Earlier  
Later
New Search
Posted Nick Remark
#openstack-nova - 2019-11-06
20:51:56 sean-k-mooney if you reboot the vm you should then be able to ssh in with
20:52:26 sean-k-mooney openstack server ssh --private -l cirros <vm name>
20:52:28 artom efried, ah, thanks! Tomorrow? If it's still bugging me then
20:52:34 efried artom: sure thing
20:52:35 artom I'm on the hook for the school run now
20:52:44 efried me too in 20 mins
20:53:06 eandersson Fighting heal_allocations is never fun
20:53:23 eandersson I almost wish it was out of tree
20:54:21 efried sean-k-mooney: is it gonna hurt me that my VM currently doesn't think it has an ipv4 address?
20:54:48 sean-k-mooney you dont see one in openstack server show our you cant ping it
20:57:10 openstackgerrit Matt Riedemann proposed openstack/nova master: Use admin neutron client to gather port resource requests https://review.opendev.org/691005
20:57:10 openstackgerrit Matt Riedemann proposed openstack/nova master: Use admin neutron client to query ports for binding https://review.opendev.org/690999
20:57:11 openstackgerrit Matt Riedemann proposed openstack/nova master: Use admin neutron client to see if instance has qos ports https://review.opendev.org/691900
20:57:31 sean-k-mooney efried: if you just want the console url you can do "openstack console url <vm name>" by the way
20:57:40 efried sean-k-mooney: per the console running ifconfig -a
20:58:01 sean-k-mooney oh did you enable dhcp like i said and reboot
20:58:09 efried yeah, the console via browser is pretty clunky, I could make do with that but would rather be able to ssh
20:58:27 efried for one thing, it seems to be bypassing my keyboard driver
20:58:33 efried I can't type qwerty to save my life
20:58:44 sean-k-mooney davorak?
20:59:05 efried there were three security groups, so I set that up for all of them, cause I didn't know which one was the right one. rebooting the vm now
20:59:08 efried yes, dvorak
20:59:13 efried for nearly 20 years.
20:59:25 sean-k-mooney ... i see
20:59:33 sean-k-mooney anyway am if your in the vm
20:59:42 efried can't imagine how a console through a browser is using its own kb driver
20:59:47 mriedem note that those 3 fixes above are gibi's and pretty straight-forward
20:59:48 efried but whatever
20:59:50 mriedem i'm +2 on all 3
21:01:06 sean-k-mooney efried: so anyway your in the vm right. have you enabled dhcp on the subnet? if so you can reboot and it should get an ip or you can run cirros dhcpclient directly
21:01:14 sean-k-mooney efried: then you should be able to ssh in
21:01:34 efried rebooting, waiting for it to come up
21:02:07 sean-k-mooney efried: i usually put the command to do this in a local.sh file beside my local.conf
21:02:09 mriedem efried: are you just trying to figure out how to ssh into a cirros guest in devstack?
21:02:12 sean-k-mooney i just cant find it
21:02:28 mriedem i've got a recording on youtube that does that with a floating ip
21:02:29 sean-k-mooney devstack will auto run the local.sh if present
21:02:36 efried openstack server reboot
21:02:36 efried openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0 $group for all three groups
21:02:36 efried openstack subnet set --dhcp public-subnet
21:02:36 efried I did
21:02:47 efried mriedem: yes, that's what I'm trying to do.
21:02:50 sean-k-mooney yep that should be enough
21:02:58 mriedem heh, it's been like 3 days :)
21:02:58 mriedem sec
21:03:39 mriedem efried: it's a bit old, but this shows setting up a guest in devstack with a floating ip to ssh into it https://www.youtube.com/watch?v=hZg6wqxdEHk
21:03:58 sean-k-mooney ... my clean vm failed because i forget to mount /opt on a cinder volume and ran out of space :(
21:04:25 efried thanks mriedem, will try that on my other devstack
21:04:42 efried ssh: connect to host 2001:db8::109 port 22: No route to host
21:04:42 efried stack@nucle:/opt/stack/devstack$ openstack server ssh --private -l cirros test1
21:04:42 efried sean-k-mooney:
21:04:54 sean-k-mooney add -4
21:04:59 mriedem start about 3 minutes in
21:05:04 mriedem ignore all of the volume multiattach stuff
21:05:06 sean-k-mooney unless you have routable ipv6
21:05:27 sean-k-mooney if you do you need to change teh --remote-ip to allow ipv6 trafic
21:05:56 sean-k-mooney efried: you cans also just use ssh directly if you know the ip
21:06:06 efried ah, but I can ssh to the IP... yes
21:06:22 efried I don't think I can ipv6 at all
21:06:49 ioni g like lxd/openvz
21:06:49 ioni hello guys, i'm using openstack in production and also sadly still use openvz and i plan to move away from it in the near future. is there a project that i can use with openstack to orchestrate containers like openvz. lxd seems the same but nova-lxd is not maintained anymore and everything that i can find related to openstack and containers is mostly related to docker and kubernets but not somethin
21:07:01 efried adding -4 also made the openstack command work
21:07:11 sean-k-mooney efried: the firewall is blocking all ipv6 into the vm by default
21:07:19 mriedem ioni: zun
21:07:31 efried sokay, I'm pretty sure ipv6 is never going to catch on anyway. I'll just use v4
21:07:34 efried thanks for the help, again.
21:08:09 sean-k-mooney haha i spend like a full weekend getting it working at home like a month ago
21:08:48 sean-k-mooney i dont have native ipv6 at home so had to set up tunneling and then route it into openstack so that my vms get public ipv6 adresses
21:08:55 mriedem "how do i ssh into a guest in devstack" <3 days later> "wait, you don't need ipv6 with numa and dpdk? oh, well then..."
21:09:35 sean-k-mooney :)
21:09:47 sean-k-mooney mriedem: actully regarding multi attach
21:09:51 mriedem stop
21:09:56 sean-k-mooney what file system do you use?
21:10:08 mriedem in this demo?
21:10:12 sean-k-mooney in general
21:10:18 mriedem i don't
21:10:22 sean-k-mooney i dont think we mention it in the docs
21:10:24 sean-k-mooney ok
21:10:33 mriedem multiattach docs are mostly in cinder
21:10:47 sean-k-mooney ah o should read those at some point
21:11:04 mriedem https://docs.openstack.org/cinder/latest/admin/blockstorage-volume-multiattach.html
21:11:07 mriedem doesn't really go into details either
21:11:15 ioni mriedem, zun seems that it uses docker and is not something that i can replace openvz with
21:11:29 sean-k-mooney i was thinking of using it for k8s on openstack but it seamed complicated
21:11:30 mriedem efried: so about 9 minutes into that demo i'm creating a floating ip for the port attached to the server
21:13:00 mriedem might be useful if i just wrote this up into devstack docs
21:13:27 sean-k-mooney mriedem: i think there used to be an exersie that coverd it
21:13:36 sean-k-mooney but i cant find it
21:14:00 mriedem ioni: nova isn't really big on containers, it's basically vms and a front end for ironic baremetal,
21:14:24 mriedem nova-lxd is a thing out of tree as you know, openvz is in who knows what kind of maintenance state, and then there is libvirt+lxc which is also - who really knows if it works very well right now
21:15:22 mriedem of course with cirros you can just login with a password
21:15:25 efried sean-k-mooney: presumably I could have done all that dhcp and security group nonsense before creating the vm
21:15:41 sean-k-mooney efried: yes and you only have to do it once
21:15:54 sean-k-mooney efried: also i normally do it all via horizon as its faster
21:15:54 efried k, writing myself a cheat sheet
21:16:10 efried ew, gui
21:16:21 sean-k-mooney the cli is faster for most things but security groups are a pain on the cli
21:16:46 efried cheat sheet line for that:
21:16:47 efried openstack security group list -f value -c ID | xargs -n1 openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0
21:17:02 sean-k-mooney efried: anyway as i said once you have the command you need to run. just put them in a file called local.sh and it will be run at the right time

Earlier   Later