[Openstack] Security Groups not being applied uniformly

2013-06-24 Thread Daniel Ellison
Hey all, I'm running grizzly on Ubuntu 12.04 server. I have two instances, both with the same security groups ("default" and one to allow XMPP traffic). The firewall rules are working for one instance but not for the other. Can anyone think of why the group rules would be applied differently?

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-17 Thread Daniel Ellison
On Jun 17, 2013, at 1:59 PM, Scott Moser wrote: > I saw this thread, and was about to respond, but Robert Collin's response > was correct: > > install linux-image-generic, it will bring in > linux-image-extra-$version-generic which has kvm. > > Alternatively, just: > apt-get install linux-im

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-14 Thread Daniel Ellison
On Jun 13, 2013, at 5:54 PM, Daniel Ellison wrote: > That did it! I'm now creating a CentOS KVM image in an Ubuntu OpenStack VM. > I'll wait until it finishes before celebrating, but there are no errors so > far. Well I didn't get to celebrate, as the veewee build

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-14 Thread Daniel Ellison
On Jun 14, 2013, at 12:24 AM, laclasse wrote: > > Yes, the Ubuntu cloud image is made to run as a guest atop an hypervisor and > it makes sense to optimize it by removing the unlikely needed modules that > usually require hardware to run (nested virt is not yet common). Scott Moser > may confi

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 5:34 PM, Robert Collins wrote: > install linux-image-generic, it will bring in > linux-image-extra-$version-generic which has kvm. That did it! I'm now creating a CentOS KVM image in an Ubuntu OpenStack VM. I'll wait until it finishes before celebrating, but there are no err

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 5:24 PM, David Stearns wrote: > > There's no reason using nested KVM shouldn't work so long as the hardware > supports it. Do you know what kind of hardware support is required? Obviously my host already supports CPU virtualization extensions. :) > Looks like http://dacha

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 5:19 PM, "Parrott, Robert" wrote: > > No. You can't use KVM in a guest since it requires hardware virtualization. > Instead you need to use qemu in emulation mode. Refer to the devstack code > for how to set this up, since devatack will work in Amazon EC2. I will probably t

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 5:05 PM, laclasse wrote: > > What is the guest OS? It seems the error "Module kvm not found" points to the > missing kernel module rather than it not loading. > Is the guest kernel > 2.6.23? Can you find a kvm.ko and kvm-intel.ko on the > guest file system? I did do a sea

Re: [Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
On Jun 13, 2013, at 4:36 PM, Daniel Ellison wrote: > libvirtd is already running on the guest. One more data point: the guest does have the vmx capability enabled: Penryn Intel Dan ___ Mailing list: https://launchpad.

[Openstack] Can I run qemu-kvm in an OpenStack Instance

2013-06-13 Thread Daniel Ellison
Hi all, I want to use veewee to create custom images for use in OpenStack. The catch here is that I want to run veewee in an OpenStack VM. I almost have everything working. The only catch is that qemu-kvm won't run. I've done lots of research and I believe I need what's called nested KVM. I get

Re: [Openstack] Changing the location of Nova's instances

2013-05-15 Thread Daniel Ellison
On May 15, 2013, at 9:36 AM, "Mac Innes, Kiall" wrote: > Yup - Or, you could just bind mount /var/lib/nova/instances, leaving the > rest on the local disks (I have *no clue* if Nova will handle that > nicely.. But bind mounts certainly will ;)) That worked beautifully, Kiall. Nova seems very happ

Re: [Openstack] Changing the location of Nova's instances

2013-05-15 Thread Daniel Ellison
On May 15, 2013, at 9:08 AM, "Mac Innes, Kiall" wrote: > Personally, I would make use of a bind mount[1] rather than trying to > relocate.. > > A bind mount is just like a symlink, with the exception of AppArmor (and I > presume SELinux) will handle it "correctly".. Ok, so I would move the ent

Re: [Openstack] Changing the location of Nova's instances

2013-05-15 Thread Daniel Ellison
On May 15, 2013, at 8:52 AM, Robert van Leeuwen wrote: >> I would like to move all instances into /home/storage/nova/instances. > The following value in nova.conf specifies where the images are located: > state_path Ah, ok! That's the info I was looking for. So the entire /var/lib/nova directo

[Openstack] Changing the location of Nova's instances

2013-05-15 Thread Daniel Ellison
Hey all, Is there a method for changing where Nova looks for its instances? When setting up my Openstack system I don't recall there being a choice as to where instances would be stored. As it happens, they're in /var/lib/nova/instances. My server is set up such that /home is a 6TB LVM volume,

Re: [Openstack] 'QuotaSet' object has no attribute 'gigabytes'

2013-05-08 Thread Daniel Ellison
On May 8, 2013, at 11:59 AM, Daniel Ellison wrote: > I have Horizon running quite nicely now except for one error that happens in > a couple of places. It seems that whenever I do anything that involves > checking a user's quota, such as launching an image or allocating an IP to a

Re: [Openstack] Horizon - Internal Server Error when hitting /nova/instances_and_volumes/

2013-05-08 Thread Daniel Ellison
On May 8, 2013, at 2:48 PM, Gabriel Hurley wrote: > If you have "Instances & Volumes" then you're not running Grizzly Horizon. > Those two were split apart in Grizzly. Prior to Grizzly the Volume Service > was required. In Grizzly Horizon it's not. > > As such you have two choices: run Cinder l

[Openstack] 'QuotaSet' object has no attribute 'gigabytes'

2013-05-08 Thread Daniel Ellison
Hey all, I have Horizon running quite nicely now except for one error that happens in a couple of places. It seems that whenever I do anything that involves checking a user's quota, such as launching an image or allocating an IP to a project, I get the following error in /var/log/apache2/error.

Re: [Openstack] Horizon - Internal Server Error when hitting /nova/instances_and_volumes/

2013-05-08 Thread Daniel Ellison
On May 8, 2013, at 7:27 AM, Daniel Ellison wrote: > On May 7, 2013, at 2:01 PM, Daniel Ellison wrote: > I think I know the source of the problem. I first had to add a logging > section for "openstack_dashboard" in local_settings.py despite the fact that > there was

Re: [Openstack] Horizon - Internal Server Error when hitting /nova/instances_and_volumes/

2013-05-08 Thread Daniel Ellison
On May 7, 2013, at 2:01 PM, Daniel Ellison wrote: > As the subject says, I'm having issues getting at "Instances & Volumes" (also > "Images & Snapshots") in Horizon. I'm running grizzly on precise. Everything > else works fine; the entire &q

[Openstack] Horizon - Internal Server Error when hitting /nova/instances_and_volumes/

2013-05-07 Thread Daniel Ellison
As the subject says, I'm having issues getting at "Instances & Volumes" (also "Images & Snapshots") in Horizon. I'm running grizzly on precise. Everything else works fine; the entire "Admin" tab works as expected. The "Overview" and "Access & Security" also work fine. Is there any way to see wh

Re: [Openstack] Bridging question

2013-04-27 Thread Daniel Ellison
On 2013-04-26, at 7:53 PM, David Wittman wrote: > This is the expected behavior. With nova-network, FLIPs are assigned as a > secondary address on the host interface, and traffic is routed to your > instances via NAT rules. I'd recommend reading the following blog post from > Mirantis for more

[Openstack] Bridging question

2013-04-26 Thread Daniel Ellison
Hi all, I have Nova all set up on a single server and am able to start/stop/delete VM instances no problem. I have a bridge at br100 which sits on eth1 and is not connected to anything. eth0 is connected to the Internet. Before installing Openstack I was using KVM and virsh to manage my VMs. In

Re: [Openstack] How to configure nova-network for a single node

2013-04-25 Thread Daniel Ellison
On Apr 23, 2013, at 8:44 AM, Daniel Ellison wrote: > I've slowly been configuring a single server with OpenStack for a > proof-of-concept I want to present to my managers. This single server is > co-located and directly exposed to the Internet. It has one active Ethernet > po

Re: [Openstack] nova-manage fails with "unable to open database file None None"

2013-04-25 Thread Daniel Ellison
On Apr 25, 2013, at 7:48 AM, Daniel Ellison wrote: > I've come across a situation that has stumped me. I've searched the archives > here but can find no solution. I /did/ find a bug filed in Launchpad > (https://bugs.launchpad.net/nova/+bug/1169439) that may be what's h

[Openstack] nova-manage fails with "unable to open database file None None"

2013-04-25 Thread Daniel Ellison
Hi all, I've come across a situation that has stumped me. I've searched the archives here but can find no solution. I /did/ find a bug filed in Launchpad (https://bugs.launchpad.net/nova/+bug/1169439) that may be what's happening, but there's no solution. When I run the command "nova-manage --

[Openstack] How to configure nova-network for a single node

2013-04-23 Thread Daniel Ellison
Hi all, I've slowly been configuring a single server with OpenStack for a proof-of-concept I want to present to my managers. This single server is co-located and directly exposed to the Internet. It has one active Ethernet port (eth0) and one inactive and disconnected Ethernet port (eth1). I've

Re: [Openstack] Keystone Woes

2013-04-14 Thread Daniel Ellison
On 2013-04-14, at 10:00 AM, Dolph Mathews wrote: > Short answer: yes. > > There are two types of token_format options available, PKI and UUID. > > UUID tokens result in increased network chatter as they must be validated > remotely, whereas PKI tokens are big, self-signed, and can be validated

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 5:24 PM, Dolph Mathews wrote: > Hmm, well it looks like you already have debug enabled, which is indicating > that the username + password combination is bad (if debug was disabled, you'd > get a much more opaque error message). The tenant name you specified would > not have b

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 1:23 PM, Anne Gentle wrote: > Is this a regression or manifestation of this bug? > > https://bugs.launchpad.net/keystone/+bug/1002917 > > Anne I'll take a look at that bug. I currently don't have the depth of knowledge on OpenStack to judge myself, but maybe something in ther

Re: [Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
On 2013-04-13, at 1:24 PM, Dolph Mathews wrote: > It looks like you're doing everything correctly, except OS_PASSWORD is *NOT* > the same thing as the static admin_token in keystone.conf. You're right, actually. I DID use the admin_token for OS_PASSWORD. I'll definitely be fixing that. But as l

[Openstack] Keystone Woes

2013-04-13 Thread Daniel Ellison
Hi all, I joined this list just now to solve a particular problem, but once I'm past this I hope to be giving back to the community. I have spent the past week trying to get Keystone installed and configured properly. I want to show a running OpenStack to my manager for a proof of concept I wa