Setting up authentication in the appliance virtual machine

Prerequisites

To configure authentication in the appliance VM

  1. Log in to the appliance VM as the admin user with the SSH key.
  2. Get root privileges, for example, with sudo -i.
  3. Create a bash script that will export OpenStack credentials:

    # cat > user-openrc.sh << EOF
    export OS_PROJECT_DOMAIN_NAME=Domain_name
    export OS_USER_DOMAIN_NAME=Domain_name
    export OS_PROJECT_NAME=Project_name
    export OS_USERNAME=user_name
    export OS_PASSWORD=Password
    export OS_AUTH_URL=https://<admin_panel_IP_addr>:5000/v3
    export OS_IDENTITY_API_VERSION=3
    export OS_INSECURE=true
    export NOVACLIENT_INSECURE=true
    export NEUTRONCLIENT_INSECURE=true
    export CINDERCLIENT_INSECURE=true
    export LIBGUESTFS_BACKEND=direct
    EOF
    

    You will need the administrator credentials for the project that the appliance VM belongs to.

  4. Copy the OpenStack root CA certificate and CA keys from the Virtuozzo Hybrid Infrastructure management node:

    # scp root@<MN_IP>:/usr/libexec/vstorage-ui-backend/ca/ca.* /etc/pki/ca-trust/source/anchors/
    # update-ca-trust extract
    

    Where <MN_IP> is the management node IP address. For more information, refer to Securing OpenStack API traffic with SSL.

  5. Create a file with the VMware vCenter password to supply to virt-v2v. For example:

    # echo $vCenterPass > password.txt
    

    Alternatively, you can enter the password during migration or supply it to virt-v2v with the --password-file option.