[ovirt-users] oVirt and Openstack Neutron: network not working

[Luca 'remix_tj' Lorenzetto]

On Tue, Mar 21, 2017 at 12:59 PM, Luca 'remix_tj' Lorenzetto
<lorenzetto.luca at gmail.com> wrote:
> Hello Marcin, hello all,
>
> the provider failure was due to neutron services not behaving
> correctly. Now when i try to start a VM attached to an external
> network i get this in vdsm.log:
>
>
[cut]


Hello all,

after some time i've been able to complete the integration between
neutron (deployed with TripleO) and oVirt 4.1

What did i have to do?

First, to have the configuration done directly by ovirt-manager i had
to remove the host and re-add it specifying the external network
provider in the related tab.

The external provider should be configured also to point to the
rabbitmq service listening into the internal_api network of Openstack.
Additionally, all hosts that should use the openstack networks need to
have access to the tenant networks directly or through router (in my
case the tenant network is not routed, so i had to put an interface of
the host in that network).

Then the new host procedure should install and configure all requirements but:

- no openstack packages are installed in ovirt-node-ng image
- no repos available with openstack packages

So i had to install manually this packages:

openstack-neutron
openstack-neutron-openvswitch
openstack-utils
openstack-selinux

from RDO repos (and required to enable CentOS repos for dependencies)

Then install also vsdm openstacknet hook (which is not available in
enabled repos).

Once did this also removing a default iptables policy:

-A INPUT -j REJECT --reject-with icmp-host-prohibited

 that denies VXLAN to be established.

Maybe a more detailed rule can be added allowing only the VXLAN port,
but since i'm lazy and is only a lab, i tried with the ANY-ANY-ALLOW
method.

Then if the user adds a new host using as network provider a neutron
provider, the configuration of neutron-openvswitch service should go
on directly and configure all the requirements.

After that the integration is working as i expect.


If you want to do with already existing hosts you need to configure by
hand openstack-neutron. Not a big deal, but if someone does this for
you is better.

I'll post my configuration in another email (need to check if is ok
and has no useless entries).


Had to open this two bugs for asking integration in the setup
procedure and in ovirt-host-ng.

https://bugzilla.redhat.com/show_bug.cgi?id=1446264
https://bugzilla.redhat.com/show_bug.cgi?id=1446306

Luca

-- 
"E' assurdo impiegare gli uomini di intelligenza eccellente per fare
calcoli che potrebbero essere affidati a chiunque se si usassero delle
macchine"
Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)

"Internet è la più grande biblioteca del mondo.
Ma il problema è che i libri sono tutti sparsi sul pavimento"
John Allen Paulos, Matematico (1945-vivente)

Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , <lorenzetto.luca at gmail.com>