| Posted | Nick | Remark | |
|---|---|---|---|
| #openstack-nova - 2019-11-06 | |||
| 20:59:25 | sean-k-mooney | ... i see | |
| 20:59:33 | sean-k-mooney | anyway am if your in the vm | |
| 20:59:42 | efried | can't imagine how a console through a browser is using its own kb driver | |
| 20:59:47 | mriedem | note that those 3 fixes above are gibi's and pretty straight-forward | |
| 20:59:48 | efried | but whatever | |
| 20:59:50 | mriedem | i'm +2 on all 3 | |
| 21:01:06 | sean-k-mooney | efried: so anyway your in the vm right. have you enabled dhcp on the subnet? if so you can reboot and it should get an ip or you can run cirros dhcpclient directly | |
| 21:01:14 | sean-k-mooney | efried: then you should be able to ssh in | |
| 21:01:34 | efried | rebooting, waiting for it to come up | |
| 21:02:07 | sean-k-mooney | efried: i usually put the command to do this in a local.sh file beside my local.conf | |
| 21:02:09 | mriedem | efried: are you just trying to figure out how to ssh into a cirros guest in devstack? | |
| 21:02:12 | sean-k-mooney | i just cant find it | |
| 21:02:28 | mriedem | i've got a recording on youtube that does that with a floating ip | |
| 21:02:29 | sean-k-mooney | devstack will auto run the local.sh if present | |
| 21:02:36 | efried | openstack server reboot | |
| 21:02:36 | efried | openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0 $group for all three groups | |
| 21:02:36 | efried | openstack subnet set --dhcp public-subnet | |
| 21:02:36 | efried | I did | |
| 21:02:47 | efried | mriedem: yes, that's what I'm trying to do. | |
| 21:02:50 | sean-k-mooney | yep that should be enough | |
| 21:02:58 | mriedem | heh, it's been like 3 days :) | |
| 21:02:58 | mriedem | sec | |
| 21:03:39 | mriedem | efried: it's a bit old, but this shows setting up a guest in devstack with a floating ip to ssh into it https://www.youtube.com/watch?v=hZg6wqxdEHk | |
| 21:03:58 | sean-k-mooney | ... my clean vm failed because i forget to mount /opt on a cinder volume and ran out of space :( | |
| 21:04:25 | efried | thanks mriedem, will try that on my other devstack | |
| 21:04:42 | efried | ssh: connect to host 2001:db8::109 port 22: No route to host | |
| 21:04:42 | efried | stack@nucle:/opt/stack/devstack$ openstack server ssh --private -l cirros test1 | |
| 21:04:42 | efried | sean-k-mooney: | |
| 21:04:54 | sean-k-mooney | add -4 | |
| 21:04:59 | mriedem | start about 3 minutes in | |
| 21:05:04 | mriedem | ignore all of the volume multiattach stuff | |
| 21:05:06 | sean-k-mooney | unless you have routable ipv6 | |
| 21:05:27 | sean-k-mooney | if you do you need to change teh --remote-ip to allow ipv6 trafic | |
| 21:05:56 | sean-k-mooney | efried: you cans also just use ssh directly if you know the ip | |
| 21:06:06 | efried | ah, but I can ssh to the IP... yes | |
| 21:06:22 | efried | I don't think I can ipv6 at all | |
| 21:06:49 | ioni | g like lxd/openvz | |
| 21:06:49 | ioni | hello guys, i'm using openstack in production and also sadly still use openvz and i plan to move away from it in the near future. is there a project that i can use with openstack to orchestrate containers like openvz. lxd seems the same but nova-lxd is not maintained anymore and everything that i can find related to openstack and containers is mostly related to docker and kubernets but not somethin | |
| 21:07:01 | efried | adding -4 also made the openstack command work | |
| 21:07:11 | sean-k-mooney | efried: the firewall is blocking all ipv6 into the vm by default | |
| 21:07:19 | mriedem | ioni: zun | |
| 21:07:31 | efried | sokay, I'm pretty sure ipv6 is never going to catch on anyway. I'll just use v4 | |
| 21:07:34 | efried | thanks for the help, again. | |
| 21:08:09 | sean-k-mooney | haha i spend like a full weekend getting it working at home like a month ago | |
| 21:08:48 | sean-k-mooney | i dont have native ipv6 at home so had to set up tunneling and then route it into openstack so that my vms get public ipv6 adresses | |
| 21:08:55 | mriedem | "how do i ssh into a guest in devstack" <3 days later> "wait, you don't need ipv6 with numa and dpdk? oh, well then..." | |
| 21:09:35 | sean-k-mooney | :) | |
| 21:09:47 | sean-k-mooney | mriedem: actully regarding multi attach | |
| 21:09:51 | mriedem | stop | |
| 21:09:56 | sean-k-mooney | what file system do you use? | |
| 21:10:08 | mriedem | in this demo? | |
| 21:10:12 | sean-k-mooney | in general | |
| 21:10:18 | mriedem | i don't | |
| 21:10:22 | sean-k-mooney | i dont think we mention it in the docs | |
| 21:10:24 | sean-k-mooney | ok | |
| 21:10:33 | mriedem | multiattach docs are mostly in cinder | |
| 21:10:47 | sean-k-mooney | ah o should read those at some point | |
| 21:11:04 | mriedem | https://docs.openstack.org/cinder/latest/admin/blockstorage-volume-multiattach.html | |
| 21:11:07 | mriedem | doesn't really go into details either | |
| 21:11:15 | ioni | mriedem, zun seems that it uses docker and is not something that i can replace openvz with | |
| 21:11:29 | sean-k-mooney | i was thinking of using it for k8s on openstack but it seamed complicated | |
| 21:11:30 | mriedem | efried: so about 9 minutes into that demo i'm creating a floating ip for the port attached to the server | |
| 21:13:00 | mriedem | might be useful if i just wrote this up into devstack docs | |
| 21:13:27 | sean-k-mooney | mriedem: i think there used to be an exersie that coverd it | |
| 21:13:36 | sean-k-mooney | but i cant find it | |
| 21:14:00 | mriedem | ioni: nova isn't really big on containers, it's basically vms and a front end for ironic baremetal, | |
| 21:14:24 | mriedem | nova-lxd is a thing out of tree as you know, openvz is in who knows what kind of maintenance state, and then there is libvirt+lxc which is also - who really knows if it works very well right now | |
| 21:15:22 | mriedem | of course with cirros you can just login with a password | |
| 21:15:25 | efried | sean-k-mooney: presumably I could have done all that dhcp and security group nonsense before creating the vm | |
| 21:15:41 | sean-k-mooney | efried: yes and you only have to do it once | |
| 21:15:54 | sean-k-mooney | efried: also i normally do it all via horizon as its faster | |
| 21:15:54 | efried | k, writing myself a cheat sheet | |
| 21:16:10 | efried | ew, gui | |
| 21:16:21 | sean-k-mooney | the cli is faster for most things but security groups are a pain on the cli | |
| 21:16:46 | efried | cheat sheet line for that: | |
| 21:16:47 | efried | openstack security group list -f value -c ID | xargs -n1 openstack security group rule create --ingress --protocol tcp --remote-ip 0.0.0.0/0 | |
| 21:17:02 | sean-k-mooney | efried: anyway as i said once you have the command you need to run. just put them in a file called local.sh and it will be run at the right time | |
| 21:17:44 | sean-k-mooney | oh is in the default local.sh in samples/local.sh | |
| 21:17:53 | sean-k-mooney | just copy that up one directory | |
| 21:18:48 | efried | hm, I thought I did all the right things on my other setup, but I'm still getting no route to host. | |
| 21:18:55 | efried | aaand gotta run get a kid | |
| 21:21:26 | melwitt | ioni: I see mention of openvz in the original proposal for the magnum project https://specs.openstack.org/openstack/magnum-specs/specs/pre-ocata/implemented/containers-service.html but I don't know if it supports it today | |
| 21:23:28 | sean-k-mooney | melwitt: ioni magnum is a different usage model | |
| 21:23:45 | sean-k-mooney | nova libvirt/lxc woudl be the closest | |
| 21:24:02 | melwitt | oh ok | |
| 21:24:10 | ioni | i just want to stop using openvz and migrate the current containers to something orchestrated by openstack with good support | |
| 21:24:28 | ioni | nova-lxd was something i could use but that was dropped recently by canonical | |
| 21:24:46 | sean-k-mooney | ioni: well there isnt really a good path forward if you also want the nova api | |
| 21:25:04 | sean-k-mooney | zun will work with docker style container but not system contianers | |
| 21:25:09 | sean-k-mooney | as far as i know | |
| 21:25:21 | ioni | right, that is want i found as well | |
| 21:25:32 | sean-k-mooney | nova libvirt wiht lxc could work but it does not have good support a the momemnt | |
| 21:25:51 | sean-k-mooney | if there was a lot of interest in it it would not take that much to get it working well again | |
| 21:26:26 | ioni | everybody told me that lxc support is not that great and was too scared to try it | |
| 21:26:48 | sean-k-mooney | its not but its not that far form being ok | |
| 21:27:31 | sean-k-mooney | the openvz driver is proably the best supproted fo all the nova conatiner drivers at the moment | |
| 21:27:43 | sean-k-mooney | it has not reaaly been a focus of nova of late | |
| 21:29:17 | openstackgerrit | Merged openstack/python-novaclient master: doc: Fix supported version descriptions https://review.opendev.org/693097 | |
| 21:29:29 | mriedem | i'm guessing the openvz 3rd party ci is still busted | |
| 21:30:33 | sean-k-mooney | was that the ci that had a hardcoded patch that is now in conclict because we fixed the bug | |