Re: [Openstack] How to set vcpupin in guest XML?

2013-07-24 Thread Daniel P. Berrange
On Wed, Jul 24, 2013 at 04:57:07PM +0800, Peeyush Gupta wrote: Hi Daniel, Thanks for your suggestion. I made some changes in config and it works fine. One more thing I wanted to ask is I want to add an attribute to xml. But I am not able to figure out how exactly libvirt is defining xml. I

Re: [Openstack] How to set vcpupin in guest XML?

2013-07-23 Thread Daniel P. Berrange
On Tue, Jul 23, 2013 at 05:31:25PM +0800, Peeyush Gupta wrote: Hi all, I am working with openstack and I want to pin vcpus to pcpus in guest xml. Now, the pinning operation can be done using virsh vcpupin guestname vcpu pcpu But I want to do it using python API. I investigated the openstack

Re: [Openstack] vga video setting for kvm/libvirt virtual machine on openstack folsom

2013-07-19 Thread Daniel P. Berrange
On Fri, Jul 19, 2013 at 11:35:27AM +0200, Jacques LANDRU wrote: Hi all, I didn't find solution, using google, so trying openstack mailing list. I hope, this is the good place to post. I'm using Folsom with kvm/libvirt environment. Is there a simple way to force video -vga std instead

Re: [Openstack] chardev: opening backend file failed: Permission denied

2013-06-21 Thread Daniel P. Berrange
On Fri, Jun 21, 2013 at 01:57:44PM -0400, Samuel Winchenbach wrote: Here is some more information. I am using Ubuntu 12.04 LTS, I have turned off apparmor. Here is my mount: dedup:/big_pool/os-grizzly on /os-grizzly type nfs (rw,noatime,nolock,tcp,bg,intr,hard,addr=10.54.90.10)

Re: [Openstack] Should we discourage KVM block-based live migration?

2013-04-25 Thread Daniel P. Berrange
On Wed, Apr 24, 2013 at 05:23:11PM -0400, Lorin Hochstein wrote: On Wed, Apr 24, 2013 at 11:59 AM, Daniel P. Berrange d...@berrange.comwrote: On Wed, Apr 24, 2013 at 11:48:35AM -0400, Lorin Hochstein wrote: In the docs, we describe how to configure KVM block-based live migration

Re: [Openstack] Should we discourage KVM block-based live migration?

2013-04-24 Thread Daniel P. Berrange
On Wed, Apr 24, 2013 at 11:48:35AM -0400, Lorin Hochstein wrote: In the docs, we describe how to configure KVM block-based live migration, and it has the advantage of avoiding the need for shared storage of instances. However, there's this email from Daniel Berrangé from back in Aug 2012:

Re: [Openstack] Local storage and Xen with Libxl

2013-04-19 Thread Daniel P. Berrange
On Fri, Apr 19, 2013 at 01:43:23PM +0300, Cristian Tomoiaga wrote: As for the compute part, I may need to work with libvirt but I want to avoid that if possible. Libxl was meant for stacks right ? Again, this may not be acceptable and I would like to know. Nova already has two drivers which

Re: [Openstack] Gerrit Review + SSH

2013-04-04 Thread Daniel P. Berrange
On Thu, Apr 04, 2013 at 10:51:20AM -0700, Ronak Shah wrote: Hi, As OS dev cycle involves Gerrit review tool which requires ssh into the gerrit server, I was wondering if any of you guys face problems where your company/org does not allow ssh to external hosts. In general, what is the best

Re: [Openstack] CY13-Q1 Community Analysis — OpenStack vs OpenNebula vs Eucalyptus vs CloudStack

2013-04-03 Thread Daniel P. Berrange
On Wed, Apr 03, 2013 at 12:15:21PM +0200, Thierry Carrez wrote: Qingye Jiang (John) wrote: I saw Jay's suggestion on removing review.openstack.org from the git domain analysis. Can you shed some light on how this system works? Is this system shadowing more real code contributors? Merge

Re: [Openstack] [OSSG] Security Note: Selecting LXC as Nova Virtualization Driver can lead to data compromise.

2013-03-19 Thread Daniel P. Berrange
On Tue, Mar 19, 2013 at 01:38:42PM +, Clark, Robert Graham wrote: Daniel, I agree with your modification and have made a note of it on the bug page. I'll make sure to change it when we have a sensible place to publish all of our OSSNs. Thanks for engaging on this issue, we now have an

Re: [Openstack] [OSSG] Security Note: Selecting LXC as Nova Virtualization Driver can lead to data compromise.

2013-03-15 Thread Daniel P. Berrange
On Fri, Mar 15, 2013 at 10:44:40AM +, Clark, Robert Graham wrote: The following is the first of a series of OpenStack Security Notes that will be issued by the OpenStack Security Group. Security notes are similar to advisories; they address vulnerabilities in 3rd party tools typically

Re: [Openstack] [OSSG] Security Note: Selecting LXC as Nova Virtualization Driver can lead to data compromise.

2013-03-15 Thread Daniel P. Berrange
On Fri, Mar 15, 2013 at 09:05:30AM -0700, Bryan D. Payne wrote: The quality of container isolation in LXC heavily depends on implementation. While pure LXC is generally well-isolated through various mechanisms (for example AppArmor in Ubuntu), LXC through libvirt is not. A guest who

Re: [Openstack] [OpenStack] Guest OS shows just one CPU core instead of two

2013-03-05 Thread Daniel P. Berrange
On Tue, Mar 05, 2013 at 04:00:06PM +0530, Balamurugan V G wrote: Hi, I am running Folsom 2.2 with a KVM compute node. When I launch a windows instance with flavor that has 2 VCPUs and 2Gb RAM, the guest seems the RAM fine but not the 2 CPUs. It reports only one Virtual processor. Whne I look

Re: [Openstack] spice in devstack no working

2013-02-28 Thread Daniel P. Berrange
On Fri, Mar 01, 2013 at 02:33:32AM +0800, Shake Chen wrote: Hi I try to enable spice in devstack, but when I create vm, would report error. if not enable spice, it is work well. If you want help, you're going to have to tell us much more than just would report error. What OS distro are you

Re: [Openstack] [nova] python-novaclient 2.11.0 release

2013-02-13 Thread Daniel P. Berrange
On Tue, Feb 12, 2013 at 09:41:11PM -0800, Vishvananda Ishaya wrote: Hello Everyone, I just pushed version 2.11.0 of python-novaclient to Pypi. There are a lot of fixes and features in this release. Here is a brief overview: Bug Fixes - simplified keyring support Sigh, this

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

2013-01-21 Thread Daniel P. Berrange
On Sun, Jan 20, 2013 at 01:46:58PM +0800, harryxiyou wrote: Hi all, I read the source code of Openstack Nova branch source codes but i can not find the standard libvirt library packages, which i think Nova uses libvirt interfaces they are from standard libvirt library to attach Sheepdog(or

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

2013-01-21 Thread Daniel P. Berrange
On Tue, Jan 22, 2013 at 12:13:57AM +0800, harryxiyou wrote: On Mon, Jan 21, 2013 at 8:14 PM, Daniel P. Berrange berra...@redhat.com wrote: [...] The nova driver for talking to libvirt is in nova/virt/libvirt/ Yup, i think so. Therefore, i also think nova driver in nova/virt/libvirt has

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

2013-01-21 Thread Daniel P. Berrange
On Tue, Jan 22, 2013 at 01:08:23AM +0800, harryxiyou wrote: On Tue, Jan 22, 2013 at 12:20 AM, Daniel P. Berrange berra...@redhat.com wrote: [...] Nova simply uses the standard libvirt python module, which is a thin python wrapper around the libvirt.so C library. I think so, but i wonder

Re: [Openstack] Nova root wrapper understanding

2013-01-11 Thread Daniel P. Berrange
On Fri, Jan 11, 2013 at 11:32:08AM +0100, Thierry Carrez wrote: Kun Huang wrote: In this wiki, http://wiki.openstack.org/Nova/Rootwrap, the part of security model results in This chain ensures that the nova user itself is not in control of the configuration or modules used by the

Re: [Openstack] Audio card for libvirt/kvm in folsom

2013-01-11 Thread Daniel P. Berrange
On Fri, Jan 11, 2013 at 12:29:35PM +0100, Davide Guerri wrote: Hi all, it's possible to add an audio card to the domain definition when using libvirt/kvm? If yes, how it can be done? I'm using the Folsom release. No, there isn't any support for audio devices in Nova / libvirt at this

Re: [Openstack] Audio card for libvirt/kvm in folsom

2013-01-11 Thread Daniel P. Berrange
On Fri, Jan 11, 2013 at 02:56:23PM +0100, Davide Guerri wrote: Daniel, let me explain what I'm trying to do. I'm trying to setup a simple virtual desktop infrastructure on the top of OpenStack using both Windows (7 only atm) and Linux guests. On Linux the missing audio board wouldn't be a

Re: [Openstack] Audio card for libvirt/kvm in folsom

2013-01-11 Thread Daniel P. Berrange
On Fri, Jan 11, 2013 at 10:53:25PM +0800, 孙玉新 wrote: Davide, If you use KVM, it's possible to enable audio. Please refer http://libvirt.org/formatdomain.html#elementsSound Here is some infomation about how to enable it in nova:

Re: [Openstack] Wiki content imported into MediaWiki - please check

2012-12-19 Thread Daniel P. Berrange
On Mon, Dec 17, 2012 at 06:51:23PM -0800, Ryan Lane wrote: I've just finished importing the content from the MoinMoin wiki into the MediaWiki instance. Please check the content: https://wiki-staging.openstack.org/wiki/Main_Page We're using a self-signed certificate for now. We are ordering

Re: [Openstack] Scheduler issues in folsom

2012-10-31 Thread Daniel P. Berrange
On Wed, Oct 31, 2012 at 10:40:57AM +0800, Huang Zhiteng wrote: On Wed, Oct 31, 2012 at 10:07 AM, Vishvananda Ishaya vishvana...@gmail.com wrote: On Oct 30, 2012, at 7:01 PM, Huang Zhiteng winsto...@gmail.com wrote: I'd suggest the same ratio too. But besides memory overcommitment, I

Re: [Openstack] openstack libvirt lxc

2012-08-21 Thread Daniel P. Berrange
On Tue, Aug 21, 2012 at 10:19:34AM +0800, 廖南海 wrote: Who use the lxc virtual machine? Please give me some advices? My advice would be not to use LXC since, as it exists today, it is not secure. ie root within the container can break out compromise the entire host. This is not really the fault

Re: [Openstack] [nova] Disk attachment consistency

2012-08-15 Thread Daniel P. Berrange
On Wed, Aug 15, 2012 at 03:49:45PM +0100, John Garbutt wrote: You can see what XenAPI exposes here: http://docs.vmd.citrix.com/XenServer/6.0.0/1.0/en_gb/api/?c=VBD I think the only thing you can influence when plugging in the disk is the “userdevice” which is the disk position: 0,1,2…

Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-14 Thread Daniel P. Berrange
On Tue, Aug 14, 2012 at 11:30:29AM -0700, Matt Joyce wrote: I have to ask. Wasn't FUSE designed to do alot of this stuff? It is userspace and it doesn't do nasty stuff to file systems. Why aren't we going that route? If you read earlier in this thread, you'll see that FUSE is what Nova

Re: [Openstack] KVM live block migration: stability, future, docs

2012-08-09 Thread Daniel P. Berrange
On Thu, Aug 09, 2012 at 07:10:17AM -0700, Vishvananda Ishaya wrote: On Aug 9, 2012, at 1:03 AM, Blair Bethwaite blair.bethwa...@gmail.com wrote: Hi Daniel, Thanks for following this up! On 8 August 2012 19:53, Daniel P. Berrange berra...@redhat.com wrote: not tune this downtime

Re: [Openstack] KVM live block migration: stability, future, docs

2012-08-08 Thread Daniel P. Berrange
On Wed, Aug 08, 2012 at 09:50:20AM +0800, Huang Zhiteng wrote: But to the contrary. I tested live-migrate (without block migrate) last night using a guest with 8GB RAM (almost fully committed) and lost any access/contact with the guest for over 4 minutes - it was paused for the duration.

Re: [Openstack] KVM live block migration: stability, future, docs

2012-08-08 Thread Daniel P. Berrange
On Tue, Aug 07, 2012 at 04:13:22PM -0400, Jay Pipes wrote: On 08/07/2012 08:57 AM, Blair Bethwaite wrote: I also feel a little concern about this statement: It don't work so well, it complicates migration code, and we are building a replacement that works. I have to go further with

Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-08 Thread Daniel P. Berrange
On Wed, Aug 08, 2012 at 12:33:57AM -0400, Eric Windisch wrote: What's the security vulnerability here? Its writing to something which might be a symlink to somewhere special, right? Mounting filesystems tends to be a source of vulnerabilities in and of itself. There are userspace

Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-08 Thread Daniel P. Berrange
On Wed, Aug 08, 2012 at 02:17:30PM +0200, Thierry Carrez wrote: Eric Windisch wrote: Unfortunately, this won't be the end of vulnerabilities coming from this feature. Indeed. I would like to see evil file injection die, and be replaced by cloud-init / config-drive. That's the safest way.

Re: [Openstack] Default reply to behavior for mailing list

2012-07-31 Thread Daniel P. Berrange
On Tue, Jul 31, 2012 at 10:50:02AM -0700, Bhuvaneswaran A wrote: Stefano, If a subscriber reply to a mailing list message, it's sent to the author only. Each subscriber should use Reply to All every time, to post a reply to mailing list. Can you please configure the mailing list and set

Re: [Openstack] Inaugurating the new Development list

2012-07-10 Thread Daniel P. Berrange
On Mon, Jul 09, 2012 at 01:56:25PM -0700, Stefano Maffulli wrote: On Mon 09 Jul 2012 01:48:25 PM PDT, Atul Jha wrote: And what happens to openstack@lists.launchpad.net then? good question: at the moment nothing happens, this list will remain active. According to the new mailing list

Re: [Openstack] How to speed-up removal of a volume in Openstack Essex

2012-07-09 Thread Daniel P. Berrange
On Mon, Jul 09, 2012 at 11:17:13AM +0200, Heber Dijks wrote: When terminating a volume, openstack default overwrites the complete volume with zero’s for security reasons. This can take a long time, especially with large volumes. If security isn’t an issue in your environment, you can

Re: [Openstack] Libvirt LXC with volume-attach broken ?

2012-07-06 Thread Daniel P. Berrange
On Thu, Jul 05, 2012 at 06:49:06PM -0700, Eric W. Biederman wrote: Serge Hallyn serge.hal...@canonical.com writes: Quoting Daniel P. Berrange (berra...@redhat.com): On Thu, Jul 05, 2012 at 03:00:26PM +0100, Daniel P. Berrange wrote: Now, when using 'nova volume-attach': # nova

Re: [Openstack] Libvirt LXC with volume-attach broken ?

2012-07-06 Thread Daniel P. Berrange
On Fri, Jul 06, 2012 at 02:35:14AM -0700, Eric W. Biederman wrote: Daniel P. Berrange berra...@redhat.com writes: The part of the problem is that I have a /dev/sdf, or even a /dev/volgroup00/logvol3 in the host (with whatever major:minor number that implies), and I want to be able to make

Re: [Openstack] [OpenStack][Nova] Help with libvirt unit-test - get_diagnostics command

2012-07-06 Thread Daniel P. Berrange
On Fri, Jul 06, 2012 at 11:59:51AM +0100, Leander Bessa Beernaert wrote: Hello, I've been working on implementing the diagnostics command for libvirt - https://review.openstack.org/#/c/8839/ . Now i need to create the unit test for this new operation. I've been looking at the code to try and

[Openstack] Libvirt LXC with volume-attach broken ?

2012-07-05 Thread Daniel P. Berrange
In the Libvirt driver there is special-case code for LXC to deal with the volume-attach functionality, since there is no block device attach functionality in libvirt for LXC. The code in question was added in commit e40b659d320b3c6894862b87adf1011e31cbf8fc Author: Chuck Short

Re: [Openstack] Libvirt LXC with volume-attach broken ?

2012-07-05 Thread Daniel P. Berrange
On Thu, Jul 05, 2012 at 03:00:26PM +0100, Daniel P. Berrange wrote: Now, when using 'nova volume-attach': # nova volume-attach 05eb16df-03b8-451b-85c1-b838a8757736 a5ad1d37-aed0-4bf6-8c6e-c28543cd38ac /dev/sdf nova will import an iSCSI LUN from the nova volume service, on the compute

Re: [Openstack] [CI] Retriggering Jenkins from Gerrit

2012-07-04 Thread Daniel P. Berrange
On Tue, Jul 03, 2012 at 04:48:32PM -0700, James E. Blair wrote: Hi, As mentioned in the thread Jenkins and transient failures, we've had an unusually high number of transient failures in Jenkins lately. We've done several things in response to that: 1) Monty identified a problem with our

Re: [Openstack] OpenStack G naming poll

2012-07-04 Thread Daniel P. Berrange
On Wed, Jul 04, 2012 at 10:02:46AM +0200, Thierry Carrez wrote: Brian Waldon wrote: On Jul 3, 2012, at 5:21 PM, Monty Taylor wrote: At the g summit, we'd tell everyone where the next summit is: At the g summit, we'd vote and announce the name of h We wouldn't have to spend half the cycle

Re: [Openstack] [RFC] Add more host checks to the compute filter

2012-07-04 Thread Daniel P. Berrange
On Tue, Jul 03, 2012 at 04:07:36PM -0600, Jim Fehlig wrote: Hi Daniel, Attached is a patch that implements filtering on (architecture, hypervisor_type, vm_mode) tuple as was discussed in this previous patch https://review.openstack.org/#/c/9110/ CC'ing Chuck since he is the author of

Re: [Openstack] Time for a UK Openstack User Group meeting ?

2012-07-04 Thread Daniel P. Berrange
On Wed, Jul 04, 2012 at 04:38:28PM +0100, Day, Phil wrote: Hi All, I'm thinking it's about time we had an OpenStack User Group meeting in the UK , and would be interested in hearing from anyone interested in attending, presenting, helping to organise, etc. I can do presentations about

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-03 Thread Daniel P. Berrange
On Mon, Jul 02, 2012 at 12:09:55PM -0700, Johannes Erdfelt wrote: On Mon, Jul 02, 2012, Daniel P. Berrange berra...@redhat.com wrote: On Mon, Jul 02, 2012 at 08:17:08AM -0700, Johannes Erdfelt wrote: Not using /tmp for large files is a good reason for practical reasons (distributions

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-03 Thread Daniel P. Berrange
On Tue, Jul 03, 2012 at 11:01:11AM +0100, John Garbutt wrote: Sorry to go back in the tread, but just wanted to ask a possibly dumb question. Daniel P. Berrange wrote: In the particular case of the qemu-img command described in earlier in this thread, I'm not convinced we need a new

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-07-02 Thread Daniel P. Berrange
On Fri, Jun 29, 2012 at 03:27:25PM -0500, Andrew Bogott wrote: On 6/27/12 8:40 AM, Daniel P. Berrange wrote: On Wed, Jun 27, 2012 at 03:24:21PM +0200, Vincent Untz wrote: Hi, It'd be really great if we could first improve Gerrit to handle the patch series workflow in a better way. Without

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-02 Thread Daniel P. Berrange
On Sat, Jun 30, 2012 at 09:25:10PM -0400, Lars Kellogg-Stedman wrote: So, maybe setting any of this environment variables for nova-compute to desired value sholuld help. Yeah, I was expecting that. Given that this could easily take out a compute host I'd like to see it get an explicit

Re: [Openstack] Jenkins and transient failures

2012-07-02 Thread Daniel P. Berrange
On Sun, Jul 01, 2012 at 08:40:36AM -0700, James E. Blair wrote: [snip] So with all that background, I think we should discuss the following at the CI team meeting on Tuesday: [snip] 3) Decide on a course of action to mitigate failures from transient gerrit errors (but continue to work on

Re: [Openstack] [OpenStack][Nova] Issues with run_tests.sh, no tests are run when import libvirt is present

2012-07-02 Thread Daniel P. Berrange
On Mon, Jul 02, 2012 at 01:43:31PM +0100, Leander Bessa Beernaert wrote: So, if no system packages can be imported, how do you test the connection class for the libvirt driver? How does that particular test case wrap around the fact that it requires the libvirt module? The only thing i could

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-02 Thread Daniel P. Berrange
On Mon, Jul 02, 2012 at 10:24:02AM -0700, Matt Joyce wrote: I like the idea of making this a flagfile option. In the particular case of the qemu-img command described in earlier in this thread, I'm not convinced we need a new option. Instead of using /tmp when extracting a snapshot from an

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-02 Thread Daniel P. Berrange
On Mon, Jul 02, 2012 at 08:17:08AM -0700, Johannes Erdfelt wrote: On Mon, Jul 02, 2012, Daniel P. Berrange berra...@redhat.com wrote: In Fedora 18, /tmp is going to be a RAM filesystem, so we absolutely must not create any sizeable files on /tmp. In addition from a security POV, we must

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-29 Thread Daniel P. Berrange
On Fri, Jun 29, 2012 at 04:57:06AM +, Vaze, Mandar wrote: I particularly hate the single-line Fixes bug 1234566-type commit messages. I assume your concern was regarding commits where Fixes bug 1234566 is the first and ONLY line. Fixes bug 1234566 comes from Wiki. Plus there

Re: [Openstack] HVM + Xen Hypervisor via libvirt possible?

2012-06-28 Thread Daniel P. Berrange
On Wed, Jun 27, 2012 at 02:47:59PM -0600, Jim Fehlig wrote: Daniel P. Berrange wrote: On Fri, Jun 22, 2012 at 12:17:11AM +0800, Huang Zhiteng wrote: Of course it is possible. What kind of issue did you run into? On Thu, Jun 21, 2012 at 5:52 PM, Wang Li fox...@gmail.com wrote

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-28 Thread Daniel P. Berrange
On Thu, Jun 28, 2012 at 12:01:10PM +0200, Thierry Carrez wrote: Daniel P. Berrange wrote: [...] In other words, when reviewing a change in Gerrit, do not simply look at the correctness of the code. Review the commit message itself and request improvements to its content. Look out

Re: [Openstack] LibVirt Error

2012-06-28 Thread Daniel P. Berrange
On Thu, Jun 28, 2012 at 04:26:15PM +0530, Trinath Somanchi wrote: 2012-06-28 16:24:00 TRACE nova.compute.manager [instance: 7741f67f-ad78-4777-a5a0-6636eb8b460e] libvirtError: Unable to read from monitor: Connection reset by peer This looks like the interesting error messages from that huge

[Openstack] Jenkins vs SmokeStack tests Gerrit merge blockers

2012-06-28 Thread Daniel P. Berrange
Today we face a situation where Nova GIT master fails to pass all the libvirt test cases. This regression was accidentally introduced by the following changeset https://review.openstack.org/#/c/8778/ If you look at the history of that, the first SmokeStack test run fails with some

Re: [Openstack] Jenkins vs SmokeStack tests Gerrit merge blockers

2012-06-28 Thread Daniel P. Berrange
On Thu, Jun 28, 2012 at 08:13:28AM -0700, Monty Taylor wrote: On 06/28/2012 07:32 AM, Daniel P. Berrange wrote: This leaves me with the following questions... 1. Why was the recorded failure from SmokeStack not considered to be a blocker for the merge of the commit by Gerrit

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-28 Thread Daniel P. Berrange
On Thu, Jun 28, 2012 at 09:21:20AM -0700, Johannes Erdfelt wrote: First off, I wanted to say I think these are a great set of recommendations. On Wed, Jun 27, 2012, Daniel P. Berrange berra...@redhat.com wrote: Fixes: bug #1003373 Implements: blueprint libvirt-xml-cpu-model

[Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-27 Thread Daniel P. Berrange
Change-Id: I4946a16d27f712ae2adf8441ce78e6c0bb0bb657 Signed-off-by: Daniel P. Berrange berra...@redhat.com As well as the 'Signed-off-by' tag, there are various other ad-hoc tags that can be used to credit other people involved in a patch who aren't the author. - 'Reviewed-by: ...some name

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-27 Thread Daniel P. Berrange
for this :-) However, one comment: Le mercredi 27 juin 2012, à 11:52 +0100, Daniel P. Berrange a écrit : It might be mentioned that Gerrit's handling of patch series is not entirely perfect. This is a not a valid reason to avoid creating patch series. It'd be really great if we could

Re: [Openstack] New mailing list server [status update]

2012-06-26 Thread Daniel P. Berrange
On Mon, Jun 25, 2012 at 04:39:58PM -0700, Stefano Maffulli wrote: Hello folks, we're getting closer to being able to have a new mailing list manager. Duncan and the infra team have a new machine running, with mailman installed. We tested also the migration of the archives, successfully.

Re: [Openstack] HVM + Xen Hypervisor via libvirt possible?

2012-06-22 Thread Daniel P. Berrange
On Fri, Jun 22, 2012 at 11:22:13AM +0800, Li Wang wrote: Thanks all for replying. We want to stick on to the Xen Hypervisor for some reason. 1. Does the community plan to support this feature? I'd like to see it supported by Nova, because it would improve the libvirt driver in general, but

Re: [Openstack] [devstack] Easing maintenance of list of distro packages to install

2012-06-21 Thread Daniel P. Berrange
On Wed, Jun 20, 2012 at 11:02:23AM -0700, Joshua Harlow wrote: Everyone should really check out... https://github.com/yahoo/Openstack-Anvil/tree/master/conf/distros It is nice to have a standard yaml format that isn't a new micro-custom-format that we have to figure out how to parse.

Re: [Openstack] HVM + Xen Hypervisor via libvirt possible?

2012-06-21 Thread Daniel P. Berrange
On Fri, Jun 22, 2012 at 12:17:11AM +0800, Huang Zhiteng wrote: Of course it is possible. What kind of issue did you run into? On Thu, Jun 21, 2012 at 5:52 PM, Wang Li fox...@gmail.com wrote: hi,all I need to run virtual machines on Xen Hypervisor in HVM mode, is it possible when using

Re: [Openstack] Thoughts on client library releasing

2012-06-20 Thread Daniel P. Berrange
On Tue, Jun 19, 2012 at 11:07:05AM -0700, Monty Taylor wrote: I'm going to top-post, because there is a whole other thing which is not a response to points below. Basically, this is yet-another-instance of two competing and partially contradictory sets of use cases and usage patterns that

Re: [Openstack] [devstack] Easing maintenance of list of distro packages to install

2012-06-20 Thread Daniel P. Berrange
On Wed, Jun 20, 2012 at 12:06:46PM +0200, Vincent Untz wrote: Hi, In devstack, we currently have two separate lists of packages to install: one for Ubuntu (in files/apts/) and one for Fedora (in files/rpms/). This has two issues: - this leads to incomplete updates for dependencies. It

Re: [Openstack] List of glance image metadata tags used by nova ?

2012-06-14 Thread Daniel P. Berrange
, I'll just carry on with the current ad-hoc practice for parameters I need to add. On Jun 13, 2012, at 2:34 AM, Daniel P. Berrange wrote: I was recently pointed at this changeset which adds CPU arch filtering to the Nova schedular. https://review.openstack.org/#/c/8267/ IIUC

Re: [Openstack] Errors running individual tests that call into the database

2012-06-11 Thread Daniel P. Berrange
On Mon, Jun 11, 2012 at 05:04:51PM +0100, John Garbutt wrote: Hi, I am trying to run tests like test_xenapi and test_libvirt by themselves do things like: nosetests test_xenapi But it does work, I get DB errors relating to missing tables. However, I can successfully run all the tests.

Re: [Openstack] Errors running individual tests that call into the database

2012-06-11 Thread Daniel P. Berrange
On Mon, Jun 11, 2012 at 05:51:44PM +0100, Daniel P. Berrange wrote: On Mon, Jun 11, 2012 at 05:04:51PM +0100, John Garbutt wrote: Hi, I am trying to run tests like test_xenapi and test_libvirt by themselves do things like: nosetests test_xenapi But it does work, I get DB errors

Re: [Openstack] Random libvirt hangs

2012-06-08 Thread Daniel P. Berrange
On Thu, May 31, 2012 at 08:19:47AM +0200, Christian Wittwer wrote: Hi Daniel, I'd file a bug against libvirt in Oneiric, requesting that they backport the 4 changesets mentioned in Do you know if that bug is now fixed in Oneiric? No idea I'm afraid, I only maintain libvirt upstream or

Re: [Openstack] New layout of the OpenStack mailing lists

2012-05-25 Thread Daniel P. Berrange
On Thu, May 24, 2012 at 05:02:25PM -0700, Stefano Maffulli wrote: Hello folks, we're working on a new mailing list server to host our discussions. The main factor behind the move was described in this message by ttx: http://openstack.markmail.org/thread/ybwazse63sgxozh2 The current

Re: [Openstack] libvirt.xml.template

2012-05-23 Thread Daniel P. Berrange
On Wed, May 23, 2012 at 03:18:44PM +0800, William Herry wrote: Hi, I can't find this libvirt.xml.template file with git install, I change this file to make my vm show real cpu rather than QEMU, now, I can't find that file, some one know where it is? I use the recent git packages which is

Re: [Openstack] libvirt.xml.template

2012-05-23 Thread Daniel P. Berrange
On Wed, May 23, 2012 at 11:09:12AM +0100, Daniel P. Berrange wrote: On Wed, May 23, 2012 at 03:18:44PM +0800, William Herry wrote: Hi, I can't find this libvirt.xml.template file with git install, I change this file to make my vm show real cpu rather than QEMU, now, I can't find

Re: [Openstack] Improving Xen support in the libvirt driver

2012-05-10 Thread Daniel P. Berrange
On Wed, May 09, 2012 at 11:08:13PM -0600, Jim Fehlig wrote: Hi, I've been tinkering with improving Xen support in the libvirt driver and wanted to discuss a few issues before submitting patches. Even the latest upstream release of Xen (4.1.x) contains a rather old qemu, version 0.10.2,

Re: [Openstack] Improving Xen support in the libvirt driver

2012-05-10 Thread Daniel P. Berrange
On Thu, May 10, 2012 at 09:06:58AM +0100, Daniel P. Berrange wrote: On Wed, May 09, 2012 at 11:08:13PM -0600, Jim Fehlig wrote: Hi, I've been tinkering with improving Xen support in the libvirt driver and wanted to discuss a few issues before submitting patches. Even the latest

Re: [Openstack] Improving Xen support in the libvirt driver

2012-05-10 Thread Daniel P. Berrange
On Thu, May 10, 2012 at 03:17:59PM +0200, Muriel wrote: Il 10/05/2012 11:48, Alvaro Lopez ha scritto: On Thu 10 May 2012 (10:41), Muriel wrote: If I remember correctly, the qcow images are not the only problem with xen, but I'm far from the code for too long time. In the past (diablo), the

Re: [Openstack] Openstack Essex - Guide for Ubuntu 12.04

2012-04-30 Thread Daniel P. Berrange
On Mon, Apr 30, 2012 at 07:26:17AM -0500, Anne Gentle wrote: Hi Emilien - Ideally Martin's guide and your guide would be part of the OpenStack documentation - your licensing would work within our framework for docs. Martin, how is progress going on submitting your Quick Start guide through

Re: [Openstack] URL Scheme for deploying Openstack in HTTPD

2012-04-30 Thread Daniel P. Berrange
On Mon, Apr 30, 2012 at 01:58:24PM -0500, Dolph Mathews wrote: I very much like the idea that we should have a well documented recommendation on this topic. My only criticism is that the API/service names should be used in place of project names, e.g. https://hostname/identity,

Re: [Openstack] Mailing-list split

2012-04-27 Thread Daniel P. Berrange
On Fri, Apr 27, 2012 at 12:04:34PM +0200, Thierry Carrez wrote: To avoid Launchpad list slowness, we would run the new openstack-dev list off lists.openstack.org. Given the potential hassle of dealing with spam and delivery issues on mission-critical MLs, we are looking into the possibility of

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Daniel P. Berrange
On Wed, Apr 25, 2012 at 06:14:22PM -0700, Justin Santa Barbara wrote: How does everyone build OpenStack disk images? The official documentation describes a manual process (boot VM with ISO), which is sub-optimal in terms of repeatability / automation / etc. I'm hoping we can do better! I

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Daniel P. Berrange
On Thu, Apr 26, 2012 at 09:05:41AM -0700, Matt Joyce wrote: From a security stand point I am curious what you see the benefit as? Consider that you might have separate people in your data center managing the virtualization hosts, vs the storage hosts vs the network. As it standards today any of

Re: [Openstack] raw or qcow2

2012-04-17 Thread Daniel P. Berrange
On Tue, Apr 17, 2012 at 04:23:04PM +0800, William Herry wrote: Hi all we plan to use openstack on our production, we are not sure which disk type will be the better choice I did a little test on qcow2 and it's performance looks good when I use cache=writeback can some one give us some

Re: [Openstack] OVF vs. bare container formats for qcow2 images

2012-03-29 Thread Daniel P. Berrange
On Wed, Mar 28, 2012 at 04:41:28PM -0400, Lorin Hochstein wrote: All: Given that I have a qcow2 image from somewhere (e.g., downloaded it from a uec-images.ubuntu.com, created one from a raw image using qemu-img) that i want to add to glance: 1. How can I tell whether it's an ovf or bare

Re: [Openstack] [OSSA 2012-002] Extremely long passwords can crash Keystone (CVE-2012-1572)

2012-03-28 Thread Daniel P. Berrange
On Tue, Mar 27, 2012 at 02:56:42PM -0400, Russell Bryant wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenStack Security Advisory: 2012-002 CVE: CVE-2012-1572 Date: March 27, 2012 Title: Extremely long passwords can crash Keystone Impact: High Reporter: Dan Prince

Re: [Openstack] Networking guru needed: problem with FlatManager ARP when guest and bridge MACs the same

2012-03-14 Thread Daniel P. Berrange
On Wed, Mar 14, 2012 at 10:50:28AM -0700, Justin Santa Barbara wrote: We recently changed the MAC address assigned to guests so that they started with 0xfe, in the hope of avoiding (theoretical?) issues with MAC addresses changing on the bridge device as machines are shut down (because

Re: [Openstack] Random libvirt hangs

2012-03-12 Thread Daniel P. Berrange
On Mon, Mar 12, 2012 at 02:17:49PM -0400, David Kranz wrote: In the spirit of Jay's message, we have a long-running cluster (diablo/kvm) where about once every 3-4 weeks a user will complain that she cannot connect to a vm. Examining the compute node shows that libvirt-bin is hung. Sometimes

Re: [Openstack] 答复: RFC: Rewritten libvirt driver XML generation

2012-03-09 Thread Daniel P. Berrange
On Fri, Mar 09, 2012 at 09:52:21AM +0800, wangsuyi640 wrote: Hi all: I tried kvm on my openstack on ubuntu11.10 with the libvirt.xml file as follows: Howerver, I want change the remote access method by spice, I simply changed the libvirt.xml as follows: domain type='kvm' [snip]

Re: [Openstack] Libvirt Snapshots

2012-03-09 Thread Daniel P. Berrange
On Fri, Mar 09, 2012 at 10:43:35AM -0600, rb...@hexagrid.com wrote: Even though it's more of a libvirt question since the topic of snapshot is being discussed, thought of asking it. Does libvirt 0.95 uses the backing file concept? or is that the same thing that Vish mentioned as option 1 The

[Openstack] RFC: Rewritten libvirt driver XML generation

2012-03-08 Thread Daniel P. Berrange
Back in January Joshua Harlow raised the question of whether we should replace the usage of Cheetah templates for generating XML in the libvirt driver: https://lists.launchpad.net/openstack/msg06481.html Since then I have had some time to work on this idea and now have a working branch

Re: [Openstack] [Nova] Essex dead wood cutting

2012-02-06 Thread Daniel P. Berrange
On Thu, Feb 02, 2012 at 11:52:17AM +, Armando Migliaccio wrote: To the best of my knowledge, the ESXi support is up to date. There may be bugs, but which virt driver is perfect ;)? Sateesh may know more, because he is the main contributor/maintainer from Citrix. However, as Vish

Re: [Openstack] Nova is considering Xen Domain-0 as instance

2012-01-16 Thread Daniel P. Berrange
On Mon, Jan 16, 2012 at 10:29:19AM -0200, Rogério Vinhal Nunes wrote: As Daniel suggested, I just ignored the ID == 0 and it seems to work fine now. The resulting code is even simpler than suggested by Vish: def list_instances(self): return [self._conn.lookupByID(x).name()

Re: [Openstack] Nova is considering Xen Domain-0 as instance

2012-01-12 Thread Daniel P. Berrange
On Thu, Jan 12, 2012 at 07:36:59PM -0200, Rogério Vinhal Nunes wrote: I really need some help in getting this to work. This seems pretty simple, just tell nova-compute to ignore any instance named Domain-0 (actually it could ignore any instance not named 'instance-'). As there is a

Re: [Openstack] Tempita usage?

2012-01-06 Thread Daniel P. Berrange
On Thu, Jan 05, 2012 at 10:33:00AM -0800, Joshua Harlow wrote: Hmmm, so the RNG schemas aren't stable? Is that basically the problem there (or part of it)? That seems not so good, since I thought the whole point of publishing schemas was for people to use them, darn :( Well there are two

Re: [Openstack] Tempita usage?

2012-01-06 Thread Daniel P. Berrange
On Fri, Jan 06, 2012 at 10:36:58AM -0800, Joshua Harlow wrote: Cool, Maybe I can get a branch out there that u can start hooking in by early feb. That would seem like a good use of time :-) Great, sounds like a good plan. Daniel -- |: http://berrange.com -o-

Re: [Openstack] Tempita usage?

2012-01-05 Thread Daniel P. Berrange
On Tue, Jan 03, 2012 at 11:17:45AM -0800, Joshua Harlow wrote: I was wondering if there has been any thought or consideration of removing tempita and replacing it with just python. Personally the current tempita usage (libvirt.xml.template) seems to be heading down a hairy path and I wanted

Re: [Openstack] HPC with Openstack?

2011-12-06 Thread Daniel P. Berrange
On Mon, Dec 05, 2011 at 09:07:06PM -0500, Lorin Hochstein wrote: On Dec 4, 2011, at 7:46 AM, Soren Hansen wrote: 2011/12/4 Lorin Hochstein lo...@isi.edu: Some of the LXC-related issues we've run into: - The CPU affinity issue on LXC you mention. Running LXC with OpenStack, you

Re: [Openstack] [DODCS] HPC with Openstack?

2011-12-06 Thread Daniel P. Berrange
On Tue, Dec 06, 2011 at 12:04:53PM -0800, Dong-In David Kang wrote: - Original Message - On Mon, Dec 05, 2011 at 09:07:06PM -0500, Lorin Hochstein wrote: On Dec 4, 2011, at 7:46 AM, Soren Hansen wrote: 2011/12/4 Lorin Hochstein lo...@isi.edu: Some of the