Installing Horizon

Horizon serves as the web portal for OpenStack.

How to Configure Horizon

1. Perform one of the following groups of steps depending on what applies to your configuration.
   • Your configuration uses HTTP.
     1. Provide settings to the /etc/openstack_dashboard/local_settings.py script.

        controller# gsed -i -e s@SECURE_PROXY_SSL_HEADER@#SECURE_PROXY_SSL_HEADER@ \
        -e s@CSRF_COOKIE_SECURE@#CSRF_COOKIE_SECURE@ \
        -e s@SESSION_COOKIE_SECURE@#SESSION_COOKIE_SECURE@ \
        /etc/openstack_dashboard/local_settings.py
        

     2. Copy the HTTP version of the http.conf file for OpenStack.

        controller# cp /etc/apache2/2.4/samples-conf.d/openstack-dashboard-http.conf \
        /etc/apache2/2.4/conf.d/

   • Your configuration uses SSL/TLS.
     1. Generate certificates for use by Horizon.

        The following commands generate self-signed certificates for use by Horizon and copy the OpenStack dashboard configuration file to the Apache configuration file directory. For more information about creating self-signed certificates, see the Apache SSL/TLS Strong Encryption: FAQ.

        controller# export DASHBOARD=/etc/openstack_dashboard
        controller# openssl req -new -x509 -nodes \
        -out horizon.crt -keyout horizon.key
        
        controller# mv horizon.crt horizon.key ${DASHBOARD}
        controller# chmod 0644 ${DASHBOARD}/*
        controller# chown webservd:webservd ${DASHBOARD}/*
        
        controller# sed \
        -e "/SSLCertificateFile/s:/path.*:${DASHBOARD}/horizon.crt:" \
        -e "/SSLCACertificateFile/d" \
        -e "/SSLCertificateKeyFile/s:/path.*:${DASHBOARD}/horizon.key:" \
        < /etc/apache2/2.4/samples-conf.d/openstack-dashboard-tls.conf \
        > /etc/apache2/2.4/conf.d/openstack-dashboard-tls.conf

     2. In the /etc/apache2/2.4/conf.d/openstack-dashboard-tls.conf file, specify the site address and server name of the Horizon package on the following parameters:

        RedirectPermanent /horizon https://controller-fqdn/horizon
        ServerName controller-fqdn

2. Start the Apache service.

   controller# svcadm enable apache24