Created attachment 15573 [details] скрипт для разворачивания openstack-keystone + openstack-neutron-server + rabbitmq-server openstack-neutron-vpnaas-14.0.0-alt2 Стенды (обновлены до p10): KWorkstation 10.2.1 x86-64 Workstation 10.1 x86-64 Education 10.2 x86-64 Education 10.2 KDE x86-64 Server 10.1 x86-64 Шаги: 1. Развернуть openstack-keystone + openstack-neutron-server + rabbitmq-server на сервер с помощью скрипта (см openstack-neutron-deploy.sh) и установить # apt-get install openstack-neutron-l3-agent -y 2. Установить и настроить openstack-neutron-vpnaas: В /etc/neutron/neutron.conf добавить: [DEFAULT] # ... service_plugins = vpnaas [service_providers] service_provider = VPN:strongswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.IPsecVPNDriver:default в /etc/neutron/neutron_vpnaas.conf добавить : [service_providers] service_provider = VPN:strongswan:neutron_vpnaas.services.vpn.service_drivers.ipsec.IPsecVPNDriver:default 3. Настроить openstack-neutron-l3-agent: в etc/neutron/l3_agent.ini добавить: [AGENT] extensions = vpnaas [vpnagent] vpn_device_driver = neutron_vpnaas.services.vpn.device_drivers.strongswan_ipsec.StrongSwanDriver 4. Обновить БД: # neutron-db-manage --subproject neutron-vpnaas upgrade head 5. Перезапусить сервисы: # systemctl restart neutron-server # systemctl restart neutron-l3-agent 6. # openstack vpn ike policy create ikepolicy Ожидаемый результат: Успешное создание политики ikepolicy Фактический результат: Request Failed: internal server error while processing your request. Neutron server returns request_ids: ['req-3c17f68f-e6aa-4c74-9bb1-b34ad1aff151'] В логах /var/log/neutron/neutron-server.log : ... 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource [None req-3c17f68f-e6aa-4c74-9bb1-b34ad1aff151 86bedfb9f89142f9967b8a72bbd8a387 fc8af937402648e5b623db117fb21f75 - - default default] create failed: No details.: RuntimeError: Method <function remove_reservation at 0x7fbe95d059d0> cannot be called within a transaction. 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource Traceback (most recent call last): 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron/api/v2/resource.py", line 98, in resource 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource result = method(request=request, **args) 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron/api/v2/base.py", line 438, in create 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource return self._create(request, body, **kwargs) 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron_lib/db/api.py", line 142, in wrapped 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource setattr(e, '_RETRY_EXCEEDED', True) 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/oslo_utils/excutils.py", line 227, in __exit__ 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource self.force_reraise() 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/oslo_utils/excutils.py", line 200, in force_reraise 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource raise self.value 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron_lib/db/api.py", line 138, in wrapped 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource return f(*args, **kwargs) 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/oslo_db/api.py", line 154, in wrapper 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource ectxt.value = e.inner_exc 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/oslo_utils/excutils.py", line 227, in __exit__ 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource self.force_reraise() 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/oslo_utils/excutils.py", line 200, in force_reraise 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource raise self.value 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/oslo_db/api.py", line 142, in wrapper 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource return f(*args, **kwargs) 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron_lib/db/api.py", line 190, in wrapped 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource context_reference.session.rollback() 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/oslo_utils/excutils.py", line 227, in __exit__ 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource self.force_reraise() 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/oslo_utils/excutils.py", line 200, in force_reraise 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource raise self.value 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron_lib/db/api.py", line 184, in wrapped 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource return f(*dup_args, **dup_kwargs) 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron/api/v2/base.py", line 564, in _create 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource return notify({self._resource: self._view(request.context, 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron/api/v2/base.py", line 504, in notify 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource quota.QUOTAS.commit_reservation( 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron/quota/__init__.py", line 103, in commit_reservation 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource self.get_driver().commit_reservation(context, reservation_id) 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron/db/quota/driver.py", line 269, in commit_reservation 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource quota_api.remove_reservation(context, reservation_id, 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource File "/usr/lib/python3/site-packages/neutron/common/utils.py", line 729, in inner 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource raise RuntimeError(_("Method %s cannot be called within a " 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource RuntimeError: Method <function remove_reservation at 0x7fbe95d059d0> cannot be called within a transaction. 2024-02-13 16:15:44.913 33802 ERROR neutron.api.v2.resource 2024-02-13 16:15:44.914 33802 INFO neutron.wsgi [None req-3c17f68f-e6aa-4c74-9bb1-b34ad1aff151 86bedfb9f89142f9967b8a72bbd8a387 fc8af937402648e5b623db117fb21f75 - - default default] 10.88.12.39 "POST /v2.0/vpn/ikepolicies HTTP/1.1" status: 500 len: 368 time: 0.0783675 ... Доп: Сервис neutron-vpn-agent.service не запускается: × neutron-vpn-agent.service - LSB: OpenStack Neutron VPN as a Service Agent Loaded: loaded (/etc/rc.d/init.d/neutron-vpn-agent; generated) Active: failed (Result: exit-code) since Tue 2024-02-13 16:18:05 MSK; 10s ago Docs: man:systemd-sysv-generator(8) Process: 70552 ExecStart=/etc/rc.d/init.d/neutron-vpn-agent start (code=exited, status=1/FAILURE) CPU: 7ms фев 13 16:18:05 server-10-1-x86-64-20240208.localdomain systemd[1]: Starting LSB: OpenStack Neutron VPN as a Service Agent... фев 13 16:18:05 server-10-1-x86-64-20240208.localdomain systemd[1]: neutron-vpn-agent.service: Control process exited, code=exited, status=1/FAILURE фев 13 16:18:05 server-10-1-x86-64-20240208.localdomain systemd[1]: neutron-vpn-agent.service: Failed with result 'exit-code'. фев 13 16:18:05 server-10-1-x86-64-20240208.localdomain systemd[1]: Failed to start LSB: OpenStack Neutron VPN as a Service Agent.