Re: [Openstack] Using Nova APIs from Javascript: possible?

2012-04-26 Thread javier cerviño
Hi all, I'm glad to hear that there's a lot of interest in the implementation of Openstack JavaScript clients. Actually, in my group we're developing a single page application developed entirely in JavaScript, that widely supports Nova and Keystone APIs. This work is part of a European Project

Re: [Openstack] Nova and external NFS

2012-04-26 Thread Sergio Ariel de la Campa Saiz
Hi Jorge: These are the permissions when instances are created locally in the Nova server (not using NFS). User nova is the owner of instance directory. The instance is created using the web interface (Horizon dashboard). In the NFS server there is no user named nova. Any file or folder created

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Daniel P. Berrange
On Wed, Apr 25, 2012 at 06:14:22PM -0700, Justin Santa Barbara wrote: How does everyone build OpenStack disk images? The official documentation describes a manual process (boot VM with ISO), which is sub-optimal in terms of repeatability / automation / etc. I'm hoping we can do better! I

Re: [Openstack] Pending reviews

2012-04-26 Thread Michael Still
On 26/04/12 02:28, Mandar Vaze / मंदार वझे wrote: It would be great if someone can spare some time to have a look at these : https://review.openstack.org/#/c/6451/ : I've addressed comments from first review cycle - Second patch set needs to be reviewed and approved

[Openstack] questions about IP addressing and network config

2012-04-26 Thread Jimmy Tsai
Hi everyone, I'm running with Essex 2012.1, and have some questions about the nova network operation, 1. Is it possible manually assigned IP address to a launched instance, my situation is : after instance boot up (OS: CentOS 6.2), I changed the /etc/sysconfig/network-scripts/ifcfg-eth0

Re: [Openstack] Quantum Integration Part 3

2012-04-26 Thread Emilien Macchi
Hi Dan, Le mercredi 25 avril 2012 à 10:54 -0700, Dan Wendlandt a écrit : Are you able to access the VM via VNC? If you statically configure the IP does it work? What happens if you run dhcpc manually? With a Debian image, I connect to the VM with VNC from dashboard, configure

Re: [Openstack] Using Foreign Keys

2012-04-26 Thread Andrew Hutchings
On 25/04/12 19:02, Doug Hellmann wrote: From a MySQL prospective that is probably more of an argument to use transactions, not foreign keys. Transactions and referential integrity are related, but not equivalent. Without referential integrity it's quite easy to commit a transaction

Re: [Openstack] Nova and external NFS [SOLVED]

2012-04-26 Thread Sergio Ariel de la Campa Saiz
Hi: First of all thanks to Jorge :-) I have solved my problem. I have a NFS server external to my Nova servers, so in NFS server there were not defined the same users that are defined in Nova servers. When I created nova group, nova user, libvirt-qemu user and kvm group with same UID and GID

Re: [Openstack] Using Nova APIs from Javascript: possible?

2012-04-26 Thread Nick Lothian
Excellent, thanks for that information Javier. It's good to know I'm not the only person doing this. On Apr 26, 2012 5:20 PM, javier cerviño jcerv...@dit.upm.es wrote: Hi all, I'm glad to hear that there's a lot of interest in the implementation of Openstack JavaScript clients. Actually, in

Re: [Openstack] Quantum Integration Part 3

2012-04-26 Thread Emilien Macchi
Hi again, After inverstigation, it finally works. I have the network on my instances in using Quantum. The fact was I've follow official OVS documentation, and you should not follow this direction : ovs-vsctl add-port br-int eth1 If you see on the logs file of OVS, you can see that the

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Lorin Hochstein
Broader question: what's the best place to capture this information? Right now, there's a chapter in the OpenStack Compute Admin Guide about images, but I'm tempted to break out a new document dedicated to creating and obtaining appropriate images that are compatible with OpenStack (or, more

[Openstack] questions about IP addressing and network config

2012-04-26 Thread Jimmy Tsai
Hi everyone, I'm running with Essex 2012.1, and have some questions about the nova network operation, 1. Is it possible manually assigned IP address to a launched instance, my situation is : after instance boot up (OS: CentOS 6.2), I changed the /etc/sysconfig/network-scripts/ifcfg-eth0 setting

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Razique Mahroua
Hey Lorin,maybe the starter guide ? since it already contains pretty much everything to discover OPS ? Nuage Co - Razique Mahrouarazique.mahr...@gmail.com Le 26 avr. 2012 à 15:10, Lorin Hochstein a écrit :Broader question: what's the best place to capture this information?Right now, there's a

Re: [Openstack] db notification support for API extension?

2012-04-26 Thread Doug Hellmann
On Wed, Apr 25, 2012 at 6:04 PM, Andrew Bogott abog...@wikimedia.orgwrote: On 4/25/12 4:48 PM, Nathanael Burton wrote: On Thu, Mar 8, 2012 at 11:53 AM, Andrew Bogottabog...@wikimedia.org wrote: I'm working on an API and implementation to support the creation of filesystems that are

Re: [Openstack] questions about IP addressing and network config

2012-04-26 Thread raja.meena
Hi , This link should help you on the multinic feature . http://docs.openstack.org/trunk/openstack-compute/admin/content/using-multi-nics.html#using-multiple-nics-usage Thanks Meena Raja From: openstack-bounces+raja.meena=wipro@lists.launchpad.net

[Openstack] Migration of Single, Dual and Multi node

2012-04-26 Thread Nicolas Odermatt
Dear OpenStack Community, is it possible to install a single-node environment and then later on upgrade it to a dual-node environment and even continue to a multi node environment ? I know that it is possible to install all the openstack components (Nova, Glance, Swift) on all nodesyou are

Re: [Openstack] Migration of Single, Dual and Multi node

2012-04-26 Thread raja.meena
Yes , possible. You need to have the respective components installed as when you progress to dual/multi node have the references(location of Glance/Swift store) corrected in nova.conf respectively. Thanks Meena Raja From: openstack-bounces+raja.meena=wipro@lists.launchpad.net

Re: [Openstack] Using VMWare ESXi with openstack

2012-04-26 Thread Vishvananda Ishaya
On Apr 25, 2012, at 7:44 PM, Michael March wrote: I just curious. Is anyone using the VMware functionality in OpenStack? I'm getting the feeling that it is more of a 'check box' thing of yeah, we have that hypervisor covered than something that's seriously being used. If my feeling is

[Openstack] openstack.common setup code

2012-04-26 Thread Monty Taylor
Hey guys, Quick follow up from the summit on things that should happen in projects from the setup module of openstack common as I understand it. (to make sure we're all on the same page) There are currently 5 essential things in openstack.common.setup: parse_requirements parse_dependency_links

Re: [Openstack] Using Foreign Keys

2012-04-26 Thread Sean Dague
On 04/25/2012 05:17 PM, Vishvananda Ishaya wrote: The main issue is when the relevant tables are moved into a separate service a la quantum or cinder. We can't keep referential integrity across multiple databases, so the foreign keys in this case need to be removed. It leads to an odd situation

Re: [Openstack] Using Foreign Keys

2012-04-26 Thread Monty Taylor
On 04/26/2012 10:14 AM, Sean Dague wrote: On 04/25/2012 05:17 PM, Vishvananda Ishaya wrote: The main issue is when the relevant tables are moved into a separate service a la quantum or cinder. We can't keep referential integrity across multiple databases, so the foreign keys in this case

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Razique Mahroua
Hi Michael,I dunno how the integration is going regarding the encrypted images, but you can if you can use encrypted images with qemu/ qemu-kvm.If your disk is an encrypted qcow2 image, by typing "cont" in the qemu/ qemu-kvm monitor, you would see something like this :QEMU 0.11.0 monitor - type

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Michael Grosser
Data left on broken disks would be unreadable. -- You don't have to worry about data destruction before selling/throwing out your disks. (That could be realized via encrypting the whole compute-node disk, but that's not quite what I want.) Another benefit would be, that you as a cloud user

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Michael Grosser
I'm looking into it, but I'm not sure if that's really how I want it to be. ;) Thanks for the hint. On Thu, Apr 26, 2012 at 6:08 PM, Razique Mahroua razique.mahr...@gmail.comwrote: Hi Michael, I dunno how the integration is going regarding the encrypted images, but you can if you can use

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Joe Breu
The oz tool that Daniel mentions makes image creation and customization pretty simple. I've created some templates for building images at github.com/rackerjoe/oz-image-buildhttp://github.com/rackerjoe/oz-image-build if anyone is interested. --- Joseph Breu Deployment Engineer Rackspace Cloud

Re: [Openstack] openstack.common setup code

2012-04-26 Thread Chuck Short
Hi, write_changelogs is really important to a distro point of view because we ship snapshots of trunk during our development cycle so informing the users whats in the snapshot is really important. chuck On Thu, 26 Apr 2012 10:12:05 -0500 Monty Taylor mord...@inaugust.com wrote: Hey guys,

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Diego Parrilla Santamaría
+1 From a security stand point I am curious what you see the benefit as? On Thu, Apr 26, 2012 at 8:53 AM, Michael Grosser d...@seetheprogress.net wrote: Hey, I'm following the openstack development for some time now and I was wondering if there was a solution to spin up encrypted

Re: [Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Jay Pipes
On 04/26/2012 11:54 AM, Lillie Ross-CDSR11 wrote: 4. However, when I try to download the same image, I receive the following error: curl -v -H 'X-Auth-Token: 45d01460a0e04bff967eb954e7f4fee8' -H 'Content-type: application/json'

Re: [Openstack] questions about IP addressing and network config

2012-04-26 Thread Jimmy Tsai
Hi Meena, Thanks for your reply, this solve my third question. :D Wait for someone who could help with the First 2 questions. how to change the IP address after instance has launched and get an address from dnsmasq ? and how to bind a loopback IP address (lo:0) or an alias IP address (eth0:0) ?

Re: [Openstack] Pending reviews

2012-04-26 Thread Eoghan Glynn
There's something like 7 pages of open reviews on gerrit. The project has a good kind of problem with so many people trying to contribute. The question now is how to scale the development processes to handle that growth. It was nice to see a number of discussions at the summit in this

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Bryan D. Payne
Data left on broken disks would be unreadable. -- You don't have to worry about data destruction before selling/throwing out your disks. I can certainly see the goal here. But this may be harder than you think. For example, if you encrypt the disk image, then launch the VM, are you sure that

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Sean Dague
On 04/26/2012 12:11 PM, Michael Grosser wrote: Data left on broken disks would be unreadable. -- You don't have to worry about data destruction before selling/throwing out your disks. (That could be realized via encrypting the whole compute-node disk, but that's not quite what I want.)

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Justin Santa Barbara
On Thu, Apr 26, 2012 at 9:05 AM, Matt Joyce m...@nycresistor.com wrote: From a security stand point I am curious what you see the benefit as? I think that long-term there is the potential to have a cloud where you don't have to trust the cloud provider (e.g. Intel Trusted Compute). However,

Re: [Openstack] questions about IP addressing and network config

2012-04-26 Thread Vishvananda Ishaya
On Apr 25, 2012, at 7:31 PM, Jimmy Tsai wrote: Hi everyone, I'm running with Essex 2012.1, and have some questions about the nova network operation, 1. Is it possible manually assigned IP address to a launched instance, my situation is : after instance boot up (OS: CentOS 6.2), I

[Openstack] Fwd: Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Lillie Ross-CDSR11
Begin forwarded message: From: Ross Lillie ross.lil...@motorolasolutions.commailto:ross.lil...@motorolasolutions.com Subject: Re: [Openstack] Unable to download images using Glance+Keystone+Swift Date: April 26, 2012 1:37:45 PM CDT To: Jay Pipes jaypi...@gmail.commailto:jaypi...@gmail.com Cc:

Re: [Openstack] [OpenStack][Nova] Minimum required code coverage per file

2012-04-26 Thread Joe Gordon
It would nice to initially see the code coverage delta per merge proposal as a comment in gerrit (similar to SmokeStack), and not as a gating factor. Kevin, should we start copying openstack-common tests to client projects? Or just make sure to not count openstack-common code in the code

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Jay Pipes
On 04/26/2012 04:19 AM, Daniel P. Berrange wrote: If you have a KVM enabled machine, then 'Oz' has the ability to create JeOS images for all the common distros you'll find. It is a very simple command line tool that just focuses on image building image customization (adding more packages to an

[Openstack] database migration cleanup

2012-04-26 Thread Dan Prince
The OpenStack Essex release had 82 database migrations. As these grow in number it seems reasonable to clean house from time to time. Now seems as good a time as any. I came up with a first go at it here: https://review.openstack.org/#/c/6847/ The idea is that we would: * Do this early in

[Openstack] OpenStack Quantum plugins

2012-04-26 Thread Salman Malik
Hi All, I am trying to learn the functionality of Quantum plugins used in OpenStack. I have read through the Quantum Admin Guide and had few basic/quick question about quantum and OVS interaction with it: 1) OVS can have ports in which vNICS can be plugged, so why does it need to use an

Re: [Openstack] Using Nova APIs from Javascript: possible?

2012-04-26 Thread Tres Henry
Interesting! Nice job on jstack! On Apr 26, 2012, at 12:50 AM, javier cerviño wrote: Hi all, I'm glad to hear that there's a lot of interest in the implementation of Openstack JavaScript clients. Actually, in my group we're developing a single page application developed entirely in

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Daniel P. Berrange
On Thu, Apr 26, 2012 at 09:05:41AM -0700, Matt Joyce wrote: From a security stand point I am curious what you see the benefit as? Consider that you might have separate people in your data center managing the virtualization hosts, vs the storage hosts vs the network. As it standards today any of

Re: [Openstack] Question on notifications

2012-04-26 Thread Joshua Harlow
Thx. With these messages, instead of the compute.instance.create.end it can't be guaranteed that the instance actually got created right? If I listen for the compute.instance.create.end and use the hostname (which is part of the publisher id) then I can know that it actually got created? Is

Re: [Openstack] database migration cleanup

2012-04-26 Thread Vishvananda Ishaya
+1. Might be nice to have some kind of test to verify that the new migration leaves the tables in exactly the same state as the old migrations. Vish On Apr 26, 2012, at 12:24 PM, Dan Prince wrote: The OpenStack Essex release had 82 database migrations. As these grow in number it seems

Re: [Openstack] Question on notifications

2012-04-26 Thread Sandy Walsh
Yes, correct, I thought you wanted the info as soon as the scheduler decided on a host. create.end will only fire when the instance has been created. And you're correct about the scheduler, but all schedulers will likely be a derivation of FilterScheduler or simply have custom filters/weights.

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Matt Joyce
As far as storage is concerned, certainly a cloud storage environment could be leveraged to store pre-encrypted data in such a way that would make it difficult bordering on impossible to seize or access without the consent of the owner. As far as compute hosts are concerned, it is a whole

Re: [Openstack] New OpenStack Releases in Ubuntu 12.04LTS

2012-04-26 Thread Everett Toews
+1! I just about fell out of my chair when Mark Shuttleworth mentioned this on stage in front of everyone. This should have a BIG impact on OpenStack adoption. Cheers, Everett On Tue, Apr 24, 2012 at 3:48 AM, Thierry Carrez thie...@openstack.orgwrote: Robbie Williamson wrote: For those of

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Jay Pipes
On 04/26/2012 04:42 PM, Scott Moser wrote: On Thu, 26 Apr 2012, Jay Pipes wrote: On 04/26/2012 04:19 AM, Daniel P. Berrange wrote: If you have a KVM enabled machine, then 'Oz' has the ability to create JeOS images for all the common distros you'll find. It is a very simple command line tool

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Lee Thompson
I use vagrant Sent fom my iPone On Apr 25, 2012, at 6:14 PM, Justin Santa Barbara jus...@fathomdb.com wrote: How does everyone build OpenStack disk images? The official documentation describes a manual process (boot VM with ISO), which is sub-optimal in terms of repeatability / automation

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Justin Santa Barbara
I think that Intel's trusted cloud work is trying to solve that exact compute host problem. It may already have the framework to do so even if the software hasn't caught up (i.e. if we still have some work to do!) It relies on a TPM chip, all code is measured before being run, and then there's a

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Matt Joyce
Functionally if the scheduler doesn't know what it's passing to the CPU or into paging memory a lot of optimization possibilities go out the window. If it does know one can infer a great deal about your datasets protected or not. -Matt On Thu, Apr 26, 2012 at 3:08 PM, Justin Santa Barbara

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Justin Santa Barbara
I think one of us is misunderstanding the model. My understanding is that we produce software that we trust, and then prove to the caller that we're running that software. All optimizations remain possible. Check out section 6.1 of the paper! On Thu, Apr 26, 2012 at 3:24 PM, Matt Joyce

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Eddie Garcia
Michael, IMO there are several encryption and key management things to consider so it really depends on your needs. If you are looking to allow VM owners to meet data at rest compliance or policies then allow them to manage their own encryption keys and rotation policies then a solution like

Re: [Openstack] New OpenStack Releases in Ubuntu 12.04LTS

2012-04-26 Thread Luis Gervaso
Awsome news! On Thu, Apr 26, 2012 at 10:45 PM, Everett Toews everett.to...@cybera.cawrote: +1! I just about fell out of my chair when Mark Shuttleworth mentioned this on stage in front of everyone. This should have a BIG impact on OpenStack adoption. Cheers, Everett On Tue, Apr 24,

[Openstack] post-summit editing of etherpads

2012-04-26 Thread Adam Spiers
Hi all, Thanks for an awesome design summit! I've been reviewing the etherpads: http://wiki.openstack.org/FolsomSummitEtherpads and have noticed a few instances of accidental post-summit corruption of etherpad contents, which is not surprising considering there is no difference between

Re: [Openstack] post-summit editing of etherpads

2012-04-26 Thread Duncan McGreggor
A side note: On the DevOpsTeam session etherpad, I've added a new section for post-event additions, comments, etc., hopefully encouraging responsible after-the-fact contributions :-) d On Thu, Apr 26, 2012 at 7:43 PM, Adam Spiers aspi...@suse.com wrote: Hi all, Thanks for an awesome design

Re: [Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Lillie Ross-CDSR11
Jay, These are the Ubuntu 12.04 packages from the beta with all known updates. I'm configuring another set of instances with the Ubuntu Precise final packages just to make sure I didn't miss a patch. However, this error seems fundamental to me. I don't see how a glance POST can work but the

[Openstack] Running openstack on top of a non controlled network

2012-04-26 Thread Michael Grosser
Hey, I'm looking into setting up openstack in a minimal production environment with 2 all in one nodes for swift and nova. First I wanted to ask if you would advise against it or if it should be fine? The plan is to have 2 zones with one all in one node for swift and nova each as a starting point

Re: [Openstack] Unable to download images using Glance+Keystone+Swift

2012-04-26 Thread Sam Morrison
Hi Ross, I had the same issue. Could upload images to swift but not download them getting a 404. I needed to apply the patch outlined in this bug to fix it: https://bugs.launchpad.net/glance/+bug/979745 Cheers, Sam On Fri, Apr 27, 2012 at 9:53 AM, Lillie Ross-CDSR11

[Openstack] Error in scheduler when create a new instance.

2012-04-26 Thread Rogerio Goncalves
Hello, Im getting this error when launching a new instance. Failed to schedule_run_instance: No valid host was found. Is the appropriate service running? http://paste.openstack.org/show/14020/ SO Ubuntu 12.04 libvirt-bin start/running, process 4153 nova-network start/running, process 4174

[Openstack] Integrating keystone for a public cloud panel

2012-04-26 Thread Adrian Moya
Hi everyone, I'm currently building a customer panel to offer public cloud services based on openstack. I'd like to share my plans to validate my approach is good and hear suggestions/feedback from others working on the same kind of project. I'm trying to get the following behaviour: Users

Re: [Openstack] [OpenStack][Nova] Minimum required code coverage per file

2012-04-26 Thread Kevin L. Mitchell
On Thu, 2012-04-26 at 11:53 -0700, Joe Gordon wrote: It would nice to initially see the code coverage delta per merge proposal as a comment in gerrit (similar to SmokeStack), and not as a gating factor. +1 Kevin, should we start copying openstack-common tests to client projects? Or just

Re: [Openstack] Error in scheduler when create a new instance.

2012-04-26 Thread heut2008
be sure nova-compute is running and is enabled by using nova-manage service list,also confirm that the compute node have enough resources(cpu,mem,disk) . 2012/4/27 Rogerio Goncalves roge...@gmail.com: Hello, Im getting this error when launching a new instance. Failed to

Re: [Openstack] Integrating keystone for a public cloud panel

2012-04-26 Thread Dolph Mathews
Adrian, Rather than managing the user's passwords externally to keystone, you can allow your users to define their own passwords, and instead create your users and/or tenants in a disabled state, by toggling their enabled/disabled state within keystone (an attribute available for both through

[Openstack] How to let Flat Networking wok in Essex?

2012-04-26 Thread Shake Chen
HI Now I can config FlatHHCP mode and working. but the Flat netwok can not working . who can share the the config 1: /etc/network/interface 2: /etc/nova/nova.conf 3: how to create private network fro vm -- Shake Chen ___ Mailing list:

Re: [Openstack] OpenStack Quantum plugins

2012-04-26 Thread Salman Malik
Dan, Salavatore and others, your input is sought here. Can any one provide little explanation please? From: salma...@live.com To: openstack@lists.launchpad.net Subject: OpenStack Quantum plugins Date: Thu, 26 Apr 2012 19:55:20 + Hi All, I am trying to learn the functionality of

[Openstack-poc] [Bug 983734] Re: Keystone fails badly if you miss one option

2012-04-26 Thread Yuriy Taraday
So we have to require either developer or user to specify every option. My change follows exactly this logic. The separate issue I see with this '/etc' defaults. But even if we keep them, we should enforce developers to provide default values or require user to do it. -- You received this bug