Friday, 2011-06-03

*** jeffjapan has joined #openstack00:03
*** lborda has quit IRC00:03
*** asdfqwer has joined #openstack00:03
*** deshantm_away is now known as deshantm00:05
*** pguth66 has quit IRC00:07
*** pguth66 has joined #openstack00:08
asdfqwerdoes openstack cross over into a lot of the responsibility of the hypervisor00:10
asdfqwergiven glance and storage management00:10
WormManin my opinion(very new to openstack), not really, at least for KVM and Xen. It's more of a wrapper00:11
asdfqweri mean, i'm reading through the docs and openstack asserts it requires a hypervisor but is the responsiblity of say something like xen of openstack is interfacing with it00:12
asdfqwerya00:12
WormManit just tells the hypervisor what to do, where the storage lives... you'd do the same with xm/libvirt00:12
asdfqwerlooks like it just makes deployment easier as well00:12
asdfqwerbut look at this00:13
asdfqwerhttp://wiki.openstack.org/XenServerDevelopment00:13
asdfqwerhttp://wiki.openstack.org/XenServerDevelopment#Instance_Management00:13
asdfqwerpreparing images for openstack versus xen is totally different00:13
WormManyea, XenServer(and VMWare) I expect are a bit of a different animal00:13
WormManremember, XenServer is much more of a complete virtualization solution like VMWare than a thin hypervisor like Xen or KVM00:14
asdfqwerthe intergration is somewhat confusing though00:15
WormManyea, I read that page, my brain hurt00:15
asdfqwerespecially for hypervisor, I mean it's like you opt out of configuration and delegate it for openstack00:15
WormManluckily, we aren't going to be paying for XenServer here :)00:16
*** dendrobates is now known as dendro-afk00:16
asdfqwerXen looks like it's still better at handling networking, dns, IPs, etc.00:16
*** lborda has joined #openstack00:17
asdfqwerthing is i work in a datacenter00:17
asdfqweri'm not our admin but a developer00:17
WormManit really depends on what you want... as always00:17
WormManI work for a 'hosting company' and we have clients who want a nice API drivable provisioning solution, so we're looking hard at openstack00:18
asdfqwerwell, we have like 6 shared web hosts, 3 sql servers, dns server, and a few dedicated hosts00:18
asdfqwerall running on windows ._.00:18
WormMan(they want to move from a public cloud to a semi-private cloud...)00:18
WormManwe have about 3000... I think, none running windows :)00:19
WormMan(except at corporate, but those don't count)00:19
*** lborda has quit IRC00:19
asdfqwernot to mention all the ColdFusion applications they host00:19
asdfqwerI don't see running a bunch of Windows guests as VMs on CF turning out well00:19
WormMandepends on what problem you're trying to solve00:20
asdfqwermostly maintence and down time00:20
asdfqwernot to mention flexibility00:20
*** mgius is now known as mgius-away00:20
WormManif you want isolation, and they don't have huge performance needs, it's probably fine.00:20
*** joearnold has quit IRC00:21
WormManbut, I don't think openstack is likely the right answer(but maybe that's me)00:21
*** CK483 has quit IRC00:21
WormMansomething more of a VMWare or XenServer, non-cloud thing may work better00:21
asdfqweryeah but they cheap00:21
WormManheh00:21
WormManwell, you can try some of the other front-ends for Xen(or KVM)00:21
asdfqwerI mean, if we get a 2-3 shared hosts up and running00:22
asdfqwerthe problem is migration00:22
asdfqwerhow are you storing images and what format?00:22
WormManyea, openstack doesn't do that well yet(at all?) KVM can, but I don't know about what friendly tools there are00:22
asdfqwerXenServer prefers VDI00:23
WormManwe're testing with raw disk, I have no idea what our clients will want to give us00:23
WormManprobably something compatible with amazon00:23
asdfqwerKVM simple enough?00:24
WormManI personally use KVM to host one windows VM at home, but I have no idea in an enterprise situation00:25
asdfqweris it typical to run hypervisor and openstack (compute) on same machine00:25
asdfqwerya00:25
WormManthe nova-compute does run on the hypervisored systems, it manages the hypervisor00:26
asdfqwerokay00:26
asdfqwerglance and storage are more or less extensions00:26
asdfqwerthings that can be handled by hypervisor?00:26
WormManand can run on other systems00:26
WormManglance I believe is required, swift is not00:26
*** _vinay has quit IRC00:27
asdfqwerWormMan, looks like compute can manage images00:31
asdfqwer>There are two methods for managing images. Images can be served through the OpenStack Image Service, a project that is named Glance, or use the nova-objectstore service.00:31
WormManahh, I've not looked at it00:32
WormManI spent today benchmarking hypervisors :)00:32
asdfqwerdoesn't sound like fun00:32
WormMannecessary evil00:32
asdfqweri take that back00:32
asdfqwerwhat sort of tests?00:33
WormManthe not-fun part was trying to actually make Xen 4.1 work00:33
*** obino has quit IRC00:34
WormManlmbench for CPU and syscall and memory; iperf for network, and now bonnie++ or iozone for disk00:34
WormMan(running on an ubuntu guest)00:34
asdfqweryeah i'm trying to convince co-workers to avoid xen as much as possible, esp. given the fact they think they can integrate it into openstack w/o a hitch00:34
*** obino has joined #openstack00:35
WormManXen has definite advantages, it's more mature, and IO definitely seems faster(Network and Disk) which is a high priority for our clients00:35
WormMannow, getting it to run is a different story :)00:35
WormMan(I've not even looked at the openstack part yet)00:36
asdfqwerwhat version?00:40
asdfqwerit's funny cause XenServer 5.6 and XCP 1.0 are using the exact same admin guide00:41
asdfqwerhttp://docs.vmd.citrix.com/XenServer/5.6.0fp1/1.0/en_gb/reference.html and http://www.xen.org/files/XenCloud/reference.pdf00:41
WormManXen 4.1(compliled from source, hooked to a hand compiled 2.6.32.40-xen kernel and stuck on ubuntu 10.0400:41
WormMan)00:41
WormManyea, we're looking at raw Xen, not the packaged stuff like XenServer or XCP00:41
*** Jbain has joined #openstack00:42
asdfqwerwhat's difference really?00:43
asdfqwern/m00:43
asdfqwer>citrix00:43
WormManpackaging, fit, polish, toolsets00:43
WormManand now, time to go home00:44
asdfqwerk00:44
asdfqwerthanks for input00:44
asdfqwergl00:44
*** dprince has joined #openstack00:47
*** adjohn has joined #openstack00:47
*** miclorb_ has quit IRC00:47
*** vladimir3p has quit IRC00:50
*** gaveen has quit IRC00:56
*** miclorb_ has joined #openstack00:58
*** dprince has quit IRC01:02
*** osier has quit IRC01:05
*** mgius-away is now known as mgius01:07
*** stewart has quit IRC01:16
*** zenmatt has quit IRC01:21
*** stewart has joined #openstack01:29
*** MotoMilind has quit IRC01:34
*** gustavomzw_ has joined #openstack01:37
*** wariola has joined #openstack01:39
*** mattray has joined #openstack01:40
*** Ryan_Lane has quit IRC01:40
*** jatsrt has joined #openstack01:41
jatsrt2101:41
dsockwell1701:41
jatsrtha01:41
jatsrt 4201:41
dsockwellHIKE01:41
jatsrtfat fingered that one01:41
jatsrtanyone out there able to answer questions about pause/suspend in diablo-101:42
dsockwellnot me, i'm trying to get installed01:43
jatsrtstuck?01:43
dsockwellnot sure how i'm going to interface nova-compute with xe n01:43
dsockwellxen01:43
jatsrtahh01:43
jatsrtyeah01:43
jatsrtseems alot of people trying that01:43
jatsrtwhy not KVM?01:44
dsockwellbut right now i'm trying to tech ubuntu to multipath01:44
dsockwellhardware is too old01:44
jatsrtreally?01:44
dsockwellyes01:44
jatsrtI've got some old opterons and xeons running it just fine01:44
dsockwellthis is a HT P401:44
jatsrtahhh, yeah01:44
dsockwellyup01:44
dsockwellfree is good, but it comes with some baggage01:45
jatsrtyeah, I used my free non virtaulizable processors for the management stuff01:45
*** cloudgroups has joined #openstack01:45
*** jdurgin has quit IRC01:46
dsockwellyeah01:46
dsockwellme too :D01:46
dsockwellbut i'm also using them for hypervisors, which is Fun01:46
dsockwellit seems like bexar had a nova.conf directive to specify the hypervisor, but i'm not seeing it on cactus01:47
dsockwelldoes it think it's smart enough to find out for itself?01:47
jatsrtit may be01:47
dsockwellmy opterons right now are running zfs in the storage server01:48
jatsrtDEFINE_string('connection_type', 'libvirt', 'libvirt, xenapi or fake')01:48
jatsrt               ['hypervisor=xenserver;kvm', 'os=linux;windows'],01:48
dsockwellhmmmmm01:48
dsockwellwhere do you see that01:48
jatsrtflags.py01:48
dsockwellok01:48
dsockwelli'll look at the docs again01:49
jatsrtDEFINE_list('zone_capabilities',01:49
jatsrt                ['hypervisor=xenserver;kvm', 'os=linux;windows'],01:49
jatsrt                 'Key/Multi-value list representng capabilities of this zone')01:49
jatsrtyeah, docs may not be the best, look at the code if you really need to do soemthing :-)01:49
dsockwellheh01:49
dsockwellnoted01:49
*** cloudgroups has left #openstack01:50
jatsrtI'd try connection_type=xenapi in your nova.conf01:50
dsockwellxenapi is for xenserver01:51
dsockwelli'm thinking it would be libvirt01:51
jatsrthttp://paste.openstack.org/show/1528/01:51
*** pguth66 has quit IRC01:51
jatsrtso libvirt , you may need to change your ....01:52
dsockwelli might have to set up libvirt to talk to xen01:52
dsockwellthat sounds easy enough01:52
dsockwelli should start taking notes01:52
dsockwellwith kvm lots of distributions are dropping official support for xen01:53
jatsrtlibvirt.xml.template01:53
dsockwellwhich really screws over people with old gear01:53
dsockwelllooks like i'll have to compile it from source01:54
dsockwelli'd switch over to debian but i'd rather compile xen than openstack01:54
jatsrtyeah, kvm is simple01:54
*** zwick has joined #openstack01:55
uvirtbotNew bug: #792156 in nova "paramiko not installed in venv, required by smoketests/base.py" [Undecided,In progress] https://launchpad.net/bugs/79215601:56
jatsrtdsockwell: may ve as simple as FLAGS.libvirt_type == 'xen'01:56
dsockwellneat, thank you01:56
jatsrtthere are probably people hanging around here that would know for sure, I'm just guessing based on code01:56
dsockwellwell i appreciate it01:56
jatsrtLibvirt domain type.  Can be kvm, qemu, uml, xen01:57
dsockwellcool!01:57
jatsrtso that would just be putting --libvirt_type=xen in the nova.conf01:58
*** mattray has quit IRC02:01
*** ryker has joined #openstack02:03
*** mgius is now known as mgius-away02:04
*** zwick has quit IRC02:04
*** mancdaz has quit IRC02:11
*** kaz has joined #openstack02:18
*** robbiew has joined #openstack02:22
*** hadrian has quit IRC02:23
*** PeteDaGuru has quit IRC02:26
*** miclorb_ has quit IRC02:28
*** gustavomzw_ has quit IRC02:28
*** cloudgroups has joined #openstack02:28
*** chiehwen has joined #openstack02:31
*** cloudgroups has quit IRC02:31
*** lborda has joined #openstack02:33
uvirtbotNew bug: #792170 in swift "Add complete support for HTTP proxies in client.py" [Undecided,New] https://launchpad.net/bugs/79217002:41
*** zenmatt has joined #openstack02:42
*** osier has joined #openstack02:45
*** julian_c has joined #openstack02:48
*** Campbell has quit IRC02:52
*** miclorb_ has joined #openstack02:56
*** blamar__ has joined #openstack02:57
*** ryker has quit IRC03:02
*** miclorb_ has quit IRC03:03
*** konetzed has quit IRC03:03
*** konetzed has joined #openstack03:04
*** ches has quit IRC03:09
*** ches has joined #openstack03:09
*** obino has quit IRC03:10
*** jatsrt has quit IRC03:14
*** lborda has quit IRC03:15
*** osier has quit IRC03:22
*** osier has joined #openstack03:23
*** lborda has joined #openstack03:29
*** AimanA is now known as HouseAway03:32
*** CK483 has joined #openstack03:40
*** miclorb_ has joined #openstack03:56
*** jpgeek has joined #openstack04:02
*** gaveen has joined #openstack04:12
*** Zangetsue has joined #openstack04:25
*** openpercept_ has joined #openstack04:31
*** kashyap has joined #openstack04:31
*** gaveen has quit IRC04:42
*** CK483 has quit IRC04:49
*** gaveen has joined #openstack04:55
*** blamar__ has quit IRC04:56
*** miclorb_ has quit IRC05:07
*** miclorb_ has joined #openstack05:17
*** mgoldmann has joined #openstack05:25
*** miclorb_ has quit IRC05:41
*** jeffjapan has quit IRC05:46
*** Binbin has joined #openstack05:48
*** zenmatt has quit IRC05:51
*** adrianmir has quit IRC06:06
*** Ryan_Lane has joined #openstack06:07
*** 16WAAJDQ7 has joined #openstack06:20
*** 16WAAJDQ7 is now known as mihgen_06:22
*** mihgen_ is now known as _mihgen06:23
*** _mihgen is now known as mihgen106:23
*** mihgen1 is now known as mihgen206:23
*** mihgen2 is now known as mihgen_06:23
*** agarwalla has joined #openstack06:25
*** guigui1 has joined #openstack06:25
*** guigui1 has left #openstack06:25
*** gaveen has quit IRC06:33
*** gaveen has joined #openstack06:36
*** gaveen has joined #openstack06:36
*** obino has joined #openstack06:41
*** thickskin has quit IRC06:44
*** agarwalla has quit IRC06:47
*** kashyap has quit IRC06:53
*** dysinger has quit IRC07:01
uvirtbotNew bug: #792217 in swift "Documentation: Configuration Parameters" [Undecided,New] https://launchpad.net/bugs/79221707:01
*** allsystemsarego has joined #openstack07:02
*** allsystemsarego has joined #openstack07:02
*** Ryan_Lane has quit IRC07:02
shehjartfolks, are openstack instance stores ephemeral or persistent?07:03
*** reidrac has joined #openstack07:03
*** thickskin has joined #openstack07:05
*** dysinger1 has joined #openstack07:06
*** Razique has joined #openstack07:07
RaziqueHi all :)07:09
shehjarthi Razique, would you know if openstack instance stores are ephemeral,like ec2 or persistent, like vmware esx?07:11
Raziquehis shehjart07:11
Raziqueinstances are ephemerals07:11
Raziquethey are persistent thought a reboot07:12
*** dysinger has joined #openstack07:12
*** kashyap has joined #openstack07:12
Razique (reboot of instance itfself or reboot of the nova-components), but since you terminate the instance, it is detroyed, and you loose the content into it.07:12
RaziqueYou have to attach and EBS volume in order to preserve your datas07:13
shehjarti suppose there is some mechanism to sync the instances to disk on a reboot07:13
shehjartthanks07:13
Raziqueshehjart: for that you have to create "bootable EBS", which means, your instance is stored on the EBS server07:15
*** dysinger1 has quit IRC07:15
shehjartRazique, is that bootable ebs the default mode when launching an instance?07:16
*** Zangetsue has quit IRC07:16
Raziqueshehjart: I've not explored that part yet, but I don't think so07:18
shehjartok07:18
*** rcc has joined #openstack07:19
Raziquethere is no such thing as a "default mode", because, to me, it is not the "type" of instance which matter, but where it is stored07:20
*** sebastianstadil has left #openstack07:20
RaziqueI explain : for a classic image, and a EBS, you run them the same way (via euca-run-instance), at that stage, the place where the image is doesn't matter07:21
Raziqueshehjart: but to be honnest, I could be wrong, and glad to be corrected :)07:22
shehjartRazique, np, thanks a bunch, it does tell me what else to look for07:24
Raziqueshehjart: :)07:24
*** jeffjapan has joined #openstack07:28
*** mihgen_ has quit IRC07:41
*** jeffjapan has quit IRC07:43
*** adjohn has quit IRC07:46
dsockwellwould openstack play nice with xen 3.3?07:49
*** nerens has joined #openstack07:49
*** jeffjapan has joined #openstack07:56
*** nerens has quit IRC07:56
*** mihgen_ has joined #openstack07:59
*** antenagora has joined #openstack08:01
*** antenagora_ has joined #openstack08:01
*** antenagora has quit IRC08:01
*** antenagora_ is now known as antenagora08:01
*** Zangetsue has joined #openstack08:14
RaziqueHi all, I'm unable to ping or SSH an instance, here is what I see when I run a euca-get-console-output http://paste.openstack.org/show/1530/08:14
*** jedi4ever has joined #openstack08:22
*** jeffjapan has quit IRC08:24
*** nacx has joined #openstack08:31
*** jpgeek has quit IRC08:40
*** winston-d has quit IRC08:45
*** primeministerp has quit IRC08:49
*** jedi4ever has quit IRC08:55
*** antenagora has quit IRC08:58
kazswift is how get the sent/received information volume?09:00
*** ryker has joined #openstack09:02
*** adjohn has joined #openstack09:04
*** antenagora has joined #openstack09:10
*** katkee has joined #openstack09:12
*** chiehwen has quit IRC09:12
*** openpercept_1 has joined #openstack09:12
*** openpercept_ has quit IRC09:13
*** openpercept_1 is now known as openpercept09:13
*** openpercept has joined #openstack09:13
RaziqueHi, I found the solution, it was related to the image I uploaded, for which the network injection didn't work, after I get a new image from http://uec-images.ubuntu.com/maverick/20110601/ it's working :)09:14
*** mihgen_ has quit IRC09:21
*** gaveen has left #openstack09:21
*** ryker has quit IRC09:24
*** kaz has quit IRC09:30
*** kaz_ has joined #openstack09:31
*** primeministerp has joined #openstack09:35
*** mgoldmann has quit IRC09:40
*** irahgel has joined #openstack09:43
*** kennethkalmer has quit IRC09:44
*** adjohn has quit IRC09:58
*** antenagora has quit IRC10:00
*** katkee has quit IRC10:02
*** miclorb_ has joined #openstack10:09
*** mihgen_ has joined #openstack10:10
*** mihgen_ has quit IRC10:14
*** mihgen_ has joined #openstack10:15
*** markvoelker has joined #openstack10:16
*** primeministerp has quit IRC10:22
*** newopen has joined #openstack10:31
newopenhi,10:32
newopenwho can tell me how nova-network works and why it use br100?10:32
*** Binbin has quit IRC10:34
*** taihen has joined #openstack10:41
*** osier has quit IRC10:45
*** kennethkalmer has joined #openstack10:50
*** miclorb_ has quit IRC10:53
*** miclorb has joined #openstack10:57
*** kennethkalmer has quit IRC10:58
*** wariola has quit IRC10:58
*** kennethkalmer has joined #openstack11:03
*** shehjart has quit IRC11:27
*** sante has joined #openstack11:32
*** miclorb has quit IRC11:33
*** primeministerp has joined #openstack11:37
*** kennethkalmer has quit IRC11:39
*** julian_c has quit IRC11:40
*** shehjart has joined #openstack11:43
*** PeteDaGuru has joined #openstack11:48
*** ameade has joined #openstack11:50
*** mihgen_ has quit IRC11:53
*** sante has quit IRC11:55
*** mihgen_ has joined #openstack12:00
*** openpercept_ has joined #openstack12:14
*** openpercept_ has quit IRC12:14
*** openpercept_ has joined #openstack12:14
*** openpercept has quit IRC12:16
*** BK_man has quit IRC12:16
*** katkee has joined #openstack12:20
*** BK_man has joined #openstack12:25
*** katkee has quit IRC12:27
*** katkee has joined #openstack12:28
*** kaan_ has joined #openstack12:31
*** dprince has joined #openstack12:33
*** ryker has joined #openstack12:33
*** ameade has quit IRC12:35
*** ameade has joined #openstack12:38
*** kennethkalmer has joined #openstack12:39
*** kennethkalmer has joined #openstack12:40
*** jedi4ever has joined #openstack12:41
*** jatsrt has joined #openstack12:41
*** shentonfreude has joined #openstack12:54
*** jfluhmann has quit IRC12:54
*** ryker has quit IRC12:55
*** jaypipes-afk is now known as jaypipes12:55
*** hadrian has joined #openstack12:57
RaziqueWhen I run an Instance downloaded from Ubuntu EUC images, I've this errors in nova-api.log13:01
Raziquehttp://paste.openstack.org/show/1531/13:01
*** NashTrash has joined #openstack13:01
NashTrashGood morning openstack'ers13:01
Raziquethe UEC repo : http://uec-images.ubuntu.com/maverick/20110601/13:01
RaziqueNashTrash: Hi to you :)13:01
NashTrash:)13:02
NashTrashI want to delete a nova network and replace it with a different one.13:02
NashTrashTo be more specific, right now my network is 192.168.51.0/25 and I want to go to 192.168.51.24.13:03
RaziqueOh I found a question related to my issue : https://answers.launchpad.net/nova/+question/14506213:03
NashTrashUsing nova-manage is there a good way to do this or do I just nova-manage network delete and nova-manage network create13:03
*** h0cin has joined #openstack13:04
*** h0cin has joined #openstack13:04
RaziqueNashTrash: Edit your nova.conf and use nova-manage in order to delete the old one and create a new one13:04
RaziqueNashTrash: If the network is attached to a project, you may use nova-manage scrub PROJECT-NAME first13:05
NashTrashAh, the nova-manage scrub is the step I think I am missing13:06
NashTrashRazique: Thanks13:06
*** ShermanBoyd has quit IRC13:06
RaziqueNashTrash: np13:06
*** ShermanBoyd has joined #openstack13:06
*** jfluhmann has joined #openstack13:07
thickskinhi guys.13:08
Raziquehi thickskin13:09
thickskinsomebody tell me what is nova-network and nova-schduler.13:09
Raziquethickskin: have you read some docs on the nova project first or are you totally new ? :D13:10
thickskinI`ve already docs.-,.-;;13:10
thickskinI`ve already read docs.13:11
*** ctennis has left #openstack13:12
*** primeministerp has quit IRC13:13
thickskinI want to know their achitecture.13:14
*** primeministerp has joined #openstack13:15
Raziquethickskin: hang on13:16
*** ryker has joined #openstack13:16
Raziquethickskin: http://docs.openstack.org/cactus/openstack-compute/admin/content/understanding-the-compute-service-architecture.html13:16
Raziquedoes that enlighten you ?13:16
NashTrashOk, I have a new issue now.  I just upgraded from \trunk (a couple of weeks old) to the milestone release.  I tried to create a VM but am getting an error.  See http://paste.openstack.org/show/1532/ for details.13:17
NashTrashIt is clear that my DB schema has changed.  How do I make sure it is up to date?13:17
NashTrashIs that nova-manage db sync?13:17
thickskinRazique:thank you.13:19
thickskinRazique:Can I ask something more?13:19
thickskinRazique: I want to know what is this?  "Configuring networks for compute nodes"13:20
NashTrashOk, nova-manage db sync seems to have solved that issue, on to the next.13:20
RaziqueNashTrash: thanks for the hint13:20
RaziqueNashTrash: where do you see that ?13:21
NashTrashRazique: I found the error in /var/log/nova/nova-api.log13:21
RaziqueNashTrash: sorry, I wanted to ask to thickskin :D13:22
RaziqueNashTrash: thanks though o/13:22
Raziquethickskin: the nova-network service creates vlans and briges, handles iptables and ebtables rules13:22
NashTrashOk, so now my instance starts to build, but it fails with an error in the nova-compute node log.  Here are the details: http://paste.openstack.org/show/1533.13:23
Raziquethickskin: I'll comment that part :)13:23
NashTrashNot even really sure what the issue is off the top of my head.13:23
NashTrashTime to look at code.13:23
*** Zangetsue_ has joined #openstack13:24
RaziqueNashTrash: what euca-describe-instances shows ?13:24
RaziqueI think I've already had that issue :) let me check13:25
*** Zangetsue has quit IRC13:26
*** Zangetsue_ is now known as Zangetsue13:26
RaziqueNashTrash: could you paste your nova.conf and ifconfig for the servers13:27
*** hggdh has quit IRC13:27
thickskinRazique: how can I check that in my physical node?13:27
Raziquethickskin: what would you like to check ?13:27
*** hggdh has joined #openstack13:28
thickskinRazique: if nova-network is worked there is something log.13:28
Raziquethickskin: if the nova-network installed on the server?13:29
thickskinyes.13:29
Raziquecould you paste your nova.conf please ?13:29
thickskinwait for a second.13:29
thickskinRazique: here is my nova.conf http://pastebin.com/dpN5gdMR13:31
NashTrashRazique: No thing.  The instance is shutdown13:32
Raziquethickskin: seems good to me, what is your exact issue by now actually ?13:32
RaziqueNashTrash: ok so it goes in a shutdown step, could you send your nova.conf ?13:33
thickskinRazique: thank you for your help.13:34
*** deva has joined #openstack13:34
thickskinRazique: I just want to know basical knoweldge about "nova"13:34
NashTrashRazique: I have not changed my nova.conf recently.  This problem just started when I updated from ~bzr1050 to the milestone release.13:35
Raziquethickskin: ok, the first thing you should do i read that guide : http://nova.openstack.org/nova.concepts.html13:36
NashTrashRazique: I decided to defer on the network changes for now and first make sure the update worked.  Sadly it did not (at least yet).13:36
Raziquethickskin: dig around the sections, there are well written :)13:36
RaziqueNashTrash: what nova-manage service list returns ?13:36
*** foxtrotgulf has joined #openstack13:37
RaziqueNashTrash: while you made the upgrade, did you restarted the services ?13:38
deva@all , I recently had a problem running nova, installed in RHEL6.1,of DHCP request from VM instance isn't accepted at host machine. It turned out there is no firewall rule is added by openstack(nova) to allow DHCP requests from VM instance at host, although there are rules added to send DHCP replies from host to VM instance.13:38
larissadeva: Error: "all" is not a valid command.13:38
devaPlease let me know if I missed any configuration, or  there is any reason for nova not to add such rule13:39
*** sante has joined #openstack13:39
NashTrashRazique: nova-manage service list shows all good13:39
NashTrashRazique: And I thought that I had restarted all of the services, but heck, lets try it again.13:39
thickskinRazique: thank you for your help. see you next time.13:39
newopen who can tell me how nova-network works and why it use br100?13:40
*** amccabe has joined #openstack13:40
deva@Razique13:40
larissadeva: Error: "Razique" is not a valid command.13:40
devaHi anyone aware of my situation ..>?13:41
RaziqueNashTrash: which distro are you running ?13:41
uvirtbotNew bug: #792367 in nova "OSAPI: v1.1 image create support (serverRef)" [Low,In progress] https://launchpad.net/bugs/79236713:41
Raziquedeva: don't use the "@ symbol"; it's not a IRC command13:42
devaRazique: ok..  please lemme know if you are aware of my situation, that I posted earlier. Do u want me to post again13:43
Raziquedeva: please paste your nova conf and the result of nova-manage service list commande13:43
deva--verbose --nodaemon --dhcpbridge_flagfile=/opt/latest_code/latest_hpc/bin/nova.conf --network_manager=nova.network.manager.FlatDHCPManager --my_ip=10.0.1.3 --public_interface= --sql_connection=sqlite:////opt/latest_code/latest_hpc/nova.sqlite --auth_driver=nova.auth.dbdriver.DbDriver --libvirt_type=kvm --fixed_range=10.3.1.0/24 --flat_network_dhcp_start=10.3.1.2 ~13:44
*** BK_man has quit IRC13:44
*** BK_man has joined #openstack13:44
Raziquedeva: http://paste.openstack.org/13:44
*** j05h has quit IRC13:45
devaPaste #153413:46
newopenwho can explain me the role of br100 please?13:46
Raziquedeva: the link is incorrect13:46
RaziqueI can't click it13:46
Raziquenewopen: http://docs.openstack.org/bexar/openstack-compute/admin/content/ch04s02.html13:47
devahttp://paste.openstack.org/show/1535/13:47
devaplease try this13:47
*** kbringard has joined #openstack13:48
Raziquedeva: to be honnest, I use the VLAN mode, so not sure about the issue13:50
newopenRazique: thanks but it explains how configure networking not how nova-network works13:50
devacan you please clear my doubt that I have, whether  nova adds a firewall rule to allow DHCP requests from VM instance at host. Like when I installed RHEL6.1, firewall has few rules to drop unauthorised packets.So no DHCP boot requests weren't allowed.13:52
devawhen I added the rule  -A INPUT -i br100 -p udp -m udp --sport 67:68 --dport 67:68 -j ACCEPT13:52
devais started accepting DHCP requests13:53
kbringarddeva: that rule should be setup by nova13:53
kbringardunless there is a bug13:53
NashTrashRazique: I am running ubuntu10.04 with the new Diablo-1 milestone release13:53
NashTrashRazique: it appears that nova-network is having a problem bringing up dnsmasq13:53
RaziqueNashTrash: how many dnsmask processes do you have ?13:54
devayes, there is rule setup bu nova to allow DHCP replies back to VM instance , but rule to allow DHCP requests isn't added by nova13:54
Raziquedo you see something in nova-network.log ?13:54
devaI guess this might be bug, anyone of you can confirm this13:54
*** Zangetsue has quit IRC13:56
devaOr atleast can anyone tell me how to verify whether this is a bug or configuration mistake13:56
*** bcwaldon has joined #openstack13:57
primeministerpgreetings programs13:59
primeministerphi all just to let everyone know, our hyper-v stack is currently fully functional14:00
primeministerpwe've got 90 enlightened vm's running on top of 8 nodes14:00
primeministerpall linux vms14:00
devaOr atleast can anyone tell me how to verify whether this is a bug or configuration mistake14:00
*** kaan_ has quit IRC14:01
Raziqueprimeministerp1: seems nice :)14:01
kbringarddeva: unsure, I'm running 2011.3~d2~20110602.1142-0ubuntu0ppa1~maverick1 and it all works for me with no manual intervention14:01
kbringardprimeministerp: good work14:01
kbringardthat's cool14:01
kbringardmaybe it's a RH thing that's not being accounted for in nova14:02
*** med_out is now known as med14:02
*** med is now known as medberry14:03
devadoes your host machine is protected by firewall with rules in INPUT chain to drop packets that don't match all vaild rules above like this  -A INPUT -j REJECT --reject-with icmp-host-prohibited14:03
devamy host machine does,14:03
devathis is when problem occurs14:03
devawhat is RH  thing?14:04
kbringardI meant a redhat thing, since I'm running Ubuntu14:04
kbringardbut, my default policy is accept14:04
kbringardso if you have a default policy of drop, that would likely be your culprit14:04
devaNo, default policy is ACCEPT14:05
*** csgeek has joined #openstack14:05
kbringardwell sure, but you said you have a rule that drops everything that doesn't match a valid rule14:05
devabut as I said the firewall should be opened with rule, -A INPUT -i br100 -p udp -m udp --sport 67:68 --dport 67:68 -j ACCEPT  to accept DHCP requests14:06
kbringardwhich is the same thing as having the default policy be drop :-)14:06
devaI said about this rule -A INPUT -j REJECT --reject-with icmp-host-prohibited14:06
kbringardoh, that's just ICMP14:06
uvirtbotNew bug: #792388 in nova "Libvirt snapshot causes KeyError: 'architecture'" [Undecided,In progress] https://launchpad.net/bugs/79238814:06
devayeah you are right, same as drop . But shudn't nova create a rule to open firewall to allow DHCP requests from VM instance.when host machine is protected with firewall rules like this -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT  -A INPUT -i br100 -p udp -m udp --sport 67:68 --dport 67:68 -j ACCEPT  -A INPUT -p icmp -j ACCEPT  -A INPUT -i lo -j ACCEPT  -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT  -A IN14:08
*** Err404NotFound has joined #openstack14:08
devaWhich accepts , ping and SSH packets only14:08
*** bcwaldon has quit IRC14:08
devafor a security of host machine.14:09
kbringardyea, that's what I was getting to next, it probably should14:09
Err404NotFoundOpenStack is for more like Rackspace cloud servers, or EC2. Does it support Rackspace Cloud sites?14:09
csgeekI'm a complete noob with openstack.. just wanted to make double check something.  OpenStack is installed on top of an existign distro, .. so I can install Ubuntu Server and then install openstack on it.. correct?14:10
*** asdfqwer has quit IRC14:10
devakbringard: do u aware, if nova does something like that or not14:10
*** bcwaldon has joined #openstack14:10
RaziqueEverytime I launch a new instance, it's unable to get it's metadatas, I'm in VLAN mode, and I've added the iptables rules which makes a DNAT from the 169.254.169.254 to the api server14:10
jatsrtcsgeek: yes14:10
kbringardit doesn't look like it, I don't see a rule that like on my network-controller14:10
csgeekjatsrt: sweet.. thanks14:10
jatsrtubuntu is preferred14:10
devathen is it bug14:11
kbringardRazique: do you have a route that is intercepting it?14:11
jatsrtrazique: you do not need to do that14:11
*** hub_cap has joined #openstack14:11
jatsrton your compute nodes add:14:11
kbringardi found that if netconfzero was enabled, it would add a route for 169.254.0.0 that was hijacking the IPtables rule14:11
csgeekjatsrt: thank yo.14:11
csgeek*you14:11
jatsrt--ec2_dmz_host=172.16.16.1014:11
jatsrt--ec2_port=877314:11
kbringardah, there you go, or do that :-)14:11
jatsrtwith your host of course14:12
jatsrtthat will add the correct iptables rule14:12
Raziquehi jatsrt14:12
jatsrtor maybe that is on the network node14:12
Raziqueit did yup, I've already add thses flags yes, but when I check, 0 packets have match that iptable rule14:12
jatsrteither way add it everywhere and it should work14:12
*** BK_man has quit IRC14:12
devakbringard: please lemme know if you are chatting with me14:12
Raziquemoreover, I use image from uec-images.ubnutu.com14:13
kbringarddeva: my comment about not having a rule like that on my network controller was to you14:13
kbringardRazique: if you do a netstan -rn do you see a route for 169.254.0.0?14:13
kbringardon your compute nodes?14:13
kbringardthat will hijack the IPtables rule if it's there14:14
devakbringard: could you let me know, if there is any way I can confirm this is something nova is missing, and I can report it14:14
jatsrtrazique: same setup as me, VLAN, UEC images, multiple nodes, all works fine14:14
Raziquekbringard: I don't see the route14:14
Raziquejatsrt: weird thing is that I get a 40414:15
kbringarddeva: I really don't know, all I can tell you is that I don't have that rule on mine, so I am guessing it's an oversight and should probably be added to nova14:15
jatsrtso I had a similar propblem14:15
Razique(not a network unreachable as I had few days ago remember :) )14:15
jatsrtapache was running locally and screwing things up14:15
jatsrtuninstall apache14:15
kbringardRazique: ah, well that's something different then :-D14:15
jatsrtor at least disable it14:15
Raziquedon't Apache used by nova ?14:15
jatsrtfoudn this on lates ubuntu because server adds a web console by default14:16
jatsrtnope14:16
jatsrtnot that I know of at least14:16
kbringardyea, apache gets installed, but my install scripts explicitly remove it14:16
kbringardfor that exact reason14:16
Raziquekbringard: you right, nova doens't require Apache, Eucalyptus does! (I'm moving from euca to nova)14:17
newopen who can explain me the role of br100 please?14:17
Raziqueso I've apache running on the compute node :14:17
jatsrtkill it on compute node and api node14:17
kbringardnewopen: it is the bridge network device that allows the VMs to access the network14:17
jatsrtrestart everything14:17
*** j05h has joined #openstack14:17
kbringardhaha, yea, if you had euca installed you should format and reinstall :-p14:17
jatsrtagreed with kbringard14:18
dsockwellthirded14:18
jatsrteuca makes one hell of a mes of the system14:18
newopenso whu nova-network is the gateway?14:18
Raziquekbringard: ahah :p14:18
dsockwellthe missiles, fire them14:18
kbringarddsockwell: but I am le tired14:18
dsockwellwell then have a nap14:18
Raziquewell it took me hours to clean it ^^14:18
kbringarddsockwell: but then FIRE ZEE MISSELS!14:19
kbringardRazique:14:19
kbringarderr14:19
dsockwellthe point is nuke that eucalyptus box14:19
kbringardyes, agreed14:19
kbringardRazique: you should setup some kind of PXE, if you're going to deploy this to more than a few machines14:20
jatsrtrazique: a nice clean ubuntu install14:20
*** robbiew has joined #openstack14:20
kbringardin which case nuking the machine is easy14:20
jatsrtadd the trunk ppa14:20
jatsrtinstall everything on the management nodes, then disable what you don't want run on them14:20
jatsrtthen just install nova-compute on the compute nodes14:20
jatsrtsetup nova.conf14:20
jatsrtand up and running in no time14:21
Raziquejatsrt: that is what I love about nova :)14:21
jatsrtif doing vlan mode, don't need to mess with interfaces or anything14:21
Raziqueok so apache totally removed, let's restart everyhting :D14:21
Raziqueactually , i'm about to add 6 compute nodes (just one atm), when I'll put the nodes, i'll reinstall that current one :)14:22
Razique(need to go to the datacenter for that :o )14:22
jatsrtwhat no remote install!14:22
Raziquejatsrt: not yet, it's a new infrastructure14:22
dsockwellyou don't keep a ghoul in your cage to do that sort of thing?14:22
Raziqueahah you guys are funny :D14:23
dsockwellif my job was to babysit a cage i'd totally pretend i was in a zoo14:23
Raziquedsockwell: I know, but the physical configuration is not completely over :)14:23
dsockwellah14:24
jatsrtI'd love an excuse to head to the datra center, it's on the other side of the country14:24
kbringardw00t travel budget!14:24
kbringardhehe14:24
Raziquedsockwell: The remote PDU access ain't ready yet, etc...14:24
kbringardI've spent enough time in DCs in my career, I'm happy to not have to go to one again, ever14:25
jatsrtwell one of them is, the other is a block away14:25
NashTrashkbringard: I have a nova-network issue, might you have a bit of time?14:25
jatsrtkbrigard: that is true14:25
Raziquejatsrt: the thing is here, it's a 30 mn travel, so enought to eat half a day, not enough to make it a real travel :D14:25
kbringardNashTrash: sure, I take a stab at it14:25
RaziqueNashTrash: just ask here :D14:25
kbringardNashTrash: but I should tell you, if you're not using VLAN mode, my experience will be severely limited :-)14:26
kbringardyea, and what Razique said, if I can't help, someone probably can14:26
NashTrashkbringard: Thanks.  I opened a question for it (https://answers.launchpad.net/nova/+question/160146).  But the long and short is that I upgraded to D1 milestone release and now nova-network fails to start properly.14:26
NashTrashkbringard: I get all sorts of spew in the nova-network.log file.14:26
kbringardoh... I think I heard someone else say something about that this morning too... unless it was you14:26
kbringardone sec, lemme scroll back14:26
jatsrtI had the same problem14:27
newopenif i use another bridge then br100 which sent sflow traffic to another host, how be sure that my (nova-network) will permit this traffic?14:27
NashTrashkbringard: probably me14:27
jatsrtit was some crap left in the database of dead instances it was trying to recover the networking for14:27
NashTrashjatsrt: Ha.  What did the error look like?14:27
NashTrashjatsrt: Did you just purge a table or something?14:28
kbringardoh, that was you14:28
kbringardhaha14:28
NashTrash;)14:28
jatsrtNashTrash: I beleive I did, if you look around the line of code you see what it is grabbing, which I think is instance data and trying to reassign and rebuild it's network14:28
jatsrtI purges my projects, instances and network data14:29
jatsrtbecause I could14:29
jatsrtcleaned it up14:29
NashTrashjatsrt: I would really prefer not to lose my projects data.  Not a huge loss it if comes to that though14:29
jatsrtyou might be albe to get away with purging instances, if they are all dead anyway14:29
jatsrtand then do a project scrub14:29
NashTrashLet's try that14:30
newopen if i use another bridge then br100 which sent sflow trafic to another host, how be sure that my (nova-network) will permit this trafic?14:30
kbringardnewopen: I'm not sure about integrating it into Open vSwitch (meaning I don't know how/if the sflow stuff will work), but I use tons of different bridge devices14:31
kbringardnewopen: just set the bridge device and corresponding vlan tag in the networks table in the nova db14:31
kbringardand the compute/network code will bring up the bridges and tag them14:31
newopeni do it for bridge14:31
newopennova-network use br0 (openvswitch)14:32
newopenbut no configuration works with nova14:32
kbringardwell, nova makes brutils calls directly14:32
newopenwhen i use only openvswitch it sents sflow trafic14:32
kbringardat least it did last time I was messing with vswitch14:33
newopenwhen i integrate it with nova no more trafic :(((((14:33
*** jkoelker has joined #openstack14:33
kbringardso I had to run it with the brcompat daemon stuff14:33
newopenthe same thing with vlans14:35
*** sante has quit IRC14:36
Raziqueok, back14:37
*** sante has joined #openstack14:37
newopeni tagged vnets in different vlan but they still ping themselves14:37
Raziqueafter I removed Apache, and restarted the whole cloud, I still have 404 errors14:37
RaziqueI tried a wget http://169.254.169.254/2009-04-04/meta-data/instance-id, I do have a 404 error14:39
NashTrashjatsrt: nova-manage project scrub seems to have worked.14:39
NashTrashjatsrt: thanks.14:39
Raziqueit's like this ip doesn't exist14:39
*** alandman has joined #openstack14:39
jatsrtyep14:39
jatsrtRazique: yeah, I had similar issues14:39
jatsrtyou need to try to determine what is picking up the request14:40
jatsrta 404 means something is there, if it was nova-network you would get time outs14:40
* Razique hopes that jatsrt's memory will work nice :D14:40
jatsrthttp://169.254.169.25414:40
jatsrtwhat happens if you wget that from the compute host14:40
jatsrtyou should get a listing of the api dates14:40
jatsrtif you get a "generic" index page you are hitting something else14:41
Raziquei've an index.html14:41
Razique"It works!"14:41
Raziquehehe14:41
*** BK_man has joined #openstack14:41
jatsrtcontents of that?14:41
Raziquejatsrt: oh you know, it's the default Apache2 page14:41
jatsrtyep14:41
jatsrtsame problem still then14:42
jatsrtThis was something that was killing me with euca14:42
newopen<kbringard: what can une do with  brcompat14:42
Raziquethe one saying that the server works, it's that index.html page (with html tags and stuff :D )14:42
jatsrtwhen I clean installed I made sure apache was shut down14:42
jatsrtRazique: are you getting that from an instance or from a host?14:43
kbringardnewopen: it basically takes brcrtl commands and sticks them in a db, then applies the equivalent commands to open vswitch14:43
Raziquejatsrt: when I check the iptables rule (the NAT for that ip) 0 packets are passing thought it at all14:43
jatsrtyeah14:43
Raziquejatsrt: I see the 404 error when I issue an euca-get-console-output14:43
kbringardnewopen: but it's been like months since I messed with it :-/14:43
Raziquejatsrt: and I see that into nova-network.log http://paste.openstack.org/show/1537/14:44
jatsrtso that error seems like you need to scrub your projects14:45
jatsrtso I just checked and there are no iptables rules for 169 setup by nova that I can tell, not too sure how it proxy/nats it14:46
Raziquejatsrt: you should have one :) check Chain nova-network-PREROUTING (1 references)14:46
Raziquevia iptables -L -nv -t nat14:46
*** j05h has quit IRC14:46
Razique(at least, here, it's created when I start the nova-network service14:47
jatsrton manager or compute node?14:47
Raziquejatsrt: on manager14:47
Raziqueohh I was wrong, actually, packets DO match that rule14:47
jatsrtgot it -A nova-network-PREROUTING -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination 172.16.16.10:877314:48
Raziquejatsrt:  :)14:48
jatsrtso I had this because something else was holding port 80(apache) and intercepting the nat14:48
jatsrtnetstat -an showing apache still on port 80?14:49
Raziqueon both servers I run netstat -tanpu | grep ":80"14:49
kbringardor check lsof -i14:49
Raziqueoh14:49
RaziqueApache is running again Oo14:49
RaziqueThis is the compute node14:49
Raziquehttp://paste.openstack.org/show/1538/14:49
jatsrtthat might be doing it14:50
jatsrtkill apache or change the port in /etc/apache2...14:50
Raziqueplus it ain't running on the compute node, it's the "frontend"14:50
Raziquei'll remove it here too :)14:51
Raziquedunno why the script I get install it though :/14:51
Razique(that one https://github.com/elasticdog/OpenStack-NOVA-Installer-Script/raw/master/nova-install )14:51
RichiHttx, soren: wouldn't it make sense to export the meeting agenda as VCAL or similar so people can import/bookmark it?14:52
RichiHfor #openstack-meeting14:52
*** Eyk^off is now known as Eyk14:55
*** j05h has joined #openstack14:56
*** foxtrotdelta has joined #openstack15:01
*** Binbin has joined #openstack15:01
*** imsplitbit has joined #openstack15:02
*** foxtrotgulf has quit IRC15:02
*** kennethkalmer has quit IRC15:03
*** dgags has joined #openstack15:03
*** lorin1 has joined #openstack15:03
*** dendro-afk is now known as dendrobates15:07
Raziquejatsrt: do Glance use apache ?15:11
Raziquecuz I use Glance, not I have a "failed to spawn" error when I check via euca-describe instance15:11
*** hub_cap has quit IRC15:12
*** hub_cap has joined #openstack15:12
alandmanI have questions about projects and zones15:15
alandmanA user is assigned to a project, is a compute node assigned to a zone?15:16
alandmanIs the project then tied to the zone?15:16
jatsrtRazique: don't think so, I have glance too15:17
jatsrtno apache15:17
Raziquejatsrt: relief, I was afraid I broke down Glance15:17
Raziquebut still this failed to spawn remains weird. I removed manually bridge and Vlan on the compute node15:18
*** reidrac has quit IRC15:18
Raziqueat what stage are they created ?15:18
jatsrtRazique, what erors are you seeing now15:20
*** gondoi has quit IRC15:20
*** DodoPahim has quit IRC15:22
*** DodoPahim has joined #openstack15:24
*** obino has quit IRC15:25
*** rnirmal has joined #openstack15:27
Raziquejatsrt: found it http://paste.openstack.org/show/1539/15:27
*** gondoi has joined #openstack15:28
jatsrtum typo?15:28
Raziquejatsrt: what typo means ? (I'm french ^^)15:28
jatsrtAhh, did you type hvm instead of kvm somewhere15:29
jatsrtI'd try to say that in french but I'm not that good15:29
Raziquemmm no, don't think so15:29
RaziqueBUT15:29
jatsrthttps://bugs.launchpad.net/ubuntu/+source/vm-builder/+bug/44525315:30
jatsrtmake sure virtulization is on in the bios15:30
jatsrtwhat do you get on the compute node with kvm-ok15:30
Raziquejatsrt: it definitely is, this same instance was running before (and when I check via ps axl, it was a KVM image)15:31
*** jedi4ever has quit IRC15:31
Raziqueseems good :) http://paste.openstack.org/show/1541/15:31
*** dendrobates is now known as dendro-afk15:33
jatsrthmmm, I know I was able to get /dev/kvm without the bios allowing virtualization, but never saw this error. that is what it would indicate though15:33
*** deshantm_laptop has joined #openstack15:33
jatsrthow many servers are you using right now and how many are compute nodes?15:33
Raziquejatsrt: two servers atm, one for everything But nova-compute15:34
jatsrtcan you paste your nova-manage service list15:34
Raziqueand the other one which runs nova-compute15:34
RaziqueI think I figured out jatsrt15:35
jatsrtmostly to get my head wrapped around the setup15:35
jatsrtand....15:35
Raziqueon my management server, nova-compute is running =)15:35
jatsrtwhat was it15:35
*** vladimir3p has joined #openstack15:35
jatsrtthat is what I was getting at :-)15:35
Raziquethe management server is just a VM itself, so unable to run an instance. When nova scheduler checks for nodes, it uses the VM15:35
Raziqueheeh http://paste.openstack.org/show/1542/15:36
Raziquecan I remove nova-compute on the frontend like "apt-get remove nova-compute" without incidence ?15:36
Raziquehave to go (french festival here in Lyon 'Nuits Sonores')15:37
*** DodoPahim has quit IRC15:37
Raziquethanks a lot jatsrt , and you guys, fantastic community here :)15:37
jatsrtnova-manage service disable ....15:38
jatsrtto disable nova-ompute on that node15:38
jatsrtcya later15:38
Raziqueok, i'll do that, thanks mate15:38
*** Razique has quit IRC15:39
*** DodoPahim has joined #openstack15:40
*** kbringard has quit IRC15:40
*** kbringard has joined #openstack15:41
*** maplebed has joined #openstack15:47
*** nacx has quit IRC15:47
dsockwelldo there exist some public amis for openstack?15:48
dsockwellamis or tarballs or however they're distributed15:48
jatsrtubuntu uec images15:51
jatsrthttp://uec-images.ubuntu.com/15:51
*** jatsrt has left #openstack15:54
*** koolhead11 has quit IRC15:54
*** jatsrt has joined #openstack15:54
*** dendro-afk is now known as dendrobates15:56
*** irahgel has left #openstack15:57
*** DodoPahim has quit IRC15:59
*** obino has joined #openstack15:59
*** rchavik has quit IRC16:00
*** sante has quit IRC16:00
*** DodoPahim has joined #openstack16:00
uvirtbotNew bug: #792431 in nova "Double requirement in pip-requires" [Undecided,In progress] https://launchpad.net/bugs/79243116:01
katkeehello, i create a puppetmaster instance and then need to tell another puppet client on another instance the ip of the puppet master. can somebody suggest a way to do that?16:03
*** dragondm has joined #openstack16:09
*** foxtrotdelta has quit IRC16:10
elasticdogkatkee: wrong channel? but you can specify the master server in puppet.conf with the "server" configuration parameter16:12
*** kennethkalmer has joined #openstack16:14
*** dprince has quit IRC16:16
katkeeelasticdog: i was wondering if instances could update a DNS entry with OS API maybe16:17
*** kashyap has quit IRC16:19
*** kashyap has joined #openstack16:19
elasticdogkatkee: if the puppet master server is resolvable as "puppet.yourdomain.com" the clients will connect to it automatically16:23
elasticdognot sure what you mean by OS API though16:23
*** openpercept_ has quit IRC16:23
*** foxtrotgulf has joined #openstack16:24
*** Binbin has quit IRC16:29
*** tblamer has joined #openstack16:29
*** imsplitbit has quit IRC16:31
*** kashyap has quit IRC16:35
*** dysinger has quit IRC16:35
*** dysinger has joined #openstack16:35
*** mdomsch has joined #openstack16:35
*** dprince has joined #openstack16:38
*** joearnold has joined #openstack16:41
*** mgius-away is now known as mgius16:43
*** mattray has joined #openstack16:45
*** newopen has quit IRC16:51
*** Ryan_Lane has joined #openstack16:55
*** vladimir3p_ has joined #openstack16:56
*** koolhead17 has joined #openstack16:57
*** mgoldmann has joined #openstack16:58
katkeeelasticdog: i found another solution by using cloud-init. Thanks for your help16:59
*** jdurgin has joined #openstack17:00
kbringarddoes anyone know the status of inter security group communication? it looks like it's not working as I would expect... at least not in VLAN mode17:00
*** vladimir3p_ has left #openstack17:01
kbringardby which I mean, I bring up 2 instances in the same project in 2 different security groups, neither of which allows ICMP from anywhere, yet the instances can ping each other17:01
kbringardI thought ebtables was supposed to protect against that, but there don't appear to be any ebtables rules setup on any of my nodes (all set to accept)17:02
*** amccabe has quit IRC17:04
*** openpercept_ has joined #openstack17:04
*** openpercept_ has quit IRC17:04
*** openpercept_ has joined #openstack17:04
*** MarkAtwood has quit IRC17:08
kbringardfrom looking at the code it looks like it's only supported in xenserver?17:09
*** test123 has joined #openstack17:11
*** vladimir3p has quit IRC17:16
*** DodoPahim has quit IRC17:16
*** amccabe has joined #openstack17:17
*** test123 has quit IRC17:18
*** DodoPahim has joined #openstack17:19
*** vladimir3p has joined #openstack17:19
kbringardooooo, I think I found it17:28
kbringardflags.DEFINE_bool('allow_project_net_traffic',True,'Whether to allow in project network traffic')17:28
*** katkee has quit IRC17:30
*** deshantm_laptop_ has joined #openstack17:30
*** deshantm_laptop_ has quit IRC17:32
*** deshantm_laptop has quit IRC17:32
*** nelson has quit IRC17:36
*** nelson has joined #openstack17:36
*** aliguori has quit IRC17:39
kbringardso yea, if you don't want instances in the same project to be able to inherently talk to each other, set --allow_project_net_traffic=false in your nova.conf17:41
*** bcwaldon has quit IRC17:46
*** MarkAtwood has joined #openstack17:52
*** rcc has quit IRC18:02
*** MarkAtwood has quit IRC18:03
*** aliguori has joined #openstack18:12
vishykbringard: that is true, there is no blocking in a project18:15
vishykbringard: cool you found the flag :)18:15
kbringardhehe, yessir18:15
kbringardthen if I want the instances in a security group to talk to each other, I just do a euca-authorize --source-group group1 group118:16
kbringardyea?18:16
vishykbringard: in theory yes, although I've never tested security group source groups yet18:17
kbringardI was messing with it a bit... it worked in 2 groups, but then not in a 3rd, which seems odd18:17
kbringardso18:17
kbringardI probably did something wrong18:17
vishythat code has not been tested extensively, so it may be that there are some weird chains that break it18:18
vishyif you find a reproducible problem, ping soren about it.  He wrote that code18:18
kbringardokie dokie, yea, I was gunna say, I'll keep poking at it and see what I can come up with18:18
kbringardthank you sir18:18
*** NashTrash has quit IRC18:21
*** NashTrash has joined #openstack18:22
*** DodoPahim_ has joined #openstack18:23
*** DodoPahim_ has quit IRC18:24
*** DodoPahim has quit IRC18:24
*** heckj has joined #openstack18:25
uvirtbotNew bug: #792487 in nova "Xen image snapshot upload failure (glance 'v1' support)" [Medium,In progress] https://launchpad.net/bugs/79248718:26
*** DodoPahim has joined #openstack18:28
devavishy:Hi ..  if u remember, I was the one chatted with you regarding unable to ping VM instance in RHEL6.1 with firewall containing rules -A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT  -A INPUT -j REJECT --reject-with icmp-host-prohibited18:35
devaI found the issue was  Like when I installed RHEL6.1, firewall has few rules to drop unauthorised packets.So no DHCP boot requests weren't allowed.when I added the rule  -A INPUT -i br100 -p udp -m udp --sport 67:68 --dport 67:68 -j ACCEPT18:36
devaplease lemme know if something needs to be configured to make nova add rule to accept DHCP requests from host machine. I observed nova adds such rule to allow DHCP reply messages back to VM insatance from host not for DHCP requestd from VM to host18:38
devaor lemme know nova for any reason doesn't do this18:38
*** jonkelly has joined #openstack18:39
*** openpercept_ has quit IRC18:41
*** brd_from_italy has joined #openstack18:41
*** r5 has joined #openstack18:44
*** mattray has quit IRC18:45
*** PeteDaGuru has quit IRC18:46
*** PeteDaGuru has joined #openstack18:46
*** r5 has quit IRC18:49
*** r5 has joined #openstack18:49
*** jakedahn has joined #openstack18:53
*** nhm has quit IRC18:54
*** kennethkalmer has quit IRC18:54
*** r5 has quit IRC18:58
*** mattray has joined #openstack19:02
*** Ryan_Lane is now known as Ryan_Lane|food19:05
*** imsplitbit has joined #openstack19:10
*** dragondm has quit IRC19:11
*** MarkAtwood has joined #openstack19:17
*** fabiand__ has joined #openstack19:18
*** alandman has quit IRC19:18
*** ameade has quit IRC19:22
*** mdomsch has quit IRC19:23
*** ameade has joined #openstack19:24
NashTrashvishy: I am not getting ssh connectivity through a public IP address after the upgrade to Diablo-1 milestone.  I want to confirm that the right things are showing up in iptables.19:25
NashTrashIf I have opened ssh and ping for my group, would there be something that should show up in iptables?19:25
*** ameade has quit IRC19:26
*** Ryan_Lane|food is now known as Ryan_Lane19:28
NashTrashvishy: Nevermind.  I just ran euca-authorize for ssh again and it works now.19:31
*** hggdh has quit IRC19:32
*** fabiand__ has quit IRC19:32
*** MarcMorata has joined #openstack19:33
*** lborda has quit IRC19:35
*** lborda has joined #openstack19:35
*** nRy has joined #openstack19:38
*** dirakx2 has joined #openstack19:42
*** dirakx2 has quit IRC19:46
*** j05h has quit IRC19:50
*** j05h has joined #openstack19:50
*** hggdh has joined #openstack19:51
*** Eyk is now known as Eyk^off19:55
*** anotherj1sse has quit IRC19:58
*** markvoelker has quit IRC20:01
*** lborda has quit IRC20:02
*** mgius has quit IRC20:08
*** dprince has quit IRC20:10
*** jkoelker has quit IRC20:12
kbringardhmmm, I don't know that it causes a problem, but it looks like old nwfilter rules don't get purged20:15
kbringardif I log onto any arbitrary compute node and do a virsh nwfilter-list it still has entries for old instances that have been terminated20:16
*** lborda has joined #openstack20:17
*** rnirmal_ has joined #openstack20:21
*** rnirmal has quit IRC20:22
*** rnirmal_ is now known as rnirmal20:22
*** hub_cap has quit IRC20:22
*** rnirmal has left #openstack20:23
*** hub_cap has joined #openstack20:23
*** hub_cap has quit IRC20:23
*** jkoelker has joined #openstack20:25
*** aliguori has quit IRC20:34
*** aliguori has joined #openstack20:34
*** jk0 has joined #openstack20:35
*** ChanServ sets mode: +v jk020:35
*** jk0 has left #openstack20:35
*** ccustine has quit IRC20:36
*** duffman has quit IRC20:36
*** jakedahn has quit IRC20:36
*** duffman has joined #openstack20:36
*** katkee has joined #openstack20:38
*** jakedahn has joined #openstack20:42
*** dragondm has joined #openstack20:43
*** pguth66 has joined #openstack20:45
*** jakedahn has quit IRC20:47
*** llang629 has joined #openstack20:52
*** MarkAtwood has quit IRC20:53
*** tblamer has quit IRC20:54
*** dgags has quit IRC20:54
*** MotoMilind has joined #openstack20:57
*** jkoelker has quit IRC20:59
*** lorin1 has quit IRC21:02
vishykbringard: lp:~sleepsonthefloor/nova/lp78370521:03
vishydidn't realize that didn't make it in yet21:03
kbringardahhh, awesome, I'll go check it out21:03
kbringardthanks21:03
*** DodoPahim has quit IRC21:04
*** jakedahn has joined #openstack21:07
vishykbringard: just pinged him so he can merge with trunk21:08
*** aliguori_ has joined #openstack21:08
*** aliguori has quit IRC21:08
*** jatsrt has left #openstack21:12
kbringardfantastic, thanks21:13
kbringardas an aside, I am still digging into why, but it looks like the --source-groups stuff doesn't really work21:13
*** h0cin has quit IRC21:14
*** llang629 has left #openstack21:14
*** jkoelker has joined #openstack21:16
*** brd_from_italy has quit IRC21:18
*** shentonfreude has quit IRC21:20
vishykbringard: cool.  We should loop soren in21:21
*** NashTrash has quit IRC21:34
uvirtbotNew bug: #792584 in nova "DHCP/BOOTP Request messages from VM are dropped in firewall protected host machine" [Undecided,New] https://launchpad.net/bugs/79258421:36
*** aliguori_ has quit IRC21:38
*** dragondm has quit IRC21:41
*** foxtrotgulf has quit IRC21:42
*** dragondm has joined #openstack21:45
*** ryker has quit IRC21:45
*** jfluhmann has quit IRC21:48
*** dragondm has quit IRC21:53
*** dragondm has joined #openstack21:53
*** kbringard has quit IRC21:55
*** imsplitbit has quit IRC21:56
*** ryker has joined #openstack21:58
*** ryker has quit IRC21:58
*** jfluhmann has joined #openstack22:02
*** pguth_txtual has joined #openstack22:08
*** PeteDaGuru has quit IRC22:10
*** ryker has joined #openstack22:12
*** amccabe has quit IRC22:15
*** joearnold has quit IRC22:25
*** gondoi has quit IRC22:25
*** neuro_da1age is now known as neuro_damage22:27
*** jkoelker has quit IRC22:27
*** jonkelly has quit IRC22:33
*** pguth_txtual has quit IRC22:37
*** mgoldmann has quit IRC22:41
*** mattray has quit IRC22:42
*** allsystemsarego has quit IRC22:42
*** ryker has quit IRC22:44
*** aliguori has joined #openstack22:45
*** hallyn has quit IRC22:48
*** joearnold has joined #openstack23:07
*** aliguori has quit IRC23:11
*** asdfqwer has joined #openstack23:12
*** katkee has quit IRC23:26
*** koolhead17 has quit IRC23:30
*** koolhead17 has joined #openstack23:31
*** Ryan_Lane has quit IRC23:35
*** joearnold has quit IRC23:37
*** joearnold has joined #openstack23:41
*** vernhart has joined #openstack23:43
*** robbiew has left #openstack23:45
*** heckj has quit IRC23:55
*** pguth66 has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!