[Openstack-operators] SELinux guest images

Hey Everyone, I've been building RHEL-7 images with selinux set to both Enforcing and Permissive, regardless of the setting, the first time an instance is launched, there is the mandatory relabeling that happens on the first boot. I'm wondering if I can run `fixfiles -f -F relabel` in the

Re: [Openstack-operators] How to handle updates of public images?

I always recommend the following: All public images are named generically enough that they can be replaced with a new version of the same name. This helps new instances booting. The prior image is renamed with -OLD-$date. This lets users know that their image has been deprecated. This image is

Re: [Openstack-operators] How to handle updates of public images?

of name-based automation. On Thursday, February 5, 2015, Marc Heckmann marc.heckm...@ubisoft.com wrote: On Thu, 2015-02-05 at 06:02 -0800, Abel Lopez wrote: I always recommend the following: All public images are named generically enough that they can be replaced with a new version of the same

Re: [Openstack-operators] Small openstack (part 2), distributed glance

That specific bottleneck can be solved by running glance on ceph, and running ephemeral instances also on ceph. Snapshots are a quick backend operation then. But you've made your installation on a house of cards. On Thursday, January 15, 2015, George Shuklin george.shuk...@gmail.com wrote:

Re: [Openstack-operators] Cinder api enpoint not found error while attach volume to instance

Do your compute nodes have the required iSCSI packages installed? On Wednesday, January 14, 2015, Geo Varghese gvargh...@aqorn.com wrote: Hi Jay, Thanks for the reply. Just pasting the details below keystone catalog Service: compute

Re: [Openstack-operators] demo environment ( embedded device openstack ) ?

There is DIY LOM for the NUC, it was demo'd at Paris Summit. It was quite elegant, featuring LEGO Mindstorm robots being instructed to push the power button. On Feb 11, 2015, at 9:12 AM, Will Snow (wasnow) was...@cisco.com wrote: So as to 10g, it’s not like I’m going to use them for

Re: [Openstack-operators] Unable to delete few instances from dashboard

It's really tough to know without any additional information. Was there an error on the dashboard? Are you using the same credentials? Did these instances have volumes attached? On Feb 18, 2015, at 12:47 PM, raju raju.r...@gmail.com wrote: Hi, am unable to delete few instances from

[Openstack-operators] ARM PoC systems?

Has anyone considered doing PoC stuff on those ARM microservers? I like the idea of some 2 RU system with a boat load of different systems inside it to really mimic a production environment to scale. Is this a silly idea? ___ OpenStack-operators

Re: [Openstack-operators] Instance creation boot from image (creates a new volume) is Slow

You might get faster performance if the image was in raw format in glance. On Friday, January 23, 2015, Pedro Sousa pgso...@gmail.com wrote: Hi all, I have a swift backend to store my glance images and a EMC storage to store my volumes. When I try to boot the instance directly from the

Re: [Openstack-operators] glance directory traversal bug and havana

You might be running an older Havana, IIRC the bug lists Havana3 and Havana4 as vulnerable. On Jan 7, 2015, at 8:47 PM, George Shuklin george.shuk...@gmail.com wrote: I spend few hours trying to backport to Havana, but than I found, that Havana seems be immune to the bug. I'm not 100%

Re: [Openstack-operators] FYI: Rabbit Heartbeat Patch Landed

I tried that once as a test, it was pretty much a major fail. This was behind an F5 too. Just leaving the hosts in a list works better. On Thursday, March 19, 2015, John Dewey j...@dewey.ws wrote: Why would anyone want to run rabbit behind haproxy? I get people did it post the

Re: [Openstack-operators] Gentoo image availability

Since these are distro packages, you might be interested in converting the prep scripts into a DIB (diskimage-builder) element. We can presently build images for Debian/Ubuntu/Centos/Fedora/RHEL/openSUSE... I'm sure someone out there would appreciate having gentoo, too. On Jun 8, 2015, at 8:26

Re: [Openstack-operators] [openstack-dev] Gentoo image availability

Awesome, never really played with Gentoo before, eager to give it a spin. On Monday, June 22, 2015, Matthew Thode prometheanf...@gentoo.org wrote: On 06/23/2015 12:17 AM, Matthew Thode wrote: On 06/11/2015 10:12 AM, Matthew Thode wrote: On 06/11/2015 04:11 AM, Eren Türkay wrote: On

Re: [Openstack-operators] what is the different in use Qcow2 or Raw in Ceph

We use ceph for glance and cinder, and we have some nodes that lack sufficient disk space, so they have libvirt_images_type=rbd The majority of the Public images are raw format, which is pretty awesome because those huge windows images (20 - 80 GB Raw) spawn in 14s. When a user uploads a qcow2

Re: [Openstack-operators] 100% CPU and hangs if syslog is restarted

I bet you can workaround this by switching to UDP remote syslog. You'd loose messages, but your processes *should* fire and forget On May 28, 2015, at 9:56 AM, George Shuklin george.shuk...@gmail.com wrote: Hello. Today we've discover a very serious bug in juno:

Re: [Openstack-operators] Root password injection stops working

You can get admin_pass from the openstack metadata directory in config drive, and use a boot-time script to set the password accordingly. This example assumes the dhcp style metadata, but you can see how you could simply change it to read the fail instead

Re: [Openstack-operators] Snapshots in dashboard.

’. *From:* Abel Lopez [mailto:alopg...@gmail.com javascript:_e(%7B%7D,'cvml','alopg...@gmail.com');] *Sent:* Thursday, July 02, 2015 10:55 AM *To:* Adyanthaya, Aishwarya *Cc:* openstack-operators@lists.openstack.org javascript:_e(%7B%7D,'cvml','openstack-operators@lists.openstack.org

Re: [Openstack-operators] Snapshots in dashboard.

instance but not the instance that was launched by Ubuntu instance. From: Abel Lopez [mailto:alopg...@gmail.com] Sent: Thursday, July 02, 2015 11:36 AM To: Adyanthaya, Aishwarya Cc: openstack-operators@lists.openstack.org Subject: Re: [Openstack-operators] Snapshots in dashboard. Ok, good

Re: [Openstack-operators] ubuntu-14.04 unable to ssh

I would recommend that you don't do a 'dist-upgrade' of a cloud instance. In theory it *should* work, but it feels like an anti-pattern. You have images for 12.04, you have images for 14.04. If you need to use 12.04, choose that for your instances, if you need 14.04, choose that for your

Re: [Openstack-operators] No route to host

Sounds like you're trying to connect to the internal RFC 1918 address. You need to look at Floating IP, or try pulling from your instance instead of pushing to it. On Tuesday, July 7, 2015, aishwarya.adyanth...@accenture.com wrote: Hi, I’m having trouble while trying to deploy a package

[Openstack-operators] DIB in container vs VM

Hey everyone, I've been running diskimage-builder just fine for over a year inside various VMs, but now, I'm having to run it inside a docker container. I'm curious if anyone has experience with making the 'ubuntu latest' docker hub image more like a VM. For example, I can `vagrant up` the

Re: [Openstack-operators] DIB in container vs VM

Thanks for the suggestion. I am indeed running it privileged. One of the examples I wanted to share was: building Fedora image on an ubuntu docker image. The error I get is in the finalize.d phase http://paste.openstack.org/show/481088/ Error

Re: [Openstack-operators] DIB in container vs VM

s trying to apply selinux stuff. I'm > not sure that's supported at all in docker. :/ > > It may be if your running one of the el's or fedora's as the docker host and > container? > > Thanks, > Kevin > From: Abel Lopez [alopg...@gmail.com] > Sent: Monday, December 0

Re: [Openstack-operators] [Glance] Default policy in policy.json

ng means everybody. So this would not affect download_image etc. > The default only applies when the policy does not exist in the file. For > example a new policy is added and the policy.json is not updated. > > Niall > From: Abel Lopez <alopg...@gmail.com> > Sent: 17 Jun

Re: [Openstack-operators] How do you handle purge of database tables ?

Some projects (e.g. cinder) have tools.. `cinder-manage db-purge` or maybe it's "db purge" or something along those lines... It was around Kilo when that got added. Otherwise, in the past, I've done mysql backup, then a massive table by table purge of "deleted=1" rows. On Wed, Jun 22, 2016 at

Re: [Openstack-operators] [Glance] Default policy in policy.json

By setting default to admin, won't we be overly restrictive? I see that "add_image, download_image" are both set to "", which I assume means, default, which means admin, If that's correct, then no regular project users will be able to create images, or worse, launch instances. I usually go with

Re: [Openstack-operators] [nova] Recovering instances from old system

I would expect that if you have the databases in place, and they went through the proper migrations, that your instances would still be there. You can check the nova database instances table using the uuid. How exactly did you 'wipe everything clean'? > On Jan 7, 2016, at 5:35 PM, Liam Haworth

Re: [Openstack-operators] Help with horizon and v3 auth

rror? > > If that's the issue the work around is here in the bug description. > > https://bugs.launchpad.net/tripleo/+bug/1521639 > On Feb 4, 2016 10:31 PM, "Abel Lopez" <alopg...@gmail.com > <javascript:_e(%7B%7D,'cvml','alopg...@gmail.com');>> wrote: > >>

Re: [Openstack-operators] Help with horizon and v3 auth

Actually, "identity:get_project" : "" seems ok, there's plenty of other actions with that lack of restriction. get_auth_catalog, get_auth_domains, get_region. > On Feb 5, 2016, at 2:55 PM, Abel Lopez <alopg...@gmail.com> wrote: > > After digging around and

[Openstack-operators] Help with horizon and v3 auth

Hey everyone, In my liberty testing, I've got keystone v3 setup, and everything seems to work, except certain cinder functions Using openstack client, I can boot an instance from image to a new volume. Using horizon, this fails. I have followed the v3 guides, having setup local_settings to have

Re: [Openstack-operators] [glance] Image enters "killed" state on upload

I ran into a similar issue in Havana, but that was because we were doing some 'behind-the-scenes' modification of the image (format conversion) Once we stopped that, the issue went away. What is your glance store configured as? > On Feb 2, 2016, at 3:05 PM, Liam Haworth

Re: [Openstack-operators] [glance] Image enters "killed" state on upload

, test setting it to permissive (if that is the issue, resolve the contexts) > On Feb 2, 2016, at 3:13 PM, Liam Haworth <liam.hawo...@bluereef.com.au> wrote: > > Glance is configured to use file store to /var/lib/glance/images > > On Wed, 3 Feb 2016 at 10:12 Abel Lope

Re: [Openstack-operators] [glance] Image enters "killed" state on upload

gt; 17%/boot > 10.16.16.30:/srv/glance 739G 97G 604G14% > /var/lib/glance/images > > And to save from massed output from a LS, ever file in /var/lib/glance/images > is: -rw-r- 1 glance glance > > No apparmour installed or c

Re: [Openstack-operators] YAML config

I agree that having options in how you specify your configuration would be nice. I see that your change is to add yaml support, not replace INI, so that's a plus. Specifically with regards to ansible, you're correct that the ini_file module is sub-optimal, we've recently changed our playbooks

Re: [Openstack-operators] Liberty Error on random pages "Error: Unable to retrieve volume limit information"

That worked for me, you have to make sure it's in the [keymgr] section On Friday, January 22, 2016, Omer Faruk SEN wrote: > Hello, > > I have recently installed a Liberty with 3 nodes (compute,network and > controller). On admin account or demo account i get "Error: Unable

Re: [Openstack-operators] how to get glance images for a specific tenant with the openstack client ?

Also, if you are an admin, you can `export OS_TENANT_ID` to the project and list images with property is-public false. On Monday, January 25, 2016, Kris G. Lindgren wrote: > This doesn't answer your specific question. However there are two > projects out there that are

Re: [Openstack-operators] I have an installation question and possible bug

First question, what is your glance store? Also, it sounds like you created the large image from a running instance, is that correct? If so, was the instance suspended when you initiated the image-create? On Monday, January 25, 2016, Christopher Hull wrote: > Hello all; >

Re: [Openstack-operators] [openstack-ansible] centos support

We talked a bit about making OSAD 'EL' compatible, but we ultimately decided against it. There were various architectural differences that made it not worth the effort. I don't know if anyone else was seriously considering the work. > On Feb 18, 2016, at 9:41 AM, Wade Holler

Re: [Openstack-operators] Openstack Glance - UnknownScheme: Unknown scheme 'swift+http' found in URI

Did you try the suggestion in your bug report? https://bugs.launchpad.net/glance/+bug/158/comments/4 > On May 20, 2016, at 8:20 AM, Lucas Di Paola > wrote: > > Hi, > > I am writing to see if someone can give me a light on this. I am trying to > make the

Re: [Openstack-operators] Murano in Production

I want to imagine that separate vhosts with different usernames and appropriate permissions would be sufficient. Just like we don't run separate MySQL instances for a different database, we just make users with permissions. But, I haven't played with Murano at all, what do I know. On Friday,

Re: [Openstack-operators] [openstack-operators][ceph][nova] How do you handle Nova on Ceph?

Have you thought about dedicated pools for cinder/nova and a separate pool for glance, and any other uses you might have? You need to setup secrets on kvm, but you can have cinder creating volumes from glance images quickly in different pools > On Oct 10, 2016, at 6:29 AM, Adam Kijak

Re: [Openstack-operators] Missing Glance metadef_resource_types table

This is a manual step to load them. If your installation was complete, you should have a bunch of json files in /etc/glance/metadefs. You need to load them with glance-manage db_load_metadefs > On Nov 17, 2016, at 9:12 AM, Massimo Sgaravatto > wrote: > > Hi > >

[Openstack-operators] Ocata glance configuration

I'm having a real head-scratcher with Ocata glance right now. v1 API is deprecated and marked for deletion in Pike, so creating images from a remote URL is not as easy as it used to be. When using Horizon to create an image, setting the location as a remote URL fails to create the image,

Re: [Openstack-operators] custom build image is slow

Your custom image is likely missing the virtIO drivers that the cloud image has. Instead of running through the DVD installer, I'd suggest checking out diskimage-builder to make custom images for use on Openstack. On Tue, Aug 1, 2017 at 10:16 AM Paras pradhan wrote: >

Re: [Openstack-operators] [dnsmasq] setting ntp-server

Another option is to make customized guest images that are preconfigured as you like them. In a previous role, I had to maintain all linux distro guest images for use inside a corporate cloud deploy. This included pointing ntpd to corp IT ntp servers for compliance. I did this by creating a

Re: [Openstack-operators] hostname on vms not correct until reboot

services, like mcollective are reporting the wrong fqdn until we reboot the VM so as a temporary fix we added a reboot at the end of cloud-init. Any better way to get this sorted properly though? Alex On 8 Sep 2014 16:20, Abel Lopez alopg...@gmail.com wrote: Yes. I think this is similar

Re: [Openstack-operators] Cinder + FC + Hitachi storage 110

There’s really two answers to your 2nd question. First, when booting new VMs, Cinder doesn’t come into play unless you’re explicitly selecting “Boot from Volume”. Typically, the default is to use “Ephemeral Instances”, which are simply file-backed virtual disks on your hypervisor host. If you

Re: [Openstack-operators] Visualization Control Information for OpenStack operators

That’s pretty neat, hadn’t seen this before. Looks like it would be handy for a NOC/Ops team. On Sep 11, 2014, at 3:31 PM, Stacey King sk...@real-status.com wrote: Hello OpenStack Operators, I would like to ask if anyone sees a need for full-scale visualization via gaming quality

Re: [Openstack-operators] [glance] how to update the contents of an image

, it is not possible to assign uuid from deleted image to the new one, because deleted images keeps their metadata in DB. On 09/26/2014 04:43 PM, Abel Lopez wrote: Glance images are immutable. In order to update it, you should do as you are doing, but then rename the old image, then upload

Re: [Openstack-operators] [glance] how to update the contents of an image

regards Sławek Kapłoński sla...@kaplonski.pl javascript:; Dnia wtorek, 7 października 2014 10:05:57 Abel Lopez pisze: You are correct, deleted images are not deleted from the DB, rather their row has ‘deleted=1’, so specifying the UUID of another image already in glance for a new image

Re: [Openstack-operators] [glance] how to update the contents of an image

:05:57 Abel Lopez pisze: You are correct, deleted images are not deleted from the DB, rather their row has ‘deleted=1’, so specifying the UUID of another image already in glance for a new image being upload will end in tears. What I was trying to convey was, when Christian is uploading a new

Re: [Openstack-operators] Glance Image Upload error

This sounds like a packaging error. What linux distribution are you using? The quick fix is to just install the oslo.config module manually, not sure why it wasn't included. `sudo pip install oslo.config` should help On Oct 26, 2014, at 1:26 AM, mo...@qmail.com.bd wrote: Hi , I am

Re: [Openstack-operators] Ephemeral instances in RBD issue

we'll see a new commit to jdurgin's fork for icehouse and havana soon. On Oct 26, 2014, at 6:08 AM, Simon Leinen simon.lei...@switch.ch wrote: Abel Lopez writes: I saw this last commit to jdurgin's nova fork which solves the issue ( https://github.com/jdurgin/nova/commit

Re: [Openstack-operators] Ephemeral instances in RBD issue

in Juno ? -- David Moreau Simard On Oct 29, 2014, at 3:34 PM, Abel Lopez alopg...@gmail.com wrote: So, I figured out why this was happening. The gist of it is, the direct_snapshot doesn't start the domain back up. I contacted inktank and they're adding what I found to their fork

Re: [Openstack-operators] Controle de Versão de Arquivos de Configuração da Cloud.

Alop searches for a Portugese translator... On Oct 29, 2014, at 12:35 PM, Flávio Ramalho f.ramal...@gmail.com wrote: Boa tarde, Estou tendo dificuldades nessa atividade e não estou achando a solução da forma que discutimos na última reunião. Explicando: O que queremos: Manter os

Re: [Openstack-operators] Controle de Versão de Arquivos de Configuração da Cloud.

Maybe you should have a simple cron job check git for updates? On Oct 29, 2014, at 12:35 PM, Flávio Ramalho f.ramal...@gmail.com wrote: Boa tarde, Estou tendo dificuldades nessa atividade e não estou achando a solução da forma que discutimos na última reunião. Explicando: O que

[Openstack-operators] Database cleanup policy

We just had this question come up regarding the labs, but it applies to production as well. I'm thinking that we need to implement some sort of periodic database pruning. Perhaps like every two months or so, go through all databases, all tables, and do like delete from FOO where deleted=1 and

Re: [Openstack-operators] Database cleanup policy

it can be followed / implemented as a built in function. Cheers, Morgan Sent via mobile On Oct 30, 2014, at 13:20, Abel Lopez alopg...@gmail.com wrote: We just had this question come up regarding the labs, but it applies to production as well. I'm thinking that we need

[Openstack-operators] database hoarding

It seems that every release, there is more and more emphasis on upgradability. This is a good thing, I've love to see production users easily go from old to new. As an operator, I've seen first hand the results of neglecting the databases that openstack creates. If we intend to have users go

Re: [Openstack-operators] database hoarding

, Daniele Venzano wrote: On 10/30/14 23:30, Abel Lopez wrote: As an operator, I'd prefer to have time based criteria over number of rows, too. I envision something like `nova-manage db purge [days]` where we can leave it up to the administrator to decide how much of their old data (if any

Re: [Openstack-operators] Latest stable OpenStack version

Juno is considered Stable https://www.openstack.org/software/juno/ https://www.openstack.org/software/juno/ On Nov 14, 2014, at 11:46 AM, Alex Leonhardt aleonhardt...@gmail.com wrote: Hi all, I was wondering what the latest stable OpenStack version is? Is it still Icehouse? Thanks

Re: [Openstack-operators] RabbitMQ TTL/queue configuration

WRT the zero consumer queues, in the past I've just had a cron job that checks for this and deletes queues that have messages no consumers. On Dec 4, 2014, at 12:23 PM, Fischer, Matt matthew.fisc...@twcable.com wrote: What RabbitMQ optimizations are people making with respect to OpenStack?

Re: [Openstack-operators] Weekly Irc meeting?

56 Openstack Operators Team Meeting https://wiki.openstack.org/wiki/Meetings#Openstack_Operators_Team_Meeting On Dec 9, 2014, at 9:54 AM, Abel Lopez alopg...@gmail.com wrote: According to the iCal feed, 1800 UTC on 12/17, we have #openstack-meeting, and #openstack-meeting-4 available. We

Re: [Openstack-operators] Migrating instances according to load on host

Sounds like you're describing VMWare DRS. It's a pretty neat feature that aims to reduce outages during maintenance and also reduce the impact of noisy neighbor. To my knowledge, we don't have that today, but I haven't been following the wishlist for nova On Dec 16, 2014, at 12:01 PM, Sławek

Re: [Openstack-operators] Metadata error.

I think you might have misunderstood the nature of this list. We often times do provide answers to common issues, but this is not a support organization. You've provided no details of the errors you're experiencing, so it would be very difficult to help. Please use http://paste.openstack.org

Re: [Openstack-operators] how to filter outgoing VM traffic in icehouse

...@gmail.com mailto:gustavo.rand...@gmail.com wrote: Hi, sorry, I forgot to mention: I'm using nova-network On Wed, May 13, 2015 at 6:39 PM, Abel Lopez alopg...@gmail.com mailto:alopg...@gmail.com wrote: Yes, you can define egress security group rules. On May 13, 2015, at 2:32 PM

Re: [Openstack-operators] [openstack-dev] Who is using nova-docker? (Re: [nova-docker] Status update)

Again, a conversation that should include the ops list. On Wed, May 13, 2015 at 6:28 AM, Adrian Otto adrian.o...@rackspace.com wrote: Solum uses it in our Vagrant setup. It makes the dev environment perform very nicely, and is compatible with the Docker containers Solum generates. Sent

[Openstack-operators] Short survey on Guest Images

If you're somehow involved in creating/providing images for glance, I have a very short survey that I'd like input on. https://docs.google.com/forms/d/1HR500i8raQiH72GwEbpFuUQA8OvA7Uae2e-39Y6YSQ0/viewform?usp=send_form