Hi Tyler Schultz,

Thanks for your response. Now I got my point. let me do some efforts with that.

Arpit,

More recent versions of the stemcell remove the vcap user's root
privileges.

To gain root access, you can use
[cloudfoundry/os-conf-release/jobs/user_add](
https://github.com/cloudfoundry/os-conf-release/tree/master/jobs/user_add).
This release job will add a user with root privileges.

Alternatively you can use the [cloudfoundry/bosh-deployment](
https://github.com/cloudfoundry/bosh-deployment) repo. This is a routinely
updated way to deploy the latest versions of director. This repo makes
reference to the aforementioned user-add release:
https://github.com/cloudfoundry/bosh-deployment/blob/master/docs/jumpbox-user.md
.

--Tyler

On Tue, Jul 25, 2017 at 7:05 AM, Arpit Sharma <arpitvipulsharma(a)gmail.com>
wrote:

Hi Tushar & Johannes,

This time i have done setup on 8 core srever with ocata version of
openstack. I know ocata is not compatible with bosh right now. But I think
it should work. Bosh director deployment has been done successfully as
shown below message. I am also able to login with vcap user. But still I am
not able to get root access.


Started validating
Downloading release 'bosh'... Skipped [Found in local cache] (00:00:00)
Validating release 'bosh'... Finished (00:00:01)
Downloading release 'bosh-openstack-cpi'... Skipped [Found in local
cache] (00:00:00)
Validating release 'bosh-openstack-cpi'... Finished (00:00:00)
Validating cpi release... Finished (00:00:00)
Validating deployment manifest... Finished (00:00:00)
Downloading stemcell... Skipped [Found in local cache] (00:00:00)
Validating stemcell... Finished (00:00:03)
Finished validating (00:00:06)

Started installing CPI
Compiling package 'ruby_openstack_cpi/6576c0d52231e773f4ad53f5c5a0785c4247696a'...
Finished (00:03:08)
Compiling package 'bosh_openstack_cpi/918abecbb3015ee383d5cb2af23e8dbfed6392d1'...
Finished (00:00:03)
Installing packages... Finished (00:00:00)
Rendering job templates... Finished (00:00:00)
Installing job 'openstack_cpi'... Finished (00:00:00)
Finished installing CPI (00:03:12)

Starting registry... Finished (00:00:00)
Uploading stemcell 'bosh-openstack-kvm-ubuntu-trusty-go_agent/3421.9'...
Finished (00:00:08)

Started deploying
Creating VM for instance 'bosh/0' from stemcell 'b61f7cac-b039-4f8e-b90f-21296d170528'...
Finished (00:00:51)
Waiting for the agent on VM '3b17e4e7-4ccf-4984-a43e-0713e8f9974c' to
be ready... Finished (00:00:52)
Creating disk... Finished (00:00:07)
Attaching disk 'ee06c19f-55fb-413c-b185-12a125433331' to VM
'3b17e4e7-4ccf-4984-a43e-0713e8f9974c'... Finished (00:00:20)
Rendering job templates... Finished (00:00:03)
Compiling package 'ruby_openstack_cpi/6576c0d52231e773f4ad53f5c5a0785c4247696a'...
Finished (00:04:50)
Compiling package 'ruby/c1086875b047d112e46756dcb63d8f19e63b3ac4'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'mysql/b7e73acc0bfe05f1c6cbfd97bf92d39b0d3155d5'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'libpq/661f5817afe24fa2f18946d2757bff63246b1d0d'...
Skipped [Package already compiled] (00:00:00)
Compiling package 's3cli/bb1c1976d221fdadf13a6bc873896cd5e2433580'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'bosh_openstack_cpi/918abecbb3015ee383d5cb2af23e8dbfed6392d1'...
Finished (00:00:04)
Compiling package 'director/e9cd35786422e87bd0571a4423bc947e50fe97e6'...
Skipped [Package already compiled] (00:00:01)
Compiling package 'nginx/2ec2f63293bf6f544e95969bf5e5242bc226a800'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'registry/d81865cf0ad85fd79cb19aeb565bf622f2a17a83'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'nats/63ae42eb73527625307ff522fb402832b407321d'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'verify_multidigest/8fc5d654cebad7725c34bb08b3f60b912db7094a'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'postgres-9.4/ded764a075ae7513d4718b7cf200642fdbf81ae4'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'health_monitor/e9317b2ad349f019e69261558afa587537f06f25'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'postgres/3b1089109c074984577a0bac1b38018d7a2890ef'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'davcli/5f08f8d5ab3addd0e11171f739f072b107b30b8c'...
Skipped [Package already compiled] (00:00:00)
Updating instance 'bosh/0'... Finished (00:00:23)
Waiting for instance 'bosh/0' to be running... Finished (00:01:09)
Running the post-start scripts 'bosh/0'... Finished (00:00:00)
Finished deploying (00:08:53)

Stopping registry... Finished (00:00:00)
Cleaning up rendered CPI jobs... Finished (00:00:00)

Succeeded

Hi Tushar & Johannes,

This time i have done setup on 8 core srever with ocata version of openstack. I know ocata is not compatible with bosh right now. But I think it should work. Bosh director deployment has been done successfully as shown below message. I am also able to login with vcap user. But still I am not able to get root access.


Started validating
Downloading release 'bosh'... Skipped [Found in local cache] (00:00:00)
Validating release 'bosh'... Finished (00:00:01)
Downloading release 'bosh-openstack-cpi'... Skipped [Found in local cache] (00:00:00)
Validating release 'bosh-openstack-cpi'... Finished (00:00:00)
Validating cpi release... Finished (00:00:00)
Validating deployment manifest... Finished (00:00:00)
Downloading stemcell... Skipped [Found in local cache] (00:00:00)
Validating stemcell... Finished (00:00:03)
Finished validating (00:00:06)

Started installing CPI
Compiling package 'ruby_openstack_cpi/6576c0d52231e773f4ad53f5c5a0785c4247696a'... Finished (00:03:08)
Compiling package 'bosh_openstack_cpi/918abecbb3015ee383d5cb2af23e8dbfed6392d1'... Finished (00:00:03)
Installing packages... Finished (00:00:00)
Rendering job templates... Finished (00:00:00)
Installing job 'openstack_cpi'... Finished (00:00:00)
Finished installing CPI (00:03:12)

Starting registry... Finished (00:00:00)
Uploading stemcell 'bosh-openstack-kvm-ubuntu-trusty-go_agent/3421.9'... Finished (00:00:08)

Started deploying
Creating VM for instance 'bosh/0' from stemcell 'b61f7cac-b039-4f8e-b90f-21296d170528'... Finished (00:00:51)
Waiting for the agent on VM '3b17e4e7-4ccf-4984-a43e-0713e8f9974c' to be ready... Finished (00:00:52)
Creating disk... Finished (00:00:07)
Attaching disk 'ee06c19f-55fb-413c-b185-12a125433331' to VM '3b17e4e7-4ccf-4984-a43e-0713e8f9974c'... Finished (00:00:20)
Rendering job templates... Finished (00:00:03)
Compiling package 'ruby_openstack_cpi/6576c0d52231e773f4ad53f5c5a0785c4247696a'... Finished (00:04:50)
Compiling package 'ruby/c1086875b047d112e46756dcb63d8f19e63b3ac4'... Skipped [Package already compiled] (00:00:00)
Compiling package 'mysql/b7e73acc0bfe05f1c6cbfd97bf92d39b0d3155d5'... Skipped [Package already compiled] (00:00:00)
Compiling package 'libpq/661f5817afe24fa2f18946d2757bff63246b1d0d'... Skipped [Package already compiled] (00:00:00)
Compiling package 's3cli/bb1c1976d221fdadf13a6bc873896cd5e2433580'... Skipped [Package already compiled] (00:00:00)
Compiling package 'bosh_openstack_cpi/918abecbb3015ee383d5cb2af23e8dbfed6392d1'... Finished (00:00:04)
Compiling package 'director/e9cd35786422e87bd0571a4423bc947e50fe97e6'... Skipped [Package already compiled] (00:00:01)
Compiling package 'nginx/2ec2f63293bf6f544e95969bf5e5242bc226a800'... Skipped [Package already compiled] (00:00:00)
Compiling package 'registry/d81865cf0ad85fd79cb19aeb565bf622f2a17a83'... Skipped [Package already compiled] (00:00:00)
Compiling package 'nats/63ae42eb73527625307ff522fb402832b407321d'... Skipped [Package already compiled] (00:00:00)
Compiling package 'verify_multidigest/8fc5d654cebad7725c34bb08b3f60b912db7094a'... Skipped [Package already compiled] (00:00:00)
Compiling package 'postgres-9.4/ded764a075ae7513d4718b7cf200642fdbf81ae4'... Skipped [Package already compiled] (00:00:00)
Compiling package 'health_monitor/e9317b2ad349f019e69261558afa587537f06f25'... Skipped [Package already compiled] (00:00:00)
Compiling package 'postgres/3b1089109c074984577a0bac1b38018d7a2890ef'... Skipped [Package already compiled] (00:00:00)
Compiling package 'davcli/5f08f8d5ab3addd0e11171f739f072b107b30b8c'... Skipped [Package already compiled] (00:00:00)
Updating instance 'bosh/0'... Finished (00:00:23)
Waiting for instance 'bosh/0' to be running... Finished (00:01:09)
Running the post-start scripts 'bosh/0'... Finished (00:00:00)
Finished deploying (00:08:53)

Stopping registry... Finished (00:00:00)
Cleaning up rendered CPI jobs... Finished (00:00:00)

Succeeded

Hi Tushar,

Thanks for your response. I have tried with this option also. Still same issue.

The new expected behavior is to only allow you to become root if you use
the bosh CLI to perform your ssh since it creates a better audit trails and
prevents unauthorized ssh.

http://bosh.io/jobs/director?source=github.com/cloudfoundry/bosh&version=262.3#p=director.generate_vm_passwords

If the generate_vm_passwords option is set to be true you don't get the
default password on your VM hosts.

Best,
Tushar
On Mon, Jul 17, 2017 at 4:27 AM Arpit Sharma <arpitvipulsharma(a)gmail.com>
wrote:

Hi Johannes,

Today I have tried with other
stemcell(bosh-openstack-kvm-ubuntu-trusty-go_agent-raw). Also created
different security group.I have also mentiond security group rules below.
But still same issue. I am able to login in director with vcap user with
this command
ssh -i /root/.ssh/id_rsa_demokey vcap(a)10.100.10.23

but when I am trying to excute "sudo su -", It is not taking password as
c1oudc0w. I dont know why it is happening.

[root(a)openstack ~(keystone_demo)]# neutron security-group-list

+--------------------------------------+-----------+-----------------------------------------------------------------------------------+
| id | name | security_group_rules
|

+--------------------------------------+-----------+-----------------------------------------------------------------------------------+
| bb412056-6f4e-40d9-a48f-8b1c5c4068eb | boshgroup | egress, IPv4
|
| | | egress, IPv6
|
| | | ingress, IPv4,
1-65535/tcp, remote_group_id: bb412056-6f4e-40d9-a48f-8b1c5c4068eb |
| | | ingress, IPv4,
22/tcp, remote_ip_prefix: 0.0.0.0/0 |
| | | ingress, IPv4,
25555/tcp, remote_ip_prefix: 0.0.0.0/0 |
| | | ingress, IPv4,
6868/tcp, remote_ip_prefix: 0.0.0.0/0 |

Hi Johannes,

Today I have tried with other stemcell(bosh-openstack-kvm-ubuntu-trusty-go_agent-raw). Also created different security group.I have also mentiond security group rules below. But still same issue. I am able to login in director with vcap user with this command
ssh -i /root/.ssh/id_rsa_demokey vcap(a)10.100.10.23

but when I am trying to excute "sudo su -", It is not taking password as c1oudc0w. I dont know why it is happening.

[root(a)openstack ~(keystone_demo)]# neutron security-group-list
+--------------------------------------+-----------+-----------------------------------------------------------------------------------+
| id | name | security_group_rules |
+--------------------------------------+-----------+-----------------------------------------------------------------------------------+
| bb412056-6f4e-40d9-a48f-8b1c5c4068eb | boshgroup | egress, IPv4 |
| | | egress, IPv6 |
| | | ingress, IPv4, 1-65535/tcp, remote_group_id: bb412056-6f4e-40d9-a48f-8b1c5c4068eb |
| | | ingress, IPv4, 22/tcp, remote_ip_prefix: 0.0.0.0/0 |
| | | ingress, IPv4, 25555/tcp, remote_ip_prefix: 0.0.0.0/0 |
| | | ingress, IPv4, 6868/tcp, remote_ip_prefix: 0.0.0.0/0 |

Yes Johannes, I am using c1oudc0w. But still same issue. I am also surprised here.

Hi Arpit,
the password is c1oudc0w and 0 ist zero not O. That's the one you used?

On Fri, 14 Jul 2017 at 14:42 Arpit Sharma <arpitvipulsharma(a)gmail.com>
wrote:

Hey Johannes,


Still same issue. I am able to login in instance via ssh. it is not taking
password.

[root(a)openstack ~]# ssh -i /root/.ssh/id_rsa_demokey vcap(a)10.100.10.23
The authenticity of host '10.100.10.23 (10.100.10.23)' can't be
established.
ECDSA key fingerprint is 9c:00:0a:b9:24:11:a3:5c:89:84:73:4f:38:66:39:d4.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.100.10.23' (ECDSA) to the list of known
hosts.
Unauthorized use is strictly prohibited. All access and activity
is subject to logging and monitoring.
Last login: Fri Jul 14 12:31:29 2017
bosh/0:~$ sudo su
[sudo] password for vcap:
Sorry, try again.
[sudo] password for vcap:
Sorry, try again.
[sudo] password for vcap:
sudo: pam_authenticate: Conversation error
bosh/0:~$

Hey Johannes,


Still same issue. I am able to login in instance via ssh. it is not taking password.

[root(a)openstack ~]# ssh -i /root/.ssh/id_rsa_demokey vcap(a)10.100.10.23
The authenticity of host '10.100.10.23 (10.100.10.23)' can't be established.
ECDSA key fingerprint is 9c:00:0a:b9:24:11:a3:5c:89:84:73:4f:38:66:39:d4.
Are you sure you want to continue connecting (yes/no)? yes
Warning: Permanently added '10.100.10.23' (ECDSA) to the list of known hosts.
Unauthorized use is strictly prohibited. All access and activity
is subject to logging and monitoring.
Last login: Fri Jul 14 12:31:29 2017
bosh/0:~$ sudo su
[sudo] password for vcap:
Sorry, try again.
[sudo] password for vcap:
Sorry, try again.
[sudo] password for vcap:
sudo: pam_authenticate: Conversation error
bosh/0:~$

yes...I loged in director via OS cli with private key using ssh. Maybe I have done wrong password attemp more then 3. let me create director once again.

But you could login with ssh -i key vcap(a)ip?

I am doing with same password c1oudc0w.

But unable to login.

bosh/0:~$ sudo su
[sudo] password for vcap:
Sorry, try again.
[sudo] password for vcap:
Sorry, try again.
[sudo] password for vcap:
Sorry, try again.
sudo: 3 incorrect password attempts
bosh/0:~$ sudo su -
[sudo] password for vcap:
Sorry, try again.
[sudo] password for vcap:

As I wrote: c1oudc0w

Mit freundlichen Grüßen

Johannes Hiemer

I am unable to login with this password.

Hi Johannes,

Unable to understand you. When I will do sudo for root from vcap user. It is asking for vcap user password. Where I can get this password?

Do a sudo su with c1oudc0w and then the following:

sudo su
[sudo] password for vcap:
root(a)dc1a850b-184b-4189-47e8-68db05d91bdd:/home/vcap# monit summary
The Monit daemon 5.2.5 uptime: 9d 2h 7m

Process 'nats' running
Process 'postgres' running
Process 'blobstore_nginx' running
Process 'director' running
Process 'worker_1' running
Process 'worker_2' running
Process 'worker_3' running
Process 'director_scheduler' running
Process 'director_nginx' running
Process 'health_monitor' running
Process 'registry' running
System 'system_localhost' running

This is how it should look like.

On Fri, 14 Jul 2017 at 10:54 Arpit Sharma <arpitvipulsharma(a)gmail.com>
wrote:

Hi Johannes,

I am agree with you. I knew that after director deployment, I need to
deploy more then 12 VM's. This will definitely require better hardware. Our
team will take some time to arrange this hardware. Meanwhile I just want to
complete this director implementation. Once it will complete, I will start
to work on new hardware.

Yes, I am able to do ssh into director from OS machine.

Hi Johannes,

I am agree with you. I knew that after director deployment, I need to deploy more then 12 VM's. This will definitely require better hardware. Our team will take some time to arrange this hardware. Meanwhile I just want to complete this director implementation. Once it will complete, I will start to work on new hardware.

Yes, I am able to do ssh into director from OS machine.

Hi Arpit,
two important things:

- I would not proceed with an installation, if you already run into disk
capacity issues now. A minimal useful installation consists of at least 10
- 12 VMs an will consume much more resources
- The error you see is perhaps based on missing Security Groups? Are you
able to ssh into the director via ssh -i keyfile.pem vcap(a)ip-address?


Best,
Johannes

On Fri, 14 Jul 2017 at 10:34 Arpit Sharma <arpitvipulsharma(a)gmail.com>
wrote:

Hi Johannes,

Resolved this volume issue. There was not enough storage at OS. I have
reduced size of Volume(from 32GB to 18 GB). Director
Server having 2vCPU with 4GB RAM. Now I am getting this error at last
stage...

Started deploying
Creating VM for instance 'bosh/0' from stemcell
'875c81c1-fb72-4ff2-9925-46d74db0fdb4'... Finished (00:00:41)
Waiting for the agent on VM '9b94d14a-41a5-4305-a340-48e7100aec44' to be
ready... Finished (00:08:07)
Creating disk... Finished (00:00:06)
Attaching disk 'e8c492a4-1f60-40df-bed8-a9207330f5c1' to VM
'9b94d14a-41a5-4305-a340-48e7100aec44'... Finished (00:00:21)
Rendering job templates... Finished (00:00:02)
Compiling package 'ruby/c1086875b047d112e46756dcb63d8f19e63b3ac4'...
Skipped [Package already compiled] (00:00:02)
Compiling package 'mysql/b7e73acc0bfe05f1c6cbfd97bf92d39b0d3155d5'...
Skipped [Package already compiled] (00:00:02)
Compiling package 'libpq/661f5817afe24fa2f18946d2757bff63246b1d0d'...
Skipped [Package already compiled] (00:00:00)
Compiling package
'ruby_openstack_cpi/6576c0d52231e773f4ad53f5c5a0785c4247696a'... Finished
(00:49:27)
Compiling package
'postgres-9.4/ded764a075ae7513d4718b7cf200642fdbf81ae4'... Skipped [Package
already compiled] (00:00:01)
Compiling package 'nginx/2ec2f63293bf6f544e95969bf5e5242bc226a800'...
Skipped [Package already compiled] (00:00:00)
Compiling package 'registry/d81865cf0ad85fd79cb19aeb565bf622f2a17a83'...
Skipped [Package already compiled] (00:00:04)
Compiling package 'davcli/5f08f8d5ab3addd0e11171f739f072b107b30b8c'...
Skipped [Package already compiled] (00:00:00)
Compiling package
'health_monitor/e9317b2ad349f019e69261558afa587537f06f25'... Skipped
[Package already compiled] (00:00:03)
Compiling package 'nats/63ae42eb73527625307ff522fb402832b407321d'...
Skipped [Package already compiled] (00:00:01)
Compiling package
'bosh_openstack_cpi/918abecbb3015ee383d5cb2af23e8dbfed6392d1'... Finished
(00:00:28)
Compiling package 'director/e9cd35786422e87bd0571a4423bc947e50fe97e6'...
Skipped [Package already compiled] (00:00:05)
Compiling package 'postgres/3b1089109c074984577a0bac1b38018d7a2890ef'...
Skipped [Package already compiled] (00:00:01)
Compiling package 's3cli/bb1c1976d221fdadf13a6bc873896cd5e2433580'...
Skipped [Package already compiled] (00:00:00)
Compiling package
'verify_multidigest/8fc5d654cebad7725c34bb08b3f60b912db7094a'... Skipped
[Package already compiled] (00:00:00)
Updating instance 'bosh/0'... Finished (00:01:00)
Waiting for instance 'bosh/0' to be running... Failed (00:07:55)
Failed deploying (01:08:40)

Stopping registry... Finished (00:00:00)
Cleaning up rendered CPI jobs... Finished (00:00:00)

Deploying:
Received non-running job state: 'failing'



Do you think this is due to less resources to director VM?

Hi Johannes,

Resolved this volume issue. There was not enough storage at OS. I have reduced size of Volume(from 32GB to 18 GB). Director
Server having 2vCPU with 4GB RAM. Now I am getting this error at last stage...

Started deploying
Creating VM for instance 'bosh/0' from stemcell '875c81c1-fb72-4ff2-9925-46d74db0fdb4'... Finished (00:00:41)
Waiting for the agent on VM '9b94d14a-41a5-4305-a340-48e7100aec44' to be ready... Finished (00:08:07)
Creating disk... Finished (00:00:06)
Attaching disk 'e8c492a4-1f60-40df-bed8-a9207330f5c1' to VM '9b94d14a-41a5-4305-a340-48e7100aec44'... Finished (00:00:21)
Rendering job templates... Finished (00:00:02)
Compiling package 'ruby/c1086875b047d112e46756dcb63d8f19e63b3ac4'... Skipped [Package already compiled] (00:00:02)
Compiling package 'mysql/b7e73acc0bfe05f1c6cbfd97bf92d39b0d3155d5'... Skipped [Package already compiled] (00:00:02)
Compiling package 'libpq/661f5817afe24fa2f18946d2757bff63246b1d0d'... Skipped [Package already compiled] (00:00:00)
Compiling package 'ruby_openstack_cpi/6576c0d52231e773f4ad53f5c5a0785c4247696a'... Finished (00:49:27)
Compiling package 'postgres-9.4/ded764a075ae7513d4718b7cf200642fdbf81ae4'... Skipped [Package already compiled] (00:00:01)
Compiling package 'nginx/2ec2f63293bf6f544e95969bf5e5242bc226a800'... Skipped [Package already compiled] (00:00:00)
Compiling package 'registry/d81865cf0ad85fd79cb19aeb565bf622f2a17a83'... Skipped [Package already compiled] (00:00:04)
Compiling package 'davcli/5f08f8d5ab3addd0e11171f739f072b107b30b8c'... Skipped [Package already compiled] (00:00:00)
Compiling package 'health_monitor/e9317b2ad349f019e69261558afa587537f06f25'... Skipped [Package already compiled] (00:00:03)
Compiling package 'nats/63ae42eb73527625307ff522fb402832b407321d'... Skipped [Package already compiled] (00:00:01)
Compiling package 'bosh_openstack_cpi/918abecbb3015ee383d5cb2af23e8dbfed6392d1'... Finished (00:00:28)
Compiling package 'director/e9cd35786422e87bd0571a4423bc947e50fe97e6'... Skipped [Package already compiled] (00:00:05)
Compiling package 'postgres/3b1089109c074984577a0bac1b38018d7a2890ef'... Skipped [Package already compiled] (00:00:01)
Compiling package 's3cli/bb1c1976d221fdadf13a6bc873896cd5e2433580'... Skipped [Package already compiled] (00:00:00)
Compiling package 'verify_multidigest/8fc5d654cebad7725c34bb08b3f60b912db7094a'... Skipped [Package already compiled] (00:00:00)
Updating instance 'bosh/0'... Finished (00:01:00)
Waiting for instance 'bosh/0' to be running... Failed (00:07:55)
Failed deploying (01:08:40)

Stopping registry... Finished (00:00:00)
Cleaning up rendered CPI jobs... Finished (00:00:00)

Deploying:
Received non-running job state: 'failing'



Do you think this is due to less resources to director VM?