Re: [Openstack] [keystone] Keystone on port 5000 - proposing change default port to 8770

2012-06-20 Thread Matt Joyce
I would recommend keeping a clear separation of administrative APIs from user APIs. Some policy restrictions in environments require them. EX: FISMA On Wed, Jun 20, 2012 at 6:19 PM, Dolph Mathews wrote: > Alternatively, if anyone would like to tar and feather me for picking port > 5000 in the f

[Openstack] resolving the current keystone api URL via metadata?

2012-06-20 Thread Matt Joyce
This is continuity on a thread I was having with Scott Moser about his blueprint on config drive improvements: https://blueprints.launchpad.net/nova/+spec/config-drive-v2 I had suggested adding the current keystone API url path ( from flags ) to metadata api response. The fundamental logic on my

Re: [Openstack] Test tool

2012-06-19 Thread Matt Joyce
https://github.com/cloudscaling/tarkin This is a very minimal test set that supports pinging vms after launching them. Nothing crazy. -Matt On Mon, Jun 18, 2012 at 6:37 AM, Jay Pipes wrote: > On 06/14/2012 05:26 AM, Neelakantam Gaddam wrote: > >> Hi All, >> >> Recently I came across the tool

Re: [Openstack] storage for virtual machines

2012-06-12 Thread Matt Joyce
I believe swift CAN be used as a block device via FUSE, and I believe it has been done before. I wouldn't recommend it though. -Matt On Tue, Jun 12, 2012 at 8:37 AM, Jay Pipes wrote: > Sebastien, you are correct. > > Udit, you will need to provide a bit more information on what you are > looki

Re: [Openstack] Filter Scheduler, a complete example

2012-06-11 Thread Matt Joyce
You may be better off considering a different approach all together. We ran into similar issues involving FISMA constraints and data classification in the past. One 'simple' solution is complete segregation ( not to be confused with isolation ). What we ended up coming up with was to basically d

Re: [Openstack] Greatest deployment?

2012-05-30 Thread Matt Joyce
On Wed, May 30, 2012 at 12:39 PM, Soren Hansen wrote: > 2012/5/30 Matt Joyce : > > Secondly, while LXC does provide a lot of native access, it still does > > paging management internally just as kvm does. So direct memory > management > > ( some HPC users like this ) bec

Re: [Openstack] Greatest deployment?

2012-05-30 Thread Matt Joyce
ute to try to avoid wasting all > of that by putting a hypervisor on top. > > - Michael Chapman > > > On Fri, May 25, 2012 at 1:34 AM, Matt Joyce > wrote: > >> We did some considerable HPC testing when I worked over at NASA Ames with >> the Nebula project. So

Re: [Openstack] Fwd: [Infra] administration of new mailinglists

2012-05-29 Thread Matt Joyce
+1 Simple. And works for most other projects well enough. -Matt On Tue, May 29, 2012 at 1:01 PM, Thierry Carrez wrote: > James E. Blair wrote: > > I believe we should at least have the common set of three mailing lists > > (announce, user/operator, dev) and have a web page that lists them. > >

Re: [Openstack] File injection support

2012-05-29 Thread Matt Joyce
https://help.ubuntu.com/community/CloudInit Might want to check this little beastie out. Folks using kvm seem to end up here for certain use cases. -Matt On Tue, May 29, 2012 at 11:35 AM, Nicolae Paladi wrote: > Hello, > > I am looking for more information about file injection support in Open

Re: [Openstack] [metering] delta vs. cumulative meters

2012-05-29 Thread Matt Joyce
Do we want a history of deltas or just last delta and leave the history to UI implementers? On Tue, May 29, 2012 at 9:30 AM, Loic Dachary wrote: > On 05/29/2012 05:42 PM, Doug Hellmann wrote: > > IIRC, the meters discussed in the wiki [1] are supposed to show "delta" > values (usage since the la

Re: [Openstack] nova state machine simplification and clarification

2012-05-24 Thread Matt Joyce
I love graphviz as a charting tool and sphinx support inline is great. Used to use it all the time at nebula in the work wiki. -Matt On Thu, May 24, 2012 at 12:10 PM, Jay Pipes wrote: > On 05/24/2012 10:46 AM, Yun Mao wrote: > >> Sandy, >> >> I like the suggestion of graphvis, although I haven'

Re: [Openstack] Can't ssh into instance

2012-05-24 Thread Matt Joyce
First rule of security group. Do not talk about security group. On Thu, May 24, 2012 at 9:35 AM, Rogerio Goncalves wrote: > Maybe you missed the rules of security group? > > Rogério Gonçalves > roge...@gmail.com > Cel: (11) 8840-9790 > > > > > On Thu, May 24, 2012 at 12:12 PM, Leander Bessa Be

Re: [Openstack] Greatest deployment?

2012-05-24 Thread Matt Joyce
s/APT/API/ s/of/or/ Please forgive spelling errors. On a train atm. On Thu, May 24, 2012 at 8:34 AM, Matt Joyce wrote: > We did some considerable HPC testing when I worked over at NASA Ames with > the Nebula project. So I think we may have been the first to try out > openstack

Re: [Openstack] Greatest deployment?

2012-05-24 Thread Matt Joyce
es of nehalems. We had no means to do that at the time. Scheduling full instances is somewhat easier so long as all the nodes in your zone are full instance use only. Matt Joyce Now at Cloudscaling On Thu, May 24, 2012 at 5:49 AM, John Paul Walters wrote: > Hi, > > On Ma

Re: [Openstack] [metering] high-level design proposal

2012-05-22 Thread Matt Joyce
libvirt can pull hard cpu stats. which can be useful. for instance it can pick out the cpu generation names. -matt On Tue, May 22, 2012 at 2:32 PM, Doug Hellmann wrote: > > > On Tue, May 22, 2012 at 4:35 PM, James R Penick wrote: > >> >>-> In addition to a signature, I think we would need a se

Re: [Openstack] [metering] high-level design proposal

2012-05-22 Thread Matt Joyce
My point of concern. \ If an agent is being built into the compute nodes, that would best be a split out project. Two major reasons. First and foremost sub projects should not be spinning up their own agents. Secondly, there is a use case of agents outside of metering. If an agent is to be buil

Re: [Openstack] [client] Hacking on the client

2012-05-16 Thread Matt Joyce
I actually just use a devstack install inside of a vm and do a full setup.py install with all the dependencies. Then if I need to i rebuild or rebuild the vm. I shell scripted some direct to libvirt stuff to make it just fire up at will from scratch if needed or just restart the vm. -Matt On W

Re: [Openstack] [client] Event handling

2012-05-11 Thread Matt Joyce
well like every time we make an api query in the shell we get a return result from the query. how are we handling those return results and evaluating codes etc? On Fri, May 11, 2012 at 12:19 PM, Doug Hellmann wrote: > > > On Thu, May 10, 2012 at 5:58 PM, Matt Joyce > wrote: >

[Openstack] [client] Event handling

2012-05-10 Thread Matt Joyce
How are we doing event handling in the client? Is there a blueprint on this somewhere? -Matt ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : http

Re: [Openstack] [client] creating blueprints for the unified CLI project

2012-05-02 Thread Matt Joyce
>> I skipped out on blue printing and just submitted a gerrit review for >> adding argparse flags for specifying URL for specific APIs. > > Why is this needed?  These URLs come from the service catalog.  Cases > where you do need to override that use --os-url as part of token flow > auth, skipping

Re: [Openstack] [client] creating blueprints for the unified CLI project

2012-05-02 Thread Matt Joyce
I skipped out on blue printing and just submitted a gerrit review for adding argparse flags for specifying URL for specific APIs. Is that cool or do we want blue prints at that level of low complexity? -Matt On Wed, May 2, 2012 at 10:13 AM, Dean Troyer wrote: > On Wed, May 2, 2012 at 10:18 AM,

Re: [Openstack] [Openstack-operators] OpenStack Client Followup

2012-05-02 Thread Matt Joyce
Good to have options. On Wed, May 2, 2012 at 11:46 AM, Duncan McGreggor wrote: > On Wed, May 2, 2012 at 1:56 PM, Matt Joyce wrote: >> I disagree pretty strongly with the idea of an admin binary. > > I think many of us do; I (and I believe Doug) were simply preferring > 1) a si

Re: [Openstack] [client] final openstackclient binary name

2012-05-02 Thread Matt Joyce
Whatever. stack.sh is a conflict. So probably better. On May 2, 2012 11:20 AM, "Doug Hellmann" wrote: > Oops, I saw the code change before this message and I went ahead and > approved it. > > On Wed, May 2, 2012 at 10:59 AM, Dean Troyer wrote: > >> There has been a little more activity in the

Re: [Openstack] [Openstack-operators] OpenStack Client Followup

2012-05-02 Thread Matt Joyce
gt;>> >>> There are a couple of ways to handle that: >>> >>> 1. A separate "openstackadmin" CLI that looks for commands using a >>> different plugin namespace, and therefore only loads the admin commands. >>> >>> 2. Prefix admin-r

Re: [Openstack] OpenStack Client Followup

2012-05-02 Thread Matt Joyce
;> different plugin namespace, and therefore only loads the admin commands. >> >> 2. Prefix admin-related commands in the unified cli with "admin" (so >> "openstack admin create network" or whatever). >> >> 3. Separate admin apps for each project. >

Re: [Openstack] [client] creating blueprints for the unified CLI project

2012-05-01 Thread Matt Joyce
wrote: > I borrowed Guido's time machine and added an interactive mode to cliff this > weekend. > > http://cliff.readthedocs.org/en/latest/index.html > > > On Tue, May 1, 2012 at 7:48 PM, Matt Joyce wrote: >> >> Question do we want to consider an interactiv

Re: [Openstack] OpenStack Client Followup

2012-05-01 Thread Matt Joyce
" or whatever). > > 3. Separate admin apps for each project. > > I think we should avoid 3, since that goes against the spirit of this > project. I like #2, but #1 would be easy to implement and could share 99% of > the code from the basic openstackclient. > > On Tue, Ma

Re: [Openstack] [client] creating blueprints for the unified CLI project

2012-05-01 Thread Matt Joyce
Question do we want to consider an interactive mode on the CLI? Or is the shell enough for our use case? Maybe just ignore that question until we've got something beyond the basics. -Matt On Tue, May 1, 2012 at 4:34 PM, Matt Joyce wrote: > Awesome. will do. > > On Tue, May 1, 2

Re: [Openstack] [client] creating blueprints for the unified CLI project

2012-05-01 Thread Matt Joyce
Awesome. will do. On Tue, May 1, 2012 at 1:47 PM, Doug Hellmann wrote: > I have started creating blueprints from my notes about activities we need to > complete for the unified CLI. Please check the list > at https://blueprints.launchpad.net/python-openstackclient/ and make sure I > haven't misse

Re: [Openstack] OpenStack Client Followup

2012-05-01 Thread Matt Joyce
> As far as whether we support admin-only commands, I think we should. > If they have their own client libs then we'll split them up too.  I > actually kind of liked the side effect of the old nova-manage in that > it was self-enforcing for admin-ness since you needed to run it on the > node itself

Re: [Openstack] OpenStack Client Followup

2012-05-01 Thread Matt Joyce
How does this blueprint play into this client. Is it a separate admin only client or just a subset of this guy? https://blueprints.launchpad.net/nova/+spec/admin-cli -matt On Tue, May 1, 2012 at 12:28 PM, Dean Troyer wrote: > On Tue, May 1, 2012 at 2:11 PM, Adam Spiers wrote: >> As of my rece

Re: [Openstack] [client] OpenStack Client Followup

2012-05-01 Thread Matt Joyce
On Tue, May 1, 2012 at 11:49 AM, Adam Spiers wrote: > Doug Hellmann (doug.hellm...@dreamhost.com) wrote: >> On Mon, Apr 30, 2012 at 2:56 PM, Dean Troyer wrote: >> > On Mon, Apr 30, 2012 at 1:18 PM, Doug Hellmann >> > wrote: >> > > Do we need to specify this beyond saying that all subcommands mus

Re: [Openstack] OpenStack Client Followup

2012-04-30 Thread Matt Joyce
> >  2. I think it would be good if the HIG gave guidelines on how the >     command should behave when run with no arguments. I think the marines call this sort of thing, Task Condition and Standard. Not sure how useful it would be. >  3. I think it would be good if the HIG recommended that, at

Re: [Openstack] Mailing-list split

2012-04-27 Thread Matt Joyce
Makes sense to me. On Apr 27, 2012 2:27 PM, "Everett Toews" wrote: > I like this idea but what happens to the openstack-operators list in this > scenario? > > I don't think we'd want to have the openstack and openstack-operators list > going along in parallel since it sounds like they would overl

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Matt Joyce
e are still exploits (hardware RAM taps?), and we rely on a > total code audit, but we can raise the bar a long way. > > Anyone from Intel / familiar with Intel's trusted cloud work want to explain > better than I can? > > Justin > > > > > On Thu, Apr 26, 2012 at

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Matt Joyce
at 9:53 AM, Daniel P. Berrange wrote: > On Thu, Apr 26, 2012 at 09:05:41AM -0700, Matt Joyce wrote: >> From a security stand point I am curious what you see the benefit as? > > Consider that you might have separate people in your data center > managing the virtualization hosts,

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Matt Joyce
>From a security stand point I am curious what you see the benefit as? On Thu, Apr 26, 2012 at 8:53 AM, Michael Grosser wrote: > Hey, > > I'm following the openstack development for some time now and I was > wondering if there was a solution to spin up encrypted virtual machines by > default and

Re: [Openstack] Monitoring / Billing Architecture proposed

2012-04-22 Thread Matt Joyce
Monitoring and billing seem to be two VERY different beasts. Should we be separating the two efforts? On Sun, Apr 22, 2012 at 3:08 PM, Brian Schott wrote: > The heart of nova-biling is built around accounts, resources, billing > segments with a tariff and cost.  Not clear at my first review wher

Re: [Openstack] Monitoring / Billing Architecture proposed

2012-04-22 Thread Matt Joyce
Correct me if I am wrong but mongo has not been used in openstack previously? What is the benefit here that justifies bringing in new technology? Also are you planning an active polling process over AMPQ or passive listening for the monitor? It seems to me that most of the main components today

Re: [Openstack] Resource utilization

2012-04-20 Thread Matt Joyce
I've done libvirt calls via nrpe in the past for this. On Apr 20, 2012 5:28 AM, "Leander Bessa" wrote: > I've been trying to complete the diagnostics command for libvirt, so far i > think i can get the cpu usage (still need a sample time of 1 second), > volume and network io. I still can't get t

Re: [Openstack] OpenStack Client Followup

2012-04-19 Thread Matt Joyce
I'd be down with helping out as well. On Thu, Apr 19, 2012 at 1:43 PM, Doug Hellmann wrote: > > > On Wed, Apr 18, 2012 at 11:07 PM, Dean Troyer wrote: >> >> We had a good discussion about a unified OpenStack command line client >> on Monday at the Design Summit.  The notes are in the Etherpad at

Re: [Openstack] OpenStack Client Followup

2012-04-19 Thread Matt Joyce
Reminds me of the Opsware Global Shell. That was built on a FUSE fs interface to the API. I loved it when I worked on it. -Matt On Wed, Apr 18, 2012 at 11:07 PM, Dean Troyer wrote: > We had a good discussion about a unified OpenStack command line client > on Monday at the Design Summit.  The n

Re: [Openstack] [Openstack-operators] WebEx Sessions Expired... (was: Remote participation from Design Summit)

2012-04-18 Thread Matt Joyce
t would be kind of a cool project to deploy a scalable streaming system for a conference like this and plug it into an openstack scalable infrastructure. -Matt On Wed, Apr 18, 2012 at 1:30 PM, Duncan McGreggor wrote: > On Wed, Apr 18, 2012 at 1:26 PM, Matt Joyce wrote: >> I'

Re: [Openstack] [Openstack-operators] WebEx Sessions Expired... (was: Remote participation from Design Summit)

2012-04-18 Thread Matt Joyce
I'm willing to help with setting up a 2.0 solution. =D Let us know what we can do to help for next time. I think this webex stuff has been useful for more than a few folks from what i've seen on IRC. -Matt On Wed, Apr 18, 2012 at 1:22 PM, Duncan McGreggor wrote: > Hey all, > > I caught up wit

Re: [Openstack] [Openstack-operators] Remote participation from Design Summit (and conference)

2012-04-16 Thread Matt Joyce
http://wiki.openstack.org/FolsomSummitEtherpads All the etherpads On Mon, Apr 16, 2012 at 3:15 PM, Duncan McGreggor wrote: > On Thu, Apr 12, 2012 at 10:11 AM, Stefano Maffulli > wrote: >> On Wed, 2012-04-11 at 23:13 -0400, Duncan McGreggor wrote: >>> The following channels have been created on

Re: [Openstack] [Openstack-operators] Health & Monitoring Blueprints

2012-04-11 Thread Matt Joyce
Problem of course is many operators aren't on the design summit contributor list ( ala don't have codes to get into it ) and if it's later it's 500 USD to attend. Maybe not the best means of collaborating on something that effects them deeply. Pondering that. -Matt On Wed, Apr 11, 2012 at 1:43

<    1   2