找回密码
 注册
查看: 3732|回复: 5

nova-status upgrade check fail

[复制链接]

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
发表于 2017-10-10 18:53:25 | 显示全部楼层 |阅读模式
购买主题 本主题需向作者支付 2 金钱 才能浏览

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
 楼主| 发表于 2017-10-10 18:56:20 | 显示全部楼层
cat /etc/nova/nova.conf |grep -v ^# | grep -v ^$1 e# A; y1 A! m% G
[DEFAULT]
4 l7 O2 C) J  F/ kfirewall_driver = nova.virt.firewall.NoopFirewallDriver
* L: k7 ]+ ]& b5 x3 I4 ?- W8 suse_neutron = True& j. W4 h% M2 \! ^; w
my_ip = 192.168.221.30
9 ]+ X- J7 a9 H8 Q' rtransport_url = rabbit://openstack:rabbitpwd@ocataControl
/ h% g, y, L0 U- ^4 S5 ?/ |/ Denabled_apis = osapi_compute,metadata, O) M, G8 n. `1 k$ A: i
[api]( A! u! K! ?1 o# y  s2 e
auth_strategy = keystone
! W8 F# @7 W, z' e* i[api_database]# k6 U' ]! Y5 Q6 C) e
[barbican]
4 d  k, Y. V9 ^6 Z[cache]
0 {' I' a6 n; X! h# x, \- x6 X[cells]
  E* ^) \* `/ F0 J2 e9 n( w[cinder]# F* ~1 a* s' q  S
[cloudpipe]
8 T0 P( |$ ~% S* m8 G; w[conductor]
2 t0 U) w% a! T! Z6 b! l2 k[console]  G( O+ M9 E2 m  ]; V; D
[consoleauth]. {& ?& i7 s( z3 O; i
[cors]
3 P' g4 l2 t% ~- ^, N1 Y8 R[cors.subdomain]
" a& d4 X2 M' N[crypto]
0 Q* ^- {, p) W$ n8 V[database]
" X/ ~9 O/ t1 G; N[ephemeral_storage_encryption]3 J5 B% u& g) |
[filter_scheduler]
4 d, E' M. a/ ]6 Z[glance]
0 B; X8 ^; P  q4 b+ q+ _& napi_servers = http://ocataControl:9292; k* m' ~: x' f* N0 a4 V) S, @/ e
[guestfs]. S6 f$ T! e! n1 I1 u8 W
[healthcheck]
$ {% N" C" a' h( R[hyperv]
2 v/ x& l' Q) r2 Z% V2 \[image_file_url]
# O$ W$ f0 M1 A[ironic]
1 F$ `* i: n/ p2 L& R[key_manager]+ j' K) \$ r3 T+ U+ T, \3 l' L
[keystone_authtoken]
" Y8 L- m: _' P; C( jpassword = novapass) J& x1 ]7 g+ Z
username = nova
1 J+ H  I8 g9 [. }' yproject_name = service_test2 [7 l8 @; x: O- ]% `( N2 \
user_domain_name = default% N, l9 j  q) {, E1 C9 v
project_domain_name = default
5 |7 S- V' k' ?" M: Kauth_type = password
: [+ L0 ?2 V0 N- L% Mmemcached_servers = ocataControl:11211* z6 U( r" u2 a" \5 ]& H8 E& H
auth_url = http://ocataControl:353575 y$ N8 a/ |& \/ L# p
auth_uri = http://ocataControl:5000) Q$ O$ Q; P# G* T
[libvirt]4 ^# Z" l3 N3 a; g3 P: ~- J
[matchmaker_redis]0 L) P' x4 D: }* E- ]) N: @
[metrics]
5 f7 ?, f- E$ j& f6 t[mks]
5 K( B; b6 `/ T' i1 g" o[neutron]
! e0 A- K/ W4 d1 L[notifications]+ l% L" c5 s' c: J; w  ]4 y
[osapi_v21]6 |) V: |& u# w; R+ q/ L- n& r7 h
[oslo_concurrency]
" b% {/ s6 M6 q: s$ j6 slock_path = /var/lib/nova/tmp8 g/ ]6 Q; v/ l6 e: u. s
[oslo_messaging_amqp]* e3 ^. o( p. I- Q2 c+ [
[oslo_messaging_kafka]
# Z% ]/ M) k2 h  j* M[oslo_messaging_notifications]+ E3 Y" x  j8 s4 _! k) E
[oslo_messaging_rabbit]
0 E4 g" H# n. W6 J0 O[oslo_messaging_zmq]+ S5 J8 p0 {: c! l: p2 S
[oslo_middleware]
+ J* L1 D" Q3 i: D4 F8 T" j4 ~8 a[oslo_policy]8 f6 F+ o9 Q( s2 k& }' D
[pci]* Y- H( J& F7 }* B
[placement]
# P4 b0 w& V) k" nauth_url = http://ocataControl:35357/v3" }) p, Q  S! Q) U  }
password = placementpass
% M3 F) d5 v$ A2 {5 t8 ?username = placement, N/ S" J, a% q1 N$ V2 T
user_domain_name = Default3 a0 E4 ]& K5 {
auth_type = password& f9 h6 ?; f; \6 ~
project_name = service_test/ Q" m1 \4 e( m0 ^3 V. s
project_domain_name = Default
' @3 i  T' i# g5 m; ]2 S6 qos_region_name = RegionTWO2 Y  G( w* m# Z0 w0 Q8 J5 H; x
[quota]( w; C( |5 j, G
[rdp]
/ \' w! N1 @6 U* A8 K" J5 p[remote_debug]
3 c. W: q0 y) j: [+ X3 F4 r[scheduler]
5 ]% V8 {" r! [# T. d7 a) y[serial_console]
& m  ~7 G; x2 o" F1 W[service_user]! s% J4 ^0 f7 n" G7 I9 Z" C6 v
[spice]) [8 }, w, r* ?+ A0 B) |2 `
[ssl]
% K/ F( g6 J* G# `* Q8 B[trusted_computing]4 a4 p0 [$ o1 M1 [# b$ z# Z. [
[upgrade_levels]
+ r: ]$ J6 b# B1 v: ?* G! a[vendordata_dynamic_auth]6 H- p  _  }. e
[vmware]
/ ?9 U7 t3 _8 T9 i  l7 Y; R: k[vnc]( s3 W6 r, C" X$ Z8 r
novncproxy_base_url = http://ocataControl:6080/vnc_auto.html
! J& \- P" H, c* P& W  F9 ^vncserver_proxyclient_address = 192.168.221.309 T5 b. l% V6 E2 k0 g, V! O! F
vncserver_listen = 0.0.0.0
: Z3 ]% q% K5 k( v9 A, [enabled = True
/ Y6 [' l1 P# X. Y/ w; E7 G6 r7 B[workarounds], q( Z. m5 l0 O2 \% e- b
[wsgi]
5 W8 o$ e2 Y; T4 L  q; `5 }[xenserver]
0 W& _- Q5 ]$ F: S[xvp]

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
 楼主| 发表于 2017-10-10 18:57:31 | 显示全部楼层
ConfigFilesPermissionDeniedError: Failed to open some config files: /usr/share/nova/nova-dist.conf,/etc/nova/nova.conf.

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
 楼主| 发表于 2017-10-10 18:59:58 | 显示全部楼层
# vim /usr/share/nova/nova-dist.conf 6 P7 s; _" s$ i0 d# Q- ?
) h+ }/ t7 O. a/ S
[DEFAULT]7 d: s& }" m$ E2 [
log_dir = /var/log/nova2 a; e" |% ]" R3 ^, d
state_path = /var/lib/nova2 \/ A7 }2 N0 D4 }% ]. i& J7 G
lock_path = /var/lib/nova/tmp
8 @3 B/ _5 [2 \% ~( ^3 ydhcpbridge = /usr/bin/nova-dhcpbridge
8 ]2 m4 Z& x+ ^  `dhcpbridge_flagfile = /usr/share/nova/nova-dist.conf
8 V0 w! [% h5 ^2 @, \9 ydhcpbridge_flagfile = /etc/nova/nova.conf1 d4 x7 I! t. ~4 F5 l! t# J
force_dhcp_release = True
3 N# h& I  b% }: R. m1 D5 Xinjected_network_template = /usr/share/nova/interfaces.template
2 ~. u/ V) C( B$ M$ `libvirt_nonblocking = True: p0 }. @7 Y& d0 s; v4 u" C: p
libvirt_inject_partition = -1
9 _1 ^& e. u/ s6 g8 znetwork_manager = nova.network.manager.FlatDHCPManager
* x' M  R  }! Pcompute_driver = libvirt.LibvirtDriver+ r% w3 S  y6 g0 l4 O1 `3 D
firewall_driver = nova.virt.libvirt.firewall.IptablesFirewallDriver. n- k" C$ N/ Q( K3 H
rootwrap_config = /etc/nova/rootwrap.conf' `9 r; |  d& r  Q" O" t2 _
use_stderr = False
3 g! }' @9 W1 I9 r& O, e% z3 h# i) P& J
[database]+ j) w: z3 b3 a1 t6 A/ W7 j
connection = mysql://nova:92e672789c1b9e@controller/nova
: j2 z( j0 J- g8 G2 l& _( Y0 V8 dmax_retries = -1  `6 J' B9 T0 d# P: E# p
1 p/ h' r% f5 H" a9 U$ E
[keystone_authtoken]) g2 k' O+ n# T0 q. X% W) {. G/ j7 ?. u
auth_host = 192.168.2.20
' u  u0 @! q( s: O# jauth_port = 353578 [/ R. ]4 b; h
auth_protocol = http

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
 楼主| 发表于 2017-10-10 19:01:22 | 显示全部楼层
# nova-status --log-file /var/log/nova/status.log upgrade check9 S5 o8 c# e( `
Error:% F5 {& d( w! Q7 D* e
Traceback (most recent call last):! l) K4 w# A$ {
  File "/usr/lib/python2.7/site-packages/nova/cmd/status.py", line 459, in main: {) B/ }4 c) `  G
    ret = fn(*fn_args, **fn_kwargs)
9 q- ~0 A: M2 ~, x9 k$ n4 W  File "/usr/lib/python2.7/site-packages/nova/cmd/status.py", line 389, in check
/ r% {: i) g1 z* i/ J* x: p! r    result = func(self)$ p% v4 m+ I0 D. U) p
  File "/usr/lib/python2.7/site-packages/nova/cmd/status.py", line 203, in _check_placement- O0 W: C, u" p6 g0 U, y
    versions = self._placement_get("/")& q1 {& I0 U$ e- Y. e
  File "/usr/lib/python2.7/site-packages/nova/cmd/status.py", line 191, in _placement_get# h4 K2 q  B. H/ x* ]8 B
    return client.get(path, endpoint_filter=ks_filter).json()
1 D+ n  u, q" O1 D9 b+ H3 [( G8 @  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 845, in get0 M8 Z& x6 B/ J8 V. O& r$ I/ @2 a5 m
    return self.request(url, 'GET', **kwargs)
; o: D$ y; S+ Q' Q4 j+ L3 D4 K  File "/usr/lib/python2.7/site-packages/positional/__init__.py", line 101, in inner, K' Y. s  r  b2 r9 g/ S! H6 g+ _$ M
    return wrapped(*args, **kwargs)
; g- m2 @9 V; v$ s! ?8 m  File "/usr/lib/python2.7/site-packages/keystoneauth1/session.py", line 742, in request' n; B, d4 ~% r: L
    raise exceptions.from_response(resp, method, url)
  G3 S; \4 K  i6 U" e  k$ a$ T1 sServiceUnavailable: Service Unavailable (HTTP 503) (Request-ID: req-b587bc53-eb59-4976-b0c7-27dcddd14260)

1

主题

0

回帖

12

积分

管理员

积分
12
QQ
 楼主| 发表于 2017-10-10 19:05:50 | 显示全部楼层
ausearch -c httpd3 j, g7 W( |- y
shows
1 l) C% C$ ], C1 m6 }$ s6 X2 b. ?7 P- q4 k
type=AVC msg=audit(1498146726.488:879): avc: denied { name_connect } for pid=6299 comm="httpd" dest=35357 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:keystone_port_t:s0 tclass=tcp_socket permissive=0. |5 o  |# M' {
This will make it work:% s+ M  L, B3 e( X( l
9 y: L/ }& G$ `
setsebool -P httpd_can_network_connect 1
您需要登录后才可以回帖 登录 | 注册

本版积分规则

返回首页|Archiver|手机版|小黑屋|易陆发现技术论坛 ( 蜀ICP备2026014127号-1 )

GMT+8, 2026-6-12 02:46 , Processed in 0.016404 second(s), 25 queries .

Powered by Discuz! X5.0

© 2001-2026 Discuz! Team.

快速回复 返回顶部 返回列表