Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?

2013-07-16 Thread Matt Joyce
There is a specific need for this in incident response for some SOC teams. They may need to isolate a compromised instance to a more secure and security controlled tenancy. I think this would be an advantageous blueprint for next release. -Matt On Tue, Jul 16, 2013 at 9:46 AM, Lloyd Dewolf

Re: [Openstack] How to Install OpenStack ???????????

2013-07-12 Thread Matt Joyce
You know, I am surprised none of us OpenStack distribution vendors have taken a page from 1999 and started selling OpenStack grizzly/havana books with installation CDs for our distribution in the back. -Matt On Fri, Jul 12, 2013 at 11:15 AM, Joshua McKenty jos...@pistoncloud.comwrote: Tiny

Re: [Openstack] OpenStack Monitoring with Nagios

2013-06-28 Thread Matt Joyce
Ceilometer is authoritative data taken directly from message bus queries and keeps a back history, as opposed to nagios which does periodic finite state checks. Ceilometer is intended to be a log of transactions necessary to provide billing information. Or potentially an audit log. Nagios is

Re: [Openstack] The OpenStack Community Welcomes Developers in All Programming Languages

2013-06-12 Thread Matt Joyce
I am not sure we want to allow python developers... those guys have a PEP for everything. Can't even sit down to a slice of cake without a PEP to tell them how to cut it and a CI environment to make sure their slice is within those PEP defined tolerances. I've had it up to here with those

Re: [Openstack] Customer Portal Security from Hackers

2013-05-20 Thread Matt Joyce
Chris, Someone will probably denounce this email as heresy for using this analogy, but so be it. Try to think of OpenStack as you would a motor vehicle's engine. It has many components that all tie together to allow the engine to operate. Sometimes it has different configurations such as having

Re: [Openstack] DevStack Question

2013-05-12 Thread Matt Joyce
most folks would use puppet or chef to accomplish that task. On Sun, May 12, 2013 at 2:46 PM, Arindam Choudhury arin...@live.com wrote: Hi, If the script is updated to use cloud repository instead of source code, it can be used as an automatic installer. Have anybody done it yet? Regards,

Re: [Openstack] [OpenStack Marketing] New code name for networks

2013-05-12 Thread Matt Joyce
to say nothing of the localization that will need complete re-translating. On Sun, May 12, 2013 at 6:27 PM, Sean Dague s...@dague.net wrote: On 05/12/2013 09:14 AM, Mark McLoughlin wrote: On Sat, 2013-05-11 at 19:50 +, Jason Smith wrote: Hello, I understand why we had to give up

Re: [Openstack] New code name for networks

2013-05-11 Thread Matt Joyce
Tyronosaurus Rex Optimus Prime Super Happy Fun Network Times A.N.A.L. - Automated Networking and Logistics And with that I am out of ideas. On Sat, May 11, 2013 at 12:58 PM, Davanum Srinivas dava...@gmail.comwrote: Lattice -- dims On Sat, May 11, 2013 at 3:52 PM, Mark Turner

Re: [Openstack] I release naming (calling APAC community)

2013-05-09 Thread Matt Joyce
'Impossible' might be a good name... seeing as how impossible it is becoming to find a word beginning with I in the region. On Thu, May 9, 2013 at 12:04 PM, John Wong gokoproj...@gmail.com wrote: Good point. A long time ago we used to call Beijing as Peking, but the journalists now will

Re: [Openstack] I release naming (calling APAC community)

2013-05-09 Thread Matt Joyce
”, it should be easier to give a nameJ ** ** -- Shane Wang *From:* Openstack [mailto:openstack-bounces+shane.wang= intel@lists.launchpad.net] *On Behalf Of *Rajesh Vellanki *Sent:* Friday, May 10, 2013 3:50 AM *To:* Atul Jha; Matt Joyce; John Wong *Cc:* Thierry Carrez; openstack

Re: [Openstack] Related Projects

2013-05-03 Thread Matt Joyce
This is going to come off as a bit of a rant. Pardon me. I feel it needs saying. There's a few ways to look at what OpenStack is. It's an IaaS solution. It's a cloud solution. But at it's heart, core to the design principles of OpenStack development ideology it is a collection of tools

Re: [Openstack] Tamanho de partição - qcow2

2013-03-13 Thread Matt Joyce
talvez posse usar resize2fs? nao sei. 2013/3/13 JuanFra Rodriguez Cardoso juanfra.rodriguez.card...@gmail.com This link could be useful for you: http://kashyapc.wordpress.com/2013/02/24/novas-way-of-using-a-disk-image-when-it-boots-a-guest-for-first-time/ JuanFra 2013/3/13 Alex Vitola

Re: [Openstack] PAM authentication for Folsom Keystone

2013-02-26 Thread Matt Joyce
Oops misunderstood. Was thinking PAM - Keystone. Sorry On Tue, Feb 26, 2013 at 12:25 PM, Matt Joyce matt.jo...@cloudscaling.comwrote: I did it. Works fine. But SSH won't work without an NSS service. SSH clients perform a getpwnam() before passing auth creds to PAM. I'll ask if I can

Re: [Openstack] PAM authentication for Folsom Keystone

2013-02-26 Thread Matt Joyce
I did it. Works fine. But SSH won't work without an NSS service. SSH clients perform a getpwnam() before passing auth creds to PAM. I'll ask if I can publish my code. On Tue, Feb 26, 2013 at 12:15 PM, Joshua j...@root.bz wrote: I am trying to integrate Folsom Keystone PAM authentication. I

Re: [Openstack] Name it Hood!

2013-01-24 Thread Matt Joyce
I think we all know M is for Manhattan. On Thu, Jan 24, 2013 at 12:07 PM, Sean Dague sda...@linux.vnet.ibm.comwrote: On 01/24/2013 02:50 PM, Monty Taylor wrote: Hey all! Here's my pitch for Hood: a) It's the tallest mountain in Oregon, and honestly, it's a pretty kick-ass mountain in

Re: [Openstack] Ubuntu Grizzly packages for 12.10

2013-01-24 Thread Matt Joyce
Cloud archive is only following the LTS release. LTS means long term support. So you shouldn't be standardizing on a NON-LTS release unless you intend to follow the ubuntu update cycle. You'll end up suffering a great deal by not doing so. =/ -Matt On Wed, Jan 23, 2013 at 8:32 AM, Blair

Re: [Openstack] [Ceilometer] Ganglia Ceilometer integration

2013-01-08 Thread Matt Joyce
I've had bad luck with ganglia. It tends to self pollute over time, especially in a lossy environment such as an elastic cloud. On Tue, Jan 8, 2013 at 7:23 AM, daniel_ley...@dell.com wrote: Shengjie, I've been thinking quite a lot about that recently. I was considering putting up a

Re: [Openstack] Create tenant with RESTful api

2012-12-14 Thread Matt Joyce
Is there a reason you are not using the keystone client api? On Fri, Dec 14, 2012 at 10:58 AM, Guillermo Alvarado guillermoalvarad...@gmail.com wrote: Hi Everyone, Please, someone can give me information about how to create a tenant with a REST request. I am trying to develop a module to

Re: [Openstack] Create tenant with RESTful api

2012-12-14 Thread Matt Joyce
https://github.com/rackspace/php-opencloud might want to check that out. On Fri, Dec 14, 2012 at 11:05 AM, Guillermo Alvarado guillermoalvarad...@gmail.com wrote: Because I am using PHP, so I am making the requests with REST. 2012/12/14 Matt Joyce matt.jo...@cloudscaling.com

Re: [Openstack] Vlans and openstack.

2012-12-12 Thread Matt Joyce
Check your switch. Make sure the ports are trunked. Make sure they have access to the vlans desired. All ports. On Wed, Dec 12, 2012 at 10:33 AM, Andrew Holway a.hol...@syseleven.dewrote: Hi, I have two hosts in my openstack setup: blade03 and blade04. I have set up my openstack with

Re: [Openstack] [SWIFT] Upgrade from 1.4.8 to 1.7.4 question

2012-12-11 Thread Matt Joyce
My guess would be that it would work. The keystone API hasn't changed massively between essex and folsom. I have not tested. But I am fairly confident it would work just fine. -Matt On Tue, Dec 11, 2012 at 2:25 PM, Alejandro Comisario alejandro.comisa...@mercadolibre.com wrote: Hi guys, we

Re: [Openstack] Nova metadata service

2012-12-10 Thread Matt Joyce
It is not a necessity, but it is very useful. Also look at config drive. -Matt On Mon, Dec 10, 2012 at 5:33 PM, Joshua Harlow harlo...@yahoo-inc.comwrote: Its really just a binary that activates https://github.com/openstack/nova/blob/master/nova/api/metadata/handler.py#L100 Its a way to

Re: [Openstack] Dead walk from forum

2012-12-07 Thread Matt Joyce
Well you can present as many virtual resources as your hypervisor will handle. This usually can exceed physical resources. In common terminology that's called over subscribing. In terms of sharing resources between many individual physical nodes, you are now entering the realm of memory / bus

Re: [Openstack] LVM over LVM is acceptable?

2012-11-27 Thread Matt Joyce
other hazard to mention. live fs resizes tend to be sketchy. the growing of a live filesystem is possible and tends to work. but shrinking for obvious reasons is very dangerous and can be wrought with peril. also cannot be done live as far as I know for any ext filesystem. -matt On Tue, Nov

Re: [Openstack] LVM over LVM is acceptable?

2012-11-26 Thread Matt Joyce
On Mon, Nov 26, 2012 at 12:52 PM, Dean Troyer dtro...@gmail.com wrote: On Mon, Nov 26, 2012 at 6:51 AM, Lei Zhang zhang.lei@gmail.com wrote: I creat a lvm named vol-0 and attach it to the machine com-0. After a period of time, the vol-0 is full and I want to extend it. At now, I have

Re: [Openstack] Vietnam OpenStack Community

2012-11-25 Thread Matt Joyce
Congrats! And welcome to the global community! -Matt On Sun, Nov 25, 2012 at 11:28 PM, Hang Tran hang.t...@dtt.vn wrote: To whom it may concern As introduced, we would like to register to join this General Mailing List and OpenStack community. At the moment, we are excitingly

Re: [Openstack] Ubuntu Openstack activity update

2012-11-22 Thread Matt Joyce
If we have changes we'd like to submit for review to the cloud archive packages. What is the correct method for doing so? -Matt On Thu, Nov 22, 2012 at 8:19 AM, James Page james.p...@ubuntu.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi All As Grizzly is about to release

Re: [Openstack] Finding version of keystone service

2012-10-26 Thread Matt Joyce
dpkg -p keystone | grep Version should show you in the version tag example: 2012.2 is folsom 2012.1 is essex -Matt On Fri, Oct 26, 2012 at 2:29 PM, Ahmed Al-Mehdi ah...@coraid.com wrote: Hi Joe, I did a apt-get install keystone, which I am as assuming installed both, is that right?

Re: [Openstack] [ceilometer] Potential New Use Cases

2012-10-24 Thread Matt Joyce
I think a good deal of ceilometer's messaging and event tracking could additionally be used for event audit logging. -Matt On Wed, Oct 24, 2012 at 2:35 PM, Julien Danjou jul...@danjou.info wrote: On Wed, Oct 24 2012, Dan Dyer wrote: Use Case 1 Service Owned Instances There are a set of

Re: [Openstack] API Credentials

2012-10-23 Thread Matt Joyce
the gui is a bit misleading in this regard. On Mon, Oct 22, 2012 at 10:12 PM, Sam Stoelinga sammiest...@gmail.comwrote: No, I think what Vish is saying that it's possible to get the Openstack access key and secret by doing the following: (Based on Folsom, but think it's the same in Essex) 1.

Re: [Openstack] Use of MAC addresses in Openstack VMs

2012-10-23 Thread Matt Joyce
If you are concerned about OUI collisions buy your own OUI. If we end up with people colliding in an OpenStack OUI, so be it. Better than causing grief for our neighbors. I'd rather be neighborly. -Matt On Tue, Oct 23, 2012 at 1:35 AM, Thierry Carrez thie...@openstack.orgwrote: Nachi Ueno

Re: [Openstack] Use of MAC addresses in Openstack VMs

2012-10-22 Thread Matt Joyce
I am throwing in a vote of for openstack foundation acquiring a unique OUI for users to use if they wish. -Matt On Mon, Oct 22, 2012 at 5:43 PM, Shake Chen shake.c...@gmail.com wrote: On Mon, Oct 22, 2012 at 8:08 PM, Gary Kotton gkot...@redhat.com wrote: On 10/20/2012 07:23 PM, Tim Bell

Re: [Openstack] [openstack] Summit coverage

2012-10-02 Thread Matt Joyce
i know this was attempted for the last summit though not widely advertised. i am willing to help set up again if we have equipment on hand. -matt On Tue, Oct 2, 2012 at 9:44 PM, surya_prabha...@dell.com wrote: Hi Folks, For the folks who cannot attend the design summit, are the

Re: [Openstack] When will the distro (specifically Ubuntu) have package for Folsom release

2012-10-01 Thread Matt Joyce
I am not sure indecently was the word you were looking for there. But I gather you are asking if Ubuntu is packaging folsom on their own (as in it's not part of openstack). So yes, Ubuntu is packaging folsom on their own. And I assume ubuntu will let people know when they are done packaging.

Re: [Openstack] Ubuntu Cloud Archive information

2012-09-24 Thread Matt Joyce
https://launchpad.net/~openstack-ubuntu-testing Maybe? On Mon, Sep 24, 2012 at 4:39 PM, Sam Morrison sorri...@gmail.com wrote: Hi, I've started using the Ubuntu Cloud Archive packages for Folsom in Precise. Haven't been able to find out much information about them so I'm asking here.

Re: [Openstack] TC candidacy

2012-09-19 Thread Matt Joyce
+1 On Wed, Sep 19, 2012 at 1:50 PM, Soren Hansen so...@linux2go.dk wrote: I'd like to hereby nominate myself as candidate for a seat on the Technical Committee. I'm a Senior Software Engineer at Cisco Systems. In the past, I've held similar positions at Nebula, Rackspace and Canonical.

[Openstack] TC Candidacy

2012-09-18 Thread Matt Joyce
Hi all. My Name is Matt Joyce. I do hereby on this, the eighteenth day of the ninth month in the year of our lord two thousand and twelve, announce my candidacy for a seat upon the technical committee. I have all the respect in the world for the folks running right now. But I figure

Re: [Openstack] PTL elections results, Fall 2012

2012-09-14 Thread Matt Joyce
+1 On Fri, Sep 14, 2012 at 12:18 AM, Thierry Carrez thie...@openstack.orgwrote: The OpenStack PTL election period is now over. The following people have been elected as Project Technical Leads for the upcoming 6-month Grizzly development cycle: Nova PTL: Vish Ishaya Swift PTL: John

Re: [Openstack] [OSSA 2012-014] Revoking a role does not affect existing tokens (CVE-2012-4413)

2012-09-12 Thread Matt Joyce
hah! On Wed, Sep 12, 2012 at 10:32 AM, Soren Hansen so...@linux2go.dk wrote: So if I can grant people access to a particular tenant, I can invalidate everyone's tokens at will now? Best regards, Soren. Sent from my phone. Please pardon my brevity. On Sep 12, 2012 6:40 PM, Thierry Carrez

Re: [Openstack] Create new Public User

2012-09-11 Thread Matt Joyce
horizon dashboard extensions are probably the way to go. http://docs.openstack.org/developer/horizon/topics/tutorial.html check that out for starters. -Matt On Mon, Sep 10, 2012 at 9:30 PM, Jegadeesh s.jegade...@gmail.com wrote: Hi Guys, I am new for OpenStack. For some testing, i have

Re: [Openstack] [openstack-dev] Nova PTL candidacy

2012-09-06 Thread Matt Joyce
AM, Sam Su susltd...@gmail.com wrote: +1 On Wed, Sep 5, 2012 at 12:19 AM, Michael Still michael.st...@canonical.com wrote: On 09/05/2012 06:03 AM, Matt Joyce wrote: Vish is also a pretty cool guy and doesn't afraid of anything. Vish does a great job -- many hours a day of code review

Re: [Openstack] [openstack-dev] Nova PTL candidacy

2012-09-04 Thread Matt Joyce
Vish is also a pretty cool guy and doesn't afraid of anything. On Tue, Sep 4, 2012 at 12:58 PM, Vishvananda Ishaya vishvana...@gmail.comwrote: Hello Everyone, I'm writing to announce my candidacy for the Project Technical Lead of Nova for the Grizzly Release cycle. Qualifications

Re: [Openstack] Openstack Folsom - 3 Installation

2012-08-23 Thread Matt Joyce
As I recall localrc had a setting in the past for picking releases to install. Not sure what the status of that is. On Thu, Aug 23, 2012 at 12:45 AM, Atul Jha atul@csscorp.com wrote: Hi Trinath, snip On Wed, Aug 22, 2012 at 4:43 PM, Trinath Somanchi

Re: [Openstack] [openstack-dev] Translation, Internationalization and Localization in OpenStack

2012-08-22 Thread Matt Joyce
Update on Horizon pt_BR Translated 234 32.28% Remaining 491 67.72% Reviewed 0 0.00% About a third of the way through now. On Tue, Aug 21, 2012 at 6:14 PM, Matt Joyce matt.jo...@cloudscaling.comwrote: I've already put a dent in the pt / pt_br translations for horizon. I'd love some

Re: [Openstack] [openstack-dev] Translation, Internationalization and Localization in OpenStack

2012-08-22 Thread Matt Joyce
Muito Brigado. =P I'm American and I could use the assistance. =P On Wed, Aug 22, 2012 at 6:48 PM, Marcelo Dieder mdie...@sinos.net wrote: I'm Brazilian, and I'll help with the translation. Marcelo Dieder On 22-08-2012 22:38, Matt Joyce wrote: Update on Horizon pt_BR Translated

Re: [Openstack] [openstack-dev] Translation, Internationalization and Localization in OpenStack

2012-08-21 Thread Matt Joyce
I've already put a dent in the pt / pt_br translations for horizon. I'd love some assistance though. Especially since my portuguese is secondary and honestly not very fluent. -Matt On Tue, Aug 21, 2012 at 6:07 PM, Gabriel Hurley gabriel.hur...@nebula.comwrote: In conjunction with the PTLs,

Re: [Openstack] sort_key and sort_dir for collections based REST APIs

2012-08-20 Thread Matt Joyce
+10 On Mon, Aug 20, 2012 at 11:42 AM, Gabriel Hurley gabriel.hur...@nebula.comwrote: For two summits running I've been advocating the need for a common standard of functionality for all OpenStack APIs (things like sorting, bulk operations, filtering, pagination, etc.). I intend to push on the

Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-14 Thread Matt Joyce
I have to ask. Wasn't FUSE designed to do alot of this stuff? It is userspace and it doesn't do nasty stuff to file systems. Why aren't we going that route? -Matt On Tue, Aug 14, 2012 at 11:05 AM, Richard W.M. Jones r...@annexia.orgwrote: On Wed, Aug 08, 2012 at 11:08:48AM +0100, Daniel P.

Re: [Openstack] [Dashboard] Multi-region support in Horizon?

2012-08-14 Thread Matt Joyce
In the short term you might be able to setup something with a horizon customization module... http://docs.openstack.org/developer/horizon/topics/customizing.html In the long term I think federation should be a concern for grizzly planning in horizon. But maybe I am just being a little too

Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-14 Thread Matt Joyce
. Let init negotiate the api access and produce the filesystems it needs to get booted up properly. =/ first world problems. On Tue, Aug 14, 2012 at 12:06 PM, Eric Windisch e...@cloudscaling.comwrote: On Tuesday, August 14, 2012 at 14:30 PM, Matt Joyce wrote: I have to ask. Wasn't FUSE

Re: [Openstack] Setting Expectations

2012-08-14 Thread Matt Joyce
+1 to everything dean said. On Tue, Aug 14, 2012 at 12:58 PM, Dean Troyer dtro...@gmail.com wrote: On Tue, Aug 14, 2012 at 1:06 PM, Andrew Clay Shafer a...@parvuscaptus.com wrote: You say OpenStack has survived, but I believe we may have compounded and multiplied the challenges OpenStack

Re: [Openstack] [openstack] [horizon] Adding quota information to horizon.usage.base ?

2012-08-14 Thread Matt Joyce
? ** ** **- **Gabriel ** ** *From:* openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net[mailto: openstack-bounces+gabriel.hurley=nebula@lists.launchpad.net] *On Behalf Of *Matt Joyce *Sent:* Tuesday, August 14, 2012 12:24 PM *To:* openstack@lists.launchpad.net *Subject:* [Openstack

Re: [Openstack] [Netstack] Nova-Compute the VMs

2012-08-07 Thread Matt Joyce
You are using virsh directly. Don't do that. Let openstack suspend nodes. Otherwise yes openstack will not know that you have decided to play with virsh. On Mon, Aug 6, 2012 at 11:05 PM, Trinath Somanchi trinath.soman...@gmail.com wrote: Hi-' I have been testing the openstack for past few

Re: [Openstack] [Netstack] Nova-Compute the VMs

2012-08-07 Thread Matt Joyce
point of clarity... it should figure out the vm is in a bad state eventually and list it as not running. On Mon, Aug 6, 2012 at 11:25 PM, Matt Joyce matt.jo...@cloudscaling.comwrote: You are using virsh directly. Don't do that. Let openstack suspend nodes. Otherwise yes openstack

Re: [Openstack] Management tools survey

2012-08-07 Thread Matt Joyce
Do you have a final count on how many people responded? On Tue, Aug 7, 2012 at 4:09 AM, Nick Lothian nick.loth...@gmail.com wrote: For those that are interested, I've done a write-up of the results from this: http://fifthvertex.com/2012/08/07/cloud-tools-survey/ Thanks for all those who

Re: [Openstack] Angry People and OpenStack

2012-08-02 Thread Matt Joyce
George I like your contributions. I also like the idea of people treating each other well. Makes it easier for us to have the discussions you want to have. -Matt On Thu, Aug 2, 2012 at 8:54 AM, Stefano Maffulli stef...@openstack.orgwrote: On Thu 02 Aug 2012 07:19:28 AM PDT, George Reese

Re: [Openstack] Angry People and OpenStack

2012-08-01 Thread Matt Joyce
I'd go further and say that regardless of who the person is, or the situation this list and this community has been pretty on the ball in ensuring that people treat each other with respect. There have been a number of incidents in which folks have wandered into questionable territory on this and

Re: [Openstack] Default reply to behavior for mailing list

2012-07-31 Thread Matt Joyce
+1 On Jul 31, 2012 10:52 AM, Bhuvaneswaran A bhu...@apache.org wrote: Stefano, If a subscriber reply to a mailing list message, it's sent to the author only. Each subscriber should use Reply to All every time, to post a reply to mailing list. Can you please configure the mailing list and

Re: [Openstack] Default reply to behavior for mailing list

2012-07-31 Thread Matt Joyce
That being said, I realize we're entering mostly a land of religion here. So I'll just end with a long live emacs! to try to get us to the godwin rule as fast as possible. The Nazis had Headers too. ___ Mailing list: https://launchpad.net/~openstack

Re: [Openstack] Default reply to behavior for mailing list

2012-07-31 Thread Matt Joyce
I'm sure Launchpad doesn't support user level configuration, to edit email headers. We're moving off of launchpad to mailman proper anyways. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe :

Re: [Openstack] [glance] legacy client removal and python-glanceclient

2012-07-31 Thread Matt Joyce
We really can't be breaking compatibility where people are probably writing shell scripts. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help :

Re: [Openstack] [glance] legacy client removal and python-glanceclient

2012-07-31 Thread Matt Joyce
I think we're running out of opportunities to do stuff like this. This is exactly the sort of thing that will drive George Reese into a homocidal rage. More to the point its exactly the sort of thing our users are going to despise us for. And that hatred will outlive any benefit. Users only

Re: [Openstack] Performing HPCC Benchmark on OpenStack Cloud

2012-07-30 Thread Matt Joyce
I think for HPCC you will need a significant physical system deployment using matched configurations. Likely your concerns will be providing specific hardware constratins where I/O is a factor that match with what HPCC users would use. IE 10 gig or infiniband in networking. Lots of ram. Full

Re: [Openstack] Keyring support in openstack

2012-07-30 Thread Matt Joyce
I like making it optional with a default of off. At least for now. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help :

Re: [Openstack] Security Questons

2012-07-30 Thread Matt Joyce
I have read a few master thesis' written concerning openstack's overall security issues. I would suggest however that openstack has been changing drastically to date and getting a handle on its security issues is something of a highly volatile moving target. -Matt Quick refs:

Re: [Openstack] [nova] a proposal to change metadata API data

2012-07-24 Thread Matt Joyce
Scott thanks =P ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp

Re: [Openstack] [nova] a proposal to change metadata API data

2012-07-24 Thread Matt Joyce
What I am doing is putting credentials into user sessions on the instance. -Matt On Tue, Jul 24, 2012 at 10:10 AM, Martin Packman martin.pack...@canonical.com wrote: On 24/07/2012, Jay Pipes jaypi...@gmail.com wrote: The OpenStack Compute API POST /servers command creates a server UUID

Re: [Openstack] [nova] a proposal to change metadata API data

2012-07-23 Thread Matt Joyce
, Matt Joyce PS: My current work effort in regards to this is related to passing keystone credentials to instances via pam authentication. So I can do a number of API related queries into openstack because I have credentials available to the OS that are dynamically allocated

[Openstack] [nova] a proposal to change metadata API data

2012-07-21 Thread Matt Joyce
be improved upon as an idea and formalized as a rule for using the metadata api without abusing it. Cheers, Matt Joyce PS: My current work effort in regards to this is related to passing keystone credentials to instances via pam authentication. So I can do a number of API related queries

Re: [Openstack] What is the most commonly used Hypervisor and toolset combination?

2012-07-19 Thread Matt Joyce
+1 to Kiall's response. On Thu, Jul 19, 2012 at 2:50 AM, Kiall Mac Innes ki...@managedit.ie wrote: Until recently, stating that Ubuntu is the official distro for OpenStack wouldn't have hurt anybody's feelings.. That's changing now, with the Fedora+RedHat/Debian guys getting everything solid

Re: [Openstack] Identity API v3 - Why allow multi-tenant users?

2012-07-18 Thread Matt Joyce
I could see service users and security / operations teams having a need to span many domains. -Matt On Tue, Jul 17, 2012 at 11:24 PM, Tim Bell tim.b...@cern.ch wrote: ** ** I thought that the v3 API supports domains as a group of tenants which would make the question rather different.

Re: [Openstack] Identity API v3 - Why allow multi-tenant users?

2012-07-18 Thread Matt Joyce
...@localbank.com is going to set up a Point of Sale system for Joe. So Joe creates a project called joes-point-of-sale and provides access to user t...@localbank.com. On 07/18/2012 02:46 AM, Matt Joyce wrote: I could see service users and security / operations teams having a need to span

Re: [Openstack] [nova] Proposal to add Padraig Brady to nova-core

2012-07-18 Thread Matt Joyce
Up the Padraig! On Wed, Jul 18, 2012 at 4:39 PM, John Postlethwait john.postlethw...@nebula.com wrote: +1 for more core contributors! John Postlethwait Nebula, Inc. 206-999-4492 On Wednesday, July 18, 2012 at 4:09 PM, Vishvananda Ishaya wrote: Hello Everyone! Padraig has been

Re: [Openstack] [Keystone] API Question

2012-07-17 Thread Matt Joyce
As a non admin user. Querying the keystone v2 API is there a way for me to get a list of the tenants that I am a member of? Or is that only a v3 thing? -Matt ___ Mailing list: https://launchpad.net/~openstack Post to :

Re: [Openstack] [Keystone] API Question

2012-07-17 Thread Matt Joyce
On Tue, Jul 17, 2012 at 12:55 PM, Adam Young ayo...@redhat.com wrote: On 07/17/2012 03:47 PM, Matt Joyce wrote: As a non admin user. Querying the keystone v2 API is there a way for me to get a list of the tenants that I am a member of? Or is that only a v3 thing? -Matt I was just

Re: [Openstack] [Keystone] API Question

2012-07-17 Thread Matt Joyce
curl -H X-Auth-Token:123456789001234 http://localhost:5000/v2.0/tenants that seems to do the trick for me for now. On Tue, Jul 17, 2012 at 1:03 PM, Adam Young ayo...@redhat.com wrote: On 07/17/2012 03:55 PM, Matt Joyce wrote: On Tue, Jul 17, 2012 at 12:55 PM, Adam Young ayo...@redhat.com

Re: [Openstack] [Keystone] API Question

2012-07-17 Thread Matt Joyce
, Jul 17, 2012 at 2:55 PM, Matt Joyce matt.jo...@cloudscaling.comwrote: On Tue, Jul 17, 2012 at 12:55 PM, Adam Young ayo...@redhat.com wrote: On 07/17/2012 03:47 PM, Matt Joyce wrote: As a non admin user. Querying the keystone v2 API is there a way for me to get a list of the tenants that I

Re: [Openstack] [Keystone] API Question

2012-07-17 Thread Matt Joyce
Anyone by any chance know how to read out the auth_token or raw_token that is acquired in keystoneclient when it performs a client.Client() Authenticate? I'd love to be able to read that. And it's totally not documented anywhere if it exists. -Matt On Tue, Jul 17, 2012 at 2:19 PM, Matt Joyce

Re: [Openstack] About images list in dashboard

2012-07-13 Thread Matt Joyce
I agree if someone wants to commit a backported fix. This makes sense to do. It's a pretty significant bug for essex users. -Matt On Fri, Jul 13, 2012 at 3:00 PM, Christian Parpart tra...@gmail.com wrote: On Fri, Jul 13, 2012 at 10:56 PM, John Postlethwait john.postlethw...@nebula.com

Re: [Openstack] [nova] [cinder] Nova-volume vs. Cinder in Folsom

2012-07-12 Thread Matt Joyce
To certain extent I agree with george's sentiment. Recent example... we're changing tenants to projects in the keystone api. Yes we maintain v2 api compatibility but there will be a cost to users in the confusion of decisions like this. George is right to be calling for openstack to grow up.

[Openstack] Created Portuguese Language Translation Team

2012-07-08 Thread Matt Joyce
https://launchpad.net/~openstack-portuguese-translation-team Created. Took a shot at translating horizon this weekend. Got a review pending. Didn't see an existing team for this so I created it in the same style as the simplified chinese team. Hope this makes sense. -Matt

Re: [Openstack] [HPC] Openstack HPC telecon

2012-07-06 Thread Matt Joyce
That's 1 PM west coast USA. I think the biggest concern may be Asia. On Fri, Jul 6, 2012 at 8:55 AM, Tim Bell tim.b...@cern.ch wrote: Would it be possible a bit earlier ? This would be 10pm in Europe so it would limit the participation. Tim -Original Message- From:

Re: [Openstack] [HPC] Openstack HPC telecon

2012-07-06 Thread Matt Joyce
I think that's probably fine. Might conflict with lunch... but you know you gotta decide whats important to you =P. On Fri, Jul 6, 2012 at 10:14 AM, John Paul Walters jwalt...@isi.edu wrote: Earlier is totally fine. I want to strike a balance with the people on the west coast. How about

Re: [Openstack] Keystone Federation

2012-07-05 Thread Matt Joyce
Don't know if we want it. But we may want to consider the idea of satellite read only keystone servers. Mind you that may just be solving problems we don't even have yet. -Matt On Thu, Jul 5, 2012 at 11:26 AM, Adam Young ayo...@redhat.com wrote: I am contemplating writing up a post-Folsom

Re: [Openstack] Openstack and Google Compute Engine

2012-07-03 Thread Matt Joyce
On Tue, Jul 3, 2012 at 2:01 AM, Simon G. semy...@gmail.com wrote: Secondly, I don't think we shouldn't compare GCE to Openstack. I understand that right now cloud (Openstack, Amazon, ...) is just easy in use, managed and scalable datacenter. It allows users to create VMs, upload their images,

Re: [Openstack] OpenStack G naming poll

2012-07-03 Thread Matt Joyce
Grizzly is better than people making who is john galt jokes. +1 to grizzly. On Tue, Jul 3, 2012 at 5:51 PM, Mark Collier mark.coll...@rackspace.comwrote: +1 grizzly On Jul 3, 2012, at 7:45 PM, Gabriel Hurley gabriel.hur...@nebula.com wrote: +1 on “close enough to an arbitrary

Re: [Openstack] Anyone using instance metadata?

2012-07-03 Thread Matt Joyce
It might be nice to set it up so that openstack admins can add metadata values to the metadata server for installation wide use. -Matt On Tue, Jul 3, 2012 at 3:10 PM, Steve Baker st...@stevebaker.org wrote: Hi Vish On Wed, Jul 4, 2012 at 6:28 AM, Vishvananda Ishaya vishvana...@gmail.com

Re: [Openstack] Openstack and Google Compute Engine

2012-07-02 Thread Matt Joyce
Semy, Google app engine and google compute engine are two different things. App engine has been around for quite some time. The compute engine that they offer as an IaaS solution is based off internal google software that has also been in use internally for a lengthy amount of time.

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-02 Thread Matt Joyce
I like the idea of making this a flagfile option. On Mon, Jul 2, 2012 at 2:48 AM, Daniel P. Berrange berra...@redhat.comwrote: On Sat, Jun 30, 2012 at 09:25:10PM -0400, Lars Kellogg-Stedman wrote: So, maybe setting any of this environment variables for nova-compute to desired value

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-28 Thread Matt Joyce
Can we set a location to the Authoritative HACKING.rst? There are fundamental and conflicting differences between the HACKING.rst in some of the projects. -Matt On Thu, Jun 28, 2012 at 3:15 AM, Daniel P. Berrange berra...@redhat.comwrote: On Thu, Jun 28, 2012 at 12:01:10PM +0200, Thierry

Re: [Openstack] When are hostnames okay and when are ip addresses required?

2012-06-28 Thread Matt Joyce
+1 On Thu, Jun 28, 2012 at 2:27 PM, Vishvananda Ishaya vishvana...@gmail.comwrote: those are supposed to be ip addresses, so I would go with doc bug now unless there is a good reason to change it. Vish On Jun 28, 2012, at 12:00 PM, Lars Kellogg-Stedman wrote: Maybe I sent this out too

Re: [Openstack] When are hostnames okay and when are ip addresses required?

2012-06-28 Thread Matt Joyce
On Jun 28, 2012 7:55 PM, Matt Joyce matt.jo...@cloudscaling.com wrote: +1 On Thu, Jun 28, 2012 at 2:27 PM, Vishvananda Ishaya vishvana...@gmail.com wrote: those are supposed to be ip addresses, so I would go with doc bug now unless there is a good reason to change it. Vish On Jun 28, 2012

Re: [Openstack] When are hostnames okay and when are ip addresses required?

2012-06-28 Thread Matt Joyce
address and host seem to be synonyms. On Fri, Jun 29, 2012 at 8:11 AM, Matt Joyce matt.jo...@cloudscaling.comwrote: https://review.openstack.org/9153 now as a review. On Thu, Jun 28, 2012 at 5:08 PM, Nathanael Burton nathanael.i.bur...@gmail.com wrote: While at a minimum this is a doc

[Openstack] resolving the current keystone api URL via metadata?

2012-06-20 Thread Matt Joyce
This is continuity on a thread I was having with Scott Moser about his blueprint on config drive improvements: https://blueprints.launchpad.net/nova/+spec/config-drive-v2 I had suggested adding the current keystone API url path ( from flags ) to metadata api response. The fundamental logic on

Re: [Openstack] [keystone] Keystone on port 5000 - proposing change default port to 8770

2012-06-20 Thread Matt Joyce
I would recommend keeping a clear separation of administrative APIs from user APIs. Some policy restrictions in environments require them. EX: FISMA On Wed, Jun 20, 2012 at 6:19 PM, Dolph Mathews dolph.math...@gmail.comwrote: Alternatively, if anyone would like to tar and feather me for

Re: [Openstack] Test tool

2012-06-19 Thread Matt Joyce
https://github.com/cloudscaling/tarkin This is a very minimal test set that supports pinging vms after launching them. Nothing crazy. -Matt On Mon, Jun 18, 2012 at 6:37 AM, Jay Pipes jaypi...@gmail.com wrote: On 06/14/2012 05:26 AM, Neelakantam Gaddam wrote: Hi All, Recently I came

Re: [Openstack] storage for virtual machines

2012-06-12 Thread Matt Joyce
I believe swift CAN be used as a block device via FUSE, and I believe it has been done before. I wouldn't recommend it though. -Matt On Tue, Jun 12, 2012 at 8:37 AM, Jay Pipes jaypi...@gmail.com wrote: Sebastien, you are correct. Udit, you will need to provide a bit more information on what

Re: [Openstack] Filter Scheduler, a complete example

2012-06-11 Thread Matt Joyce
You may be better off considering a different approach all together. We ran into similar issues involving FISMA constraints and data classification in the past. One 'simple' solution is complete segregation ( not to be confused with isolation ). What we ended up coming up with was to basically

Re: [Openstack] Greatest deployment?

2012-05-30 Thread Matt Joyce
a hypervisor on top. - Michael Chapman On Fri, May 25, 2012 at 1:34 AM, Matt Joyce matt.jo...@cloudscaling.comwrote: We did some considerable HPC testing when I worked over at NASA Ames with the Nebula project. So I think we may have been the first to try out openstack in an HPC capacity

Re: [Openstack] Greatest deployment?

2012-05-30 Thread Matt Joyce
On Wed, May 30, 2012 at 12:39 PM, Soren Hansen so...@linux2go.dk wrote: 2012/5/30 Matt Joyce matt.jo...@cloudscaling.com: Secondly, while LXC does provide a lot of native access, it still does paging management internally just as kvm does. So direct memory management ( some HPC users

  1   2   >