[Openstack] Please help me understand the concept of nova instances paths
Hello, I am setting up an OpenStack lab, and I am hoping someone can help me with a concept I'm having trouble grasping. I have a simple setup with a controller running keystone, glance, volume, dashboard etc. A single compute node, running compute and network and I have a nexenta SAN server for iSCSI volumes. I am using libvirt_type=kvm. My setup is working fine, I can start instances, create iSCSI volumes and attach them to instances. What I don't understand is the logic behind the compute instances_path. When I start a new instance a root and ephemeral disk is created, but on the local disk of the compute node, set to instances_path=/var/lib/nova/instances. This seems to be by design, but I don't understand why this would be if I could utilize my san server for the root disk. If I am correct in understanding this, the root disk is persistent and the ephemeral is not, so any changes made to ephemeral disk are expected to be lost at some point. However in the event that my physical compute node were to crash and the instance started on another compute node any changes to the root disk are lost until I can recover the crashed node. I can see that I have an option to boot from a volume, but the volume must be first manually created and then, from what I understand, I have to populate the volume myself using dd or something similar. Can this not be done using the glance image store like it does when it uses the local instance path? In my ideal setup the compute nodes would have very minimal local block devices (maybe diskless) and get almost all of their storage via iSCSI LUNs. Is the only way around this to manually setup an iSCSI LUN for each compute node and mount it at, instances_path=/path/to/iscsi/mount? When I did some googleing about this I fond a post suggesting that one could use an NFS share for the instances path, I would prefer not to use NFS if I can avoid it. How do other people manage similar setups, do most people just use local disks for the instance path? I feel like I must be missing something in my thinking. Does any one do as I suggested above or am I thinking about this all wrong? Many thanks for your time and any help! Kind Regards Jake ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [nova-compute] vm migration problem
Hey Eric, make sure first to read that :http://docs.openstack.org/trunk/openstack-compute/admin/content/configuring-live-migrations.htmland also make sure on both systems the user "nova" the SSH keys are installedRazique Eric Luo 21 mai 2012 11:34Hello ,all. I have a two nodes installation . OS1 is the cloud controller ,and OS2 is a nova-compute node.I have a vm (name as vm1) running on OS1.When I use the command nova migrate vm1 The dashboard is showing the vm1 as : status :error ,task :Resize Prep I tail ed the nova-compute.log in OS1, and found thefollowing error information while running thenova migrate vm1 command : Can someone please explain to me what does these error mean ,and what's wrong with myconfig...2012-05-21 17:20:45 ERROR nova.compute.manager [req-d0f494cb-e9d6-41d2-b6df-6faa432a644d 6ffaaedb60c24f5eb888319e1e387d75 0d7a5a12b6f54aa9bff986bf138bc0b7] Unexpected error while running command. Command: ssh 192.168.0.205 mkdir -p /var/lib/nova/instances/instance-000aExit code: 255Stdout: '' Stderr: 'Host key verification failed.\r\n'. Setting instance vm_state to ERROR2012-05-21 17:20:45 ERROR nova.rpc.amqp [req-d0f494cb-e9d6-41d2-b6df-6faa432a644d 6ffaaedb60c24f5eb888319e1e387d75 0d7a5a12b6f54aa9bff986bf138bc0b7] Exception during message handling 2012-05-21 17:20:45 TRACE nova.rpc.amqp Traceback (most recent call last):2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/rpc/amqp.py", line 252, in _process_data 2012-05-21 17:20:45 TRACE nova.rpc.amqp rval = node_func(context=ctxt, **node_args)2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/exception.py", line 114, in wrapped 2012-05-21 17:20:45 TRACE nova.rpc.amqp return f(*args, **kw)2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 153, in decorated_function 2012-05-21 17:20:45 TRACE nova.rpc.amqp function(self, context, instance_uuid, *args, **kwargs)2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 177, in decorated_function 2012-05-21 17:20:45 TRACE nova.rpc.amqp sys.exc_info())2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/contextlib.py", line 24, in __exit__2012-05-21 17:20:45 TRACE nova.rpc.amqp self.gen.next() 2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 171, in decorated_function2012-05-21 17:20:45 TRACE nova.rpc.amqp return function(self, context, instance_uuid, *args, **kwargs) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 1330, in resize_instance2012-05-21 17:20:45 TRACE nova.rpc.amqp self._set_instance_error_state(context, instance_uuid) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/contextlib.py", line 24, in __exit__2012-05-21 17:20:45 TRACE nova.rpc.amqp self.gen.next()2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 1325, in resize_instance 2012-05-21 17:20:45 TRACE nova.rpc.amqp instance_type_ref, self._legacy_nw_info(network_info))2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/exception.py", line 114, in wrapped 2012-05-21 17:20:45 TRACE nova.rpc.amqp return f(*args, **kw)2012-05-21 17:20:45 TRACE nova.rpc.amqp File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/connection.py", line 2363, in migrate_disk_and_power_off 2012-05-21 17:20:45 TRACE nova.rpc.amqp raise e2012-05-21 17:20:45 TRACE nova.rpc.amqp ProcessExecutionError: Unexpected error while running command. 2012-05-21 17:20:45 TRACE nova.rpc.amqp Command: ssh 192.168.0.205 mkdir -p /var/lib/nova/instances/instance-000a2012-05-21 17:20:45 TRACE nova.rpc.amqp Exit code: 255 2012-05-21 17:20:45 TRACE nova.rpc.amqp Stdout: ''2012-05-21 17:20:45 TRACE nova.rpc.amqp Stderr: 'Host key verification failed.\r\n' 2012-05-21 17:20:45 TRACE nova.rpc.amqp^C ___Mailing list: https://launchpad.net/~openstackPost to : openstack@lists.launchpad.netUnsubscribe : https://launchpad.net/~openstackMore help : https://help.launchpad.net/ListHelp-- Nuage Co - Razique Mahroua razique.mahr...@gmail.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [nova-compute] vm migration problem
Hi Eric, It would appear that the nova user on one of the compute nodes had at one time cached the SSH host key of the other node and now the key has changed. You can bypass this by adding the following to ~nova/.ssh/config on both compute nodes: Host * StrictHostKeyChecking no UserKnownHostsFile=/dev/null --- Joseph Breu Deployment Engineer Rackspace Cloud Builders 210-312-3508 On May 21, 2012, at 11:34 AM, Eric Luo wrote: Hello ,all. I have a two nodes installation . OS1 is the cloud controller ,and OS2 is a nova-compute node. I have a vm (name as vm1) running on OS1. When I use the command nova migrate vm1 The dashboard is showing the vm1 as : status :error ,task :Resize Prep I tail ed the nova-compute.log in OS1, and found the following error information while running the nova migrate vm1 command : Can someone please explain to me what does these error mean ,and what's wrong with my config ... 2012-05-21 17:20:45 ERROR nova.compute.manager [req-d0f494cb-e9d6-41d2-b6df-6faa432a644d 6ffaaedb60c24f5eb888319e1e387d75 0d7a5a12b6f54aa9bff986bf138bc0b7] Unex pected error while running command. Command: ssh 192.168.0.205 mkdir -p /var/lib/nova/instances/instance-000a Exit code: 255 Stdout: '' Stderr: 'Host key verification failed.\r\n'. Setting instance vm_state to ERROR 2012-05-21 17:20:45 ERROR nova.rpc.amqp [req-d0f494cb-e9d6-41d2-b6df-6faa432a644d 6ffaaedb60c24f5eb888319e1e387d75 0d7a5a12b6f54aa9bff986bf138bc0b7] Exception during message handling 2012-05-21 17:20:45 TRACE nova.rpc.amqp Traceback (most recent call last): 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/rpc/amqp.py, line 252, in _process_data 2012-05-21 17:20:45 TRACE nova.rpc.amqp rval = node_func(context=ctxt, **node_args) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/exception.py, line 114, in wrapped 2012-05-21 17:20:45 TRACE nova.rpc.amqp return f(*args, **kw) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 153, in decorated_function 2012-05-21 17:20:45 TRACE nova.rpc.amqp function(self, context, instance_uuid, *args, **kwargs) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 177, in decorated_function 2012-05-21 17:20:45 TRACE nova.rpc.amqp sys.exc_info()) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/contextlib.py, line 24, in __exit__ 2012-05-21 17:20:45 TRACE nova.rpc.amqp self.gen.next() 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 171, in decorated_function 2012-05-21 17:20:45 TRACE nova.rpc.amqp return function(self, context, instance_uuid, *args, **kwargs) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 1330, in resize_instance 2012-05-21 17:20:45 TRACE nova.rpc.amqp self._set_instance_error_state(context, instance_uuid) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/contextlib.py, line 24, in __exit__ 2012-05-21 17:20:45 TRACE nova.rpc.amqp self.gen.next() 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 1325, in resize_instance 2012-05-21 17:20:45 TRACE nova.rpc.amqp instance_type_ref, self._legacy_nw_info(network_info)) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/exception.py, line 114, in wrapped 2012-05-21 17:20:45 TRACE nova.rpc.amqp return f(*args, **kw) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/virt/libvirt/connection.py, line 2363, in migrate_disk_and_power_off 2012-05-21 17:20:45 TRACE nova.rpc.amqp raise e 2012-05-21 17:20:45 TRACE nova.rpc.amqp ProcessExecutionError: Unexpected error while running command. 2012-05-21 17:20:45 TRACE nova.rpc.amqp Command: ssh 192.168.0.205 mkdir -p /var/lib/nova/instances/instance-000a 2012-05-21 17:20:45 TRACE nova.rpc.amqp Exit code: 255 2012-05-21 17:20:45 TRACE nova.rpc.amqp Stdout: '' 2012-05-21 17:20:45 TRACE nova.rpc.amqp Stderr: 'Host key verification failed.\r\n' 2012-05-21 17:20:45 TRACE nova.rpc.amqp ^C ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Dashboard] Can't access images/snapshots
Thanks, that did it!! Regards, Leander On Fri, May 18, 2012 at 10:43 PM, Vishvananda Ishaya vishvana...@gmail.comwrote: i think you need to update your endpoint to: http://192.168.111.202:8776/v1/%(tenant_id)s note that the volume endpoint should be v1 not v2T Vish On May 18, 2012, at 6:01 AM, Leander Bessa Beernaert wrote: Ok, i've removed swift from the endpoints and services. Nova volumes is running with a 2GB file as volume on disk and the log files seem ok. However, i still keep getting this error for volume-list ( http://paste.openstack.org/show/17991/) and this error for snapshot-list ( http://paste.openstack.org/show/17992/). On Thu, May 17, 2012 at 7:39 PM, Gabriel Hurley gabriel.hur...@nebula.com wrote: Two points: ** ** Nova Volume is a required service for Essex Horizon. That’s documented, and there are plans to make it optional for Folsom. However, not having it should yield a pretty error message in the dashboard, not a KeyError in novaclient, which leads me to my second point… ** ** It sounds like your Keystone service catalog is misconfigured. If you’re seeing Swift (AKA Object Store) in the dashboard, that means it’s in your keystone service catalog. Swift is a completely optional component and is triggered on/off by the presence of an “object-store” endpoint returned by Keystone. ** ** I’d check and make sure the services listed in Keystone’s catalog are correct for what’s actually running in your environment. ** ** All the best, ** ** **- **Gabriel ** ** *From:* openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net[mailto: openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net] *On Behalf Of *Leander Bessa Beernaert *Sent:* Thursday, May 17, 2012 8:45 AM *To:* Sébastien Han *Cc:* openstack@lists.launchpad.net *Subject:* Re: [Openstack] [Dashboard] Can't access images/snapshots ** ** Now i made sure nova-volume is installed and running. I still keep running into the same problem. It also happens from the command line tool. This is the output produced http://paste.openstack.org/show/17929/ On Thu, May 17, 2012 at 11:17 AM, Leander Bessa Beernaert leande...@gmail.com wrote: I have no trouble from the command line. One thing i find peculiar is that i haven't installed swift and nova-volume yet and they show up as enabled services in the dashboard. Is that normal? ** ** On Wed, May 16, 2012 at 11:39 PM, Sébastien Han han.sebast...@gmail.com wrote: Hi, ** ** Do you also have an error when retrieving from the command line? ~Cheers! On Wed, May 16, 2012 at 5:38 PM, Leander Bessa Beernaert leande...@gmail.com wrote: Hello, ** ** I keep running into this error when i try to list the images/snapshot in dashboard: http://paste.openstack.org/show/17820/ ** ** This is my local_settings.py file: http://paste.openstack.org/show/17822/ , am i missing something? ** ** Regards, ** ** Leander ** ** ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ** ** ** ** ** ** ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] python-swiftclient in gerrit
Hi, As mentioned a couple of times we are splitting python-swiftclient out of swift, this is mostly ready to cut in its own gerrit project here : https://github.com/chmouel/python-swiftclient monty any chance to get that repo into gerrit with the swift-core being the approvers. I haven't add much more than make it works, I am waiting to get it into gerrit to before starting to do a bit of refactoring and additions. The other steps needed to be done to make python-swiftclient a world-class library for other OpenStack components will be : - remove the swift.common.client and bin/swift and unittests from swift. - Update the bin/swift-dispersion-(report|populate) tools, utils swift.container.sync feature and functional tests to use the new library. - Update documentation. - Let people know about the namespace change (ie: blog post). - Work on migrating horizon from python-cloudfiles. - Work on Glance integration. As suggested, we probably can move swift.common.direct_client[1] to swiftclient, if nobody has any objection I'll move it under the namespace swiftclient.admin after we have moved to gerrit. Let me know if I have missed something. Chmouel. [1] For people wondering : Internal client library for making calls directly to the servers rather than through the proxy. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] python-swiftclient in gerrit
On Mon, May 21, 2012 at 12:25 PM, Chmouel Boudjnah chmo...@chmouel.com wrote: The other steps needed to be done to make python-swiftclient a world-class library for other OpenStack components will be : [...] Let me know if I have missed something. Obviously there is devstack as well. Chmouel. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] swift3 middleware split.
Hi Fujita, I have sent you a pull request for your swift3 repository : https://github.com/fujita/swift3/pull/1 I have added a few files to match a bit more what gholt did in the other middlewares and copied the swift3 unittests as well. I am going to work on a branch for devstack that use this middleware for testing since we have a an excercise there that functionally test much of this feature (via euca-upload-bundle). When this is done we can probably remove it from swift main repository and let know people by updating documentation (ie: s3_token in swift) and others (ie: blog post) about the change. Let me know what do you think, Regards, Chmouel. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] nova network external gateway
Thanks... it works ok... There is some kind of configuration for DNS too?? I change my DNS server in /etc/resolv.conf but some time later it goes back to the default one set by dsnmasq. :-( :-( Sergio Ariel de la Campa Saiz GMV-SES Infraestructura / GMV-SES Infrastructure GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com De: George Mihaiescu [george.mihaie...@q9.com] Enviado el: viernes, 18 de mayo de 2012 16:11 Para: Sergio Ariel de la Campa Saiz CC: openstack@lists.launchpad.net; openstack-operat...@lists.openstack.org Asunto: RE: [Openstack] nova network external gateway You can try the solution proposed by Vish on February 23, 2012. Put the flag and the config file on the nodes with nova-network as they have dnsmasq running: “ Then you can use --dnsmasq_config_file=/path/to/config in that config file you can use: dhcp_opiton=3,ip of router to force vms to use your router as their gateway. “ From: openstack-bounces+george.mihaiescu=q9@lists.launchpad.net [mailto:openstack-bounces+george.mihaiescu=q9@lists.launchpad.net] On Behalf Of Sergio Ariel de la Campa Saiz Sent: Friday, May 18, 2012 8:49 AM To: openstack@lists.launchpad.net; openstack-operat...@lists.openstack.org Subject: [Openstack] nova network external gateway Hi: I have installed Essex and I´m using vlan networking. All virtual machines use the same vlan, but I want all of them use an external gateway, I mean, a real router of my network instead of a nova node. I have read about it and I have found a parameter named: dhcpoption=3,gateway ip but I don´t know where to put it. I know that dnsmasq loads it but... from where?? I did not find any dnsmasq.conf in my system and, in the other hand, I put it in my nova.conf file and nothing happened. Thanks in advance Good luck... Sergio Ariel de la Campa Saiz GMV-SES Infraestructura / GMV-SES Infrastructure GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com size=2 width=100% align=center This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener información clasificada por su emisor como confidencial en el marco de su Sistema de Gestión de Seguridad de la Información siendo para uso exclusivo del destinatario, quedando prohibida su divulgación copia o distribución a terceros sin la autorización expresa del remitente. Si Vd. ha recibido este mensaje erróneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboración. Esta mensagem, incluindo qualquer ficheiro anexo, pode conter informação confidencial, de acordo com nosso Sistema de Gestão de Segurança da Informação, sendo para uso exclusivo do destinatário e estando proibida a sua divulgação, cópia ou distribuição a terceiros sem autorização expressa do remetente da mesma. Se recebeu esta mensagem por engano, por favor avise de imediato o remetente e apague-a. Obrigado pela sua colaboração. __ This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. __ Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener informacion clasificada por su emisor como confidencial en el marco de su Sistema de Gestion de Seguridad de la Informacion siendo para uso exclusivo del destinatario, quedando prohibida su divulgacion copia o distribucion a terceros sin la autorizacion expresa del remitente. Si Vd. ha recibido este mensaje erroneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboracion. __ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Packets doesn't arrive to iptables
Hello guys, i've associated a floating ip to an instance, this is ip addr result: 2: eth0: BROADCAST,MULTICAST,UP,LOWER_UP mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 00:30:48:fc:4c:92 brd ff:ff:ff:ff:ff:ff inet publicip/24 brd 188.165.225.255 scope global eth0 inet floatingip/32 scope global eth0:1 inet6 fe80::230:48ff:fefc:4c92/64 scope link valid_lft forever preferred_lft forever as you can see the floating ip is there, binded to eth0, now i was trying to know why dnat wasn't working, i've tried to add a catch-all log rule into the first table and chain iptables process with this command: iptables -t mangle -D PREROUTING -j LOG --log-prefix=PREROUTING: and i looking at logs i can see all packets except those with destination set to floatingip, also -v shows no hits to the dnat rule but i can see packets on eth0 with tcpdump. Any idea why packets are not reaching the dnat rule? Best ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] nova network external gateway
You can use this option dhcp-option=6,IP_OF_DNS1,IP_OF_DNS2 that should be appended on the same file. Best Il giorno 21/mag/2012, alle ore 13:34, Sergio Ariel de la Campa Saiz ha scritto: Thanks... it works ok... There is some kind of configuration for DNS too?? I change my DNS server in /etc/resolv.conf but some time later it goes back to the default one set by dsnmasq. :-( :-( Sergio Ariel de la Campa Saiz GMV-SES Infraestructura / GMV-SES Infrastructure GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com De: George Mihaiescu [george.mihaie...@q9.com] Enviado el: viernes, 18 de mayo de 2012 16:11 Para: Sergio Ariel de la Campa Saiz CC: openstack@lists.launchpad.net; openstack-operat...@lists.openstack.org Asunto: RE: [Openstack] nova network external gateway You can try the solution proposed by Vish on February 23, 2012. Put the flag and the config file on the nodes with nova-network as they have dnsmasq running: “ Then you can use --dnsmasq_config_file=/path/to/config in that config file you can use: dhcp_opiton=3,ip of router to force vms to use your router as their gateway. “ From: openstack-bounces+george.mihaiescu=q9@lists.launchpad.net [mailto:openstack-bounces+george.mihaiescu=q9@lists.launchpad.net] On Behalf Of Sergio Ariel de la Campa Saiz Sent: Friday, May 18, 2012 8:49 AM To: openstack@lists.launchpad.net; openstack-operat...@lists.openstack.org Subject: [Openstack] nova network external gateway Hi: I have installed Essex and I´m using vlan networking. All virtual machines use the same vlan, but I want all of them use an external gateway, I mean, a real router of my network instead of a nova node. I have read about it and I have found a parameter named: dhcpoption=3,gateway ip but I don´t know where to put it. I know that dnsmasq loads it but... from where?? I did not find any dnsmasq.conf in my system and, in the other hand, I put it in my nova.conf file and nothing happened. Thanks in advance Good luck... Sergio Ariel de la Campa Saiz GMV-SES Infraestructura / GMV-SES Infrastructure GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com size=2 width=100% align=center This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener información clasificada por su emisor como confidencial en el marco de su Sistema de Gestión de Seguridad de la Información siendo para uso exclusivo del destinatario, quedando prohibida su divulgación copia o distribución a terceros sin la autorización expresa del remitente. Si Vd. ha recibido este mensaje erróneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboración. Esta mensagem, incluindo qualquer ficheiro anexo, pode conter informação confidencial, de acordo com nosso Sistema de Gestão de Segurança da Informação, sendo para uso exclusivo do destinatário e estando proibida a sua divulgação, cópia ou distribuição a terceiros sem autorização expressa do remetente da mesma. Se recebeu esta mensagem por engano, por favor avise de imediato o remetente e apague-a. Obrigado pela sua colaboração. This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener información clasificada por su emisor como confidencial en el marco de su Sistema de Gestión de Seguridad de la Información siendo para uso exclusivo del destinatario, quedando prohibida su divulgación copia o distribución a terceros sin la autorización expresa del remitente. Si Vd. ha recibido este mensaje erróneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboración. Esta mensagem, incluindo qualquer ficheiro anexo, pode conter informação confidencial, de acordo com nosso Sistema de Gestão de Segurança da Informação, sendo para uso exclusivo do destinatário e estando proibida a sua divulgação, cópia ou distribuição a terceiros sem autorização expressa do remetente da mesma. Se recebeu
[Openstack] Stackforge server issue
Hi, It seems the Stackforge server has a little problem lately. I'm unable to post a review on Gerrit, nor to use git-review: error: unpack failed: error No space left on device fatal: Unpack error, check server log Anyone could take a look? Thanks, -- Julien Danjou // eNovance http://enovance.com // ✉ julien.dan...@enovance.com ☎ +33 1 49 70 99 81 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Stackforge server issue
Hi Julien, On 21/05/12 13:07, Julien Danjou wrote: It seems the Stackforge server has a little problem lately. I'm unable to post a review on Gerrit, nor to use git-review: error: unpack failed: error No space left on device fatal: Unpack error, check server log Anyone could take a look? Thanks for bringing it to my intention. It is running from the wrong disk partition which is now full. I'll fix it now. Kind Regards -- Andrew Hutchings - LinuxJedi - http://www.linuxjedi.co.uk/ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Server shutdown/ restart issues when libvirt is used
Ok, in fact it seems that is the action "plymouth-upstart-bridge" that is responsible for such.I'm still digging, I don't really know why it prevents the server for halting/ rebooting Razique Mahroua 21 mai 2012 11:15 Hi guys, I'm testing essex in an AIO solution (on a vmware VM)After researches by elimination, I noticed libvirt-bin libvirt0, when installed (dependency of nova-compute and nova-compute-qemu/kvm), the server no longer either boots or restarts (no matter the used command : shutdown -h now, reboot, poweroff, shutdown 0, etc..), it hangs on acpid:exitingI use Ubuntu-server 12.04 LTS up-to-dateHave you noticed such behaviour ?best regards,Razique -- Nuage Co - Razique Mahroua razique.mahr...@gmail.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Stackforge server issue
Hi Julien, On 21/05/12 13:36, Andrew Hutchings wrote: On 21/05/12 13:07, Julien Danjou wrote: It seems the Stackforge server has a little problem lately. I'm unable to post a review on Gerrit, nor to use git-review: error: unpack failed: error No space left on device fatal: Unpack error, check server log Anyone could take a look? Thanks for bringing it to my intention. It is running from the wrong disk partition which is now full. I'll fix it now. Should be OK now. Please let me know if you run into any problems. Kind Regards -- Andrew Hutchings - LinuxJedi - http://www.linuxjedi.co.uk/ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] RFC: Plugin framework draft
Andrew Bogott wrote:
Remaining tasks:
- Extending rootwrap (or, specifically, getting gluster into sudo somehow)
I started looking into the security model around adding run-as-root
commands. You obviously can't rely on code run as the nova user to plug
in new run-as-root commands, as it would defeat the security model.
I still need to polish the model, but the idea would be to rely on a
root-owned configuration directory (think /etc/nova/rootwrap.d) in which
the filters would be described. The directory would be specified
directly on the root_helper option, and authorized by the sudoers file.
The filters configuration files would replace the current static
rootwrap.{compute,network...} files.
So a plug-in that wants to add nova run-as-root commands would just have
to drop an extra file in that directory, as part of its install.
Thoughts ?
--
Thierry Carrez (ttx)
Release Manager, OpenStack
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] swift3 middleware split.
Hello, On Mon, 21 May 2012 13:34:29 +0200 Chmouel Boudjnah chmo...@chmouel.com wrote: I have sent you a pull request for your swift3 repository : https://github.com/fujita/swift3/pull/1 Applied, thanks! I have added a few files to match a bit more what gholt did in the other middlewares and copied the swift3 unittests as well. I am going to work on a branch for devstack that use this middleware for testing since we have a an excercise there that functionally test much of this feature (via euca-upload-bundle). When this is done we can probably remove it from swift main repository and let know people by updating documentation (ie: s3_token in swift) and others (ie: blog post) about the change. Sounds fine to me. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Stackforge server issue
On Mon, May 21 2012, Andrew Hutchings wrote: Should be OK now. Please let me know if you run into any problems. Everything seems fine now, thanks Andrew! -- Julien Danjou // eNovance http://enovance.com // ✉ julien.dan...@enovance.com ☎ +33 1 49 70 99 81 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] nova network external gateway
Thanks a lot!!! Searchin in google, I have found this options. I put them here if someone need it: # Gateway dhcp-option=3,10.0.0.1 # DNS dhcp-option=6,10.0.0.1 # Domain Name dhcp-option=15,dhcp.edoceo.com # IP Forward (no) dhcp-option=19,0 # Source Routing dhcp-option=20,0 # TTL # dhcp-option=23,64 # Broadcast Address # dhcp-option=28,10.0.0.255 # 0.0.0.0 Means to reference self for this option # NTP Server dhcp-option=42,0.0.0.0 # 44-47 NetBIOS dhcp-option=44,0.0.0.0 dhcp-option=45,0.0.0.0 dhcp-option=46,8 dhcp-option=47 dhcp-authoritative Sergio Ariel de la Campa Saiz GMV-SES Infraestructura / GMV-SES Infrastructure GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com De: Alessandro Tagliapietra [tagliapietra.alessan...@gmail.com] Enviado el: lunes, 21 de mayo de 2012 13:59 Para: Sergio Ariel de la Campa Saiz CC: George Mihaiescu; openstack-operat...@lists.openstack.org; openstack@lists.launchpad.net Asunto: Re: [Openstack] nova network external gateway You can use this option dhcp-option=6,IP_OF_DNS1,IP_OF_DNS2 that should be appended on the same file. Best Il giorno 21/mag/2012, alle ore 13:34, Sergio Ariel de la Campa Saiz ha scritto: Thanks... it works ok... There is some kind of configuration for DNS too?? I change my DNS server in /etc/resolv.conf but some time later it goes back to the default one set by dsnmasq. :-( :-( Sergio Ariel de la Campa Saiz GMV-SES Infraestructura / GMV-SES Infrastructure GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com De: George Mihaiescu [george.mihaie...@q9.com] Enviado el: viernes, 18 de mayo de 2012 16:11 Para: Sergio Ariel de la Campa Saiz CC: openstack@lists.launchpad.net; openstack-operat...@lists.openstack.org Asunto: RE: [Openstack] nova network external gateway You can try the solution proposed by Vish on February 23, 2012. Put the flag and the config file on the nodes with nova-network as they have dnsmasq running: “ Then you can use --dnsmasq_config_file=/path/to/config in that config file you can use: dhcp_opiton=3,ip of router to force vms to use your router as their gateway. “ From: openstack-bounces+george.mihaiescu=q9@lists.launchpad.net [mailto:openstack-bounces+george.mihaiescu=q9@lists.launchpad.net] On Behalf Of Sergio Ariel de la Campa Saiz Sent: Friday, May 18, 2012 8:49 AM To: openstack@lists.launchpad.net; openstack-operat...@lists.openstack.org Subject: [Openstack] nova network external gateway Hi: I have installed Essex and I´m using vlan networking. All virtual machines use the same vlan, but I want all of them use an external gateway, I mean, a real router of my network instead of a nova node. I have read about it and I have found a parameter named: dhcpoption=3,gateway ip but I don´t know where to put it. I know that dnsmasq loads it but... from where?? I did not find any dnsmasq.conf in my system and, in the other hand, I put it in my nova.conf file and nothing happened. Thanks in advance Good luck... Sergio Ariel de la Campa Saiz GMV-SES Infraestructura / GMV-SES Infrastructure GMV Isaac Newton, 11 P.T.M. Tres Cantos E-28760 Madrid Tel. +34 91 807 21 00 Fax +34 91 807 21 99 www.gmv.com size=2 width=100% align=center This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are addressed. Any unauthorised copy, disclosure or distribution of this message is strictly forbidden. If you have received this transmission in error, please notify the sender immediately and delete it. Este mensaje, y en su caso, cualquier fichero anexo al mismo, puede contener información clasificada por su emisor como confidencial en el marco de su Sistema de Gestión de Seguridad de la Información siendo para uso exclusivo del destinatario, quedando prohibida su divulgación copia o distribución a terceros sin la autorización expresa del remitente. Si Vd. ha recibido este mensaje erróneamente, se ruega lo notifique al remitente y proceda a su borrado. Gracias por su colaboración. Esta mensagem, incluindo qualquer ficheiro anexo, pode conter informação confidencial, de acordo com nosso Sistema de Gestão de Segurança da Informação, sendo para uso exclusivo do destinatário e estando proibida a sua divulgação, cópia ou distribuição a terceiros sem autorização expressa do remetente da mesma. Se recebeu esta mensagem por engano, por favor avise de imediato o remetente e apague-a. Obrigado pela sua colaboração. This message including any attachments may contain confidential information, according to our Information Security Management System, and intended solely for a specific individual to whom they are
Re: [Openstack] Opening up bug triaging rights
I did a bit of research on the different rights, and it's different from what I thought. So here is some extra info before we take a final decision: Random users can: * Set status to everything but Triaged and WontFix * Assign bugs Bug supervisors can: * Set any status * Set importance * Reopen closed bugs * Make tags official * Nominate a bug for backport to a past series * Set milestones Project drivers can: * Accept a nomination for a backport to a past series Based on that, I think I agree with Brian and Jay that the bug supervisor's team should essentially be experienced developers, and the best match we have for that is PROJECT-core. That means random user triaging is limited to setting status, and most notably not setting Importance, which means the core team will have to spend some time on bug prioritization. -- Thierry Carrez (ttx) Release Manager, OpenStack ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] confuse about keystone rule
Hi William: Some new documentation just landed that should clear things up: http://docs.openstack.org/trunk/openstack-compute/admin/content/keystone-concepts.html (Short answer: by default, only the admin role has meaning unless you edit the policy.conf files). Take care, Lorin -- Lorin Hochstein Lead Architect - Cloud Services Nimbis Services, Inc. www.nimbisservices.com On May 20, 2012, at 9:19 PM, William Herry wrote: Hi, I am a little confuse about keystone roles, there are several role like admin, Member, KeystoneAdmin, KeystoneServiceAdmin, sysadmin, netadmin, I want to know does those name have special means, or just a name and I can name my role with any name I like, if they have special means, why should I create them manually? can some one explain to me or give me some links? Thanks -- === William Herry williamherrych...@gmail.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [cinder] weekly meeting reminder
Just a reminder, we've changed our weekly meeting time to Wednesdays at 16:00 UTC effective this week (Wed May 23, 2012). Also keep in mind this is still a nova-volume meeting as well, so if you have topics please join us. Thanks, John ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] RFC: Plugin framework draft
On 5/21/12 7:53 AM, Thierry Carrez wrote:
Andrew Bogott wrote:
Remaining tasks:
- Extending rootwrap (or, specifically, getting gluster into sudo somehow)
I started looking into the security model around adding run-as-root
commands. You obviously can't rely on code run as the nova user to plug
in new run-as-root commands, as it would defeat the security model.
I still need to polish the model, but the idea would be to rely on a
root-owned configuration directory (think /etc/nova/rootwrap.d) in which
the filters would be described. The directory would be specified
directly on the root_helper option, and authorized by the sudoers file.
The filters configuration files would replace the current static
rootwrap.{compute,network...} files.
So a plug-in that wants to add nova run-as-root commands would just have
to drop an extra file in that directory, as part of its install.
That sounds perfectly reasonable.
I don't immediately know the proper way to do that using pip and
setup.py, but since they run as root it should be trivial to create a
new file at install time. I can only hope that there's an equivalent
option during uninstall.
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
[Openstack] [Doc] Starter docs and articles
Hi all - I wanted to send a note out to discuss the growth of all the starter docs and articles on a particular topic. Thanks all who are sending these to the mailing list or tweeting 'em. We are listening. The doc team has been discussing ways to ensure we help people find what they seek while still getting high-quality content into the official documentation. Here are some ideas. I'd like to get input from our wider community as well. What we're doing: - Add a Where do I start? section to the docs landing page. [1] Let us know what you think of this approach. We discussed quite a bit a more friendly approach to the docs site but I haven't identified a web dev and designer to do the re-do, contact me if you're interested. - Reach out to writers and where licensing allows and something official is not already documented, bring the content into the official docs. We've done this a few times now, an example is [2]. - Add link to blog entry to wiki page. [3] - Expand the install/deploy guide to include more distros so the single distro guides can standalone. [4] - Hastexo has offered to write a separate HA guide, so we won't bring in their 12.04 all in one install guide after all, since the CSS OSS guide covers a similar scenario. - Remove articles from RST docs. (Currently nova only, let's discuss, PTLs, look for a separate email and read more below.) - Add blog URLs to the Google Custom Search Engine at http://docs.openstack.org. I took this as an action item from our last doc team meeting. [5] What we've discussed: - At the Design Summit, members of the nova core team asked for removal of article style RST documents from the nova source repo, creating a more doc-string based nova.openstack.org. Members of the swift core team, when asked, did not want to go to this architecture. I haven't specifically asked all the PTLs on this particular item. So there's still a potential problem here of consistency, where to write what, and having all the project.openstack.org sites that aren't really tied together. I don't have a good solution to suggest just yet but know we're thinking about this particular problem. One idea was to have devs want to write WordPress articles and aggregate together, but we haven't found an ideal implementation (design is fine, working code, not so much). - Setting up a separate WordPress blog for documentation only. Apparently the aggregation tools just don't give us all the requirements for version labels, bringing in one blog entry at a time (RSS feeds are needed), and so on. - Setting up a support knowlege base article site such as http://support.mozilla.org. We discussed this at the last doc team meeting. It seems to solve a lot of problems we have, but my current thinking (which of course can change) is that a support KB is for troubleshooting articles, while the official docs should create a happy path. These are two different scenarios, and I'm pretty sure the docs team cannot take on the support scenario with our current resources. A support knowledge base with translation built-in will go a long way in supporting our growing base, so this is important to me, but not in the Folsom plans currently. I'll follow up with each PTL for the docstring discussion, and welcome all input. Thanks for reading this far, and thanks for the docs. Anne 1. https://review.openstack.org/#/c/7372/ 2. https://review.openstack.org/#/c/7366/ 3. http://wiki.openstack.org/BloggersTips 4. https://review.openstack.org/#/c/7431/ 5. http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-meeting.2012-05-14-19.59.html ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Bug Triage day: turn bug lists into something useful again
Hi everyone, Our bug lists have turned into a disorganized magma of information again, with lots of bugs untouched and lots of stale information. This is very undesirable since we'd like to use the bug lists to know important bugs that should be fixed before a given release/milestone. As an example, one of the RC respins for Essex was triggered by a long-filed bug that was ignored because it was lost in that magma, I'd like to avoid that in the future. So I'd like to organize a bug triage day soon after folsom-1 (one or two weeks from now). We would follow the tasks described at: http://wiki.openstack.org/BugTriage To give you an idea of how much we are onto, with todays numbers: Task 1+2: 184 for Nova, 88 for Swift Task 2 only: 26 bugs Task 3: 22+15 bugs Task 4: 87 bugs Thoughts ? -- Thierry Carrez (ttx) Release Manager, OpenStack ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] RFC: Plugin framework draft
Hi Andrew, On Thu, 2012-05-17 at 15:32 -0500, Andrew Bogott wrote: I would appreciate comments on the nascent Nova plugin framework that I'm working on. My Nova code is in a fairly modern forked branch here: https://github.com/andrewbogott/nova/tree/plugin I've also written two example plugins, which live here: https://github.com/andrewbogott/novawikiplugins The two plugins in that repo implement actual features that we need here at Wikimedia Labs -- One of them is an implementation of shared volumes similar to the one I presented at the design summit. This isn't so much of a comment on your plugin work, but do those two plugins make sense as plugins? - I'd love to see a Filesystems as a Service service in OpenStack similar to Cinder. Wouldn't it make more sense as a new service? - The wikistatus plugin uses notifications; why can't it be external to nova and pull notifications from the message bus? Cheers, Mark. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [Swift] Swift3 Github pages
Hello Fujita, I sent you a documentation pull req that should generate the sphinx doc, It would be nice to generate some static html page of the documentation as what Greg has done for his projects for example : http://gholt.github.com/swauth/ This is something done by the github project owner see http://pages.github.com or http://help.github.com/pages/ for how to do that. I have sent already the gerrit review to remove swift3 from swift : https://review.openstack.org/#/c/7628/ and reference your repository http://github.com/fujita/swift3 in associated project. Thanks, Chmouel. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [openstack][keystone] V3 API draft
Good morning, I wanted to announce that we have the first strawman/draft of a V3 API for Keystone available for comment and feedback. This is an early draft, and I expect there to be more than one. https://docs.google.com/document/d/1s9C4EMxIZ55kZr62CKEC9ip7He_Q4_g1KRfSk9hY-Sg/edit The general theme of this proposal is a broad CRUD based API supporting authentication and authorization needs in OpenStack. Back-end implementations of Keystone may not support all components of the API, hence an API return may be NotImplemented. This is to support Keystone as a programmatic facade to an deployment’s existing authentication and authorization system(s). Themes for changes: • different style of pagination that I hope will be more effective for UI work • consolidate CRUD operations currently in contrib into CORE • adding a url resource attribute that's the fully qualified resource location for the keystone service • flatten the service catalog structure • added in a domains (collection of tenants) • restructure role API calls to be specific to user-tenant or user-domain • tokens are now very explicit to user+tenant combinations • new API mechanisms to get tenants associated with a user • generalized credentials associated with a user/tenant combo (ec2, pki, ssh keys, etc) • propose an extended policy-implementation-specific API If you're interested, please review and provide feedback through the above Google Doc, or feel free to open broader discussion questions here on the list. -joe ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Glance] Replication implementations
Nice job, Mikal. I've added some review comments along with Eoghan. Best, -jay On 05/20/2012 10:43 PM, Michael Still wrote: On 09/05/12 09:01, Gabe Westmaas wrote: This actually sounds like it covers most of the first run needs in this etherpad: http://etherpad.openstack.org/FolsomGlanceImageReplication Definitely excited to see the tool, and then I wonder if we can just add a few things to it to get metadata and filtering support. Sounds like ec2 stuff is being covered. Ok, I _finally_ got around to uploading this change. Sorry for the delay. Its at https://review.openstack.org/#/c/7615/ . I've dropped the ec2 id replication for now, as it seems like we haven't come up with a good plan for that yet. I note that the ec2 api spec says that the id is just a string, so we could just use the uuid here, although we don't know what tools and scripts that might break. The next step I think is some sort of configuration language which lets you filter which images get replicated. I don't think that's too hard to do, but I haven't had a chance to give it a try yet. Cheers, Mikal ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] RFC: Plugin framework draft
On 5/21/12 10:59 AM, Mark McLoughlin wrote: Hi Andrew, On Thu, 2012-05-17 at 15:32 -0500, Andrew Bogott wrote: I would appreciate comments on the nascent Nova plugin framework that I'm working on. My Nova code is in a fairly modern forked branch here: https://github.com/andrewbogott/nova/tree/plugin I've also written two example plugins, which live here: https://github.com/andrewbogott/novawikiplugins The two plugins in that repo implement actual features that we need here at Wikimedia Labs -- One of them is an implementation of shared volumes similar to the one I presented at the design summit. This isn't so much of a comment on your plugin work, but do those two plugins make sense as plugins? - I'd love to see a Filesystems as a Service service in OpenStack similar to Cinder. Wouldn't it make more sense as a new service? It might. I gave a presentation at the design summit about shared filesystems, and in large part the response was that the feature is useful but may be outside the scope of OpenStack. The part of this feature that interests me the most is the automatic scope management (e.g. automatically attaching filesystems to new instances within a project.) That part certainly requires close contact with Nova, which might not make as much sense in a separate service. I certainly wouldn't object to this being implemented as a full-blown service, as long as someone else volunteers to coordinate the project ;) - The wikistatus plugin uses notifications; why can't it be external to nova and pull notifications from the message bus? It almost could be. It's handy to have it run within nova because I do some querying which is much simpler to handle via local calls; the notifier also makes use of request context in a couple of places, and I'm not positive that that context would still be meaningful once it passed over rpc. I'm sure that this feature could be redesigned to exist only as an rpc listener; It happens to be easier for me to implement as written, and I think it has value as a demonstration project in any case. -Andrew ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [openstack][keystone] V3 API draft
Great +1 all the points, specially tenants from user! Cheers! On Mon, May 21, 2012 at 6:11 PM, Joseph Heck he...@mac.com wrote: Good morning, I wanted to announce that we have the first strawman/draft of a V3 API for Keystone available for comment and feedback. This is an early draft, and I expect there to be more than one. https://docs.google.com/document/d/1s9C4EMxIZ55kZr62CKEC9ip7He_Q4_g1KRfSk9hY-Sg/edit The general theme of this proposal is a broad CRUD based API supporting authentication and authorization needs in OpenStack. Back-end implementations of Keystone may not support all components of the API, hence an API return may be NotImplemented. This is to support Keystone as a programmatic facade to an deployment’s existing authentication and authorization system(s). Themes for changes: • different style of pagination that I hope will be more effective for UI work • consolidate CRUD operations currently in contrib into CORE • adding a url resource attribute that's the fully qualified resource location for the keystone service • flatten the service catalog structure • added in a domains (collection of tenants) • restructure role API calls to be specific to user-tenant or user-domain • tokens are now very explicit to user+tenant combinations • new API mechanisms to get tenants associated with a user • generalized credentials associated with a user/tenant combo (ec2, pki, ssh keys, etc) • propose an extended policy-implementation-specific API If you're interested, please review and provide feedback through the above Google Doc, or feel free to open broader discussion questions here on the list. -joe ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- --- Luis Alberto Gervaso Martin Woorea Solutions, S.L CEO CTO mobile: (+34) 627983344 luis@ luis.gerv...@gmail.comwoorea.es ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone 2012.1 - global and private endpoints
These are now in the docs:
http://docs.openstack.org/trunk/openstack-compute/admin/content/keystone-concepts.html
Take care,
Lorin
--
Lorin Hochstein
Lead Architect - Cloud Services
Nimbis Services, Inc.
www.nimbisservices.com
On May 12, 2012, at 8:43 AM, Leandro Reox wrote:
Clear as crystal. Thanks a lot Lorin! i didnt see this reflected on the docs.
Best
Lean
On May 12, 2012 8:45 AM, Lorin Hochstein lo...@nimbisservices.com wrote:
Leandro:
On May 10, 2012, at 10:58 AM, Leandro Reox wrote:
Hi all,
I was wondering if is there any way to create private and global endpoints
in Keystone essex final, what for ?
I have users defined for specific applications, for example i want that the
images user, just to have access to the SWIFT endpoint, but no to nova,
and etc
In previous versions of Keystone, you can define is_global attribute for
an endpoint, or create a direct relationship between a tenant and an
endpoint if your endpoint was previously defined as non global.
Is there any way to do this on the new Essex Final Keystone ? If not, how do
i avoid the swift users to create instances on nova?
The /etc/$APP/policy.json controls what users are allowed to do for $APP.
For example, /etc/nova/policy.json controls this for nova,
/etc/glance/policy.json controls glance. (I think swift uses a different
scheme).
If you want to restrict users from doing things in nova, you need to create a
role in keystone and then modify /etc/nova/policy.json so that this role is
required for nova operations.
For example, you could create a role called novauser, and then
/etc/nova/policy.json to require that role for every operation. I think it
would look like this (haven't tried this myself):
{
admin_or_owner: [[role:admin], [project_id:%(project_id)s]],
default: [[rule:admin_or_owner]],
compute:create: [role:novauser],
compute:create:attach_network: [role:novauser],
compute:create:attach_volume: [role:novauser],
compute:get_all: [role:novauser],
admin_api: [[role:admin]],
compute_extension:accounts: [[rule:admin_api]],
compute_extension:admin_actions: [[rule:admin_api]],
compute_extension:admin_actions:pause: [[rule:admin_or_owner]],
compute_extension:admin_actions:unpause: [[rule:admin_or_owner]],
compute_extension:admin_actions:suspend: [[rule:admin_or_owner]],
compute_extension:admin_actions:resume: [[rule:admin_or_owner]],
compute_extension:admin_actions:lock: [[rule:admin_api]],
compute_extension:admin_actions:unlock: [[rule:admin_api]],
compute_extension:admin_actions:resetNetwork: [[rule:admin_api]],
compute_extension:admin_actions:injectNetworkInfo: [[rule:admin_api]],
compute_extension:admin_actions:createBackup: [[rule:admin_or_owner]],
compute_extension:admin_actions:migrateLive: [[rule:admin_api]],
compute_extension:admin_actions:migrate: [[rule:admin_api]],
compute_extension:aggregates: [[rule:admin_api]],
compute_extension:certificates: [role:novauser],
compute_extension:cloudpipe: [[rule:admin_api]],
compute_extension:console_output: [role:novauser],
compute_extension:consoles: [role:novauser],
compute_extension:createserverext: [role:novauser],
compute_extension:deferred_delete: [role:novauser],
compute_extension:disk_config: [role:novauser],
compute_extension:extended_server_attributes: [[rule:admin_api]],
compute_extension:extended_status: [role:novauser],
compute_extension:flavorextradata: [role:novauser],
compute_extension:flavorextraspecs: [role:novauser],
compute_extension:flavormanage: [[rule:admin_api]],
compute_extension:floating_ip_dns: [role:novauser],
compute_extension:floating_ip_pools: [role:novauser],
compute_extension:floating_ips: [role:novauser],
compute_extension:hosts: [[rule:admin_api]],
compute_extension:keypairs: [role:novauser],
compute_extension:multinic: [role:novauser],
compute_extension:networks: [[rule:admin_api]],
compute_extension:quotas: [role:novauser],
compute_extension:rescue: [role:novauser],
compute_extension:security_groups: [role:novauser],
compute_extension:server_action_list: [[rule:admin_api]],
compute_extension:server_diagnostics: [[rule:admin_api]],
compute_extension:simple_tenant_usage:show: [[rule:admin_or_owner]],
compute_extension:simple_tenant_usage:list: [[rule:admin_api]],
compute_extension:users: [[rule:admin_api]],
compute_extension:virtual_interfaces: [role:novauser],
compute_extension:virtual_storage_arrays: [role:novauser],
compute_extension:volumes: [role:novauser],
compute_extension:volumetypes: [role:novauser],
volume:create: [role:novauser],
volume:get_all: [role:novauser],
volume:get_volume_metadata: [role:novauser],
volume:get_snapshot: [role:novauser],
volume:get_all_snapshots:
Re: [Openstack] Swift performance for very small objects
On 05/19/2012 06:34 PM, Paulo Ricardo Motta Gomes wrote: Hello, I'm doing some experiments in a Swift cluster testbed of 9 nodes/devices and 3 zones (3 nodes on each zone). In one of my tests, I noticed that PUTs of very small objects are extremely inefficient. - 5000 PUTs of objects with an average size of 40K - total of 195MB - took 67s (avg time per request: 0.0135s) - 5000 PUTS of objects with an average size of 190 bytes - total of 930KB - took 60s (avg time per request: 0.0123s) I plotted object size vs request time and found that there is significant difference in request times only after 200KB. When objects are smaller than this PUT requests have a minimum execution time of 0.01s, no matter the object size. I suppose swift is not optimized for such small objects, but I wonder what is the main cause for this, if it's the HTTP overhead or disk writing. I checked the log of the object servers and requests are taking an average of 0.006s, whether objects are 40K or 190 bytes, which indicate part of the bottleneck could be at the disk. Curently I'm using a loopback device for storage. I thought that maybe this could be improved a bit if the proxy server maintained persistent connections to the storage nodes instead of opening a new one for each request? Persistent TCP connections do nothing to improve disc performance, so it would be unlikely to have much of an effect if indeed the bulk of the response time is in getting things to disc on the server. If you take a tcpdump trace you would be able to see how much of the time to service a request is taken-up by the TCP three-way handshake. You would take the time from the client's send of the SYNchronize segment to the time the SYN|ACKnowledgement segment arrives from the server. You can also then look at the time between when the last byte of the request is sent and the first/last byte of the response arrives. If you wanted, you could probably compare that with the likes of say a netperf TCP_CRR test and see it with something that is only TCP. The netperf TCP_CRR test will open a tcp connection, send a request of a given size, receive a response of a given size and the connection is closed. For an example, here is a TCP_CRR test between my laptop and my workstation, (100 Mbit/s) with netperf configured to include histogram support via configure --enable-histogram. I just picked a number out of the ether for the sizes: raj@tardy:~/netperf2_trunk$ src/netperf -H raj-8510w.americas.hpqcorp.net -t TCP_CRR -l 30 -v 2 -- -r `expr 190 + 128`,128 MIGRATED TCP Connect/Request/Response TEST from 0.0.0.0 (0.0.0.0) port 0 AF_INET to internal-host.americas.hpqcorp.net () port 0 AF_INET : histogram Local /Remote Socket Size Request Resp. Elapsed Trans. Send Recv Size SizeTime Rate bytes Bytes bytesbytes secs.per sec 16384 87380 318 128 30.002340.51 16384 87380 Alignment Offset Local Remote Local Remote Send RecvSend Recv 8 8 0 0 Histogram of request/response times UNIT_USEC :0:0:0:0:0:0:0:0:0:0 TEN_USEC :0:0:0:0:0:0:0:0:0:0 HUNDRED_USEC :0:0:0: 18238: 47290: 3945: 486: 128: 34: 20 UNIT_MSEC :0: 47: 14:1:6:2:2:0:1:1 TEN_MSEC :0:0:1:0:0:0:0:0:0:0 HUNDRED_MSEC :0:0:0:0:0:0:0:0:0:0 UNIT_SEC :0:0:0:0:0:0:0:0:0:0 TEN_SEC :0:0:0:0:0:0:0:0:0:0 100_SECS: 0 HIST_TOTAL: 70216 So, on average it was 1/2340 or 0.00043 seconds per complete transaction just doing things at the TCP level, without any openstack code or disc I/O etc. There was a tail, too short to be TCP retransmissions, my bet would be task scheduling as my workstation was not otherwise idle. In the midst of all that I did: raj@tardy:~/netperf2_trunk$ sudo tcpdump -i eth0 -c 20 -w /tmp/example.pcap and post-processing that with: sudo tcpdump -i eth0 -r /tmp/example.pcap -ttt here is one of those transactions: raj@tardy:~/netperf2_trunk$ sudo tcpdump -i eth0 -r /tmp/example.pcap -ttt port 63978 reading from file /tmp/example.pcap, link-type EN10MB (Ethernet) 00:00:00.00 IP tardy.63978 internal-host.americas.hpqcorp.net.35594: Flags [SEW], seq 1709857287, win 14600, options [mss 1460,sackOK,TS val 111970417 ecr 0,nop,wscale 7], length 0 00:00:00.97 IP internal-host.americas.hpqcorp.net.35594 tardy.63978: Flags [S.E], seq 3540302987, ack 1709857288, win 14480, options [mss 1460,sackOK,TS val 428732549 ecr 111970417,nop,wscale 5], length 0 00:00:00.07 IP tardy.63978 internal-host.americas.hpqcorp.net.35594: Flags [.], ack 1, win 115, options [nop,nop,TS val 111970417 ecr 428732549], length 0 00:00:00.10 IP tardy.63978
Re: [Openstack] Need +2 review for Trusted Compute Pool patch
Review done. -jay On 05/21/2012 02:19 AM, Dugger, Donald D wrote: After multiple revisions this patch is ready to go (2 positive reviews and no negative comments) but it still needs a couple of +2 reviews if someone can look at it. https://review.openstack.org/#/c/7262/ Tnx. -- Don Dugger Censeo Toto nos in Kansa esse decisse. - D. Gale Ph: 303/443-3786 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Any seattle area openstackers on the list? ...
Would be nice to meet up and hack away. --- Arvind Srinivasan - IBM Cloud Strategy Technology Standards Email: arvin...@us.ibm.com Phone: +1 919 673 1082 -___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] RFC - dynamically loading virt drivers
On 05/17/2012 06:38 PM, Vishvananda Ishaya wrote: The main issue with changing this is breaking existing installs. So I guess this would be my strategy: a) remove get_connection from the drivers (and just have it construct the 'connection' class directly) I'm starting down this path, but a lot of the drivers do substantial amount of FLAG handling in get_connection before they create the driver objects. Do you want to move that FLAGS handling into the object constructor, or keep having some factory layer to manipulate the flags before we construct the driver? -Sean -- Sean Dague IBM Linux Technology Center email: sda...@linux.vnet.ibm.com alt-email: slda...@us.ibm.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Any seattle area openstackers on the list? ...
There is a lot of openstackers around including me. What are you upto with openstack? Some of the local groups around openstack are: http://www.meetup.com/OpenStack-Seattle/ http://www.meetup.com/OpenStack-Seattle/ http://www.meetup.com/Seattle-Opscode-Chef-Meetup-Group/ (not openstack per se) Please let me know if you need more details. Thanks, -Sriram From: openstack-bounces+sriram=computenext@lists.launchpad.net [mailto:openstack-bounces+sriram=computenext@lists.launchpad.net] On Behalf Of Arvind Srinivasan Sent: Monday, May 21, 2012 11:26 AM To: openstack@lists.launchpad.net Subject: [Openstack] Any seattle area openstackers on the list? ... Would be nice to meet up and hack away. --- Arvind Srinivasan - IBM Cloud Strategy Technology Standards Email: arvin...@us.ibm.commailto:arvin...@us.ibm.com Phone: +1 919 673 1082 - ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Swift3 Github pages
On Mon, 21 May 2012 18:01:04 +0200 Chmouel Boudjnah chmo...@chmouel.com wrote: I have sent already the gerrit review to remove swift3 from swift : https://review.openstack.org/#/c/7628/ and reference your repository http://github.com/fujita/swift3 in associated project. If swift3 goes out of the tree, I am going to drop my -1 on Mike Burton's proxy_logging change. It will move the onus on Tomo to accomodate, although personally I think Mike was wrong and middleware should complete by the time __call__ returns. IMHO it is a deficiency of proxy_logger, which does not get exposed by any in-tree middleware except swift3. -- Pete ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift] Swift3 Github pages
Gentlemen, We have a feature for swift3 middleware that we'd like to propose for merge. How we can do this now, when it is split into associated project? How has the procedure changed? -- Best reagards, Oleg Gelbukh Mirantis Inc. On Mon, May 21, 2012 at 8:01 PM, Chmouel Boudjnah chmo...@chmouel.comwrote: Hello Fujita, I sent you a documentation pull req that should generate the sphinx doc, It would be nice to generate some static html page of the documentation as what Greg has done for his projects for example : http://gholt.github.com/swauth/ This is something done by the github project owner see http://pages.github.com or http://help.github.com/pages/ for how to do that. I have sent already the gerrit review to remove swift3 from swift : https://review.openstack.org/#/c/7628/ and reference your repository http://github.com/fujita/swift3 in associated project. Thanks, Chmouel. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Any seattle area openstackers on the list? ...
Next OpenStack Seattle meetup is Thursday evening, BTW - at HP's offices: http://www.meetup.com/OpenStack-Seattle/events/58239262/ On May 21, 2012, at 12:23 PM, Sriram Subramanian wrote: There is a lot of openstackers around including me. What are you upto with openstack? Some of the local groups around openstack are: http://www.meetup.com/OpenStack-Seattle/ http://www.meetup.com/OpenStack-Seattle/ http://www.meetup.com/Seattle-Opscode-Chef-Meetup-Group/ (not openstack per se) Please let me know if you need more details. Thanks, -Sriram From: openstack-bounces+sriram=computenext@lists.launchpad.net [mailto:openstack-bounces+sriram=computenext@lists.launchpad.net] On Behalf Of Arvind Srinivasan Sent: Monday, May 21, 2012 11:26 AM To: openstack@lists.launchpad.net Subject: [Openstack] Any seattle area openstackers on the list? ... Would be nice to meet up and hack away. --- Arvind Srinivasan - IBM Cloud Strategy Technology Standards Email: arvin...@us.ibm.com Phone: +1 919 673 1082 - ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [nova-compute] vm migration problem
Has anybody ever written a script that grabs the host public key from the instance's console and updates the .ssh/config/known_hosts file accordingly, instead of throwing away host key checking? That would be a handy little thing if it was out there. Take care, Lorin -- Lorin Hochstein Lead Architect - Cloud Services Nimbis Services, Inc. www.nimbisservices.com On May 21, 2012, at 6:09 AM, Joe Breu wrote: Hi Eric, It would appear that the nova user on one of the compute nodes had at one time cached the SSH host key of the other node and now the key has changed. You can bypass this by adding the following to ~nova/.ssh/config on both compute nodes: Host * StrictHostKeyChecking no UserKnownHostsFile=/dev/null --- Joseph Breu Deployment Engineer Rackspace Cloud Builders 210-312-3508 On May 21, 2012, at 11:34 AM, Eric Luo wrote: Hello ,all. I have a two nodes installation . OS1 is the cloud controller ,and OS2 is a nova-compute node. I have a vm (name as vm1) running on OS1. When I use the command nova migrate vm1 The dashboard is showing the vm1 as : status :error ,task :Resize Prep I tail ed the nova-compute.log in OS1, and found the following error information while running the nova migrate vm1 command : Can someone please explain to me what does these error mean ,and what's wrong with my config ... 2012-05-21 17:20:45 ERROR nova.compute.manager [req-d0f494cb-e9d6-41d2-b6df-6faa432a644d 6ffaaedb60c24f5eb888319e1e387d75 0d7a5a12b6f54aa9bff986bf138bc0b7] Unex pected error while running command. Command: ssh 192.168.0.205 mkdir -p /var/lib/nova/instances/instance-000a Exit code: 255 Stdout: '' Stderr: 'Host key verification failed.\r\n'. Setting instance vm_state to ERROR 2012-05-21 17:20:45 ERROR nova.rpc.amqp [req-d0f494cb-e9d6-41d2-b6df-6faa432a644d 6ffaaedb60c24f5eb888319e1e387d75 0d7a5a12b6f54aa9bff986bf138bc0b7] Exception during message handling 2012-05-21 17:20:45 TRACE nova.rpc.amqp Traceback (most recent call last): 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/rpc/amqp.py, line 252, in _process_data 2012-05-21 17:20:45 TRACE nova.rpc.amqp rval = node_func(context=ctxt, **node_args) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/exception.py, line 114, in wrapped 2012-05-21 17:20:45 TRACE nova.rpc.amqp return f(*args, **kw) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 153, in decorated_function 2012-05-21 17:20:45 TRACE nova.rpc.amqp function(self, context, instance_uuid, *args, **kwargs) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 177, in decorated_function 2012-05-21 17:20:45 TRACE nova.rpc.amqp sys.exc_info()) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/contextlib.py, line 24, in __exit__ 2012-05-21 17:20:45 TRACE nova.rpc.amqp self.gen.next() 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 171, in decorated_function 2012-05-21 17:20:45 TRACE nova.rpc.amqp return function(self, context, instance_uuid, *args, **kwargs) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 1330, in resize_instance 2012-05-21 17:20:45 TRACE nova.rpc.amqp self._set_instance_error_state(context, instance_uuid) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/contextlib.py, line 24, in __exit__ 2012-05-21 17:20:45 TRACE nova.rpc.amqp self.gen.next() 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/compute/manager.py, line 1325, in resize_instance 2012-05-21 17:20:45 TRACE nova.rpc.amqp instance_type_ref, self._legacy_nw_info(network_info)) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/exception.py, line 114, in wrapped 2012-05-21 17:20:45 TRACE nova.rpc.amqp return f(*args, **kw) 2012-05-21 17:20:45 TRACE nova.rpc.amqp File /usr/lib/python2.7/dist-packages/nova/virt/libvirt/connection.py, line 2363, in migrate_disk_and_power_off 2012-05-21 17:20:45 TRACE nova.rpc.amqp raise e 2012-05-21 17:20:45 TRACE nova.rpc.amqp ProcessExecutionError: Unexpected error while running command. 2012-05-21 17:20:45 TRACE nova.rpc.amqp Command: ssh 192.168.0.205 mkdir -p /var/lib/nova/instances/instance-000a 2012-05-21 17:20:45 TRACE nova.rpc.amqp Exit code: 255 2012-05-21 17:20:45 TRACE nova.rpc.amqp Stdout: '' 2012-05-21 17:20:45 TRACE nova.rpc.amqp Stderr: 'Host key verification failed.\r\n' 2012-05-21 17:20:45 TRACE nova.rpc.amqp ^C ___ Mailing list: https://launchpad.net/~openstack Post to :
[Openstack] [metering] high-level design proposal
I have written up some of my thoughts on a proposed design for ceilometer in the wiki [1]. I'm sure there are missing details, but I wanted to start getting ideas into writing so they could be discussed here on the list, since I've talked about different parts with a couple of you separately. Let me know what you think, and especially if I am not clear or have left out any details. Thanks, Doug [1] http://wiki.openstack.org/EfficientMetering/ArchitectureProposalV1 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] iptables and nova-manage network list do not match.
Hi I am having a client not getting dhcp release problem, similar to https://answers.launchpad.net/quantum/+question/197701 By looking at the iptables output, I see the /8 network mask should have been /24. How can I fix this problem? Thanks. my nova.conf is at http://paste.openstack.org/show/18103/ [root@core01 nova]# nova-manage network list id IPv4IPv6start address DNS1 17 10.0.0.0/24 None10.0.0.28.8.4.4 iptables -t nat -L -n Chain nova-network-POSTROUTING (1 references) target prot opt source destination ACCEPT all -- 10.0.0.0/8 172.20.0.51 ACCEPT all -- 10.0.0.0/8 10.128.0.0/24 ACCEPT all -- 10.0.0.0/8 10.0.0.0/8 ! ctstate DNAT Chain nova-network-PREROUTING (1 references) target prot opt source destination DNAT tcp -- 0.0.0.0/0169.254.169.254 tcp dpt:80 to:172.20.0.51:8775 Chain nova-network-float-snat (1 references) target prot opt source destination Chain nova-network-snat (1 references) target prot opt source destination nova-network-float-snat all -- 0.0.0.0/0 0.0.0.0/0 SNAT all -- 10.0.0.0/8 0.0.0.0/0 to:172.20.0.51 SNAT all -- 10.0.0.0/24 0.0.0.0/0 to:172.20.0.51 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift] Swift3 Github pages
Hi, On Mon, 21 May 2012 18:01:04 +0200 Chmouel Boudjnah chmo...@chmouel.com wrote: I sent you a documentation pull req that should generate the sphinx doc, It would be nice to generate some static html page of the documentation as what Greg has done for his projects for example : http://gholt.github.com/swauth/ This is something done by the github project owner see http://pages.github.com or http://help.github.com/pages/ for how to do that. Thanks, before pulling the request, I would like to discuss the usage of github pages and wiki. Which do we want? Or both? ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift] Swift3 Github pages
Hello, On Tue, 22 May 2012 00:33:50 +0400 Oleg Gelbukh ogelb...@mirantis.com wrote: We have a feature for swift3 middleware that we'd like to propose for merge. Nice. How we can do this now, when it is split into associated project? How has the procedure changed? I'm not sure that there is official procedure for associated projects. About swift3, just sending a pull request or patches is fine by me for now. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] swift3 middleware split.
Would also be good to start thinking about how these are packaged up and added to ubuntu/epel etc. archives. Will the people who do the deb/rpm packaging for swift also be doing these plugins? Or are they entirely separate in that sense too? Cheers, Sam On Mon, May 21, 2012 at 10:55 PM, FUJITA Tomonori fujita.tomon...@lab.ntt.co.jp wrote: Hello, On Mon, 21 May 2012 13:34:29 +0200 Chmouel Boudjnah chmo...@chmouel.com wrote: I have sent you a pull request for your swift3 repository : https://github.com/fujita/swift3/pull/1 Applied, thanks! I have added a few files to match a bit more what gholt did in the other middlewares and copied the swift3 unittests as well. I am going to work on a branch for devstack that use this middleware for testing since we have a an excercise there that functionally test much of this feature (via euca-upload-bundle). When this is done we can probably remove it from swift main repository and let know people by updating documentation (ie: s3_token in swift) and others (ie: blog post) about the change. Sounds fine to me. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Swift3 Github pages
On Mon, 21 May 2012 16:06:42 -0500 Gregory Holt gh...@rackspace.com wrote: There are examples of middleware returning generators out there, such as in PEP 333 WSGI, specifically the class example at http://www.python.org/dev/peps/pep-0333/#the-application-framework-side. Obviously I didn't read the PEP closely enough, so I assumed the opposite. Sorry. Here's my message about it: https://lists.launchpad.net/openstack/msg11261.html That is something that swift.common.wsgi.WSGIContext's _app_call works around, ensuring the generator is activated before returning. I see, I missed that. Thanks, -- Pete ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] python-swiftclient in gerrit
On May 21, 2012, at 6:25 AM, Chmouel Boudjnah wrote: Hi, As mentioned a couple of times we are splitting python-swiftclient out of swift, this is mostly ready to cut in its own gerrit project here : https://github.com/chmouel/python-swiftclient Are you planning on making it available through PyPi once it's broken out? Take care, Lorin -- Lorin Hochstein Lead Architect - Cloud Services Nimbis Services, Inc. www.nimbisservices.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Swift3 Github pages
[Reposting my original reply at the very bottom of this, since I sent it from the wrong email address last time and it never hit the mailing list -- for those following along there.] And Pete, that PEP isn't exactly great and we all definitely translated it differently before. :) Some parts are confusingly worded, it's really long, but at one point in the doc it actually is explicit -- search for Note: the application. I was pretty surprised when I found that gem and I thought I'd read the whole spec at one point, but had obviously missed that. I'd probably fallen asleep, twice. -- gholt On May 21, 2012, at 8:22 PM, Pete Zaitcev wrote: On Mon, 21 May 2012 16:06:42 -0500 Gregory Holt gh...@rackspace.com wrote: There are examples of middleware returning generators out there, such as in PEP 333 WSGI, specifically the class example at http://www.python.org/dev/peps/pep-0333/#the-application-framework-side. Obviously I didn't read the PEP closely enough, so I assumed the opposite. Sorry. Here's my message about it: https://lists.launchpad.net/openstack/msg11261.html That is something that swift.common.wsgi.WSGIContext's _app_call works around, ensuring the generator is activated before returning. I see, I missed that. Thanks, -- Pete On May 21, 2012, at 4:06 PM, Gregory Holt wrote: Pete, I'm not sure I understand the problem. What do you mean by middleware should complete by the time __call__ returns? There are examples of middleware returning generators out there, such as in PEP 333 WSGI, specifically the class example athttp://www.python.org/dev/peps/pep-0333/#the-application-framework-side. When a function is called that returns a generator, the generator is returned immediately and no actual code in the function is called until the generator first begins to iterate. This example code might show what I mean: def start_response(): print 'three' def genfunc(sr): sr() yield 'four' print 'one' gen = genfunc(start_response) print 'two' for item in gen: print item Much code, including older Swift-related middleware, often assumes start_response is called right after calling the genfunc call and before print 'two', but this is not the case. It is delayed until the generator is first iterated over. That is something that swift.common.wsgi.WSGIContext's _app_call works around, ensuring the generator is activated before returning. Is there some other issue you're having? The newest swift3 now subclasses WSGIContext. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] RFC - dynamically loading virt drivers
Hi, FYI, I have a patch for nova-cactus to import only one virt driver. http://www.debian.or.jp/~yosshy/nova-cactus-patches/1004.txt Regards, Akira Yoshiyama 2012/05/18 6:12 Sean Dague sda...@linux.vnet.ibm.com: Rationale: nova loads drivers for various subsystems in very different ways, and not all of them are truly dynamic (i.e. a new driver could be fully self contained and not have to change a core source code file or monkey patch to load itself). I'd like to get all the driver plug points fully dynamic, and eventually a common pattern and loading mechanism is used on all of them, from a consistency perspective. I've got a first attempt at refactoring the nova.virt.connection module to stop having a pre-defined list of virt drivers as strings, and instead load modules dynamically using the the nova.openstack.commons.**importutils. This is in a branch on github - https://github.com/sdague/nova The changed files are: git diff master | diffstat -w 20 tests/test_virt_driver_loader.**py | 54 ++ utils.py |3 virt/connection.py | 51 ++--- virt/fake.py |4 virt/libvirt/__init__.py |1 5 files changed, 75 insertions(+), 38 deletions(-) This passes the unit test battery on fake and libvirt drivers (* on fake) Because the strings passed to connection_type do map to module names, this shouldn't cause any issues with existing configurations. The xenapi and vmwareapi modules probably just need a similar __init__.py addition to make get_connection available on module load. Baremetal will be slightly more work (but not much) because it had some additional setup in nova/virt/connection.py. What I'm mostly looking for is comments on approach. Is importutils the prefered way to go about this (which is the nova.volume approach) now, or should this be using utils.LazyPluggable as is in nova.db.api, or some other approach entirely? Comments, redirections, appreciated. * one test fails for Fake in test_virt_drivers, but only when it's run as the full unit test, not when run on it's own. It looks like it has to do with FakeConnection.instance() caching, which actually confuses me a bit, as I would have assumed one unit test file couldn't affect another (i.e. they started a clean env each time). -Sean -- Sean Dague IBM Linux Technology Center email: sda...@linux.vnet.ibm.com alt-email: slda...@us.ibm.com __**_ Mailing list: https://launchpad.net/~**openstackhttps://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~**openstackhttps://launchpad.net/~openstack More help : https://help.launchpad.net/**ListHelphttps://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
