Procedure

1. Log into your undercloud as the root user.

2. Create the stack user:

   [root@director ~]# useradd stack

3. Set a password for the user:

   [root@director ~]# passwd stack

4. Disable password requirements when using sudo:

   [root@director ~]# echo "stack ALL=(root) NOPASSWD:ALL" | tee -a /etc/sudoers.d/stack
   [root@director ~]# chmod 0440 /etc/sudoers.d/stack

5. Register your system with the Content Delivery Network, entering your Customer Portal user name and password when prompted:

   [root@director ~]# sudo subscription-manager register

6. Attach the Red Hat OpenStack Platform entitlement:

   [root@director ~]# sudo subscription-manager attach --pool=Valid-Pool-Number-123456

7. Disable all default repositories, and then enable the required Red Hat Enterprise Linux repositories:

   [root@director ~]# sudo subscription-manager repos --disable=*
   [root@director ~]# sudo subscription-manager repos --enable=rhel-7-server-rpms --enable=rhel-7-server-extras-rpms --enable=rhel-7-server-rh-common-rpms --enable=rhel-ha-for-rhel-7-server-rpms --enable=rhel-7-server-openstack-13-rpms

8. Perform an update on your system to make sure you have the latest base system packages:

   [root@director ~]# sudo yum update -y
   [root@director ~]# sudo reboot

9. Ensure the time on your undercloud is synchronized. For example:

   [root@director ~]# sudo yum install -y ntp
   [root@director ~]# sudo systemctl start ntpd
   [root@director ~]# sudo systemctl enable ntpd
   [root@director ~]# sudo ntpdate pool.ntp.org
   [root@director ~]# sudo systemctl restart ntpd

10. Create a temporary directory for the backup

    [root@director ~]# mkdir /var/tmp/undercloud_backup

11. Extract the filesystem backup archive into the temporary directory:

    [root@director ~]# sudo tar -xvf /root/undercloud-backup-[timestamp].tar -C /var/tmp/undercloud_backup --xattrs || true

12. Install rsync:

    [root@director ~]# sudo yum -y install rsync

13. Synchronize the following directories with backup content:

    [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/home/stack/ /home/stack
    [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/etc/haproxy/ /etc/haproxy/
    [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/etc/pki/instack-certs/ /etc/pki/instack-certs/
    [root@director ~]# sudo mkdir -p /etc/puppet/hieradata/
    [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/etc/puppet/hieradata/ /etc/puppet/hieradata/
    [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/srv/node/ /srv/node/
    [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/var/lib/glance/ /var/lib/glance/

14. Install the openstack-keystone package and synchronize its configuration data:

    [root@director ~]# sudo yum -y install openstack-keystone
    [root@director ~]# sudo rsync -a /var/tmp/undercloud_backup/etc/keystone/ /etc/keystone/

15. Install the policycoreutils-python package:

    [root@director ~]# sudo yum -y install policycoreutils-python

16. If using SSL in the undercloud, refresh the CA certificates:

    [root@director ~]# sudo semanage fcontext -a -t etc_t "/etc/pki/instack-certs(/.*)?"
    [root@director ~]# sudo restorecon -R /etc/pki/instack-certs
    [root@director ~]# sudo update-ca-trust extract

17. Install the database server and client tools:

    [root@director ~]# sudo yum install -y mariadb mariadb-server python-tripleoclient

18. Start the database:

    [root@director ~]# sudo systemctl start mariadb
    [root@director ~]# sudo systemctl enable mariadb

19. Increase the allowed packets to accommodate the size of our database backup:

    [root@director ~]# mysql -uroot -e"set global max_allowed_packet = 1073741824;"

20. Restore the database backup:

    [root@director ~]# mysql -u root < /var/tmp/undercloud_backup/root/undercloud-all-databases.sql

21. Restart Mariadb to refresh the permissions from the backup file:

    [root@director ~]# sudo systemctl restart mariadb

1. Get a list of old user permissions:

   [root@director ~]# mysql -e 'select host, user, password from mysql.user;'

2. Remove the old user permissions for each host listed. For example:

   [root@director ~]# HOST="192.0.2.1"
   [root@director ~]# USERS=$(mysql -Nse "select user from mysql.user WHERE user != \"root\" and host = \"$HOST\";" | uniq | xargs)
   [root@director ~]# for USER in $USERS ; do mysql -e "drop user \"$USER\"@\"$HOST\"" || true ;done
   [root@director ~]# mysql -e 'flush privileges'

3. Install the openstack-glance package and restore its file permissions:

   [root@director ~]# sudo yum install -y openstack-glance
   [root@director ~]# sudo chown -R glance: /var/lib/glance/images

4. Install the openstack-swift packages and restore its file permissions:

   [root@director ~]# sudo yum install -y openstack-swift
   [root@director ~]# sudo chown -R swift: /srv/node

5. Switch to the new stack user:

   [root@director ~]# su - stack
   [stack@director ~]$

6. Run the undercloud installation command. Ensure to run it in the stack user’s home directory:

   [stack@director ~]$ openstack undercloud install

7. Wait until the install completes. The undercloud automatically restores its connection to the overcloud. The nodes will continue to poll OpenStack Orchestration (heat) for pending tasks.

8. Synchronize the container data with backup content:

   [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/var/lib/docker/ /var/lib/docker/
   [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/var/lib/registry/ /var/lib/registry/
   [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/etc/docker/ /etc/docker/
   [root@director ~]# sudo rsync -a -X /var/tmp/undercloud_backup/etc/docker-distribution/ /etc/docker-distribution/
   [root@director ~]# sudo cp /var/tmp/undercloud_backup/etc/sysconfig/docker* /etc/sysconfig/.
   [root@director ~]# sudo systemctl restart docker docker-distribution