[openstack-dev] Security bug in diskimage-builder

2017-05-17 Thread George Shuklin
There is a bug in diskimage-builder I reported it at 2017-03-10 as 'private security'. I think this bug is a medium severity. So far there was no reaction at all. I plan to change this bug to public security on next Monday. If someone is interested in bumping up CVE count for DIB, please look

Re: [openstack-dev] [novaclient] novaclient and httpretty - unable to record

2017-04-04 Thread George Shuklin
Thank you very much for advise! On 04/04/2017 04:09 PM, Monty Taylor wrote: On 04/04/2017 04:43 AM, George Shuklin wrote: Sorry for asking in dev maillist, but it really looks like dev issue. I'm writing application which relies on novaclient, glanceclient, etc. It's almost done, but I

[openstack-dev] [novaclient] novaclient and httpretty - unable to record

2017-04-04 Thread George Shuklin
Sorry for asking in dev maillist, but it really looks like dev issue. I'm writing application which relies on novaclient, glanceclient, etc. It's almost done, but I thought about adding end to end tests by recording and actual requests and replies to openstack. I used httpretty library for

Re: [openstack-dev] [nova] Live migration performance tests on 100 compute nodes

2016-12-28 Thread George Shuklin
Wow. Thanks. Great job. Basically, it says that it is impossible to use live migration in production environment with tunneled transport for libvirt. On 12/28/2016 03:11 PM, Koniszewski, Pawel wrote: Hello everyone, We made a research to see how live migration performance varies between

[openstack-dev] How to add feature to diskimage-builder

2015-12-29 Thread George Shuklin
Hello. I'm trying add a small feature to one of the elements in diskimage-builder (https://github.com/openstack/diskimage-builder/pull/10/) I have experience with gerrit and openstack bugfix workflow, but I have no idea how to add small enhancements. Dev guide says I need to add blueprint

Re: [openstack-dev] [Neutron] initial OVN testing

2015-03-31 Thread George Shuklin
If that thing will have worked, I'll owe you a beer. Every time I debug OVS-neutron issues I want to cry. All that constant 'exec ovs-vsctl' stuff driving me mad because of the underengineering and overall inefficiency. I will definitively try it on 'reallife lab installation' with few

Re: [openstack-dev] [Openstack-operators] [Neutron] Deprecating the use_namespaces option - Now's the time to speak up!

2015-03-30 Thread George Shuklin
On 03/30/2015 11:18 AM, Kevin Benton wrote: What does fog do? Is it just a client to the Neutron HTTP API? If so, it should not have broken like that because the API has remained pretty stable. If it's a deployment tool, then I could see that because the configuration options to tend to

Re: [openstack-dev] [Openstack-operators] [Neutron] Deprecating the use_namespaces option - Now's the time to speak up!

2015-03-29 Thread George Shuklin
On 03/24/2015 09:21 PM, Assaf Muller wrote: Note that https://review.openstack.org/#/c/166888/ has been merged. This means that the option has been deprecated for K and will be removed in L. Anyone using the non-default value of False will be looking at errors in his logs. Well, I have

Re: [openstack-dev] The constraints from flavor and image metadata

2015-01-17 Thread George Shuklin
When I played with metadata, I had have constant feeling it had mess together few things: 1. H/W requirements for images. 2. Accounting requirements (good CPU for good price, HDD for cheap) 3. Licensing restrictions (run this one only on the hosts with licenses) 4. Administrative management

Re: [openstack-dev] Lack of quota - security bug or not?

2014-12-11 Thread George Shuklin
On 12/10/2014 10:34 PM, Jay Pipes wrote: On 12/10/2014 02:43 PM, George Shuklin wrote: I have some small discussion in launchpad: is lack of a quota for unprivileged user counted as security bug (or at least as a bug)? If user can create 100500 objects in database via normal API and ops have

[openstack-dev] Lack of quota - security bug or not?

2014-12-10 Thread George Shuklin
I have some small discussion in launchpad: is lack of a quota for unprivileged user counted as security bug (or at least as a bug)? If user can create 100500 objects in database via normal API and ops have no way to restrict this, is it OK for Openstack or not?

Re: [openstack-dev] [neutron] Linux capabilities vs sudo/rootwrap?

2014-12-09 Thread George Shuklin
Is ovs-vsctl gonna be happy with CAP_NET_ADMIN? On 12/10/2014 02:43 AM, Angus Lees wrote: [I tried to find any previous discussion of this and failed - I'd appreciate a pointer to any email threads / specs where this has already been discussed.] Currently neutron is given the ability to do

[openstack-dev] [glance] Image properties for deleted images

2014-10-31 Thread George Shuklin
Hello. I found that glance do not provide any meta information for deleted images, but hide them somewhere inside. glance image-create - #1 glance image-update #1 --property foo=bar #1 now has foo=bar nova start ... #1 - instance use image with foo=bar glance image-delete #1 ... and now we

[openstack-dev] [Nova] request for review for backport of bug 1240849 to havana

2014-05-19 Thread George Shuklin
Good day. Could someone, please, review backport of https://bugs.launchpad.net/nova/+bug/1240849 to stable/havana. I've checked it on my laboratory and it fixes problem with 'no network after soft reboot', but I've done some invasive changes to the logic, so if someone with good neutron

[openstack-dev] [designate] How sink works?

2014-04-01 Thread George Shuklin
Good day. Playing with designate (powerdns @ mysql). It works fine with CRUD operations with domains, but I stuck at sink configuration. Even with debug=True nothing happens when instances creating of float ip assigning. My configuration: (skip) rabbit_userid = guest rabbit_password = pass

[openstack-dev] [neutron] Why neutron-openvswitch-agent use linux-bridge?

2013-11-27 Thread George Shuklin
Good day. I looking at the internals of bridge layout of openvswitch agent at http://docs.openstack.org/network-admin/admin/content/figures/2/figures/under-the-hood-scenario-1-ovs-compute.png and wondering, why this scheme is so complicated and why it use linux bridge and vethes with

Re: [openstack-dev] [neutron] Why neutron-openvswitch-agent use linux-bridge?

2013-11-27 Thread George Shuklin
, George Shuklin george.shuk...@gmail.comwrote: Good day. I looking at the internals of bridge layout of openvswitch agent at http://docs.openstack.org/network-admin/admin/content/ figures/2/figures/under-the-hood-scenario-1-ovs-compute.png and wondering, why this scheme is so complicated