openstack team mailing list archive

[Lei Zhang <zhang.lei.fly@xxxxxxxxx>]

Your ssh key may be not config properly. Checkout following steps.

1. You get a key pair( pub key and private key). You can using the root's
key which locate `/root/.ssh/id_rsa` and `/root/.ssh/id_ras.pub` or
generate a new
one
2. Enable the nova user login-able
```
usermod -s /bin/bash nova
```
Now you can switch nova account by using following command, and steps
bellow is operated under this account.
```
su nova
```
3. Create the folder needed by ssh and put the private key got in step 1
```
mkdir -p /var/lib/nova/.ssh
cp <private_key> /var/lib/nova/.ssh/id_rsa
cat <pub_key> >> /var/lib/nova/.ssh/authorized_keys
echo 'StrictHostKeyChecking no' >> /var/lib/nova/.ssh/config
```
4. Do the steps 2-3 on each nodes. IMPORTANT: All the nodes share the
same key pair and you shouldn't generate new one in second node.
5. Check the key is working properly.
```
su nova
ssh nova@node-another  // you will login the node-another without password
```


On Wed, May 29, 2013 at 8:59 PM, Nehal J. Wani <nehaljw.kkd1@xxxxxxxxx>wrote:

> Exact error after putting that configuration:
>
> ./nova/compute.
> log:7203:Stderr: "Warning: Permanently added '10.3.3.58' (RSA) to the list
> of known hosts.\r\nPermission denied, please try again.\r\nPermission
> denied, please try again.\r\nPermission denied
> (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n". Setting instance
> vm_state to ERROR
> ./nova/compute.log:7244:2013-05-29 16:40:25.510 18605 TRACE
> nova.openstack.common.rpc.amqp Stderr: "Warning: Permanently added
> '10.3.3.58' (RSA) to the list of known hosts.\r\nPermission denied, please
> try again.\r\nPermission denied, please try again.\r\nPermission denied
> (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n"
>
>
>
> On Wed, May 29, 2013 at 6:28 PM, Nehal J. Wani <nehaljw.kkd1@xxxxxxxxx>wrote:
>
>> I tried putting that into ~nova/.ssh/config
>>
>> But the it says permission denied.
>>
>>
>> On Wed, May 29, 2013 at 6:25 PM, Lei Zhang <zhang.lei.fly@xxxxxxxxx>wrote:
>>
>>> You may also need add following config in /var/lib/nova/.ssh/config
>>>
>>> StrictHostKeyChecking no
>>>
>>>
>>>
>>> On Wed, May 29, 2013 at 8:25 PM, Mac Innes, Kiall <kiall@xxxxxx> wrote:
>>>
>>>> Then, packstack either has a bug, or the default settings don't allow
>>>> for the use of block migration..
>>>>
>>>> I've personally never even heard of packstack, so I can't comment on
>>>> how to fix/where to file a bug etc...
>>>>
>>>> Maybe someone else can?
>>>>
>>>> Thanks,
>>>> Kiall
>>>>
>>>> On 29/05/13 13:18, Nehal J. Wani wrote:
>>>> But packstack script has created the nova user with no ability to login
>>>>
>>>> As /etc/passwd says: nova:x:162:162:OpenStack Nova
>>>> Daemons:/var/lib/nova:/sbin/nologin
>>>>
>>>>
>>>>
>>>> On Wed, May 29, 2013 at 5:45 PM, Mac Innes, Kiall <kiall@xxxxxx<mailto:
>>>> kiall@xxxxxx>> wrote:
>>>> On 29/05/13 13:11, Nehal J. Wani wrote:
>>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp
>>>> > ProcessExecutionError: Unexpected error while running command.
>>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp
>>>> > Command: ssh 10.3.3.58 mkdir -p
>>>> > /var/lib/nova/instances/bc967b97-e103-4a13-abe4-ada8f98bdeb0
>>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp Exit
>>>> > code: 1
>>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp
>>>> > Stdout: 'This account is currently not available.\n'
>>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp
>>>> > Stderr: ''
>>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp
>>>> As the nova user, manually attempt that SSH command.. Then figure out
>>>> why it can't SSH to the other node. It should work (or at least get
>>>> further) once you do.
>>>>
>>>> Thanks,
>>>> Kiall
>>>>
>>>>
>>>>
>>>> --
>>>> Nehal J. Wani
>>>> UG2, BTech CS+MS(CL)
>>>> IIIT-Hyderabad
>>>> http://commanlinewani.blogspot.com
>>>>
>>>>
>>>> _______________________________________________
>>>> Mailing list: https://launchpad.net/~openstack
>>>> Post to     : openstack@xxxxxxxxxxxxxxxxxxx
>>>> Unsubscribe : https://launchpad.net/~openstack
>>>> More help   : https://help.launchpad.net/ListHelp
>>>>
>>>
>>>
>>>
>>> --
>>> Lei Zhang
>>>
>>> Blog: http://jeffrey4l.github.io
>>> twitter/weibo: @jeffrey4l
>>>
>>
>>
>>
>> --
>> Nehal J. Wani
>> UG2, BTech CS+MS(CL)
>> IIIT-Hyderabad
>> http://commanlinewani.blogspot.com
>>
>
>
>
> --
> Nehal J. Wani
> UG2, BTech CS+MS(CL)
> IIIT-Hyderabad
> http://commanlinewani.blogspot.com
>



-- 
Lei Zhang

Blog: http://jeffrey4l.github.io
twitter/weibo: @jeffrey4l