Re: [Openstack] regarding this Message #09165 (VNC error with latest version of Firefox)

2012-03-29 Thread Diego Parrilla Santamaría
Thanks Anthony, we use the 'official' noVNC from https://github.com/openstack/noVNC in our distro. We are going to make a new build pulling from cloudbuilders' repository and let's see how it works. Cheers Diego -- Diego Parrilla *CEO* *www.stackops.com | * diego.parri.

[Openstack] KVM cannot start vm when the disk is on NFS

2012-03-29 Thread Yong Sheng Gong
I have to run chmod 777 /var/lib/nova/instances/instance-0007 to start the vm on kvm. Appreciate any help from stackers. HostA ( 192.168.1.90): redhat 6.1 nfs4/etc/exports:/var/lib/nova/instances 192.168.1.0/24(rw,sync,fsid=0,no_root_squash)/etc/idmapd:[General]Domain = openstack#service nfs re

[Openstack] Video/Screencast of Installation of OpenStack Essex on Ubuntu 12.04 under VirtualBox

2012-03-29 Thread Kevin Jackson
Dear all, To compliment the excellent work that people have done with documentation recently, I've created a video/screencast guide of an installation of OpenStack Essex (RC) under Ubuntu 12.04 under VirtualBox. This is using steps and scripts I've been working with - but there's no voodoo - the sc

Re: [Openstack] wrong IP given by flat network dhcp

2012-03-29 Thread Michaël Van de Borne
Well, I changed /etc/network/interfaces accordingly (see below) and didn't make any change in nova.conf, but the problem still remains. New VM are given IPs from 10.18.9.2 (and not 10.18.9.33). What else can I check? $ cat /etc/network/interfaces # This file describes the network interfaces av

[Openstack] Congrats for the Gerrit design

2012-03-29 Thread Razique Mahroua
I love the new template.You guys did a fantastic job :-)Who's behing it ?Razique Nuage & Co - Razique Mahroua razique.mahr...@gmail.com ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://l

[Openstack] 403 Forbidden integrate keystone essex with swift 1.4.9

2012-03-29 Thread jojo_wanglin
Hi all: The story is: when i integrate keystone essex with swift 1.4.9, i use swift_auth for authorization, the configuration is belows: [filter:keystone]paste.filter_factory = keystone.middleware.swift_auth:filter_factoryoperator_roles = Member,admin If I access the swift service using swift com

Re: [Openstack] KVM cannot start vm when the disk is on NFS

2012-03-29 Thread Razique Mahroua
Hello Yong,as you may understand, the chmod 777 is not the best thing to do.it looks like the files belong to the user root, while it's the user nova which runs the cloud.The first thing to do is to give the rights to the user nova of the directory (755) to nova:nova.Thanks! Nuage & Co - Razique Ma

Re: [Openstack] Specification of nova-diagnostics

2012-03-29 Thread Leander Bessa
Ok, so far i have been able to generate the following output: +---+-+ | Property |Value| +---+-+ | cpu0 | 0.0 | | cpu1 | 0.0 | | memory| Unavailable | | vda_bytes_read

Re: [Openstack] KVM cannot start vm when the disk is on NFS

2012-03-29 Thread Yong Sheng Gong
Thanks for the reply. I have figured it out.I am running nova control node with root account on the side of nfs4 server side (redhat6.1), while on the side of compute node is ubuntu.So on ubuntu side, I have executed:$sudo bash,#nova-computeIn fact what I need to do is to let kvm binary run under r

Re: [Openstack] Congrats for the Gerrit design

2012-03-29 Thread Andrew Hutchings
Hi Razique, On 29/03/12 10:04, Razique Mahroua wrote: > I love the new template. > You guys did a fantastic job :-) > Who's behing it ? Thanks, mostly me, but there have been a few great contributions to it making it even better: http://www.linuxjedi.co.uk/2012/03/new-gerrit-and-jenkins-styles-ar

Re: [Openstack] Swift, Keystone, and S3 pipeline configuration

2012-03-29 Thread Lillie Ross-CDSR11
Hi Tom, I'm taking the easy way out for the near term. I've reconfigured Swift to use the tempauth middleware, and am replicating the user ids and tenant ids that I have in Keystone. This allows everyone on my project team to have a uniform runtime configuration setup. In the meantime, I'm s

Re: [Openstack] boot from ISO

2012-03-29 Thread Michaël Van de Borne
Hi Donal, Still about this good old 'Boot From ISO' feature inside the XenAPI: I packaged a custom netinstall.iso image which boots and installs the OS with kickstart. So that everything is custom and in 5minutes, I've got a complete running brand new machine freshly installed that has booted

Re: [Openstack] 403 Forbidden integrate keystone essex with swift 1.4.9

2012-03-29 Thread Kuo Hugo
Well , it looks normal in my consideration. You specify the operator must have Member or admin role for accessing swift. If there's a user associates a role which named "watcher" . It will be block in swift_auth filter . That's the function of swift_auth , right ? It looks pretty match to your ex

Re: [Openstack] Performance diagnosis of metadata query

2012-03-29 Thread Sean Dague
On 03/25/2012 01:03 PM, Justin Santa Barbara wrote: The performance of the metadata query with cloud-init has been causing some people problems (it's so slow cloud-init times out!), and has led to the suggestion that we need lots of caching. (My hypothesis is that we don't...) By turning on SQL

Re: [Openstack] regarding this Message #09165 (VNC error with latest version of Firefox)

2012-03-29 Thread Andrea Federico Grisotto
I tried to use the cloudbuilders branch for diablo but it doesn't work with firefox 11 or chrome 18. Diego, does it works for you? 2012/3/29 Diego Parrilla Santamaría > Thanks Anthony, > > we use the 'official' noVNC from https://github.com/openstack/noVNC in > our distro. We are going to make a

Re: [Openstack] regarding this Message #09165 (VNC error with latest version of Firefox)

2012-03-29 Thread Diego Parrilla Santamaría
Yes, it's working. The trick is to shutdown nova-vncproxy and use the command: utils/nova-wsproxy.py --flagfile $NOVA_CONF --web . 6080 and install python-numpy package. We are trying to package in the distro, we have some versioning clash with some packages. We hope we will release the new fix

Re: [Openstack] regarding this Message #09165 (VNC error with latest version of Firefox)

2012-03-29 Thread Andrea Federico Grisotto
it works, thank you very much. 2012/3/29 Diego Parrilla Santamaría > Yes, it's working. > > The trick is to shutdown nova-vncproxy and use the command: > > utils/nova-wsproxy.py --flagfile $NOVA_CONF --web . 6080 > > and install python-numpy package. > > We are trying to package in the distro, w

Re: [Openstack] OVF vs. bare container formats for qcow2 images

2012-03-29 Thread Scott Moser
On Wed, 28 Mar 2012, Lorin Hochstein wrote: > All: > > Given that I have a qcow2 image from somewhere (e.g., downloaded it from a > uec-images.ubuntu.com, created one from a raw image using qemu-img) that i > want to add to glance: > > 1. How can I tell whether it's an "ovf" or "bare" container

Re: [Openstack] wrong IP given by flat network dhcp

2012-03-29 Thread Vishvananda Ishaya
Your network and fixed ips in the database are from the wrong range. I would suggest you delete your db and start over. Make sure you specify the correct range when you create your network. Vish On Mar 29, 2012, at 12:59 AM, Michaël Van de Borne wrote: > Well, I changed /etc/network/interfac

Re: [Openstack] OVF vs. bare container formats for qcow2 images

2012-03-29 Thread Daniel P. Berrange
On Wed, Mar 28, 2012 at 04:41:28PM -0400, Lorin Hochstein wrote: > All: > > Given that I have a qcow2 image from somewhere (e.g., downloaded > it from a uec-images.ubuntu.com, created one from a raw image using > qemu-img) that i want to add to glance: > > 1. How can I tell whether it's an "ovf"

Re: [Openstack] Performance diagnosis of metadata query

2012-03-29 Thread Justin Santa Barbara
> > Is there a good way to map back where in the code these calls are coming > from? There's not a great way currently. I'm trying to get a patch in for Essex which will let deployments easily turn on SQL debugging (though this is proving contentious); it will have a configurable log level to al

Re: [Openstack] Performance diagnosis of metadata query

2012-03-29 Thread David Kranz
On 3/29/2012 12:46 PM, Justin Santa Barbara wrote: Is there a good way to map back where in the code these calls are coming from? There's not a great way currently. I'm trying to get a patch in for Essex which will let deployments easily turn on SQL debugging (though this is proving

Re: [Openstack] Running code on instance start/terminate

2012-03-29 Thread Rogério Vinhal Nunes
Actually, I'm having problems in a much simpler layer. I've done the following code thinking that I would start from there to find info: - conn = amqp.Connection(host="localhost:5672", userid="guest", password="guest", virtual_host="/", insist=False) chan = conn.channel() chan.

Re: [Openstack] Performance diagnosis of metadata query

2012-03-29 Thread Justin Santa Barbara
I'm not saying it can't be rationalized; I'm saying it is frustrating to me. My understanding is that Essex is going to be baked into both Ubuntu & Debian for the long term - 5 years plus. That's a long time to have to keep explaining why X is broken; I'd rather just fix X. On Thu, Mar 29, 20

Re: [Openstack] Performance diagnosis of metadata query

2012-03-29 Thread David Kranz
Well, there are diablo-stable packages. If Ubuntu, Debian, Red Hat, etc. keep hearing from customers that Essex in an LTS release is not adequate, there will be essex-stable packages too. They are the ones who have to stand behind the product. It is perfectly understandable that there is resis

[Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Lucian Thomaz
Hey guys, I'm using Dashboard with a nova-compute installed in another machine, but when I try access VNC Console I get the error "failed to connect to server". Here is the log -> http://pastebin.com/5DZMfiNE Anyone already saw this trouble? Lucian Thomaz

Re: [Openstack] [OpenStack] Xen Hypervisor

2012-03-29 Thread Vishvananda Ishaya
On Mar 29, 2012, at 7:40 AM, John Garbutt wrote: > If you want all your traffic going through a single nic (Management, > Instance, Public), it might be possible using these settings: > > public_interface=eth0 I don't think this will work unless the implementation is very different in xen.

Re: [Openstack] [OpenStack] Xen Hypervisor

2012-03-29 Thread John Garbutt
The public interface, I thought was the interface of the DomU running the service, and it attached its own bridges inside the DomU? I have tried to describe all this here: http://wiki.openstack.org/XenServer/NetworkingFlags Would be cool if people can check that for me, and I can push it into th

Re: [Openstack] Validation of floating IP opertaions in Essex codebase ?

2012-03-29 Thread Day, Phil
Thanks Vish, that makes it clearer.I guess the validation can be handled by which ever manager picks up the call rather than having to be validates on the manager of a specific host (assuming multi-host of course), which should mean it's still reasonably responsive. Just looking through the

Re: [Openstack] Performance diagnosis of metadata query

2012-03-29 Thread Justin Santa Barbara
I think _we_ should stand behind OpenStack. That said, I understand why it's a tough call. Hopefully most problems can be fixed with a simple-ish SQL script post-release. On Thu, Mar 29, 2012 at 11:06 AM, David Kranz wrote: > Well, there are diablo-stable packages. If Ubuntu, Debian, Red Hat,

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Guilherme Birk
I'm having problems with it too. I'm trying to connect on my instances in the VNC tab at the dashboard, but I'm getting a 404 not found in the URL http://192.168.100.142/nova/instances_and_volumes/instances/5307a5c5-249b-4eda-b6e4-5b17d349e8ee/None Here is my nova-api.log. Looks like nova is ha

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Anthony Young
Here are several flags that you must set on your compute host for a multi host deploy: - :option:`--vncserver_listen` - defaults to 127.0.0.1 This is the address that vncservers will bind, and should be overridden in production deployments as a pri

[Openstack] (no subject)

2012-03-29 Thread Jorge de la Cruz
Look at this, Diego found a answer https://lists.launchpad.net/openstack/msg09290.html Regards -- -- Jorge de la Cruz *Cloud Architect* *www.stackops.com | * jorge.delac...@stackops.com** | +34 91 309 48 77 | skype:jorge.delacruz.stackops* *

[Openstack] [OSSA 2012-003] Long server names grow nova-api log files significantly (CVE-2012-1585)

2012-03-29 Thread Russell Bryant
OpenStack Security Advisory: 2012-003 CVE: CVE-2012-1585 Date: March 29, 2012 Title: Long server names grow nova-api log files significantly Impact: High Reporter: Dan Prince Products: Nova Affects: All versions Description: Dan Prince reported a vulnerability in OpenStack Compute (Nova) API serv

Re: [Openstack] OVF vs. bare container formats for qcow2 images

2012-03-29 Thread Scott Moser
On Thu, 29 Mar 2012, Daniel P. Berrange wrote: > On Wed, Mar 28, 2012 at 04:41:28PM -0400, Lorin Hochstein wrote: > > All: > > > > Given that I have a qcow2 image from somewhere (e.g., downloaded > > it from a uec-images.ubuntu.com, created one from a raw image using > > qemu-img) that i want to a

[Openstack] [Doc] Nova options changes and documentation

2012-03-29 Thread Anne Gentle
Hi Docs Core team and others, David Kranz has identified changes to the nova.conf configuration options in the attached .diff file. They directly affect the configuration chapter for the Compute Admin manual as well as the networking chapter. I have also gone through all the possible flags and cre

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Anthony Young
How are you generating this link: http://192.168.100.142/nova/instances_and_volumes/instances/5307a5c5-249b-4eda-b6e4-5b17d349e8ee/None ? It looks like if horizon is behaving nicely the link would look like http://192.168.100.142/nova/instances_and_volumes/instances/5307a5c5-249b-4eda-b6e4-5b17d3

Re: [Openstack] [OpenStack] Xen Hypervisor

2012-03-29 Thread Vishvananda Ishaya
Public interface is the interface used for adding floating (natted) ips. If this is generally eth0 in the domU then ignore my previous message. Vish On Mar 29, 2012, at 11:20 AM, John Garbutt wrote: > The public interface, I thought was the interface of the DomU running the > service, and it

Re: [Openstack] EC2 metadata

2012-03-29 Thread Soren Hansen
29. mar. 2012 00.55 skrev Joshua Harlow : > I’ve seen that before. But was wondering if there was any secret other wiki. There is no secret wiki that I'm aware of. If you believe the referenced wiki page is out of date, please help update it. -- Soren Hansen             | http://linux2go.dk/ Se

Re: [Openstack] [Doc] Nova options changes and documentation

2012-03-29 Thread Razique Mahroua
Maybe filling bugs per flag topics that presents all the  related flags ? When one bug matches such, we could mark it as duplicate and refer to the filled bug ?Since there are many flags per topic, that would settle things for the first shot ?Regards Nuage & Co - Razique Mahroua razique.mahr...@gma

[Openstack] Video for OpenStack Installation using XenServer

2012-03-29 Thread Renuka Apte
Hello, Since there has been some amount of confusion with the README for XenServer installations, I have made a video for installing OpenStack on XenServer using DevStack, for anyone who wants to try it out. Here's the link: http://www.youtube.com/watch?v=x_-MWihUqF4 Thanks, Renuka. __

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Joseph Heck
Hey Tony, Slightly related - I'm getting a valid link form the dashboard that gets to VNCProxy and such, but the page that comes active reports a "Server timeout". Any idea how to diagnose this and what's happened/not responded? http://172.17.1.50:6080/vnc_auto.html?token=f96cf65b-1a2f-415c-97f

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Anthony Young
Joe - can you pastie your nova.conf from your compute host? The most relevant flags are vncserver_proxyclient_address and vncserver_listen On Thu, Mar 29, 2012 at 2:21 PM, Joseph Heck wrote: > Hey Tony, > > Slightly related - I'm getting a valid link form the dashboard that gets > to VNCProxy

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Joseph Heck
http://pastie.org/3694439 The compute host is 172.18.1.1 with my instance (TTY, named "zerglet") The nova vncproxy code is running at 172.17.1.50 - both have direct access to each other - pingable, etc. 172.17.1.50 is the nova-api host for this setup as well -joe On Mar 29, 2012, at 2:35 PM, A

Re: [Openstack] Distributed rate-limiting

2012-03-29 Thread Day, Phil
Hi Kevin, A couple of quick questions: - As you get the tenant id from the context I assume this module has to come after the authentication in the pipeline. Have you thought about using the tenant_id in the URL instead ? (I'm thinking of the case where you want rate limit requests into th

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Anthony Young
Joe - looks like it could just be a typo: 1 2 3 --vncserver_list=172.18.1.1--vncserver_proxyclient_address=172.18.1.1--novncproxy_base_url=http://172.17.1.50:6080/vnc_auto.html that should be vncserver_listen A On Thu, Mar 29, 2012 at 2:42 PM, Joseph Heck wrote: > http://pastie.org/3694439

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Joseph Heck
thank you - morons-r-us is trying that suggestion right now... -joe On Mar 29, 2012, at 3:01 PM, Anthony Young wrote: > Joe - looks like it could just be a typo: > > 1 > 2 > 3 > --vncserver_list=172.18.1.1 > --vncserver_proxyclient_address=172.18.1.1 > --novncproxy_base_url=http://172.17.1.50:6

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Joseph Heck
Well, even with the change, I'm not getting the live VNCconsole. Javascript all comes up happy, but fails to connect - same errors. Anything that I should query in the javascript console that will tell me what's happening? Or logs form the novnc process? -joe On Mar 29, 2012, at 3:02 PM, Josep

Re: [Openstack] EC2 metadata

2012-03-29 Thread Anne Gentle
We really don't have secret wikis that I know of. :) Though then they'd really be secret! Anne On Thu, Mar 29, 2012 at 3:33 PM, Soren Hansen wrote: > 29. mar. 2012 00.55 skrev Joshua Harlow : >> I’ve seen that before. But was wondering if there was any secret other wiki. > > There is no secret

Re: [Openstack] Dashboard VNC Console failed to connect to server

2012-03-29 Thread Anthony Young
Your existing instance likely still has the wrong vncserver listen address baked into its libvirt.xml, which you would have to update manually. New instances should be ok. A On Thu, Mar 29, 2012 at 3:15 PM, Joseph Heck wrote: > Well, even with the change, I'm not getting the live VNCconsole. >

Re: [Openstack] Distributed rate-limiting

2012-03-29 Thread Kevin L. Mitchell
On Thu, 2012-03-29 at 22:58 +0100, Day, Phil wrote: > - As you get the tenant id from the context I assume this module has > to come after the authentication in the pipeline. Yes, I have made that assumption. It seems reasonable, given that the existing rate-limit middleware is right after aut

Re: [Openstack] EC2 metadata

2012-03-29 Thread Joshua Harlow
One usually does not tell other people about secret twikis I suppose ;) On 3/29/12 3:19 PM, "Anne Gentle" wrote: We really don't have secret wikis that I know of. :) Though then they'd really be secret! Anne On Thu, Mar 29, 2012 at 3:33 PM, Soren Hansen wrote: > 29. mar. 2012 00.55 skrev Jos

Re: [Openstack] [Nova-orchestration] Thoughts on Orchestration (was Re: Documentation on Caching)

2012-03-29 Thread Sriram Subramanian
Guys, Sorry for missing the meeting today. Thanks for the detailed summary/ logs. I am cool with the action item : #action sriram to update the Orchestration session proposal. This is my understanding the logs of things to be updated in the blueprint: 1) orchestration service provides state ma

[Openstack] [Folsom Summit] What makes a Session proposal ready to be scheduled?

2012-03-29 Thread Sriram Subramanian
Hello All: We have submitted a proposal for Nova-Orchestration and are working towards hashing out the blueprint. In today's call, none of us knew how/ when are the sessions scheduled and what do we need to add to make the session proposal complete (aka ready to be scheduled:) ) Sandy suggeste

[Openstack] "Admin"-ness in Keystone, Nova, et. al.

2012-03-29 Thread Gabriel Hurley
In the last couple days, a few troubling bugs have been uncovered using Horizon that point to a much deeper problem of "admin"-ness in Essex. First, the two most recent bugs: 1. https://bugs.launchpad.net/keystone/+bug/968696 Summary: having an admin role on any tenant gives you admin rights in

Re: [Openstack] Distributed rate-limiting

2012-03-29 Thread Chris Behrens
My issue with using the URL is someone could easily DoS any tenant. Maybe you said that below. I only have a brief moment to scan email ATM. :) On Mar 29, 2012, at 5:26 PM, "Kevin L. Mitchell" wrote: > On Thu, 2012-03-29 at 22:58 +0100, Day, Phil wrote: >> - As you get the tenant id from the

Re: [Openstack] [Nova-orchestration] Thoughts on Orchestration (was Re: Documentation on Caching)

2012-03-29 Thread Dugger, Donald D
Sriram- Great, this matches my understanding of what we agreed to today. Tnx for agreeing to update the BP. -- Don Dugger "Censeo Toto nos in Kansa esse decisse." - D. Gale Ph: 303/443-3786 -Original Message- From: Sriram Subramanian [mailto:sri...@computenext.com] Sent: Thursday, Ma

Re: [Openstack] [Doc] Nova options changes and documentation

2012-03-29 Thread Michael Pittaro
On Thu, Mar 29, 2012 at 12:59 PM, Anne Gentle wrote: > Hi Docs Core team and others, > David Kranz has identified changes to the nova.conf configuration options in > the attached .diff file. They directly affect the configuration chapter for > the Compute Admin manual as well as the networking cha