...
| Code Block |
|---|
nmcli con mod ens1f0np0 ipv4.method manual ipv4.addr "192.168.61.106/24" nmcli con mod ens1f0np0 802-3-ethernet.mtu 9000 nmcli con up ens1f0np0 nmcli con mod ens1f0np0 connection.autoconnect yes #nmclinmcli con add type vlan ifname ens1f0np0ens1f1np1.40303 dev ens1f1np1 id 40 #nmcli con mod vlan-ens1f1np1.303 ens1f0np0.40 disabled #nmcli con mod vlan-ens1f1np1.888 ens1f0np0.40 disabled nmcli con add type vlan ifname ens1f1np1.303401 dev ens1f1np1 id 303401 nmcli con add type vlan ifname ens1f1np1.401402 dev ens1f1np1 id 401402 nmcli con add type vlan ifname ens1f1np1.888 dev ens1f1np1 id 888 nmcli con mod vlan-ens1f1np1.303 ipv4.method disabled nmcli con mod vlan-ens1f1np1.401 ipv4.method disabled nmcli con mod vlan-ens1f1np1.402 ipv4.method disabled nmcli con mod vlan-ens1f1np1.888 ipv4.method disabled nmcli con mod vlan-ens1f1np1.303 ipv6.method disabled nmcli con mod vlan-ens1f1np1.401 ipv6.method disabled nmcli con mod vlan-ens1f1np1.402 ipv6.method disabled nmcli con mod vlan-ens1f1np1.888 ipv6.method disabled ip link set ens1f1np1 mtu 9000 #ip link set ens1f0np0 mtu 9000 reboot |
...
| Code Block | ||
|---|---|---|
| ||
dnf config-manager --set-enabled crb yum install centos-release-openstack-yoga yum clean all yum update yum install python3-openstackclient yum install openstack-selinux yum install memcached python3-memcached yum install openstack-keystone httpd python3-mod_wsgi yum install openstack-glance yum install openstack-placement-api yum install python3-osc-placement yum install openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-openvswitch ebtables yum install openstack-dashboard yum install openstack-cinder yum install openstack-ec2-api yum install openstack-heat-api openstack-heat-api-cfn openstack-heat-engine yum install python3-mysqlclient --enablerepo=epel yum install mod_ssl yum install mod_auth_openidc |
...
| Code Block | ||
|---|---|---|
| ||
nmcli con modify vlan-eno3.303 ethtool.feature-gro off
nmcli con modify vlan-eno3.401 ethtool.feature-gro off
nmcli con modify vlan-eno3.402 ethtool.feature-gro off
nmcli con modify vlan-eno3.888 ethtool.feature-gro off |
...
| Code Block |
|---|
dnf config-manager --set-enabled crb
yum install centos-release-openstack-yoga
yum clean all
yum update
yum install python3-openstackclient
yum install openstack-selinux
yum install memcached python3-memcached
yum install openstack-keystone httpd python3-mod_wsgi
yum install openstack-glance
yum install openstack-placement-api
yum install python3-osc-placement
yum install openstack-nova-api openstack-nova-conductor openstack-nova-novncproxy openstack-nova-scheduler
yum install openstack-neutron openstack-neutron-ml2 openstack-neutron-openvswitch ebtables
yum install openstack-dashboard
yum install openstack-cinder
yum install openstack-ec2-api
yum install openstack-heat-api openstack-heat-api-cfn openstack-heat-engine
yum install python3-mysqlclient --enablerepo=epel
yum install mod_ssl
yum install mod_auth_openidc |
...
| Code Block |
|---|
[root@cld-ctrl-01 ~]# grep -i opt /etc/sysconfig/memcached OPTIONS="-l 192.168.60.42105" #OPTIONS="-l 127.0.0.1,::1" # |
...
| Code Block |
|---|
wget https://repository.egi.eu/sw/production/cas/1/current/repo-files/egi-trustanchors.repo -O /etc/yum.repos.d/EGI-trustanchors.repo yum install ca-policy-egi-core yum install fetch-crl --enablerepo=epel |
TBC: start di fetch-ctrl
Installare i file (copiandoli da cld-ctrl-
...
02):
/etc/grid-security/
...
keystone-*.pem
/etc/grid-security/horizon*.pem
| Code Block |
|---|
ln -scd /etc/grid-security/horizon-unipd ln -s horizon-infn-cert.pem /etc/grid-security/unipd-cert.pem lnhostcert.pem ln -s horizon-infn-key.pem hostkey.pem #ln -s horizon-infn-cert.pem cert.pem #ln -s /etc/grid-security/horizon-unipdinfn-key.pem /etc/grid-security//unipd-key.pem |
Keystone
| Code Block |
|---|
mkdir -p /etc/keystone/fernet-keys && chown keystone.keystone /etc/keystone/fernet-keys && chmod 700 /etc/keystone/fernet-keys mkdir -p /etc/keystone/credential-keys && chown keystone.keystone /etc/keystone/credential-keys && chmod 700 /etc/keystone/credential-keys scp cld-ctrl-02:/etc/keystone/fernet-keys/* /etc/keystone/fernet-keys scp cld-ctrl-02:/etc/keystone/credential-keys/* /etc/keystone/credential-keys chown keystone.keystone /etc/keystone/fernet-keys/* chown keystone.keystone /etc/keystone/credential-keys/* |
...
| Code Block |
|---|
systemctl start openvswitch openvswitch ovs-vsctl add-br br-ex ovs-vsctl add-br br-ex-2 ovs-vsctl add-br br-ex-23 ovs-vsctl add-br br-ex-34 ovs-vsctl add-port br-ex eno3ens1f1np1.303 ovs-vsctl add-port br-ex-2 eno3ens1f1np1.888 ovs-vsctl add-port br-ex-3 eno3ens1f1np1.401 ovs-vsctl add-port br-ex-4 ens1f1np1.402 |
Configurazione via puppet su cld-ctrl-01:
...
In foreman sposto cld-ctrl-01 sull'hostgroup hosts_all/ControllerNode-TestProd_Yoga
e forzo l'esecuzione di puppet
...
- Reinstallazione openmanage
Warning: installare openmanage solo dopo avere runnato puppet (altrimenti ci sono problemi di dipendenze con libxerces-c)
- Cron check cert. Copio da cld-ctrl-02:
- /etc/cron.d/check_certificates
- /usr/local/bin/check_certs.sh
- /usr/local/bin/check_ssl_cert (prenderlo da https://raw.githubusercontent.com/matteocorti/check_ssl_cert/master/check_ssl_cert o da un altro nodo aggiornato: quello che c'era prima non va bene)
- Calendario GPUs (compreso cron /etc/cron.d/checkGpu)
- Ripristinare /root/StartServices
- Ripristinare /root/admin-openrc.sh
- mkdir /var/www/GPUs/ (anche su cld-ctrl-02)
- Ripristinare tutti i cron in /etc/cron.d
Riabilitazione di entrambi i controller in HAproxy
...