openstack-postconfig.sh

openstack-postconfig.sh

openstack flavor create --public --ram 2048 --disk 40 --ephemeral 40 --vcpus 2 m1.medium

wget https://cloud-images.ubuntu.com/xenial/current/xenial-server-cloudimg-amd64-disk1.img
openstack image create --file xenial-server-cloudimg-amd64-disk1.img ubuntu-xenial-cloudimg

openstack network create --external --provider-network-type flat --provider-physical-network physnet1 ext_net

# or: openstack network create --external --provider-network-type vlan --provider-segment 1001 --provider-physical-network physnet1 ext_net

openstack subnet create --allocation-pool start=10.5.250.1,end=10.5.250.100 --network ext_net --subnet-range 10.5.0.0/16 --gateway 10.5.0.1 --no-dhcp ext_net_subnet

openstack network create internal
openstack subnet create --subnet-range 10.0.0.0/24 --network internal internal

openstack router create priv-to-ext
openstack router add subnet priv-to-ext internal
openstack router set priv-to-ext --external-gateway ext_net

sudo rm cloud.pem; openstack keypair create cloud-key > cloud.pem; chmod 400 cloud.pem
# or: openstack keypair create --public-key ~/.ssh/id_rsa.pub cloud-key

openstack subnet set internal --no-dns-nameservers

openstack subnet set internal --dns-nameserver 10.5.0.2

openstack floating ip create ext_net

openstack network log create --resource-type security_group \
  --description "Collecting all security events in project demo" \
  --enable --event ALL Log_Created


openstack server create --network internal --image ubuntu-xenial-cloudimg --flavor m1.medium --key-name cloud-key vgrevtsev-demo



for i in $(openstack security group list | awk '/default/{ print $2 }'); do \
    openstack security group rule create $i --protocol icmp --remote-ip 0.0.0.0/0; \
    openstack security group rule create $i --protocol tcp --remote-ip 0.0.0.0/0 --dst-port 22; \
done