I think there might be a few different issues at play. I've seen it fail at the start of the undercloud install where we exec the tripleo deploy command. I've also see the heat-config-notify fail as part of the later software deployments at the end of the undercloud install. I think these might be related to the a keystoneclient -> python3-keyring -> python3-secretstorage -> python3-jeepney issue. What I've seen from the traceback is that it's hanging when trying to communicate with the DBUS. ^CTraceback (most recent call last): File "/bin/openstack", line 6, in from openstackclient.shell import main File "/usr/lib/python3.6/site-packages/openstackclient/shell.py", line 28, in from openstackclient.common import clientmanager File "/usr/lib/python3.6/site-packages/openstackclient/common/clientmanager.py", line 184, in 'openstack.cli.base', File "/usr/lib/python3.6/site-packages/openstackclient/common/clientmanager.py", line 150, in get_plugin_modules __import__(ep.module_name) File "/usr/lib/python3.6/site-packages/openstackclient/identity/client.py", line 18, in from keystoneclient.v2_0 import client as identity_client_v2 File "/usr/lib/python3.6/site-packages/keystoneclient/v2_0/__init__.py", line 1, in from keystoneclient.v2_0.client import Client # noqa File "/usr/lib/python3.6/site-packages/keystoneclient/v2_0/client.py", line 21, in from keystoneclient import httpclient File "", line 1020, in _handle_fromlist File "/usr/lib/python3.6/site-packages/keystoneclient/__init__.py", line 72, in __getattr__ return importlib.import_module('keystoneclient.%s' % name) File "/usr/lib64/python3.6/importlib/__init__.py", line 126, in import_module return _bootstrap._gcd_import(name[level:], package, level) File "/usr/lib/python3.6/site-packages/keystoneclient/httpclient.py", line 43, in import keyring File "/usr/lib/python3.6/site-packages/keyring/__init__.py", line 1, in from .core import ( File "/usr/lib/python3.6/site-packages/keyring/core.py", line 192, in init_backend() File "/usr/lib/python3.6/site-packages/keyring/core.py", line 96, in init_backend filter(limit, backend.get_all_keyring()), File "/usr/lib/python3.6/site-packages/keyring/util/__init__.py", line 22, in wrapper func.always_returns = func(*args, **kwargs) File "/usr/lib/python3.6/site-packages/keyring/backend.py", line 219, in get_all_keyring return list(rings) File "/usr/lib/python3.6/site-packages/keyring/util/__init__.py", line 33, in suppress_exceptions for callable in callables: File "/usr/lib/python3.6/site-packages/keyring/util/properties.py", line 26, in __get__ return self.fget.__get__(None, owner)() File "/usr/lib/python3.6/site-packages/keyring/backend.py", line 68, in viable cls.priority File "/usr/lib/python3.6/site-packages/keyring/util/properties.py", line 26, in __get__ return self.fget.__get__(None, owner)() File "/usr/lib/python3.6/site-packages/keyring/backends/SecretService.py", line 40, in priority bus = secretstorage.dbus_init() File "/usr/lib/python3.6/site-packages/secretstorage/__init__.py", line 37, in dbus_init connection = connect_and_authenticate() File "/usr/lib/python3.6/site-packages/jeepney/integrate/blocking.py", line 102, in connect_and_authenticate conn = DBusConnection(sock) File "/usr/lib/python3.6/site-packages/jeepney/integrate/blocking.py", line 40, in __init__ hello_reply = self.bus_proxy.Hello() File "/usr/lib/python3.6/site-packages/jeepney/integrate/blocking.py", line 84, in inner return self._connection.send_and_get_reply(msg) File "/usr/lib/python3.6/site-packages/jeepney/integrate/blocking.py", line 67, in send_and_get_reply self.recv_messages() File "/usr/lib/python3.6/site-packages/jeepney/integrate/blocking.py", line 55, in recv_messages b = self.sock.recv(4096) KeyboardInterrupt I've tried removing the python3-keyring dependency and it seems to proceed. I've also tried an older version of python3-secretstore with some success. We currently have version 3.1.1 of python3-secretstore and downgrading to 2.3.1 (which we have downstream) seems to prevent the hanging. Upgrading python3-secretstore to the latest version (along with the latest version of jeepney) did not help. If the container-image-prepare also includes keystoneclient (which it might via openstackclient), that would also explain the hang there.