Deploy the Simple VM template with OpenTofu

Stand up a volume-backed Ubuntu instance on a private network with one floating IP using the validated OpenTofu template simple-vm. The stack wires Compute (Nova), Network (Neutron), and Block Storage (Cinder) for a boot-from-volume instance behind a router, security group, and public IP.

Prerequisites#

You need:

• A Quake AI account with application credentials and an SSH key pair already uploaded to the project
• OpenTofu 1.6.0 or later (installation guide)
• OpenStack credentials sourced into the shell (source openrc.sh). See the OpenStack CLI guide.
• A copy of the simple-vm template from the template reference page

Step 1: Configure variables#

Copy terraform.tfvars.example to terraform.tfvars and set key_name to an existing key pair in your project:

key_name = "YOUR_KEY_NAME"

Replace YOUR_KEY_NAME with the name shown in the Console under Compute > Key Pairs, or returned by openstack keypair list.

Defaults for flavor, image, network names, and CIDR are documented on the template reference page. Override them in terraform.tfvars when your project uses different names.

Step 2: Apply the template#

From the template directory, run:

tofu init
tofu plan
tofu apply

Type yes when prompted. Provisioning takes a few minutes while Neutron wires the router and Nova builds the boot volume.

When the run finishes, note floating_ip, instance_id, and private_ip from the outputs.

Step 3: Verify SSH access#

Connect as ubuntu through the floating IP with the private key that matches key_name:

ssh -i YOUR_PRIVATE_KEY_PATH ubuntu@$(tofu output -raw floating_ip)

Accept the host key prompt on first connect. A remote shell confirms the security group, router, and floating IP association work together.

Optional: send an HTTP request to port 80. The security group allows it even though this deployment does not install a web server:

curl -I --connect-timeout 5 http://$(tofu output -raw floating_ip)

A connection timeout or refusal is expected without a listener; the check only confirms the floating IP routes to the instance.

Next steps#

• Simple VM with Floating IP template
• S3 Storage with ACLs template
• Media streaming and AI inference and RAG solution patterns that compose this template

Clean up#

Run tofu destroy from the project directory when finished. Type yes to confirm. Verify in the Console that the instance, boot volume, router, private network, security group, and floating IP are gone.