Installing Horizon

Horizon serves as the web portal for OpenStack. The following procedure assumes regular HTTP access to Horizon instead of SSL/TLS.

How to Configure Horizon

1. Install the Horizon package.

   controller# pkg install horizon

2. Perform one of the following groups of steps depending on what applies to your configuration.

   • Your configuration uses HTTP.

     1. Provide settings to the /etc/openstack_dashboard/local_settings.py script.

        controller# gsed -i -e s@SECURE_PROXY_SSL_HEADER@#SECURE_PROXY_SSL_HEADER@ \
        -e s@CSRF_COOKIE_SECURE@#CSRF_COOKIE_SECURE@ \
        -e s@SESSION_COOKIE_SECURE@#SESSION_COOKIE_SECURE@ \
        /etc/openstack_dashboard/local_settings.py
        

     2. Copy the HTTP version of the http.conf file for OpenStack.

        controller# cp /etc/apache2/2.2/samples-conf.d/openstack-dashboard-http.conf \
        /etc/apache24/2.2/conf.d/

   • Your configuration uses SSL/TLS.

     1. Generate certificates for use by Horizon.

        The following commands generate self-signed certificates for use by Horizon and copy the OpenStack dashboard configuration file to the Apache configuration file directory. For more information about creating self-signed certificates, see the Apache SSL/TLS Strong Encryption: FAQ.

        controller# export DASHBOARD=/etc/openstack_dashboard
        controller# openssl req -new -x509 -nodes \
        -out horizon.crt -keyout horizon.key
        
        controller# mv horizon.crt horizon.key ${DASHBOARD}
        controller# chmod 0600 ${DASHBOARD}/horizon.*
        
        controller# sed \
        -e "/SSLCertificateFile/s:/path.*:${DASHBOARD}/horizon.crt:" \
        -e "/SSLCACertificateFile/d" \
        -e "/SSLCertificateKeyFile/s:/path.*:${DASHBOARD}/horizon.key:" \
        < /etc/apache2/2.2/samples-conf.d/openstack-dashboard-tls.conf \
        > /etc/apache2/2.2/conf.d/openstack-dashboard-tls.conf

     2. In the ~/conf.d/openstack-dashboard-tls.conf file, specify the site address and server name of the Horizon package on the following parameters:

        RedirectPermanent=controller-IP
        ServerName=controller-name

3. Start the Apache service with one of the following applicable commands.

   controller# svcadm enable apache22