blog
Table des matières
- 2026:
- 2025:
4 billet(s) pour septembre 2026
| Notes HTTP Strict Transport Security - HSTS | 2026/09/18 11:04 | Jean-Baptiste |
| Notes GNU Linux GPU carte graphiques | 2026/09/08 15:49 | Jean-Baptiste |
| Notes GNU Linux graphique | 2026/09/08 15:42 | Jean-Baptiste |
| Notes urlencoding - passer des mots de passe en HTTPS | 2026/09/03 17:58 | Jean-Baptiste |
Pb openstack cli timeout glance
Erreur
Error finding address for https://192.168.21.53:9292/v2/images/52fc9459-7dcb-48f9-a8e3-b5c8d0d76359/file: The read operation timed out CommunicationError: Error finding address for https://192.168.21.53:9292/v2/images/caf82982-01d8-47d2-b360-e34ea76e152e/file: The read operation timed out
OK
wget http://download.cirros-cloud.net/0.5.0/cirros-0.5.0-x86_64-disk.img openstack image create cirros --file cirros-0.5.0-x86_64-disk.img --disk-format qcow2 --container-format bare --public
NOK après 18 minutes
time openstack image create test --file big-image.vmdk --disk-format vmdk --container-format bare --debug
{"container_format": "bare", "min_ram": 0, "updated_at": "2020-03-06T16:00:43Z", "file": "/v2/images/caf82982-01d8-47d2-b360-e34ea76e152e/file", "owner": "48ab5c57c7a246c58dc7ef86c7b36309", "id": "caf82982-01d8-47d2-b360-e34ea76e152e", "size": null, "self": "/v2/images/caf82982-01d8-47d2-b360-e34ea76e152e", "disk_format": "vmdk", "os_hash_algo": null, "schema": "/v2/schemas/im$ ge", "status": "queued", "tags": [], "visibility": "shared", "locations": [], "min_disk": 0, "virtual_size": null, "name": "test_jb", "checksum": null, "created_at": "2020-03-06T16:00:43Z", "os_hidden": false, "protected": false, "os_hash_value": null} curl -g -i -X PUT -H 'Accept-Encoding: gzip, deflate' -H 'Accept: */*' -H 'User-Agent: python-glanceclient' -H 'Connection: keep-alive' -H 'X-Auth-Token: {SHA1}82af774b6a8ce8bdd6fd268a645b7a b978fa588b' -H 'Content-Type: application/octet-stream' --cacert /etc/ssl/certs --cert None --key None https://192.168.21.53:9292/v2/images/caf82982-01d8-47d2-b360-e34ea76e152e/file curl -g -i -X DELETE -H 'Accept-Encoding: gzip, deflate' -H 'Accept: */*' -H 'User-Agent: python-glanceclient' -H 'Connection: keep-alive' -H 'X-Auth-Token: {SHA1}82af774b6a8ce8bdd6fd268a645 b7ab978fa588b' -H 'Content-Type: application/octet-stream' --cacert /etc/ssl/certs --cert None --key None https://192.168.21.53:9292/v2/images/caf82982-01d8-47d2-b360-e34ea76e152e Starting new HTTPS connection (2): 192.168.21.53:9292 https://192.168.21.53:9292 "DELETE /v2/images/caf82982-01d8-47d2-b360-e34ea76e152e HTTP/1.1" 204 0 DELETE call to image for https://192.168.21.53:9292/v2/images/caf82982-01d8-47d2-b360-e34ea76e152e used request id req-3dc34178-3eb1-4cff-aef2-b09f1e6ffedf
Solution
~/.curlrc
max-time = 0
Ou encore
sudo apt-get install python-glanceclient #sudo apt-get install python3-glanceclient
openstack.rc
unset $(set | grep _ENDPOINT_ | cut -d= -f1) unset $(set | grep ^OS_ | cut -d= -f1) export LC_ALL=C # LC_ALL=C.UTF-8 export OS_NO_CACHE='true' export OS_CACERT=/etc/ssl/certs/ export OS_IDENTITY_API_VERSION='3' export OS_AUTH_URL="https://192.168.21.53:5000/v3" export OS_USERNAME=admin export OS_PROJECT_NAME=admin export OS_USER_DOMAIN_NAME=Default export OS_PROJECT_DOMAIN_NAME=Default export OS_PASSWORD="P@ssw0rd"
source clouds.rc glance image-create --name image-name --file big-image.vmdk --disk-format vmdk --container-format bare --visibility private
Ou
Faire tourner un serveur web pour partager le fichier image (qcow2, VMDK, raw…)
python3 -m http.server 8081
Puis
glance task-create --type import --input '{"import_from_format": "vmdk", "import_from": "http://192.168.21.33:8081/plop.vmdk", "image_properties": {"name": "plop-imported", "disk_format": "vmdk", "container_format": "bare", "vmware_adaptertype": "ide", "vmware_disktype": "streamOptimized", "vmware_ostype": "otherGuest"}}'
Pb OpenStack cinder - volume status on error - Err Update driver status failed
Devstack
WARNING cinder.volume.manager Update driver status failed: (config name lvmdriver-1) is uninitialized." WARNING cinder.volume.manager [None req-c2fc258b-ae9a-450b-b348-d7916542ff49 None None] Update driver status failed: (config name lvmdriver-1) is uninitialized.
[Error: Build of instance add5dc51-259c-42b4-93d6-9efa0aa90507 aborted: Volume e42027a0-a257-4fb0-8ce9-4a044dfc57ad did not finish being created even after we waited 0 seconds or 1 attempts. And its status is error.].
openstack volume list
“Status error”
Solution
/etc/cinder/cinder.conf
[lvmdriver-1] #volume_group = stack-volumes-lvmdriver-1 volume_group = ubuntu-vg
systemctl restart "devstack@c-*"
Voir Cinder : https://vishmule.com/2016/03/07/basic-cinder-volume-service-functionality-in-openstack-part1/
Pb OpenStack - pas d’accès a la console
Récupérer la console :
#nova get-vnc-console adf9c868-a595-4ae8-9ee8-fb775ab4c8de novnc
openstack console url show adf9c868-a595-4ae8-9ee8-fb775ab4c8de novnc
Solution
/etc/nova/nova-cpu.conf
[vnc] #server_proxyclient_address = 127.0.0.1 server_proxyclient_address = 0.0.0.0 #server_listen = 127.0.0.1 server_listen = 0.0.0.0 #novncproxy_base_url = http://10.245.108.3:6080/vnc_auto.html novncproxy_base_url = http://172.18.200.228:6080/vnc_auto.html [spice] #html5proxy_base_url = http://10.245.108.3:6082/spice_auto.html html5proxy_base_url = http://172.18.200.228:6082/spice_auto.html
sudo systemctl restart "devstack@n-*"
Pb OpenSSL LibreSSL Error Loading extension section v3_ca
Voir aussi :
$ openssl genrsa -des3 -out macle.key 2048 #Voir aussi "openssl ecparam -genkey" pour Elliptic Curve key Generating RSA private key, 2048 bit long modulus ................................................+++ ...................................................+++ e is 65537 (0x10001) Enter pass phrase for macle.key: Verifying - Enter pass phrase for macle.key:
$ openssl req -new -x509 -days 3650 -key macle.key -sha256 -extensions v3_ca -out macle.crt Error Loading extension section v3_ca
Le problème venait de LibreSSL (pourquoi !?)
Solution 1 (rapide) :
Spécifier le chemin pour prendre l'openssl de la distribution GNU/Linux
/usr/bin/openssl req -new -x509 -days 3650 -key macle.key -sha256 -extensions v3_ca -out macle.crt
Solution 2 (la bonne) :
mv /usr/local/etc/ssl{,.old} ln -s /etc/ssl /usr/local/etc/ssl
En effet, la conf n'est pas la même
# grep -ri v3_ca /etc/ssl /etc/ssl/openssl.cnf:x509_extensions = v3_ca # The extentions to add to the self signed cert /etc/ssl/openssl.cnf:[ v3_ca ]
openssl.cnf
[ v3_ca ] subjectKeyIdentifier=hash authorityKeyIdentifier=keyid:always,issuer basicConstraints = CA:true [ req ] x509_extensions = v3_ca # The extentions to add to the self signed cert
Autres
$ openssl x509 -ext basicConstraints,keyUsage -noout -in /usr/share/ca-certificates/mozilla/VeriSign_Universal_Root_Certification_Authority.crt
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Pb NTP - heure pas persistente après reboot
Erreurs
Sous Firefox
L’heure de votre ordinateur est incorrecte Votre ordinateur pense que nous sommes le 26 janv. 2024, ce qui empêche Firefox de se connecter de façon sécurisée. Pour visiter mel.belaris.fr, mettez à jour l’horloge de votre ordinateur dans vos paramètres système afin qu’elle soit réglée sur la date, l’heure et le fuseau horaire qui conviennent, puis actualisez duckduckgo.com.
Sous Chromium
Your clock is behind A private connection to duckduckgo.com can't be established because your computer's date and time (Friday, January 26, 2024 at 10:52:13 PM) are incorrect. NET::ERR_CERT_DATE_INVALID
Solution
Si nécessaire désactiver tous les timers SystemD. Voir Notes SystemD Timer
ntpdate -b pool.ntp.org hwclock --systohc
blog.txt · Dernière modification : de 127.0.0.1
