Saturday, 2014-11-22

kfox1111its alright... hmm...00:00
jrollI would love to tell you setting up swift is super easy00:01
kfox1111so for vm's, you want glance to be setup to be backed by ceph directly... for ironic, you want it layered on top of a ceph gateway...00:01
jrollbut I honestly have no idea00:01
kfox1111it is fairly easy, if I go all the way back to step one where I setup an openstack all in one system using packstack before installing ironic and pointing everything at it.00:02
jroll:|00:02
jrollhow would you feel about running ceph without auth?00:02
kfox1111we're also much more fond of ceph these days then swift.00:02
jrollif you did that, could probably hack ironic to use that instead00:02
jroll(or maybe ceph has a similar signed url thing)00:03
kfox1111I wonder if the ceph gateway supports temp url's. it strives to be a drop in replacement for swift.00:03
jrollorly00:04
jrollit might, then00:04
jrollhttp://tracker.ceph.com/issues/345400:04
jrollstatus: resolved00:04
kfox1111problem is for this test system, I havent installed ceph either...00:04
*** andreykurilin_ has quit IRC00:04
jrollstill undocumented00:04
jrolloh00:04
kfox1111hmm.. ok. so if we do this in production, I think the ceph gateway would work, with glance configured to point to it like swift, rather then using ceph directly.00:05
jrollyeah00:05
jrollhuh, ceph is c++00:06
kfox1111I may have to manually install swift in this test box just to get somethign working to test...00:06
JayFThat'd require a patch on the Ironic side to support it00:06
jrollI've never actually really looked at it00:06
JayFbut it'd be an awesome freakin' patch :D00:06
jrollJayF: dunno, it sounds like this gateway thing is supposed to be api compatible with swift00:06
kfox1111JayF: really? it shows up as a swift endpoint in keystone. the dashboard doesn't seem to care.00:06
JayFoh, really? That's sweeeeet00:06
JayFif kfox1111 uses it and it works; we should put that in our docs00:07
kfox1111its the only network storage subsystem for openstack that I know of that can do all of glance, swift, nova ephemeral and cinder.00:07
jrollneat00:08
kfox1111suposidly with juno, if you put your image in glance, and have nova ephemeral configured, it simply snapshots the glance image, and boots instantly.00:08
kfox1111says it allows you to boot vm's in seconds. havent tried it yet.00:09
jrollcool, this should totally work: http://tracker.ceph.com/projects/ceph/repository/revisions/56e4015cf4f2917b13c9f017e09ec47581ee4867/entry/src/rgw/rgw_swift.cc#L52500:09
jrollkfox1111: that's super interesting00:09
jrollbrb00:09
*** romcheg has quit IRC00:09
kfox1111I wonder if I can get packstack to install only swift without touching anything else...00:10
kfox1111Can someone update the agent readme to mention the swift/glance dependency?00:12
*** penick has quit IRC00:12
kfox1111hmmm... is it doing this so that it can get a temp url to a private image?00:13
*** romcheg has joined #openstack-ironic00:13
NobodyCamah ha: https://bugs.launchpad.net/tripleo/+bug/139495600:15
jrollkfox1111: you know how to submit patches?00:16
kfox1111y...e...s...00:17
jrollhehe00:17
JayFkfox1111: the readme that'd need to be updated is probably in ironic, not in ipa though ... it's Ironic's dep, IPA only cares about getting an http[s] url00:17
kfox1111but shouldn't the ipa pull the image from glance instead?00:18
jrollit can't pull it from glance without an auth token00:19
jrolland in general, there's no secure way to give the agent an auth token00:19
kfox1111sure. but they are fairly cheep to create.00:19
jrollwithout ilo or something00:19
jrollironic only knows about admin tokens :(00:19
JayFkfox1111: I'm an evil person on your network. I spoof your mac and now have an Ironic admin token to do mean things with00:19
jrollthe keys to the cloud00:19
kfox1111an auth token should be just as secure as a tmp url?00:19
JayFnot at all00:19
JayFtmp url has a ttl, and limits you to one resource00:20
jroll(auth tokens do have ttls)00:20
JayFmost people don't have the level of private data / access / credentials in their image00:20
JayFthat would be the keys to the cloud00:20
kfox1111you can create a keystone user that only has access to the one glance image.00:20
kfox1111heat does something similar.00:20
jrollon the fly?00:20
jrollhmm00:20
kfox1111for every stack that needs to do things, it creates a user and a trust.00:20
kfox1111yeah.00:20
jrollhmm00:20
JayFUgh. IDK how I'd like creating a user for each deployment00:20
jrollJayF: it just occurred to me that tripleo probably stuffs admin creds in their images00:21
kfox1111wouldn't nessisarily need to for deployment. just per image.00:21
JayFwe deploy instances 1000+ times a day on average ... which is a lot of users to make00:21
JayFhmm.00:21
JayFjroll: *sticks fingers in ears and sings lalala*00:21
jrollhonestly, not the worst idea00:21
jrollhehehe00:21
JayFIt's certainly an interesting secondary approach00:21
JayFbut you still have the agent auth to ironic (and ironic auth to the agent) creds problem00:21
JayFwhich if it's ever generally solved would likely encompass this piece of auth too00:22
kfox1111heat has its own keystone domain. probably can have an ironic one so all your users are hidden off where admins wont trip over them.00:22
JayFHmm.00:22
* JayF works at Rackspace, which means he doesn't know keystone, he knows faux-keystone00:22
jrolldevananda: ^ interesting ideas here00:22
jrollsoon, JayF, soon00:22
kfox1111ah.00:23
JayFjroll: http://www.meemes.com/sites/default/files/styles/large/public/soon%20ostrich.jpg00:23
jroll/o\00:24
*** achanda has quit IRC00:25
*** Haomeng|2 has joined #openstack-ironic00:28
NobodyCamw00t: [2014-11-21 16:28:10] Total runtime: 794 s one little patch buggered me all day00:28
*** Haomeng has quit IRC00:29
kfox1111hmm... a little more fleshed out.... you should be able to create a keystone domain for ironic, make a tenant/user per image, and use glance member-create to share the image. I don't think you need to use trusts in that case.00:30
kfox1111and thats only for private images. if its public, you can just have an ironic/public account.00:31
-openstackstatus- NOTICE: Gating and log storage offline due to block device error. Recovery in progress, ETA unknown.00:31
*** ChanServ changes topic to "Gating and log storage offline due to block device error. Recovery in progress, ETA unknown."00:31
*** romcheg has quit IRC00:32
kfox1111should I file a blueprint for that idea?00:34
*** Marga_ has quit IRC00:34
jrollsure! that would be great00:34
kfox1111blueprints.launchpad.net/ironic?00:35
jrollyep00:35
kfox1111k00:35
jrollwe do specs these days that the blueprint links to00:35
jrollbut at least this way maybe we won't forget about it00:35
*** romcheg has joined #openstack-ironic00:35
kfox1111yeah. sounds good.00:36
JayFkfox1111: that's a good candidate for our new "backlog" specs, basically you make the blueprint and put upa review to ironic-specs with problem statement + proposed solution. When someone (you or someone else interested) gets around to implementing it, they'll fill in the rest of the spec00:42
*** ryanpetrello has joined #openstack-ironic00:42
kfox1111https://blueprints.launchpad.net/ironic/+spec/agent-all-glance00:44
jrollnice00:45
JayFI think the channel might appreciate this -> http:///c34a6498d4802e89941e-16c214a4a8ca35317ce45a32e60db84b.ssl.cf1.rackcdn.com/47d4f2af-654f-4f50-a78b-c3beec555461.jpeg00:46
kfox1111denied00:46
JayFI must fail at linking00:46
jrollhttps00:46
JayF1s00:46
JayForly?00:46
jrollyarly00:46
JayFbetter link ---> https://c34a6498d4802e89941e-16c214a4a8ca35317ce45a32e60db84b.ssl.cf1.rackcdn.com/47d4f2af-654f-4f50-a78b-c3beec555461.jpeg00:46
JayFkfox1111: ^00:46
jrollthere you go00:47
kfox1111:)00:47
kfox1111hmm... ok. lets see if I disable all service installs in packstack but swift, and see if it will add it for me...00:50
* kfox1111 crosses his fingers00:50
* jroll is off for the weekend00:50
jrollhave a good one, all00:50
kfox1111you too. thanks for all the help00:50
NobodyCamhave a good weekend jroll00:50
jrollyou too00:51
jrollno problem kfox111100:51
*** ChuckC has quit IRC00:51
*** romcheg1 has joined #openstack-ironic00:51
*** romcheg has quit IRC00:53
NobodyCamJayF: +1000 (/me just clicked jpg link)00:58
*** Marga_ has joined #openstack-ironic00:59
*** ryanpetrello has quit IRC00:59
NobodyCamJayF: did you reply to the name thread on ML?00:59
kfox1111hmm... managed to break the dashboard trying to install swift with packstack... arg.01:05
kfox1111ah. there we go.01:06
kfox1111ok. looks like I have a usable swift now...01:07
kfox1111lets see how badly other things are broken. :/01:07
*** romcheg1 has quit IRC01:08
NobodyCam:(01:12
*** ChuckC has joined #openstack-ironic01:14
kfox1111hmm... looks like I can get packstack to deploy glance with swift backend... that might be easier...01:17
kfox1111hmm....01:20
kfox1111glance-api[16623]: ERROR: Store for scheme swift not found01:20
kfox1111ah. they no longer load the drivers... gota manually specify them.01:25
kfox1111still getting the swift error. :/01:33
kfox1111but... the images do look to be in swift...01:33
kfox1111ok. guess I'll have to call it a weekend. thanks all for the help.01:34
*** kfox1111 has quit IRC01:34
NobodyCamhey kfox1111 what is the swift error?01:34
* NobodyCam is here ar least until food gets here01:35
NobodyCamwhich will be shortly01:35
NobodyCam:-p01:35
*** vipul has joined #openstack-ironic01:38
*** Haomeng has joined #openstack-ironic01:45
*** Haomeng|2 has quit IRC01:46
*** Marga_ has quit IRC01:50
*** ChuckC has quit IRC02:00
*** lazy_prince has quit IRC02:00
*** kevinbenton has quit IRC02:00
*** zer0c00l has quit IRC02:00
*** toabctl has quit IRC02:00
*** jeblair has quit IRC02:00
*** greghaynes has quit IRC02:00
*** datajerk has quit IRC02:00
*** dlaube has quit IRC02:00
*** pcrews has quit IRC02:00
*** krtaylor has quit IRC02:00
*** yuriyz has quit IRC02:00
*** bigjools has quit IRC02:00
*** bradjones has quit IRC02:00
*** yuanying has quit IRC02:00
*** mitz_ has quit IRC02:00
*** mordred has quit IRC02:00
*** lsmola has quit IRC02:00
*** harlowja has quit IRC02:04
*** harlowja has joined #openstack-ironic02:04
*** linggao has quit IRC02:17
*** bigjools has joined #openstack-ironic02:32
*** yuriyz has joined #openstack-ironic02:32
*** krtaylor has joined #openstack-ironic02:32
*** pcrews has joined #openstack-ironic02:32
*** datajerk has joined #openstack-ironic02:32
*** bradjones has joined #openstack-ironic02:32
*** yuanying has joined #openstack-ironic02:32
*** mitz_ has joined #openstack-ironic02:32
*** mordred has joined #openstack-ironic02:32
*** lsmola has joined #openstack-ironic02:32
*** bradjones has quit IRC02:32
*** yuanying has quit IRC02:32
*** mitz_ has quit IRC02:32
*** mordred has quit IRC02:32
*** lsmola has quit IRC02:32
*** ChuckC has joined #openstack-ironic02:33
*** kevinbenton has joined #openstack-ironic02:33
*** zer0c00l has joined #openstack-ironic02:33
*** toabctl has joined #openstack-ironic02:33
*** jeblair has joined #openstack-ironic02:33
*** greghaynes has joined #openstack-ironic02:33
*** ChuckC has quit IRC02:40
*** kevinbenton has quit IRC02:40
*** zer0c00l has quit IRC02:40
*** toabctl has quit IRC02:40
*** jeblair has quit IRC02:40
*** greghaynes has quit IRC02:40
*** bradjones has joined #openstack-ironic02:41
*** yuanying has joined #openstack-ironic02:41
*** mitz_ has joined #openstack-ironic02:41
*** mordred has joined #openstack-ironic02:41
*** lsmola has joined #openstack-ironic02:41
*** achanda has joined #openstack-ironic02:46
*** ChuckC has joined #openstack-ironic02:46
*** kevinbenton has joined #openstack-ironic02:46
*** zer0c00l has joined #openstack-ironic02:46
*** toabctl has joined #openstack-ironic02:46
*** jeblair has joined #openstack-ironic02:46
*** greghaynes has joined #openstack-ironic02:46
*** david-lyle is now known as david-lyle_afk02:53
*** spandhe has quit IRC02:53
*** achanda has quit IRC02:56
*** ryanpetrello has joined #openstack-ironic03:24
*** linggao has joined #openstack-ironic03:25
*** linggao has quit IRC03:32
*** subscope has quit IRC04:11
*** subscope has joined #openstack-ironic04:15
*** killer_prince has joined #openstack-ironic04:43
*** killer_prince is now known as lazy_prince04:43
*** pcrews has quit IRC04:46
*** ryanpetrello has quit IRC05:10
*** achanda has joined #openstack-ironic05:13
*** davideagnello has joined #openstack-ironic05:15
*** achanda has quit IRC05:15
*** achanda has joined #openstack-ironic05:18
*** davideagnello has quit IRC05:20
*** rushiagr_away is now known as rushiagr05:25
*** harlowja is now known as harlowja_away05:31
*** ryanpetrello has joined #openstack-ironic05:33
*** ryanpetrello has quit IRC05:39
*** ryanpetrello has joined #openstack-ironic05:44
*** pensu has joined #openstack-ironic05:46
*** achanda has quit IRC05:51
*** achanda has joined #openstack-ironic05:57
*** ryanpetrello has quit IRC06:07
*** achanda has quit IRC06:34
*** achanda has joined #openstack-ironic06:41
*** achanda has quit IRC07:32
*** achanda has joined #openstack-ironic07:53
*** pensu has quit IRC07:55
*** achanda has quit IRC08:07
*** lazy_prince has quit IRC08:10
*** pensu has joined #openstack-ironic08:11
*** killer_prince has joined #openstack-ironic08:12
*** killer_prince is now known as lazy_prince08:12
*** Haomeng|2 has joined #openstack-ironic08:31
*** Haomeng has quit IRC08:31
*** andreykurilin_ has joined #openstack-ironic08:46
*** Haomeng has joined #openstack-ironic09:11
*** Haomeng|2 has quit IRC09:12
*** romcheg has joined #openstack-ironic09:14
*** pensu has quit IRC09:22
*** subscope_ has joined #openstack-ironic09:47
*** andreykurilin_ has quit IRC10:05
*** datajerk has quit IRC11:07
*** krtaylor has quit IRC11:07
*** yuriyz has quit IRC11:07
*** bigjools has quit IRC11:07
*** achanda has joined #openstack-ironic11:07
*** datajerk has joined #openstack-ironic11:10
*** krtaylor has joined #openstack-ironic11:10
*** yuriyz has joined #openstack-ironic11:10
*** bigjools has joined #openstack-ironic11:10
*** igordcard has joined #openstack-ironic11:11
*** ChuckC has quit IRC11:11
*** kevinbenton has quit IRC11:11
*** zer0c00l has quit IRC11:11
*** toabctl has quit IRC11:11
*** jeblair has quit IRC11:11
*** greghaynes has quit IRC11:11
*** achanda has quit IRC11:12
*** ChuckC has joined #openstack-ironic11:13
*** kevinbenton has joined #openstack-ironic11:13
*** zer0c00l has joined #openstack-ironic11:13
*** toabctl has joined #openstack-ironic11:13
*** jeblair has joined #openstack-ironic11:13
*** greghaynes has joined #openstack-ironic11:13
*** Haomeng|2 has joined #openstack-ironic12:12
*** Haomeng has quit IRC12:13
*** igordcard has quit IRC12:40
*** igordcard has joined #openstack-ironic12:41
*** igordcard has quit IRC12:46
*** romcheg has quit IRC13:39
*** romcheg has joined #openstack-ironic13:40
*** romcheg has quit IRC13:47
*** kfox1111 has joined #openstack-ironic13:49
kfox1111how do I figure out what to use for: swift_temp_url_key=13:50
kfox1111is it just random?13:51
*** ryanpetrello has joined #openstack-ironic14:06
*** alexpilotti has joined #openstack-ironic14:18
kfox1111almost there...14:25
kfox1111Error downloading image.', u'code': 500, u'type': u'ImageDownloadError', u'details': u'Could not download image with id 5cd045d6-aa7d-422d-b9b4-b84e5da12086.'14:25
*** rushiagr is now known as rushiagr_away14:36
*** rushiagr_away is now known as rushiagr14:40
*** ryanpetrello has quit IRC14:52
*** pensu has joined #openstack-ironic15:18
NobodyCammorning ironic15:24
NobodyCamkfox1111: just use a random string15:25
*** pcrews has joined #openstack-ironic15:55
*** pensu has quit IRC16:12
*** yjiang5 has quit IRC16:28
*** romcheg has joined #openstack-ironic16:33
*** subscope_ has quit IRC16:39
*** andreykurilin_ has joined #openstack-ironic16:40
*** romcheg has quit IRC16:55
*** romcheg has joined #openstack-ironic17:09
*** pcrews has quit IRC17:20
*** andreykurilin_ has quit IRC17:21
*** andreykurilin_ has joined #openstack-ironic17:21
*** ChanServ changes topic to "Bare Metal Provisioning | Status: http://bit.ly/ironic-whiteboard | Docs: http://docs.openstack.org/developer/ironic/ | Bugs: https://bugs.launchpad.net/ironic"17:25
*** andreykurilin_ has quit IRC17:28
*** PaulCzar has quit IRC17:44
*** pensu has joined #openstack-ironic18:09
*** romcheg has quit IRC18:17
*** romcheg has joined #openstack-ironic18:20
*** romcheg has quit IRC18:37
*** romcheg has joined #openstack-ironic18:37
*** andreykurilin_ has joined #openstack-ironic18:44
*** romcheg has quit IRC18:52
*** romcheg has joined #openstack-ironic18:53
*** spandhe has joined #openstack-ironic18:53
*** pensu has quit IRC19:11
*** ryanpetrello has joined #openstack-ironic19:14
*** spandhe has quit IRC19:19
*** ryanpetrello has quit IRC19:21
*** ryanpetrello has joined #openstack-ironic19:24
*** spandhe has joined #openstack-ironic19:38
*** ryanpetrello has quit IRC19:43
*** romcheg has quit IRC19:51
*** romcheg has joined #openstack-ironic19:58
*** davideagnello has joined #openstack-ironic20:08
*** andreykurilin_ has quit IRC20:12
*** andreykurilin_ has joined #openstack-ironic20:13
*** romcheg1 has joined #openstack-ironic20:32
*** romcheg has quit IRC20:32
*** davideagnello has quit IRC20:33
*** romcheg has joined #openstack-ironic20:36
*** romcheg1 has quit IRC20:37
*** rushiagr is now known as rushiagr_away20:37
*** ryanpetrello has joined #openstack-ironic20:41
*** spandhe has quit IRC20:49
*** andreykurilin_ has quit IRC21:06
*** andreykurilin_ has joined #openstack-ironic21:07
*** andreykurilin_ has quit IRC21:12
*** andreykurilin_ has joined #openstack-ironic21:12
*** ryanpetrello has quit IRC21:50
*** ryanpetrello has joined #openstack-ironic21:50
*** kevinbenton has quit IRC22:08
*** ryanpetrello has quit IRC22:09
*** davideagnello has joined #openstack-ironic22:22
*** davideagnello has quit IRC22:26
*** romcheg1 has joined #openstack-ironic22:28
*** romcheg has quit IRC22:30
*** andreykurilin_ has quit IRC22:49
*** spandhe has joined #openstack-ironic22:49
*** cohn has left #openstack-ironic23:22
*** spandhe has quit IRC23:49
*** alexpilotti has quit IRC23:53
*** spandhe has joined #openstack-ironic23:54
*** spandhe has quit IRC23:56

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!