summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* openstack: Disable nova firewall managementbaserock/richardmaw/openstack-v4/reliabilityRichard Maw2015-03-201-1/+1
| | | | | | | | | | | | | | This should be handled by neutron, and except for the mis-configuration, it should have been. However, since both neutron and nova were configured to handle firewalling, they would both install their firewall rules into iptables, and it would be random which one would be used as either service is likely to start before the other and install their hook first. The result being that we'd randomly not be able to reach VMs after a reboot, unless we'd installed the same firewall rules in both nova and neutron.
* openstack-net-config: Use tr for tokenising ip link outputRichard Maw2015-03-201-5/+5
|
* neutron.configure: Ensure /var/run is a symlink to /runRichard Maw2015-03-171-0/+9
| | | | | | | | | If /var/run is a directory that is not emptied every boot, then it will contain references to stale network namespaces, which do not work when neutron tries to create networks. If it is flushed appropriately then neutron will create the namespaces when it needs to.
* Don't enable libvirt-guests.serviceRichard Maw2015-03-171-1/+0
| | | | | | | We don't think it's necessary, and it sometimes races with nova-compute.service, failing if certain network devices aren't created yet, so let's see if Nova should be the one starting the machines up at boot time.
* Links may not yet be up, so don't attempt to set promiscRichard Maw2015-03-161-6/+0
|
* Remove "Create Veth pairs"Richard Maw2015-03-166-53/+4
| | | | | | | The link devices themselves are added by Open vSwitch, we should have stopped it setting the IP address of the bridge a while ago, and setting promiscuous mode is supposed to be an implementation detail to support the bridges, so Open vSwitch should be handling that itself.
* systemd: disable building of testsRichard Maw2015-03-161-3/+5
|
* Update systemd to development snapshot including netlink fixRichard Maw2015-03-161-2/+2
|
* Fix openstack-nova-compute.service duplicate descriptionRichard Maw2015-03-161-1/+1
|
* Move patch link creation into openvswitchRichard Maw2015-03-161-17/+19
| | | | | This is required for Open vSwitch to be able to signal that every network interface required has been configured.
* Only start neutron-openvswitch-plugin after cleanup has finishedRichard Maw2015-03-092-3/+5
| | | | | | | | | ovs-cleanup is responsible for reconciling the state in openvswitch's database and neutron's configuration. This can fail if other services are also changing ovs configuration though, and the missing dependency resulted in neutron removing the interface while ovs-cleanup was about to do so.
* Rejigger networking so the bridge has the MAC of the external interfaceRichard Maw2015-03-091-9/+20
| | | | | | | | | | This allows the subsequent DHCP request to get the same IP address back, which means it only needs one address for first boot, and the address can be pre-allocated by the DHCP server before deployment. This is needed for the floating address range to be allocated in some set-ups, such as our local one at the office, where a subnet in a different class is routed to the server.
* Enable nova serial console accessRichard Maw2015-03-094-23/+26
| | | | | | This allows the local system to access the serial console using https://github.com/larsks/novaconsole/, so it's possible to debug whether the system has network access.
* Ensure newly brought up devices are correctly configuredRichard Maw2015-03-091-17/+21
| | | | | | | | | This adds masking config for the virtual devices to prevent them from attempting to DHCP, and stops us from giving the ip of eno1 to the bridge device, since eno1's address was obtained by DHCP, so it's against the rules to statically allocate that address to an interface. Now, we DHCP for a new address for the bridge.
* Disable DHCP on bound iface and internal ifacesRichard Maw2015-03-091-3/+4
|
* Deallocate IP address from bound interface after bindingRichard Maw2015-03-091-0/+3
| | | | | | If we leave that interface with its address, then the routing table is incorrect, as it will try to send connections out from an interface that cannot handle them.
* After initial switching setup, switch DHCP to external ifaceRichard Maw2015-03-091-0/+15
| | | | | | | | | | After the external interface has been bound to Open vSwitch, we should not attempt to DHCP on it, as it won't receive the DHCP responses. Attempting to DHCP results in startup stalling on network-online.target, because systemd-networkd-wait-online.service looks at every network interface it should configure based on the [Match] sections, and waits for all of them to be configured by systemd-networkd, which will never finish if DHCP is broken.
* Add wait-for-bind script between openvswitch and network-preRichard Maw2015-03-092-0/+17
| | | | | | Ordering openvswitch before networkd is not sufficient alone, because openvswitch doesn't wait for all its initial config to complete before reporting that it has finished starting.
* Start Open vSwitch before network-pre.targetRichard Maw2015-03-091-0/+2
| | | | | | | We want the network links to be configured before we start systemd-networkd, because we have to use ovs instead of networkd's config for the interfaces in OpenStack, but we still want to use networkd to manage DHCP on the interfaces.
* Add ntpd to openstack systemPatrick Darley2015-03-051-0/+2
|
* Add xfs recognition to openstack bspPatrick Darley2015-03-051-0/+2
|
* Rename stratum to nfsPatrick Darley2015-03-051-1/+1
| | | | | Caused problems with nfs stratum not being built into the system. Thanks to Richard Ipsum for helping spot this.
* Collect statics for horizon and move install commands to the chunkFrancisco Redondo Marchena2015-03-055-29/+66
| | | | | | Collecting the static files (css, js, png, ...) for horizon, compressing them and storing them in a folder accessible by horizon, fixes the problem when some css are not found and improves loading and navigating the pages.
* Revert if needed: thrift with erlang and max-jobs=1Pedro Alvarez2015-03-051-9/+6
|
* Fix Redirect in HorizonZara Zaimeche2015-03-051-1/+3
|
* Fix apache-httpd and horizon setup because of the change of layoutFrancisco Redondo Marchena2015-03-052-4/+4
|
* Add Ansible to Openstack systemPedro Alvarez2015-03-051-0/+2
|
* Fix issues with ordering and enabling neutron-setup and neutron-serverFrancisco Redondo Marchena2015-03-052-1/+2
|
* Disable login requirement for sudo for cinder, nova and neutron usersFrancisco Redondo Marchena2015-03-053-0/+6
| | | | | | Requiredtty is dissable by default but just in case we enable it in the future for the rest of the users, cinder, nova and neutron needs login disable to run commands being superuser.
* Rabbitmq-server was installing things in /usr, remove themPedro Alvarez2015-03-051-1/+8
|
* Fix .blackhole location for HorizonFrancisco Redondo Marchena2015-03-051-1/+1
|
* Add sudoers files for cinder, nova and neutron on post-install timeFrancisco Redondo Marchena2015-03-056-24/+21
|
* Install rootwrap filters on post-install timeFrancisco Redondo Marchena2015-03-055-24/+29
| | | | | | Installing rootwrap filters from their repositories will make easy to deal with updates. Also move neutron rootwrap filters to the right location without duplication.
* Add nfs to openstack-server systemFrancisco Redondo Marchena2015-03-051-0/+2
|
* SPLITME: Add all OpenstackFrancisco Redondo Marchena2015-03-05168-0/+18212
|
* Enable E1000E ethernet driver and external USB ethernet for OpenstackFrancisco Redondo Marchena2015-03-051-0/+3
| | | | | NOTE: This is done for testing purposes - it is not an Openstack requirement and can be dropped.
* Add netfilter configuration in Openstack bspFrancisco Redondo Marchena2015-03-051-0/+98
|
* Enable ipset kernel configuration for Openstack bspFrancisco Redondo Marchena2015-03-051-0/+17
|
* Add iproute2 support to Openstack bspFrancisco Redondo Marchena2015-03-051-0/+3
|
* Add KVM kernel support for intel machines in Openstack bspFrancisco Redondo Marchena2015-03-051-0/+1
|
* Enable all the IP_NF kernel support in Openstack bspFrancisco Redondo Marchena2015-03-051-0/+13
|
* Enable virtual ethernet support in Openstack bspFrancisco Redondo Marchena2015-03-051-0/+1
|
* Add Openvswitch kernel support for Openstack bspFrancisco Redondo Marchena2015-03-051-0/+10
|
* Add ebtables configurations to openstack bspFrancisco Redondo Marchena2015-03-051-0/+4
| | | | This modules are needed for ebtables and netfilter.
* Add Network Block Device configuration support to openstack bspFrancisco Redondo Marchena2015-03-051-0/+1
|
* Create a x86_64 openstack bspFrancisco Redondo Marchena2015-03-052-0/+129
| | | | | At this point the x86_64 openstack bsp is the same as x86_64 generic bsp.
* Rename NAT kernel configuration itemFrancisco Redondo Marchena2015-03-051-1/+1
| | | | | Replace CONFIG_NF_NAT_IPV4 by CONFIG_IP_NF_NAT which is the name for this item since the 3.17 kernel is available.
* Merge branch 'baserock/pedroalvarez/attr-common-api-fixes'Pedro Alvarez2015-03-055-11/+27
|\ | | | | | | | | Reviewed-by: Sam Thursfield <sam.thursfield@codethink.co.uk> Reviewed-by: Francisco Redondo Marchena <francisco.marchena@codethink.co.uk>
| * Upgrade attr version and remove DESTDIR hackPedro Alvarez2015-03-052-11/+15
| | | | | | | | | | | | | | | | | | | | This chunk was installing things in $DESTDIR$DESTDIR. For some reason when creating the artifact morph ignores this error and creates the artifact successfully, but some paths in files installed by attr were wrong because they were including $DESTDIR on it: # grep attr.inst /usr/lib*/libattr.la libdir='/attr.inst/usr/lib64'
| * Fix builds of genivi-common-api componentsPedro Alvarez2015-03-053-0/+12
|/ | | | | | | | | Running `autoreconf -ivf` will generate some files needed for ./configure in the build-aux folder. But ./configure needs them in the same folder. The workaround is generate a symlink 'build-aux -> .' so the files generated will end up next to the configure script.