Using juju-core with canonistack with sshuttle

[John Arbash Meinel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I have canonistack working with ssh tunneling, without having to do it
directly in juju. I'm hoping that our longer term solution will be a
bit cleaner, but we at least have a solution for now.

1) Install 'sshuttle'

  sudo apt-get install sshuttle

2) Bootstrap your juju environment

  juju bootstrap -v

   Using -v will report the instance id that juju is spawning for the
   bootstrap node.

3) Your .ssh/config should include the Chinstrap proxying:
  Host 10.55.60.* 10.55.61.* 10.55.63.*
    User ubuntu
    ProxyCommand ssh chinstrap.canonical.com nc -q0 %h %p

4) Use nova list to determine the IP address of the machine juju just
   started. This may take a while for the machine to start
+--------------------------------------+--------------------------+--------+--------------------------+
| ID                                   | Name                     |
Status | Networks                 |
+--------------------------------------+--------------------------+--------+--------------------------+
| 2f010834-79ff-4cd5-94c4-f91db26ce6fe | juju-openstack-machine-0 |
ACTIVE | canonistack=10.55.60.91  |
+--------------------------------------+--------------------------+--------+--------------------------+

eg 10.55.60.91

5) Tell 'sshuttle' to VPN all traffic to Canonistack (run in another
   terminal)
  sshuttle -vr $IP_ADDR 10.55.60.0/16

6) You should now be able to run:
  juju status -v

And have juju connect to mongo running on your canonistack instance,
and all further 'juju deploy' etc commands should work.

John
=:->

Note: There are still a couple of bugs in the 1.9.9 release wrt
openstack support. So some charms won't deploy properly, etc. The ones
we know about should be addressed in the 1.9.10 release this Friday.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iEYEARECAAYFAlE4uDoACgkQJdeBCYSNAAPYlQCeKqykINwdSnw+Chrcw+MihOpm
H9YAoM1sbjxmmBHt5GsFFbSEeKxUEaZq
=IPMU
-----END PGP SIGNATURE-----