Breadcrumbs

(Optional) Installing OpenStack Barbican

Skip this section if OpenStack Barbican is already installed. The below steps are only for demonstration purposes and will change based on actual requirements.

Use the steps below to install OpenStack Flamingo with Barbican via DevStack on a single node. DevStack is a series of extensible scripts used to quickly bring up a complete OpenStack environment either based on the latest versions of everything from git master or a selected release (Dalmatian, Flamingo, etc.).

  1. Create stack user with passwordless sudo privileges.

›_ Console

# useradd -s /bin/bash -d /opt/stack -m stack

# chmod +x /opt/stack

# echo "stack ALL=(ALL) NOPASSWD: ALL" | tee /etc/sudoers.d/stack

# su stack

  1. Clone the DevStack Repository and switch to stable Flamingo 2025.2 release branch.

›_ Console

# git clone https://opendev.org/openstack/devstack /opt/stack/devstack

# cd /opt/stack/devstack

# git checkout stable/2025.2


02_CloningDevstack.png


Cloning DevStack

  1. Copy the sample DevStack configuration file local.conf from samples folder to the DevStack directory.

›_ Console

# cp samples/local.conf /opt/stack/devstack

  1. Edit the configuration file using your preferred text editor and make the following changes to the file:

  • Set the passwords (ADMIN_PASSWORD, DATABASE_PASSWORD, RABBIT_PASSWORD, SERVICE_PASSWORD) to preferred values.

  • Adjust HOST_IP to your machine’s IP address if accessing from other systems. For single-machine testing, 127.0.0.1 is sufficient.

  • Add the lines below to install and enable Barbican.

local.conf

# Enable Barbican plugin
enable_plugin barbican https://opendev.org/openstack/barbican stable/2025.2
enable_service barbican

The sample configuration file explains each option and includes a link to more detailed settings documentation.

  1. Run DevStack installation.

›_ Console

# ./stack.sh

This process typically takes 15-30 minutes depending on your network speed and system resources. The script will download, configure, and start all necessary OpenStack services including Barbican.

03_OpenStackWithBarbicanInstalled_2.png


OpenStack installation finished

  1. Verify the installation by sourcing the OpenStack credentials and then listing the Barbican secrets, which should return empty initially and check the OpenStack services status. All services (including Barbican) should be active and running.

›_ Console

# source ~/devstack/openrc admin admin

# openstack secret list

# sudo systemctl list-units 'devstack@*' --no-pager


003_OpenStackServices.png


OpenStack services status after installation