[Openstack] Openstack installation on multiple host belongs to different network
Hi, Stacker We would like to install openstack on our several spare computers, when all of them are in the same network, it works well. But when we try to install openstack on hosts in different network, the VM in compute node, which is in different network from controller node, can't be accessed. To be specific, assume we have two hosts, controller(10.0.0.1) and compute-node(10.0.10.1), has different network. The VM in 10.0.10.1 can not be accessed. In 10.0.10.1, we only install nova-compute, nova-network, and use mysql, rabbitmq, etc in controller(10.0.0.1) My question is: Is there some installation guide for this case, or some of you have experiences on this? Regards Lei ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] netns kernel of RedHat
Got it. Thx. On Wed, May 29, 2013 at 10:32 PM, 彭勇 wrote: > and we need a new kernel for namespaces which provide flowing directory: > > /proc/self/ns/ > > > 2013/5/29 Lei Zhang > >> As I know, the netns depends on glibc. It support setns after the glibc >> 2.14. >> How ever, the RHEL is using glibc2.12. So it is possible to just using a >> new >> patched kernel? >> >> >> On Wed, May 29, 2013 at 6:02 PM, Pádraig Brady wrote: >> >>> On 05/29/2013 09:59 AM, 彭勇 wrote: >>> > there is no netns support in RedHat kernel: >>> > >>> > https://bugzilla.redhat.com/show_bug.cgi?id=869004 >>> > >>> > is there any progress of this feature? >>> >>> We expect to release an netns enabled kernel to >>> RDO (http://openstack.redhat.com/) within the next couple of days >>> >>> thanks, >>> Pádraig. >>> >>> >>> ___ >>> Mailing list: https://launchpad.net/~openstack >>> Post to : openstack@lists.launchpad.net >>> Unsubscribe : https://launchpad.net/~openstack >>> More help : https://help.launchpad.net/ListHelp >>> >> >> >> >> -- >> Lei Zhang >> >> Blog: http://jeffrey4l.github.io >> twitter/weibo: @jeffrey4l >> > > > > -- > 彭勇 (Peng Yong) > > -- Lei Zhang Blog: http://jeffrey4l.github.io twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] netns kernel of RedHat
As I know, the netns depends on glibc. It support setns after the glibc 2.14. How ever, the RHEL is using glibc2.12. So it is possible to just using a new patched kernel? On Wed, May 29, 2013 at 6:02 PM, Pádraig Brady wrote: > On 05/29/2013 09:59 AM, 彭勇 wrote: > > there is no netns support in RedHat kernel: > > > > https://bugzilla.redhat.com/show_bug.cgi?id=869004 > > > > is there any progress of this feature? > > We expect to release an netns enabled kernel to > RDO (http://openstack.redhat.com/) within the next couple of days > > thanks, > Pádraig. > > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.io twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Can't Migrate a VM?
Your ssh key may be not config properly. Checkout following steps. 1. You get a key pair( pub key and private key). You can using the root's key which locate `/root/.ssh/id_rsa` and `/root/.ssh/id_ras.pub` or generate a new one 2. Enable the nova user login-able ``` usermod -s /bin/bash nova ``` Now you can switch nova account by using following command, and steps bellow is operated under this account. ``` su nova ``` 3. Create the folder needed by ssh and put the private key got in step 1 ``` mkdir -p /var/lib/nova/.ssh cp /var/lib/nova/.ssh/id_rsa cat >> /var/lib/nova/.ssh/authorized_keys echo 'StrictHostKeyChecking no' >> /var/lib/nova/.ssh/config ``` 4. Do the steps 2-3 on each nodes. IMPORTANT: All the nodes share the same key pair and you shouldn't generate new one in second node. 5. Check the key is working properly. ``` su nova ssh nova@node-another // you will login the node-another without password ``` On Wed, May 29, 2013 at 8:59 PM, Nehal J. Wani wrote: > Exact error after putting that configuration: > > ./nova/compute. > log:7203:Stderr: "Warning: Permanently added '10.3.3.58' (RSA) to the list > of known hosts.\r\nPermission denied, please try again.\r\nPermission > denied, please try again.\r\nPermission denied > (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n". Setting instance > vm_state to ERROR > ./nova/compute.log:7244:2013-05-29 16:40:25.510 18605 TRACE > nova.openstack.common.rpc.amqp Stderr: "Warning: Permanently added > '10.3.3.58' (RSA) to the list of known hosts.\r\nPermission denied, please > try again.\r\nPermission denied, please try again.\r\nPermission denied > (publickey,gssapi-keyex,gssapi-with-mic,password).\r\n" > > > > On Wed, May 29, 2013 at 6:28 PM, Nehal J. Wani wrote: > >> I tried putting that into ~nova/.ssh/config >> >> But the it says permission denied. >> >> >> On Wed, May 29, 2013 at 6:25 PM, Lei Zhang wrote: >> >>> You may also need add following config in /var/lib/nova/.ssh/config >>> >>> StrictHostKeyChecking no >>> >>> >>> >>> On Wed, May 29, 2013 at 8:25 PM, Mac Innes, Kiall wrote: >>> >>>> Then, packstack either has a bug, or the default settings don't allow >>>> for the use of block migration.. >>>> >>>> I've personally never even heard of packstack, so I can't comment on >>>> how to fix/where to file a bug etc... >>>> >>>> Maybe someone else can? >>>> >>>> Thanks, >>>> Kiall >>>> >>>> On 29/05/13 13:18, Nehal J. Wani wrote: >>>> But packstack script has created the nova user with no ability to login >>>> >>>> As /etc/passwd says: nova:x:162:162:OpenStack Nova >>>> Daemons:/var/lib/nova:/sbin/nologin >>>> >>>> >>>> >>>> On Wed, May 29, 2013 at 5:45 PM, Mac Innes, Kiall >>> ki...@hp.com>> wrote: >>>> On 29/05/13 13:11, Nehal J. Wani wrote: >>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp >>>> > ProcessExecutionError: Unexpected error while running command. >>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp >>>> > Command: ssh 10.3.3.58 mkdir -p >>>> > /var/lib/nova/instances/bc967b97-e103-4a13-abe4-ada8f98bdeb0 >>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp Exit >>>> > code: 1 >>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp >>>> > Stdout: 'This account is currently not available.\n' >>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp >>>> > Stderr: '' >>>> > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp >>>> As the nova user, manually attempt that SSH command.. Then figure out >>>> why it can't SSH to the other node. It should work (or at least get >>>> further) once you do. >>>> >>>> Thanks, >>>> Kiall >>>> >>>> >>>> >>>> -- >>>> Nehal J. Wani >>>> UG2, BTech CS+MS(CL) >>>> IIIT-Hyderabad >>>> http://commanlinewani.blogspot.com >>>> >>>> >>>> ___ >>>> Mailing list: https://launchpad.net/~openstack >>>> Post to : openstack@lists.launchpad.net >>>> Unsubscribe : https://launchpad.net/~openstack >>>> More help : https://help.launchpad.net/ListHelp >>>> >>> >>> >>> >>> -- >>> Lei Zhang >>> >>> Blog: http://jeffrey4l.github.io >>> twitter/weibo: @jeffrey4l >>> >> >> >> >> -- >> Nehal J. Wani >> UG2, BTech CS+MS(CL) >> IIIT-Hyderabad >> http://commanlinewani.blogspot.com >> > > > > -- > Nehal J. Wani > UG2, BTech CS+MS(CL) > IIIT-Hyderabad > http://commanlinewani.blogspot.com > -- Lei Zhang Blog: http://jeffrey4l.github.io twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Can't Migrate a VM?
You may also need add following config in /var/lib/nova/.ssh/config StrictHostKeyChecking no On Wed, May 29, 2013 at 8:25 PM, Mac Innes, Kiall wrote: > Then, packstack either has a bug, or the default settings don't allow for > the use of block migration.. > > I've personally never even heard of packstack, so I can't comment on how > to fix/where to file a bug etc... > > Maybe someone else can? > > Thanks, > Kiall > > On 29/05/13 13:18, Nehal J. Wani wrote: > But packstack script has created the nova user with no ability to login > > As /etc/passwd says: nova:x:162:162:OpenStack Nova > Daemons:/var/lib/nova:/sbin/nologin > > > > On Wed, May 29, 2013 at 5:45 PM, Mac Innes, Kiall ki...@hp.com>> wrote: > On 29/05/13 13:11, Nehal J. Wani wrote: > > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp > > ProcessExecutionError: Unexpected error while running command. > > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp > > Command: ssh 10.3.3.58 mkdir -p > > /var/lib/nova/instances/bc967b97-e103-4a13-abe4-ada8f98bdeb0 > > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp Exit > > code: 1 > > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp > > Stdout: 'This account is currently not available.\n' > > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp > > Stderr: '' > > 2013-05-29 17:39:04.795 5106 TRACE nova.openstack.common.rpc.amqp > As the nova user, manually attempt that SSH command.. Then figure out > why it can't SSH to the other node. It should work (or at least get > further) once you do. > > Thanks, > Kiall > > > > -- > Nehal J. Wani > UG2, BTech CS+MS(CL) > IIIT-Hyderabad > http://commanlinewani.blogspot.com > > > _______ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.io twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] more info on this raise exception.NoValidHost
Yes, nova-scheduler has lots of filters to check if nova-compute node fit the requirement of the instance you wanna launch. Like availability-zone filter, RAM filter, cpu core filter, etc. If all the compute node failed to pass those filters, it raise this exception. Regards Lei On Tue, May 21, 2013 at 4:13 AM, Aaron Rosen wrote: > Usually means that the instance trying to be launched can't be scheduled > to any nova-compute nodes. The log message should include a reason why > though. > > > > > On Mon, May 20, 2013 at 12:06 PM, Remo Mattei wrote: > >> Hello everyone, >> >> I wonder if someone can give me a more detail overview about the raise >> exception.NoValidHost >> on what does raise mean. >> >> Thanks >> Remo >> >> ___ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack@lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] How can I change my username on openstack Gerrit
Hi all, I type a wrong username by mistake. Does anybody know how to reset the Username? -- Lei Zhang Blog: http://jeffrey4l.github.io twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] keepalive can not check the haproxy is down.
I am using the default version of the ubuntu 12.04 ( keepalived
1:1.2.2-3ubuntu1).
Maybe this issue is the root cause. I will try the latest keepalived.
On Tue, May 7, 2013 at 6:11 PM, wrote:
> What version of keepalived are you using? I found this online:
> https://github.com/acassen/keepalived/issues/8
>
> ** **
>
> I would first try removing the check script and validating that failure
> works without the check script. If that works you might need to update
> keepalived.
>
> ** **
>
> Here’s a brief introduction I did a while back on using haproxy with
> keepalived as a load balancer (FWIW):
> http://four-eyes.net/2013/01/haproxy-keepalived-the-free-ha-load-balancer/
> ****
>
> ** **
>
> ** **
>
> *From:* Lei Zhang [mailto:zhang.lei@gmail.com]
> *Sent:* Monday, May 06, 2013 7:55 PM
> *To:* Smith, Eric E
> *Cc:* openstack@lists.launchpad.net
> *Subject:* Re: [Openstack] keepalive can not check the haproxy is down.***
> *
>
> ** **
>
> Thanks Eric,
>
> I have solve it after breaking down the group.
>
> ** **
>
> 1. the different netmask is typo. And it doesn't break the failover.
>
> 2. Why the group is unnecessary? When there are the two instances using
> the same check script , like this case, what's mean after grouping them?**
> **
>
> ** **
>
> On Mon, May 6, 2013 at 6:37 PM, wrote:
>
> I see you have different netmasks for the VIP on node1 vs. node2; I would
> also try breaking them out of the vrrp_sync_group and validating at least 1
> router will fail independently.
>
>
>
> *From:* Openstack [mailto:openstack-bounces+eric_e_smith=
> dell@lists.launchpad.net] *On Behalf Of *Lei Zhang
> *Sent:* Monday, May 06, 2013 3:07 AM
> *To:* openstack@lists.launchpad.net
> *Subject:* [Openstack] keepalive can not check the haproxy is down.
>
>
>
> Hi Guys,
>
> I am trying to use keepalive and haproxy to work together to improve the
> HA of the openstack. But I meet following
> unexpected issue.
>
> I expect that when the haproxy process is crashed on the MASTER
> node(checked by chk_haproxy), the second node
> will take over the VIP. But when I stop the haproxy process, nothing is
> happened.
> However, when stop the keepalived service, the VIP is set up on the node2
> as expected.
>
> So I think the root cause should be the chk_haproxy block. But I have no
> idea why it doesn't work. Does any body have
> ideas?
>
> *node1 keepalived.conf*
>
> global_defs {
>
> lvs_id LVS_228
>
> }
>
>
>
> vrrp_sync_group openstack_haproxy {
>
> group {
>
> v1
>
> v2
>
> }
>
> }
>
> vrrp_script chk_haproxy {
>
> script "killall -0 haproxy"
>
> interval 2
>
> debug
>
> weight 2
>
> }
>
> vrrp_instance v1 {
>
> interface eth0
>
> debug
>
> state MASTER
>
> virtual_router_id 1
>
> priority 101
>
> virtual_ipaddress {
>
> 192.168.0.230/24
>
> }
>
> track_script {
>
> chk_haproxy
>
> }
>
> }
>
> vrrp_instance v2 {
>
> interface eth1
>
> state MASTER
>
> debug
>
> virtual_router_id 2
>
> priority 101
>
> virtual_ipaddress {
>
> 10.1.0.30/16
>
> }
>
> track_script {
>
> chk_haproxy
>
> }
>
> }
>
> *node2 keepalived.conf*
>
> global_defs {
>
> lvs_id LVS_229
>
> }
>
>
>
> vrrp_sync_group openstack_haproxy {
>
> group {
>
> v1
>
> v2
>
> }
>
> }
>
> vrrp_script chk_haproxy {
>
> script "killall -0 haproxy"
>
> interval 2
>
> weight 2
>
> }
>
> vrrp_instance v1 {
>
> interface eth0
>
> state BACKUP
>
> virtual_router_id 1****
>
> priority 100
>
> virtual_ipaddress {
>
> 192.168.0.230****
>
> }
>
> track_script {
>
> chk_haproxy
>
> }
>
> }
>
> vrrp_instance v2 {
>
> interface eth1
>
> state BACKUP
>
> virtual_router_id 2
>
> priority 100
>
> virtual_ipaddress {
>
> 10.1.0.30
>
> }
>
> track_script {
>
> chk_haproxy
>
> }
>
> }
>
> --
>
> Lei Zhang
>
>
>
> Blog: http://jeffrey4l.github.com
>
> twitter/weibo: @jeffrey4l
>
>
>
>
>
> ** **
>
> --
>
> Lei Zhang
>
> ** **
>
> Blog: http://jeffrey4l.github.io
>
> twitter/weibo: @jeffrey4l
>
--
Lei Zhang
Blog: http://jeffrey4l.github.io
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] keepalive can not check the haproxy is down.
Thanks Eric,
I have solve it after breaking down the group.
1. the different netmask is typo. And it doesn't break the failover.
2. Why the group is unnecessary? When there are the two instances using the
same check script , like this case, what's mean after grouping them?
On Mon, May 6, 2013 at 6:37 PM, wrote:
> I see you have different netmasks for the VIP on node1 vs. node2; I would
> also try breaking them out of the vrrp_sync_group and validating at least 1
> router will fail independently.
>
> ** **
>
> *From:* Openstack [mailto:openstack-bounces+eric_e_smith=
> dell@lists.launchpad.net] *On Behalf Of *Lei Zhang
> *Sent:* Monday, May 06, 2013 3:07 AM
> *To:* openstack@lists.launchpad.net
> *Subject:* [Openstack] keepalive can not check the haproxy is down.
>
> ** **
>
> Hi Guys,
>
> I am trying to use keepalive and haproxy to work together to improve the
> HA of the openstack. But I meet following
> unexpected issue.
>
> I expect that when the haproxy process is crashed on the MASTER
> node(checked by chk_haproxy), the second node
> will take over the VIP. But when I stop the haproxy process, nothing is
> happened.
> However, when stop the keepalived service, the VIP is set up on the node2
> as expected.
>
> So I think the root cause should be the chk_haproxy block. But I have no
> idea why it doesn't work. Does any body have
> ideas?
>
> *node1 keepalived.conf*
>
> global_defs {
>
> lvs_id LVS_228
>
> }
>
> ** **
>
> vrrp_sync_group openstack_haproxy {
>
> group {
>
> v1
>
> v2
>
> }
>
> }
>
> vrrp_script chk_haproxy {
>
> script "killall -0 haproxy"
>
> interval 2
>
> debug
>
> weight 2
>
> }
>
> vrrp_instance v1 {
>
> interface eth0
>
> debug
>
> state MASTER
>
> virtual_router_id 1
>
> priority 101
>
> virtual_ipaddress {
>
> 192.168.0.230/24
>
> }
>
> track_script {
>
> chk_haproxy
>
> }
>
> }
>
> vrrp_instance v2 {
>
> interface eth1
>
> state MASTER
>
> debug
>
> virtual_router_id 2
>
> priority 101
>
> virtual_ipaddress {
>
> 10.1.0.30/16
>
> }
>
> track_script {
>
> chk_haproxy
>
> }
>
> }
>
> *node2 keepalived.conf*
>
> global_defs {
>
> lvs_id LVS_229
>
> }
>
> ** **
>
> vrrp_sync_group openstack_haproxy {
>
> group {
>
> v1
>
> v2
>
> }
>
> }
>
> vrrp_script chk_haproxy {
>
> script "killall -0 haproxy"
>
> interval 2
>
> weight 2
>
> }
>
> vrrp_instance v1 {
>
> interface eth0
>
> state BACKUP
>
> virtual_router_id 1****
>
> priority 100
>
> virtual_ipaddress {
>
> 192.168.0.230****
>
> }
>
> track_script {
>
> chk_haproxy
>
> }
>
> }
>
> vrrp_instance v2 {
>
> interface eth1
>
> state BACKUP
>
> virtual_router_id 2
>
> priority 100
>
> virtual_ipaddress {
>
> 10.1.0.30
>
> }
>
> track_script {
>
> chk_haproxy
>
> }
>
> }
>
> --
>
> Lei Zhang
>
> ** **
>
> Blog: http://jeffrey4l.github.com
>
> twitter/weibo: @jeffrey4l
>
--
Lei Zhang
Blog: http://jeffrey4l.github.io
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] keepalive can not check the haproxy is down.
Additional:
Distributor ID:Ubuntu
Description:Ubuntu 12.04.2 LTS
Release:12.04
Codename:precise
ii haproxy 1.4.18-0ubuntu1.1
fast and reliable load balancing reverse proxy
ii keepalived 1:1.2.2-3ubuntu1
Failover and monitoring daemon for LVS clusters
On Mon, May 6, 2013 at 4:07 PM, Lei Zhang wrote:
> Hi Guys,
>
> I am trying to use keepalive and haproxy to work together to improve the
> HA of the openstack. But I meet following
> unexpected issue.
>
> I expect that when the haproxy process is crashed on the MASTER
> node(checked by chk_haproxy), the second node
> will take over the VIP. But when I stop the haproxy process, nothing is
> happened.
> However, when stop the keepalived service, the VIP is set up on the node2
> as expected.
>
> So I think the root cause should be the chk_haproxy block. But I have no
> idea why it doesn't work. Does any body have
> ideas?
>
> *node1 keepalived.conf*
>
> global_defs {
> lvs_id LVS_228
> }
>
> vrrp_sync_group openstack_haproxy {
> group {
> v1
> v2
> }
> }
> vrrp_script chk_haproxy {
> script "killall -0 haproxy"
> interval 2
> debug
> weight 2
> }
> vrrp_instance v1 {
> interface eth0
> debug
> state MASTER
> virtual_router_id 1
> priority 101
> virtual_ipaddress {
> 192.168.0.230/24
> }
> track_script {
> chk_haproxy
> }
> }
> vrrp_instance v2 {
> interface eth1
> state MASTER
> debug
> virtual_router_id 2
> priority 101
> virtual_ipaddress {
> 10.1.0.30/16
> }
> track_script {
> chk_haproxy
> }
> }
>
> *node2 keepalived.conf*
>
> global_defs {
> lvs_id LVS_229
> }
>
> vrrp_sync_group openstack_haproxy {
> group {
> v1
> v2
> }
> }
> vrrp_script chk_haproxy {
> script "killall -0 haproxy"
> interval 2
> weight 2
> }
> vrrp_instance v1 {
> interface eth0
> state BACKUP
> virtual_router_id 1
> priority 100
> virtual_ipaddress {
> 192.168.0.230
> }
> track_script {
> chk_haproxy
> }
> }
> vrrp_instance v2 {
> interface eth1
> state BACKUP
> virtual_router_id 2
> priority 100
> virtual_ipaddress {
> 10.1.0.30
> }
> track_script {
> chk_haproxy
> }
> }
>
> --
> Lei Zhang
>
> Blog: http://jeffrey4l.github.com
> twitter/weibo: @jeffrey4l
>
--
Lei Zhang
Blog: http://jeffrey4l.github.com
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
[Openstack] keepalive can not check the haproxy is down.
Hi Guys,
I am trying to use keepalive and haproxy to work together to improve the HA
of the openstack. But I meet following
unexpected issue.
I expect that when the haproxy process is crashed on the MASTER
node(checked by chk_haproxy), the second node
will take over the VIP. But when I stop the haproxy process, nothing is
happened.
However, when stop the keepalived service, the VIP is set up on the node2
as expected.
So I think the root cause should be the chk_haproxy block. But I have no
idea why it doesn't work. Does any body have
ideas?
*node1 keepalived.conf*
global_defs {
lvs_id LVS_228
}
vrrp_sync_group openstack_haproxy {
group {
v1
v2
}
}
vrrp_script chk_haproxy {
script "killall -0 haproxy"
interval 2
debug
weight 2
}
vrrp_instance v1 {
interface eth0
debug
state MASTER
virtual_router_id 1
priority 101
virtual_ipaddress {
192.168.0.230/24
}
track_script {
chk_haproxy
}
}
vrrp_instance v2 {
interface eth1
state MASTER
debug
virtual_router_id 2
priority 101
virtual_ipaddress {
10.1.0.30/16
}
track_script {
chk_haproxy
}
}
*node2 keepalived.conf*
global_defs {
lvs_id LVS_229
}
vrrp_sync_group openstack_haproxy {
group {
v1
v2
}
}
vrrp_script chk_haproxy {
script "killall -0 haproxy"
interval 2
weight 2
}
vrrp_instance v1 {
interface eth0
state BACKUP
virtual_router_id 1
priority 100
virtual_ipaddress {
192.168.0.230
}
track_script {
chk_haproxy
}
}
vrrp_instance v2 {
interface eth1
state BACKUP
virtual_router_id 2
priority 100
virtual_ipaddress {
10.1.0.30
}
track_script {
chk_haproxy
}
}
--
Lei Zhang
Blog: http://jeffrey4l.github.com
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
Re: [Openstack] What's the package flow in vlan mode when ping the floating ip between vms.
Hi JuanFra, I read this article. But It doesn't explain what I concern. What I want to know is that what's the packet flow when ping the floating ip between the VMs which located in the same physical machine? On Tue, Apr 9, 2013 at 9:56 PM, JuanFra Rodriguez Cardoso < juanfra.rodriguez.card...@gmail.com> wrote: > Could this Mirantis' post help you? > > http://www.mirantis.com/blog/vlanmanager-network-flow-analysis/ > > --- > JuanFra > > > 2013/4/9 Lei Zhang > >> I am using: Folsom, nova-network, vlanManage, multi_host=ture >> >> I want to know what's the package flow between the vms which located in >> the same physical machine. >> >> Here is the typology. I want to know want happen if I ping 192.168.3.47 >> in vm7. >> >> When the NAT is applied? >> >>|vm: fixed: 10.0.104.5, floating: >> 192.168.3.56|-|vnet15||br104||vnet14|| vm7: fixed: >> 10.0.104.6, floating: 192.168.3.57| >> >> if the net.bridge.bridge-nf-call-iptables=0, I can not see the NAT >> properly. >> >> [root@openstack-node1 ~]# tcpdump -i vnet14 -l -ne icmp -v >> tcpdump: WARNING: vnet14: no IPv4 address assigned >> tcpdump: listening on vnet14, link-type EN10MB (Ethernet), capture size >> 65535 bytes >> 17:11:10.275818 fa:16:3e:3e:ab:8f > fa:16:3e:72:8f:b4, ethertype IPv4 >> (0x0800), length 98: (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto >> ICMP (1), length 84) >> 10.0.104.6 > 192.168.3.56: ICMP echo request, id 31090, seq 1, length 64 >> 17:11:10.277546 fa:16:3e:22:31:09 > fa:16:3e:3e:ab:8f, ethertype IPv4 >> (0x0800), length 98: (tos 0x0, ttl 64, id 64703, offset 0, flags [none], >> proto ICMP (1), length 84) >> 10.0.104.5 > 10.0.104.6: ICMP echo reply, id 31090, seq 1, length 64 >> >> When net.bridge.bridge-nf-call-iptables=1, I found the NAT properly. But >> I also found it is said the bridge filter should be disabled in >> http://docs.openstack.org/trunk/openstack-compute/admin/content/network-troubleshooting.html. >> Is this true? >> >> >> [root@openstack-node1 ~]# tcpdump -i vnet14 -l -ne icmp -v >> tcpdump: WARNING: vnet14: no IPv4 address assigned >> tcpdump: listening on vnet14, link-type EN10MB (Ethernet), capture size >> 65535 bytes >> 17:13:40.507577 fa:16:3e:3e:ab:8f > fa:16:3e:72:8f:b4, ethertype IPv4 >> (0x0800), length 98: (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto >> ICMP (1), length 84) >> 10.0.104.6 > 192.168.3.56: ICMP echo request, id 42098, seq 1, length 64 >> 17:13:40.508034 fa:16:3e:22:31:09 > fa:16:3e:3e:ab:8f, ethertype IPv4 >> (0x0800), length 98: (tos 0x0, ttl 64, id 64704, offset 0, flags [none], >> proto ICMP (1), length 84) >> 192.168.3.56 > 10.0.104.6: ICMP echo reply, id 42098, seq 1, length 64 >> >> -- >> Lei Zhang >> >> Blog: http://jeffrey4l.github.com >> twitter/weibo: @jeffrey4l >> >> ___ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack@lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] What's the package flow in vlan mode when ping the floating ip between vms.
I am using: Folsom, nova-network, vlanManage, multi_host=ture I want to know what's the package flow between the vms which located in the same physical machine. Here is the typology. I want to know want happen if I ping 192.168.3.47 in vm7. When the NAT is applied? |vm: fixed: 10.0.104.5, floating: 192.168.3.56|-|vnet15||br104||vnet14|| vm7: fixed: 10.0.104.6, floating: 192.168.3.57| if the net.bridge.bridge-nf-call-iptables=0, I can not see the NAT properly. [root@openstack-node1 ~]# tcpdump -i vnet14 -l -ne icmp -v tcpdump: WARNING: vnet14: no IPv4 address assigned tcpdump: listening on vnet14, link-type EN10MB (Ethernet), capture size 65535 bytes 17:11:10.275818 fa:16:3e:3e:ab:8f > fa:16:3e:72:8f:b4, ethertype IPv4 (0x0800), length 98: (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 10.0.104.6 > 192.168.3.56: ICMP echo request, id 31090, seq 1, length 64 17:11:10.277546 fa:16:3e:22:31:09 > fa:16:3e:3e:ab:8f, ethertype IPv4 (0x0800), length 98: (tos 0x0, ttl 64, id 64703, offset 0, flags [none], proto ICMP (1), length 84) 10.0.104.5 > 10.0.104.6: ICMP echo reply, id 31090, seq 1, length 64 When net.bridge.bridge-nf-call-iptables=1, I found the NAT properly. But I also found it is said the bridge filter should be disabled in http://docs.openstack.org/trunk/openstack-compute/admin/content/network-troubleshooting.html. Is this true? [root@openstack-node1 ~]# tcpdump -i vnet14 -l -ne icmp -v tcpdump: WARNING: vnet14: no IPv4 address assigned tcpdump: listening on vnet14, link-type EN10MB (Ethernet), capture size 65535 bytes 17:13:40.507577 fa:16:3e:3e:ab:8f > fa:16:3e:72:8f:b4, ethertype IPv4 (0x0800), length 98: (tos 0x0, ttl 64, id 0, offset 0, flags [DF], proto ICMP (1), length 84) 10.0.104.6 > 192.168.3.56: ICMP echo request, id 42098, seq 1, length 64 17:13:40.508034 fa:16:3e:22:31:09 > fa:16:3e:3e:ab:8f, ethertype IPv4 (0x0800), length 98: (tos 0x0, ttl 64, id 64704, offset 0, flags [none], proto ICMP (1), length 84) 192.168.3.56 > 10.0.104.6: ICMP echo reply, id 42098, seq 1, length 64 -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to make HA between VMs in the openstack
Another question, what's you mean about FIP? floating ip? But how can I switch the floating IPs and implement with keepalive/pacemaker? On Mon, Apr 8, 2013 at 11:17 PM, Lei Zhang wrote: > Hi Ritesh > How could I switch the virtual ip from one VM to another? As I know, the > libvirt nw-filter will block this? right? Or not use nw-filter? > > > On Mon, Apr 8, 2013 at 10:18 PM, Ritesh Nanda wrote: > >> Hello Lei, >> >>Both ways can be used, depends if you want your database to be >> accessible outside the datacenter network as highly available then FIP can >> be used , if it would internal services that would be using database , then >> you can implement using Fixed ips , but for that , you need to mark >> fixed_ip as reserved in the nova database fixed_ip table the ip you would >> be using as a virtual ip, otherwise ip would be allocated to another vm you >> provision in openstack. >> I hope that gives the answer. >> >> >> On Mon, Apr 8, 2013 at 4:53 PM, Lei Zhang wrote: >> >>> Hi Syed, >>> Thanks for you quickly reply. But What I want is HA between VMs not HA >>> between Physical Machine(Openstack Node/ Services) >>> >>> >>> On Mon, Apr 8, 2013 at 7:20 PM, Syed Armani wrote: >>> >>>> Hi Lei Zhang, >>>> >>>> You can find more information about HA in OpenStack in this guide: >>>> http://docs.openstack.org/trunk/openstack-ha/content/index.html >>>> >>>> Best regards, >>>> Syed Armani >>>> >>>> On Monday 08 April 2013 04:46 PM, Lei Zhang wrote: >>>> > Hi all, >>>> > >>>> > I am using Folsom, and I want to set up a HA between VMs. For >>>> example, I >>>> > have two DB VMs. One is the primary and other is a slave. I want to >>>> use >>>> > Keepalive or pacemake to switch between them when one is failed. >>>> > >>>> > But how to implement this? Because in general, we need a dynamic IP to >>>> > associate to the VMs and change the relationship when necessary. But >>>> > which IP should be used ? Floating ip or Fixed IP? and how. >>>> > >>>> > -- >>>> > Lei Zhang >>>> > >>>> > Blog: http://jeffrey4l.github.com >>>> > twitter/weibo: @jeffrey4l >>>> > >>>> > >>>> > ___ >>>> > Mailing list: https://launchpad.net/~openstack >>>> > Post to : openstack@lists.launchpad.net >>>> > Unsubscribe : https://launchpad.net/~openstack >>>> > More help : https://help.launchpad.net/ListHelp >>>> > >>>> >>>> >>> >>> >>> -- >>> Lei Zhang >>> >>> Blog: http://jeffrey4l.github.com >>> twitter/weibo: @jeffrey4l >>> >>> ___ >>> Mailing list: https://launchpad.net/~openstack >>> Post to : openstack@lists.launchpad.net >>> Unsubscribe : https://launchpad.net/~openstack >>> More help : https://help.launchpad.net/ListHelp >>> >>> >> >> >> -- >> >> * With Regards >> * >> >> * Ritesh Nanda >> * >> >> *** >> * >> <http://www.ericsson.com/> >> >> >> >> > > > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to make HA between VMs in the openstack
Hi Ritesh How could I switch the virtual ip from one VM to another? As I know, the libvirt nw-filter will block this? right? Or not use nw-filter? On Mon, Apr 8, 2013 at 10:18 PM, Ritesh Nanda wrote: > Hello Lei, > >Both ways can be used, depends if you want your database to be > accessible outside the datacenter network as highly available then FIP can > be used , if it would internal services that would be using database , then > you can implement using Fixed ips , but for that , you need to mark > fixed_ip as reserved in the nova database fixed_ip table the ip you would > be using as a virtual ip, otherwise ip would be allocated to another vm you > provision in openstack. > I hope that gives the answer. > > > On Mon, Apr 8, 2013 at 4:53 PM, Lei Zhang wrote: > >> Hi Syed, >> Thanks for you quickly reply. But What I want is HA between VMs not HA >> between Physical Machine(Openstack Node/ Services) >> >> >> On Mon, Apr 8, 2013 at 7:20 PM, Syed Armani wrote: >> >>> Hi Lei Zhang, >>> >>> You can find more information about HA in OpenStack in this guide: >>> http://docs.openstack.org/trunk/openstack-ha/content/index.html >>> >>> Best regards, >>> Syed Armani >>> >>> On Monday 08 April 2013 04:46 PM, Lei Zhang wrote: >>> > Hi all, >>> > >>> > I am using Folsom, and I want to set up a HA between VMs. For example, >>> I >>> > have two DB VMs. One is the primary and other is a slave. I want to use >>> > Keepalive or pacemake to switch between them when one is failed. >>> > >>> > But how to implement this? Because in general, we need a dynamic IP to >>> > associate to the VMs and change the relationship when necessary. But >>> > which IP should be used ? Floating ip or Fixed IP? and how. >>> > >>> > -- >>> > Lei Zhang >>> > >>> > Blog: http://jeffrey4l.github.com >>> > twitter/weibo: @jeffrey4l >>> > >>> > >>> > ___ >>> > Mailing list: https://launchpad.net/~openstack >>> > Post to : openstack@lists.launchpad.net >>> > Unsubscribe : https://launchpad.net/~openstack >>> > More help : https://help.launchpad.net/ListHelp >>> > >>> >>> >> >> >> -- >> Lei Zhang >> >> Blog: http://jeffrey4l.github.com >> twitter/weibo: @jeffrey4l >> >> ___ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack@lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> > > > -- > > * With Regards > * > > * Ritesh Nanda > * > > *** > * > <http://www.ericsson.com/> > > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to make HA between VMs in the openstack
Hi Syed, Thanks for you quickly reply. But What I want is HA between VMs not HA between Physical Machine(Openstack Node/ Services) On Mon, Apr 8, 2013 at 7:20 PM, Syed Armani wrote: > Hi Lei Zhang, > > You can find more information about HA in OpenStack in this guide: > http://docs.openstack.org/trunk/openstack-ha/content/index.html > > Best regards, > Syed Armani > > On Monday 08 April 2013 04:46 PM, Lei Zhang wrote: > > Hi all, > > > > I am using Folsom, and I want to set up a HA between VMs. For example, I > > have two DB VMs. One is the primary and other is a slave. I want to use > > Keepalive or pacemake to switch between them when one is failed. > > > > But how to implement this? Because in general, we need a dynamic IP to > > associate to the VMs and change the relationship when necessary. But > > which IP should be used ? Floating ip or Fixed IP? and how. > > > > -- > > Lei Zhang > > > > Blog: http://jeffrey4l.github.com > > twitter/weibo: @jeffrey4l > > > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] How to make HA between VMs in the openstack
Hi all, I am using Folsom, and I want to set up a HA between VMs. For example, I have two DB VMs. One is the primary and other is a slave. I want to use Keepalive or pacemake to switch between them when one is failed. But how to implement this? Because in general, we need a dynamic IP to associate to the VMs and change the relationship when necessary. But which IP should be used ? Floating ip or Fixed IP? and how. -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] the ip_forward is enable when using vlan + multi_host on computer node
There may be some mistake exist. Just know, the vlan works as expected. On Tue, Mar 12, 2013 at 12:02 PM, Lei Zhang wrote: > Hi all, > > I am testing the nova-network + vlan + multi_host. But I found that the > ip_forward is enable automatically when launch new instances. You can check > the code > https://github.com/openstack/nova/blob/master/nova/network/linux_net.py#L770 > > I found there is some issue seriously when the ip_forward=1 on compute > node. Here my testing process > > Controller: > > [root@openstack-controller conf.d]# ip a > 1: lo: mtu 16436 qdisc noqueue state UNKNOWN > link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 > inet 127.0.0.1/8 scope host lo > inet6 ::1/128 scope host >valid_lft forever preferred_lft forever > 2: p3p1: mtu 1500 qdisc mq state UP qlen > 1000 > link/ether 90:b1:1c:0d:87:79 brd ff:ff:ff:ff:ff:ff > inet 192.168.3.10/24 brd 192.168.3.255 scope global p3p1 > inet6 fe80::92b1:1cff:fe0d:8779/64 scope link >valid_lft forever preferred_lft forever > 3: em1: mtu 1500 qdisc mq state UP qlen 1000 > link/ether 90:b1:1c:0d:87:7a brd ff:ff:ff:ff:ff:ff > inet 172.16.0.10/24 brd 172.16.0.255 scope global em1 > inet6 fe80::92b1:1cff:fe0d:877a/64 scope link >valid_lft forever preferred_lft forever > > Computer Node: > > [root@openstack-node2 vlan]# ip a > 2: em1: mtu 1500 qdisc mq state UP qlen 1000 > > link/ether 90:b1:1c:0d:73:ea brd ff:ff:ff:ff:ff:ff > inet 172.16.0.12/24 brd 172.16.0.255 scope global em1 > inet6 fe80::92b1:1cff:fe0d:73ea/64 scope link >valid_lft forever preferred_lft forever > 4: p3p1: mtu 1500 qdisc mq state UP qlen > 1000 > link/ether 00:10:18:f7:4a:34 brd ff:ff:ff:ff:ff:ff > inet 192.168.3.12/24 brd 192.168.3.255 scope global p3p1 > inet 192.168.3.33/32 scope global p3p1 > inet6 fe80::210:18ff:fef7:4a34/64 scope link >valid_lft forever preferred_lft forever > 9: vlan102@em1: mtu 1500 qdisc noqueue > state UP > link/ether fa:16:3e:54:ea:11 brd ff:ff:ff:ff:ff:ff > inet6 fe80::f816:3eff:fe54:ea11/64 scope link >valid_lft forever preferred_lft forever > 10: br102: mtu 1500 qdisc noqueue state > UNKNOWN > link/ether fa:16:3e:54:ea:11 brd ff:ff:ff:ff:ff:ff > inet 10.0.102.4/24 brd 10.0.102.255 scope global br102 > inet6 fe80::2816:24ff:feb5:5770/64 scope link >valid_lft forever preferred_lft forever > 11: vlan103@em1: mtu 1500 qdisc noqueue > state UP > link/ether fa:16:3e:3a:a0:20 brd ff:ff:ff:ff:ff:ff > inet6 fe80::f816:3eff:fe3a:a020/64 scope link >valid_lft forever preferred_lft forever > 12: br103: mtu 1500 qdisc noqueue state > UNKNOWN > link/ether fa:16:3e:3a:a0:20 brd ff:ff:ff:ff:ff:ff > inet 10.0.103.4/24 brd 10.0.103.255 scope global br103 > inet6 fe80::480c:f2ff:fe9b:a600/64 scope link >valid_lft forever preferred_lft forever > 13: vnet0: mtu 1500 qdisc pfifo_fast state > UNKNOWN qlen 500 > link/ether fe:16:3e:0c:65:73 brd ff:ff:ff:ff:ff:ff > inet6 fe80::fc16:3eff:fe0c:6573/64 scope link >valid_lft forever preferred_lft forever > 15: vnet1: mtu 1500 qdisc pfifo_fast state > UNKNOWN qlen 500 > link/ether fe:16:3e:7f:a2:d5 brd ff:ff:ff:ff:ff:ff > inet6 fe80::fc16:3eff:fe7f:a2d5/64 scope link >valid_lft forever preferred_lft forever > 16: vnet2: mtu 1500 qdisc pfifo_fast state > UNKNOWN qlen 500 > link/ether fe:16:3e:31:8f:7c brd ff:ff:ff:ff:ff:ff > inet6 fe80::fc16:3eff:fe31:8f7c/64 scope link >valid_lft forever preferred_lft forever > 17: vnet3: mtu 1500 qdisc pfifo_fast state > UNKNOWN qlen 500 > link/ether fe:16:3e:63:8c:e2 brd ff:ff:ff:ff:ff:ff > inet6 fe80::fc16:3eff:fe63:8ce2/64 scope link >valid_lft forever preferred_lft forever > [root@openstack-node2 vlan]# brctl show > bridge namebridge idSTP enabledinterfaces > br1028000.fa163e54ea11novlan102 > vnet0 > vnet1 > vnet2 > br1038000.fa163e3aa020novlan103 > vnet3 > virbr08000.525400aaa1b5yesvirbr0-nic > > if the ip_forward=1, then vm1(vnet1) can ping vm2(vnet4) and controller > can ping vm1(vnet1) and vm2(vnet4). this should be wrong. > > Any body meet this error? and how to fix this except for changing the > code. > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] the ip_forward is enable when using vlan + multi_host on computer node
Hi all, I am testing the nova-network + vlan + multi_host. But I found that the ip_forward is enable automatically when launch new instances. You can check the code https://github.com/openstack/nova/blob/master/nova/network/linux_net.py#L770 I found there is some issue seriously when the ip_forward=1 on compute node. Here my testing process Controller: [root@openstack-controller conf.d]# ip a 1: lo: mtu 16436 qdisc noqueue state UNKNOWN link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: p3p1: mtu 1500 qdisc mq state UP qlen 1000 link/ether 90:b1:1c:0d:87:79 brd ff:ff:ff:ff:ff:ff inet 192.168.3.10/24 brd 192.168.3.255 scope global p3p1 inet6 fe80::92b1:1cff:fe0d:8779/64 scope link valid_lft forever preferred_lft forever 3: em1: mtu 1500 qdisc mq state UP qlen 1000 link/ether 90:b1:1c:0d:87:7a brd ff:ff:ff:ff:ff:ff inet 172.16.0.10/24 brd 172.16.0.255 scope global em1 inet6 fe80::92b1:1cff:fe0d:877a/64 scope link valid_lft forever preferred_lft forever Computer Node: [root@openstack-node2 vlan]# ip a 2: em1: mtu 1500 qdisc mq state UP qlen 1000 link/ether 90:b1:1c:0d:73:ea brd ff:ff:ff:ff:ff:ff inet 172.16.0.12/24 brd 172.16.0.255 scope global em1 inet6 fe80::92b1:1cff:fe0d:73ea/64 scope link valid_lft forever preferred_lft forever 4: p3p1: mtu 1500 qdisc mq state UP qlen 1000 link/ether 00:10:18:f7:4a:34 brd ff:ff:ff:ff:ff:ff inet 192.168.3.12/24 brd 192.168.3.255 scope global p3p1 inet 192.168.3.33/32 scope global p3p1 inet6 fe80::210:18ff:fef7:4a34/64 scope link valid_lft forever preferred_lft forever 9: vlan102@em1: mtu 1500 qdisc noqueue state UP link/ether fa:16:3e:54:ea:11 brd ff:ff:ff:ff:ff:ff inet6 fe80::f816:3eff:fe54:ea11/64 scope link valid_lft forever preferred_lft forever 10: br102: mtu 1500 qdisc noqueue state UNKNOWN link/ether fa:16:3e:54:ea:11 brd ff:ff:ff:ff:ff:ff inet 10.0.102.4/24 brd 10.0.102.255 scope global br102 inet6 fe80::2816:24ff:feb5:5770/64 scope link valid_lft forever preferred_lft forever 11: vlan103@em1: mtu 1500 qdisc noqueue state UP link/ether fa:16:3e:3a:a0:20 brd ff:ff:ff:ff:ff:ff inet6 fe80::f816:3eff:fe3a:a020/64 scope link valid_lft forever preferred_lft forever 12: br103: mtu 1500 qdisc noqueue state UNKNOWN link/ether fa:16:3e:3a:a0:20 brd ff:ff:ff:ff:ff:ff inet 10.0.103.4/24 brd 10.0.103.255 scope global br103 inet6 fe80::480c:f2ff:fe9b:a600/64 scope link valid_lft forever preferred_lft forever 13: vnet0: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500 link/ether fe:16:3e:0c:65:73 brd ff:ff:ff:ff:ff:ff inet6 fe80::fc16:3eff:fe0c:6573/64 scope link valid_lft forever preferred_lft forever 15: vnet1: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500 link/ether fe:16:3e:7f:a2:d5 brd ff:ff:ff:ff:ff:ff inet6 fe80::fc16:3eff:fe7f:a2d5/64 scope link valid_lft forever preferred_lft forever 16: vnet2: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500 link/ether fe:16:3e:31:8f:7c brd ff:ff:ff:ff:ff:ff inet6 fe80::fc16:3eff:fe31:8f7c/64 scope link valid_lft forever preferred_lft forever 17: vnet3: mtu 1500 qdisc pfifo_fast state UNKNOWN qlen 500 link/ether fe:16:3e:63:8c:e2 brd ff:ff:ff:ff:ff:ff inet6 fe80::fc16:3eff:fe63:8ce2/64 scope link valid_lft forever preferred_lft forever [root@openstack-node2 vlan]# brctl show bridge namebridge idSTP enabledinterfaces br1028000.fa163e54ea11novlan102 vnet0 vnet1 vnet2 br1038000.fa163e3aa020novlan103 vnet3 virbr08000.525400aaa1b5yesvirbr0-nic if the ip_forward=1, then vm1(vnet1) can ping vm2(vnet4) and controller can ping vm1(vnet1) and vm2(vnet4). this should be wrong. Any body meet this error? and how to fix this except for changing the code. -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] error -- yum install openstack-quantum-openvswitch
now, the openvswitch package is not exist in RHEL official repository and EPEL repository. You can build it manually. You can refer to my article http://jeffrey4l.blogspot.com/2013/02/open-vswitch-installation-on-centos-63.html On Wed, Mar 6, 2013 at 1:49 AM, Aru s wrote: > Hi, > > I am getting the below error while trying to install antuenstack quantum. > Please help. > I am using RHEL6.3 (64bit), with EPEL > http://download.fedoraproject.org/pub/epel/6/i386/epel-release-6-8.noarch.rpm > > # yum install openstack-quantum-openvswitch > Loaded plugins: product-id, security, subscription-manager > Updating certificate-based repositories. > Unable to read consumer identity > Setting up Install Process > Resolving Dependencies > --> Running transaction check > ---> Package openstack-quantum-openvswitch.noarch 0:2012.2.1-1.el6 will be > installed > --> Processing Dependency: openvswitch for package: > openstack-quantum-openvswitch-2012.2.1-1.el6.noarch > --> Finished Dependency Resolution > Error: Package: openstack-quantum-openvswitch-2012.2.1-1.el6.noarch (epel) >Requires: openvswitch > You could try using --skip-broken to work around the problem > You could try running: rpm -Va --nofiles --nodigest > [root@os-ctrl openvswitch]# > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] keystone-manage db_sync failures
see https://bugs.launchpad.net/keystone/+bug/1073569 bug On Wed, Mar 6, 2013 at 2:18 AM, Miller, Mark M (EB SW Cloud - R&D - Corvallis) wrote: > Try adding the config file name to the command line: > > > keystone-manage --config-file /etc/keystone/keystone.conf db_sync > > Mark > > -Original Message- > From: openstack-bounces+mark.m.miller=hp@lists.launchpad.net [mailto: > openstack-bounces+mark.m.miller=hp@lists.launchpad.net] On Behalf Of > Wyllys Ingersoll > Sent: Tuesday, March 05, 2013 8:27 AM > To: openstack@lists.launchpad.net > Subject: [Openstack] keystone-manage db_sync failures > > I keep getting a failure when trying to configure keystone. > keystone-manage seems to have issues with sqlalchemy. > > Here are my versions: > > python-keystoneclient: 1:0.1.3-0ubuntu1.1~cloud0 > python-sqlalchemy: 0.7.8-1ubuntu1~cloud0 > python-migrate: 0.7.2-1ubuntu1 > > Any ideas?? > > $ keystone-manage db_sync > Traceback (most recent call last): > File "/usr/bin/keystone-manage", line 28, in > cli.main(argv=sys.argv, config_files=config_files) > File "/usr/lib/python2.7/dist-packages/keystone/cli.py", line 164, in > main > return run(cmd, (args[:1] + args[2:])) > File "/usr/lib/python2.7/dist-packages/keystone/cli.py", line 147, in run > return CMDS[cmd](argv=args).run() > File "/usr/lib/python2.7/dist-packages/keystone/cli.py", line 35, in run > return self.main() > File "/usr/lib/python2.7/dist-packages/keystone/cli.py", line 54, in main > driver = importutils.import_object(getattr(CONF, k).driver) > File > "/usr/lib/python2.7/dist-packages/keystone/openstack/common/importutils.py", > line 40, in import_object > return import_class(import_str)(*args, **kwargs) > File > "/usr/lib/python2.7/dist-packages/keystone/openstack/common/importutils.py", > line 30, in import_class > __import__(mod_str) > File > "/usr/lib/python2.7/dist-packages/keystone/identity/backends/sql.py", line > 22, in > from keystone.common.sql import migration > File > "/usr/lib/python2.7/dist-packages/keystone/common/sql/migration.py", line > 23, in > from migrate.versioning import api as versioning_api > File "/usr/lib/python2.7/dist-packages/migrate/versioning/api.py", line > 33, in > from migrate.versioning import (repository, schema, version, > File "/usr/lib/python2.7/dist-packages/migrate/versioning/schema.py", > line 10, in > from sqlalchemy import exceptions as sa_exceptions > ImportError: cannot import name exceptions > > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to create a Image which can extend the partition automatically.
On Tue, Mar 5, 2013 at 10:04 PM, Scott Moser wrote: > cloud-init > 0.7 (cloud-init invokes resize2fs) How this is possible to just call `resize2fs` to re-partition. As I know, this tool will not modify the partition information. Right? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to create a Image which can extend the partition automatically.
Thanks for Scott, Padraig, Juerg. I have the whole image of this feature. But, who knows what's the implementation in AWS cloud when using RHEL OS? On Wed, Mar 6, 2013 at 9:15 AM, Joshua Harlow wrote: > +1 I think cloud-init can do this all in a more correct manner and in a > manner that works across more distributions and file system types in the > long term. > > On 3/5/13 5:08 PM, "Scott Moser" wrote: > > >On Wed, 6 Mar 2013, Pádraig Brady wrote: > > > >> On 03/05/2013 02:04 PM, Scott Moser wrote: > >> > On Tue, 5 Mar 2013, Sylvain Bauza wrote: > >> > > >> >> If you look at > >> >> http://www.pixelbeat.org/docs/openstack_libvirt_images/#1361764412, > >>you'll see > >> >> that resize2fs is performed. But there is a caveat with RHEL6 which > >>is Linux > >> >> 2.6 (contrary to Ubuntu 12.04 which is Linux 3.0). > >> >> If you look at "man resize2fs" : > >> > > >> > Please don't do this, or rely on this. Having the hypervisor do this > >>for > >> > your guest is simply wrong. Hypervisors should know little to nothing > >> > about the internals of the instances they're launching. > >> > >> Just to point out the alternative for when the VM doesn't > >> have the smarts to resize itself, is to use something like virt-resize: > >> https://blueprints.launchpad.net/nova/+spec/resize-no-raw > > > > > >Using libguestfs is worlds better than having the host "directly" do it. > >But really whats happening here is *still* something with very little > >information mucking with (and possibly breaking) the inside of a disk > >image. The more we consider that a "bucket of bytes" the better. > > > >If you are using libguestfs, chances are you're using it from your distro, > >and patching it to deal with a new filesystem (or otherwise get the update > >to your hostOS) is still problematic. > > > >Just let/expect the guest do it, and we'll avoid a whole silly game of cat > >and mouse that doesn't even have to be played. > > > >When was the last time you updated your bios on your laptop so you could > >use a new linux filesystem? That sounds silly, doesn't it. Having > >openstack reach inside the contents of the disk is just as silly. > > > >One of the major benefits of having cloud-init direct the partition resize > >*and* subsequent filesystem resize is that the user can (in user-data) > >disable this! (currently the initramfs doesn't take any instruction from > >user-data, so disabling it isn't really a possibility). perhaps they > >didn't want that extra instance-store space to be part of the root > >filesystem. > > > >If you put that function inside the hypervisor, you either can't do it, of > >you have to expose some silly api-launch parameter of > >"do_not_modify_disk". It complicates the API and complicates the host. > > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to create a Image which can extend the partition automatically.
On Tue, Mar 5, 2013 at 4:24 PM, Sylvain Bauza wrote: resize2fs but the resize2fs tools is not working and raise following error $ resize2fs rhel6.3-x86_64.img resize2fs 1.42.5 (29-Jul-2012) resize2fs: Bad magic number in super-block while trying to open rhel6.3-x86_64.img Couldn't find valid filesystem superblock. In fact, I have found the partition-resize is implemented in the ubuntu OS. It is related to could-utils package. the could-utils has a command tool name growpart, which can rewrite the partition table and extend space. When the ubuntu is boot, there are scrips in the initrd.img that can call the growpart and resize2fs to re-partition. But on the RHEL, I didn't found the could-utils( it is under development) , and no kernel that can call the something like grouppart. So what should I do on the RHEL to implement re-partition? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] How to create a Image which can extend the partition automatically.
Hi all, I am making the RHEL Image for the Openstack. But what type of partition layout is preferred? The question is that when resize the image, the FS can be aware of the expansion and enlarge automatically. I found the ubuntu image from the http://cloud-images.ubuntu.com/precise/ have this feature. But the image I create can not. So how to make the image created can re-partitioned in resize process automatically and how the re-partitioned implemented? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How the linux bridge work in Quantum
Thanks all of guys. I have found the root cause. It is related to this bug https://bugzilla.redhat.com/show_bug.cgi?id=877704 . The explanation is below When netns support is enabled, nat table is placed under a different namespace which doesn't contain the bridge interface inside it. So the value of net.bridge.bridge-nf-call-iptables doesn't affect the rule matching. On Thu, Feb 7, 2013 at 1:42 AM, Willard Dennis wrote: > Hi Lei, > > Perhaps this article I wrote on the packetpushers.net blog can be helpful > to you -- > http://packetpushers.net/openstack-quantum-network-implementation-in-linux/ > > Best, > Will > > > *From:* Lei Zhang > *Sent:* February 6, 2013 1:40 AM > *To:* openstack@lists.launchpad.net > *Subject:* Re: [Openstack] How the linux bridge work in Quantum > > I am following the steps from > http://d.hatena.ne.jp/enakai00/20121118/1353226066 > > > On Wed, Feb 6, 2013 at 2:36 PM, Lei Zhang wrote: > >> Directly, here is the issue I meet. >> >> I start a all-in-one openstack Folsom with Quantum network( using linux >> bridge plugin) >> >>- First I can not ping outside of the host. Following is the network >>setting. I think this should be work. But I can ping 10.10.0.1(gate way) >> in >>the host >>- Second, what's the usage for ns-1c37cab7-6b qg-82fef397-e1 >>qg-82fef397-e1, they are attached on nothing bridge. >> >> eth0: public Ethernet 10.10.0.0/24 >> eth1 <http://10.10.0.0/24eth1>: private Ethernet 192.168.101.0/24 >> eth2 <http://192.168.101.0/24eth2>: manage Ethernet 10.12.0.0/24 >> >> >> [root@all-in-one ~]# brctl show >> bridge namebridge idSTP enabledinterfaces >> brq3958ea96-9d8000.080027f1f512noeth0 >> tap82fef397-e1 >> brq399d07f4-8c8000.080027b61c6fnoeth1.101 >> tap1c37cab7-6b >> tap21afddbd-80 >> tap629410b3-2d >> >> *Part of ip link* >> >> [root@all-in-one ~]# ip link >> >> 2: eth0: mtu 1500 qdisc pfifo_fast state >> UP qlen 1000 >> link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff >> 3: eth1: mtu 1500 qdisc pfifo_fast state >> UP qlen 1000 >> link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff >> 10: eth1.101@eth1: mtu 1500 qdisc noqueue >> state UP >> link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff >> >> * Part of ip addr* >> >> [root@all-in-one instance-0005]# ip a >> >> 2: eth0: mtu 1500 qdisc pfifo_fast state >> UP qlen 1000 >> link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff >> inet6 fe80::a00:27ff:fef1:f512/64 scope link >>valid_lft forever preferred_lft forever >> 3: eth1: mtu 1500 qdisc pfifo_fast state >> UP qlen 1000 >> link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff >> inet6 fe80::a00:27ff:feb6:1c6f/64 scope link >>valid_lft forever preferred_lft forever >> 8: qr-21afddbd-80: mtu 1500 qdisc >> pfifo_fast state UP qlen 1000 >> link/ether 22:af:8e:70:bf:43 brd ff:ff:ff:ff:ff:ff >> inet 192.168.101.1/24 brd 192.168.101.255 scope global qr-21afddbd-80 >> inet6 fe80::20af:8eff:fe70:bf43/64 scope link >>valid_lft forever preferred_lft forever >> 10: eth1.101@eth1: mtu 1500 qdisc noqueue >> state UP >> link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff >> inet6 fe80::a00:27ff:feb6:1c6f/64 scope link >>valid_lft forever preferred_lft forever >> 11: brq399d07f4-8c: mtu 1500 qdisc noqueue >> state UNKNOWN >> link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff >> inet6 fe80::a0ef:23ff:fe72:8085/64 scope link >>valid_lft forever preferred_lft forever >> 12: qg-82fef397-e1: mtu 1500 qdisc >> pfifo_fast state UP qlen 1000 >> link/ether 42:de:03:55:d6:96 brd ff:ff:ff:ff:ff:ff >> inet 10.10.0.2/24 brd 10.10.0.255 scope global qg-82fef397-e1 >> inet6 fe80::40de:3ff:fe55:d696/64 scope link >>valid_lft forever preferred_lft forever >> 14: brq3958ea96-9d: mtu 1500 qdisc noqueue >> state UNKNOWN >> link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff >> inet 10.10.0.200/24 brd 10.10.0.255 scope global brq3958ea96-9d >> inet6 fe80::b4a2:c5ff:fe8c:3b1c/64 scope link >>valid_lft forever preferred_lft forever >> 15: ns-1c37cab7-6b: mtu 1500 qdisc >> pfifo_fast state UP qlen 1000 >> link/ether 2e:0d:c2:31:23:23 brd ff:ff:ff:ff:ff:f
Re: [Openstack] How the linux bridge work in Quantum
I am following the steps from http://d.hatena.ne.jp/enakai00/20121118/1353226066 On Wed, Feb 6, 2013 at 2:36 PM, Lei Zhang wrote: > Directly, here is the issue I meet. > > I start a all-in-one openstack Folsom with Quantum network( using linux > bridge plugin) > >- First I can not ping outside of the host. Following is the network >setting. I think this should be work. But I can ping 10.10.0.1(gate way) in >the host >- Second, what's the usage for ns-1c37cab7-6b qg-82fef397-e1 >qg-82fef397-e1, they are attached on nothing bridge. > > eth0: public Ethernet 10.10.0.0/24 > eth1 <http://10.10.0.0/24eth1>: private Ethernet 192.168.101.0/24 > eth2 <http://192.168.101.0/24eth2>: manage Ethernet 10.12.0.0/24 > > > [root@all-in-one ~]# brctl show > bridge namebridge idSTP enabledinterfaces > brq3958ea96-9d8000.080027f1f512noeth0 > tap82fef397-e1 > brq399d07f4-8c8000.080027b61c6fnoeth1.101 > tap1c37cab7-6b > tap21afddbd-80 > tap629410b3-2d > > *Part of ip link* > > [root@all-in-one ~]# ip link > > 2: eth0: mtu 1500 qdisc pfifo_fast state UP > qlen 1000 > link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff > 3: eth1: mtu 1500 qdisc pfifo_fast state UP > qlen 1000 > link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff > 10: eth1.101@eth1: mtu 1500 qdisc noqueue > state UP > link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff > > * Part of ip addr* > > [root@all-in-one instance-0005]# ip a > > 2: eth0: mtu 1500 qdisc pfifo_fast state UP > qlen 1000 > link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff > inet6 fe80::a00:27ff:fef1:f512/64 scope link >valid_lft forever preferred_lft forever > 3: eth1: mtu 1500 qdisc pfifo_fast state UP > qlen 1000 > link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff > inet6 fe80::a00:27ff:feb6:1c6f/64 scope link >valid_lft forever preferred_lft forever > 8: qr-21afddbd-80: mtu 1500 qdisc > pfifo_fast state UP qlen 1000 > link/ether 22:af:8e:70:bf:43 brd ff:ff:ff:ff:ff:ff > inet 192.168.101.1/24 brd 192.168.101.255 scope global qr-21afddbd-80 > inet6 fe80::20af:8eff:fe70:bf43/64 scope link >valid_lft forever preferred_lft forever > 10: eth1.101@eth1: mtu 1500 qdisc noqueue > state UP > link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff > inet6 fe80::a00:27ff:feb6:1c6f/64 scope link >valid_lft forever preferred_lft forever > 11: brq399d07f4-8c: mtu 1500 qdisc noqueue > state UNKNOWN > link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff > inet6 fe80::a0ef:23ff:fe72:8085/64 scope link >valid_lft forever preferred_lft forever > 12: qg-82fef397-e1: mtu 1500 qdisc > pfifo_fast state UP qlen 1000 > link/ether 42:de:03:55:d6:96 brd ff:ff:ff:ff:ff:ff > inet 10.10.0.2/24 brd 10.10.0.255 scope global qg-82fef397-e1 > inet6 fe80::40de:3ff:fe55:d696/64 scope link >valid_lft forever preferred_lft forever > 14: brq3958ea96-9d: mtu 1500 qdisc noqueue > state UNKNOWN > link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff > inet 10.10.0.200/24 brd 10.10.0.255 scope global brq3958ea96-9d > inet6 fe80::b4a2:c5ff:fe8c:3b1c/64 scope link >valid_lft forever preferred_lft forever > 15: ns-1c37cab7-6b: mtu 1500 qdisc > pfifo_fast state UP qlen 1000 > link/ether 2e:0d:c2:31:23:23 brd ff:ff:ff:ff:ff:ff > inet 192.168.101.2/24 brd 192.168.101.255 scope global ns-1c37cab7-6b > inet6 fe80::2c0d:c2ff:fe31:2323/64 scope link >valid_lft forever preferred_lft forever > > * ip route * > > [root@all-in-one instance-0005]# ip r 192.168.101.0/24 dev ns-1c37cab7-6b > proto kernel scope link src 192.168.101.2 192.168.101.0/24 dev > qr-21afddbd-80 proto kernel scope link src 192.168.101.1 10.10.0.0/24 dev > qg-82fef397-e1 proto kernel scope link src 10.10.0.2 10.10.0.0/24 dev > brq3958ea96-9d proto kernel scope link src 10.10.0.200 10.12.0.0/24 dev > eth2 proto kernel scope link src 10.12.0.2 169.254.0.0/16 dev eth1 scope > link metric 1003 > default via 10.10.0.1 dev brq3958ea96-9d metric 100 > > > > On Wed, Feb 6, 2013 at 1:31 PM, Lei Zhang wrote: > >> Hi all, >> I am learning the Quantum project. But I am confused about the whole >> architecture. Is there any article to explain how the package flow in the >> network model, which will help me to debug the network issue. >> For example, how the ping package flow from the VMs to the external >> internet? >> >> -
Re: [Openstack] How the linux bridge work in Quantum
Directly, here is the issue I meet. I start a all-in-one openstack Folsom with Quantum network( using linux bridge plugin) - First I can not ping outside of the host. Following is the network setting. I think this should be work. But I can ping 10.10.0.1(gate way) in the host - Second, what's the usage for ns-1c37cab7-6b qg-82fef397-e1 qg-82fef397-e1, they are attached on nothing bridge. eth0: public Ethernet 10.10.0.0/24 eth1: private Ethernet 192.168.101.0/24 eth2: manage Ethernet 10.12.0.0/24 [root@all-in-one ~]# brctl show bridge namebridge idSTP enabledinterfaces brq3958ea96-9d8000.080027f1f512noeth0 tap82fef397-e1 brq399d07f4-8c8000.080027b61c6fnoeth1.101 tap1c37cab7-6b tap21afddbd-80 tap629410b3-2d *Part of ip link* [root@all-in-one ~]# ip link 2: eth0: mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff 3: eth1: mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff 10: eth1.101@eth1: mtu 1500 qdisc noqueue state UP link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff * Part of ip addr* [root@all-in-one instance-0005]# ip a 2: eth0: mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff inet6 fe80::a00:27ff:fef1:f512/64 scope link valid_lft forever preferred_lft forever 3: eth1: mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff inet6 fe80::a00:27ff:feb6:1c6f/64 scope link valid_lft forever preferred_lft forever 8: qr-21afddbd-80: mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 22:af:8e:70:bf:43 brd ff:ff:ff:ff:ff:ff inet 192.168.101.1/24 brd 192.168.101.255 scope global qr-21afddbd-80 inet6 fe80::20af:8eff:fe70:bf43/64 scope link valid_lft forever preferred_lft forever 10: eth1.101@eth1: mtu 1500 qdisc noqueue state UP link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff inet6 fe80::a00:27ff:feb6:1c6f/64 scope link valid_lft forever preferred_lft forever 11: brq399d07f4-8c: mtu 1500 qdisc noqueue state UNKNOWN link/ether 08:00:27:b6:1c:6f brd ff:ff:ff:ff:ff:ff inet6 fe80::a0ef:23ff:fe72:8085/64 scope link valid_lft forever preferred_lft forever 12: qg-82fef397-e1: mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 42:de:03:55:d6:96 brd ff:ff:ff:ff:ff:ff inet 10.10.0.2/24 brd 10.10.0.255 scope global qg-82fef397-e1 inet6 fe80::40de:3ff:fe55:d696/64 scope link valid_lft forever preferred_lft forever 14: brq3958ea96-9d: mtu 1500 qdisc noqueue state UNKNOWN link/ether 08:00:27:f1:f5:12 brd ff:ff:ff:ff:ff:ff inet 10.10.0.200/24 brd 10.10.0.255 scope global brq3958ea96-9d inet6 fe80::b4a2:c5ff:fe8c:3b1c/64 scope link valid_lft forever preferred_lft forever 15: ns-1c37cab7-6b: mtu 1500 qdisc pfifo_fast state UP qlen 1000 link/ether 2e:0d:c2:31:23:23 brd ff:ff:ff:ff:ff:ff inet 192.168.101.2/24 brd 192.168.101.255 scope global ns-1c37cab7-6b inet6 fe80::2c0d:c2ff:fe31:2323/64 scope link valid_lft forever preferred_lft forever * ip route * [root@all-in-one instance-0005]# ip r 192.168.101.0/24 dev ns-1c37cab7-6b proto kernel scope link src 192.168.101.2 192.168.101.0/24 dev qr-21afddbd-80 proto kernel scope link src 192.168.101.1 10.10.0.0/24 dev qg-82fef397-e1 proto kernel scope link src 10.10.0.2 10.10.0.0/24 dev brq3958ea96-9d proto kernel scope link src 10.10.0.200 10.12.0.0/24 dev eth2 proto kernel scope link src 10.12.0.2 169.254.0.0/16 dev eth1 scope link metric 1003 default via 10.10.0.1 dev brq3958ea96-9d metric 100 On Wed, Feb 6, 2013 at 1:31 PM, Lei Zhang wrote: > Hi all, > I am learning the Quantum project. But I am confused about the whole > architecture. Is there any article to explain how the package flow in the > network model, which will help me to debug the network issue. > For example, how the ping package flow from the VMs to the external > internet? > > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] How the linux bridge work in Quantum
Hi all, I am learning the Quantum project. But I am confused about the whole architecture. Is there any article to explain how the package flow in the network model, which will help me to debug the network issue. For example, how the ping package flow from the VMs to the external internet? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Problem with IP on VMs
check list - login the vm through vnc, and check whether it get IP? - login in the vm from the host machine to check whether the IP is works - check the secgroup using command nova secgroup-list-rules On Thu, Jan 31, 2013 at 8:20 AM, Guilherme Russi wrote: > No, how can I do that? > > Thank you. > > > > 2013/1/30 Rain Li > >> Have you setup the secgroup rules? >> >> >> On Wed, Jan 30, 2013 at 2:02 PM, Ritesh Nanda wrote: >> >>> Can you give more details for your setup. >>> >>> On Thu, Jan 31, 2013 at 12:55 AM, Guilherme Russi < >>> luisguilherme...@gmail.com> wrote: >>> >>>> Hello all, >>>> >>>> I'm using Folsom on Ubuntu server 12.04 and I'm getting problems with >>>> ping and login ssh. Can anybody help me? >>>> >>>> Regards. >>>> >>>> Guilherme. >>>> >>>> ___ >>>> Mailing list: https://launchpad.net/~openstack >>>> Post to : openstack@lists.launchpad.net >>>> Unsubscribe : https://launchpad.net/~openstack >>>> More help : https://help.launchpad.net/ListHelp >>>> >>>> >>> >>> >>> -- >>> >>> * With Regards >>> * >>> >>> * Ritesh Nanda >>> * >>> >>> *** >>> * >>> <http://www.ericsson.com/> >>> >>> >>> >>> >>> ___ >>> Mailing list: https://launchpad.net/~openstack >>> Post to : openstack@lists.launchpad.net >>> Unsubscribe : https://launchpad.net/~openstack >>> More help : https://help.launchpad.net/ListHelp >>> >>> >> > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Copy glance image to cinder bootable volumes - "copy_image_to_volume"
I also have a question. What's the requirement for the image? I found nothing int the doc. On Tue, Jan 29, 2013 at 5:38 PM, Benoit ML wrote: > Hello, > > Thank you ! nice :) > I'm really impatient to test cinder with NetApp device (soon it will be). > > In the documentation : > > http://docs.openstack.org/trunk/openstack-compute/admin/content/boot-from-volume.html > The process is quite painful ... > > Regards, > > 2013/1/29 Avishay Traeger : > > Benoit, > > > > openstack-bounces+avishay=il.ibm@lists.launchpad.net wrote on > > 01/29/2013 10:56:33 AM: > >> Hello, > >> > >> I have an openstack installation with 1 controller node, 1 network > >> node and 2 compute node, configured with GRE tunnel for the network, > >> and NFS backend for volumes. > >> > >> I'd like to create a bootable cinder volume from a glance image to > >> have persistant disque for VMs, and tests live migration in this > >> setup. > >> > >> But when I ask cinder to create a volume from a image, cinder report > >> "not supported" ... And I have look into the code, it's seems to be > >> supportend only with Ceph/Rados or Iscsi driver. > >> > >> So I have many questions : > >> - Any plan to support it for other driver/setupe like : NetAppIscsi > >> (or netappNFS Driver) ; NFS driver ? > > > > I have a patch submitted that will implement this for all iSCSI drivers: > > https://review.openstack.org/#/c/19808/ > > I don't know about NetApp's plans for other drivers. > > > >> - Any simple way to create a bootable cinder volume from the > >> controller node shell ? (In the doc I must mount the volume on a VM > >> ... create partition .. copy data and so on ; lots of manipulation..) > > > > I don't understand this question. > > > >> And of course, I have the same question for cinder snapshot. > >> > >> Thank you in advance ! > >> > >> Regards, > >> > >> -- > >> -- > >> Benoit > > > > Thanks, > > Avishay > > > > > > -- > -- > Benoit > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] confused about nova-manage network create parameters
Hi all, I am curiosity about some parameters when create network. by the way, I am using list below. * folsom * nova-network * kvm + libvirt 1. what's means by --fixed_cidr. I found nothing different when using this parameter. 2. It seems the openstack not working very well when create two networks. when launch new instance. The instance get the two ip correctly both in openstack ( including db, dnsmasq). But in the libvirt, the nwfilter only accept one of the two IPs. The result is that only one ip is works. It's expected? Or bug? Or will enhance in the future? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Instance blocked when migrate between host.
Hi Julie Thank you very much. I found nothing about these two command, and I am appreciate for adding some help information in `nova help migrate`. On Mon, Jan 21, 2013 at 5:28 PM, Julie Pichon wrote: > Hi Lei, > > "Lei Zhang" wrote: > > Today, I am testing the openstack migrate function. ( not live > > migration) > > After run the command `nova migrate`, the status of the instance > > became > > `Verify Resize` and never changed itself. Event though I found this > > instance has been started on another instance. > > > > If is this a bug? Or I forgot something to configure? > > Migrate is a 2-steps process: once the instance reaches the VERIFY_RESIZE > stage, you need to run nova resize-confirm if you're happy with the new > instance (this will delete the old one), or nova resize-revert if you want > to go back to the old instance (this will delete the new one). Migrate and > resize use the same mechanism, hence the naming of these 2 commands. > > There probably should be something to indicate this in the 'nova help > migrate' command, since this is something many people seem to get caught in > when first running migrate - myself included. > > Regards, > > Julie > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Instance blocked when migrate between host.
Hi Wolfgang, Actually, there is a better way. ``` nova reset-state --active ``` But I still doubt there is some bug here. The `instance-0001_resize` folder is never deleted. On Mon, Jan 21, 2013 at 5:12 PM, Wolfgang Hennerbichler < wolfgang.hennerbich...@risc-software.at> wrote: > Hi, > > same issue here, after changing the flavor. never returned to normal, > had to go into mysql once again. > > On 01/21/2013 10:08 AM, Lei Zhang wrote: > > Hi all, > > > > Today, I am testing the openstack migrate function. ( not live migration) > > After run the command `nova migrate`, the status of the instance became > > `Verify Resize` and never changed itself. Event though I found this > > instance has been started on another instance. > > > > If is this a bug? Or I forgot something to configure? > > > > -- > > Lei Zhang > > > > Blog: http://jeffrey4l.github.com > > twitter/weibo: @jeffrey4l > > > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > > > > > -- > DI (FH) Wolfgang Hennerbichler > Software Development > Unit Advanced Computing Technologies > RISC Software GmbH > A company of the Johannes Kepler University Linz > > IT-Center > Softwarepark 35 > 4232 Hagenberg > Austria > > Phone: +43 7236 3343 245 > Fax: +43 7236 3343 250 > wolfgang.hennerbich...@risc-software.at > http://www.risc-software.at > > _______ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Instance blocked when migrate between host.
Hi all, Today, I am testing the openstack migrate function. ( not live migration) After run the command `nova migrate`, the status of the instance became `Verify Resize` and never changed itself. Event though I found this instance has been started on another instance. If is this a bug? Or I forgot something to configure? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] [heat] Grizzly-2 development milestone available for Heat
Good news. On Fri, Jan 11, 2013 at 5:44 AM, Steven Dake wrote: > orchestration -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Migrate Instance to another Tenant ID in the same environment
why not try boot from snapshot. That's will save some time. On Thu, Jan 10, 2013 at 5:18 AM, Sébastien Han wrote: > Moving instances from project to project is not possible however what > you can do is (safe way): > > - as an admin user > - snapshot the image from env 1 > - grab the snapshotted file from your glance store > - import the snapshot into glance > - make the image public > - run the snapshot from env 2 > - enjoy! > > Cheers! > > -- > Regards, > Sébastien Han. > > > On Wed, Jan 9, 2013 at 8:14 PM, Alex Vitola wrote: > > I have 2 projects in my environment: > > > > ProjectQA1: ID -> 0001 > > ProjectQA2: ID -> 0002 > > > > root@Controller:# keystone tenant-list > > +-++-+ > > | id |name| enabled | > > +-++-+ > > | 0001| ProjectQA1 | True | > > | 0002| ProjectQA2 | True | > > +--++-+ > > > > In Project 1 there are 1 instance > > In Project 2 there are 7 instances > > > > root@Controller:# nova usage-list > > > > +---+---+--+---+---+ > > | Tenant ID | Instances | RAM MB-Hours | CPU Hours | Disk GB-Hours | > > +---+---+--+---+---+ > > | 0001 | 1 | 12533.78 | 24.48 | 244.80| > > | 0002 | 7 | 127447.40| 171.17| 2100.45 | > > +---+---+--+---+---+ > > > > Is it possible to move this instance of Project 1 for 2? > > > > root@Controller:# nova list > > +--+---+++ > > | ID | Name | Status | Networks | > > +--+---+++ > > | 9991 | QA-07 | ACTICE | Net-Demo=200.100.50.25 | > > +--+---+++ > > > > Move ID 9991/QA-07 > > > > from: Tenant ID 0001 > > to: Tenant ID 0002 > > > > Is that possible? > > > > > > > > Att > > > > Alex Vitola > > System Administrator > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to do when the compute-node is failed.
@JuanFra this flag resume_guests_state_on_host_boot=true is work . I tested it today on Folsom release. On Fri, Dec 28, 2012 at 6:24 PM, JuanFra Rodriguez Cardoso < juanfra.rodriguez.card...@gmail.com> wrote: > @Lei, it's a great article from Mirantis folks. Thanks for sharing it! > > @Vis @Yaguang, I didn't know what flag is working currently. Both in > folsom as in trunk doc, both flags appear. > I understand --start_guests_on_host_boot will be removed from list of > config options in docs. > > Thanks for your clarification. > JuanFra. > > 2012/12/28 Lei Zhang > >> Hi all, >> >> I found this article >> http://www.mirantis.com/blog/openstack-nova-basic-disaster-recovery/ and >> it is very useful. >> >> >> On Fri, Dec 28, 2012 at 10:17 AM, Lei Zhang wrote: >> >>> Got it. >>> Thank all of you. >>> >>> >>> On Fri, Dec 28, 2012 at 2:02 AM, Vishvananda Ishaya < >>> vishvana...@gmail.com> wrote: >>> >>>> >>>> On Dec 27, 2012, at 9:09 AM, heut2008 wrote: >>>> >>>> note that the flag --start_guests_on_host_boot=true has been removed >>>> in the latest trunk code.so instances which are running willn't be >>>> restarted even the nova-compute is restarted . >>>> >>>> >>>> Correct. The proper way to get instances to come back is >>>> resume_guests_state_on_host_boot >>>> >>>> Vish >>>> >>>> >>>> _______ >>>> Mailing list: https://launchpad.net/~openstack >>>> Post to : openstack@lists.launchpad.net >>>> Unsubscribe : https://launchpad.net/~openstack >>>> More help : https://help.launchpad.net/ListHelp >>>> >>>> >>> >>> >>> -- >>> Lei Zhang >>> >>> Blog: http://jeffrey4l.github.com >>> twitter/weibo: @jeffrey4l >>> >> >> >> >> -- >> Lei Zhang >> >> Blog: http://jeffrey4l.github.com >> twitter/weibo: @jeffrey4l >> >> ___ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack@lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Who can give me some article to explain netfilter
I have read this tutorial. So I got some understand about the iptables. But now, I want to get clearly about the picture I mentioned, and attached below. I want to learn what is means by every package flow? For example what means by "taps (e.g.AF_PACKET)" [image: Inline image 1] On Fri, Dec 28, 2012 at 5:53 PM, Razique Mahroua wrote: > There is a good link for extra (detailled) informations > http://www.frozentux.net/iptables-tutorial/iptables-tutorial.html > > > *Razique Mahroua** - **Nuage & Co* > razique.mahr...@gmail.com > Tel : +33 9 72 37 94 15 > > > Le 28 déc. 2012 à 10:50, JuanFra Rodriguez Cardoso < > juanfra.rodriguez.card...@gmail.com> a écrit : > > Hi Lei: > > I don't know if this info can be useful for you, but I think is a great > getting started with iptables, chain... in OpenStack Network: > > http://www.ibm.com/developerworks/cloud/library/cl-openstack-network/index.html > > Regards, > JuanFra. > > 2012/12/28 Lei Zhang > >> Hi Razique, >> >> thx very much. >> But this article is not very detailed. Now, I have a basic understand >> about iptables. But now I want to learn the ebtables and every flow path on >> the picture mentioned above. >> >> >> On Fri, Dec 28, 2012 at 5:20 PM, Razique Mahroua < >> razique.mahr...@gmail.com> wrote: >> >>> Hey Lei, >>> here is a good start >>> http://fengnet.com/book/firewallfundamentals/ch07lev1sec3.html >>> >>> Regards, >>> *Razique Mahroua** - **Nuage & Co* >>> razique.mahr...@gmail.com >>> Tel : +33 9 72 37 94 15 >>> >>> >>> >>> Le 28 déc. 2012 à 10:17, Lei Zhang a écrit : >>> >>> Hi all, >>> >>> I am learning the netfilter(iptables/ebtables) now. I found this picture >>> http://en.wikipedia.org/wiki/File:Netfilter-packet-flow.svg from wiki. >>> I want to under the whole package flow on it. But found nothing . Could you >>> give me more information about it? >>> >>> BR >>> -- >>> Lei Zhang >>> >>> Blog: http://jeffrey4l.github.com >>> twitter/weibo: @jeffrey4l >>> ___ >>> Mailing list: https://launchpad.net/~openstack >>> Post to : openstack@lists.launchpad.net >>> Unsubscribe : https://launchpad.net/~openstack >>> More help : https://help.launchpad.net/ListHelp >>> >>> >>> >> >> >> -- >> Lei Zhang >> >> Blog: http://jeffrey4l.github.com >> twitter/weibo: @jeffrey4l >> >> ___ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack@lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l <>___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Who can give me some article to explain netfilter
Hi Razique, thx very much. But this article is not very detailed. Now, I have a basic understand about iptables. But now I want to learn the ebtables and every flow path on the picture mentioned above. On Fri, Dec 28, 2012 at 5:20 PM, Razique Mahroua wrote: > Hey Lei, > here is a good start > http://fengnet.com/book/firewallfundamentals/ch07lev1sec3.html > > Regards, > *Razique Mahroua** - **Nuage & Co* > razique.mahr...@gmail.com > Tel : +33 9 72 37 94 15 > > > Le 28 déc. 2012 à 10:17, Lei Zhang a écrit : > > Hi all, > > I am learning the netfilter(iptables/ebtables) now. I found this picture > http://en.wikipedia.org/wiki/File:Netfilter-packet-flow.svg from wiki. I > want to under the whole package flow on it. But found nothing . Could you > give me more information about it? > > BR > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l <>___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Who can give me some article to explain netfilter
Hi all, I am learning the netfilter(iptables/ebtables) now. I found this picture http://en.wikipedia.org/wiki/File:Netfilter-packet-flow.svg from wiki. I want to under the whole package flow on it. But found nothing . Could you give me more information about it? BR -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to do when the compute-node is failed.
Hi all, I found this article http://www.mirantis.com/blog/openstack-nova-basic-disaster-recovery/ and it is very useful. On Fri, Dec 28, 2012 at 10:17 AM, Lei Zhang wrote: > Got it. > Thank all of you. > > > On Fri, Dec 28, 2012 at 2:02 AM, Vishvananda Ishaya > wrote: > >> >> On Dec 27, 2012, at 9:09 AM, heut2008 wrote: >> >> note that the flag --start_guests_on_host_boot=true has been removed in >> the latest trunk code.so instances which are running willn't be restarted >> even the nova-compute is restarted . >> >> >> Correct. The proper way to get instances to come back is >> resume_guests_state_on_host_boot >> >> Vish >> >> >> ___ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack@lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> > > > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to do when the compute-node is failed.
Got it. Thank all of you. On Fri, Dec 28, 2012 at 2:02 AM, Vishvananda Ishaya wrote: > > On Dec 27, 2012, at 9:09 AM, heut2008 wrote: > > note that the flag --start_guests_on_host_boot=true has been removed in > the latest trunk code.so instances which are running willn't be restarted > even the nova-compute is restarted . > > > Correct. The proper way to get instances to come back is > resume_guests_state_on_host_boot > > Vish > > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] How to do when the compute-node is failed.
Hi all, I am confused about how to do when the compute node is failed. For example, if the compute node reboot. I found the VMs on it didn't startup automatically. I must reboot the VMs manually. Is there any way to keep the HA? In a bad situation, what should do if the node is crashed? How to keep the VMs migrate to other node automatically? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] It is stuck when attach the volume to the vm.
Hi Alberto,
I have fix this issue already. The root cause is that the controller(where
the cinder service located) block the 8776 port and the node can not access
the cinder service. After enable the port on the IPtables, it works.
thanks you.
On Tue, Dec 18, 2012 at 2:00 PM, Lei Zhang wrote:
> Hi Alberto,
>
> I found the error message from computer.log on the node. Did you meet this
> before?
>
> 2012-12-18 00:57:42 DEBUG nova.openstack.common.rpc.amqp [-] unpacked
> context: {'project_name': u'admin', 'user_id':
> u'9e0e905b3305477587d5f85889b43955', 'roles': [u'admin'], 'timestamp':
> u'2012-12-18T05:57:33.137372', 'auth_token': '', 'remote_address':
> u'172.16.0.10', 'quota_class': None, 'is_admin': True, 'service_catalog':
> [{u'endpoints_links': [], u'endpoints': [{u'adminURL':
> u'http://172.16.0.10:8776/v1/87f394d760354056a584021eb6b6214b', u'region':
> u'RegionOne', u'id': u'b83ae23e3eca4411b726c754df1890b5', u'serviceName':
> u'cinder', u'internalURL':
> u'http://172.16.0.10:8776/v1/87f394d760354056a584021eb6b6214b', u'publicURL':
> u'http://172.16.0.10:8776/v1/87f394d760354056a584021eb6b6214b'}], u'type':
> u'volume', u'name': u'cinder'}, {u'endpoints_links': [], u'endpoints':
> [{u'adminURL': u'http://172.16.0.10:9292/v1', u'region': u'RegionOne',
> u'publicURL': u'http://172.16.0.10:9292/v1', u'internalURL':
> u'http://172.16.0.10:9292/v1', u'id': u'fd308ef11b07483db2948b4ec36ddd9c'}],
> u'type': u'image', u'name': u'glance'}, {u'endpoints_links': [],
> u'endpoints': [{u'adminURL':
> u'http://172.16.0.10:8774/v2/87f394d760354056a584021eb6b6214b', u'region':
> u'RegionOne', u'publicURL':
> u'http://172.16.0.10:8774/v2/87f394d760354056a584021eb6b6214b',
> u'internalURL':
> u'http://172.16.0.10:8774/v2/87f394d760354056a584021eb6b6214b', u'id':
> u'7acff35322ab45e6b81be3361265ec54'}], u'type': u'compute', u'name':
> u'nova'}, {u'endpoints_links': [], u'endpoints': [{u'adminURL':
> u'http://172.16.0.10:8773/services/Admin', u'region': u'RegionOne',
> u'publicURL': u'http://172.16.0.10:8773/services/Cloud', u'internalURL':
> u'http://172.16.0.10:8773/services/Cloud', u'id':
> u'5081d098d06446bcb1218a12fd849c8c'}], u'type': u'ec2', u'name':
> u'nova_ec2'}, {u'endpoints_links': [], u'endpoints': [{u'adminURL':
> u'http://172.16.0.10:35357/v2.0', u'region': u'RegionOne', u'publicURL':
> u'http://172.16.0.10:5000/v2.0', u'internalURL':
> u'http://172.16.0.10:5000/v2.0', u'id':
> u'0d5b09341c954c1297735341106bb288'}], u'type': u'identity', u'name':
> u'keystone'}], 'request_id': u'req-dde3b5c5-57d0-410e-9845-246df9baed23',
> 'instance_lock_checked': False, 'project_id':
> u'87f394d760354056a584021eb6b6214b', 'user_name': u'admin', 'read_deleted':
> u'no'} from (pid=2076) _safe_log
> /usr/lib/python2.6/site-packages/nova/openstack/common/rpc/common.py:195
> 2012-12-18 00:57:42 DEBUG nova.volume.cinder
> [req-dde3b5c5-57d0-410e-9845-246df9baed23 9e0e905b3305477587d5f85889b43955
> 87f394d760354056a584021eb6b6214b] Cinderclient connection created using URL:
> http://172.16.0.10:8776/v1/87f394d760354056a584021eb6b6214b from (pid=2076)
> cinderclient /usr/lib/python2.6/site-packages/nova/volume/cinder.py:68
> 2012-12-18 00:57:43 DEBUG nova.utils
> [req-dde3b5c5-57d0-410e-9845-246df9baed23 9e0e905b3305477587d5f85889b43955
> 87f394d760354056a584021eb6b6214b] Got semaphore "compute_resources" for
> method "update_usage"... from (pid=2076) inner
> /usr/lib/python2.6/site-packages/nova/utils.py:713
> 2012-12-18 00:57:43 ERROR nova.openstack.common.rpc.amqp [-] Exception during
> message handling
> 2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp Traceback (most
> recent call last):
> 2012-12-18 00:57:4
Re: [Openstack] It is stuck when attach the volume to the vm.
ckages/nova/exception.py", line 117, in
wrapped
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp
temp_level, payload)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib64/python2.6/contextlib.py", line 23, in __exit__
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp self.gen.next()
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/exception.py", line 92, in
wrapped
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp return
f(*args, **kw)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 181,
in decorated_function
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp pass
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib64/python2.6/contextlib.py", line 23, in __exit__
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp self.gen.next()
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 167,
in decorated_function
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp return
function(self, context, *args, **kwargs)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 202,
in decorated_function
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp
kwargs['instance']['uuid'], e, sys.exc_info())
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib64/python2.6/contextlib.py", line 23, in __exit__
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp self.gen.next()
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 196,
in decorated_function
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp return
function(self, context, *args, **kwargs)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 1945,
in attach_volume
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp context,
instance.get('uuid'), mountpoint)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib64/python2.6/contextlib.py", line 23, in __exit__
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp self.gen.next()
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 1941,
in attach_volume
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp
mountpoint, instance)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/compute/manager.py", line 1948,
in _attach_volume
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp volume =
self.volume_api.get(context, volume_id)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/nova/volume/cinder.py", line 144, in
get
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp item =
cinderclient(context).volumes.get(volume_id)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/cinderclient/v1/volumes.py", line
147, in get
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp return
self._get("/volumes/%s" % volume_id, "volume")
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/cinderclient/base.py", line 141, in
_get
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp resp,
body = self.api.client.get(url)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/cinderclient/client.py", line 138,
in get
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp return
self._cs_request(url, 'GET', **kwargs)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/cinderclient/client.py", line 126,
in _cs_request
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp **kwargs)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp File
"/usr/lib/python2.6/site-packages/cinderclient/client.py", line 109,
in request
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp raise
exceptions.from_response(resp, body)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp BadRequest:
n/a (HTTP 400)
2012-12-18 00:57:43 TRACE nova.openstack.common.rpc.amqp
On Mon, Dec 17, 2012 at 8:40 PM, Alberto Molina Coballes <
alb.mol...@gmail.com> wrote:
> Hi Lei,
>
> I was facing a similar issue with nova-volume on essex, so I'm not
> sure if this can be useful to you ...
>
> Where are you looking for errors? I found volume attach errors at
> nova-compute.log of node where instance is running
>
> I hope this help you
>
> Alberto
>
--
Lei Zhang
Blog: http://jeffrey4l.github.com
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help : https://help.launchpad.net/ListHelp
[Openstack] It is stuck when attach the volume to the vm.
Hi all, I have set up multi-host openstack env. It works well, except for cinder. When I create new volume, it is successful. But when attach it to one VM, it stuck and I can not found any error in the log file. Who can give me some advise or help about how to address this issue. Here is the current env (multi_host=True): 1 comtroller with service: nova-api, nova-scheduler, cinder-scheduler, cinder-volume, tgtd 2 compute-node with: nova-compute, cinder-volume, open-iscsi, nova-network -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] A confuse about the FlatDHCP network
Understood. Thanks guys. On Tue, Dec 11, 2012 at 2:26 AM, Vishvananda Ishaya wrote: > > On Dec 5, 2012, at 7:19 PM, Lei Zhang wrote: > > thank you very much, Vishvananda. > But I am still confused about the 192.168.0.0/24 and the 10.0.0.0/8 ip. > What means by "The addresses will be moved on to the bridge". It means > the 192.168.0.0/8 will be disappear? In my opinion, the bridged NIC > (eth1) should be worked under promiscuous mode and its IP should be > 0.0.0.0. So the eth1 should not own any IP. > > > No moved to the bridge means that the ip will move from eth1 to the bridge > > eth1 > -- no ip address > > br100 > 192.168.0.2 > 10.0.0.2 > > (for example). Nova moves the eth1 ip automatically when it creates the > bridge if eth1 has an ip. > > Vish > > But if the 192 address doesn't exist, how the compute-note communicate > with each other? Through the eth0? I have no idea. > > > On Thu, Dec 6, 2012 at 3:12 AM, Vishvananda Ishaya > wrote: > >> >> On Dec 5, 2012, at 1:53 AM, Lei Zhang wrote: >> >> Hi all, >> >> I am reading the >> http://docs.openstack.org/trunk/openstack-compute/admin/content/libvirt-flat-dhcp-networking.html, >> I got the following deploy architecture. But there are several that I am >> confused. >> >>- How and why 192.168.0.0/24 ip range exist? It is necessary or not? >>The eth1 on the each physical machine own two ip(10.0.0.0/24 and >>192.168.0.0/24)? Is that possible? In the nova-compute, the eth1 >>should be bridged by br100. the eth1 should not own any IP address, right? >> >> The addresses will be moved on to the bridge. The point of having an ip >> address is so that things like rabbit and mysql can communicate over a >> different set of addresses than the guest network. Usually this would be >> done on a separate eth device (eth2) or vlan, but I was trying to keep >> >> >> >>- In a better way, should we separate the nova-network/eth0 to the >>internet public switch for access the internet by all VMs. and the >>nova-compute/eth0 should be bind to a internal switch for admin access >> use. >>Is it right? >> >> Ideally there are three eth devices / vlans a) public (for 99 adddresses >> in diagram) b) management (for 192 addresses in diagram) c) guest (for 10 >> addresses in diagram) >> >> >> >> -- >> Lei Zhang >> >> Blog: http://jeffrey4l.github.com >> twitter/weibo: @jeffrey4l >> >> _______ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack@lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> >> > > > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Instance no route to host problem
Could you check the iptables in the vm? Whether it drop the packets on the port 80 On Thu, Dec 6, 2012 at 12:29 AM, Patrick Petit < patrick.michel.pe...@gmail.com> wrote: > Dear Stackers, > > I am running instance wordpress.WikiServer > > > $ nova list > > +--+--+++ > | ID | Name | Status > | Networks | > > +--+--+++ > | 6be47af7-2e29-4b4c-afeb-0a7f760f5970 | test2| ACTIVE > | xlcloud=172.16.1.6 | > | 5a4c552f-933c-4a06-8e6f-164176380af5 | wordpress.DatabaseServer | ACTIVE > | xlcloud=172.16.1.3 | > | ddb120d9-e1ad-444c-8490-37ecb15f500e | wordpress.WikiServer | ACTIVE > | xlcloud=172.16.1.4, 10.197.217.131 | > > +--+--+++ > > > With Security Group setup as: > > $ nova secgroup-list > > +---++ > | Name | Description >| > > +---++ > | default | default >| > > +---++ > > > $ nova secgroup-list-rules default > +-+---+-+---+--+ > | IP Protocol | From Port | To Port | IP Range | Source Group | > +-+---+-+---+--+ > | icmp| -1| -1 | 0.0.0.0/0 | | > | tcp | 22| 22 | 0.0.0.0/0 | | > | tcp | 80| 80 | 0.0.0.0/0 | | > +-+---+-+---+--+ > > I can ping and ssh through the fix or floating IP without any problem > (172.16.1.4, 10.197.217.131). > But HTTP requests on port 80 doesn't go through. > I get a "no route host" error message from wget or telnet for example. > > Ex. $ telnet 172.16.1.4 80 > Trying 172.16.1.4... > telnet: Unable to connect to remote host: No route to host. > Clearly it's not a routing problem. > > Any idea what the problem could be or hints to debug it. > > Thanks > Patrick > > > > _______ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Instance VNC Console - Failed to connect to server (code: 1006)
why the novacproxy_base_url is http://PUBLIC_IP_MANAGEMENT_NETWORK:6080/vnc_auto.html The PUBLIC_IP_MANAGEMENT_NETWORK show be physical machine. could you check - The vnc server is setup properly. use vnc client to connect the server vncview master - novncproxy is start netstate -nltp | grep 6080 On Wed, Dec 5, 2012 at 11:30 PM, Alex Vitola wrote: > I set up an environment with 1 and 2 Controler Cloud Compute Cloud. > > When I try to access the machine by the Dashboard it shows me the > following message: > > > Failed to connect to server (code: 1006) > > If I access the Direct Compute Cloud by vnc can access the > console, but not by the panel. > > > More weird if I leave a tcpdump running on both servers not > beats anything on port 5900, in any of the two servers > > ps.: I'm using the default settings in nova.conf > > > # # Novnc > novnc_enable = true > novncproxy_base_url = > http://PUBLIC_IP_MANAGEMENT_NETWORK:6080/vnc_auto.html > vncserver_proxyclient_address = 127.0.0.1 > vncserver_listen = 0.0.0.0 > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Understanding "flavors" of VM
Hi Michael, Could you send us the doc link? Thanks a lot. On Thu, Dec 6, 2012 at 6:47 AM, Michael Still wrote: > On 12/05/2012 06:59 PM, Marco CONSONNI wrote: > > > To be honest it seems like I missed something because, from your > > investigation, the storage is kept under _base. Strange. I didn't know > that. > > Hi! The following description is libvirt specific. Bearing in mind that > this code is a moving target and has been re-written at least three > times in the last year [1], it works a bit like this... > > - you request an instance using a given image > - that image is fetched to _base from glance (if its not already there) > - that image is format converted if required, and then resized to the > requested size > - the instance disk image is a copy-on-write layer on top of that > resized image in _base and is stored in the instance's directory > - the instance is booted using the COW layer > > If another instance with the same image / disk size starts, it can short > circuit the process and use the already existing image, which is cool. > > When an instance is terminated, the instance directory is removed, but > files in _base remain. > > If you have image cache management turned on, then the files in _base > are periodically cleaned up. The files in _base are also checksummed to > try and detect file corruption, although that hasn't been the most loved > feature ever implemented. > > Hope this helps, > Michael > > 1: Several times I have gone to write a blog post about how this works, > and then realized the code has changed again. > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] A confuse about the FlatDHCP network
thank you very much, Vishvananda. But I am still confused about the 192.168.0.0/24 and the 10.0.0.0/8 ip. What means by "The addresses will be moved on to the bridge". It means the 192.168.0.0/8 will be disappear? In my opinion, the bridged NIC (eth1) should be worked under promiscuous mode and its IP should be 0.0.0.0. So the eth1 should not own any IP. But if the 192 address doesn't exist, how the compute-note communicate with each other? Through the eth0? I have no idea. On Thu, Dec 6, 2012 at 3:12 AM, Vishvananda Ishaya wrote: > > On Dec 5, 2012, at 1:53 AM, Lei Zhang wrote: > > Hi all, > > I am reading the > http://docs.openstack.org/trunk/openstack-compute/admin/content/libvirt-flat-dhcp-networking.html, > I got the following deploy architecture. But there are several that I am > confused. > >- How and why 192.168.0.0/24 ip range exist? It is necessary or not? >The eth1 on the each physical machine own two ip(10.0.0.0/24 and >192.168.0.0/24)? Is that possible? In the nova-compute, the eth1 >should be bridged by br100. the eth1 should not own any IP address, right? > > The addresses will be moved on to the bridge. The point of having an ip > address is so that things like rabbit and mysql can communicate over a > different set of addresses than the guest network. Usually this would be > done on a separate eth device (eth2) or vlan, but I was trying to keep > > > >- In a better way, should we separate the nova-network/eth0 to the >internet public switch for access the internet by all VMs. and the >nova-compute/eth0 should be bind to a internal switch for admin access use. >Is it right? > > Ideally there are three eth devices / vlans a) public (for 99 adddresses > in diagram) b) management (for 192 addresses in diagram) c) guest (for 10 > addresses in diagram) > > > > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] A confuse about the FlatDHCP network
Hi all, I am reading the http://docs.openstack.org/trunk/openstack-compute/admin/content/libvirt-flat-dhcp-networking.html, I got the following deploy architecture. But there are several that I am confused. - How and why 192.168.0.0/24 ip range exist? It is necessary or not? The eth1 on the each physical machine own two ip(10.0.0.0/24 and 192.168.0.0/24)? Is that possible? In the nova-compute, the eth1 should be bridged by br100. the eth1 should not own any IP address, right? - In a better way, should we separate the nova-network/eth0 to the internet public switch for access the internet by all VMs. and the nova-compute/eth0 should be bind to a internal switch for admin access use. Is it right? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to deploy openstack automatically in your env.
Hi Tim, The module you are using is puppetlabs-openstack? Or is wrote by yourself? Here is the puppet openstack module dependency. I don't think it supported RHEL /etc/puppet/modules └─┬ puppetlabs-openstack (v1.0.3) ├── UNMET DEPENDENCY puppetlabs-cinder (>= 1.0.1) ├─┬ puppetlabs-glance (v1.0.0) │ ├── cprice404-inifile (v0.9.0) │ └─┬ puppetlabs-keystone (v1.0.1) │ └─┬ puppetlabs-mysql (v0.5.0) │ └── puppetlabs-stdlib (v3.2.0) ├─┬ puppetlabs-horizon (v1.0.0) │ ├── saz-memcached (v2.0.4) │ └─┬ puppetlabs-apache (v0.5.0-rc1) │ └── puppetlabs-firewall (v0.0.4) └─┬ puppetlabs-nova (v1.0.1) ├── UNMET DEPENDENCY puppetlabs-cinder (>= 1.0.1) ├── puppetlabs-apt (v1.1.0) ├── puppet-cinder (v1.0.1) ├── puppetlabs-rabbitmq (v2.0.2) └── duritong-sysctl (v0.0.1) On Mon, Dec 3, 2012 at 11:59 PM, Tim Bell wrote: > Lei, > > At CERN, we run our RHEL-based OpenStack instance with the puppetlabs > modules. They work very well and simplify the multi-node deployments. > > We've got around 200 hypervisors deployed with this method. > > Tim > > > -Original Message- > > From: openstack-bounces+tim.bell=cern...@lists.launchpad.net > > [mailto:openstack-bounces+tim.bell=cern...@lists.launchpad.net] On > Behalf > Of > > Derek Higgins > > Sent: 03 December 2012 16:37 > > To: Lei Zhang > > Cc: openstack@lists.launchpad.net > > Subject: Re: [Openstack] How to deploy openstack automatically in your > env. > > > > Hi Lei, > > > > On 12/03/2012 09:15 AM, Lei Zhang wrote: > > > Hi all, > > > > > > I search the internet for days and found several automatically tool. > > > Including > > > > > > * devstack > > > * puppet+pupet-openstack > > > * stackops > > > * OneStack > > > > > > But It seems that all the scripts are well tested on ubuntu not RHEL. > > > How could you guys to deploy the openstack automatically, especially > > > on RHEL. > > > >a lot of work has gone into the puppetlabs puppet modules so that they > work > > on RHEL, > > > > you can download the modules from their github account > > https://github.com/puppetlabs/ > > > > alternatively, I have been working on a tool to deploy openstack on RHEL > and > > Fedora, its still at early stages and probably a bit rough around the > edges but if > > your interested you can try it out https://github.com/fedora- > > openstack/packstack > > > > currently you can use packstack to install folsom keystone, glance, nova, > cinder, > > horizon and swift on Multiple RHEL or Fedora servers. If you want to try > it out it > > would be great to get any feedback you have. > > > > packstack uses the puppetlabs modules to apply puppet manifests to > individual > > servers without the requirement of having a puppet master server. > > > > thanks, > > Derek. > > > > > > > > -- > > > Lei Zhang > > > > > > Blog: http://jeffrey4l.github.com > > > twitter/weibo: @jeffrey4l > > > > > > > > > > > > ___ > > > Mailing list: https://launchpad.net/~openstack > > > Post to : openstack@lists.launchpad.net > > > Unsubscribe : https://launchpad.net/~openstack > > > More help : https://help.launchpad.net/ListHelp > > > > > > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Question about hostname.
Hi all, I change the machine hostname by using follow commands $ hostname puppet-master.domain.com $ sed -i 's/HOSTNAME=.*/HOSTNAME=puppet-master.domain.com/' /etc/sysconfig/network But when checking it. I got following output $ hostnamepuppet-master.domain.com $ hostname --long puppet-master.domain.com.novalocal $ hostname -A localhost If I add the ip-domain mapping to the /etc/hosts file, it became right. $ echo "10.0.0.10 puppet-master.domain.com puppet-master" >> /etc/hosts $ hostnamepuppet-master.domain.com $ hostname --longpuppet-master.domain.com $ hostname -Apuppet-master.domain.com I want to know why the hosts contents affect the hostname command -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] glance error......
-03 13:16:53 18450 TRACE glance app = loader.get_app(app_name, > global_conf=global_conf) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/PasteDeploy-1.5.0-py2.6.egg/paste/deploy/loadwsgi.py", > line 350, in get_app > 2012-12-03 13:16:53 18450 TRACE glance name=name, > global_conf=global_conf).create() > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/PasteDeploy-1.5.0-py2.6.egg/paste/deploy/loadwsgi.py", > line 710, in create > 2012-12-03 13:16:53 18450 TRACE glance return > self.object_type.invoke(self) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/PasteDeploy-1.5.0-py2.6.egg/paste/deploy/loadwsgi.py", > line 146, in invoke > 2012-12-03 13:16:53 18450 TRACE glance return fix_call(context.object, > context.global_conf, **context.local_conf) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/PasteDeploy-1.5.0-py2.6.egg/paste/deploy/util.py", > line 56, in fix_call > 2012-12-03 13:16:53 18450 TRACE glance val = callable(*args, **kw) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/glance/common/wsgi.py", line 402, in > factory > 2012-12-03 13:16:53 18450 TRACE glance return cls(routes.Mapper()) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/glance/api/v2/router.py", line 42, in > __init__ > 2012-12-03 13:16:53 18450 TRACE glance images_resource = > images.create_resource(custom_image_properties) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/glance/api/v2/images.py", line 731, in > create_resource > 2012-12-03 13:16:53 18450 TRACE glance controller = ImagesController() > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/glance/api/v2/images.py", line 47, in > __init__ > 2012-12-03 13:16:53 18450 TRACE glance self.db_api.configure_db() > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib/python2.6/site-packages/glance/db/sqlalchemy/api.py", line 94, in > configure_db > 2012-12-03 13:16:53 18450 TRACE glance connection_dict = > sqlalchemy.engine.url.make_url(sql_connection) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib64/python2.6/site-packages/SQLAlchemy-0.7.8-py2.6-linux-x86_64.egg/sqlalchemy/engine/url.py", > line 178, in make_url > 2012-12-03 13:16:53 18450 TRACE glance return > _parse_rfc1738_args(name_or_url) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib64/python2.6/site-packages/SQLAlchemy-0.7.8-py2.6-linux-x86_64.egg/sqlalchemy/engine/url.py", > line 216, in _parse_rfc1738_args > 2012-12-03 13:16:53 18450 TRACE glance return URL(name, **components) > 2012-12-03 13:16:53 18450 TRACE glance File > "/usr/lib64/python2.6/site-packages/SQLAlchemy-0.7.8-py2.6-linux-x86_64.egg/sqlalchemy/engine/url.py", > line 56, in __init__ > 2012-12-03 13:16:53 18450 TRACE glance self.port = int(port) > 2012-12-03 13:16:53 18450 TRACE glance ValueError: invalid literal for > int() with base 10: 'glance' > 2012-12-03 13:16:53 18450 TRACE glance > 2012-12-03 13:16:53 26986 ERROR eventlet.wsgi.server [-] Removing dead > child 18450 > 2012-12-03 13:16:53 18452 DEBUG glance.common.config [-] Loading > glance-api-keystone from /etc/glance/glance-api-paste.ini load_paste_app > /usr/lib/python2.6/site-packages/glance/common/config.py:184 > 2012-12-03 13:16:54 18452 CRITICAL glance [-] invalid literal for int() > with base 10: 'glance' > > This messages repeats frequently. > > The registry logs doesn't show any error or problem. > > I searched for the error but didn't get a "solution" for my problem. > > Do you need more information? > > Any hints about the problem? > > regards > Chris > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l <>___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to deploy openstack automatically in your env.
Thanks all guys. Finally, I will try the puppet on the RHEL today and check whether it works. On Mon, Dec 3, 2012 at 11:59 PM, Tim Bell wrote: > Lei, > > At CERN, we run our RHEL-based OpenStack instance with the puppetlabs > modules. They work very well and simplify the multi-node deployments. > > We've got around 200 hypervisors deployed with this method. > > Tim > > > -Original Message- > > From: openstack-bounces+tim.bell=cern...@lists.launchpad.net > > [mailto:openstack-bounces+tim.bell=cern...@lists.launchpad.net] On > Behalf > Of > > Derek Higgins > > Sent: 03 December 2012 16:37 > > To: Lei Zhang > > Cc: openstack@lists.launchpad.net > > Subject: Re: [Openstack] How to deploy openstack automatically in your > env. > > > > Hi Lei, > > > > On 12/03/2012 09:15 AM, Lei Zhang wrote: > > > Hi all, > > > > > > I search the internet for days and found several automatically tool. > > > Including > > > > > > * devstack > > > * puppet+pupet-openstack > > > * stackops > > > * OneStack > > > > > > But It seems that all the scripts are well tested on ubuntu not RHEL. > > > How could you guys to deploy the openstack automatically, especially > > > on RHEL. > > > >a lot of work has gone into the puppetlabs puppet modules so that they > work > > on RHEL, > > > > you can download the modules from their github account > > https://github.com/puppetlabs/ > > > > alternatively, I have been working on a tool to deploy openstack on RHEL > and > > Fedora, its still at early stages and probably a bit rough around the > edges but if > > your interested you can try it out https://github.com/fedora- > > openstack/packstack > > > > currently you can use packstack to install folsom keystone, glance, nova, > cinder, > > horizon and swift on Multiple RHEL or Fedora servers. If you want to try > it out it > > would be great to get any feedback you have. > > > > packstack uses the puppetlabs modules to apply puppet manifests to > individual > > servers without the requirement of having a puppet master server. > > > > thanks, > > Derek. > > > > > > > > -- > > > Lei Zhang > > > > > > Blog: http://jeffrey4l.github.com > > > twitter/weibo: @jeffrey4l > > > > > > > > > > > > ___ > > > Mailing list: https://launchpad.net/~openstack > > > Post to : openstack@lists.launchpad.net > > > Unsubscribe : https://launchpad.net/~openstack > > > More help : https://help.launchpad.net/ListHelp > > > > > > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] How to deploy openstack automatically in your env.
It is a wired thing that the openstack is a python project. But many tools for it are build on ruby? On Mon, Dec 3, 2012 at 5:44 PM, Joe Breu wrote: > Hi Lei, > > We have chef cookbooks to install Openstack located at > http://github.com/rcbops/chef-cookbooks. > > --- > Joseph Breu > Deployment Engineer > Rackspace Private Cloud > 210-312-3508 > > On Dec 3, 2012, at 9:15 AM, Lei Zhang wrote: > > Hi all, > > I search the internet for days and found several automatically tool. > Including > >- devstack >- puppet+pupet-openstack >- stackops >- OneStack > > But It seems that all the scripts are well tested on ubuntu not RHEL. How > could you guys to deploy the openstack automatically, especially on RHEL. > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] How to deploy openstack automatically in your env.
Hi all, I search the internet for days and found several automatically tool. Including - devstack - puppet+pupet-openstack - stackops - OneStack But It seems that all the scripts are well tested on ubuntu not RHEL. How could you guys to deploy the openstack automatically, especially on RHEL. -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] The list of the backend storage for openstack.
Yes, Ceph is good choice. Openstack Team is very intresting about it. And DreamHost is also trying the Ceph. Just now, I think only Swift, Ceph, Sheepdog is the first choice in the list I made above. (I know some companys are using sheeldog as the storage in product env). On Thu, Nov 29, 2012 at 7:57 PM, JuanFra Rodriguez Cardoso < juanfra.rodriguez.card...@gmail.com> wrote: > Ceph has a bright future as OpenStack Storage backend. Although Ceph's > guys do not recommend to use CephFS for production environments, Ceph RBD > seems a reliable alternative to S3 in Glance and LVM in Cinder. > Links about this option (Ceph+Openstack): > - Great Sebastian's post: > http://www.sebastien-han.fr/blog/2012/06/10/introducing-ceph-to-openstack/ > > - http://ceph.com/docs/master/rbd/rbd-openstack/ > > Regards! > JuanFra. > > > 2012/11/29 Lei Zhang > >> explaination > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] The list of the backend storage for openstack.
Hi JuanFra, First of all , thanks very much. I saw this page recently. But it is just a brief of explaination about thress kinds of storage. And It isn't helpful for which product should I choose depend on my situation. I want some best practice or guid lines. On Thu, Nov 29, 2012 at 5:40 PM, JuanFra Rodriguez Cardoso < juanfra.rodriguez.card...@gmail.com> wrote: > Hi Lei: > > I think Openstack manual shows a clear explanation for the differents > kinds of storage. > Check out this link ( > http://docs.openstack.org/essex/openstack-compute/install/apt/content/terminology-storage.html > ) > Hope it clarifies you. > > Regards, > JuanFra > > > > 2012/11/29 Lei Zhang > >> thinese > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] The list of the backend storage for openstack.
@Zhiteng(I presume you are a thinese, right? ;) ), Thank you very much. I catch your meaning. On Thu, Nov 29, 2012 at 3:49 PM, Huang Zhiteng wrote: > I think the short answer is it depends. It really depends on what > kind of user needs you want to use storage system to fulfill. There's > no best solution but in each specific case, there can be one most > suitable solution for the requirement. I know this may not be the > answer you are seeking but I'd say start looking at the problem you > are solving and figure out what kind of specific needs the problem has > for storage, then you may easily narrow down # of candidates. > > On Thu, Nov 29, 2012 at 3:36 PM, Lei Zhang > wrote: > > Anybody can help?Could you give me some "key term" or links that I can > find > > some article/book about this. I am very confused about the storage in the > > Openstack. > > > > > > On Wed, Nov 28, 2012 at 2:48 PM, Lei Zhang > wrote: > >> > >> Hi all , > >> > >> Here is my understanding about the stroage in the openstack, I am very > >> happy about that who can figure out the wrong meaning or add your > comment > >> for this. > >> > >> Right now, there are two main kinds of storage needed by Openstack. One > is > >> for Image, the other one is for Volume. These two support many kinds of > >> storage. > >> > >> Image ( Glance servicer ): > >> > >> File > >> > >> NAS > >> > >> CIFS > >> NFS > >> FTP > >> ... > >> > >> SAN > >> > >> ISCSI > >> AoE > >> ... > >> > >> Local > >> > >> HTTP > >> RBD(Ceph) > >> S3 > >> Swift > >> > >> Volume (Cinder/nova-volume) > >> > >> SAN > >> > >> ISCSI > >> AoE > >> > >> > >> Local > >> LVM > >> > >> RBD (Ceph) > >> Sheepdog > >> > >> > >> Questions: > >> 1. What's the position for swift. It is just the image container for the > >> glance server? > >> 2. Is there any rules when making choice? > >> 2. What's your tend to choice in so many solution? and why? > >> > >> > >> -- > >> Lei Zhang > >> > >> Blog: http://jeffrey4l.github.com > >> twitter/weibo: @jeffrey4l > >> > >> > > > > > > > > -- > > Lei Zhang > > > > Blog: http://jeffrey4l.github.com > > twitter/weibo: @jeffrey4l > > > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > > > > > > -- > Regards > Huang Zhiteng > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
Hi Sébastien, Good ideas. There is a very tricky way to solve this problem. In addition, The step 2 and 3 can be left out. Because the instance snapshot can be marked public. Then we can lanuch instance from the snapshot in another tenant. Anothe Question, How about when the instance is attached with volume? How to migrate the Volume? It seems that the Volume can not be marked publice? Do you have any ideas? On Thu, Nov 29, 2012 at 3:38 PM, Sébastien Han wrote: > Hi, > > What I will do to achieve what you want: > > _ take a snapshot of your instance > _ export the snapshot from wherever it's stored (filesystem for instance) > _ import it to Glance, make the image to public or assign it to the tenant > (not 100% sure if the latest is possible though...) > _ run a new vm with the based image previously created > > Some steps could be avoided like step 2 and 3. You could use the admin > user to snapshot and then run the snapshot from the other tenan. However > it's NOT recommended. > > Cheers. > > On Nov 29, 2012 7:47 AM, "Tim Bell" wrote: > > > > > > > > We were also interested in this function but could not find an easy way > to do it. > > > > > > > > The operation becomes more complex when there are attached volumes and > potentially different permissions between the two projects. > > > > > > > > Tim > > > > > > > > From: openstack-bounces+tim.bell=cern...@lists.launchpad.net [mailto: > openstack-bounces+tim.bell=cern...@lists.launchpad.net] On Behalf Of Lei > Zhang > > Sent: 29 November 2012 06:09 > > To: openstack@lists.launchpad.net > > Subject: [Openstack] Is there any way to migrate the Instance between > the projects/tenants? > > > > > > > > Hi all, > > > > > > > > As the subject say, is there any way to do this? I search the Internet > and only found the migration bewteen two physical machine. > > > > > > thanks > > > > -- > > > > Lei Zhang > > > > > > > > Blog: http://jeffrey4l.github.com > > > > twitter/weibo: @jeffrey4l > > > > > > > > > > ___ > > Mailing list: https://launchpad.net/~openstack > > Post to : openstack@lists.launchpad.net > > Unsubscribe : https://launchpad.net/~openstack > > More help : https://help.launchpad.net/ListHelp > > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] The list of the backend storage for openstack.
Anybody can help?Could you give me some "key term" or links that I can find some article/book about this. I am very confused about the storage in the Openstack. On Wed, Nov 28, 2012 at 2:48 PM, Lei Zhang wrote: > Hi all , > > Here is my understanding about the stroage in the openstack, I am very > happy about that who can figure out the wrong meaning or add your comment > for this. > > Right now, there are two main kinds of storage needed by Openstack. One is > for Image, the other one is for Volume. These two support many kinds of > storage. > > Image ( Glance servicer ): > > File > > NAS > > CIFS > NFS > FTP > ... > > SAN > > ISCSI > AoE > ... > > Local > > HTTP > RBD(Ceph) > S3 > Swift > > Volume (Cinder/nova-volume) > > SAN > > ISCSI > AoE > > > Local > LVM > > RBD (Ceph) > Sheepdog > > > Questions: > 1. What's the position for swift. It is just the image container for the > glance server? > 2. Is there any rules when making choice? > 2. What's your tend to choice in so many solution? and why? > > > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
First of all, I think this feature is reasonable. In my scenario, I have two projects. One is a test env and another is production env. I use different projects to isolate the two env. All should I do is to prepare in the test env. When all is ok, I can push it to the production env. @Tim, you are right. The permissions is a big potentail issue. It should be a complex procedure when migrate instances between projects/tenants? Maybe I am using a bad solution for my scenario. So could anybody give me some advise how to handle this situation? On Thu, Nov 29, 2012 at 2:46 PM, Tim Bell wrote: > ** ** > > We were also interested in this function but could not find an easy way to > do it. > > ** ** > > The operation becomes more complex when there are attached volumes and > potentially different permissions between the two projects. > > ** ** > > Tim > > ** ** > > *From:* openstack-bounces+tim.bell=cern...@lists.launchpad.net [mailto: > openstack-bounces+tim.bell=cern...@lists.launchpad.net] *On Behalf Of *Lei > Zhang > *Sent:* 29 November 2012 06:09 > *To:* openstack@lists.launchpad.net > *Subject:* [Openstack] Is there any way to migrate the Instance between > the projects/tenants? > > ** ** > > Hi all, > > ** ** > > As the subject say, is there any way to do this? I search the Internet and > only found the migration bewteen two physical machine. > > > > > thanks > > -- > > Lei Zhang > > ** ** > > Blog: http://jeffrey4l.github.com > > twitter/weibo: @jeffrey4l > > ** ** > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Is there any way to migrate the Instance between the projects/tenants?
Hi all, As the subject say, is there any way to do this? I search the Internet and only found the migration bewteen two physical machine. thanks -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] The list of the backend storage for openstack.
Hi all , Here is my understanding about the stroage in the openstack, I am very happy about that who can figure out the wrong meaning or add your comment for this. Right now, there are two main kinds of storage needed by Openstack. One is for Image, the other one is for Volume. These two support many kinds of storage. Image ( Glance servicer ): File NAS CIFS NFS FTP ... SAN ISCSI AoE ... Local HTTP RBD(Ceph) S3 Swift Volume (Cinder/nova-volume) SAN ISCSI AoE Local LVM RBD (Ceph) Sheepdog Questions: 1. What's the position for swift. It is just the image container for the glance server? 2. Is there any rules when making choice? 2. What's your tend to choice in so many solution? and why? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] LVM over LVM is acceptable?
I think the extend the size the volume is reasonable and easy implementable. But the shrink of the LV is very dangerous. So add the feature of extends the Volume size for the Cinder is OK. Could you guys agree with me? On Wed, Nov 28, 2012 at 12:56 PM, John Griffith wrote: > > > On Tue, Nov 27, 2012 at 7:19 PM, Matt Joyce > wrote: > >> other hazard to mention. >> >> live fs resizes tend to be sketchy. the growing of a live filesystem is >> possible and tends to work. but shrinking for obvious reasons is very >> dangerous and can be wrought with peril. also cannot be done live as far >> as I know for any ext filesystem. >> >> -matt >> >> On Tue, Nov 27, 2012 at 6:13 PM, Lei Zhang wrote: >> >>> Got it. >>> >>> Could Cinder can check the created volume? I can not find any command >>> like cinder update. I try to extends the volume by lvextend, but data >>> in the cinder db doesn't update. So when I delete the changed volume, it >>> raise error. >>> >>> On Tue, Nov 27, 2012 at 12:34 PM, Dean Troyer >>> wrote: >>> >>> On Mon, Nov 26, 2012 at 8:04 PM, Lei Zhang >>>> wrote: >>>> > Another question. If the vm treat the vol-0 as a normal block device, >>>> is it >>>> > necessary to partition? If not, the fdisk will show Disk /dev/vdb >>>> doesn't >>>> > contain a valid partition table. If yes, how can I extend the volume >>>> on the >>>> > vm? It seems that treat the volume as a normal block device is not a >>>> good >>>> > idea. >>>> >>>> It is not necessary to partition the device (vdb) inside com-0. If >>>> you use it as an LVM physical device (PV) inside com-0 then pvresize >>>> will update the metadata o recognize the new size inside com-0 after >>>> you lvextend the vol-0 in the host. >>>> >>>> If you do partition /dev/vdb and don't use LVM in com-0 it is still >>>> possible to grow a partition, but you'll have to delete and re-create >>>> the last partition to get com-0 to recognize the additional space. >>>> And you'd also need to do the filesystem resize too. >>>> >>>> Nested LVM can be tricky but if you are careful to keep the layers >>>> separated it can work. >>>> >>>> dt >>>> >>>> -- >>>> >>>> Dean Troyer >>>> dtro...@gmail.com >>>> >>> -- >>> Lei Zhang >>> >>> Blog: http://jeffrey4l.github.com >>> twitter/weibo: @jeffrey4l >>> >>> >>> ___ >>> Mailing list: https://launchpad.net/~openstack >>> Post to : openstack@lists.launchpad.net >>> Unsubscribe : https://launchpad.net/~openstack >>> More help : https://help.launchpad.net/ListHelp >>> >>> >> >> ___ >> Mailing list: https://launchpad.net/~openstack >> Post to : openstack@lists.launchpad.net >> Unsubscribe : https://launchpad.net/~openstack >> More help : https://help.launchpad.net/ListHelp >> >> > There is no functionality to re-size a Cinder Volume. > > John > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] LVM over LVM is acceptable?
Got it. Could Cinder can check the created volume? I can not find any command like cinder update. I try to extends the volume by lvextend, but data in the cinder db doesn't update. So when I delete the changed volume, it raise error. On Tue, Nov 27, 2012 at 12:34 PM, Dean Troyer wrote: On Mon, Nov 26, 2012 at 8:04 PM, Lei Zhang wrote: > > Another question. If the vm treat the vol-0 as a normal block device, is > it > > necessary to partition? If not, the fdisk will show Disk /dev/vdb doesn't > > contain a valid partition table. If yes, how can I extend the volume on > the > > vm? It seems that treat the volume as a normal block device is not a good > > idea. > > It is not necessary to partition the device (vdb) inside com-0. If > you use it as an LVM physical device (PV) inside com-0 then pvresize > will update the metadata o recognize the new size inside com-0 after > you lvextend the vol-0 in the host. > > If you do partition /dev/vdb and don't use LVM in com-0 it is still > possible to grow a partition, but you'll have to delete and re-create > the last partition to get com-0 to recognize the additional space. > And you'd also need to do the filesystem resize too. > > Nested LVM can be tricky but if you are careful to keep the layers > separated it can work. > > dt > > -- > > Dean Troyer > dtro...@gmail.com > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] LVM over LVM is acceptable?
Understood. Another question. If the vm treat the vol-0 as a normal block device, is it necessary to partition? If not, the fdisk will show Disk /dev/vdb doesn't contain a valid partition table. If yes, how can I extend the volume on the vm? It seems that treat the volume as a normal block device is not a good idea. On Tue, Nov 27, 2012 at 4:52 AM, Dean Troyer wrote: > On Mon, Nov 26, 2012 at 6:51 AM, Lei Zhang > wrote: > > I creat a lvm named vol-0 and attach it to the machine com-0. After a > period > > of time, the vol-0 is full and I want to extend it. At now, I have two > > solutions. > > Nested LVM gets tricky so I want to be sure I am clear on your setup: > > * Your host has a logical volume (LV) 'vol-0' that is attached to a VM > named 'com-0'. > * com-0 uses the attached logical volume (vol-0 on the host) as a > physical volume (PV) for its own LVM configuration. > > > Because the vol-0 is manage by the LVM on the hoster. So I can extend the > > size of it by using lvextend. But I meet that the vm(com-0) can not be > aware > > this. Should I make some extrac operations like reseize2fs? I have no > ideas. > > If vol-0 is used directly as a block device with a filesystem on it > (older Xen installs often did this) then a resize2fs is sufficient to > recognize the additional space. It appears this is _not_ your > configuration, correct? > > If vol-0 is used as a PV in com-0 then you can run pvresize inside > com-0 and have com-0's LVM recognize the additional space. > > > In the vm (com-0), I can treat the vol-0 as a normal block device and > create > > lvm on it. When need more space, the hoster can "plug" a new lvm > > device(vol-1) on it. In the vm, I can add it to the lvm. But I found > another > > Correct, this is another way to increase the space available to > cpm-0's volume groups. > > > problem. Because the vol-* is not real block device, when I create lvm on > > it, the hoster is aware of it. The result is that on the hoster, another > PV > > is created base on a lvm partition like bellow. I want to know, it is > > acceptable? > > To fix this you need to adjust the filter on your host's > /etc/lvm/lvm.conf. You can either reject any physical volumes found > for VMs: > > filter = ["r|/dev/cinder-volumes/.*", "a/.*/"] # reject cinder > devices, alow everything else > > or you can only look at particular divice files for physical devices: > > filter = ["a/dev/sd.*"] # look only at SCSI disks for physical > devices > > That last one will likely need adjusting for your local block device names. > > dt > > -- > > Dean Troyer > dtro...@gmail.com > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] LVM over LVM is acceptable?
Hi all, I have a scenario for using cinder with tgtd over the lvm. I creat a lvm named vol-0 and attach it to the machine com-0. After a period of time, the vol-0 is full and I want to extend it. At now, I have two solutions. 1. Because the vol-0 is manage by the LVM on the hoster. So I can extend the size of it by using lvextend. But I meet that the vm(com-0) can not be aware this. Should I make some extrac operations like reseize2fs? I have no ideas. 2. In the vm (com-0), I can treat the vol-0 as a normal block device and create lvm on it. When need more space, the hoster can "plug" a new lvm device(vol-1) on it. In the vm, I can add it to the lvm. But I found another problem. Because the vol-* is not real block device, when I create lvm on it, the hoster is aware of it. The result is that on the hoster, another PV is created base on a lvm partition like bellow. I want to know, it is acceptable? --- Physical volume --- PV Name /dev/cinder-volumes/volume-ddac25fc-4cc2-4167-be12-4cef2438de0b VG Name data PV Size 30.00 GiB / not usable 4.00 MiB Allocatable yes PE Size 4.00 MiB Total PE 7679 Free PE 2559 Allocated PE 5120 PV UUID zChRw9-nVru-rF5o-YYUx-hcIa-Zen4-Ff5IOf Besides these two solution ( with issue ;) ), could you give me some better suggestion? -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] The Image binding the netwrok to the eth1 in default
Hi Razique, Yes, you are right. After I comment all the rules in the file /etc/udev/rules.d/70-persistent-net.rule and reboot the vm again, the vm works as my expected. thanks again On Mon, Nov 26, 2012 at 7:58 PM, Razique Mahroua wrote: > Hei Lei, > I suggest udev' persistent rules are implied here > (/etc/udev/rules.d/70-persistent-net.rule) > can you compare the mac address of the IF against the file. Try to remove > it and see if eth0 gets address > > Regards, > Razique > *Nuage & Co - Razique Mahroua** * > razique.mahr...@gmail.com > > > Le 26 nov. 2012 à 12:47, Lei Zhang a écrit : > > Hi all, > > I had created a redhat image by using kvm-img in qcow2 format. And it is > uploaded to the openstack successfully. > > But when I lanuch a instance and access it over the vnc, the network(in > default, just the eth0 device is up on boot) is not startup. I check the > the vm by using ip link and got following output > > 1: lo: mtu 16436 qdisc noqueue state UNKNOWN > link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 > 2: eth1: mtu 1500 qdisc pfifo_fast state UP > qlen 1000 > link/ether fa:16:3e:78:44:10 brd ff:ff:ff:ff:ff:ff > > It seems that the network bind itself to the second device. I want to know > why it happeded and how to fix this? > > here is other config file > > */etc/sysconfig/network-scripts/ifcfg-eth0 in the Vm* > > DEVICE="eth0" > BOOTPROTO="dhcp" > #HWADDR="52:54:00:12:34:56" > #NM_CONTROLLED="yes" > ONBOOT="yes" > TYPE="Ethernet" > #UUID="e11caf36-bc22-48ee-8dbe-321043da29a5" > > *there is not /etc/sysconfig/network-scripts/ifcfg-eth1 file* > > *the libvirt.xml for the vm* > > > > 6309376e-6964-46d0-b8a4-7724dead39ff > instance-0017 > 2097152 > 1 > > hvm > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > thx > -- > Lei Zhang > > Blog: http://jeffrey4l.github.com > twitter/weibo: @jeffrey4l > > ___ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp > > > -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l <>___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Citrix Xen Server + XenApi Failed to start nova-compute service
Hi All, I am tring install the openstack with Xen Server following the guide of http://wiki.openstack.org/XenServer/XenXCPAndXenServer. But I run into error when start the nova-compute service . Here is the error message. Who can figure out why it happended and how to fix this issue. *Error Message* root@ubuntu:/etc/nova# nova-compute 2012-11-21 01:33:47 CRITICAL nova [-] 'get_connection' 2012-11-21 01:33:47 TRACE nova Traceback (most recent call last): 2012-11-21 01:33:47 TRACE nova File "/usr/bin/nova-compute", line 47, in 2012-11-21 01:33:47 TRACE nova server = service.Service.create(binary='nova-compute') 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/service.py", line 241, in create 2012-11-21 01:33:47 TRACE nova report_interval, periodic_interval) 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/service.py", line 150, in __init__ 2012-11-21 01:33:47 TRACE nova self.manager = manager_class(host=self.host, *args, **kwargs) 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/compute/manager.py", line 204, in __init__ 2012-11-21 01:33:47 TRACE nova utils.import_object(compute_driver), 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/utils.py", line 89, in import_object 2012-11-21 01:33:47 TRACE nova return cls() 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/virt/connection.py", line 76, in get_connection 2012-11-21 01:33:47 TRACE nova conn = xenapi_conn.get_connection(read_only) 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/virt/xenapi_conn.py", line 144, in get_connection 2012-11-21 01:33:47 TRACE nova return XenAPIConnection(url, username, password) 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/virt/xenapi_conn.py", line 157, in __init__ 2012-11-21 01:33:47 TRACE nova self._vmops = vmops.VMOps(self._session, self._product_version) 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/virt/xenapi/vmops.py", line 160, in __init__ 2012-11-21 01:33:47 TRACE nova self.firewall_driver = fw_class(xenapi_session=self._session) 2012-11-21 01:33:47 TRACE nova File "/usr/lib/python2.7/dist-packages/nova/virt/libvirt/firewall.py", line 227, in __init__ 2012-11-21 01:33:47 TRACE nova self.nwfilter = NWFilterFirewall(kwargs['get_connection']) 2012-11-21 01:33:47 TRACE nova KeyError: 'get_connection' 2012-11-21 01:33:47 TRACE nova *nova.conf* connection_type=xenapi xenapi_connection_password=*** xenapi_connection_url=http://192.168.0.98 xenapi_connection_username=root -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
