TOP_DIR=$(cd $(dirname "$0") && pwd)

source $TOP_DIR/functions

GetOSVersion

if [[ "$os_VENDOR" =~ (Ubuntu) ]]; then

# 'Everyone' refers to Ubuntu releases by the code name adjective

DISTRO=$os_CODENAME

elif [[ "$os_VENDOR" =~ (Fedora) ]]; then

# For Fedora, just use 'f' and the release

DISTRO="f$os_RELEASE"

# Catch-all for now is Vendor + Release + Update

DISTRO="$os_VENDOR-$os_RELEASE.$os_UPDATE"

if [[ ! -r $TOP_DIR/stackrc ]]; then

echo "ERROR: missing $TOP_DIR/stackrc - did you grab more than just stack.sh?"

exit 1

source $TOP_DIR/stackrc

if [[ -n "$http_proxy" ]]; then

export http_proxy=$http_proxy

if [[ -n "$https_proxy" ]]; then

export https_proxy=$https_proxy

DEST=${DEST:-/opt/stack}

if [[ ! ${DISTRO} =~ (oneiric|precise|quantal|f16) ]]; then

echo "WARNING: this script has been tested on oneiric, precise and f16"

if [[ "$FORCE" != "yes" ]]; then

echo "If you wish to run this script anyway run with FORCE=yes"

exit 1

fi

if [ "${DISTRO}" = "oneiric" ] && is_service_enabled qpid ; then

# Qpid was introduced in precise

echo "You must use Ubuntu Precise or newer for Qpid support."

exit 1

if [[ "$os_PACKAGE" = "deb" ]]; then

NOVA_ROOTWRAP=/usr/local/bin/nova-rootwrap

NOVA_ROOTWRAP=/usr/bin/nova-rootwrap

FILES=$TOP_DIR/files

if [ ! -d $FILES ]; then

echo "ERROR: missing devstack/files - did you grab more than just stack.sh?"

exit 1

if type -p screen >/dev/null && screen -ls | egrep -q "[0-9].stack"; then

echo "You are already running a stack.sh session."

echo "To rejoin this session type 'screen -x stack'."

echo "To destroy this session, kill the running screen."

exit 1

if [[ $EUID -eq 0 ]]; then

ROOTSLEEP=${ROOTSLEEP:-10}

echo "You are running this script as root."

echo "In $ROOTSLEEP seconds, we will create a user 'stack' and run as that user"

sleep $ROOTSLEEP

# since this script runs as a normal user, we need to give that user

# ability to run sudo

if [[ "$os_PACKAGE" = "deb" ]]; then

dpkg -l sudo || apt_get update && install_package sudo

STACK_GROUP=sudo

else

rpm -qa | grep sudo || install_package sudo

STACK_GROUP=wheel

fi

if ! getent passwd stack >/dev/null; then

echo "Creating a user called stack"

useradd -U -G $STACK_GROUP -s /bin/bash -d $DEST -m stack

fi

echo "Giving stack user passwordless sudo priviledges"

# some uec images sudoers does not have a '#includedir'. add one.

grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers ||

echo "#includedir /etc/sudoers.d" >> /etc/sudoers

( umask 226 && echo "stack ALL=(ALL) NOPASSWD:ALL" \

> /etc/sudoers.d/50_stack_sh )

echo "Copying files to stack user"

STACK_DIR="$DEST/${PWD##*/}"

cp -r -f -T "$PWD" "$STACK_DIR"

chown -R stack "$STACK_DIR"

if [[ "$SHELL_AFTER_RUN" != "no" ]]; then

exec su -c "set -e; cd $STACK_DIR; bash stack.sh; bash" stack

else

exec su -c "set -e; cd $STACK_DIR; bash stack.sh" stack

fi

exit 1

# We're not root, make sure sudo is available

if [[ "$os_PACKAGE" = "deb" ]]; then

CHECK_SUDO_CMD="dpkg -l sudo"

else

CHECK_SUDO_CMD="rpm -q sudo"

fi

$CHECK_SUDO_CMD || die "Sudo is required. Re-run stack.sh as root ONE TIME ONLY to set up sudo."

# UEC images /etc/sudoers does not have a '#includedir'. add one.

sudo grep -q "^#includedir.*/etc/sudoers.d" /etc/sudoers ||

echo "#includedir /etc/sudoers.d" | sudo tee -a /etc/sudoers

# Set up devstack sudoers

TEMPFILE=`mktemp`

echo "`whoami` ALL=(root) NOPASSWD:ALL" >$TEMPFILE

chmod 0440 $TEMPFILE

sudo chown root:root $TEMPFILE

sudo mv $TEMPFILE /etc/sudoers.d/50_stack_sh

# Remove old file

sudo rm -f /etc/sudoers.d/stack_sh_nova

OFFLINE=`trueorfalse False $OFFLINE`

NOVA_DIR=$DEST/nova

HORIZON_DIR=$DEST/horizon

GLANCE_DIR=$DEST/glance

GLANCECLIENT_DIR=$DEST/python-glanceclient

KEYSTONE_DIR=$DEST/keystone

NOVACLIENT_DIR=$DEST/python-novaclient

KEYSTONECLIENT_DIR=$DEST/python-keystoneclient

OPENSTACKCLIENT_DIR=$DEST/python-openstackclient

NOVNC_DIR=$DEST/noVNC

SWIFT_DIR=$DEST/swift

SWIFT3_DIR=$DEST/swift3

SWIFTCLIENT_DIR=$DEST/python-swiftclient

QUANTUM_DIR=$DEST/quantum

QUANTUM_CLIENT_DIR=$DEST/python-quantumclient

MELANGE_DIR=$DEST/melange

MELANGECLIENT_DIR=$DEST/python-melangeclient

Q_PLUGIN=${Q_PLUGIN:-openvswitch}

Q_PORT=${Q_PORT:-9696}

Q_HOST=${Q_HOST:-localhost}

M_PORT=${M_PORT:-9898}

M_HOST=${M_HOST:-localhost}

M_MAC_RANGE=${M_MAC_RANGE:-FE-EE-DD-00-00-00/24}

VOLUME_GROUP=${VOLUME_GROUP:-nova-volumes}

VOLUME_NAME_PREFIX=${VOLUME_NAME_PREFIX:-volume-}

INSTANCE_NAME_PREFIX=${INSTANCE_NAME_PREFIX:-instance-}

VIRT_DRIVER=${VIRT_DRIVER:-libvirt}

LIBVIRT_TYPE=${LIBVIRT_TYPE:-kvm}

SCHEDULER=${SCHEDULER:-nova.scheduler.filter_scheduler.FilterScheduler}

HOST_IP_IFACE=${HOST_IP_IFACE:-eth0}

if [ -z "$HOST_IP" -o "$HOST_IP" == "dhcp" ]; then

HOST_IP=`LC_ALL=C /sbin/ifconfig ${HOST_IP_IFACE} | grep -m 1 'inet addr:'| cut -d: -f2 | awk '{print $1}'`

if [ "$HOST_IP" = "" ]; then

echo "Could not determine host ip address."

echo "Either localrc specified dhcp on ${HOST_IP_IFACE} or defaulted to eth0"

exit 1

fi

SERVICE_HOST=${SERVICE_HOST:-$HOST_IP}

SYSLOG=`trueorfalse False $SYSLOG`

SYSLOG_HOST=${SYSLOG_HOST:-$HOST_IP}

SYSLOG_PORT=${SYSLOG_PORT:-516}

LOG_COLOR=`trueorfalse True $LOG_COLOR`

SERVICE_TIMEOUT=${SERVICE_TIMEOUT:-60}

function read_password {

}

if [ "$VIRT_DRIVER" = 'xenserver' ]; then

PUBLIC_INTERFACE_DEFAULT=eth3

# allow build_domU.sh to specify the flat network bridge via kernel args

FLAT_NETWORK_BRIDGE_DEFAULT=$(grep -o 'flat_network_bridge=[[:alnum:]]*' /proc/cmdline | cut -d= -f 2 | sort -u)

GUEST_INTERFACE_DEFAULT=eth1

PUBLIC_INTERFACE_DEFAULT=br100

FLAT_NETWORK_BRIDGE_DEFAULT=br100

GUEST_INTERFACE_DEFAULT=eth0

PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-$PUBLIC_INTERFACE_DEFAULT}

PUBLIC_INTERFACE=${PUBLIC_INTERFACE:-br100}

FIXED_RANGE=${FIXED_RANGE:-10.0.0.0/24}

FIXED_NETWORK_SIZE=${FIXED_NETWORK_SIZE:-256}

FLOATING_RANGE=${FLOATING_RANGE:-172.24.4.224/28}

NET_MAN=${NET_MAN:-FlatDHCPManager}

EC2_DMZ_HOST=${EC2_DMZ_HOST:-$SERVICE_HOST}

FLAT_NETWORK_BRIDGE=${FLAT_NETWORK_BRIDGE:-$FLAT_NETWORK_BRIDGE_DEFAULT}

VLAN_INTERFACE=${VLAN_INTERFACE:-$GUEST_INTERFACE_DEFAULT}

TEST_FLOATING_POOL=${TEST_FLOATING_POOL:-test}

TEST_FLOATING_RANGE=${TEST_FLOATING_RANGE:-192.168.253.0/29}

MULTI_HOST=`trueorfalse False $MULTI_HOST`

FLAT_INTERFACE=${FLAT_INTERFACE:-$GUEST_INTERFACE_DEFAULT}

MYSQL_HOST=${MYSQL_HOST:-localhost}

MYSQL_USER=${MYSQL_USER:-root}

read_password MYSQL_PASSWORD "ENTER A PASSWORD TO USE FOR MYSQL."

BASE_SQL_CONN=${BASE_SQL_CONN:-mysql://$MYSQL_USER:$MYSQL_PASSWORD@$MYSQL_HOST}

if is_service_enabled rabbit; then

RABBIT_HOST=${RABBIT_HOST:-localhost}

read_password RABBIT_PASSWORD "ENTER A PASSWORD TO USE FOR RABBIT."

GLANCE_HOSTPORT=${GLANCE_HOSTPORT:-$SERVICE_HOST:9292}

SWIFT_DATA_DIR=${SWIFT_DATA_DIR:-${DEST}/data/swift}

SWIFT_CONFIG_DIR=${SWIFT_CONFIG_DIR:-/etc/swift}

SWIFT_LOOPBACK_DISK_SIZE=${SWIFT_LOOPBACK_DISK_SIZE:-1000000}

SWIFT_PARTITION_POWER_SIZE=${SWIFT_PARTITION_POWER_SIZE:-9}

SWIFT_REPLICAS=${SWIFT_REPLICAS:-3}

if is_service_enabled swift; then

# If we are using swift, we can default the s3 port to swift instead

# of nova-objectstore

S3_SERVICE_PORT=${S3_SERVICE_PORT:-8080}

# We only ask for Swift Hash if we have enabled swift service.

# SWIFT_HASH is a random unique string for a swift cluster that

# can never change.

read_password SWIFT_HASH "ENTER A RANDOM SWIFT HASH."

S3_SERVICE_PORT=${S3_SERVICE_PORT:-3333}

read_password SERVICE_TOKEN "ENTER A SERVICE_TOKEN TO USE FOR THE SERVICE ADMIN TOKEN."

read_password SERVICE_PASSWORD "ENTER A SERVICE_PASSWORD TO USE FOR THE SERVICE AUTHENTICATION."

read_password ADMIN_PASSWORD "ENTER A PASSWORD TO USE FOR HORIZON AND KEYSTONE (20 CHARS OR LESS)."

SERVICE_TENANT_NAME=${SERVICE_TENANT_NAME:-service}

KEYSTONE_API_PORT=${KEYSTONE_API_PORT:-5000}

KEYSTONE_AUTH_HOST=${KEYSTONE_AUTH_HOST:-$SERVICE_HOST}

KEYSTONE_AUTH_PORT=${KEYSTONE_AUTH_PORT:-35357}

KEYSTONE_AUTH_PROTOCOL=${KEYSTONE_AUTH_PROTOCOL:-http}

KEYSTONE_SERVICE_HOST=${KEYSTONE_SERVICE_HOST:-$SERVICE_HOST}

KEYSTONE_SERVICE_PORT=${KEYSTONE_SERVICE_PORT:-5000}

KEYSTONE_SERVICE_PROTOCOL=${KEYSTONE_SERVICE_PROTOCOL:-http}

APACHE_USER=${APACHE_USER:-$USER}

APACHE_GROUP=${APACHE_GROUP:-$APACHE_USER}

if [[ -n "$LOGFILE" || -n "$SCREEN_LOGDIR" ]]; then

LOGDAYS=${LOGDAYS:-7}

TIMESTAMP_FORMAT=${TIMESTAMP_FORMAT:-"%F-%H%M%S"}

CURRENT_LOG_TIME=$(date "+$TIMESTAMP_FORMAT")

if [[ -n "$LOGFILE" ]]; then

# First clean up old log files. Use the user-specified LOGFILE

# as the template to search for, appending '.*' to match the date

# we added on earlier runs.

LOGDIR=$(dirname "$LOGFILE")

LOGNAME=$(basename "$LOGFILE")

mkdir -p $LOGDIR

find $LOGDIR -maxdepth 1 -name $LOGNAME.\* -mtime +$LOGDAYS -exec rm {} \;

LOGFILE=$LOGFILE.${CURRENT_LOG_TIME}

# Redirect stdout/stderr to tee to write the log file

exec 1> >( tee "${LOGFILE}" ) 2>&1

echo "stack.sh log $LOGFILE"

# Specified logfile name always links to the most recent log

ln -sf $LOGFILE $LOGDIR/$LOGNAME

if [[ -n "$SCREEN_LOGDIR" ]]; then

# We make sure the directory is created.

if [[ -d "$SCREEN_LOGDIR" ]]; then

# We cleanup the old logs

find $SCREEN_LOGDIR -maxdepth 1 -name screen-\*.log -mtime +$LOGDAYS -exec rm {} \;

else

mkdir -p $SCREEN_LOGDIR

fi

trap failed ERR

failed() {

}

set -o xtrace

sudo mkdir -p $DEST

if [ ! -w $DEST ]; then

sudo chown `whoami` $DEST

function get_packages() {

}

if [[ "$os_PACKAGE" = "deb" ]]; then

apt_get update

install_package $(get_packages $FILES/apts)

install_package $(get_packages $FILES/rpms)

pip_install $(get_packages $FILES/pips | sort -u)

git_clone $NOVA_REPO $NOVA_DIR $NOVA_BRANCH

git_clone $KEYSTONECLIENT_REPO $KEYSTONECLIENT_DIR $KEYSTONECLIENT_BRANCH

git_clone $NOVACLIENT_REPO $NOVACLIENT_DIR $NOVACLIENT_BRANCH

git_clone $OPENSTACKCLIENT_REPO $OPENSTACKCLIENT_DIR $OPENSTACKCLIENT_BRANCH

git_clone $GLANCECLIENT_REPO $GLANCECLIENT_DIR $GLANCECLIENT_BRANCH

if is_service_enabled key g-api n-api swift; then

# unified auth system (manages accounts/tokens)

git_clone $KEYSTONE_REPO $KEYSTONE_DIR $KEYSTONE_BRANCH

if is_service_enabled swift; then

# storage service

git_clone $SWIFT_REPO $SWIFT_DIR $SWIFT_BRANCH

# storage service client and and Library

git_clone $SWIFTCLIENT_REPO $SWIFTCLIENT_DIR $SWIFTCLIENT_BRANCH

# swift3 middleware to provide S3 emulation to Swift

git_clone $SWIFT3_REPO $SWIFT3_DIR $SWIFT3_BRANCH

if is_service_enabled g-api n-api; then

# image catalog service

git_clone $GLANCE_REPO $GLANCE_DIR $GLANCE_BRANCH

if is_service_enabled n-novnc; then

# a websockets/html5 or flash powered VNC console for vm instances

git_clone $NOVNC_REPO $NOVNC_DIR $NOVNC_BRANCH

if is_service_enabled horizon; then

# django powered web control panel for openstack

git_clone $HORIZON_REPO $HORIZON_DIR $HORIZON_BRANCH $HORIZON_TAG

if is_service_enabled quantum; then

git_clone $QUANTUM_CLIENT_REPO $QUANTUM_CLIENT_DIR $QUANTUM_CLIENT_BRANCH

if is_service_enabled quantum; then

# quantum

git_clone $QUANTUM_REPO $QUANTUM_DIR $QUANTUM_BRANCH

if is_service_enabled m-svc; then

# melange

git_clone $MELANGE_REPO $MELANGE_DIR $MELANGE_BRANCH

if is_service_enabled melange; then

git_clone $MELANGECLIENT_REPO $MELANGECLIENT_DIR $MELANGECLIENT_BRANCH

setup_develop $KEYSTONECLIENT_DIR

setup_develop $NOVACLIENT_DIR

setup_develop $OPENSTACKCLIENT_DIR

if is_service_enabled key g-api n-api swift; then

setup_develop $KEYSTONE_DIR

if is_service_enabled swift; then

setup_develop $SWIFT_DIR

setup_develop $SWIFTCLIENT_DIR

setup_develop $SWIFT3_DIR

if is_service_enabled g-api n-api; then

setup_develop $GLANCE_DIR

setup_develop $NOVA_DIR

if is_service_enabled horizon; then

setup_develop $HORIZON_DIR

if is_service_enabled quantum; then

setup_develop $QUANTUM_CLIENT_DIR

setup_develop $QUANTUM_DIR

if is_service_enabled m-svc; then

setup_develop $MELANGE_DIR

if is_service_enabled melange; then

setup_develop $MELANGECLIENT_DIR

setup_develop $GLANCECLIENT_DIR

if [[ $SYSLOG != "False" ]]; then

install_package rsyslog-relp

if [[ "$SYSLOG_HOST" = "$HOST_IP" ]]; then

# Configure the master host to receive

cat <<EOF >/tmp/90-stack-m.conf

sudo mv /tmp/90-stack-m.conf /etc/rsyslog.d

else

# Set rsyslog to send to remote host

cat <<EOF >/tmp/90-stack-s.conf

sudo mv /tmp/90-stack-s.conf /etc/rsyslog.d

fi

restart_service rsyslog

if is_service_enabled rabbit; then

# Install and start rabbitmq-server

# the temp file is necessary due to LP: #878600

tfile=$(mktemp)

install_package rabbitmq-server > "$tfile" 2>&1

cat "$tfile"

rm -f "$tfile"

if [[ "$os_PACKAGE" = "rpm" ]]; then

# RPM doesn't start the service

restart_service rabbitmq-server

fi

# change the rabbit password since the default is "guest"

sudo rabbitmqctl change_password guest $RABBIT_PASSWORD

elif is_service_enabled qpid; then

if [[ "$os_PACKAGE" = "rpm" ]]; then

install_package qpid-cpp-server

restart_service qpidd

else

install_package qpidd

fi

if is_service_enabled mysql; then

if [[ "$os_PACKAGE" = "deb" ]]; then

# Seed configuration with mysql password so that apt-get install doesn't

# prompt us for a password upon install.

cat <<MYSQL_PRESEED | sudo debconf-set-selections

fi

# while ``.my.cnf`` is not needed for openstack to function, it is useful

# as it allows you to access the mysql databases via ``mysql nova`` instead

# of having to specify the username/password each time.

if [[ ! -e $HOME/.my.cnf ]]; then

cat <<EOF >$HOME/.my.cnf

chmod 0600 $HOME/.my.cnf

fi

# Install and start mysql-server

install_package mysql-server

if [[ "$os_PACKAGE" = "rpm" ]]; then

# RPM doesn't start the service

start_service mysqld

# Set the root password - only works the first time

sudo mysqladmin -u root password $MYSQL_PASSWORD || true

fi

# Update the DB to give user ‘$MYSQL_USER’@’%’ full control of the all databases:

sudo mysql -uroot -p$MYSQL_PASSWORD -h127.0.0.1 -e "GRANT ALL PRIVILEGES ON *.* TO '$MYSQL_USER'@'%' identified by '$MYSQL_PASSWORD';"

# Update ``my.cnf`` for some local needs and restart the mysql service

if [[ "$os_PACKAGE" = "deb" ]]; then

MY_CONF=/etc/mysql/my.cnf

MYSQL=mysql

else

MY_CONF=/etc/my.cnf

MYSQL=mysqld

fi

# Change ‘bind-address’ from localhost (127.0.0.1) to any (0.0.0.0)

sudo sed -i '/^bind-address/s/127.0.0.1/0.0.0.0/g' $MY_CONF

# Set default db type to InnoDB

if grep -q "default-storage-engine" $MY_CONF; then

# Change it

sudo bash -c "source $TOP_DIR/functions; iniset $MY_CONF mysqld default-storage-engine InnoDB"

else

# Add it

sudo sed -i -e "/^\[mysqld\]/ a \

default-storage-engine = InnoDB" $MY_CONF

fi

restart_service $MYSQL

if [ -z "$SCREEN_HARDSTATUS" ]; then

SCREEN_HARDSTATUS='%{= .} %-Lw%{= .}%> %n%f %t*%{= .}%+Lw%< %-=%{g}(%{d}%H/%l%{g})'

function screen_rc {

}

function screen_it {

}

screen -d -m -S stack -t stack -s /bin/bash

sleep 1

screen -r stack -X hardstatus alwayslastline "$SCREEN_HARDSTATUS"

if is_service_enabled horizon; then

# Remove stale session database.

rm -f $HORIZON_DIR/openstack_dashboard/local/dashboard_openstack.sqlite3

# ``local_settings.py`` is used to override horizon default settings.

local_settings=$HORIZON_DIR/openstack_dashboard/local/local_settings.py

cp $FILES/horizon_settings.py $local_settings

# Initialize the horizon database (it stores sessions and notices shown to

# users). The user system is external (keystone).

cd $HORIZON_DIR

python manage.py syncdb

cd $TOP_DIR

# create an empty directory that apache uses as docroot

sudo mkdir -p $HORIZON_DIR/.blackhole

if [[ "$os_PACKAGE" = "deb" ]]; then

# Install apache2, which is NOPRIME'd

APACHE_NAME=apache2

APACHE_CONF=sites-available/horizon

install_package apache2 libapache2-mod-wsgi

# Clean up the old config name

sudo rm -f /etc/apache2/sites-enabled/000-default

# Be a good citizen and use the distro tools here

sudo touch /etc/$APACHE_NAME/$APACHE_CONF

sudo a2ensite horizon

else

# Install httpd, which is NOPRIME'd

APACHE_NAME=httpd

APACHE_CONF=conf.d/horizon.conf

sudo rm -f /etc/httpd/conf.d/000-*

install_package httpd mod_wsgi

sudo sed '/^Listen/s/^.*$/Listen 0.0.0.0:80/' -i /etc/httpd/conf/httpd.conf

fi

## Configure apache to run horizon

sudo sh -c "sed -e \"

restart_service $APACHE_NAME

if is_service_enabled g-reg; then

GLANCE_CONF_DIR=/etc/glance

if [[ ! -d $GLANCE_CONF_DIR ]]; then

sudo mkdir -p $GLANCE_CONF_DIR

fi

sudo chown `whoami` $GLANCE_CONF_DIR

GLANCE_IMAGE_DIR=$DEST/glance/images

# Delete existing images

rm -rf $GLANCE_IMAGE_DIR

# Use local glance directories

mkdir -p $GLANCE_IMAGE_DIR

# (re)create glance database

mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'DROP DATABASE IF EXISTS glance;'

mysql -u$MYSQL_USER -p$MYSQL_PASSWORD -e 'CREATE DATABASE glance CHARACTER SET utf8;'

# Copy over our glance configurations and update them

GLANCE_REGISTRY_CONF=$GLANCE_CONF_DIR/glance-registry.conf

cp $GLANCE_DIR/etc/glance-registry.conf $GLANCE_REGISTRY_CONF

iniset $GLANCE_REGISTRY_CONF DEFAULT debug True

inicomment $GLANCE_REGISTRY_CONF DEFAULT log_file

iniset $GLANCE_REGISTRY_CONF DEFAULT sql_connection $BASE_SQL_CONN/glance?charset=utf8

iniset $GLANCE_REGISTRY_CONF DEFAULT use_syslog $SYSLOG

iniset $GLANCE_REGISTRY_CONF paste_deploy flavor keystone

GLANCE_REGISTRY_PASTE_INI=$GLANCE_CONF_DIR/glance-registry-paste.ini

cp $GLANCE_DIR/etc/glance-registry-paste.ini $GLANCE_REGISTRY_PASTE_INI

iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_host $KEYSTONE_AUTH_HOST

iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_port $KEYSTONE_AUTH_PORT

iniset $GLANCE_REGISTRY_PASTE_INI filter:authtoken auth_protocol $KEYSTONE_AUTH_PROTOCOL