[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: keystone in openstack flamingo(2025.2)





Den 18.09.2025 23:00, skrev Thomas Goirand:
On 9/18/25 5:38 PM, Svein-Erik Skjelbred wrote:
Fully updated debian trixie
Pluss added in /etc/apt/sources.list
deb http://trixie-flamingo.debian.net/debian trixie-flamingo-backports main deb http://trixie-flamingo.debian.net/debian trixie-flamingo-backports- nochange

# debconf-set-selections game
# apt-get install openstack-cloud-identity
.....
keystone --keystone-group keystone'...
Running: su keystone -s /bin/sh -c 'keystone-manage credential_setup -- keystone-user keystone --keystone-group keystone'... Synchronizing state of keystone.service with SysV service script with / usr/lib/systemd/systemd-sysv-install.
Executing: /usr/lib/systemd/systemd-sysv-install enable keystone
Created symlink '/etc/systemd/system/multi-user.target.wants/ keystone.service' → '/usr/lib/systemd/system/keystone.service'. Sleeping 10 seconds to make sure the keystone daemon is up and running: 10...9...8...7...6...5...4...3...2...1...0
===> Bootstraping tenants with 'keystone-manage bootstrap':
Now doing: su keystone -s /bin/sh -c 'keystone-manage bootstrap -- bootstrap-role-name admin --bootstrap-service-name keystone --bootstrap- region-id regionOne --bootstrap-admin-url http://192.168.1.17:5000 -- bootstrap-public-url http://192.168.1.17:5000 --bootstrap-internal-url http://192.168.1.17:5000'
===> Editing bootstraped tenants and adding default roles
Fixing-up: admin-project-desc Failed to discover available identity versions when contacting http://192.168.1.17:5000/v3/. Attempting to parse version from URL. Unable to establish connection to http://192.168.1.17:5000/v3/auth/ tokens: HTTPConnectionPool(host='192.168.1.17', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7f7d52707390>: Failed to establish a new connection: [Errno 111] Connection refused'))
dpkg: error processing package keystone (--configure):
  installed keystone package post-installation script subprocess returned error exit status 1 dpkg: dependency problems prevent configuration of openstack-cloud- identity:
  openstack-cloud-identity depends on keystone; however:
   Package keystone is not configured yet.

-------------------
# journalctl -xeu keystone
Sep 18 13:41:03 kvm7 systemd[1]: keystone.service: Dependency After=keystone.service is dropped. Sep 18 13:41:04 kvm7 systemd[1]: keystone.service: Dependency After=keystone.service is dropped. Sep 18 13:41:04 kvm7 systemd[1]: Started keystone.service - OpenStack Keystone API (keystone).    Subject: A start job for unit keystone.service has finished successfully
    Defined-By: systemd
    Support: https://www.debian.org/support

    A start job for unit keystone.service has finished successfully.

    The job identifier is 2825.
Sep 18 13:41:05 kvm7 systemd[1]: keystone.service: Deactivated successfully.
    Subject: Unit succeeded
    Defined-By: systemd
    Support: https://www.debian.org/support

    The unit keystone.service has successfully entered the 'dead' state.
-------------------
/etc/init.d/keystone
appr line 35 the service exited because the file
/usr/bin/keystone-wsgi-public is not found

if [ -n "${UWSGI_PORT}" ] && [ -n "${UWSGI_INI_PATH}" ] && [ -n "${UWSGI_INI_APP}" ] ; then
         if ! [ -f "${UWSGI_INI_APP}" ] ; then
                 exit 0
         fi
------------------
Forcing to use the keystone package from trixie-epoxy and it works

Patching setup.cfg to add back the two files and flamingo keystone works again.
Assumes this is NOT the correct way to do it, but my knowledge fails.

------------------
# This release note explains why
https://opendev.org/openstack/keystone/src/ commit/82c80dccf6c2e74e27b90f5204de6da1fc6bd76d/releasenotes/notes/ remove-wsgi-scripts-615b97ee4d6e0de2.yaml

upgrade:
   - |
     The WSGI scripts, ``keystone-wsgi-admin`` and ``keystone-wsgi- public``,      have been removed. Deployment tooling should instead reference the Python      module paths for the service, ``keystone.wsgi.api``, if their chosen WSGI      server supports this (gunicorn, uWSGI) or implement a ``.wsgi`` script
     themselves if not (mod_wsgi).
------------------
mvh
Svein-Erik


Hi,

This should be fixed now. Let me know.

FYI, I didn't start validating this release yet. I was busy this week working on:

https://salsa.debian.org/openstack-team/services/neutron-ipv6-bgp-injector/

Cheers,

Thomas Goirand (zigo)

Thanks for prompt answer, but
the directory keystone was double up

diff --git a/debian/keystone.init.in b/debian/keystone.init.in
index 31868c362..938e5227f 100644
--- a/debian/keystone.init.in
+++ b/debian/keystone.init.in
@@ -16,4 +16,4 @@ PROJECT_NAME=keystone
 NAME=${PROJECT_NAME}
 UWSGI_PORT=5000
 UWSGI_INI_PATH=/etc/keystone/keystone-uwsgi.ini
-UWSGI_INI_APP=/usr/lib/python3/dist-packages/keystone/keystone/wsgi/api.py
+UWSGI_INI_APP=/usr/lib/python3/dist-packages/keystone/wsgi/api.py

without the double it compiled and worked well

mvh
Svein-Erik


Reply to: