[PKG-Openstack-devel] Bug#767715: openstack-deploy: fails install keystone (mysql password not used)
Mikael Cluseau
mcluseau at isi.nc
Sun Nov 2 02:22:07 UTC 2014
Package: openstack-deploy
Version: 0.10
Severity: important
Dear Maintainer,
first of all, that you for trying ease the installation of Openstack on Debian.
I'm in the process of setting up a production cluster using Jessie, as the freeze
is close and I would like to use Openstack with Debian. I try to build a working
multi-node cluster setup installed using preseed files.
* What led up to the situation?
On a freshly installed system, using puppet to do the following:
# to fix a bug in keystone's systemd support (/run/keystone must exist):
# - add a group keystone ;
# - add a system user keystone ;
# - do:
cat >/usr/lib/tmpfiles.d/keystone.conf <<EOF
#Type Path Mode UID GID Age Argument
d /run/keystone 0755 keystone keystone - -
EOF
/bin/systemd-tmpfiles --create
# (see bug #767711)
# (try to) install openstack with openstack-deploy
apt-get install openstack-deploy
cat >/root/osinstallrc <<EOF
RC_MYSQL_SERVER_HOSTNAME=localhost
RC_MYSQL_SERVER_PKG_NAME=mysql-server-5.5
RC_MYSQL_PASSWORD=tie9MohYoh4cooku
RC_RABIT_HOST=127.0.0.1
RC_RABIT_USER=guest
RC_RABIT_PASS=oomuikohteaWa6cu
RC_KEYSTONE_ENDPOINT_IP=192.168.100.254
RC_KEYSTONE_REGION=regionOne
RC_KEYSTONE_AUTHTOKEN=miequ9Ocaihee8ze
RC_KEYSTONE_ADMINPASS=choBah2pi6etahoh
RC_KEYSTONE_SQL_PASS=aij3earee3Piivut
RC_GLANCE_SQL_PASS=eeQueeweazei6pho
RC_NEUTRON_SQL_PASS=Chahwu2ein3quai6
RC_NOVA_SQL_PASS=ecua1aisieki5Epu
RC_CINDER_SQL_PASS=ephooXai5cheCh1P
RC_HEAT_SQL_PASS=eik2QuuJ8zeighie
EOF
openstack-deploy controller
* What exactly did you do (or not do) that was effective (or
ineffective)?
* What was the outcome of this action?
keystone fails to configure showing the following:
Setting up keystone (2014.1.3-2) ...
PKG-Openstack now calling: dbc_go keystone configure
dbconfig-common: writing config to /etc/dbconfig-common/keystone.conf
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO).
unable to connect to mysql server.
error encountered creating user:
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
dbconfig-common: keystone configure: noninteractive fail.
dbconfig-common: keystone configure: ignoring errors from here forwards
dbconfig-common: flushing administrative password
ERROR 1045 (28000): Access denied for user 'keystone'@'localhost' (using password: YES)
dpkg: error processing package keystone (--configure):
subprocess installed post-installation script returned error exit status 1
After the failure, debconf-get-selections shows "keystone dbconfig-common/mysql/admin-pass string tie9MohYoh4cooku".
Running dpkg --configure -a again (thus in interactive mode) shows 3 dbconfig questions:
- asks if I want to use dbconfig to configure the database (I answer yes) ;
- asks what type of database I want (I select mysql) ;
- asks for the mysql administrator's password (I give the same).
Then, configuration passes and keystone is running.
The output of "debconf-get-selections |grep ^keystone" is the same before and after the manual configuration.
Additionnaly, if I then try to launch openstack-deploy controller again, I have the following errors that
may be consequences (stripped of dpkg dependency errors):
[...]
Setting up ceilometer-common (2014.1.3-3) ...
Adding group `libvirt' (GID 129) ...
Done.
Adding user `ceilometer' to group `nova' ...
Adding user ceilometer to group nova
Done.
Adding user `ceilometer' to group `libvirt' ...
Adding user ceilometer to group libvirt
Done.
2014-11-01 13:29:33.443 11917 CRITICAL ceilometer [-] ConnectionFailure: [Errno 111] ECONNREFUSED
Setting up ceilometer-agent-central (2014.1.3-3) ...
Job for ceilometer-agent-central.service failed. See 'systemctl status ceilometer-agent-central.service' and 'journalctl -xn' for details.
invoke-rc.d: initscript ceilometer-agent-central, action "start" failed.
Setting up ceilometer-alarm-evaluator (2014.1.3-3) ...
Job for ceilometer-alarm-evaluator.service failed. See 'systemctl status ceilometer-alarm-evaluator.service' and 'journalctl -xn' for details.
invoke-rc.d: initscript ceilometer-alarm-evaluator, action "start" failed.
Setting up ceilometer-alarm-notifier (2014.1.3-3) ...
Job for ceilometer-alarm-notifier.service failed. See 'systemctl status ceilometer-alarm-notifier.service' and 'journalctl -xn' for details.
invoke-rc.d: initscript ceilometer-alarm-notifier, action "start" failed.
Setting up ceilometer-api (2014.1.3-3) ...
Registering service and endpoints for ceilometer at http://192.168.100.254:8777/
Job for ceilometer-api.service failed. See 'systemctl status ceilometer-api.service' and 'journalctl -xn' for details.
invoke-rc.d: initscript ceilometer-api, action "start" failed.
Setting up ceilometer-collector (2014.1.3-3) ...
Job for ceilometer-collector.service failed. See 'systemctl status ceilometer-collector.service' and 'journalctl -xn' for details.
invoke-rc.d: initscript ceilometer-collector, action "start" failed.
[...]
Setting up heat-common (2014.1.3-1) ...
PKG-Openstack now calling: dbc_go heat-common configure
dbconfig-common: writing config to /etc/dbconfig-common/heat-common.conf
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO).
unable to connect to mysql server.
error encountered creating user:
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
dbconfig-common: heat-common configure: noninteractive fail.
dbconfig-common: heat-common configure: ignoring errors from here forwards
dbconfig-common: flushing administrative password
ERROR 1045 (28000): Access denied for user 'heat'@'localhost' (using password: YES)
[...]
Setting up neutron-common (2014.1.3-4) ...
PKG-Openstack now calling: dbc_go neutron-common configure
dbconfig-common: writing config to /etc/dbconfig-common/neutron-common.conf
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO).
unable to connect to mysql server.
error encountered creating user:
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
dbconfig-common: neutron-common configure: noninteractive fail.
dbconfig-common: neutron-common configure: ignoring errors from here forwards
dbconfig-common: flushing administrative password
ERROR 1045 (28000): Access denied for user 'neutron'@'localhost' (using password: YES)
dpkg: error processing package neutron-common (--configure):
subprocess installed post-installation script returned error exit status 1
[...]
Setting up glance-common (2014.1.3-5) ...
PKG-Openstack now calling: dbc_go glance-common configure
dbconfig-common: writing config to /etc/dbconfig-common/glance-common.conf
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO).
unable to connect to mysql server.
error encountered creating user:
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
dbconfig-common: glance-common configure: noninteractive fail.
dbconfig-common: glance-common configure: ignoring errors from here forwards
dbconfig-common: flushing administrative password
ERROR 1045 (28000): Access denied for user 'glance'@'localhost' (using password: YES)
dpkg: error processing package glance-common (--configure):
subprocess installed post-installation script returned error exit status 1
[...]
Setting up nova-common (2014.1.3-5) ...
PKG-Openstack now calling: dbc_go nova-common configure
dbconfig-common: writing config to /etc/dbconfig-common/nova-common.conf
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO).
unable to connect to mysql server.
error encountered creating user:
ERROR 1045 (28000): Access denied for user 'root'@'localhost' (using password: NO)
dbconfig-common: nova-common configure: noninteractive fail.
dbconfig-common: nova-common configure: ignoring errors from here forwards
dbconfig-common: flushing administrative password
ERROR 1045 (28000): Access denied for user 'nova'@'localhost' (using password: YES)
dpkg: error processing package nova-common (--configure):
subprocess installed post-installation script returned error exit status 1
[...]
Errors were encountered while processing:
heat-common
heat-api
heat-api-cfn
heat-api-cloudwatch
heat-engine
neutron-common
neutron-dhcp-agent
neutron-l3-agent
neutron-metadata-agent
neutron-plugin-openvswitch-agent
neutron-server
glance-common
glance-api
glance-registry
glance
nova-common
nova-api
nova-conductor
nova-consoleauth
nova-consoleproxy
nova-scheduler
openstack-proxy-node
E: Sub-process /usr/bin/dpkg returned an error code (1)
* What outcome did you expect instead?
That dbconfig uses the provided password for mysql administrative operations.
-- System Information:
Debian Release: jessie/sid
APT prefers testing-updates
APT policy: (500, 'testing-updates'), (500, 'testing')
Architecture: amd64 (x86_64)
Kernel: Linux 3.16-3-amd64 (SMP w/2 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
-- no debconf information => I add my sorted extract of debconf-get-selections:
keystone dbconfig-common/database-type select mysql
keystone dbconfig-common/dbconfig-install boolean true
keystone dbconfig-common/dbconfig-reinstall boolean true
keystone dbconfig-common/dbconfig-upgrade boolean true
keystone dbconfig-common/mysql/admin-pass string tie9MohYoh4cooku
keystone dbconfig-common/mysql/admin-user string root
keystone keystone/admin-email string root at localhost
keystone keystone/admin-password password choBah2pi6etahoh
keystone keystone/admin-password-confirm password choBah2pi6etahoh
keystone keystone/admin-role-name string admin
keystone keystone/admin-tenant-name string admin
keystone keystone/admin-user string admin
keystone keystone/app-password-confirm password
keystone keystone/auth-token password miequ9Ocaihee8ze
keystone keystone/configure_db boolean true
keystone keystone/create-admin-tenant boolean true
keystone keystone/database-type select mysql
keystone keystone/db/app-user string keystone
keystone keystone/db/basepath string
keystone keystone/db/dbname string keystonedb
keystone keystone/dbconfig-install boolean true
keystone keystone/dbconfig-reinstall boolean false
keystone keystone/dbconfig-remove boolean
keystone keystone/dbconfig-upgrade boolean true
keystone keystone/endpoint-ip string 192.168.100.254
keystone keystone/install-error select abort
keystone keystone/internal/reconfiguring boolean false
keystone keystone/internal/skip-preseed boolean false
keystone keystone/missing-db-package-error select abort
keystone keystone/mysql/admin-pass string
keystone keystone/mysql/admin-user string root
keystone keystone/mysql/app-pass password
keystone keystone/mysql/method select unix socket
keystone keystone/password-confirm password
keystone keystone/passwords-do-not-match error
keystone keystone/pgsql/admin-pass password
keystone keystone/pgsql/admin-user string postgres
keystone keystone/pgsql/app-pass password
keystone keystone/pgsql/authmethod-admin select ident
keystone keystone/pgsql/authmethod-user select
keystone keystone/pgsql/changeconf boolean false
keystone keystone/pgsql/manualconf note
keystone keystone/pgsql/method select unix socket
keystone keystone/pgsql/no-empty-passwords error
keystone keystone/purge boolean false
keystone keystone/region-name string regionOne
keystone keystone/register-endpoint boolean true
keystone keystone/remote/host select
keystone keystone/remote/newhost string
keystone keystone/remote/port string
keystone keystone/remove-error select abort
keystone keystone/upgrade-backup boolean true
keystone keystone/upgrade-error select abort
More information about the Openstack-devel
mailing list