Basic configuration

controller

compute1

compute2

/ Create VMs

user/pw: gset/ipcc2014

c:\xgf\OpenStack\controller

8.192 GB MEM

4 Processors   with Virtualize Intel VT-x/EPT

30GB HD

Network Adapter(eth0): NAT

Network Adapter2(eth1):Host-only

user/pw: gset/ipcc2014

c:\xgf\OpenStack\compute1

4.096 GB MEM

2 Processors   with Virtualize Intel VT-x/EPT

20GB HD

Network Adapter(eth0): NAT

Network Adapter2(eth1):Host-only

user/pw: gset/ipcc2014

c:\xgf\OpenStack\compute2

4.096 GB MEM

2 Processors   with Virtualize Intel VT-x/EPT

20GB HD

Network Adapter(eth0): NAT

Network Adapter2(eth1):Host-only

System settings/brightness&lock –  uncheck ‘Lock’

CTRL+ALT+T / Terminal / Edit / Profile  Preferences / Terminal Size: 80 x 40

/ Upgrade Ubuntu Software

sudo apt-get update

sudo apt-get upgrade

sudo apt-get dist-upgrade

/ Install VMware Tools

sudo mkdir  /mnt/cdrom

Reinstall VMware Tools by VMware Workstation

sudo mount /dev/cdrom /mnt/cdrom

cd /mnt/cdrom

sudo cp VMwareTools-10.1.6-5214329.tar.gz  /opt

cd /opt

sudo tar -xvzf  VMwareTools-10.1.6-5214329.tar.gz

cd vmware-tools-distrib

sudo ./vmware-install.pl

/ Change interace names to eth0, eth1, eth2….

sudo gedit /etc/default/grub

GRUB_CMDLINE_LINUX_DEFAULT="quiet  splash"

GRUB_CMDLINE_LINUX="net.ifnames=0  biosdevname=0"

sudo  update-grub

sudo  grub-mkconfig -o /boot/grub/grub.cfg

/ Configure name resolution

sudo gedit /etc/hosts

127.0.0.1       localhost

10.0.0.11       controller

10.0.0.31       compute1

10.0.0.32       compute2

/ Configure interfaces, IP Addr and DNS

sudo gedit /etc/network/interfaces

auto lo

iface lo inet loopback

auto eth0

iface eth0 inet static

address 10.0.0.11

netmask 255.255.255.0

gateway 10.0.0.2

dns-nameserver 10.0.1.1

auto eth1

iface eth1 inet manual       

sudo gedit /etc/network/interfaces

auto lo

iface lo inet loopback

auto eth0

iface eth0 inet static

address 10.0.0.31

netmask 255.255.255.0

gateway 10.0.0.2

dns-nameserver 10.0.1.1

auto eth1

iface eth1 inet manual

sudo gedit /etc/network/interfaces

auto lo

iface lo inet loopback

auto eth0

iface eth0 inet static

address 10.0.0.32

netmask 255.255.255.0

gateway 10.0.0.2

dns-nameserver 10.0.1.1

auto eth1

iface eth1 inet manual

/ Configure hostnames

sudo gedit /etc/hostname

 controller

 compute1

 compute2

/ Install  openssh & git

sudo apt-get install openssh-server

sudo apt-get install openssh-client

sudo apt-get install sysv-rc-conf

sudo sysv-rc-conf ssh on

sudo sysv-rc-conf --list | grep ssh

netstat -ta | grep ssh

sudo apt-get install git-core

Network Time Protocl – NTP

controller

compute1

compute2

/ Install Chrony to synchronize services  among nodes

sudo apt-get install chrony

sudo gedit /etc/chrony/chrony.conf

allow 10.0.0.0./24   //  put at the first line

sudo service chrony restart

sudo apt-get install chrony

sudo gedit /etc/chrony/chrony.conf

server controller iburst // put at the first line

# pool 2.debian.pool.ntp.org offline iburst // comment out

sudo service chrony restart

sudo apt-get install chrony

sudo gedit /etc/chrony/chrony.conf

server controller iburst // put at the first line

# pool 2.debian.pool.ntp.org offline iburst // comment out

sudo service chrony restart

/ Verify operation

OpenStack packages

controller

compute1

compute2

/ For all nodes: controller, compute and  block storage….

sudo apt-get install  software-properties-common

sudo add-apt-repository cloud-archive:ocata

sudo apt-get update

sudo apt-get dist-upgrade

sudo apt-get install python-openstackclient

SQL database

controller

compute1

compute2

/ Install and Run MySQL

sudo apt-get install mariadb-server python-pymysql

sudo gedit /etc/mysql/mariadb.conf.d/99-openstack.cnf

[mysqld]

bind-address = 10.0.0.11

default-storage-engine = innodb

innodb_file_per_table = on

max_connections = 4096

collation-server = utf8_general_ci

character-set-server = utf8

sudo service mysql restart

sudo mysqladmin -u root password ipcc2014  // for database root user

sudo mysql_secure_installation

netstat -tnlp | grep 3306

/ Set password for Linux root user

sudo passwd   // set ‘ipcc2014’

su root    // enter the root mode

#mysql   // the root user no longer uses a password for local access to MySQL  server

MariaDB [(none)]>

show databases;

use mysql;

show tables;

Message queue

Controller

compute1

compute2

/ Install RabbitMQ

sudo apt-get install rabbitmq-server

sudo rabbitmqctl add_user openstack ipcc2014

sudo rabbitmqctl set_permissions openstack  ".*" ".*" ".*"

Memcached

Controller

compute1

compute2

/ Install Memcached

sudo apt-get install memcached  python-memcache

sudo gedit /etc/memcached.conf

-l 10.0.0.11

sudo service memcached restart

Identity service

controller

compute1

compute2

/ Create a database 

su root    // enter the root mode

#mysql

MariaDB [(none)]>

CREATE DATABASE keystone;

GRANT ALL PRIVILEGES ON keystone.* TO  'keystone'@'localhost'  IDENTIFIED BY  'ipcc2014';

GRANT ALL PRIVILEGES ON keystone.* TO  'keystone'@'%'  IDENTIFIED BY  'ipcc2014';

/ Install Keystone

sudo apt-get install keystone

sudo gedit /etc/keystone/keystone.conf

[database]

connection =  mysql+pymysql://keystone:ipcc2014@controller/keystone

[token]

provider = fernet

sudo su -s /bin/sh -c "keystone-manage  db_sync" keystone

sudo keystone-manage fernet_setup  --keystone-user keystone --keystone-group keystone

sudo keystone-manage credential_setup  --keystone-user keystone --keystone-group keystone

sudo keystone-manage bootstrap  --bootstrap-password ipcc2014  --bootstrap-admin-url http://controller:35357/v3/ --bootstrap-internal-url  http://controller:5000/v3/ --bootstrap-public-url http://controller:5000/v3/  --bootstrap-region-id RegionOne

sudo gedit /etc/apache2/apache2.conf

ServerName controller  //  put in the first line

sudo service apache2 restart

sudo rm -f /var/lib/keystone/keystone.db

export OS_USERNAME=admin

export OS_PASSWORD=ipcc2014

export OS_PROJECT_NAME=admin

export OS_USER_DOMAIN_NAME=Default

export OS_PROJECT_DOMAIN_NAME=Default

export OS_AUTH_URL=http://controller:35357/v3

export OS_IDENTITY_API_VERSION=3

openstack project create --domain default  --description "Service Project" service

openstack project create --domain default  --description "Demo Project" demo

openstack user create --domain default  --password-prompt demo  // ipcc2014

openstack role create user

openstack role add --project demo --user  demo user

/ Verify  operation

sudo gedit /etc/keystone/keystone-paste.ini

// remove ‘admin_token_auth’ from the

[pipeline:public_api], [pipeline:admin_api],  and [pipeline:api_v3] sections.

unset OS_AUTH_URL OS_PASSWORD

openstack --os-auth-url  http://controller:35357/v3 --os-project-domain-name default  --os-user-domain-name default --os-project-name admin --os-username admin  token issue

openstack --os-auth-url  http://controller:5000/v3 --os-project-domain-name default  --os-user-domain-name default --os-project-name demo --os-username demo token  issue

gedit admin-openrc

export OS_PROJECT_DOMAIN_NAME=Default

export OS_USER_DOMAIN_NAME=Default

export OS_PROJECT_NAME=admin

export OS_USERNAME=admin

export OS_PASSWORD=ipcc2014

export OS_AUTH_URL=http://controller:35357/v3

export OS_IDENTITY_API_VERSION=3

export OS_IMAGE_API_VERSION=2

gedit demo-openrc

export OS_PROJECT_DOMAIN_NAME=Default

export OS_USER_DOMAIN_NAME=Default

export OS_PROJECT_NAME=demo

export OS_USERNAME=demo

export OS_PASSWORD=ipcc2014

export OS_AUTH_URL=http://controller:5000/v3

export OS_IDENTITY_API_VERSION=3

export OS_IMAGE_API_VERSION=2

. admin-openrc

openstack token issue

. demo-openrc

openstack token issue

// copy ‘admin-openrc’

// copy ‘demo-openrc’

// copy ‘admin-openrc’

// copy ‘demo-openrc’

Image service

Controller

compute1

compute2

/ Create a database 

su root    // enter the root mode

#mysql

MariaDB [(none)]>

CREATE DATABASE glance;

GRANT ALL PRIVILEGES ON glance.* TO  'glance'@'localhost'  IDENTIFIED BY  'ipcc2014';

GRANT ALL PRIVILEGES ON glance.* TO  'glance'@'%'  IDENTIFIED BY 'ipcc2014';

. admin-openrc

openstack user create --domain default  --password-prompt glance

openstack role add --project service --user  glance admin

openstack service create --name glance  --description "OpenStack Image" p_w_picpath

openstack endpoint create --region RegionOne  p_w_picpath public http://controller:9292

openstack endpoint create --region RegionOne  p_w_picpath internal http://controller:9292

openstack endpoint create --region RegionOne  p_w_picpath admin http://controller:9292

/ Install Glance

sudo apt-get install glance

sudo gedit /etc/glance/glance-api.conf

[database]

connection = mysql+pymysql://glance:ipcc2014@controller/glance

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = glance

password = ipcc2014

[paste_deploy]

flavor = keystone

[glance_store]

stores = file,http

default_store = file

filesystem_store_datadir = /var/lib/glance/p_w_picpaths/

sudo gedit /etc/glance/glance-registry.conf

[database]

connection = mysql+pymysql://glance:ipcc2014@controller/glance

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = glance

password = ipcc2014

 [paste_deploy]

flavor = keystone

sudo su -s /bin/sh -c "glance-manage  db_sync" glance

sudo service glance-registry restart

sudo service glance-api restart

/ Verify  operation

/ Download the source p_w_picpath – ‘cirros’

wget http://download.cirros-cloud.net/0.3.5/cirros-0.3.5-x86_64-disk.img

/ Upload to p_w_picpath service using the QCOW2  disk format

. admin-openrc

openstack p_w_picpath create  "cirros_0_3_5" --file cirros-0.3.5-x86_64-disk.img --disk-format  qcow2 --container-format bare --public

openstack p_w_picpath list

Compute service

Controller

compute1

compute2

/ Create a database 

su root    // enter the root mode

#mysql

MariaDB [(none)]>

CREATE DATABASE nova_api;

CREATE DATABASE nova;

CREATE DATABASE nova_cell0;

GRANT ALL PRIVILEGES ON nova_api.* TO  'nova'@'localhost' IDENTIFIED BY 'ipcc2014';

GRANT ALL PRIVILEGES ON nova_api.* TO  'nova'@'%' IDENTIFIED BY 'ipcc2014';

GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'localhost'  IDENTIFIED BY 'ipcc2014';

GRANT ALL PRIVILEGES ON nova.* TO 'nova'@'%'  IDENTIFIED BY 'ipcc2014';

GRANT ALL PRIVILEGES ON nova_cell0.* TO  'nova'@'localhost' IDENTIFIED BY 'ipcc2014';

GRANT ALL PRIVILEGES ON nova_cell0.* TO  'nova'@'%' IDENTIFIED BY 'ipcc2014';

. admin-openrc

openstack user create --domain default  --password-prompt nova

openstack role add --project service --user  nova admin

openstack service create --name nova  --description "OpenStack Compute" compute

openstack endpoint create --region RegionOne  compute public http://controller:8774/v2.1

openstack endpoint create --region RegionOne  compute internal http://controller:8774/v2.1

openstack endpoint create --region RegionOne  compute admin http://controller:8774/v2.1

openstack user create --domain default  --password-prompt placement

openstack role add --project service --user  placement admin

openstack service create --name placement  --description "Placement API" placement

openstack endpoint create --region RegionOne  placement public http://controller:8778

openstack endpoint create --region RegionOne  placement internal http://controller:8778

openstack endpoint create --region RegionOne  placement admin http://controller:8778

/ Install Nova

sudo apt-get install nova-api nova-conductor  nova-consoleauth nova-novncproxy nova-scheduler nova-placement-api

sudo gedit /etc/nova/nova.conf

[api_database]

connection = mysql+pymysql://nova:ipcc2014@controller/nova_api

# connection=sqlite:var/lib/nova/nova.sqlite // comment out

[database]

connection = mysql+pymysql://nova:ipcc2014@controller/nova

[DEFAULT]

transport_url = rabbit://openstack:ipcc2014@controller

my_ip = 10.0.0.11

use_neutron = True

firewall_driver = nova.virt.firewall.NoopFirewallDriver

#log_dir=/var/log/nova //  comment out

[api]

auth_strategy = keystone

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = nova

password = ipcc2014

[vnc]

enabled = true

vncserver_listen = $my_ip

vncserver_proxyclient_address = $my_ip

[glance]

api_servers = http://controller:9292

[oslo_concurrency]

lock_path = /var/lib/nova/tmp

# lock_path=/var/lock/nova // comment out

[placement]

os_region_name = RegionOne

project_domain_name = Default

project_name = service

auth_type = password

user_domain_name = Default

auth_url = http://controller:35357/v3

username = placement

password = ipcc2014

# os_region_name = openstack // comment out

sudo su -s /bin/sh -c "nova-manage  api_db sync" nova

sudo su -s /bin/sh -c "nova-manage  cell_v2 map_cell0" nova

sudo su -s /bin/sh -c "nova-manage  cell_v2 create_cell --name=cell1 --verbose" nova

sudo su -s /bin/sh -c "nova-manage db  sync" nova

sudo nova-manage cell_v2 list_cells

sudo service nova-api restart

sudo service nova-consoleauth restart

sudo service nova-scheduler restart

sudo service nova-conductor restart

sudo service nova-novncproxy restart

sudo ufw disable // open port 5672 for MQ  server

sudo ufw status

sudo su -s /bin/sh -c "nova-manage  cell_v2 discover_hosts --verbose" nova

sudo su -s /bin/sh -c "nova-manage  cell_v2 discover_hosts --verbose" nova

egrep -c '(vmx|svm)' /proc/cpuinfo

2

/ Install Nova

sudo apt-get install nova-compute

sudo gedit /etc/nova/nova.conf

[DEFAULT]

transport_url = rabbit://openstack:ipcc2014@controller

my_ip = 10.0.0.31

use_neutron = True

firewall_driver = nova.virt.firewall.NoopFirewallDriver

#log_dir=/var/log/nova //  comment out

[api]

auth_strategy = keystone

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = nova

password = ipcc2014

[vnc]

enabled = True

vncserver_listen = 0.0.0.0

vncserver_proxyclient_address = $my_ip

novncproxy_base_url = http://controller:6080/vnc_auto.html

[glance]

api_servers = http://controller:9292

[oslo_concurrency]

lock_path = /var/lib/nova/tmp

# lock_path=/var/lock/nova // comment out

[placement]

os_region_name = RegionOne

project_domain_name = Default

project_name = service

auth_type = password

user_domain_name = Default

auth_url = http://controller:35357/v3

username = placement

password = ipcc2014

# os_region_name = openstack // comment out

[libvirt]

hw_machine_type =  "x86_64=pc-i440fx-xenial,i686=pc-i440fx-xenial"

sudo service nova-compute restart

cat /var/log/nova/nova-compute.log

egrep -c '(vmx|svm)' /proc/cpuinfo

2

/ Install Nova

sudo apt-get install nova-compute

sudo gedit /etc/nova/nova.conf

[DEFAULT]

transport_url = rabbit://openstack:ipcc2014@controller

my_ip = 10.0.0.32

use_neutron = True

firewall_driver = nova.virt.firewall.NoopFirewallDriver

#log_dir=/var/log/nova //  comment out

[api]

auth_strategy = keystone

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = nova

password = ipcc2014

[vnc]

enabled = True

vncserver_listen = 0.0.0.0

vncserver_proxyclient_address = $my_ip

novncproxy_base_url = http://controller:6080/vnc_auto.html

[glance]

api_servers = http://controller:9292

[oslo_concurrency]

lock_path = /var/lib/nova/tmp

# lock_path=/var/lock/nova // comment out

[placement]

os_region_name = RegionOne

project_domain_name = Default

project_name = service

auth_type = password

user_domain_name = Default

auth_url = http://controller:35357/v3

username = placement

password = ipcc2014

# os_region_name = openstack // comment out

[libvirt]

hw_machine_type =  "x86_64=pc-i440fx-xenial,i686=pc-i440fx-xenial"

sudo service nova-compute restart

cat /var/log/nova/nova-compute.log

/ Verify  operation

. admin-openrc

openstack hypervisor list

openstack compute service list

openstack catalog list

sudo nova-status upgrade check

Networking service

controller

compute1

compute2

/ Create a database 

su root    // enter the root mode

#mysql

MariaDB [(none)]>

CREATE DATABASE neutron;

GRANT ALL PRIVILEGES ON neutron.* TO  'neutron'@'localhost'IDENTIFIED BY 'ipcc2014';

GRANT ALL PRIVILEGES ON neutron.* TO  'neutron'@'%'IDENTIFIED BY 'ipcc2014';

. admin-openrc

openstack user create --domain default  --password-prompt neutron

openstack role add --project service --user  neutron admin

openstack service create --name neutron  --description "OpenStack Networking" network

openstack endpoint create --region RegionOne  network public http://controller:9696

openstack endpoint create --region RegionOne  network internal http://controller:9696

openstack endpoint create --region RegionOne  network admin http://controller:9696

/ Install Neutorn

sudo apt-get install neutron-server  neutron-plugin-ml2 neutron-linuxbridge-agent neutron-dhcp-agent  neutron-metadata-agent

sudo gedit /etc/neutron/neutron.conf

[database]

connection = mysql+pymysql://neutron:ipcc2014@controller/neutron

# connection = sqlite:var/lib/neutron/neutron.sqlite // comment  out

[DEFAULT]

core_plugin = ml2

service_plugins =

transport_url = rabbit://openstack:ipcc2014@controller

auth_strategy = keystone

notify_nova_on_port_status_changes = true

notify_nova_on_port_data_changes = true

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = neutron

password = ipcc2014

[nova]

auth_url = http://controller:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = nova

password = ipcc2014

sudo gedit /etc/neutron/plugins/ml2/ml2_conf.ini

[ml2]

type_drivers = flat,vlan

tenant_network_types =

mechanism_drivers = linuxbridge

extension_drivers = port_security

[ml2_type_flat]

flat_networks = provider

[securitygroup]

enable_ipset = true

sudo gedit /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]

physical_interface_mappings = provider:eth1

[vxlan]

enable_vxlan = false

[securitygroup]

enable_security_group = true

firewall_driver =  neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

sudo gedit /etc/neutron/dhcp_agent.ini

[DEFAULT]

interface_driver = linuxbridge

dhcp_driver = neutron.agent.linux.dhcp.Dnsmasq

enable_isolated_metadata = true

sudo gedit /etc/neutron/metadata_agent.ini

[DEFAULT]

nova_metadata_ip = controller

metadata_proxy_shared_secret = ipcc2014

sudo gedit /etc/nova/nova.conf

[neutron]

url = http://controller:9696

auth_url = http://controller:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = neutron

password = ipcc2014

service_metadata_proxy = true

metadata_proxy_shared_secret = ipcc2014

sudo su -s /bin/sh -c  "neutron-db-manage --config-file /etc/neutron/neutron.conf \

--config-file  /etc/neutron/plugins/ml2/ml2_conf.ini upgrade head" neutron

sudo service nova-api restart

sudo service neutron-server restart

sudo service neutron-linuxbridge-agent  restart

sudo service neutron-dhcp-agent restart

sudo service neutron-metadata-agent restart

/ Install Neutorn

sudo apt-get install  neutron-linuxbridge-agent

sudo gedit /etc/neutron/neutron.conf

[database]

# connection = sqlite:var/lib/neutron/neutron.sqlite //  comment out

[DEFAULT]

transport_url = rabbit://openstack:ipcc2014@controller

auth_strategy = keystone

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = neutron

password = ipcc2014

sudo gedit /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]

physical_interface_mappings = provider:eth1

[vxlan]

enable_vxlan = false

[securitygroup]

enable_security_group = true

firewall_driver =  neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

sudo gedit /etc/nova/nova.conf

[neutron]

url = http://controller:9696

auth_url = http://controller:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = neutron

password = ipcc2014

sudo service nova-compute restart

sudo service neutron-linuxbridge-agent restart

/ Install Neutorn

sudo apt-get install  neutron-linuxbridge-agent

sudo gedit /etc/neutron/neutron.conf

[database]

# connection = sqlite:var/lib/neutron/neutron.sqlite //  comment out

[DEFAULT]

transport_url = rabbit://openstack:ipcc2014@controller

auth_strategy = keystone

[keystone_authtoken]

auth_uri = http://controller:5000

auth_url = http://controller:35357

memcached_servers = controller:11211

auth_type = password

project_domain_name = default

user_domain_name = default

project_name = service

username = neutron

password = ipcc2014

sudo gedit /etc/neutron/plugins/ml2/linuxbridge_agent.ini

[linux_bridge]

physical_interface_mappings = provider:eth1

[vxlan]

enable_vxlan = false

[securitygroup]

enable_security_group = true

firewall_driver =  neutron.agent.linux.iptables_firewall.IptablesFirewallDriver

sudo gedit /etc/nova/nova.conf

[neutron]

url = http://controller:9696

auth_url = http://controller:35357

auth_type = password

project_domain_name = default

user_domain_name = default

region_name = RegionOne

project_name = service

username = neutron

password = ipcc2014

sudo service nova-compute restart

sudo service neutron-linuxbridge-agent  restart

/ Verify  operation

. admin-openrc

openstack extension list –network

openstack network agent list

Dashboard

Controller

compute1

compute2

/ Install Horizon

sudo apt-get install openstack-dashboard

sudo gedit /etc/openstack-dashboard/local_settings.py

#OPENSTACK_HOST = "127.0.0.1" // comment out

OPENSTACK_HOST = "controller"

ALLOWED_HOSTS = ['*', ]   // at the beginning, not Ubuntu Settings

SESSION_ENGINE = 'django.contrib.sessions.backends.cache' // the  memcached session

CACHES = {

            'default': {

                        'BACKEND':  'django.core.cache.backends.memcached.MemcachedCache',

                        'LOCATION': 'controller:11211',

                        }

            }

#OPENSTACK_KEYSTONE_URL = "http://%s:5000/v2.0" %  OPENSTACK_HOST // comment out

OPENSTACK_KEYSTONE_URL = "http://%s:5000/v3" %  OPENSTACK_HOST

#OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = False  // comment out

OPENSTACK_KEYSTONE_MULTIDOMAIN_SUPPORT = True

OPENSTACK_API_VERSIONS = {

"identity": 3,

"p_w_picpath": 2,

"volume": 2,

}

#OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = 'Default'  //  comment out

OPENSTACK_KEYSTONE_DEFAULT_DOMAIN = "Default"

#OPENSTACK_KEYSTONE_DEFAULT_ROLE = "_member_"  //  comment out

OPENSTACK_KEYSTONE_DEFAULT_ROLE = "user"

OPENSTACK_NEUTRON_NETWORK = {

#    'enable_router':  True,

#    'enable_quotas':  True,

#    'enable_ipv6': True,

#     'enable_distributed_router': False,

#    'enable_ha_router':  False,

#    'enable_lb': True,

#    'enable_firewall':  True,

#    'enable_***': True,

#     'enable_fip_topology_check': True,   // comment out

'enable_router': False,

'enable_quotas': False,

'enable_ipv6': False,

'enable_distributed_router': False,

'enable_ha_router': False,

'enable_lb': False,

'enable_firewall': False,

'enable_***': False,

'enable_fip_topology_check': False,

TIME_ZONE = "UTC"

sudo chown www-data:www-data  /var/lib/openstack-dashboard/secret_key

sudo gedit  /etc/apache2/conf-available/openstack-dashboard.conf

WSGIApplicationGroup %{GLOBAL}

sudo service apache2 reload

/ Verify  operation

http://controller/horizon

default/admin/ipcc2014

default/demo/ipcc2014

Lanuch an instance

controller

compute1

compute2

/ Create the provider network

. admin-openrc                                                                          

openstack network create --share --external  --provider-physical-network provider --provider-network-type flat provider

/ Create a subnet on the provider network

openstack subnet create --network provider  --allocation-pool start=192.168.100.200,end=192.168.100.220 --dns-nameserver 10.0.1.1 --gateway 192.168.100.111 --subnet-range 192.168.100.0/24 provider

/ Create m1.nano flavor

openstack flavor create --id 0 --vcpus 1  --ram 64 --disk 1 m1.nano

/ Add rules for the default security group

openstack  security group rule create --proto icmp default        

openstack security group rule create --proto  tcp --dst-port 22 default

/ Verify  operation

. admin-openrc

openstack  flavor list

openstack p_w_picpath  list

openstack  network list

openstack  security group list

openstack  server list