<div dir="ltr"><div style>Thanks for your reply.</div><div><br></div>first of all I do not see the following rule in my iptables<div><br></div><div><div class="im" style="font-family:arial,sans-serif;font-size:13px">target prot opt source destination<br>
</div><span style="font-family:arial,sans-serif;font-size:13px">DNAT tcp -- </span><a href="http://0.0.0.0/0" target="_blank" style="font-family:arial,sans-serif;font-size:13px">0.0.0.0/0</a><span style="font-family:arial,sans-serif;font-size:13px"> 169.254.169.254 tcp dpt:80 to:</span><a href="http://172.16.0.1:8775/" target="_blank" style="font-family:arial,sans-serif;font-size:13px">x.x.x.x:8775</a><br>
</div><div><br></div><div style>Please find the console log at the beginning of the post.</div><div style><br></div><div style>Since I am using Ubuntu cloud image I am not able to log in to it through VNC console. I can't even ping. This is the main problem.</div>
<div style><br></div><div style>Any help will greatly appreciated.</div><div class="gmail_extra"><br clear="all"><div><div dir="ltr"><div><br></div></div></div><br><div class="gmail_quote">On 15 February 2013 14:37, Sylvain Bauza <span dir="ltr"><<a href="mailto:sylvain.bauza@digimind.com" target="_blank">sylvain.bauza@digimind.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Metadata API allows to fetch SSH credentials when booting (pubkey I mean).<br>
If a VM is unable to reach metadata service, then it won't be able to get its public key, so you won't be able to connect, unless you specifically go thru a Password authentication (provided password auth is enabled in /etc/ssh/sshd_config, which is not the case with Ubuntu cloud archive).<br>
There is also a side effect, the boot process is longer as the instance is waiting for the curl timeout (60sec.) to finish booting up.<br>
<br>
Re: Quantum, the metadata API is actually DNAT'd from Network node to the Nova-api node (here 172.16.0.1 as internal management IP) :<br>
Chain quantum-l3-agent-PREROUTING (1 references)<div class="im"><br>
target prot opt source destination<br></div>
DNAT tcp -- <a href="http://0.0.0.0/0" target="_blank">0.0.0.0/0</a> 169.254.169.254 tcp dpt:80 to:<a href="http://172.16.0.1:8775" target="_blank">172.16.0.1:8775</a><br>
<br>
<br>
Anyway, the first step is to :<br>
1. grab the console.log<br>
2. access thru VNC to the desired instance<br>
<br>
Troubleshooting will be easier once that done.<br>
<br>
-Sylvain<br>
<br>
<br>
<br>
Le 15/02/2013 14:24, Chathura M. Sarathchandra Magurawalage a écrit :<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">
Hello Guys,<br>
<br>
Not sure if this is the right port but these are the results:<br>
<br></div>
*Compute node:*<div class="im"><br>
<br>
root@computenode:~# netstat -an | grep 8775<br></div>
tcp 0 0 <a href="http://0.0.0.0:8775" target="_blank">0.0.0.0:8775</a> <<a href="http://0.0.0.0:8775" target="_blank">http://0.0.0.0:8775</a>> 0.0.0.0:* LISTEN<br>
<br>
*Controller: *<div class="im"><br>
<br>
root@controller:~# netstat -an | grep 8775<br></div>
tcp 0 0 <a href="http://0.0.0.0:8775" target="_blank">0.0.0.0:8775</a> <<a href="http://0.0.0.0:8775" target="_blank">http://0.0.0.0:8775</a>> 0.0.0.0:* LISTEN<br>
<br>
*Additionally I cant curl 169.254.169.254 from the compute node. I am not sure if this is related to not being able to PING the VM.*<div class="im"><br>
<br>
curl -v <a href="http://169.254.169.254" target="_blank">http://169.254.169.254</a><br>
* About to connect() to 169.254.169.254 port 80 (#0)<br>
* Trying 169.254.169.254...<br>
<br>
Thanks for your help<br></div></blockquote></blockquote><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="im"></div><div class="im">
On 15 February 2013 11:03, Anil Vishnoi <<a href="mailto:vishnoianil@gmail.com" target="_blank">vishnoianil@gmail.com</a> <mailto:<a href="mailto:vishnoianil@gmail.com" target="_blank">vishnoianil@gmail.com</a>><u></u>> wrote:<br>
<br>
If you are using ubuntu cloud image then the only way to log-in is<br>
to do ssh with the public key. For that you have to create ssh key<br>
pair and download the ssh key. You can create this ssh pair using<br>
horizon/cli.<br>
<br>
<br>
On Fri, Feb 15, 2013 at 4:27 PM, Sylvain Bauza<br></div>
<<a href="mailto:sylvain.bauza@digimind.com" target="_blank">sylvain.bauza@digimind.com</a> <mailto:<a href="mailto:sylvain.bauza@digimind.com" target="_blank">sylvain.bauza@<u></u>digimind.com</a>>><div class="im">
<br>
wrote:<br>
<br>
<br>
Le 15/02/2013 11:42, Chathura M. Sarathchandra Magurawalage a<br>
écrit :<br>
<br>
<br>
How can I log into the VM from VNC? What are the credentials?<br>
<br>
<br>
You have multiple ways to get VNC access. The easiest one is<br>
thru Horizon. Other can be looking at the KVM command-line for<br>
the desired instance (on the compute node) and check the vnc<br>
port in use (assuming KVM as hypervisor).<br>
This is basic knowledge of Nova.<br>
<br>
<br>
<br>
nova-api-metadata is running fine in the compute node.<br>
<br>
<br>
Make sure the metadata port is avaible thanks to telnet or<br>
netstat, nova-api can be running without listening on metadata<br>
port.<br>
<br>
<br>
<br>
<br>
______________________________<u></u>_________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~<u></u>openstack</a><br></div>
<<a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/%<u></u>7Eopenstack</a>><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
<mailto:<a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.<u></u>launchpad.net</a>><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~<u></u>openstack</a><br>
<<a href="https://launchpad.net/%7Eopenstack" target="_blank">https://launchpad.net/%<u></u>7Eopenstack</a>><div class="im"><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/<u></u>ListHelp</a><br>
<br>
<br>
<br>
<br>
-- Thanks & Regards<br>
--Anil Kumar Vishnoi<br>
<br>
<br>
</div></blockquote>
<br>
</blockquote></div><br></div></div>