[Openstack] Ubuntu Forums compromised - User data stolen
http://ubuntuforums.org/announce.html In case you haven't heard there was a security breach in the Ubuntu Forums. I know there are a lot of Ubuntu users in the OpenStack community so this could very well affect some of you. From the announcement, There has been a security breach on the Ubuntu Forums. The Canonical IS team is working hard as we speak to restore normal operations. This page will be updated regularly with progress reports. What we know * Unfortunately the attackers have gotten every user's local username, password, and email address from the Ubuntu Forums database. * The passwords are not stored in plain text, they are stored as salted hashes. However, if you were using the same password as your Ubuntu Forums one on another service (such as email), you are strongly encouraged to change the password on the other service ASAP. * Ubuntu One, Launchpad and other Ubuntu/Canonical services are NOT affected by the breach. Regards, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] HTTP headers are incorrectly treated case sensitive by jClouds causing OpenStack x-storage-url to fail
The fix for this issue [1] is actively being worked on in jclouds. The fix is ready but the contributor is waiting for his CLA to be signed. Saqib, I see you already kicked off a conversation over on the jclouds mailing list [2]. I'll update the thread over there when the fix is in and how to get it as soon as possible. Sorry for the late reply. I was on vacation last week. :) Regards, Everett [1] https://issues.apache.org/jira/browse/JCLOUDS-155 [2] http://www.mail-archive.com/user@jclouds.incubator.apache.org/msg00145.html On Jun 28, 2013, at 4:10 PM, Ali, Haneef wrote: As far as I know, Apache will make it lower-case. I use keystone with Apache frontend (mo-wsgi) and all the headers are in lowercase. I was wondering how David is getting correct case. BTW my environment is Ubuntu Precise running apache2.2 Thanks Haneef From: Openstack [mailto:openstack-bounces+haneef.ali=hp@lists.launchpad.netmailto:hp@lists.launchpad.net] On Behalf Of Ali, Saqib Sent: Friday, June 28, 2013 1:53 PM To: David Hadas Cc: Chmouel Boudjnah; Openstack; openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: Re: [Openstack] HTTP headers are incorrectly treated case sensitive by jClouds causing OpenStack x-storage-url to fail Hello David, Thanks for the response. I believe we are using the apache web frontend for the enabling SSL on the end-points. I have asked our OpenStack folks to share the setup and reasoning behind use of the Apache web frontend. They will respond here shortly. I am not sure why our instance of Apache web frontend is returning lower case X-Storage-Url. When we connect directly to the proxy, the X-Storage-Url are correct case. But the Apache frontend somehow makes it all lower case. Would it possible for you to share the relevant Apache config and other setup details for the setup that you have? Thanks. On Fri, Jun 28, 2013 at 9:38 AM, David Hadas dav...@il.ibm.commailto:dav...@il.ibm.com wrote: Ali hi, On my system I get the headers as X-Storage-Url when running under Apache2 front end (not lowercase). Btw, I am always interested to learn how people are using Swift with the Apache front end as this is a fairly recent addition (we are working not to get it into devstack), can you describe shortly your setup and the reason behind choosing Apache front end? DH Regards, David Hadas, Openstack Swift ATC, Architect, Master Inventor IBM Research Labs, Haifa Tel:Int+972-4-829-6104tel:%2B972-4-829-6104 Fax: Int+972-4-829-6112tel:%2B972-4-829-6112 From: Ali, Saqib docbook@gmail.commailto:docbook@gmail.com To: Chmouel Boudjnah chmo...@enovance.commailto:chmo...@enovance.com, Cc: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Date: 28/06/2013 04:30 PM Subject:Re: [Openstack] HTTP headers are incorrectly treated case sensitive by jClouds causing OpenStack x-storage-url to fail Sent by:Openstack openstack-bounces +davidh=il.ibm@lists.launchpad.netmailto:il.ibm@lists.launchpad.net Chmouel, Not really a hack on the swift, just the apache web frontend[1] 1. http://docs.openstack.org/developer/swift/apache_deployment_guide.html On Fri, Jun 28, 2013 at 6:26 AM, Chmouel Boudjnah chmo...@enovance.commailto:chmo...@enovance.com wrote: On Fri, Jun 28, 2013 at 2:00 AM, Ali, Saqib docbook@gmail.commailto:docbook@gmail.com wrote: Is there anything we can do to work around this, while someone from the jClouds community fixes this issue? I would be believe a jclouds fix would be faster to get in than to try agree on a hack to do on swift. Chmouel. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone store-quota-data blueprint
This topic came up at the last summit in Portland at [1] and [2]. Yehia and another colleague of his from HP had a design that was discussed and it seemed like they were going to start work on it. Another developer from CERN expressed interest too. I'm not sure if anything ever really got started on it. I think you'll want to wait until Dolph gets back (next week?) before doing any major work on it. Ask him before moving forward. Regards, Everett [1] http://openstacksummitapril2013.sched.org/event/c0c6befcb4361e54d5c7e45b2f772de7 [2] http://openstacksummitapril2013.sched.org/event/7bf2cdde2dfad733b499d9c2a3f60b08 P.S. This email really belongs in openstack-dev On Jul 1, 2013, at 10:24 AM, Dmitry Stepanenko wrote: Hi folks, we're going to work on store-quota-data blueprint (https://blueprints.launchpad.net/keystone/+spec/store-quota-data). Did anyone already work on it? Thanks regards, Dmitry ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] OpenStack API versions and release content
On Jun 13, 2013, at 3:11 PM, Dolph Mathews wrote: So, for example: - diablo supports Identity API v2.0 and was extensible to support a non-OpenStack Identity API (v1.1) - essex supports Identity API v2.0 - folsom supports Identity API v2.0 - grizzly supports Identity API v2.0 and Identity API v3.0 - havana will support Identity API v2.0 and Identity API v3.1 - icehouse will support Identity API v2.0 and at least Identity API v3.1 (if not v3.2) - J*release is not guaranteed to support Identity API v2.0 and will support at least Identity API v3.1 (if not v3.3) Does anyone think a matrix of OpenStack version to supported API version of each project would be useful to community developers? Should we include it in the documentation? The first column would be the OpenStack release, subsequent columns would be the projects, and the cells would be versions. For example (I hope my formatting works), Release| Keystone | Nova | etc Diablo | 2.0 | x.x | x.x Essex | 2.0 | x.x | x.x Folsom | 2.0 | x.x | x.x Grizzly| 2.0, 3.0 | x.x | x.x Havana | 2.0, 3.1 | x.x | x.x Icehouse | 2.0, 3.1 | x.x | x.x J | 3.1 | x.x | x.x Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] The OpenStack Community Welcomes Developers in All Programming Languages
The OpenStack community has been and needs to continue to be a welcoming community for developers in all programming languages. Naturally I’m referring to developers who are building systems on top of OpenStack and not the developers of OpenStack itself. This email is prompted by a minor incident in the #openstack IRC channel. I’m not looking to single people out so I’ll use a pretty generic description so it can’t so easily be found in the IRC logs. A developer came to #openstack to ask a question about a software development kit (SDK) in another programming language. Within 1 minute he got a reply that can only be described as snarky. Undeterred, he went ahead and asked his questions. 20 minutes later a couple of more snarky responses were added to it. No real help at all. It’s not the lack of help that’s at issue though. It’s the unwelcoming attitude. I have not seen that developer in the channel since then. Like I said, a minor incident. I don’t want to blow this out of proportion but it does need to be addressed. It’s one of those cases where you see the cracks start to appear, it’s best to fix them right away before they become real problems. I’m sure we’ve all been part of such chats about languages. When you’re face-to-face or online but know the people personally, it usually goes without saying that it’s good natured. However, when you’re new to a community, it’s not so clear. Of course the OpenStack community is Python-centric but the OpenStack API is not. We need developers from all of the other languages building on top of OpenStack in whatever language they need to work with. Remember, it might not even be their choice! Let’s continue to be good stewards of the OpenStack API and encourage it’s use by all programming languages by being an inclusive and welcoming community. If you ever encounter someone looking for help with another language, you can always point them to the SDKs wiki page [1]. They should be able to find their way from there. Everett [1] https://wiki.openstack.org/wiki/SDKs ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] The OpenStack Community Welcomes Developers in All Programming Languages
On Jun 12, 2013, at 5:01 PM, Stefano Maffulli wrote: On Wed 12 Jun 2013 01:19:50 PM PDT, John Wong wrote: Is there any way we can punish these people in the future? Let's be clear: we're *nowhere* near having to think about using such measures. +1 on *nowhere* near I tried to write my original email such that things like banning or policies wouldn't even be considered as necessary. It was a minor incident that needed to be addressed but I *really* don't want to see this blown out of proportion. Channel volunteers sounds good to me. I'm not sure that we're even at the point of needing moderators. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift]A design draft of Storage Quota
I already posted this over in dev but thought I'd tie off this thread too. I've just proposed a design summit session with the description below. I sincerely hope anyone interested in quotas will attend. Please have a look at the etherpad to see what's already been done. The quota situation is getting out of control. There are already a number of quota implementations for Swift. I expect that Glance will get its own implementation of quotas next followed closely by Quantum and probably Cinder. Each service will have its own implementation and different API to boot. This is definitely suboptimal. We need centralized quotas, otherwise it will become an operations nightmare. This session will be focused on how that goal can be achieved and who would be willing and able to contribute to it. I've started an Etherpad at https://etherpad.openstack.org/HavanaCentralizedQuotas for this session and to track the existing efforts on quotas. Feel free to add any implementations I've missed. To keep the session focused we won't be discussing Nova quotas. If we can nail down a way forward for centralized quotas, perhaps one day we can roll Nova quotas into it. Regards, Everett On Feb 20, 2013, at 2:43 PM, Everett Toews wrote: On 2/20/13 1:28 PM, Tim Bell tim.b...@cern.chmailto:tim.b...@cern.ch wrote: We also feel an integrated approach such as Boson is the way forward for quota rather than each project have its own (and potentially differing) implementations on areas such as delegation. +1 to an integrated approach. It's easy to envision a need for quotas in Glance as well, in both public and private cloud scenarios. Cc'ing some other potentially interested parties. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Load Balancing Horizon
Hi Gabriel, I've read Deploying Horizon [1] and I had a few high-level questions for you about load balancing Horizon. 1. Do you have any suggestions or recommendations for load balancing Horizon? 2. Are there any gotchas? 3. Can you more or less just load balance it like any other web app? Thanks, Everett [1] http://docs.openstack.org/developer/horizon/topics/deployment.html ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Load Balancing Horizon
From: Robert van Leeuwen robert.vanleeu...@spilgames.com Date: Thursday, February 28, 2013 9:33 AM To: openstack@lists.launchpad.net openstack@lists.launchpad.net Subject: Re: [Openstack] Load Balancing Horizon I've read Deploying Horizon [1] and I had a few high-level questions for you about load balancing Horizon. 1. Do you have any suggestions or recommendations for load balancing Horizon? 2. Are there any gotchas? 3. Can you more or less just load balance it like any other web app? Yes you can load balance it like any webpage. Only gotcha is the vncproxy, it uses websockets that might be problematic for level 7 loadbalancers. If you use tcp loadbalancing you should be fine though. --- I'm having trouble getting Horizon (Folsom Stable) to point to Keystone at another IP. All I should have to do is vim openstack_dashboard/local/local_settings.py OPENSTACK_HOST = 123.123.123.123 sudo /etc/init.d/apache2 restart Correct? But the login page reads, An error occurred authenticating. Please try again later. I dropped the Horizon DB and recreated it but that didn't help. Nothing helpful in /var/log/apache2/horizon_error.log or /var/log/apache2/horizon_access.log either. Am I missing something obvious? Thanks, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Load Balancing Horizon
On 2/28/13 10:26 AM, Everett Toews everett.to...@rackspace.com wrote: I'm having trouble getting Horizon (Folsom Stable) to point to Keystone at another IP. All I should have to do is vim openstack_dashboard/local/local_settings.py OPENSTACK_HOST = 123.123.123.123 sudo /etc/init.d/apache2 restart Correct? But the login page reads, An error occurred authenticating. Please try again later. I dropped the Horizon DB and recreated it but that didn't help. Nothing helpful in /var/log/apache2/horizon_error.log or /var/log/apache2/horizon_access.log either. Am I missing something obvious? Oops. I just needed to clear my browser cache (did a Command-Shift-r in Chrome). The above setting works. Thanks for listening, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift]A design draft of Storage Quota
On 2/20/13 1:28 PM, Tim Bell tim.b...@cern.ch wrote: We also feel an integrated approach such as Boson is the way forward for quota rather than each project have its own (and potentially differing) implementations on areas such as delegation. +1 to an integrated approach. It's easy to envision a need for quotas in Glance as well, in both public and private cloud scenarios. Cc'ing some other potentially interested parties. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [DevStack] Does a Swift/Keystone only install require AMQP?
Hi All, When I was doing a Swift/Keystone only install with DevStack I used the following in my localrc disable_all_services enable_service key swift mysql Then stack.sh paused with the error message ERROR: at least one rpc backend must be enabled, set one of 'rabbit', 'qpid', 'zeromq' via ENABLED_SERVICES. So I blindly added rabbit to enable_service and the error went away. Then I did the PR https://review.openstack.org/#/c/22333/ to change the DevStack README.md file. But then I got the question, is rabbit really necessary? Does anyone know if a Swift/Keystone only install requires AMQP? Thanks, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Developing with Scala/Java on OpenStack Swift
Hi Gui, If you're still interested in trying out jclouds, I just updated the quick start page over at jclouds.org http://www.jclouds.org/documentation/quickstart/openstack/ The example there is for Nova so here's an example with Swift that creates a container and some objects https://gist.github.com/4446492 Regards, Everett From: Gui Maluf guimal...@gmail.commailto:guimal...@gmail.com Date: Wednesday, January 2, 2013 1:01 PM To: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: [Openstack] Developing with Scala/Java on OpenStack Swift Hey guys, I'm trying to extend a software projecthttps://github.com/VirtualCloudDrive/CloudDrive to talk with Swift. This project was developed on Scala, and my issue is: how should I access Swift resource? Should I use openstack-java-sdkhttps://github.com/woorea/openstack-java-sdk/, jcloudshttp://www.jclouds.org/documentation/quickstart/openstack/ or develop my own library to access the REST API? I've tried to use openstack-java-sdk but I wasn't able to import the libraries exposed at examples. I'm really confuse about that and I'll appreciate any help, hint, advice! Thanks in advance.! -- guilherme \n \t maluf ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Quota classes, Store quota data relation
Store Quota Data (in Keystone) is only intended to be a very simple way to store quotas centrally. It is not related to quota classes and there are no plans to do so. That blueprint came out of a use case to have quotas in Swift. However, Swift doesn't store any user/tenant/project data so it was moved to Keystone. The idea being that you could write Swift middleware to check the quotas in Keystone before performing some operation. Regards, Everett From: Aguiar, Glaucimar (Brazil RD-ECL) glaucimar.agu...@hp.commailto:glaucimar.agu...@hp.com Date: Wednesday, November 28, 2012 2:36 PM To: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: [Openstack] Quota classes, Store quota data relation Hi, I am trying to understand the relation of quota classes’ implementation (which I understand as unfinished) with the https://blueprints.launchpad.net/keystone/+spec/store-quota-data blueprint, if any. Per my understanding the implementation of StoreQuotaData and the movement of services to use this central repository require the implementation of quota classes in nova to be also moved to this centralized location. Are there plans on this area? Thanks for clarifications or help in better understand this relationship. Glaucimar Aguiar ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Quota classes, Store quota data relation
From: Aguiar, Glaucimar (Brazil RD-ECL) glaucimar.agu...@hp.commailto:glaucimar.agu...@hp.com Date: Wednesday, November 28, 2012 3:08 PM To: Everett Toews everett.to...@rackspace.commailto:everett.to...@rackspace.com, openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: RE: [Openstack] Quota classes, Store quota data relation Thanks Everett! So, does this mean that nova continue to store quotas assigned to projects as well as keystone? Meaning they will be duplicated? --- They will not be duplicated. Nova will continue to use its own mechanism for quotas. As it stands right now, the only use case for Quotas in Keystone will be for Swift. And even that's optional, depending on whether or not the deployer chooses to write Swift middleware to use it. Cheers, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] First steps in development for cloud.
Hi Jorge, Your questions are a bit vague. A bit more detail would be useful, such as what language are you looking to develop in? It's not a tutorial but you might find http://wiki.openstack.org/SDKs helpful. It lists some of the known SDKs that have support for OpenStack. As for auto-provisioning, you might want to checkout puppet or chef. Regards, Everett From: Jorge Luiz Correa corre...@gmail.commailto:corre...@gmail.com Date: Tuesday, November 27, 2012 6:45 AM To: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: [Openstack] First steps in development for cloud. Hi all!! I would like to know if there is some tutorial about first steps in development for cloud. For example, the dev team here asked to me about some API, libraries etc that help them in development of an application that could interact with the cloud. What they want is to develop an application that know it is running over a cloud environment. The second step would be auto-provisioning, creating new instances automatically. Tks!! -- - MSc. Correa, J.L. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Couldn't find stack-screenrc
From: Johannes Baltimore johannes.b...@gmail.commailto:johannes.b...@gmail.com Date: Wednesday, November 14, 2012 8:34 AM To: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: [Openstack] Couldn't find stack-screenrc Hi. I got devstack today, but I've been going through a problem. Whenever i turn on the machine, I cannot run the rejoin-stack.sh script, even though I've ran stack.sh before. It says the stack-screenrc file couldn't be found, and then asks me to run stack.sh again. Does anyone knows why does this happen? Thanks in advance --- Did you run stack.sh as root? I've noticed that when you start as root the stack-screenrc file doesn't get created. You can copy over an old stack-screenrc or just start it as a new user. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [openstack][cinder] cinder create gives an error
On Tue, Nov 6, 2012 at 11:28 AM, Ahmed Al-Mehdi ah...@coraid.commailto:ah...@coraid.com wrote: Not to impose on you, but can you help me understand what does the following error mean: ERROR: Malformed request url (HTTP 400) (Request-ID: req-8cff9608-598b-4618-bdc1-1068a1227781) --- Another useful debugging aid is the --debug flag for the cinder client, try cinder --debug create --display_name test 1 This will show you what the cinder client is connecting to and what it is sending and receiving. You could be having problems on the client side if you've got a misconfigured OS_AUTH_URL, OS_REGION_NAME, or other OpenStack env var. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Quotas in folsom
On 10/29/12 2:25 PM, Kevin L. Mitchell kevin.mitch...@rackspace.com wrote: It's also worth noting that I've finally been able to start working on Boson, which may help with thatŠ -- Kevin L. Mitchell kevin.mitch...@rackspace.com --- Is http://wiki.openstack.org/Boson still up to date? Is there a blueprint for it? Thanks, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] SDKs
One of the things that came out of the SDK Doc Discussion [1] at the Grizzly Summit was an action item for me to create a wiki page dedicated to Software Development Kits that support OpenStack. And here it is [2]! I also summarized some of the SDK related stuff from the Summit in [3]. In part the wiki page is a survey of existing SDKs. If there's an SDK that you think belongs on the list, please add it. The goal of all of this is to raise the profile and legitimacy of SDKs that support OpenStack in the ecosystem. Thanks, Everett [1] https://etherpad.openstack.org/sdk-documentation [2] http://wiki.openstack.org/SDKs [3] http://blog.phymata.com/2012/10/22/sdks-and-an-openstack-grizzly-summit-wrap-up/ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] SDKs
From: Kiall Mac Innes ki...@managedit.iemailto:ki...@managedit.ie Date: Wednesday, October 24, 2012 1:34 PM To: Everett Toews everett.to...@rackspace.commailto:everett.to...@rackspace.com Cc: openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net openstack@lists.launchpad.netmailto:openstack@lists.launchpad.net Subject: Re: [Openstack] SDKs Should the official python sdk's not be listed? Eg novaclient etc --- They're already listed on the page as python-projectclient ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Nova bindings for ... PHP?
For the Java part you might want to consider jclouds. The question of how to use jclouds with OpenStack came up on their mailing list a little while ago so I wrote up a post on how to do it at http://blog.phymata.com/2012/09/04/jclouds-and-openstack/ Cheers, Everett On 9/3/12 1:07 AM, Tom Fifield fifie...@unimelb.edu.au wrote: Hi all, I've been handed an interesting piece of PaaS software (its various pieces are in Java, PHP, python and bash!) and told make it work with OpenStack. Noone's done any work to make nova play with PHP, have they? Regards, Tom ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Glance] Windows image password customize?
I've come across a couple of projects that do this. Neither of them have much documentation so you'll have to dig into the code. https://github.com/jordanrinke/openstack http://code.google.com/p/cips/ Regards, Everett From: openstack-bounces+everett.toews=rackspace@lists.launchpad.net [openstack-bounces+everett.toews=rackspace@lists.launchpad.net] on behalf of 한승진 [yongi...@gmail.com] Sent: Monday, August 20, 2012 10:14 PM To: openstack@lists.launchpad.net Subject: [Openstack] [Glance] Windows image password customize? Hi I'm studying how to regenerate or customize windows instance when the instance boot. However, I cannot get an answer still now. Linux image doesn't have to regenerate the password because of keyfile login. Do you have any idea ?? ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] good link for jcloud
Naturally the best place to start is http://www.jclouds.org/ They do have some OpenStack specific docs at http://www.jclouds.org/documentation/quickstart/openstack/ but the latest release 1.4.1 which the docs are based on only supports the Nova API v1.1. The next release 1.5.0 has support for the Nova API v2 but it's still a work in progress, although it's already in beta. If you're working with Essex or later, I would recommend making the effort to use the beta release. Have a look at the installation guide at http://www.jclouds.org/documentation/userguide/installation-guide/ and replace alpha.1 with beta.9. A few more links you'll find useful: Google group: https://groups.google.com/forum/?fromgroups#!forum/jclouds Example code: https://github.com/jclouds/jclouds-examples Hope this helps, Everett From: openstack-bounces+everett.toews=rackspace@lists.launchpad.net [openstack-bounces+everett.toews=rackspace@lists.launchpad.net] on behalf of chaohua wang [chwang...@gmail.com] Sent: Wednesday, August 08, 2012 3:48 PM To: openstack@lists.launchpad.net Subject: [Openstack] good link for jcloud Hi Forks, I am newbie in Jcloud, Do you guys know if there is good link or book to read. Thanks, Chaohua ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Keystone] Quotas: LDAP Help
On Mon, Jul 16, 2012 at 7:20 PM, Adam Young ayo...@redhat.com wrote: Usually a Quota is a limitation on a resource. I suspect that the problem here is we have not nailed down the resource objects that you would then apply a quota to. If, for example, we were talking about disk quotas, we could look at the LDAP schema's that are in place for disks, automount, and so forth. For network or CPU quotas, the concepts don't really exist. My immediate thought is that maybe these things are not really Keystone quantities to manage. Nova has the database that deals with the actual quantities of disk and so forth. BUt I know that LDAP is the system of record for Hosts in many systems, so the Data from LDAP needs to feed into Nova somehow I led the session on quotas at the Folsom Summit where the consensus was that, because this data was tied to Tenants, it should be stored in Keystone. We've also discussed it on the mailing list at http://markmail.org/message/vlk6otl2yggjeouc and http://markmail.org/message/7agsnjo3n4il56ar (where you'll find links to the Summit etherpad, spec, and blueprint). I searched around a bit for an objectclass that handled generic quotas but couldn't find one. I really wouldn't want us to write our own objectclass either as it's simply not flexible enough. I don't think we want to necessarily nail down the resource objects we want to apply a quota to. Each OpenStack project is going to need its own quotas and I suspect there are going to be many additions to those quotas over the next 2 years so we something that can handle anything. If we just store some JSON in the backend then that will meet our needs nicely. This is how metadata is stored in the SQL backend. I simply reused that and it was pretty effective. Can you post your code to a GIthub repo and send out a link to the commit so that I could take a look? It would be much more clear to discuss with actual code in front of me. My branch is at https://github.com/everett-toews/keystone/tree/quotas The SQL implementation is at https://github.com/everett-toews/keystone/blob/quotas/keystone/identity/backends/sql.py Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Keystone] Quotas: LDAP Help
On Tue, Jul 17, 2012 at 12:56 PM, Adam Young ayo...@redhat.com wrote: Yes, it is possible to use LDAP for Identity and SQL for the other things, like Tokens and Policy. Quotas could be done the same way. You just have to extract the Quotas calls out of the Identity Provider. It might make sense to go in Policy, or into its own driver. Yep. I was thinking along the same lines. I think we could reasonably sidestep the issue by storing the quotas in the SQL database. It probably belongs in its own driver as I wouldn't want to pollute the Policy driver. But, at this point, I think we need to revisit the question...do we want quotas in Keystone? This is the first I've heard of Boson, which makes sense as Kevin only recently sent an email to the list. It looks like a much more comprehensive and scalable solution to quotas. The fact that it would be cell aware is a big benefit. Plus I would not want to see 3 quota implementations running around in OpenStack (the current Nova impl., my Keystone impl., and Boson). I would be willing to step aside to make way for Boson, if it is something that would become a reality. I'll respond to Kevin's thread on Boson... Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Distributed quota manager concept
Hi Kevin, Overall I really like what you're proposing here. Conceptually this seems like a comprehensive and scalable solution to the quota issue in OpenStack. I have a number of questions on it. Were you envisioning Boson going through the incubation process and becoming a core project in OpenStack? If that were to happen, would Boson become a required dependency for all of the other OpenStack projects (that require quotas)? Would it be possible to run OpenStack without Boson? My main concern here is the cost of the complexity of adding another service to deploy and maintain. But, one way or another, obviously something needs to be done about quotas. Speaking of deployment and maintenance complexity...the Data Storage section reads, It is also necessary to be able to search for a given Usage or Reservation based on some or all of the key/value pairs, so that usage information may be obtained and easily displayed to the user. This latter requirement may indicate that a NoSQL solution is the best for Boson's backend. Setting aside any SQL/NoSQL religious debate or even the best tool for the job argument, I think you'd find this to be a hard sell to the operations crowd. Nobody is going to want to have all of their OpenStack data in an SQL DB (which they may have already gone through the trouble to make HA) but then have just the quota data in a NoSQL DB. I would urge you to consider starting with SQL and then make NoSQL an option if there is demand for it. Regards, Everett On Tue, Jul 17, 2012 at 9:44 AM, Kevin L. Mitchell kevin.mitch...@rackspace.com wrote: I recently thought about and wrote up a concept for a distributed quota manager that I have dubbed Boson. Unfortunately, higher priorities at Rackspace have kept me from working on it, so I wanted to get the proposal out there for others to comment and cogitate on. The writeup is at http://wiki.openstack.org/Boson -- Kevin L. Mitchell kevin.mitch...@rackspace.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [Keystone] Quotas: LDAP Help
Hi All,
I've got a working implementation of quotas in Keystone. However it's only
working for the KVS and SQL backends right now and I need it to work with
LDAP before submitting it for review. I have limited experience with LDAP
and only from an ops perspective, I've never developed any application code
against an LDAP backed app, so I'm here asking for help.
My original plan was to just piggy back on the metadata code in the LDAP
backend (like I did with SQL). But, as you can see from get_metadata [1]
and create_metadata [2], it's not really there. Since that's not possible
I'll need to build something myself but I'm not too sure what's the best
way to go about doing that. Based on a bit of research, I've come up with a
couple of options.
Option 1 - Separate Quota ou
Looking at ldap/core.py, I could create a new QuotaApi class with the fields
DEFAULT_OU = 'ou=Quota'
DEFAULT_STRUCTURAL_CLASSES = []
DEFAULT_OBJECTCLASS = '???'
DEFAULT_ID_ATTR = 'cn'
DEFAULT_MEMBER_ATTRIBUTE = 'cn'
options_name = 'quota'
attribute_mapping = {'quota': 'cn'}
model = models.Quota
The idea being that quota information is an ou associated with a tenant
(somehow). I'm not sure how best to store the quota data itself in this
case. Could it just be stored as JSON in the cn? I'm not sure if that's a
good idea or a bad idea but I suspect bad...
Option 2 - Metadata Attribute on Tenant
Quotas are just an attribute of a Tenant so why not just add a single
'quotas' attribute to the Tenant ou. Then the quotas JSON could be stored
in this attribute. This seems like a simple and straight-forward solution
but I don't know how to add this attribute via an objectclass to Tenant.
How would I add a quotas attribute to the Tenant ou?
How would I reference that attribute?
Is there an existing attribute on Tenant where I could reasonably store the
quotas JSON instead of adding another one?
Thoughts or feedback on these options? Are there any other options I'm
missing?
Thanks,
Everett
[1]
https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/core.py#L140-147
[2]
https://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap/core.py#L205-206
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] OpenStack and VDI
For the record, here's the link to the article. http://www.zdnet.com/blog/virtualization/openstack-consortia-to-rival-citrix-vmware-microsoft-as-vdi-hits-tipping-point/4962 Everett On Wed, Jun 20, 2012 at 9:19 PM, Michael J Fork mjf...@us.ibm.com wrote: I too am interested in leaning about this effort. Michael - Michael Fork Cloud Architect, Emerging Solutions IBM Systems Technology Group [image: Inactive hide details for John Purrier ---06/20/2012 01:57:26 PM---Hi all, recently there was a post by Zdnet about some folks]John Purrier ---06/20/2012 01:57:26 PM---Hi all, recently there was a post by Zdnet about some folks that are implementing VDI (virtual deskt From: John Purrier j...@openstack.org To: openstack@lists.launchpad.net, Date: 06/20/2012 01:57 PM Subject: [Openstack] OpenStack and VDI Sent by: openstack-bounces+mjfork=us.ibm@lists.launchpad.net -- Hi all, recently there was a post by Zdnet about some folks that are implementing VDI (virtual desktop) integrated with OpenStack. I would like to get in touch with the project, if anyone knows of or are part of the effort. Thanks, John John Purrier j...@openstack.com (206) 930-0788 http://www.linkedin.com/in/johnpur ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Forking an OpenStack project to remotely save changes
Hi All, If you have a relatively long-lived topic branch, what's the best way to remotely save changes? If you wanted to fork an OpenStack project on github, it would work something like: 1. Fork the project on github.com to your own account 2. Clone the project locally 3. Add a remote branch to your local repo that points to the origin project repo you forked from 4. Create a remote branch for gerrit 5. Create a branch for your changes in the forked project 6. Commit and push your changes to your branch 7. When your branch is ready for review: a. pull from origin b. rebase your changes to the current state of the master 8. git review I've done steps 1-6 working but I can't easily test 7 8 without sending in unnecessary changes for review. But if you lost your changes, you would just clone your forked project again. Is this viable? Is this a reasonable way to remotely save changes? One alternative would be to continually save changes using review drafts with git review -D. In this case if you lost your changes, you would have to clone the origin project and then fetch the changes from gerrit. Is this viable? How are other people solving this problem? Thanks, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone issue?
Has this issue been reported as a bug yet?
Everett
On Thu, May 17, 2012 at 10:21 PM, Luis Gervaso l...@woorea.es wrote:
To reproduce:
First delete a role that is assigned to a tenant-user pair
If you delete tenant-user-role first, and then delete the role all works
fine
Regards
On Fri, May 18, 2012 at 4:33 AM, Luis Gervaso l...@woorea.es wrote:
Hi,
Working on stable/essex:
When I delete a user-tenant-role keystone continues returning null for
the deleted roles
In the example I have deleted KeystoneAdmin and KeystoneServiceAdmin
roles from a
devstack installation and then added them again as part of my tests
This is the result,
{roles: [{id: 5172006c48c942c499beb79740a8021a, name: admin},
*null,
null*, {id: 5adca868452746388f5d526db1bfcf9c, name:
KeystoneAdmin}, {id: fea9871c0e2d492da75c2d4a73c7269b, name:
KeystoneServiceAdmin}]}
which causes every nova api call become unusable :
error on auth_token.py [line 398]
TypeError: 'NoneType' object has no attribute '__getitem__'
I think this issue is related to metadata table where roles are not
updated
when a role is deleted
--
---
Luis Alberto Gervaso Martin
Woorea Solutions, S.L
CEO CTO
mobile: (+34) 627983344
luis@ luis.gerv...@gmail.comwoorea.es
--
---
Luis Alberto Gervaso Martin
Woorea Solutions, S.L
CEO CTO
mobile: (+34) 627983344
luis@ luis.gerv...@gmail.comwoorea.es
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [openstack][keystone] V3 API draft
I wanted to throw quotas out there for inclusion in the v3 API. In the
format from the doc.
API Resources
Quota
- resource quotas associated with a tenant
- a tenant may have 0 or more quotas
resource attributes:
- name (unique per tenant)
- value
- id
- url (fully qualified resource URL)
V3 CORE API
Policy?
Quota
The key use cases we need to cover:
- CRUD for quotas
(GET) /tenants/{tenant_id}/quotas == get_quotas
(GET) /tenants/{tenant_id}/quotas/{quota} == get_quota
(PUT) /tenants/{tenant_id}/quotas == create_or_replace_quotas
(DELETE) /tenants/{tenant_id}/quotas == delete_quotas
Quotas may be more applicable to an API extension but I wanted to put this
out there for consideration.
Everett
On Mon, May 21, 2012 at 10:11 AM, Joseph Heck he...@mac.com wrote:
Good morning,
I wanted to announce that we have the first strawman/draft of a V3 API for
Keystone available for comment and feedback. This is an early draft, and I
expect there to be more than one.
https://docs.google.com/document/d/1s9C4EMxIZ55kZr62CKEC9ip7He_Q4_g1KRfSk9hY-Sg/edit
The general theme of this proposal is a broad CRUD based API supporting
authentication and authorization needs in OpenStack. Back-end
implementations of Keystone may not support all components of the API,
hence an API return may be NotImplemented. This is to support Keystone as a
programmatic facade to an deployment’s existing authentication and
authorization system(s).
Themes for changes:
• different style of pagination that I hope will be more effective
for UI work
• consolidate CRUD operations currently in contrib into CORE
• adding a url resource attribute that's the fully qualified
resource location for the keystone service
• flatten the service catalog structure
• added in a domains (collection of tenants)
• restructure role API calls to be specific to user-tenant or
user-domain
• tokens are now very explicit to user+tenant combinations
• new API mechanisms to get tenants associated with a user
• generalized credentials associated with a user/tenant combo (ec2,
pki, ssh keys, etc)
• propose an extended policy-implementation-specific API
If you're interested, please review and provide feedback through the above
Google Doc, or feel free to open broader discussion questions here on the
list.
-joe
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [OpenStack][Keystone] Blueprint to store quota data in Keystone
On Fri, May 11, 2012 at 9:07 AM, Joe Topjian joe.topj...@cybera.ca wrote: With regard to your dot notation, couldn't multiple --quota args be used? For example: keystone quota-create --quota nova.ram=102400 --quota nova.instances=20 --quota swift.total=1073741824 tenant-id Hmmmthis would be possible with nargs in the argparse module and it would remove the need to use --quota multiple times. Secondly, with regard to quota-create and quota-update, is there a huge difference between the two besides one would ultimately do an insert and one would do an update? If that is the only difference, could the two be combined into a single quota-set subcommand? They're two distinct actions and having both is consistent with the rest of the keystone CLI. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] [OpenStack][Keystone] Blueprint to store quota data in Keystone
Hi All, I've started a blueprinthttps://blueprints.launchpad.net/keystone/+spec/store-quota-dataand spec http://wiki.openstack.org/KeystoneStoreQuotaData to store quota data in Keystone. Please have a look if you're interested and any feedback is welcome. Of course, writing up the spec brought up number of questions for me. You can find more detail in the spec but here they are to get some more exposure. 1. For the keystone CLI I'm proposing using JSON for batch create, update, and delete of quotas. I don't believe this is done anywhere else in OpenStack. Good idea? Bad idea? My plan is to go with the JSON. 2. For the RESTful API, do we have just one DELETE with details of what to delete in the body of the request? My plan is to go with just one DELETE. 3. For the implementation I'm proposing two options. 1. Store the data in the current metadata table. 2. Store the data in a new metadata_per_tenant table. Thoughts? My plan is to use option 2. 4. If you change the word quota to the word metadata in the User Stories and the Design sections, this becomes a generic mechanism for accessing metadata per tenant. Do we want a generic metadata service for keystone or stick with a service specific to quotas, while keeping the underlying implementation generic? I'm on the fence about this one. On one hand, it's very clear to have a well defined API that's just used for quotas. On the other hand, it's very flexible to have a generic API that can be used for any metadata (although maybe that promotes abuse of the feature). Regards, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone API question
Hi Luis,
I'm digging around in the Keystone code right now and helping answer your
questions is helping me learn the code base. Keep 'em coming!
Anyway, from what I can tell, you're correct that there's no general way to
get all of the tenants that a user belongs to in the current high level
API. However, there is already support for exactly this feature in the
lower level API. In [1] you'll see that the Driver object has the
method get_tenants_for_user. This method is implemented in all of the
backends in [2] so there's support for it everywhere, it just hasn't been
exposed in the high level API. Looking closer at [1] we see the comment,
# NOTE(termie): seven calls below should probably be exposed by the api
# more clearly when the api redesign happens
which includes the method get_tenants_for_user. Looks like it's just a
matter of adding this method to one of the Routers to make it available in
the REST API.
My advice to you is to track down termie and find out what the story is
with the API redesign he mentions. Of course, you could always propose a
blueprint to [3] and make the method available yourself ;)
Hope this helps,
Everett
[1]
https://github.com/openstack/keystone/blob/master/keystone/identity/core.py
[2]
https://github.com/openstack/keystone/tree/master/keystone/identity/backends
[3] https://blueprints.launchpad.net/keystone
On Thu, May 3, 2012 at 5:27 PM, Luis Gervaso l...@woorea.es wrote:
From admin port I want to list the tenants a user (different from the
current user) belongs to.
On Fri, May 4, 2012 at 1:24 AM, Gabriel Hurley
gabriel.hur...@nebula.comwrote:
On the keystone admin port the tenants call will list all tenants
(provided the token corresponds to a user who has admin privileges).
** **
**- **Gabriel
** **
*From:*
openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net[mailto:
openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net] *On
Behalf Of *Luis Gervaso
*Sent:* Thursday, May 03, 2012 1:24 PM
*To:* Everett Toews
*Cc:* openstack@lists.launchpad.net
*Subject:* Re: [Openstack] Keystone API question
** **
Yes, this is the real issue.
** **
Since /tenants is only valid for the current user (that's X-Auth-Token
dependant)
** **
How can an administrator user list all the tenants a user belongs to?
** **
Another issue i've detected is that endpoints are always dependant on a
service,
may be i'm wrong but for me:
** **
/service/{service_id}/endpoints
** **
is more appropiate than
** **
/endpoints
** **
Dolph, please correct me
** **
Luis
** **
** **
On Thu, May 3, 2012 at 10:12 PM, Everett Toews everett.to...@cybera.ca
wrote:
I get the same as Luis when trying GET /users/{user_id}/roles on
stable/essex (using devstack). Keystone spits back an
** **
AttributeError: 'UserController' object has no attribute 'get_user_roles'
** **
message instead of a nice 501.
** **
GET /tenants/{tenant_id}/users/{user_id}/roles works fine. For a bit more
detail have a look at
** **
http://docs.openstack.org/api/openstack-identity-service/2.0/content/GET_listRolesForUserOnTenant_v2.0_tenants__tenantId__users__user_id__roles_Admin_API_Service_Developer_Operations-d1e1356.html
** **
Everett
** **
On Thu, May 3, 2012 at 9:34 AM, Dolph Mathews dolph.math...@gmail.com
wrote:
The philosophy in essex is that it's meaningless for a user to have a
role without that role being applied to a tenant, so the call that's
implemented is:
** **
GET /tenants/{tenant_id}/users/{user_id}/roles
** **
Calling this instead should get you an HTTP 501 stating User roles not
supported: tenant ID required.
** **
GET /users/{user_id}/roles
** **
Also, the term roleRefs was deprecated late in the diablo cycle (AFAIK)
in favor of roles.
** **
-Dolph
** **
On Wed, May 2, 2012 at 3:44 PM, Luis Gervaso l...@woorea.es wrote:
Hi,
** **
In Diablo was:
** **
GET /users/{user_id}/roleRefs
** **
In Essex it is maintained for compatibility reasons. I understand that
this is the obsolete now.
** **
I can find:
** **
PUT DELETE /users/{user_id}/roles/OS-KSADM/{role_id}
** **
How can get all the roles having a user_id?
** **
GET /users/{user_id}/roles (i can't find this on stable/essex)
** **
Returning role list with tenant associated
** **
Another option that would work for me is:
** **
GET /users/{user_id}/tenants
** **
Returning tenant list with role list associated per tenant
** **
** **
When i GET /user/{user_id} i obtain only this info
** **
{user: {name: admin, enabled: true, email: ad...@example.com,
id: ef1e63df85b641d7bf3c575bb8670cef, tenantId: null}}
** **
Regards
Re: [Openstack] Listing roles for a user
keystone help role-list usage: keystone role-list [--user user-id] [--tenant_id tenant-id] List all roles, or only those granted to a user. Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant $ keystone tenant-list ... | bebf7c9c4d1f41d6ba6fb3ba10855b5e | demo | True| ... ubuntu@i-04b4:~$ keystone user-list ... | 906b0dc3d4464f2b88b47643f1c27297 | True| d...@example.com | demo | ... $ keystone role-list --user=906b0dc3d4464f2b88b47643f1c27297 --tenant_id=bebf7c9c4d1f41d6ba6fb3ba10855b5e ... | bbef7b9c03e84507904b352e876f28d4 | Member | | cad6d3b00ce344fbad9857a413c1f3de | anotherrole | ... The parameter --user in role-list should really be --user_id. Everett On Fri, May 4, 2012 at 9:36 AM, Kevin Jackson ke...@linuxservices.co.ukwrote: Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? I see this teasing option - but I can only list all roles unless I auth with the user's details... role-list List all roles, or only those granted to a user. Cheers, Kev -- Kevin Jackson @itarchitectkev ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Listing roles for a user
Hi Dolph, Just out of curiosity, why is the argument --user instead of --user-id? Seems like it would be more informative and consistent if it was --user_id. I actually wound up filing a bug for this at https://bugs.launchpad.net/keystone/+bug/994744 Everett On Fri, May 4, 2012 at 11:36 AM, Dolph Mathews dolph.math...@gmail.comwrote: This actually just changed yesterday in https://github.com/openstack/python-keystoneclient/commit/e9ba370434537bcf1e53266e24397311d595b71e PRIOR to that commit: $ keystone help role-list usage: keystone role-list [--user user-id] [--tenant_id tenant-id] List all roles, or only those granted to a user. Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant AFTER that commit (role-list has been simplified by introducing a new command): $ keystone help user-role-list usage: keystone user-role-list [--user user-id] [--tenant_id tenant-id] List roles granted to a user Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant -Dolph On Fri, May 4, 2012 at 10:36 AM, Kevin Jackson ke...@linuxservices.co.ukwrote: Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? I see this teasing option - but I can only list all roles unless I auth with the user's details... role-list List all roles, or only those granted to a user. Cheers, Kev -- Kevin Jackson @itarchitectkev ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Keystone API question
I get the same as Luis when trying GET /users/{user_id}/roles on
stable/essex (using devstack). Keystone spits back an
AttributeError: 'UserController' object has no attribute 'get_user_roles'
message instead of a nice 501.
GET /tenants/{tenant_id}/users/{user_id}/roles works fine. For a bit more
detail have a look at
http://docs.openstack.org/api/openstack-identity-service/2.0/content/GET_listRolesForUserOnTenant_v2.0_tenants__tenantId__users__user_id__roles_Admin_API_Service_Developer_Operations-d1e1356.html
Everett
On Thu, May 3, 2012 at 9:34 AM, Dolph Mathews dolph.math...@gmail.comwrote:
The philosophy in essex is that it's meaningless for a user to have a role
without that role being applied to a tenant, so the call that's implemented
is:
GET /tenants/{tenant_id}/users/{user_id}/roles
Calling this instead should get you an HTTP 501 stating User roles not
supported: tenant ID required.
GET /users/{user_id}/roles
Also, the term roleRefs was deprecated late in the diablo cycle (AFAIK)
in favor of roles.
-Dolph
On Wed, May 2, 2012 at 3:44 PM, Luis Gervaso l...@woorea.es wrote:
Hi,
In Diablo was:
GET /users/{user_id}/roleRefs
In Essex it is maintained for compatibility reasons. I understand that
this is the obsolete now.
I can find:
PUT DELETE /users/{user_id}/roles/OS-KSADM/{role_id}
How can get all the roles having a user_id?
GET /users/{user_id}/roles (i can't find this on stable/essex)
Returning role list with tenant associated
Another option that would work for me is:
GET /users/{user_id}/tenants
Returning tenant list with role list associated per tenant
When i GET /user/{user_id} i obtain only this info
{user: {name: admin, enabled: true, email: ad...@example.com,
id: ef1e63df85b641d7bf3c575bb8670cef, tenantId: null}}
Regards
--
---
Luis Alberto Gervaso Martin
Woorea Solutions, S.L
CEO CTO
mobile: (+34) 627983344
luis@ luis.gerv...@gmail.comwoorea.es
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Swift][Keystone] Swift Quotas
Since storing the quota data in Keystone is a prereq for do the quotas in
Swift, I'm starting there. After digging through the Keystone code a bit
I've identified at least one issue with storing the quota data per tenant
for the SQL backend.
In the metadata table both tenant_id and user_id are primary keys. So the
question is, *within the current design* how do you store some piece of
metadata per tenant only?
Storing the same quota data per user for a tenant doesn't work because of
the many-to-many relationship between users and tenants.
Another option is to use a static user_id for rows where you want to store
metadata per tenant.
e.g. user_id='per_tenant_metadata',
tenant_id='55b6d515e00e48c38e2c92d27dc5c03e', data='{quota: ...}' (I'll
figure out what the JSON looks like later)
If you retrieved the quotas via SQL it would look something like,
select data from metadata where user_id='per_tenant_metadata' and
tenant_id='55b6d515e00e48c38e2c92d27dc5c03e';
This works but doesn't feel like the cleanest solution. Any thoughts on
this approach?
Of course, stepping outside the current design would yield more options but
I wanted to look for a solution within the current design first.
Everett
On Tue, May 1, 2012 at 2:04 PM, Everett Toews everett.to...@cybera.cawrote:
Hi All,
I led the session [1] on Swift Quotas at the Summit and I'd appreciate
some feedback on the updated spec [2] and blueprint [3]. I also have a
couple of design level questions.
1. Should we store the Swift quota data in Keystone?
One of the ideas that came out of the session was that we could store the
Swift quota data in Keystone. I took a look at Keystone and it appears the
best place for this would be in the metada table but it appears to me that
it's only accessible via the User Metadata Extension API in Keystone. Is it
feasible to store the Swift quota data in Keystone this way? Should we?
On a related note, during the Pluggable Tenant Data session [4] led by
Phil Day something similar was being discussed for moving Nova quotas to
Keystone.
2. Where should the code for Swift quotas live?
It was suggested during the session that this code could live in a
middleware for Swift. Seems like a reasonable approach to me. I've taken a
look at some of the code in /swift/common/middleware and it looks
relatively straight-forward. Any thoughts or suggestions on implementing
this as middleware?
Regards,
Everett
[1] http://etherpad.openstack.org/SwiftQuotas
[2] http://wiki.openstack.org/SwiftQuotas
[3] https://blueprints.launchpad.net/swift/+spec/storage-quotas
[4] http://etherpad.openstack.org/FolsomPluggableTenantData
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
[Openstack] [Swift][Keystone] Swift Quotas
Hi All, I led the session [1] on Swift Quotas at the Summit and I'd appreciate some feedback on the updated spec [2] and blueprint [3]. I also have a couple of design level questions. 1. Should we store the Swift quota data in Keystone? One of the ideas that came out of the session was that we could store the Swift quota data in Keystone. I took a look at Keystone and it appears the best place for this would be in the metada table but it appears to me that it's only accessible via the User Metadata Extension API in Keystone. Is it feasible to store the Swift quota data in Keystone this way? Should we? On a related note, during the Pluggable Tenant Data session [4] led by Phil Day something similar was being discussed for moving Nova quotas to Keystone. 2. Where should the code for Swift quotas live? It was suggested during the session that this code could live in a middleware for Swift. Seems like a reasonable approach to me. I've taken a look at some of the code in /swift/common/middleware and it looks relatively straight-forward. Any thoughts or suggestions on implementing this as middleware? Regards, Everett [1] http://etherpad.openstack.org/SwiftQuotas [2] http://wiki.openstack.org/SwiftQuotas [3] https://blueprints.launchpad.net/swift/+spec/storage-quotas [4] http://etherpad.openstack.org/FolsomPluggableTenantData ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Mailing-list split
I'm always an advocate for one less thing. If it makes sense to do so, I would rather have two things than three. It's simply a matter of less complexity and less confusion. I'm not convinced we need three lists. Duncan, you describe the audience for the openstack list as folks who are not code contributors, but standing up OpenStack itself. To me that sounds, at least in part, to be the role of Ops people. It's strange to me that we would take the existing mailing list openstack-operators and move the Ops people on it to the openstack list and repurpose the openstack-operators for DevOps people. It's even stranger to me that a list devoted to DevOps would exclude the Ops people, the openstack-operators for DevOps and openstack for Ops split. One of the major tenants of DevOps is to be inclusive of Ops. I think the new DevOps community could learn a lot from the kinds of questions that Ops people are asking about OpenStack. And vice versa, the Ops people could give input on solutions being worked on by DevOps. What is your justification for excluding the Ops from DevOps? And sorry, I don't buy the don't have the time to devise a solution for creating appropriate filters argument. It takes 10 seconds to create a filter to shunt mailing list traffic to another folder/label away from your inbox. To me it seems like you don't want to be on the Dev list and you don't want to be on the Ops list, you want your own DevOps list. I *applaud* the re-jump-start of the OpenStack DevOps community but I don't think isolating yourselves is the way to go. I agree that it might take a cycle to sort out and I agree that we should make one small change at the time, measure/evaluate and keep changing as needed. If one list or the other does not have much traction by the next Summit, we should consider a merge. But even before then, please do consider whether or not the DevOps community really needs its own list. Everett On Fri, Apr 27, 2012 at 3:43 PM, Duncan McGreggor dun...@dreamhost.comwrote: On Fri, Apr 27, 2012 at 3:52 PM, Everett Toews everett.to...@cybera.ca wrote: I like this idea but what happens to the openstack-operators list in this scenario? I don't think we'd want to have the openstack and openstack-operators list going along in parallel since it sounds like they would overlap. I propose that the members of the openstack-operators list would be (automatically or manually) migrated to the openstack list. Then the openstack-operators list would be set to read-only or maybe even removed completely to avoid confusion. Comments? Feedback? Hrm. One of the things that came out of the Design Summit discussions around DevOps was that the OpenStack DevOps sub-community doesn't really feel like it has a voice. As a result, I'd be loathe to remove that venue for discussion right now, even if it's only of symbolic value. That being said, I propose that something along the following lines could happen: * intense dev work, collaboration, etc., happening on openstack-dev@ * general usage of openstack questions by folks who are not code contributors, but standing up OpenStack itself, happening on openstack@ * conversations around DevOps in particular (the wide spectrum of definitions that comprise DevOps in various people's minds) happening in openstack-operators@ In helping jump-start (or re-jump-start) the OpenStack DevOps community, I'd really like to have a dedicated place for announcements, questions, etc. Even if we spent some time pointing folks to more detailed, technical resources. In hallway conversations at the summit (and in various emails and phone calls since then), people who consider themselves DevOps have expressed concern over the possibility that the operators list would go away. They are overwhelmed by the volume of traffic on the openstack list, and don't have the time to devise a solution for creating appropriate filters, etc. That objection may simply go away with the new mail list split. But if openstack-operators has become a property valuable to community members, we shouldn't just get rid of it because it doesn't make logical sense. We should make sure that folks are ready to transition to another location for their DevOps needs. And that might take a cycle to sort out... d ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [Openstack-operators] Mailing-list split
Hi Stefano, I was replying to Duncan's email, not Thierry's. I'm all for the new openstack-dev list. It was Duncan's proposal that the other lists be split as so. 1. openstack-dev = Dev 2. openstack = Ops 3. openstack-operators = DevOps I am questioning the necessity to have both lists 2 and 3. My proposal boils down to the question, does the DevOps community really need its own list? I'm willing to wait until the next Summit to see what the traffic numbers are like on the openstack and openstack-operators lists before any decisions are made around merging them or keeping them separate. However, I still think it's worthwhile to ask the question above. Regards, Everett On Mon, Apr 30, 2012 at 11:08 AM, Stefano Maffulli stef...@openstack.orgwrote: hi Everett, On Mon 30 Apr 2012 09:12:24 AM PDT, Everett Toews wrote: It's strange to me that we would take the existing mailing list openstack-operators and move the Ops people on it to the openstack list and repurpose the openstack-operators for DevOps people. I'm lost here, I don't understand what you're proposing to do. Let's summarize: Thierry framed the problem: The traffic on the openstack@lists.launchpad.net list doubled in the last 4 months [3], with more users and deployers asking for information on OpenStack projects. And he made a proposa to split between: 1/ Usage, deployment, Essex / current-stable discussions 2/ Development, contribution, Folsom / forward-looking discussions A new list will be created for (2) and existing contributors will be asked to subscribe to that new list He said nothing about point 1. I assumed that openstack-operators is one of the place for discussions around usage, deployment and such (another place for that is the forum). It seems to me there there is consensus to keep openstack-operators and forums running therefore I'll ask Todd to review the openstack.org/community pages (and the top navigation bar) in order to make these landing destinations more prominent. Cheers, stef ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Mailing-list split
I like this idea but what happens to the openstack-operators list in this scenario? I don't think we'd want to have the openstack and openstack-operators list going along in parallel since it sounds like they would overlap. I propose that the members of the openstack-operators list would be (automatically or manually) migrated to the openstack list. Then the openstack-operators list would be set to read-only or maybe even removed completely to avoid confusion. Comments? Feedback? Everett On Fri, Apr 27, 2012 at 4:04 AM, Thierry Carrez thie...@openstack.orgwrote: Hello everyone, TL;DR summary: Due to traffic exploding, we will split the current openstack list into user / usage topics (openstack list) and development / next-version topics (openstack-dev list). Long version: At the Communication session at the design summit [1] we looked at the state of our communication media in general, and mailing-list in particular [2]. [1] http://folsomdesignsummit2012.sched.org/event/366accca0fda271fc23e82b9cb5162cc [2] http://etherpad.openstack.org/FolsomCommunication The traffic on the openstack@lists.launchpad.net list doubled in the last 4 months [3], with more users and deployers asking for information on OpenStack projects. It becomes difficult for contributors to properly prioritize their ML reading, and we can no longer have all the discussions in the same place. [3] http://openstack.markmail.org/ The proposal is to split between: 1/ Usage, deployment, Essex / current-stable discussions 2/ Development, contribution, Folsom / forward-looking discussions A new list will be created for (2) and existing contributors will be asked to subscribe to that new list. Since we expect to have a more disciplined/focused group in that new list, we'll define a set of subject prefixes that should be used for easier client-side/at-a-glance filtering of discussions: [General] Affects all projects [Swift] [Nova] [Glance] [Quantum] [Horizon] [Keystone] Project-specific [Common] openstack-common [QA] [CI] [Docs] Discussions / Information on specific topics [...] Add your own here To keep that list usable, I suggest we aggressively enforce those topics and redirect inappropriate discussions to the other list when necessary. To avoid Launchpad list slowness, we would run the new openstack-dev list off lists.openstack.org. Given the potential hassle of dealing with spam and delivery issues on mission-critical MLs, we are looking into the possibility of outsourcing the maintenance of lists.openstack.org to a group with established expertise running mailman instances. Please let us know ASAP if you could offer such services. We are not married to mailman either -- if an alternative service offers good performance and better integration (like OpenID-based subscription to integrate with our SSO), we would definitely consider it. There was a suggestion during the session of using umbrella/siblings lists to aggregate content from multiple project-specific sublists. I reviewed the options and I think it introduces a lot of complexity, reduces flexibility in adding new topics, so client-side filtering sounds like a better bet. If most people use subject prefixes appropriately, keeping it simple is probably the best bet. We'll let you know when the new list is set up. Regards, -- Thierry Carrez (ttx) Release Manager, OpenStack ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] New OpenStack Releases in Ubuntu 12.04LTS
+1! I just about fell out of my chair when Mark Shuttleworth mentioned this on stage in front of everyone. This should have a BIG impact on OpenStack adoption. Cheers, Everett On Tue, Apr 24, 2012 at 3:48 AM, Thierry Carrez thie...@openstack.orgwrote: Robbie Williamson wrote: For those of you who may have missed this announcement. Canonical has created the Ubuntu Cloud archive. Starting with the Folsum release, Folsom :) users will be able to elect to enable this archive, and install newer releases of OpenStack (and the dependencies) as they become available up through the next Ubuntu LTS release (presumably 14.04). There was a need for this: people kept asking the OpenStack PPA maintainers to provide a production-grade latest OpenStack on LTS repo. Great to see that the work has been picked up, as an officially-supported option, by the best team for the job ! -- Thierry Carrez (ttx) Release Manager, OpenStack ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] devstack stable/essex branch
Hi All, Maybe I missed something but where is the stable/essex branch for devstack on Github? https://github.com/openstack-dev/devstack/branches Thanks, Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] hardware specifications for a little private cloud
One other thing you'll want to consider upfront w.r.t a hardware purchase is whether or not you want to support live migration. http://docs.openstack.org/cactus/openstack-compute/admin/content/configuring-live-migrations.html For this you'll need a large amount of shared storage (usually via NFS) where the instance files will live. Whether you choose SAN, NAS, or just a node with a bunch of disk is likely dependent on your environment and budget. Everett On Mon, Mar 26, 2012 at 5:17 AM, Razique Mahroua razique.mahr...@gmail.comwrote: Hello Alberto, I would advise you to deploy as much as node as you can, and dedicate separate services. That would bring you the possibility to extend your knowledge on HA mechanisms, and really understand how services interact each other. Let's say you spawn an instance from the api server, while it's is launched on a compute node - which is one another server. By having splitted architecture, you won't miss the obvious ;-) What is the purpose of the lab ? *Nuage Co - Razique Mahroua** * razique.mahr...@gmail.com Le 26 mars 2012 à 12:56, Alberto Molina Coballes a écrit : Hi all, I'm a teacher at a sysadmin academy and we are planning to deploy a private cloud with OpenStack for educational/training purposes. We are currently selecting the optimal hardware configuration for our needs and I'm asking for some help to the list. Using [1] as a reference, we are clear about hardware specifications of compute nodes (4 nodes with 2 processors), but we aren't about the best solution for node controller and optimal storage: Option 1: 1 server with 2 HD in RAID1 (nova controller, nova volume, glance, ...) + 1 SAN iSCSI Option 2: 1 server with 12 HD in RAID5/6 (nova controller, nova volume, glance, ...) We are excited about the possibilities that a private cloud brings to us and we don't want to fail in this critical step, so any help will be really appreciated. Alberto Molina Coballes IES Gonzalo Nazareno [1] http://www.referencearchitecture.org/hardware-specifications/ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Providing packages for stable releases of OpenStack
+1 for OpenStack Essex LTS + Ubuntu 12.04 LTS On Thu, Dec 8, 2011 at 1:57 PM, Ghe Rivero g...@debian.org wrote: I'm ok with everything so far, but from http://wiki.openstack.org/StableBranch: *The stable branch will only be maintained until the next release is out. This period may be extended if there are volunteers to maintain it beyond this point.* With a 6 months release cycles, it still looks a sort period of time for a production deployment, and some people/companies can not relay on those volunteers to appear to maintain it for more time. Is there any plan (or can be proposed) to have some kind of LTS release? I've read some place that essex + Ubuntu 12.04 LTS can be a good candidate; essex is considered the first production ready release, but it will not have quantum, we are tying openstack within an specific distribution... Anyway, (ubuntu12.04 + essex)^LTS looks great, and we have time to discuss what to do for a future LTS release. Ghe Rivero On Thu, Dec 8, 2011 at 5:59 PM, Duncan McGreggor dun...@dreamhost.com wrote: On 07 Dec 2011 - 08:15, Mark McLoughlin wrote: On Tue, 2011-12-06 at 14:12 -0800, Duncan McGreggor wrote: On 06 Dec 2011 - 13:52, Duncan McGreggor wrote: On 06 Dec 2011 - 21:14, Thierry Carrez wrote: Tim Bell wrote: I'm not clear on who will be maintaining the stable/diablo branch. The people such as EPEL for RedHat systems need to have something with the appropriate bug fixes back ported. There are an increasing number of sites looking to deploy in production and cannot follow the latest development version. Agreed on the need, we discussed this at length during the design summit. The stable branches have been established and are maintained by the OpenStack Stable Branch Maintainers team. Currently this team is mostly made of distribution members (Ubuntu and Fedora/RedHat, mostly) collaborating on a single branch to avoid duplication of effort. See: https://launchpad.net/~openstack-stable-maint http://wiki.openstack.org/StableBranch Okay, I think this mostly addresses item #4 that I wanted to add to your summary, Thierry. I do have the following minor concerns, though: * that wiki page's summary (intro sentence) only specifically mentions Diablo; I'd like to see something along the lines of currently focusing on Diablo. If these processes evolve into a successful model, they will be applied to all future releases. Added. * the discussion on the page treats this as an experiment (this is good!), but I'd like to see a phrase alone the lines of if this experiment is successful, we will do X to ensure these processes become an official part of the workflow. Cleaned up the this is an experiment text a bit, it's gone beyond an experiment now I think. Very cool, Mark! Thanks so much!! d ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- .''`. Pienso, Luego Incordio : :' : `. `' `-www.debian.org GPG Key: 26F020F7 GPG fingerprint: 4986 39DA D152 050B 4699 9A71 66DB 5A36 26F0 20F7 ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Cloud Computing StackExchange site proposal
I would like to see a way to identify the version (or milestone) the question pertains to, perhaps via a select box. OpenStack is moving quickly and I expect many questions will become irrelevant just as quickly. There could also be an All option, if the question is about something fundamental (e.g. ping and ssh don't work). Maybe there could also be an option for people with enough reputation/karma/points to edit the version. Of course you could do this with a tag but that's easily forgotten and people will often invent their own tags for the same version. Everett On Tue, Nov 29, 2011 at 12:16 PM, Stefano Maffulli stef...@openstack.orgwrote: On Tue, 2011-11-29 at 10:10 -0800, Lloyd Dewolf wrote: Where do I find this previous discussion? around here: https://lists.launchpad.net/openstack/msg02169.html What do you think of the requirements we're gathering for the QA system? I'd like your opinion on that as we move on. thanks stef ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] vnc on diablo
You'll also want to be aware of this issue: https://answers.launchpad.net/openstack-dashboard/+question/172071 Everett On Wed, Oct 5, 2011 at 9:27 AM, Carlo Impagliazzo truij...@crs4.it wrote: Alle martedì 04 ottobre 2011, Carlo Impagliazzo ha scritto: Hi guys I have a working diablo stack. Using the dashboard I've tried to launch the vnc console, the results is the NO VNC image within server disconnected. In nova-vnc.log I have (nova.rpc): TRACE: AMQPChannelException: (404, uNOT_FOUND - no exchange '9077e1d93d3e41ed91d0a551afd3013f' in vhost '/', (60, 40), 'Channel.basic_publish') (nova.rpc): TRACE: 2011-10-04 16:21:05,422 nova.rpc: Returning exception (404, uNOT_FOUND - no exchange '9077e1d93d3e41ed91d0a551afd3013f' in vhost '/', (60, 40), 'Channel.basic_publish') to caller Any suggestions? The full log trace is here: http://paste.openstack.org/show/2628/ Thanks! Carlo Using the release of sleepsonthefloor and Firefox ( last version ) and a lot of debug and now it works ( even if not always... ). It dipends on browser and other unknown events This exception starts from vnc/auth.py in auth_params = urlparse. ... as you can see here http://paste.openstack.org/show/2633/ there is a clear log of what happens, after it loads a few of files ( include/plain.css ) it tries to load / and crash in it. Carlo ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Bundle running instance?
We have a similar script at
https://github.com/canarie/vm-toolkit/blob/master/bundle/vmbundle.py
that tries to take the pain out of bundling a running instance for our more
naive users.
Everett
On Wed, Aug 31, 2011 at 8:48 AM, Darren Govoni dar...@ontrenet.com wrote:
Much appreciated! I will give it a try.
On 08/31/2011 10:46 AM, Wayne A. Walls wrote:
Just realized you asked about a running image, not a new one. Apologies
on that. I used this script in the past to accomplish bundling a running
instance. It is likely outdated, but it will give you a good premise to
start:
#!/bin/sh
#words words words
#this is a script for easy image creation
. /root/creds/novarc
SYSTEM=$(uname -r)
read -p Please enter your bucket/container name: BUCKET_NAME
euca-bundle-vol --no-inherit -d /tmp/image -e /mnt, /tmp
losetup /dev/loop3 /tmp/image/image.img
mount /dev/loop3 /mnt
sed -i
's/^UUID=[a-z0-9]\{8\}-[a-z0-**9]\{4\}-[a-z0-9]\{4\}-[a-z0-9]**
\{4\}-[a-z0-9]\{
12\}[\t]* \//\/dev\/vda1\t\//1' /mnt/etc/fstab
sed -i
's/^UUID=[a-z0-9]\{8\}-[a-z0-**9]\{4\}-[a-z0-9]\{4\}-[a-z0-9]**
\{4\}-[a-z0-9]\{
12\}[\t]* none/\/mnt\/swap.file\tnone/1' /mnt/etc/fstab
cp /mnt/etc/network/interfaces /mnt/root/interfaces.bak
cat /mnt/etc/network/interfaces INTERFACE_UPDATE
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
iface eth0 inet dhcp
INTERFACE_UPDATE
dd if=/dev/zero of=/mnt/swap.file bs=1024 count=512000
sleep 1
mkswap /mnt/swap.file
sleep 1
umount /mnt
euca-bundle-image -i /boot/initrd.img-$SYSTEM -d /tmp/ramdisk --ramdisk
true
euca-bundle-image -i /boot/vmlinuz-$SYSTEM -d /tmp/kernel --kernel true
euca-upload-bundle -m /tmp/kernel/vmlinuz-$SYSTEM.**manifest.xml -b
$BUCKET_NAME
euca-upload-bundle -m /tmp/ramdisk/initrd.img-$**SYSTEM.manifest.xml -b
$BUCKET_NAME
KERNEL_IMAGE=$(euca-register $BUCKET_NAME/vmlinuz-$SYSTEM.**manifest.xml
|
awk '{print $2}')
RAMDISK_IMAGE=$(euca-register $BUCKET_NAME/initrd.img-$**
SYSTEM.manifest.xml
| awk '{print $2}')
euca-bundle-image -i /tmp/image/image.img --kernel $KERNEL_IMAGE --ramdisk
$RAMDISK_IMAGE -d /tmp/imagebuild
euca-upload-bundle -m /tmp/imagebuild/image.img.**manifest.xml -b
$BUCKET_NAME
AMI_IMAGE=$(euca-register $BUCKET_NAME/image.img.**manifest.xml | awk
'{print $2}'); echo Image is decrypting and untarring for usage.
sleep 180
euca-run-instances $AMI_IMAGE
On 8/31/11 8:16 AM, Darren Govonidar...@ontrenet.com wrote:
Hi,
Is there a tutorial somewhere showing how to re-bundle a running
instance (e.g. ubuntu)
and register it as a new image in openstack?
thanks,
Darren
__**_
Mailing list:
https://launchpad.net/~**openstackhttps://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe :
https://launchpad.net/~**openstackhttps://launchpad.net/~openstack
More help :
https://help.launchpad.net/**ListHelphttps://help.launchpad.net/ListHelp
__**_
Mailing list:
https://launchpad.net/~**openstackhttps://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe :
https://launchpad.net/~**openstackhttps://launchpad.net/~openstack
More help :
https://help.launchpad.net/**ListHelphttps://help.launchpad.net/ListHelp
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Multiple nova-api's...
Yes and maybe (we're doing it). The individual nova-api processes need to run on their own port though. nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-port1.log --ec2_listen_port=port1 nova-api --flagfile=/etc/nova/nova.conf --logfile=/var/log/nova/nova-api-port2.log --ec2_listen_port=port2 you can fire up multiple nova-api processes with something like monit. Then you can load balance between them with something like haproxy. Everett On Thu, Aug 18, 2011 at 11:43 AM, Joshua Harlow harlo...@yahoo-inc.comwrote: Is it possible to have multiple nova-api’s, nova-networks running in the same instance (connected to the same db/rabbitmq)? Say that you want to have fault tolerance, so you would have multiple instances of these, so that if one failed the whole iaas system would not. Is that something typically done? ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] VNC consoles for all
Hi Anthony, Understood. If that's the case, I'm okay with leaving things the way they are. We already have the modification in our fork of the Dashboard but we want to upgrade to Diablo as soon as we can. Thanks, Everett On Thu, Jul 14, 2011 at 11:36 AM, Anthony Young sleepsonthefl...@gmail.comwrote: The main issue was that maintaining ec2 extensions was becoming too hairy, which is why the original doc talks about using the direct api client to get a console url. Dashboard support for vnc was subsequently added through the community using dashboard's ec2 extensions. Proper support for vnc consoles and other features that diverge from the ec2 is coming as we transition away from ec2 to the openstack api and extensions. The very latest trunk version of dashboard supports vnc consoles for all users through os extensions, and actually doesn't use ec2 at all. That said, UX-wise, I'd expect that any user should be able to access the console of an instance that was launched by their tenant. So it probably still makes sense to make the change you suggest to support older ec2-based dashboards. Anthony On Thu, Jul 14, 2011 at 8:51 AM, Everett Toews everett.to...@cybera.cawrote: The way the code stands right now is that only the cloudadmin user can view VNC consoles from the Dashboard ( http://nova.openstack.org/runnova/vncconsole.html) Is that the intention? Do we want to allow non-cloudadmin users to be able to view VNC consoles from the Dashboard? If so we need to add one line to https://github.com/openstack/nova/blob/master/nova/api/ec2/__init__.py in Authorizer.__init__. Add to self.action_roles 'GetVncConsole': ['projectmanager', 'sysadmin'], under CloudController. Otherwise regular users immediately get a 401 when trying to use VNC. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] VNC consoles for all
The way the code stands right now is that only the cloudadmin user can view VNC consoles from the Dashboard ( http://nova.openstack.org/runnova/vncconsole.html) Is that the intention? Do we want to allow non-cloudadmin users to be able to view VNC consoles from the Dashboard? If so we need to add one line to https://github.com/openstack/nova/blob/master/nova/api/ec2/__init__.py in Authorizer.__init__. Add to self.action_roles 'GetVncConsole': ['projectmanager', 'sysadmin'], under CloudController. Otherwise regular users immediately get a 401 when trying to use VNC. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Real World Nova Deployments
I know I'm reviving an old thread here but we've begun blogging about our experience of putting OpenStack into a production environment. You can check out the first post (mostly about hardware) at http://cybera.ca/tech-radar/running-openstack-production-part-1-hardware Everett On Mon, May 16, 2011 at 8:14 PM, 郭耀謙 tonyt...@gmail.com wrote: 1.Mysql 2.FlatDHCP 3.Manually from ubuntu PPA 1head node 1network+volume 6compute ndoes I'm hard working on nova-network HA solution.My purpose is avoid the interruption btween user and instance. Current topology , instance must traffic from nova-network. Two consideration. 1. Add one more nova-network node , but administrator can set only one gateway of instance per network. Try to implement VRRP protocol , it might works. But the better idea is not only HA but also traffic LB in a openstack cluster. 2.The bridge NIC of all instance connect to same public network , this approach will cause a problem . if there're already have a dhcp server in same network. 2011/5/17 Matt Ray m...@opscode.com I know I speak for a number of people interested in real world deployments when I say thanks in advance to anyone who posts to this thread with real-world experiences. Trying to capture and document best practices for large-scale deployments is part of the focus for the Chef deployment cookbooks and documentation I'm working on with a couple of other folks. Feel free to send me details privately if you don't want to publicly talk about your deployments. I'll be sharing feedback on large installations as we continue to deploy them. Thanks, Matt Ray Senior Technical Evangelist | Opscode Inc. m...@opscode.com | (512) 731-2218 Twitter, IRC, GitHub: mattray On Mon, May 16, 2011 at 3:43 PM, Chuck Short chuck.sh...@canonical.com wrote: Hi, As interest continues to grow in the openstack project and with nova in particular. I would like to get a better idea of how people are deploying multi machine environemnts and hopefully start a discussion about it: * Are you using mysql or postgresql or sqllite? * Are you using flat networking or something else? * How are you deploying nova? Regards chuck ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Proposal for Dashboard as an official OpenStack project
+1 The end user experience in OpenStack would greatly benefit from having an official web application that developers can focus their effort on. Devin, if this process winds up involving a vote or if there's is any other way we can support this, please let us know. Thanks, Everett On Thu, May 26, 2011 at 2:05 PM, Devin Carlen devin.car...@gmail.comwrote: Hello all, For quite a while now, the OpenStack Dashboard has existed as an incubation project. There is quite a bit of development effort going into it now from a number of different companies. Current projects underway include, but are not limited to: * swift support * internationalization * a new theme * OpenStack API support * integration with Keystone project This project is quickly gaining contributors, and is in use by a large number of members of the community. I believe the time is right to make the dashboard an official OpenStack project. To my knowledge, no other projects have gone through the incubation process to become an official project, so in some ways we are in uncharted territory. Is there an officially documented process to make this happen? Devin ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Creating a forum
Hi Jordan, Thanks a lot for sharing that process with me. I appreciate it. I've made my proposal at http://wiki.openstack.org/Governance/Proposed/QuestionAndAnswerSoftware Everett On Sat, May 7, 2011 at 8:17 PM, Jordan Rinke jor...@openstack.org wrote: The replacement of Launchpad Questions hasn't been fully discussed. If people want OSQnA to replace that functionality it needs to be proposed for the next PPB meeting ( http://wiki.openstack.org/Governance/Proposed/ ) and discussed on list (Although to me it seems fairly evident that it is desired). AFAIK that is the course of action needed to get that either implemented as a replacement or as an add-on. Whatever the questions software is the forums will maintain a sticky pointing to it (or both etc.). (I just learned how all that workd properly ;) -Original Message- From: Everett Toews everett.to...@cybera.ca Sent: Saturday, May 7, 2011 10:06pm To: Jordan Rinke jor...@openstack.org Cc: Chad Keck c...@chadkeck.com, Stephen Spector stephen.spec...@openstack.org, openstack@lists.launchpad.net Subject: Re: [Openstack] Creating a forum Okay...so I at least have to ask. Where exactly does that leave the evaluation and potential use of QnA software? Will there be a qa.openstack.org? The meeting logs for the PPB ( http://wiki.openstack.org/Governance/PPB/PPBMeetingLogs) haven't been posted yet so it isn't clear. I would be willing to host a OSQA site for evaluation purposes. One thing to keep in mind for after the evaluation process. The users for the OpenStack.org wiki and any forum/QnA software should be synced so people don't need 3 username/passwords when trying to get help. I confess it's tempting to just let this drop but there are enough people on the ML who want this warrant pursuing it. Everett On Thu, May 5, 2011 at 2:40 PM, Jordan Rinke jor...@openstack.org wrote: Forums (forums.openstack.org) have just been approved by the PPB. Delegation on working with the community to get consensus on selecting a software for them is to Chad Keck, Myself and Stephen Spector. I should note that based on what I read it appears Forums AND Questions seem to be the answer to the forums debate with a sticky on the forums pointing to whatever the QA software is to funnel specific questions to a questions facility but also to allow general discussion on the forums. Right now, I personally am only focusing on the forums/discussion portion since that was the only portion specifically voted on that I am aware of. If you have a suggestion for forum software please provide it and I will get demos of every one recommended up and we can put the software to a vote for the official forums. -Original Message- From: Chad Keck c...@chadkeck.com Sent: Thursday, May 5, 2011 3:59pm To: openstack@lists.launchpad.net Subject: Re: [Openstack] Creating a forum I was about to say ;) My unofficial forums aren't THAT ugly! -- Chad On May 5, 2011, at 2:15 PM, Anne Gentle wrote: Oh and I use ugly in quotation marks to indicate that's completely subjective. No judgment from me! I only believe data. :) I didn't want to use inflammatory word choices here, sorry. On Thu, May 5, 2011 at 2:11 PM, Anne Gentle a...@openstack.org wrote: We're still so small it's very reasonable for all members of the community to want to have some say here. Plus there's a lotta overlap in these two groups, dev and SA. :) - we're highly interested in defending OpenStack as a brand and as such, don't see value in ugly unofficial forums - we want to participate but only if it's a tool we like and feel we've given input into - we don't want to further dilute the resources we have with yet another login-based website - we somehow tied it into the Launchpad/Github debate as Launchpad Answers is one solution to the types of problems that a forum solves I think a clearer restatement of the end-goals of forums would be helpful. Here are some ideas. Please offer your input as well. 1. Efficiency and reduce confusion: Offer one place to ask and answer questions. 2. Efficiency and reduce confusion: Decrease user-question-type traffic on #openstack IRC. 3. Reciprocity: Offer a place to help others expecting help in return. 4. Reputation: Offer a method for proving your knowledge of OpenStack. 5. Efficiency and reduce confusion: Eliminate the scattering of places where you can ask and answer questions now: docs.openstack.org comments, Launchpad Answers, and IRC. Adding a forum without eliminating at least one other of these options does not seem efficient without proving the gains you expect to see. We have to keep monitoring all sites including Twitter for questions, yet Twitter in itself does not provide a tool for a community support site. Since docs provide support and also an opportunity for QA I'm pretty
Re: [Openstack] Creating a forum
Okay...so I at least have to ask. Where exactly does that leave the evaluation and potential use of QnA software? Will there be a qa.openstack.org? The meeting logs for the PPB ( http://wiki.openstack.org/Governance/PPB/PPBMeetingLogs) haven't been posted yet so it isn't clear. I would be willing to host a OSQA site for evaluation purposes. One thing to keep in mind for after the evaluation process. The users for the OpenStack.org wiki and any forum/QnA software should be synced so people don't need 3 username/passwords when trying to get help. I confess it's tempting to just let this drop but there are enough people on the ML who want this warrant pursuing it. Everett On Thu, May 5, 2011 at 2:40 PM, Jordan Rinke jor...@openstack.org wrote: Forums (forums.openstack.org) have just been approved by the PPB. Delegation on working with the community to get consensus on selecting a software for them is to Chad Keck, Myself and Stephen Spector. I should note that based on what I read it appears Forums AND Questions seem to be the answer to the forums debate with a sticky on the forums pointing to whatever the QA software is to funnel specific questions to a questions facility but also to allow general discussion on the forums. Right now, I personally am only focusing on the forums/discussion portion since that was the only portion specifically voted on that I am aware of. If you have a suggestion for forum software please provide it and I will get demos of every one recommended up and we can put the software to a vote for the official forums. -Original Message- From: Chad Keck c...@chadkeck.com Sent: Thursday, May 5, 2011 3:59pm To: openstack@lists.launchpad.net Subject: Re: [Openstack] Creating a forum I was about to say ;) My unofficial forums aren't THAT ugly! -- Chad On May 5, 2011, at 2:15 PM, Anne Gentle wrote: Oh and I use ugly in quotation marks to indicate that's completely subjective. No judgment from me! I only believe data. :) I didn't want to use inflammatory word choices here, sorry. On Thu, May 5, 2011 at 2:11 PM, Anne Gentle a...@openstack.org wrote: We're still so small it's very reasonable for all members of the community to want to have some say here. Plus there's a lotta overlap in these two groups, dev and SA. :) - we're highly interested in defending OpenStack as a brand and as such, don't see value in ugly unofficial forums - we want to participate but only if it's a tool we like and feel we've given input into - we don't want to further dilute the resources we have with yet another login-based website - we somehow tied it into the Launchpad/Github debate as Launchpad Answers is one solution to the types of problems that a forum solves I think a clearer restatement of the end-goals of forums would be helpful. Here are some ideas. Please offer your input as well. 1. Efficiency and reduce confusion: Offer one place to ask and answer questions. 2. Efficiency and reduce confusion: Decrease user-question-type traffic on #openstack IRC. 3. Reciprocity: Offer a place to help others expecting help in return. 4. Reputation: Offer a method for proving your knowledge of OpenStack. 5. Efficiency and reduce confusion: Eliminate the scattering of places where you can ask and answer questions now: docs.openstack.org comments, Launchpad Answers, and IRC. Adding a forum without eliminating at least one other of these options does not seem efficient without proving the gains you expect to see. We have to keep monitoring all sites including Twitter for questions, yet Twitter in itself does not provide a tool for a community support site. Since docs provide support and also an opportunity for QA I'm pretty vested in the solution as well. I'd prefer we find a way to integrate with a site that could become a community support site, not just a forum. I think that distinction is at the heart of this discussion. Does that help? Anne On Thu, May 5, 2011 at 1:06 PM, Jordan Rinke jor...@openstack.org wrote: I don't see why developers are weighing in so heavily on something specifically for the user community? Many of you have specifically said you wouldn't visit a forum so why do you care so much about what software it uses, or if it even exists? -Original Message- From: Chad Keck c...@chadkeck.com Sent: Thursday, May 5, 2011 12:55pm To: openstack@lists.launchpad.net Subject: Re: [Openstack] Creating a forum What does it matter what the forum looks like? If you are implying that forums are largely unpopular today because of StackOverflow you would be wrong. Of course StackOverflow is popular, for some, and it works great for a specific type of community. Maybe someone should clearly articulate what problem we are trying to solve here. If it's direct QA then a StackOverflow style site is probably better, if its a place for conversation, exchange of ideas or
Re: [Openstack] [SPAM] Re: Creating a forum
On Wed, May 4, 2011 at 2:08 PM, Lorin Hochstein lo...@isi.edu wrote: We could also try just using an openstack tag on the ServerFault site. All we need is somebody with enough Server Fault rep to create the new tag. -1 IMO not an ideal solution. The OpenStack questions would get lost in the noise of ServerFault. Newcomers would be totally confused. I agree with Thierry, ...fall back to OSQA if need be. Everett ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Creating a forum
I believe that should be http://askubuntu.com/ Everett On Tue, May 3, 2011 at 8:36 AM, Jordan Rinke jor...@openstack.org wrote: Interesting because Ron very specifically mentioned being able to find useful and relevant information on the Ubuntu forums without bothering devs at the beginning of this discussion (which Soren then noted as an excellent point). We don't have an extended answer from Anne yet, but she did vote Yes on the survey (unless someone else used her name since there is no real auth). -Original Message- From: Thierry Carrez [mailto:thie...@openstack.org] Sent: Tuesday, May 03, 2011 9:27 AM To: Jordan Rinke Cc: openstack@lists.launchpad.net Subject: Re: [Openstack] Creating a forum Jordan Rinke wrote: I think a purely QnA site misses the mark a little, that style is great for a very specific question (And the OSQnA stuff Everett linked looks great) but I think a lot of users are lacking the knowledge to ask a very specific question just yet. So maybe it is that we need a place for random discussion, but that can also specifically answer a question as well. If you take Ubuntu (arguably one of the largest software-related forums in the world), the forums are completely ignored by developers, so it relies on a completely separate user community. It is a source for wrong (or outdated) technical answers and user frustration. They recently set up a stackexchange site at ask.ubuntu.com, and it is a huge success. Developers and users contribute to it, and it's a valuable and continuously-updated source of information. I don't want us to run into the same failure before realizing there is a better and more targeted tool available... Personally I would ignore forums (since they are a waste of time), but contribute to the stackexchange site (since they are an easy way to contribute reference information). 77.8% voting for a forum at this point (out of 18 responses) I would wait on Anne's answer before taking any hasty decision based on a binary poll. -- Thierry Carrez (ttx) Release Manager, OpenStack ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Creating a forum
Regarding your StackExchange questions Anne. For an Open Source StackExchange-like site OSQA (http://www.osqa.net/) could be used. For StackExchange itself it's free as in beer ( http://area51.stackexchange.com/faq). How much does Stack Exchange cost? Creating a Stack Exchange site is free. Using a Stack Exchange site is free. The Creative Commons licenseguarantees that questions and answers are free to access, free to use and re-use (with attribution), and free to share… forever. Everett On Tue, May 3, 2011 at 10:48 AM, Anne Gentle a...@openstack.org wrote: Hey all, thanks for asking for my input. :) A few months ago, I said it's too early. This month, I do sense a need for community support, based on questions I see on the docs site and the types of questions in Launchpad Answers. I think we're getting to a real user community and it would be good timing to start a forum, so I say yes, with the request that we have strong guides. Jordan and Ron can be our one-percenter guys, the ones who are helpful and responsive. We'll need other one-percenters. Vish has done a _great_ job responding to Launchpad Answers. It's getting to be really helpful. But it's not quite a forum. And it's not about the tool, it's about being responsive, right? I don't want to weigh in too heavily on a tools discussion, because it's more about the community and people than a tool. The responses here seem to indicate that sys admins would lean towards forums. I personally like the Stack Exchange style sites for building a reputation which motivates participation if done well. However, OpenStack is not a big enough draw for them to be a Top Network Site like Ubuntu. And the tool is certainly not open source. I don't honestly know pricing or licensing or availability of a standalone Stack Exchange site. Does anyone have details there? That info might help with the tools discussion. My main point is that I'd like to ensure responsiveness, so we don't have empty restaurant syndrome in a forum-like support site. The people who will be most responsive to users and adopters should probably weigh in on the tools discussion. Devs won't need to monitor the admin community support site once we get a core group of admins running OpenStack and helping others. So that's my current thinking. Anne On Tue, May 3, 2011 at 9:36 AM, Jordan Rinke jor...@openstack.org wrote: Interesting because Ron very specifically mentioned being able to find useful and relevant information on the Ubuntu forums without bothering devs at the beginning of this discussion (which Soren then noted as an excellent point). We don't have an extended answer from Anne yet, but she did vote Yes on the survey (unless someone else used her name since there is no real auth). -Original Message- From: Thierry Carrez [mailto:thie...@openstack.org] Sent: Tuesday, May 03, 2011 9:27 AM To: Jordan Rinke Cc: openstack@lists.launchpad.net Subject: Re: [Openstack] Creating a forum Jordan Rinke wrote: I think a purely QnA site misses the mark a little, that style is great for a very specific question (And the OSQnA stuff Everett linked looks great) but I think a lot of users are lacking the knowledge to ask a very specific question just yet. So maybe it is that we need a place for random discussion, but that can also specifically answer a question as well. If you take Ubuntu (arguably one of the largest software-related forums in the world), the forums are completely ignored by developers, so it relies on a completely separate user community. It is a source for wrong (or outdated) technical answers and user frustration. They recently set up a stackexchange site at ask.ubuntu.com, and it is a huge success. Developers and users contribute to it, and it's a valuable and continuously-updated source of information. I don't want us to run into the same failure before realizing there is a better and more targeted tool available... Personally I would ignore forums (since they are a waste of time), but contribute to the stackexchange site (since they are an easy way to contribute reference information). 77.8% voting for a forum at this point (out of 18 responses) I would wait on Anne's answer before taking any hasty decision based on a binary poll. -- Thierry Carrez (ttx) Release Manager, OpenStack ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to :
Re: [Openstack] Creating a forum
I'm all for creating a forum. The Launchpad answers thing is okay but could be better and it's very siloed to the individual project. I found a stackexchange-like open source implementation called OSQA: The Open Source QA System http://www.osqa.net/. It's written in python. Could be a good fit. Everett On Mon, May 2, 2011 at 2:12 PM, Jordan Rinke jor...@openstack.org wrote: I had a number of discussions with various people at the summit about creating a forum for openstack (forum.openstack.org) and everyone seemed to think it was a good idea especially for user support and discussions for people who are not likely to use a mailing list. So I have 2 questions... 1. Is anyone against creating a forum? 2. Does anyone have a specific forum software they suggest we use? Once I have it all configured, we will need to determine the categories and get moderators etc for each category. Stephen Spector will be the keeper of the kingdom in that regard so if you would like to help out just let him know. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Creating a forum
What I think the essential features for any user support forum are: 1. ability to up vote so the best answers bubble to the top. 2. for the original poster to be able pick the answer they used. 3. the chance to edit answers so they don't become stale. 4. they system searches the forum when you go to ask a new question to reduce the number of duplicates. People want answers out of these kinds of forums, not having to sift through post after post trying to find the correct path through to an answer (if one even exists). I took a look at the XenForo forums and I didn't see these features. Please correct me if I'm wrong. Everett On Mon, May 2, 2011 at 3:08 PM, Chad Keck c...@chadkeck.com wrote: 1) I think this is a great idea... 2) I would highly recommend XenForo as a platform for the forum ( www.xenforo.com). Check it out if you haven't seen it before. As someone who moderates a handful of forums and participates on maybe 100+ it is the best I've seen/used. -- Chad On May 2, 2011, at 3:12 PM, Jordan Rinke wrote: I had a number of discussions with various people at the summit about creating a forum for openstack (forum.openstack.org) and everyone seemed to think it was a good idea especially for user support and discussions for people who are not likely to use a mailing list. So I have 2 questions... 1. Is anyone against creating a forum? 2. Does anyone have a specific forum software they suggest we use? Once I have it all configured, we will need to determine the categories and get moderators etc for each category. Stephen Spector will be the keeper of the kingdom in that regard so if you would like to help out just let him know. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
