Re: [Openstack] booting from volume

Okay, I created the spec page on the wiki and liked it from the blueprints page. http://wiki.openstack.org/BootFromVolume On Tue, Apr 19, 2011 at 01:23:44AM +0900, Isaku Yamahata wrote: > On Mon, Apr 18, 2011 at 11:49:56AM -0400, Chuck Short wrote: > > > Thanks for doing this. This is something

[Openstack] kvm pause/suspend

Hi, Does anyone who is planning to implement kvm-pause/kvm-suspend? Currently, "nova pause(unpause) id" or "nova suspend(resume) id" works only for xenserver. If nobody has a plan, NTT Data would like to contribute. Xenserver's pause/suspend might be slightly different from KVM's, but accordin

Re: [Openstack] Proposing an Identity Service in OpenStack (a.k.a. Auth)

It's indeed practical but there are some shortcomings. Ping me off thread for any details. For the record, I was responsible for the signing implementation in EC2 and for the AuthN/AuthZ design for the Opscode platform (hosted Chef) and I'm looking forward to this conversation at the summit as well

Re: [Openstack] Proposing an Identity Service in OpenStack (a.k.a. Auth)

Yes, token auth and HTTP basic w/ SSL ended up being good options: http://bazaar.launchpad.net/~khussein/swift/authn/revision/143/swift/auth/basicauth.py Open to other suggestions if anyone has an elegant Anyscale auth solution. Thanks - Z On Apr 18, 2011, at 12:15 PM, Eric Day wrote: > Look

Re: [Openstack] Proposing an Identity Service in OpenStack (a.k.a. Auth)

On Mon, Apr 18, 2011 at 12:15 PM, Eric Day wrote: > We'll also want to decide if we need a default mechanism for > OpenStack deployments, and if so, what should it be. We had a > discussion previously and I think it was somewhere between token > and HTTP basic w/ SSL. The reason for this is we nee

Re: [Openstack] Proposing an Identity Service in OpenStack (a.k.a. Auth)

Good and valid points, Here are my thoughts: a) delegation would be what we're looking to do with nova and zones right now as per Sandy's note: http://wiki.openstack.org/FederatedAuthZwithZones. Oauth 2.0 has been proposed as a more complete solution eventually. b) yes. c) yes. http://wiki.opens

[Openstack] OpenStack Conference and Design Summit is OPEN EVENT - Overflow Policy and Process

Next week is the OpenStack Conference and Design Summit sponsored by Citrix in Santa Clara, CA at the Hyatt Regency. For those of you who have been following the registration saga, we originally planned a 350 attendee event based on the Fall event in San Antonio with 250 attendees; however demand f

[Openstack] Public Conduct of Project Humans

I am going to make every attempt to tread lightly and ruffle no feathers, while making a detached John Q. Public observation of how things look from the outside. After that, I have a suggestion. I have not been internally involved with OpenStack since January, however, I still hold a strong inter

Re: [Openstack] Floating IP in OpenStack API

Perhaps I misunderstood. I thought option #3 consisted of adding new http resources to the openstack api to expose the add/allocate/associate/etc floating ip functionality to the api consumer. If that is the case, I believe it would be a break with the cloud servers 1.0 api, where a customer

Re: [Openstack] Enhancements to Glance in Diablo? Input welcomed

Hi Jesse! Comments inline :) On Sun, Apr 17, 2011 at 6:26 PM, Jesse Andrews wrote: > * There is lots of work/conversations around auth.  Rather than attempt to > boil the ocean and "fix" authn/authz at once, we are thinking of taking a > phased approach (1-2 week chunks of contained work to mul

Re: [Openstack] LinuxCon North America Speaking Deadline

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Stephen Spector wrote: > Developers: > > I wanted to see if anyone is planning to present on OpenStack at this > event in August? Thanks. > > I submitted a paper on using OpenStack with Puppet. Regards James Turnbull - -- Author of: * Pro Puppe

Re: [Openstack] Floating IP in OpenStack API

I like the simple solution (#3) as well. It gets parity for the APIs while leaving more advanced topics for the NaaS discussions. -- Sent from my Tandy 1000sx Jesse Andrews anotherje...@gmail.com On Apr 18, 2011, at 11:36 AM, Trey Morris wrote: > Appears my response got lost somehow. I vote

Re: [Openstack] Floating IP in OpenStack API

Appears my response got lost somehow. I vote for #3 as it's the most configurable (and affects nothing contrariwise). In addition to believing we use flags too often, I don't think having a flag solves the problem very well. A couple of examples show why: you want a few instances having floating IP

[Openstack] LinuxCon North America Speaking Deadline

Developers: I wanted to see if anyone is planning to present on OpenStack at this event in August? Thanks. LinuxCon North America ­ August 17-19, 2011 Deadline: April 22, 2011 http://events.linuxfoundation.org/events/linuxcon Topics: * Linux on mobile devices (smart phones, tablets, etc.) * Op

Re: [Openstack] Proposing an Identity Service in OpenStack (a.k.a. Auth)

Looks good! I'm looking forward to the summit discussions. Beyond pluggable backends, I would make sure other layers remain pluggable as well (the auth mechanism, protocols to verify, etc). The use cases I have in mind are: * All common forms of HTTP auth. * OpenID, OAuth, and any other open initi

Re: [Openstack] booting from volume

On Mon, Apr 18, 2011 at 11:49:56AM -0400, Chuck Short wrote: > Thanks for doing this. This is something that our users would love to > have I think. I proposed a similar specification for the design summit > would you like to work together? Yes, off course. And we can discuss on it at the summit.

Re: [Openstack] booting from volume

On Sun, 17 Apr 2011 01:48:49 +0900 Isaku Yamahata wrote: > Hi. I've implemented the basic support for boot from volume > and uploaded lp:~yamahata/nova/boot-from-volume > blue print: > https://blueprints.launchpad.net/nova/+spec/boot-from-volume > Adam Johnson, do you have any progress? > > With

Re: [Openstack] Proposing an Identity Service in OpenStack (a.k.a. Auth)

Ziad,    Excellent, a separate authC/authZ service is a good idea. And I can see that you have built-in extensibility - an important aspect for enterprise deployments. Couple of quick thoughts:    a)    Would the lightweight delegation include delegated administration as well as operational role ? 

Re: [Openstack] Proposing an Identity Service in OpenStack (a.k.a. Auth)

Excellent ... timely and much needed! For completeness here is the link to Zone AuthZ requirements: http://wiki.openstack.org/FederatedAuthZwithZones Look forward to helping out where I can. -S From: openstack

[Openstack] Proposing an Identity Service in OpenStack (a.k.a. Auth)

Hi Everyone, For OpenStack to achieve the goal of being a "massively scalable cloud operating system", it needs a common approach to some of the problems that an "operating system"deals with such as Authentication (auth-n) and Authorization (auth-z). There has been much discussion on the topic

Re: [Openstack] Floating IP in OpenStack API

Mark, approach #1 implementation is here: https://code.launchpad.net/~openstack-gd/nova/auto-float-ip. I saw that you interested in approach #3 too. May be you have some ideas of specification of API for approach #3? Erik, there is implementation of floating ips in Nova. In implementation of appr

Re: [Openstack] help

On 04/18/2011 12:43 PM, abbou khalid wrote: hi gays, can we use a Vertial Machine of ubuntu to make projest with Openstack or we must have a real system?? Hey, yeah you can! Check this out: http://wiki.openstack.org/NovaVirtually ___ Mailing list

[Openstack] help

hi gays, can we use a Vertial Machine of ubuntu to make projest with Openstack or we must have a real system?? thanks, -- *Abbou Khalid * *Etudiant en 3ème année du cycle d'ingénieurs d'Etat Institut National des Postes et Télécommunications INPT - Rabat - Maroc* *E-mail: abbou.khali...@gmail.c

[Openstack] Logic for putting project_id on volume

Hi guys I'm doing this rough code to list the volumes by project: volumes = db.volume_get_all_by_project(ctxt, project) for v in volumes: print v.name, v.user_id, v.project_id However, I get this odd result: root@dormammu-VirtualBox:/home/dormammu/src/nova/lp731341/bin# euca-create-volume

Re: [Openstack] Daemon files packaged in the wrong folder, man pages

2011/4/18 Thomas Goirand : > On 04/18/2011 05:44 AM, Soren Hansen wrote: >> 2011/4/17 Thomas Goirand : >>> In my Debian packaging, I've written few man pages, because it's >>> forbidden in Debian to package things in /usr/bin or /usr/sbin without >>> them. >> I think "forbidden" is a bit of an exag