[Openstack] OpenVSwitch Agent

2012-06-11 Thread Neelakantam Gaddam
Hi All, In the openstack architecture, what are the exact reasons for running the OpenvSwitch agent on all the compute nodes. Is it for portability reasons? Can we avoid the implementation of agent in the openstack architecture? Thanks in advance. -- Regards Neelakantam Gaddam

[Openstack] [Quantum] Review days for Quantum core devs

2012-06-11 Thread Salvatore Orlando
Hi, During our last project meeting there was some interest in introducing review days for Quantum core devs. I see multiple benefits in this approach: 1) Contributors would know which core member the need to contact on a given days for soliciting a review for their patches 2) Predictable code

[Openstack] [Metering] Meter configuration mechanism v0.2

2012-06-11 Thread Nick Barcet
Following up on our last meeting and the comments collected on the mailing list, here is a second version of the proposal for centrally hosting configuration of meters in ceilometer. The main idea is that all meters of a given type should be sending similarly formatted information in order for

Re: [Openstack] [Netstack] [Quantum] Review days for Quantum core devs

2012-06-11 Thread Yong Sheng Gong
+1-netstack-bounces+gongysh=cn.ibm@lists.launchpad.net wrote: -To: openstack@lists.launchpad.netFrom: Salvatore Orlando Sent by: netstack-bounces+gongysh=cn.ibm@lists.launchpad.netDate: 06/11/2012 05:26PMCc: netst...@lists.launchpad.netSubject: [Netstack]

Re: [Openstack] Can't launch VM with XCP plus OpenStack Essex release version

2012-06-11 Thread John Garbutt
It is not well documented (I promise to work on that soon), but you should use an EXT3 local SR, not LVM. It is certainly worth moving to EXT3, just to rule a few things out. I see you are using the Ubuntu XCP packages. This is a version of XenAPI I have not yet started doing much QA on, but I

Re: [Openstack] [Netstack] [Quantum] Review days for Quantum core devs

2012-06-11 Thread hitesh wadekar
+1 Yes, It will work. display information on wiki would be best option. May be Dan has some thought on this. Thanks, Hitesh On Mon, Jun 11, 2012 at 3:32 PM, Yong Sheng Gong gong...@cn.ibm.com wrote: +1 -netstack-bounces+gongysh=cn.ibm@lists.launchpad.net wrote: - To:

Re: [Openstack] Can't launch VM with XCP plus OpenStack Essex release version

2012-06-11 Thread Takaaki Suzuki
Hi John. Thank you for your support again :) Also, what sort of VM are you trying to launch? Is it a three part image with external kernel? Yes, I use this VM images. ttylinux-uec-amd64-12.1_2.6.35-22_1 - ttylinux-uec-amd64-12.1_2.6.35-22_1.img - ttylinux-uec-amd64-12.1_2.6.35-22_1-initrd

Re: [Openstack] Can't launch VM with XCP plus OpenStack Essex release version

2012-06-11 Thread John Garbutt
Happy to help :-) You shouldn't need to use kpartx yourself. We may need to use it in the nova code where we try to mount VDIs in Dom0 (in XenAPI plugins) Long term, I should probably look at ways around doing that. Cheers, John -Original Message- From: suz...@midokura.jp

Re: [Openstack] [Quantum] Review days for Quantum core devs

2012-06-11 Thread Gary Kotton
+1 On 06/11/2012 12:25 PM, Salvatore Orlando wrote: Hi, During our last project meeting there was some interest in introducing review days for Quantum core devs. I see multiple benefits in this approach: 1) Contributors would know which core member the need to contact on a given days for

Re: [Openstack] Examples of authentication using the glance REST API?

2012-06-11 Thread Jay Pipes
Michael, you shouldn't need to do anything regarding authentication... the glance REST client already handles all of that. When you construct a client object, you pass in the user/password/tenant information that the client uses in constructing authenticated requests. All the best, -jay On

Re: [Openstack] Examples of authentication using the glance REST API?

2012-06-11 Thread Brian Waldon
Jay: I asked Michael to rewrite the tool directly using the Glance's REST API - that's why this question is coming up. Michael: You should just authenticate with keystone directly (python-keystoneclient would be easiest), then pass your X-Auth-Token header in with any subsequent Glance

Re: [Openstack] [Netstack] [Quantum] Review days for Quantum core devs

2012-06-11 Thread Edgar Magana (eperdomo)
+1 Edgar From: netstack-bounces+eperdomo=cisco@lists.launchpad.net [mailto:netstack-bounces+eperdomo=cisco@lists.launchpad.net] On Behalf Of Salvatore Orlando Sent: Monday, June 11, 2012 2:25 AM To: openstack@lists.launchpad.net Cc: netst...@lists.launchpad.net Subject: [Netstack]

Re: [Openstack] ZFS/ZVol + iscsi for volume

2012-06-11 Thread Narayan Desai
How integrated is the network target support for zfs on freebsd? One of the most compelling features (IMHO) of ZFS on illumos is the whole comstar stack. On the zfs linux port at least, there are just integration hooks out to the standard linux methods (kernel-nfs, etc) for nfs, iscsi, etc. I'm

[Openstack] api extensions question

2012-06-11 Thread Dan Wendlandt
On Mon, Jun 11, 2012 at 6:15 AM, Robert Kukura rkuk...@redhat.com wrote: On 06/10/2012 03:19 PM, Irena Berezovsky wrote: Hi Robert, May I add to your question also considerations regarding network creation - POST operation? I may be wrong in my understanding, but it seems to me that in

Re: [Openstack] [Netstack] [Quantum] Review days for Quantum core devs

2012-06-11 Thread Dan Wendlandt
On Mon, Jun 11, 2012 at 2:25 AM, Salvatore Orlando salv.orla...@gmail.comwrote: Hi, During our last project meeting there was some interest in introducing review days for Quantum core devs. I see multiple benefits in this approach: 1) Contributors would know which core member the need to

[Openstack] [Docs] Doc team meeting today 2000 UTC

2012-06-11 Thread Anne Gentle
Hi all - Feel free to join us on IRC and Skype for a doc team meeting scheduled for today, Monday June 11, 2012, 2000 UTC (3:00 CST). Here's the agenda as listed at http://wiki.openstack.org/Meetings/DocTeamMeeting. Action items from the last meeting Nova config flags reviews Landing

[Openstack] Errors running individual tests that call into the database

2012-06-11 Thread John Garbutt
Hi, I am trying to run tests like test_xenapi and test_libvirt by themselves do things like: nosetests test_xenapi But it does work, I get DB errors relating to missing tables. However, I can successfully run all the tests. The way I understand it: - nova.tests.__init__.py setup() does the

Re: [Openstack] Filter Scheduler, a complete example

2012-06-11 Thread Michael J Fork
While this blog post doesn't have a simple example, you may find it helpful: https://www.ibm.com/developerworks/mydeveloperworks/blogs/e93514d3-c4f0-4aa0-8844-497f370090f5/entry/openstack_nova_scheduler_and_its_algorithm27?lang=en Michael -

Re: [Openstack] Filter Scheduler, a complete example

2012-06-11 Thread Joseph Suh
Christian, I have been working on improving filter scheduler and my current blue print is at http://wiki.openstack.org/InstanceTypeExtraSpecsExtension and current code is at https://review.openstack.org/#/c/8089/. If you have any question on my code or filter scheduler, please let me know.

Re: [Openstack] Filter Scheduler, a complete example

2012-06-11 Thread Matt Joyce
You may be better off considering a different approach all together. We ran into similar issues involving FISMA constraints and data classification in the past. One 'simple' solution is complete segregation ( not to be confused with isolation ). What we ended up coming up with was to basically

Re: [Openstack] [Netstack] [Quantum] Review days for Quantum core devs

2012-06-11 Thread Salvatore Orlando
As the link to the wiki page is now buried deep in this thread, here it is again: http://wiki.openstack.org/Quantum/ReviewDays Weekend days have been added on GaryK's request! Salvatore On 11 June 2012 16:51, Dan Wendlandt d...@nicira.com wrote: On Mon, Jun 11, 2012 at 2:25 AM, Salvatore

Re: [Openstack] Errors running individual tests that call into the database

2012-06-11 Thread Daniel P. Berrange
On Mon, Jun 11, 2012 at 05:04:51PM +0100, John Garbutt wrote: Hi, I am trying to run tests like test_xenapi and test_libvirt by themselves do things like: nosetests test_xenapi But it does work, I get DB errors relating to missing tables. However, I can successfully run all the tests.

Re: [Openstack] ZFS/ZVol + iscsi for volume

2012-06-11 Thread Caitlin Bestler
Nicholas de BONFILS asked: I use zfs for other project, and I'm very interested in using it everywhere (when possible). One functionality zfs bring is zvol : it allows to create a block device from a zfs pool (a zfs property allow to share this device with iscsi). Mirantis and Nexenta

Re: [Openstack] Filter Scheduler, a complete example

2012-06-11 Thread Lorin Hochstein
On Jun 11, 2012, at 11:41 AM, Christian Parpart wrote: Hi all, while I am still somewhat new to OpenStack, I was able to successfully deploy a 6-node OpenStack setup with 4 compute nodes, one controller node (yet to be HA'd) and one network node (yet to be HA'd). However, now, that I

Re: [Openstack] ZFS/ZVol + iscsi for volume

2012-06-11 Thread Alberto Molina Coballes
El lun, 11-06-2012 a las 10:26 -0500, Narayan Desai escribió: How integrated is the network target support for zfs on freebsd? One of the most compelling features (IMHO) of ZFS on illumos is the whole comstar stack. On the zfs linux port at least, there are just integration hooks out to the

Re: [Openstack] Errors running individual tests that call into the database

2012-06-11 Thread Daniel P. Berrange
On Mon, Jun 11, 2012 at 05:51:44PM +0100, Daniel P. Berrange wrote: On Mon, Jun 11, 2012 at 05:04:51PM +0100, John Garbutt wrote: Hi, I am trying to run tests like test_xenapi and test_libvirt by themselves do things like: nosetests test_xenapi But it does work, I get DB errors

Re: [Openstack] how to set individual gateway for each VLAN or Tenant network?

2012-06-11 Thread Nathanael Burton
dnsmasq supports setting parameters such as the gateway IP and other settings based on tag. I have run a patched version of nova-network in the Diablo time that used the network DB label field as the network tag in dnsmasq. This then allows you to set custom configs by modifying the dnsmasq.conf

Re: [Openstack] [Netstack] [Quantum] Review days for Quantum core devs

2012-06-11 Thread Edgar Magana (eperdomo)
I took Mondays! Edgar From: netstack-bounces+eperdomo=cisco@lists.launchpad.net [mailto:netstack-bounces+eperdomo=cisco@lists.launchpad.net] On Behalf Of Salvatore Orlando Sent: Monday, June 11, 2012 10:06 AM To: Dan Wendlandt Cc: netst...@lists.launchpad.net;

[Openstack] MySQL / MariaDB security vulnerability

2012-06-11 Thread Ewan Mellor
Anyone who is using OpenStack with MySQL / MariaDB, please see this _extremely_ dangerous security vulnerability, announced on Saturday: https://community.rapid7.com/community/metasploit/blog/2012/06/11/cve-2012-2122-a-tragically-comedic-security-flaw-in-mysql Ewan.

Re: [Openstack] File injection support

2012-06-11 Thread Fredric Morenius
Hello again, I did some further tests on this issue with the qcow2 image, the qcow2 image converted to raw and the _blank (raw) image from the UEC tar archive. I loaded nbd with $ sudo modprobe nbd max_part=8 *** qcow2 image *** $ k$ md5sum cirros-0.3.0-x86_64-disk.img

Re: [Openstack] ZFS/ZVol + iscsi for volume

2012-06-11 Thread Eric Windisch
Also, there is a serious problem with the divergence of EOL schedules between the FreeBSD and Debian camps. Basically, the FreeBSD kernel and other bits will go EOL before the Debian bits will. You need to have a certain amount of faith that the small Debian/kFreeBSD team and/or your own team

Re: [Openstack] ZFS/ZVol + iscsi for volume

2012-06-11 Thread Nicolas de BONFILS
In fact, my question is more about how to integrate it within nova workflow. I know how do each step (zfs pool, iscsi export, iscsi attach in vm) but this way is not register by nova db because it's not nova commands. I was looking for people who have replace the LVM creation and iscsiadm

Re: [Openstack] MySQL / MariaDB security vulnerability

2012-06-11 Thread David Busby
Thanks Ewan, Please note my findings on this CVE and feel free to correct / reply with anything I have missed. I've found in my tests of this CVE today that Percona 55-5.5.24 is not vulnerable

[Openstack] [Horizon][Swift]Cloudfile API

2012-06-11 Thread Ke Wu
Hi everyone, I am currently working on the Horizon's Swift containers/objects dashboard. On the dashboard user could retrieve, upload and delete objects which are in a Swift container. I tried to use Cloud File's Python API to connect to a Swift container and retrieve the objects, it all

Re: [Openstack] [OSSA 2012-007] Security groups fail to be set correctly (CVE-2012-2654)

2012-06-11 Thread Russell Bryant
Greetings, A regression was discovered in the patch that was committed to resolve this security issue. See this bug for the regression: https://bugs.launchpad.net/nova/+bug/1010514 Please see the following links for the fixes: Folsom:

Re: [Openstack] File injection support

2012-06-11 Thread Scott Moser
On Mon, 11 Jun 2012, Fredric Morenius wrote: Hello again, I did some further tests on this issue with the qcow2 image, the qcow2 image converted to raw and the _blank (raw) image from the UEC tar archive. I loaded nbd with $ sudo modprobe nbd max_part=8 *** qcow2 image *** $ k$

[Openstack] Glance/Swift integration broken (kills devstack)

2012-06-11 Thread Gabriel Hurley
I just thought I'd call out that Glance's swift storage module is currently broken, and apparently this escaped the devstack gate even though devstack actually fails to complete if swift is enabled. Are we not testing with swift in the ENABLED_SERVICES list? Bug report here:

Re: [Openstack] Glance/Swift integration broken (kills devstack)

2012-06-11 Thread Clark Boylan
Doesn't look like swift is in the ENABLED_SERVICES list for devstack-gate. https://github.com/openstack-ci/devstack-gate/blob/master/devstack-vm-gate.sh#L28 Clark On Mon, Jun 11, 2012 at 4:06 PM, Gabriel Hurley gabriel.hur...@nebula.com wrote: I just thought I'd call out that Glance's swift

[Openstack] memory allocation while creating a linux image

2012-06-11 Thread Udit Agarwal
Hi, I am following the guide -Openstack Compute Administration Manual. I have a doubt on this page http://docs.openstack.org/trunk/openstack-compute/admin/content/creating-a-l inux-image.html which talks about creating a linux image. The thing that I can't understand is that the first line

Re: [Openstack] memory allocation while creating a linux image

2012-06-11 Thread Lorin Hochstein
On Jun 11, 2012, at 9:10 PM, Udit Agarwal wrote: Hi, I am following the guide –“Openstack Compute Administration Manual”. I have a doubt on this page http://docs.openstack.org/trunk/openstack-compute/admin/content/creating-a-linux-image.html which talks about creating a linux image.

Re: [Openstack] Comparing roles - case (in)sensitivity

2012-06-11 Thread Brian Waldon
So it sounds like we're going with case-insensitive string comparison for role names. There's already a patch in review for Glance, but it sounds like we'll need to get something up for Swift. Thanks for the input, guys! Brian On Jun 8, 2012, at 8:27 PM, Dolph Mathews wrote: Role *names*

Re: [Openstack] how to set individual gateway for each VLAN or Tenant network?

2012-06-11 Thread Lorin Hochstein
Hey Nate: On Jun 11, 2012, at 2:17 PM, Nathanael Burton wrote: dnsmasq supports setting parameters such as the gateway IP and other settings based on tag. I have run a patched version of nova-network in the Diablo time that used the network DB label field as the network tag in dnsmasq. This

Re: [Openstack] Development/Debugging

2012-06-11 Thread hitesh wadekar
Salman,, I have asked these kinds of questions earlier. but there was no generic way to debug the code by using pydev or eclipse. Here is the link that suggest some code debug using devstack etc.. http://www.joinfu.com/2012/03/testing-essex-rc1-with-devstack-and-tempest/ It will help you.

Re: [Openstack] Development/Debugging

2012-06-11 Thread Vaze, Mandar
Salman, I haven't used UI tools like Pydev and/or eclipse. I have a devstack installation running on linux box where I use ssh for all my development. TL;DR Version : I use pdb (aka Python Debugger) It is very easy to use if you have used gdb - (Refer to

Re: [Openstack] Development/Debugging

2012-06-11 Thread Salman Malik
Thank you both. I have used pdb today with quantum service, just as you explained: by placing pdb.set_trace() function where I wanted to run the code myself. All worked well except when the a wait function from the eventlet library was called. After which program waits for an input and when an

Re: [Openstack] Development/Debugging

2012-06-11 Thread Vaze, Mandar
... so it makes sense to go through each daemon at a time using pdb. Not sure what you mean, but you can easily put set_trace() in multiple daemons at the simultaneously, in fact it is useful to trace the flow across various openstack services. -Mandar

Re: [Openstack] Development/Debugging

2012-06-11 Thread hitesh wadekar
Awesome explaination Mandar. Thanks, Hitesh On Tue, Jun 12, 2012 at 10:12 AM, Vaze, Mandar mandar.v...@nttdata.comwrote: ... so it makes sense to go through each daemon at a time using pdb. Not sure what you mean, but you can easily put set_trace() in multiple daemons at the

[Openstack] request and transaction IDs across all projects

2012-06-11 Thread Gabe Westmaas
In nova we use a request ID to to help in finding all logs associated with a particular request, and this has proven to be extremely useful when debugging issues. This should be taken a bit further, in two different directions. First, I'd like to see the request ID stored along with the any