Re: [Openstack-doc-core] Core Team Review - August 2016

2016-08-02 Thread Russell Bryant
On Mon, Aug 1, 2016 at 10:24 PM, Lana Brindley <openst...@lanabrindley.com> wrote: > Hi core team, > > I was all set to do the core team review today, but it seems the Russell > Bryant stats have gone offline. I'll try again tomorrow, and if they're > still down then I'll use

[Openstack] [Nova] Deprecation of nova-network deferred to Icehouse

2013-07-26 Thread Russell Bryant
at this point. Thanks, [1] https://blueprints.launchpad.net/nova/+spec/deprecate-nova-network -- Russell Bryant Nova PTL ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net

Re: [Openstack] DHCP lease not accepted when libvirt_use_virtio_for_bridges=true

2013-03-20 Thread Russell Bryant
On 03/20/2013 04:43 PM, Lorin Hochstein wrote: iptables -D POSTROUTING -t mangle -p udp --dport 68 -j CHECKSUM --checksum-fill Are you *sure* this rule was applied to the traffic in question? It really sounds like you were hitting this issue ... -- Russell Bryant

[Openstack] [OSSA-2013-006] VNC proxy can connect to the wrong VM (CVE-2013-0335)

2013-02-26 Thread Russell Bryant
=2013-0335 https://bugs.launchpad.net/nova/+bug/1125378 - -- Russell Bryant OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.13 (GNU/Linux) Comment: Using GnuPG with Thunderbird - http://www.enigmail.net

Re: [Openstack] Potential security issue with CHAP

2012-11-29 Thread Russell Bryant
). -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

[Openstack] [OSSA 2012-017.1] Authentication bypass for image deletion (CVE-2012-4573, CVE-2012-5482) ERRATA 1

2012-11-09 Thread Russell Bryant
-09 - Errata 1 - Updated to reflect that the v2 API in Folsom and Grizzly was also affected - Include links to fixes for the v2 API - Added CVE-2012-5482 for the vulnerability against the v2 API 2012-11-07 - Original Version - -- Russell Bryant OpenStack Vulnerability Management Team

[Openstack] Upcoming Improvements to Security Patch Handling

2012-11-09 Thread Russell Bryant
for vulnerabilities are complete and that getting them merged on release day should not run into unexpected problems. Thank you, - -- Russell Bryant OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http

[Openstack] FOSDEM 2013: Cloud Devroom - Call for Participation

2012-11-08 Thread Russell Bryant
Greetings, The organizers of the Cloud devroom at FOSDEM 2012 invite you to submit a session proposal. The purpose of this devroom is to serve as a meeting point for cloud infrastructure projects, including a unique opportunity for discussion and collaboration between developers from different

Re: [Openstack] (Important Updates) [OSSA 2012-017] Authentication bypass for image deletion (CVE-2012-4573)

2012-11-08 Thread Russell Bryant
On 11/07/2012 05:09 PM, Russell Bryant wrote: OpenStack Security Advisory: 2012-017 CVE: CVE-2012-4573 Date: November 7, 2012 Title: Authentication bypass for image deletion Impact: High Reporter: Gabe Westmaas (Rackspace) Products: Glance Affects: Essex, Folsom, Grizzly Description

[Openstack] [OSSA 2012-017] Authentication bypass for image deletion (CVE-2012-4573)

2012-11-07 Thread Russell Bryant
://cve.mitre.org/cgi-bin/cvename.cgi?name=2012-4573 https://bugs.launchpad.net/glance/+bug/1065187 Notes: This fix will be included in the grizzly-1 development milestone and in a future 2012.2 (Folsom) release. -- Russell Bryant OpenStack Vulnerability Management Team

Re: [Openstack] nova-volumes doesn't exist

2012-11-01 Thread Russell Bryant
would do some reading on the topic to gain a better understanding of LVM... If you're just doing basic testing, you can use this little hack: $ sudo truncate --size 20G ~/nova-volumes $ sudo losetup -fv ~/nova-volumes $ sudo vgcreate nova-volumes /dev/loop0 -- Russell Bryant

Re: [Openstack] new mailing list for bare-metal provisioning

2012-10-28 Thread Russell Bryant
group once it is submitted there. Why not use a subject prefix instead ? Like [baremetal] ? A huge +1. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https

Re: [Openstack] new mailing list for bare-metal provisioning

2012-10-28 Thread Russell Bryant
new development effort would be a nightmare to keep up with. I *really, really* think the list should be dropped and all discussions should be on openstack-dev. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack

Re: [Openstack] Tracking triage statistics

2012-10-25 Thread Russell Bryant
the reporter == triager. Developers filing bugs and triaging them for their own patches shouldn't be counted. You should move this to github so I can send you a pull request. :-) -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack

Re: [Openstack] Cinder Support for RHEL ?

2012-10-11 Thread Russell Bryant
of our instructions for the Fedora test day, which included testing out Cinder: https://fedoraproject.org/wiki/Test_Day:2012-09-18_OpenStack -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack

Re: [Openstack] Versioning for notification messages

2012-10-10 Thread Russell Bryant
. To be more specific, there is no stable API *in OpenStack* for consuming notifications. It's certainly possible to consume them. That is the whole point. The original use cases were for applications outside of OpenStack. -- Russell Bryant ___ Mailing list

Re: [Openstack] Sync of Cinder drivers to Nova-volume for Folsom

2012-10-02 Thread Russell Bryant
/. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

[Openstack] [OSSA 2012-016] Token authorization for a user in a disabled tenant is allowed (CVE-2012-4457)

2012-09-28 Thread Russell Bryant
://cve.mitre.org/cgi-bin/cvename.cgi?name=2012-4457 https://bugs.launchpad.net/keystone/+bug/988920 -- Russell Bryant OpenStack Vulnerability Management Team ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net

[Openstack] [OSSA 2012-015] Some actions in Keystone admin API do not validate token (CVE-2012-4456)

2012-09-28 Thread Russell Bryant
/openstack/keystone/commit/24df3adb3f50cbb5ada411bc67aba8a781e6a431 References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2012-4456 https://bugs.launchpad.net/keystone/+bug/1006815 https://bugs.launchpad.net/keystone/+bug/1006822 - -- Russell Bryant OpenStack Vulnerability Management Team

Re: [Openstack] AMQP---2 queues for nova-compute?

2012-09-17 Thread Russell Bryant
processes each scheduler request. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] Cells Status

2012-09-14 Thread Russell Bryant
details, it also desperately needs some documentation (ideally both architectural, as well as how to use it). It seems like we should be able to get this all wrapped up for Grizzly, though. -- Russell Bryant ___ Mailing list: https://launchpad.net

[Openstack] TC Candidacy

2012-09-14 Thread Russell Bryant
Thank you! -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] Packaging Horizon

2012-09-14 Thread Russell Bryant
this back when the LESS support was merged. The compromise was that we would work with the Horizon developers on shipping a compiled stylesheet in our package. As for the detailed mechanics of doing so, I don't know. :-) https://lists.launchpad.net/openstack/msg12373.html -- Russell Bryant

Re: [Openstack] Future of Launchpad OpenStack mailing list (this list)

2012-09-13 Thread Russell Bryant
appealing to me. +1 -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] [Openstack-announce] [OSSA 2012-014] Revoking a role does not affect existing tokens (CVE-2012-4413)

2012-09-12 Thread Russell Bryant
problems around token expiration, though. For reference: https://lists.launchpad.net/openstack/msg15164.html - -- Russell Bryant -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net

Re: [Openstack] Future of Launchpad OpenStack mailing list (this list)

2012-09-12 Thread Russell Bryant
of openstack@, openstack-dev@, and openstack-announce@. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net

Re: [Openstack] OpenStack devroom for FOSDEM 2013

2012-09-10 Thread Russell Bryant
! I'm also happy to help organize. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

[Openstack] [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3542)

2012-08-30 Thread Russell Bryant
Essex (2012.1) release. - -- Russell Bryant OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlA/glMACgkQFg9ft4s9SAYMLACfdRBaonUw/CendCSy2gZh5hxw

Re: [Openstack] [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3540)

2012-08-30 Thread Russell Bryant
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This advisory included the wrong CVE. It was CVE-2012-3540. Sorry about that. On 08/30/2012 11:10 AM, Russell Bryant wrote: OpenStack Security Advisory: 2012-012 CVE: CVE-2012-3542 This should have been CVE-2012-3540 Date: August 30, 2012 Title

[Openstack] [OSSA 2012-013] Keystone, Lack of authorization for adding users to tenants (CVE-2012-3542)

2012-08-30 Thread Russell Bryant
(2012.1) release. - -- Russell Bryant OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iEYEARECAAYFAlA/iZEACgkQFg9ft4s9SAZ0zQCeKEqxWbDFum/f6l00H0x6FL2L QEEAn3eer5owk4

Re: [Openstack] Making the RPC backend a required configuration parameter

2012-08-09 Thread Russell Bryant
in openstack-common, so addressing this later will only create additional technical debt. I don't feel that it's something that ever *needs* to be addressed, so it's not technical debt. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post

Re: [Openstack] [openstack-dev] Making the RPC backend a required configuration parameter

2012-08-09 Thread Russell Bryant
this single configuration option. Existing installations that did not specify rpc_backend because they did not need to will break if the default is changed. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack

Re: [Openstack] 回复: 回复: 回复: [openstack] nova-compute always dead on RHEL6.1

2012-07-25 Thread Russell Bryant
. If the Qpid broker was running, but nova was configured to use impl_kombu, I would not expect it to work. Once nova was configured to use the right driver for this setup (impl_qpid), it worked, so I don't think there are any bugs here. -- Russell Bryant

Re: [Openstack] [openstack-dev] High Available queues in rabbitmq

2012-07-25 Thread Russell Bryant
that nova has a copy-paste of openstack-common inside it, should I just mirror the changes to nova once they're accepted in openstack-common? I'm cc'ing Russell Bryant because he originally created the openstack-common module. First you get the change accepted into openstack-common. Then, you use

Re: [Openstack] [nova] Proposal to add Padraig Brady to nova-core

2012-07-18 Thread Russell Bryant
! -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] [nova] Proposal to add Yun Mao to nova-core

2012-07-18 Thread Russell Bryant
/#/dashboard/1711 +1 -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] Stackato and OPenStack as PAAS

2012-07-16 Thread Russell Bryant
in advance for :) Sent from my digital shackles. [1] https://github.com/hub-cap/reddwarf_lite [2] https://github.com/platformlayer/platformlayer [3] http://heat-api.org/ Check out OpenShift Origin: https://openshift.redhat.com/community/open-source/ -- Russell Bryant

Re: [Openstack-doc-core] [Openstack-docs] Troubleshooting docs: in one chapter or across multiple chapters?

2012-07-12 Thread Russell Bryant
it is. However, I still think it makes more sense to have it in the Networking chapter. Once someone gets finished troubleshooting their networking problem, they would likely be interested in reviewing other information on the networking topic rather than other unrelated troubleshooting bits. -- Russell

Re: [Openstack] [Openstack-Common] RPC

2012-07-11 Thread Russell Bryant
, it was probably just a failure to 'git add' everything. However, if you guys discover a problem with update.py not copying everything, please report it against openstack-common so we can fix it up. -- Russell Bryant ___ Mailing list: https://launchpad.net

Re: [Openstack] [Openstack-Common] RPC

2012-07-10 Thread Russell Bryant
rpc to openstack-common.conf, and then run the update.py tool in openstack-common, it should pull in everything. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https

Re: [Openstack] compute_rpcapi ?

2012-07-02 Thread Russell Bryant
/proxy.py Here is one of the simpler conversions: https://github.com/openstack/nova/commit/f50ce35c9cf2e05d205485586da1cb6d5433ba56 -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe

Re: [Openstack] best practices for merging common into specific projects

2012-07-02 Thread Russell Bryant
guidelines. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] Diagnosing RPC timeouts when attaching volumes

2012-06-21 Thread Russell Bryant
when nova-compute is trying to do an rpc call to nova-volume. It looks like this is just the compute log. Do you have an error in the volume log? -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack

Re: [Openstack] RPC Semantics

2012-06-12 Thread Russell Bryant
for pointing it out! -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] [OSSA 2012-007] Security groups fail to be set correctly (CVE-2012-2654)

2012-06-11 Thread Russell Bryant
/bbdf82c5ec3e31a5dc43948291c4f37ce1098714 Essex: https://github.com/openstack/nova/commit/3ee026e4252cd4140b50675e857695b195ab5065 Diablo: https://review.openstack.org/#/c/8239/ Thanks, -- Russell Bryant OpenStack Vulnerability Management Team On 06/06/2012 03:47 PM, Russell Bryant wrote: OpenStack Security

Re: [Openstack] Openstack not using AMQP RPC reply-to property

2012-06-08 Thread Russell Bryant
. In any case, this sounds like a reasonable improvement. Patches welcome. :-) -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help

[Openstack] [OSSA 2012-007] Security groups fail to be set correctly (CVE-2012-2654)

2012-06-06 Thread Russell Bryant
://review.openstack.org/#/c/8239/ Notes: This fix will be included in the folsom-2 development milestone and in future essex and diablo releases. -- Russell Bryant OpenStack Vulnerability Management Team ___ Mailing list: https://launchpad.net/~openstack Post

Re: [Openstack] Yahoo! is expanding its Virtualization Operations team!

2012-06-06 Thread Russell Bryant
On 06/06/2012 07:08 PM, James R Penick wrote: Hey Folks, snip Check out: http://openstack.org/community/jobs/ -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https

Re: [Openstack] cfg usage - option registration, global objects

2012-06-05 Thread Russell Bryant
On 06/05/2012 05:35 PM, Russell Bryant wrote: On 06/05/2012 05:25 PM, Mark Washenberger wrote: Mark McLoughlin mar...@redhat.com said: On Tue, 2012-06-05 at 12:21 -0400, Mark Washenberger wrote: http://wiki.openstack.org/CommonLibrary#Incubation Once an api is in incubation, if you make

Re: [Openstack] Question on nova disk injection...

2012-06-05 Thread Russell Bryant
, then it has to be run with nova-rootwrap. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] cfg usage - option registration, global objects

2012-05-31 Thread Russell Bryant
, the Heat project, at least), so moving it as is will leave us in a better spot than we are now. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack

Re: [Openstack] Nova-compute doesn't start on reboot, only manually

2012-05-29 Thread Russell Bryant
message queues. I'm tempted to just write a patch that does #1 for now to address the immediate issue and then do something better later if we come up with something. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post

Re: [Openstack-community] [Openstack] New layout of the OpenStack mailing lists

2012-05-25 Thread Russell Bryant
On 05/25/2012 04:00 PM, Stefano Maffulli wrote: On Fri 25 May 2012 11:03:40 AM PDT, Russell Bryant wrote: We have been posting security advisories to the main mailing list. I'm interested to understand why you've done that. The announce list has always existed, but nobody uses it. For me

Re: [Openstack] Nodejs in horizon

2012-05-25 Thread Russell Bryant
that you really just can't accomplish using Python? -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net

Re: [Openstack] New layout of the OpenStack mailing lists

2012-05-25 Thread Russell Bryant
of pepole since it's such a high volume list. Using the announce list would be great for those. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack

Re: [Openstack] New layout of the OpenStack mailing lists

2012-05-25 Thread Russell Bryant
On 05/25/2012 04:00 PM, Stefano Maffulli wrote: On Fri 25 May 2012 11:03:40 AM PDT, Russell Bryant wrote: We have been posting security advisories to the main mailing list. I'm interested to understand why you've done that. The announce list has always existed, but nobody uses it. For me

Re: [Openstack] Nodejs in horizon

2012-05-25 Thread Russell Bryant
.) -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] Nodejs in horizon

2012-05-24 Thread Russell Bryant
for use with RHEL and its derivatives). https://bugzilla.redhat.com/show_bug.cgi?id=815018 -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More

Re: [Openstack] Nodejs in horizon

2012-05-24 Thread Russell Bryant
at present. That would sure save us a lot of headaches if we could make that work. :-) -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help

Re: [Openstack] Where is the blueprint move nova.rpc into openstack.common.rpc if any?

2012-05-23 Thread Russell Bryant
: https://lists.launchpad.net/openstack/msg11325.html What has changed since then: 1) I got rid of nova.exception usage. 2) I got rid of nova.utils usage. What's left: 1) Get rid of nova.context and nova.log usage 2) Move rpc options that are in nova/flags.py into the rpc code. -- Russell

Re: [Openstack] [nova] why does notification use a topic exchange instead of fanout?

2012-05-09 Thread Russell Bryant
of duplicating the message as opposed to making nova send the message multiple times. Perhaps using another exchange would make sense if it made ACLs easier for ensuring that an application can only get notifications, and nothing else on the nova exchange. -- Russell Bryant

Re: [Openstack] [nova] why does notification use a topic exchange instead of fanout?

2012-05-09 Thread Russell Bryant
consumers from that queue. Only one consumer gets each message. When there is more than one consumer from the same queue, messages will be distributed in a round-robin fashion. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post

Re: [Openstack] Moving nova.rpc into openstack.common

2012-05-08 Thread Russell Bryant
On 05/07/2012 04:08 PM, Russell Bryant wrote: On 05/07/2012 03:40 PM, Doug Hellmann wrote: The metering project will probably want to take advantage of this work. How far along is it, and how can we help? I can speak to the nova.rpc part, at least. I've been working on it some with hopes

Re: [Openstack] [Nova] Blueprints for Folsom

2012-05-08 Thread Russell Bryant
://blueprints.launchpad.net/nova/+spec/no-db-compute -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

[Openstack] getting started with rpc

2012-05-08 Thread Russell Bryant
me know if you have any questions! -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] [nova] why does notification use a topic exchange instead of fanout?

2012-05-08 Thread Russell Bryant
of a certain priority. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] [nova] why does notification use a topic exchange instead of fanout?

2012-05-08 Thread Russell Bryant
everything, and that's it. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] fake_flags + common breakout

2012-05-04 Thread Russell Bryant
on the implementation/driver side, but cleaner on the unit tests. This is basically what 'fake_rabbit' is now, anyway. As far as I can tell, this isn't actually a problem with the uses of fake_flags right now. What problem did you hit? -- Russell Bryant

Re: [Openstack] fake_flags + common breakout

2012-05-04 Thread Russell Bryant
On 05/04/2012 12:08 PM, Russell Bryant wrote: On 05/04/2012 11:53 AM, Eric Windisch wrote: Russell, FYI, with the flags patch, it is no longer possible to set rpc-implementation dependent flags in fake_flags. Even Rabbit has a flag in there (fake_rabbit), but Rabbit flags are currently

Re: [Openstack] fake_flags + common breakout

2012-05-04 Thread Russell Bryant
* unit tests. I would just register your flags in your unit tests. https://github.com/openstack/nova/blob/master/nova/tests/rpc/test_qpid.py#L69 It's kind of a hack, but hopefully we can kill this whole register_opts() thing eventually anyway, as I mentioned in another message. -- Russell

Re: [Openstack] fake_flags + common breakout

2012-05-04 Thread Russell Bryant
was added during Essex development. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

[Openstack] [OSSA 2012-006] Horizon session fixation and reuse

2012-05-04 Thread Russell Bryant
and in a future 2012.1 (essex) release. - -- Russell Bryant OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAk+kdO0ACgkQFg9ft4s9SAYLsgCgptN3zZrEpOCPsbbSfPiPz7J5

Re: [Openstack] [Nova] RPC API Versioning Prototype

2012-05-03 Thread Russell Bryant
On 04/30/2012 06:31 PM, Russell Bryant wrote: The code is in this branch: https://github.com/russellb/nova/tree/bp/versioned-rpc-apis The best place to start is in this doc: https://github.com/russellb/nova/blob/bp/versioned-rpc-apis/README-versioned-rpc-apis.rst I've started

Re: [Openstack] [Nova] RPC API Versioning Prototype

2012-05-01 Thread Russell Bryant
if it could handle it properly. Thanks for the feedback! -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https

[Openstack] [Nova] RPC API Versioning Prototype

2012-04-30 Thread Russell Bryant
, -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] rpc APIs (was: Canonical AWSOME)

2012-04-25 Thread Russell Bryant
implementation specific to zeromq that could make better use of that messaging model. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help

Re: [Openstack] rpc APIs

2012-04-25 Thread Russell Bryant
is going to be popping messages off of other non-notification queues. I haven't written a ZeroMQ notifier yet, figuring that task would be better delayed until the move to openstack-common. Yep, fair enough. -- Russell Bryant ___ Mailing list: https

Re: [Openstack] Canonical AWSOME

2012-04-24 Thread Russell Bryant
be some datetime related problems lurking in there, but we need to fix them as they come up. If it causes a problem for you, it's likely a problem for the other drivers, as well. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post

Re: [Openstack] Canonical AWSOME

2012-04-24 Thread Russell Bryant
. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] Canonical AWSOME

2012-04-23 Thread Russell Bryant
, as well. Pulling it out of nova completely risks allowing the people that don't care about EC2 to care even less. It could make it easier for people to make changes that make EC2 compatibility harder to maintain. -- Russell Bryant ___ Mailing list: https

[Openstack] [OSSA 2012-005] No quota enforced on security group rules

2012-04-19 Thread Russell Bryant
/nova/+bug/969545 -- Russell Bryant OpenStack Vulnerability Management Team ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https

[Openstack] [OSSA 2012-004] XSS vulnerability in Horizon log viewer

2012-04-17 Thread Russell Bryant
: https://review.openstack.org/#/c/6621/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=2012-2094 https://bugs.launchpad.net/horizon/+bug/977944 -- Russell Bryant OpenStack Vulnerability Management Team ___ Mailing list: https

Re: [Openstack] kombu / nova bug

2012-04-17 Thread Russell Bryant
://bugs.launchpad.net/nova/+bug/974411 and found that this change makes the test pass: however, I don't know whether this is a problem on the kombu or nova side. Please advise Hey Bernhard, Are the tests using the memory transport perhaps? Yes, it's using the memory transport. -- Russell

Re: [Openstack] [OSSA 2012-004] XSS vulnerability in Horizon log viewer

2012-04-17 Thread Russell Bryant
On 04/17/2012 08:51 AM, Russell Bryant wrote: OpenStack Security Advisory: 2012-004 CVE: 2012-2094 Date: April 17, 2012 Title: XSS vulnerability in Horizon log viewer Impact: High Reporter: Matthias Weckbecker mweckbec...@suse.de Products: Horizon Affects: All versions One clarification

Re: [Openstack] Bugmail avalanche coming up ?

2012-04-04 Thread Russell Bryant
of Essex in one place. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] nova-manage error message CRITICAL nova [-] cannot import name util

2012-04-04 Thread Russell Bryant
-04-04 16:40:57 CRITICAL nova [-] cannot import name util Any idea what I do wrong? How did you do the install? Did you use packages? If so, which ones? -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post

Re: [Openstack] nova-manage error message CRITICAL nova [-] cannot import name util

2012-04-04 Thread Russell Bryant
On 04/04/2012 01:21 PM, Viktor Mauch wrote: Am 04.04.2012 18:29, schrieb Russell Bryant: On 04/04/2012 11:36 AM, Mauch, Viktor (SCC) wrote: Hi, I just install the current source code of nova, glance and python-novaclient on a CentOS 6.2 node. Running command: #nova-manage db sync Gives

Re: [Openstack] question about keystone and dashboard on RHEL6

2012-04-03 Thread Russell Bryant
On 04/02/2012 08:44 PM, Xin Zhao wrote: On 4/2/2012 6:35 PM, Russell Bryant wrote: On 04/02/2012 03:09 PM, Xin Zhao wrote: Hello, I am new to OpenStack and trying to install the diablo release on a RHEL6 cluster. I follow instructions here: http://fedoraproject.org/wiki

Re: [Openstack] Moving nova.rpc into openstack.common

2012-04-03 Thread Russell Bryant
. I know it's more than what is needed for notifications, but it does support what is needed for notifications (and more). I like the idea of moving the whole thing instead of having separate messaging code for just notifications. -- Russell Bryant On 04/03/2012 09:20 AM, Swaminathan

Re: [Openstack] Moving nova.rpc into openstack.common

2012-04-03 Thread Russell Bryant
On 04/03/2012 10:38 AM, Mark McLoughlin wrote: Hey Russell, On Mon, 2012-04-02 at 16:26 -0400, Russell Bryant wrote: Greetings, There was a thread on this list a little while ago about moving the notification drivers that are in nova and glance into openstack.common since they provide

Re: [Openstack] Moving nova.rpc into openstack.common

2012-04-03 Thread Russell Bryant
On 04/03/2012 12:23 PM, Jay Pipes wrote: On 04/03/2012 09:36 AM, Russell Bryant wrote: Thanks for sharing this information. For the future, I think this type of analysis and discussion is something that is great to have on the mailing list instead of just a private group. I wish I had seen

[Openstack] Moving nova.rpc into openstack.common

2012-04-02 Thread Russell Bryant
impl_kombu? Thoughts? Thanks, -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] Moving nova.rpc into openstack.common

2012-04-02 Thread Russell Bryant
I just threw up a patch a little while ago: https://review.openstack.org/6119 -- Russell Bryant On 04/02/2012 06:37 PM, Chris Behrens wrote: Seems like a sensible plan. Carrot can go now. I marked it deprecated so we can remove in folsom. I can take care of this today, even. On Apr 2

Re: [Openstack] question about keystone and dashboard on RHEL6

2012-04-02 Thread Russell Bryant
update EPEL6 to Essex, which should be within the next few weeks, horizon will be included as well. -- Russell Bryant ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net

[Openstack] [OSSA 2012-003] Long server names grow nova-api log files significantly (CVE-2012-1585)

2012-03-29 Thread Russell Bryant
will be included in the Essex rc2 development milestone and in a future Diablo release. -- Russell Bryant OpenStack Vulnerability Management Team ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https

[Openstack] [OSSA 2012-002] Extremely long passwords can crash Keystone (CVE-2012-1572)

2012-03-27 Thread Russell Bryant
/+bug/957359 Notes: This fix will be included in the Essex rc2 development milestone and in a future Diablo release. - -- Russell Bryant OpenStack Vulnerability Management Team -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http

Re: [Openstack] [OSSA 2012-002] Extremely long passwords can crash Keystone (CVE-2012-1572)

2012-03-27 Thread Russell Bryant
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/27/2012 02:56 PM, Russell Bryant wrote: Notes: This fix will be included in the Essex rc2 development milestone Correction: This fix is actually already in the current RC1 for Essex. Thanks, - -- Russell Bryant -BEGIN PGP SIGNATURE

Re: [Openstack] Running code on instance start/terminate

2012-03-26 Thread Russell Bryant
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/26/2012 11:48 AM, Russell Bryant wrote: On 03/26/2012 10:15 AM, Rogério Vinhal Nunes wrote: Hello, I'm developing a application to work along with openstack. My application needs to keep track of all instances being started or terminated

Re: [Openstack] Caching strategies in Nova ...

2012-03-23 Thread Russell Bryant
polling, but we could ratchet down rate limits to encourage users to use the callback mechanism. Of course, then there's the problem of, what if the user is behind a firewall or some sort of NAT... :/ Long polling is always an option. Or WebSockets. -- Russell Bryant

Re: [Openstack] GSoC 2012 Organization Application

2012-03-16 Thread Russell Bryant
On 03/09/2012 11:55 AM, Russell Bryant wrote: Greetings, Anne and I just completed the organization application. The list of accepted organizations will be announced on March 16. OpenStack was not selected to participate in GSoC 2012. Thanks to those that volunteered. Maybe next year

  1   2   >