Red Hat SummitEste conteúdo não está disponível no idioma selecionado.
Chapter 2. Restore
This section describes how to restore the undercloud used in the Red Hat Enterprise Linux OpenStack Platform Director.
2.1. Restore the Undercloud
The following restore process assumes you are recovering a failed undercloud node, and you need to reinstall it from scratch. It assumes that the hardware layout is identical, and the hostname and undercloud settings of the machine will also be identical.
Once the machine is installed and is in a clean state, re-enable all the subscriptions/repositories needed to install and run director. Run the following commands as the root user:
1. Install the mariadb server:
yum install -y mariadb-server
# yum install -y mariadb-server2. Restore the MariaDB configuration file and database backup, then start the MariaDB server and load the backup data:
a. As the root user, restore the MariaDB files:
tar -xzC / -f undercloud-backup-$DATE.tar.gz etc/my.cnf.d/server.cnf tar -xzC / -f undercloud-backup-$DATE.tar.gz root/undercloud-all-databases.sql
# tar -xzC / -f undercloud-backup-$DATE.tar.gz etc/my.cnf.d/server.cnf
# tar -xzC / -f undercloud-backup-$DATE.tar.gz root/undercloud-all-databases.sql
b. Edit /etc/my.cnf.d/server.cnf and comment out the bind-address entry.
c. Start the mariadb service:
systemctl start mariadb cat /root/undercloud-all-databases.sql | mysql
# systemctl start mariadb
# cat /root/undercloud-all-databases.sql | mysqld. Clean up certain permissions (to be recreated later):
for i in ceilometer glance heat ironic keystone neutron nova tuskar;do mysql -e "drop user $i";done # mysql -e 'flush privileges'
# for i in ceilometer glance heat ironic keystone neutron nova tuskar;do mysql -e "drop user $i";done
# mysql -e 'flush privileges'3. Create the stack user account:
sudo useradd stack sudo passwd stack # specify a password echo "stack ALL=(root) NOPASSWD:ALL" | sudo tee -a /etc/sudoers.d/stack sudo chmod 0440 /etc/sudoers.d/stack
# sudo useradd stack
# sudo passwd stack # specify a password
# echo "stack ALL=(root) NOPASSWD:ALL" | sudo tee -a /etc/sudoers.d/stack
# sudo chmod 0440 /etc/sudoers.d/stack4. Restore the stack user home directory:
tar -xzC / -f undercloud-backup-$DATE.tar.gz home/stack
# tar -xzC / -f undercloud-backup-$DATE.tar.gz home/stack5. Install the swift and glance base packages, and then restore their data:
yum install -y openstack-glance openstack-swift tar -xzC / -f undercloud-backup-$DATE.tar.gz srv/node var/lib/glance/images
# yum install -y openstack-glance openstack-swift
# tar -xzC / -f undercloud-backup-$DATE.tar.gz srv/node var/lib/glance/images6. Confirm the data is owned by the correct user:
chown -R swift: /srv/node chown -R glance: /var/lib/glance/images
# chown -R swift: /srv/node
# chown -R glance: /var/lib/glance/images7. Restore your HAproxy SSL certificates:
tar -xzC / -f undercloud-backup-$DATE.tar.gz etc/keystone/ssl semanage fcontext -a -t etc_t "/etc/keystone/ssl(/.*)?" restorecon -R /etc/keystone/ssl
# tar -xzC / -f undercloud-backup-$DATE.tar.gz etc/keystone/ssl
# semanage fcontext -a -t etc_t "/etc/keystone/ssl(/.*)?"
# restorecon -R /etc/keystone/ssl8. Re-run the undercloud installation as the stack user, making sure to run it in the stack user home directory:
su - stack sudo yum install -y python-rdomanager-oscplugin
# su - stack
$ sudo yum install -y python-rdomanager-oscplugin9. Confirm that the hostname is correctly set in /etc/hosts.
10. Reinstall the undercloud:
openstack undercloud install
$ openstack undercloud install2.2. Reconnect the restored undercloud to the overcloud
Having completed the steps above, the undercloud can be expected to automatically restore its connection to the overcloud. The nodes will continue to poll Orchestration (heat) for pending tasks, using a simple HTTP request issued every few seconds.
2.3. Validate the Completed Restore
Use the following commands to perform a healthcheck of your newly restored environment:
2.3.1. Check Identity Service (Keystone) Operation
This step validates Identity Service operations by querying for a list of users.
source overcloudrc keystone user-list
# source overcloudrc
# keystone user-listWhen run from the controller, the output of this command should include a list of users created in your environment. This action demonstrates that keystone is running and successfully authenticating user requests. For example:
2.3.2. Check the OpenStack Services
Run the openstack-status command to view the status of OpenStack services:
openstack-status
# openstack-status
'%20d='M201.5%20305.5c-13.8%200-24.9-11.1-24.9-24.6%200-13.8%2011.1-24.9%2024.9-24.9%2013.6%200%2024.6%2011.1%2024.6%2024.9%200%2013.6-11.1%2024.6-24.6%2024.6zM504%20256c0%20137-111%20248-248%20248S8%20393%208%20256%20119%208%20256%208s248%20111%20248%20248zm-132.3-41.2c-9.4%200-17.7%203.9-23.8%2010-22.4-15.5-52.6-25.5-86.1-26.6l17.4-78.3%2055.4%2012.5c0%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.3%2024.9-24.9s-11.1-24.9-24.9-24.9c-9.7%200-18%205.8-22.1%2013.8l-61.2-13.6c-3-.8-6.1%201.4-6.9%204.4l-19.1%2086.4c-33.2%201.4-63.1%2011.3-85.5%2026.8-6.1-6.4-14.7-10.2-24.1-10.2-34.9%200-46.3%2046.9-14.4%2062.8-1.1%205-1.7%2010.2-1.7%2015.5%200%2052.6%2059.2%2095.2%20132%2095.2%2073.1%200%20132.3-42.6%20132.3-95.2%200-5.3-.6-10.8-1.9-15.8%2031.3-16%2019.8-62.5-14.9-62.5zM302.8%20331c-18.2%2018.2-76.1%2017.9-93.6%200-2.2-2.2-6.1-2.2-8.3%200-2.5%202.5-2.5%206.4%200%208.6%2022.8%2022.8%2087.3%2022.8%20110.2%200%202.5-2.2%202.5-6.1%200-8.6-2.2-2.2-6.1-2.2-8.3%200zm7.7-75c-13.6%200-24.6%2011.1-24.6%2024.9%200%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.1%2024.9-24.6%200-13.8-11-24.9-24.9-24.9z'/%3e%3c/svg%3e){kind=small}