zun/doc/source/install/compute-install-ubuntu.rst

Install and configure a compute node for Ubuntu

This section describes how to install and configure the Container service on a compute node for Ubuntu 16.04 (LTS).

Prerequisites

Before you install and configure Zun, you must have Docker and Kuryr-libnetwork installed properly in the compute node, and have Etcd installed properly in the controller node. Refer Get Docker for Docker installation and Kuryr libnetwork installation guide, Etcd installation guide

Install and configure components

1. Create zun user and necessary directories:

   • Create user:

     # groupadd --system zun
     # useradd --home-dir "/var/lib/zun" \
           --create-home \
           --system \
           --shell /bin/false \
           -g zun \
           zun

   • Create directories:

     # mkdir -p /etc/zun
     # chown zun:zun /etc/zun

2. Clone and install zun:

   # apt-get install python-pip
   # cd /var/lib/zun
   # git clone https://git.openstack.org/openstack/zun.git
   # chown -R zun:zun zun
   # cd zun
   # pip install -r requirements.txt
   # python setup.py install

3. Generate a sample configuration file:

   # su -s /bin/sh -c "oslo-config-generator \
       --config-file etc/zun/zun-config-generator.conf" zun
   # su -s /bin/sh -c "cp etc/zun/zun.conf.sample \
       /etc/zun/zun.conf" zun
   # su -s /bin/sh -c "cp etc/zun/rootwrap.conf \
       /etc/zun/rootwrap.conf" zun
   # su -s /bin/sh -c "mkdir -p /etc/zun/rootwrap.d" zun
   # su -s /bin/sh -c "cp etc/zun/rootwrap.d/* \
       /etc/zun/rootwrap.d/" zun

4. Configure sudoers for zun users:

   # echo "zun ALL=(root) NOPASSWD: /usr/local/bin/zun-rootwrap \
       /etc/zun/rootwrap.conf *" | sudo tee /etc/sudoers.d/zun-rootwrap

5. Edit the /etc/zun/zun.conf:

   • In the [DEFAULT] section, configure RabbitMQ message queue access:

     [DEFAULT]
     ...
     transport_url = rabbit://openstack:RABBIT_PASS@controller

     Replace RABBIT_PASS with the password you chose for the openstack account in RabbitMQ.

   • In the [DEFAULT] section, configure the path that is used by Zun to store the states:

     [DEFAULT]
     ...
     state_path = /var/lib/zun

   • In the [database] section, configure database access:

     [database]
     ...
     connection = mysql+pymysql://zun:ZUN_DBPASS@controller/zun

     Replace ZUN_DBPASS with the password you chose for the zun database.

   • In the [keystone_auth] section, configure Identity service access:

     [keystone_auth]
     memcached_servers = controller:11211
     www_authenticate_uri = http://controller:5000
     project_domain_name = default
     project_name = service
     user_domain_name = default
     password = ZUN_PASS
     username = zun
     auth_url = http://controller:35357
     auth_type = password
     auth_version = v3
     auth_protocol = http
     service_token_roles_required = True
     endpoint_type = internalURL

   • In the [keystone_authtoken] section, configure Identity service access:

     [keystone_authtoken]
     ...
     memcached_servers = controller:11211
     www_authenticate_uri= http://controller:5000
     project_domain_name = default
     project_name = service
     user_domain_name = default
     password = ZUN_PASS
     username = zun
     auth_url = http://controller:35357
     auth_type = password

     Replace ZUN_PASS with the password you chose for the zun user in the Identity service.

   • In the [websocket_proxy] section, configure the URL of the websocket proxy. This URL must match the websocket configuration in controller node:

     [websocket_proxy]
     ...
     base_url = ws://controller:6784/
     
     .. note::
     
       This URL will be used by end users to access the console of their
       containers so make sure this URL is accessible from your intended
       users.

   • In the [oslo_concurrency] section, configure the lock_path:

     [oslo_concurrency]
     ...
     lock_path = /var/lib/zun/tmp

   Note

   Make sure that /etc/zun/zun.conf still have the correct permissions. You can set the permissions again with:

   # chown zun:zun /etc/zun/zun.conf

6. Configure Docker and Kuryr:

   • Create the directory /etc/systemd/system/docker.service.d

     # mkdir -p /etc/systemd/system/docker.service.d

   • Create the file /etc/systemd/system/docker.service.d/docker.conf. Configure docker to listen to port 2375 as well as the default unix socket. Also, configure docker to use etcd3 as storage backend:

     [Service]
     ExecStart=
     ExecStart=/usr/bin/dockerd --group zun -H tcp://compute1:2375 -H unix:///var/run/docker.sock --cluster-store etcd://controller:2379

   • Restart Docker:

     # systemctl daemon-reload
     # systemctl restart docker

   • Edit the Kuryr config file /etc/kuryr/kuryr.conf. Set capability_scope to global:

     [DEFAULT]
     ...
     capability_scope = global

   • Restart Kuryr-libnetwork:

     # systemctl restart kuryr-libnetwork

Finalize installation

1. Create an upstart config, it could be named as /etc/systemd/system/zun-compute.service:

   [Unit]
   Description = OpenStack Container Service Compute Agent
   
   [Service]
   ExecStart = /usr/local/bin/zun-compute
   User = zun
   
   [Install]
   WantedBy = multi-user.target

2. Enable and start zun-compute:

   # systemctl enable zun-compute
   # systemctl start zun-compute

3. Verify that zun-compute services are running:

   # systemctl status zun-compute