DHCP.
> auto eth0
> iface eth0 inet dhcp
> # Load any additional configs
> source /etc/network/interfaces.d/*.cfg
>
> root at infra1-repo-container-a7a137c4:/# cat
> /etc/network/interfaces.d/eth1.cfg
> # Ansible managed
>
> ### start generated network for [ eth1 ] ###
> auto eth1
> iface eth1 inet static
>     address 192.168.124.126
>     netmask 255.255.255.0
>     mtu 1500
>     post-up sysctl -w net.ipv4.conf.$IFACE.arp_notify=1
>     post-up ip link set $IFACE address $(cat /sys/class/net/$IFACE/address)
> ### end generated network for [ eth1 ] ###
> root at infra1-repo-container-a7a137c4:/# route -n
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
>
> On host:
>
> root at ubuntu:/home/ansible# ifconfig lxcbr0
> lxcbr0    Link encap:Ethernet  HWaddr fe:02:f2:ff:bd:86
>           inet addr:10.0.3.1  Bcast:10.0.3.255  Mask:255.255.255.0
>           inet6 addr: fe80::a085:76ff:febb:401d/64 Scope:Link
>           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:691 errors:0 dropped:0 overruns:0 frame:0
>           TX packets:10 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:1000
>           RX bytes:181224 (181.2 KB)  TX bytes:828 (828.0 B)
> root at ubuntu:/home/ansible# ip r
> default via 192.168.124.1 dev eno1
> 10.0.3.0/24 dev lxcbr0  proto kernel  scope link  src 10.0.3.1
> 192.168.124.0/24 dev eno1  proto kernel  scope link  src 192.168.124.28
> 192.168.124.0/24 dev br-mgmt  proto kernel  scope link  src 192.168.124.28
>
>
> Thanks in advance...
>
> --
> Thanks !!!
> Goutham Pratapa
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.openstack.org_cgi-2Dbin_mailman_listinfo_openstack-2Ddev&d=DwIGaQ&c=udBTRvFvXC5Dhqg7UHpJlPps3mZ3LRxpb6__0PomBTQ&r=Xkn6r0Olgrmyl97VKakpX0o-JiB_old4u22bFbcLdRo&m=WEmA5tlLT-4nxWR8GoeTS7dM7n6BX52-5ELlKu5-o4c&s=RjnZBhACZLdykt8ETppf88EEKeePLRoCWZYV060iJw8&e=
>

Is a AIO or multi host setup?

I have found places in openstack ansible that bypass the proxy server variables.
My memory was is that it was using systemd to fetch files in certain
cases and that systemd did not honor proxy variables.
I have ended up using a secondary proxy on the deployment host along
with a NAT setup
on the deployment host that made sure to send external requests to the proxy.



-- 
Kent S. Gordon
kent.gordon at verizonwireless.com Work:682-831-3601 Mobile: 817-905-6518



More information about the OpenStack-dev mailing list