openstack team mailing list archive

[Vishvananda Ishaya <vishvananda@xxxxxxxxx>]

The creds database is now created by running nova-cert (a patch went in recently to update that error message), but nova-manage project zipfile is not the best way to get creds.  You can get credentials from the essex dashboard or by setting them manually.  The devstack script sets them for you if you source openrc.

https://github.com/openstack-dev/devstack/blob/master/openrc#L55

The certs are only used for euca-bundle-vol.  You can get certs using the nova command line tool.  For example

https://github.com/openstack-dev/devstack/blob/master/exercises/bundle.sh

Vish

On Feb 26, 2012, at 4:47 PM, Alexey Eromenko wrote:

> Platform: Debian wheezy/testing + nova-2012.1~e3-4
> 
> According to official docs: (Chapter "Creating Credentials")
> 
> mkdir –p /root/creds
> /usr/bin/python /usr/bin/nova-manage project zipfile $NOVA_PROJECT
> $NOVA_PROJECT_USER /root/creds/novacreds.zip
> 
> (docs from Diablo, please publish Essex docs PDF)
> 
> But it fails:
> 
> root@nova-server2:~# nova-manage project zipfile myproj novaadmin
> /root/creds/novacreds.zip
> 2012-02-26 19:43:15,399 DEBUG nova.utils
> [req-412c4070-6e61-4c79-b103-ab3aad410299 None None] backend <module
> 'nova.db.sqlalchemy.api' from
> '/usr/lib/python2.7/dist-packages/nova/db/sqlalchemy/api.pyc'> from
> (pid=17890) debug /usr/lib/python2.7/dist-packages/nova/log.py:175
> 2012-02-26 19:43:15,531 DEBUG nova.utils [-] Running cmd (subprocess):
> openssl genrsa -out /tmp/tmpxkBuVy/temp.key 1024 from (pid=17890)
> debug /usr/lib/python2.7/dist-packages/nova/log.py:175
> 2012-02-26 19:43:15,606 DEBUG nova.utils [-] Running cmd (subprocess):
> openssl req -new -key /tmp/tmpxkBuVy/temp.key -out
> /tmp/tmpxkBuVy/temp.csr -batch -subj
> /C=US/ST=California/O=OpenStack/OU=NovaDev/CN=myproj-novaadmin-2012-02-27T00:43:15Z
> from (pid=17890) debug
> /usr/lib/python2.7/dist-packages/nova/log.py:175
> 2012-02-26 19:43:15,635 DEBUG nova.crypto [-] Flags path:
> /var/lib/nova/CA from (pid=17890) debug
> /usr/lib/python2.7/dist-packages/nova/log.py:175
> 2012-02-26 19:43:15,636 DEBUG nova.utils [-] Running cmd (subprocess):
> openssl ca -batch -out /tmp/tmpvb0kOW/outbound.csr -config
> ./openssl.cnf -infiles /tmp/tmpvb0kOW/inbound.csr from (pid=17890)
> debug /usr/lib/python2.7/dist-packages/nova/log.py:175
> 2012-02-26 19:43:15,656 DEBUG nova.utils [-] Result was 1 from
> (pid=17890) debug /usr/lib/python2.7/dist-packages/nova/log.py:175
> Unexpected error while running command.
> Command: openssl ca -batch -out /tmp/tmpvb0kOW/outbound.csr -config
> ./openssl.cnf -infiles /tmp/tmpvb0kOW/inbound.csr
> Exit code: 1
> Stdout: ''
> Stderr: "Using configuration from ./openssl.cnf\nerror loading the
> config file './openssl.cnf'\n140252486485672:error:02001002:system
> library:fopen:No such file or
> directory:bss_file.c:169:fopen('./openssl.cnf','rb')\n140252486485672:error:2006D080:BIO
> routines:BIO_new_file:no such
> file:bss_file.c:172:\n140252486485672:error:0E078072:configuration
> file routines:DEF_LOAD:no such file:conf_def.c:197:\n"
> The above error may show that the certificate db has not been created.
> Please create a database by running a nova-api server on this host.
> 
> Any ideas ?
> -- 
> -Alexey Eromenko "Technologov"
> 
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp