Ransomware attackers specifically target and attempt to destroy backup systems to increase the probability of payment. Hardening your system is critical. Please ensure you have reviewed your platform security using the Security Hardening Checklist
Cohesity

COHESITY Documentation

Explore our documentation to get started, discover products & new features, access troubleshooting guides, register sources, platforms support.

Products
Data Security Alliance
Visit Cohesity.com
Demos
Support
Blogs
Developers
Partner Portals
Cohesity Community
© 2026 Cohesity, Inc. All Rights Reserved.
Terms of Use|
Privacy Policy|
Legal|
  1. Home
  2. NetBackup™ for OpenStack Administrator's Guide
  3. Deploying NetBackup for OpenStack
  4. Installing NetBackup for OpenStack Components
  5. Installing on Ansible OpenStack Ussuri
  6. Preparing the deployment host
NetBackup™ for OpenStack Administrator's Guide

Preparing the deployment host

Select the NetBackup for OpenStack backup target storage type.

See See About NetBackup for OpenStack backup target types.

Copy Ansible roles and vars to the required places.

cd nbos-cfg-scripts/
cp -R ansible/roles/* /opt/openstack-ansible/playbooks/roles/
cp ansible/main-install.yml   /opt/openstack-ansible/playbooks/
os-nbos-install.yml
cp ansible/environments/group_vars/all/vars.yml /etc/openstack_
deploy/user_nbos_vars.yml

Add NetBackup for OpenStack playbook to /opt/openstack-ansible/playbooks/setup-openstack.ymlat the end of the file.

- import_playbook: os-nbos-install.yml

Add the following information at the end of the file /etc/openstack_deploy/user_variables.yml

# Datamover haproxy setting
haproxy_extra_services:
  - service:
      haproxy_service_name: nbosdm_service
      haproxy_backend_nodes: "{{ groups['nbosdmapi_all'] | default([]) }}"
      haproxy_ssl: "{{ haproxy_ssl }}"
      haproxy_port: 8784
      haproxy_balance_type: http
      haproxy_balance_alg: roundrobin
      haproxy_timeout_client: 10m
      haproxy_timeout_server: 10m
      haproxy_backend_options:
       - "httpchk GET / HTTP/1.0\\r\\nUser-agent:\\ osa-haproxy-healthcheck"

Create the file /opt/openstack-ansible/inventory/env.d/nbos-nbosdmapi.yml

Add the following information to the file.

cat > /opt/openstack-ansible/inventory/env.d/nbos-nbosdmapi.yml 
component_skel:
  nbosdmapi_api:
    belongs_to:
      - nbosdmapi_all
 
container_skel:
  nbosdmapi_container:
    belongs_to:
      - nbos-nbosdmapi_containers
    contains:
      - nbosdmapi_api
 
physical_skel:
  nbos-nbosdmapi_containers:
    belongs_to:
      - all_containers
  nbos-nbosdmapi_hosts:
    belongs_to:
      - hosts

Edit the file /etc/openstack_deploy/openstack_user_config.yml according to the example below to set host entries for NetBackup for OpenStack components.

#nbosdmapi
nbos-nbosdmapi_hosts:     # Add controller details in this section as 
                          # nbos-dmapi is resides on controller nodes.
  infra1:                 # Controller host name
    ip: <controller_ip>   # IP address of controller
  infra2:                 # For multiple controller nodes add controller node 
                          # details in same manner as shown in infra2
    ip: <controller_ip>
 
#nbos-datamover
nbos_compute_hosts:       # Add compute details in this section as nbosdm 
                          # resides on compute nodes.
  infra-1:                # Compute host name
    ip: <compute_ip>      # IP address of compute
  infra2:                 # For multiple compute nodes add compute node 
                          # details in same manner as shown in infra2
    ip: <compute_ip>

Edit the common editable parameter section in the file /etc/openstack_deploy/user_nbos_vars.yml

Append the required details like NetBackup for OpenStack Appliance IP address, NetBackup for OpenStack package version, OpenStack distribution, snapshot storage backend, SSL related information and so on.

##common editable parameters required for installing nbos-horizon-plugin, 
nbosdm and nbosdmapi
#ip address of nbosvm
IP_ADDRESS: <Nbosvm IP>
##Time Zone
TIME_ZONE: "Etc/UTC"
 
#Update NBOS package version here, we will install mentioned version 
plugins for Example# NBOS_PACKAGE_VERSION: 3.3.36
NBOS_PACKAGE_VERSION: <Build No>
# Update Openstack dist code name like ussuri etc.
OPENSTACK_DIST: ussuri
 
#Need to add the following statement in nova sudoers file
#nova ALL = (root) NOPASSWD: /home/nbos/.virtenv/bin/privsep-helper *
#These changes require for nbosdm, Otherwise nbosdm will not work
#Are you sure? Please set variable to
#  UPDATE_NOVA_SUDOERS_FILE: proceed
#other wise ansible nbosdm installation will exit
UPDATE_NOVA_SUDOERS_FILE: proceed
 
##### Select snapshot storage type #####
#Details for NFS as snapshot storage , NFS_SHARES should begin with "-".
##True/False
NFS: True
NFS_SHARES:
          - sample_nfs_server_ip1:sample_share_path
          - sample_nfs_server_ip2:sample_share_path

#if NFS_OPTS is empty then default value will be 
"nolock,soft,timeo=180,intr,lookupcache=none"
NFS_OPTS: ""
 
#### Details for S3 as snapshot storage
##True/False
S3: False
VAULT_S3_ACCESS_KEY: sample_s3_access_key
VAULT_S3_SECRET_ACCESS_KEY: sample_s3_secret_access_key
VAULT_S3_REGION_NAME: sample_s3_region_name
VAULT_S3_BUCKET: sample_s3_bucket
VAULT_S3_SIGNATURE_VERSION: default
#### S3 Specific Backend Configurations
#### Provide one of follwoing two values in s3_type variable, 
string's case should be match
#Amazon/Other_S3_Compatible
s3_type: sample_s3_type
#### Required field(s) for all S3 backends except Amazon
VAULT_S3_ENDPOINT_URL: ""
#True/False
VAULT_S3_SECURE: True
VAULT_S3_SSL_CERT: ""
 
###details of nbosdmapi
##If SSL is enabled "NBOSDMAPI_ENABLED_SSL_APIS" value should be nbosdmapi.
#NBOSDMAPI_ENABLED_SSL_APIS: nbosdmapi
##If SSL is disabled "NBOSDMAPI_ENABLED_SSL_APIS" value should be empty.
NBOSDMAPI_ENABLED_SSL_APIS: ""
NBOSDMAPI_SSL_CERT: ""
NBOSDMAPI_SSL_KEY: ""
 
#### Any service is using Ceph Backend then set ceph_backend_enabled 
value to True
#True/False
ceph_backend_enabled: False
 
#Set verbosity level and run playbooks with -vvv option to display 
custom debug messages
verbosity_level: 3


Feedback

Was this page helpful?
Previous

Changing the nova user ID on the NetBackup for OpenStack Nodes

Next

Deploying the NetBackup for OpenStack components

Feedback

Was this page helpful?