[Openstack] Security Groups not being applied uniformly

2013-06-24 Thread Daniel Ellison
Hey all, I'm running grizzly on Ubuntu 12.04 server. I have two instances, both with the same security groups (default and one to allow XMPP traffic). The firewall rules are working for one instance but not for the other. Can anyone think of why the group rules would be applied differently?

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-17 Thread Daniel Ellison
On Jun 17, 2013, at 1:59 PM, Scott Moser smo...@ubuntu.com wrote: I saw this thread, and was about to respond, but Robert Collin's response was correct: install linux-image-generic, it will bring in linux-image-extra-$version-generic which has kvm. Alternatively, just: apt-get

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-14 Thread Daniel Ellison
On Jun 13, 2013, at 5:54 PM, Daniel Ellison dan...@syrinx.net wrote: That did it! I'm now creating a CentOS KVM image in an Ubuntu OpenStack VM. I'll wait until it finishes before celebrating, but there are no errors so far. Well I didn't get to celebrate, as the veewee build process stops

[Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
Hi all, I want to use veewee to create custom images for use in OpenStack. The catch here is that I want to run veewee in an OpenStack VM. I almost have everything working. The only catch is that qemu-kvm won't run. I've done lots of research and I believe I need what's called nested KVM. I

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 4:36 PM, Daniel Ellison dan...@syrinx.net wrote: libvirtd is already running on the guest. One more data point: the guest does have the vmx capability enabled: cpu match='exact' modelPenryn/model vendorIntel/vendor feature policy='require' name='hypervisor'/ feature

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 5:05 PM, laclasse lacla...@gmail.com wrote: What is the guest OS? It seems the error Module kvm not found points to the missing kernel module rather than it not loading. Is the guest kernel 2.6.23? Can you find a kvm.ko and kvm-intel.ko on the guest file system? I

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 5:19 PM, Parrott, Robert parr...@g.harvard.edu wrote: No. You can't use KVM in a guest since it requires hardware virtualization. Instead you need to use qemu in emulation mode. Refer to the devstack code for how to set this up, since devatack will work in Amazon EC2. I

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 5:24 PM, David Stearns dstea...@gnip.com wrote: There's no reason using nested KVM shouldn't work so long as the hardware supports it. Do you know what kind of hardware support is required? Obviously my host already supports CPU virtualization extensions. :) Looks

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 5:34 PM, Robert Collins robe...@robertcollins.net wrote: install linux-image-generic, it will bring in linux-image-extra-$version-generic which has kvm. That did it! I'm now creating a CentOS KVM image in an Ubuntu OpenStack VM. I'll wait until it finishes before

[Openstack] Changing the location of Nova's instances

2013-05-15 Thread Daniel Ellison
Hey all, Is there a method for changing where Nova looks for its instances? When setting up my Openstack system I don't recall there being a choice as to where instances would be stored. As it happens, they're in /var/lib/nova/instances. My server is set up such that /home is a 6TB LVM volume,

Re: [Openstack] Changing the location of Nova's instances

2013-05-15 Thread Daniel Ellison
On May 15, 2013, at 8:52 AM, Robert van Leeuwen robert.vanleeu...@spilgames.com wrote: I would like to move all instances into /home/storage/nova/instances. The following value in nova.conf specifies where the images are located: state_path Ah, ok! That's the info I was looking for. So the

Re: [Openstack] Changing the location of Nova's instances

2013-05-15 Thread Daniel Ellison
On May 15, 2013, at 9:08 AM, Mac Innes, Kiall ki...@hp.com wrote: Personally, I would make use of a bind mount[1] rather than trying to relocate.. A bind mount is just like a symlink, with the exception of AppArmor (and I presume SELinux) will handle it correctly.. Ok, so I would move the

Re: [Openstack] Changing the location of Nova's instances

2013-05-15 Thread Daniel Ellison
On May 15, 2013, at 9:36 AM, Mac Innes, Kiall ki...@hp.com wrote: Yup - Or, you could just bind mount /var/lib/nova/instances, leaving the rest on the local disks (I have *no clue* if Nova will handle that nicely.. But bind mounts certainly will ;)) That worked beautifully, Kiall. Nova seems

Re: [Openstack] Horizon - Internal Server Error when hitting /nova/instances_and_volumes/

2013-05-08 Thread Daniel Ellison
On May 7, 2013, at 2:01 PM, Daniel Ellison dan...@syrinx.net wrote: As the subject says, I'm having issues getting at Instances Volumes (also Images Snapshots) in Horizon. I'm running grizzly on precise. Everything else works fine; the entire Admin tab works as expected. The Overview

Re: [Openstack] Horizon - Internal Server Error when hitting /nova/instances_and_volumes/

2013-05-08 Thread Daniel Ellison
On May 8, 2013, at 7:27 AM, Daniel Ellison dan...@syrinx.net wrote: On May 7, 2013, at 2:01 PM, Daniel Ellison dan...@syrinx.net wrote: I think I know the source of the problem. I first had to add a logging section for openstack_dashboard in local_settings.py despite the fact

[Openstack] 'QuotaSet' object has no attribute 'gigabytes'

2013-05-08 Thread Daniel Ellison
Hey all, I have Horizon running quite nicely now except for one error that happens in a couple of places. It seems that whenever I do anything that involves checking a user's quota, such as launching an image or allocating an IP to a project, I get the following error in

Re: [Openstack] Horizon - Internal Server Error when hitting /nova/instances_and_volumes/

2013-05-08 Thread Daniel Ellison
On May 8, 2013, at 2:48 PM, Gabriel Hurley gabriel.hur...@nebula.com wrote: If you have Instances Volumes then you're not running Grizzly Horizon. Those two were split apart in Grizzly. Prior to Grizzly the Volume Service was required. In Grizzly Horizon it's not. As such you have two

Re: [Openstack] 'QuotaSet' object has no attribute 'gigabytes'

2013-05-08 Thread Daniel Ellison
On May 8, 2013, at 11:59 AM, Daniel Ellison dan...@syrinx.net wrote: I have Horizon running quite nicely now except for one error that happens in a couple of places. It seems that whenever I do anything that involves checking a user's quota, such as launching an image or allocating an IP

[Openstack] Horizon - Internal Server Error when hitting /nova/instances_and_volumes/

2013-05-07 Thread Daniel Ellison
As the subject says, I'm having issues getting at Instances Volumes (also Images Snapshots) in Horizon. I'm running grizzly on precise. Everything else works fine; the entire Admin tab works as expected. The Overview and Access Security also work fine. Is there any way to see what calls are

Re: [Openstack] Bridging question

2013-04-27 Thread Daniel Ellison
On 2013-04-26, at 7:53 PM, David Wittman dwitt...@gmail.com wrote: This is the expected behavior. With nova-network, FLIPs are assigned as a secondary address on the host interface, and traffic is routed to your instances via NAT rules. I'd recommend reading the following blog post from

[Openstack] Bridging question

2013-04-26 Thread Daniel Ellison
Hi all, I have Nova all set up on a single server and am able to start/stop/delete VM instances no problem. I have a bridge at br100 which sits on eth1 and is not connected to anything. eth0 is connected to the Internet. Before installing Openstack I was using KVM and virsh to manage my VMs.

Re: [Openstack] nova-manage fails with unable to open database file None None

2013-04-25 Thread Daniel Ellison
On Apr 25, 2013, at 7:48 AM, Daniel Ellison dan...@syrinx.net wrote: I've come across a situation that has stumped me. I've searched the archives here but can find no solution. I /did/ find a bug filed in Launchpad (https://bugs.launchpad.net/nova/+bug/1169439) that may be what's happening

Re: [Openstack] How to configure nova-network for a single node

2013-04-25 Thread Daniel Ellison
On Apr 23, 2013, at 8:44 AM, Daniel Ellison dan...@syrinx.net wrote: I've slowly been configuring a single server with OpenStack for a proof-of-concept I want to present to my managers. This single server is co-located and directly exposed to the Internet. It has one active Ethernet port

[Openstack] How to configure nova-network for a single node

2013-04-23 Thread Daniel Ellison
Hi all, I've slowly been configuring a single server with OpenStack for a proof-of-concept I want to present to my managers. This single server is co-located and directly exposed to the Internet. It has one active Ethernet port (eth0) and one inactive and disconnected Ethernet port (eth1).

Re: [Openstack] Keystone Woes

2013-04-14 Thread Daniel Ellison
On 2013-04-14, at 10:00 AM, Dolph Mathews dolph.math...@gmail.com wrote: Short answer: yes. There are two types of token_format options available, PKI and UUID. UUID tokens result in increased network chatter as they must be validated remotely, whereas PKI tokens are big, self-signed, and

[Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
Hi all, I joined this list just now to solve a particular problem, but once I'm past this I hope to be giving back to the community. I have spent the past week trying to get Keystone installed and configured properly. I want to show a running OpenStack to my manager for a proof of concept I

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 1:24 PM, Dolph Mathews dolph.math...@gmail.com wrote: It looks like you're doing everything correctly, except OS_PASSWORD is *NOT* the same thing as the static admin_token in keystone.conf. You're right, actually. I DID use the admin_token for OS_PASSWORD. I'll definitely be

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 1:23 PM, Anne Gentle a...@openstack.org wrote: Is this a regression or manifestation of this bug? https://bugs.launchpad.net/keystone/+bug/1002917 Anne I'll take a look at that bug. I currently don't have the depth of knowledge on OpenStack to judge myself, but maybe

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 5:24 PM, Dolph Mathews dolph.math...@gmail.com wrote: Hmm, well it looks like you already have debug enabled, which is indicating that the username + password combination is bad (if debug was disabled, you'd get a much more opaque error message). The tenant name you