Tuesday, 2011-11-15

bwongHello00:00
*** cdub has quit IRC00:00
*** lzyeval has quit IRC00:01
*** adjohn has joined #openstack00:03
swillWhere is the log describing the 500 error if i get this: swift -A http://127.0.0.1:5000/v1.0 -U wstevens -K testing stat -v00:05
swillWhen I run this: swift -A http://127.0.0.1:5000/v1.0 -U wstevens -K testing stat -v00:05
swillwoops00:05
swillthe error is this: Account HEAD failed: http://127.0.0.1:8080/v1/AUTH_2 500 Internal Server Error00:06
swillAnyone know where I would find that log?00:06
swillCause I cant tell if it was swift or keystone that had the error.00:06
notmynameeither the proxy server log or the account server log (Account HEAD failed sounds like a swift error)00:07
*** lzyeval has joined #openstack00:08
*** redconnection has quit IRC00:09
swillhmmm, maybe i dont have enough logging enabled.00:10
*** dendrobates is now known as dendro-afk00:12
*** redconnection has joined #openstack00:12
*** cdub has joined #openstack00:16
*** gutseb has joined #openstack00:22
uvirtbotNew bug: #890486 in nova "Cannot create image with kernel_id and ramdisk_id in S3ImageService" [Low,In progress] https://launchpad.net/bugs/89048600:26
webxswill: have you tried with curl to see the actual response?00:29
swillyes, that is working00:29
webxswill: can you paste the curl command issued?00:29
swillwebx: here it is: curl -d '{"auth": {"passwordCredentials": {"username": "admin", "password": "testing"}}}' -H "Content-type: application/json" http://127.0.0.1:5000/v2.0/tokens00:30
swillwith a result of: http://pastebin.com/Behyt0ty00:31
uvirtbotNew bug: #890489 in nova "multistring flags do not parse properly" [Low,Triaged] https://launchpad.net/bugs/89048900:31
webxswill: those are different credentials than your swift command line.  does swift CLI work with admin creds?00:32
*** reed has quit IRC00:33
swillwebx: the credentials are not in that output00:34
swillwebx: they are in the database init file.  one sec, i can link that...00:34
webxswill: your initial question was about 500 error with this:  s3cmd -c ./conf_s3cmd ls s3://myfiles00:34
webxignore that.. bad paset00:34
webxswift -A http://127.0.0.1:5000/v1.0 -U wstevens -K testing stat -v00:34
swillwebx: the token in the proxy-server.conf file is the same.00:34
webxbut the paste you gave me was for l: admin p: testing00:35
swillwebx: oh sorry, i have both users.  one is admin and the other is wstevens.00:35
webxI understand.. do you get the 500 error with admin, or only wstevens?00:35
swillwebx: both00:35
webxah00:35
swilli am trying to find the log where it logs right now00:35
*** rsampaio has joined #openstack00:35
swilli think it is logged by syslog, but it is not in proxy.error00:36
swillor proxy.og00:36
webxyou may need to enable debug00:36
webxif you haven't already00:36
swillproxy.log *00:36
swilli did all of the logging described here: http://swift.openstack.org/development_saio.html00:37
*** bcwaldon1 has quit IRC00:38
webxyou can add this to proxy-server.conf, I believe00:40
webxog_level =DEBUG00:40
webx*log_level = DEBUG00:40
swilltrying it00:41
swillrestarting swift*00:41
webxwithout the * on log_level, right? :)00:42
swillhaha, i understood the correct syntax.  :)00:42
*** adjohn has quit IRC00:44
*** jakedahn has quit IRC00:44
*** andrewbogott has quit IRC00:45
*** dolphm_ has quit IRC00:45
swillwebx: all i get is this in the proxy.log00:49
swillNov 14 19:47:07 ubuntu proxy-server Initialising keystone middleware00:49
swillNov 14 19:47:07 ubuntu proxy-server Got token: 99988877766600:49
*** juddm has quit IRC00:49
*** vernhart has quit IRC00:50
swillnothing in syslog at all00:51
swillwell for this event anyway.  hmmmm00:51
webxsorry.. I have no experience with keystone00:54
*** reed has joined #openstack00:56
swillno worries.  i will keep on truckin.  :)00:57
ohnoimdeadanyone on that is familiar with devstack? if so is there a workaround for: https://gist.github.com/136575000:57
*** redconnection has quit IRC00:58
*** dendro-afk is now known as dendrobates00:59
swilldoes anyone know if there is logging for auth in swift beyond what is mentioned here?  http://swift.openstack.org/development_saio.html00:59
swillthis gives me the proxy.error and proxy.log files which should be relevant, but i am getting a 500 error and I can not find it logged anywhere.01:00
uvirtbotNew bug: #890498 in quantum "ovs plugin pip-requires should have mysql-python" [Low,In progress] https://launchpad.net/bugs/89049801:01
*** reed has quit IRC01:04
*** reed has joined #openstack01:05
*** jakedahn has joined #openstack01:06
*** bwong has quit IRC01:08
*** praefect has quit IRC01:08
*** jakedahn has quit IRC01:08
*** mrbuffneff has quit IRC01:10
*** dragondm has quit IRC01:11
*** livemoon has joined #openstack01:11
*** Binbin has joined #openstack01:11
*** cereal_bars has joined #openstack01:15
*** dendrobates is now known as dendro-afk01:17
livemoonmorning01:18
*** obino has quit IRC01:20
*** lzyeval has quit IRC01:20
*** negronjl has quit IRC01:26
*** cereal_bars has quit IRC01:28
*** krow has quit IRC01:30
*** gregp76 has quit IRC01:32
*** rnorwood has joined #openstack01:34
*** lzyeval has joined #openstack01:35
*** dendro-afk is now known as dendrobates01:36
*** hadrian_ has joined #openstack01:37
*** f-yang has quit IRC01:38
*** hadrian has quit IRC01:39
*** hadrian_ is now known as hadrian01:39
*** ohnoimdead has quit IRC01:42
*** po has quit IRC01:42
*** michael_ has quit IRC01:43
*** rsampaio has quit IRC01:44
*** oubiwann has quit IRC01:45
*** rsampaio has joined #openstack01:45
*** gyee has quit IRC01:47
*** nphase has quit IRC01:47
*** negronjl has joined #openstack01:48
*** mgius has quit IRC01:51
*** vernhart has joined #openstack01:59
*** nati2 has quit IRC02:04
*** nati2 has joined #openstack02:04
*** reed has quit IRC02:07
livemoonping vidd02:09
*** Hakon|mbp has quit IRC02:20
*** swill has quit IRC02:24
*** swill has joined #openstack02:24
*** jog0 has quit IRC02:25
*** mdomsch has joined #openstack02:29
*** tryggvil__ has quit IRC02:32
*** vernhart has quit IRC02:32
*** vernhart has joined #openstack02:38
*** cdub has quit IRC02:38
*** tryggvil has joined #openstack02:39
*** dendrobates is now known as dendro-afk02:40
*** hadrian has quit IRC02:42
WormManwell, I fixed 1/3 of my openstack instances restarting on physical host reboot problem02:42
WormMannow dnsmasq is starting properly, still not reattaching floating IP automatically(and the host still needs 'reboot')02:43
*** hadrian has joined #openstack02:48
*** tryggvil has quit IRC02:49
*** rackerhacker has quit IRC02:51
*** rackerhacker has joined #openstack02:52
*** mdomsch has quit IRC02:53
*** tryggvil_ has joined #openstack02:53
*** gutseb has quit IRC02:53
*** etarasov has joined #openstack02:57
*** gohko_ has quit IRC02:57
*** cdub has joined #openstack02:58
*** joeyang has quit IRC02:59
*** jdurgin has quit IRC03:02
*** osier has joined #openstack03:04
*** exitdescription has quit IRC03:05
*** vernhart has quit IRC03:07
*** tokuzfunpi has joined #openstack03:07
*** hadrian_ has joined #openstack03:12
*** dendro-afk is now known as dendrobates03:13
*** rackerhacker has quit IRC03:15
*** vernhart has joined #openstack03:15
*** hadrian has quit IRC03:16
*** hadrian_ is now known as hadrian03:16
*** rackerhacker has joined #openstack03:20
*** dpippenger has quit IRC03:26
*** adjohn has joined #openstack03:28
*** vmfan has joined #openstack03:28
*** cdub has quit IRC03:28
*** scottjg has joined #openstack03:39
*** hadrian has quit IRC03:41
*** jobicoppola has joined #openstack03:41
*** hadrian has joined #openstack03:41
*** reed has joined #openstack03:42
*** Fu4ny has joined #openstack03:43
*** koolhead17 has joined #openstack03:44
*** 18WAAW0HO has quit IRC03:50
*** rackerhacker has joined #openstack03:57
*** reed has quit IRC03:58
*** supriya has joined #openstack04:01
*** Ryan_Lane has quit IRC04:04
*** lzyeval has quit IRC04:04
*** lzyeval has joined #openstack04:05
*** miclorb_ has quit IRC04:08
*** miclorb_ has joined #openstack04:08
*** cdub has joined #openstack04:09
*** oubiwann has joined #openstack04:09
*** hadrian has quit IRC04:10
*** dendrobates is now known as dendro-afk04:10
*** supriya has quit IRC04:11
*** adjohn has quit IRC04:13
*** supriya has joined #openstack04:13
*** vernhart has quit IRC04:15
*** KAM has quit IRC04:20
*** vernhart has joined #openstack04:20
*** KAM has joined #openstack04:21
*** miclorb_ has quit IRC04:21
*** supriya_ has joined #openstack04:23
*** supriya has quit IRC04:23
*** nati2_ has joined #openstack04:27
*** supriya_ has quit IRC04:28
*** nati2 has quit IRC04:29
*** supriya_ has joined #openstack04:29
*** supriya_ has quit IRC04:32
*** koolhead17 has quit IRC04:33
*** HugoKuo_ has quit IRC04:34
*** nati2 has joined #openstack04:38
*** nati2_ has quit IRC04:38
*** vernhart has quit IRC04:39
*** pradeep1 has joined #openstack04:42
*** ldlework has quit IRC04:43
*** hankj has joined #openstack04:48
*** sahuram has joined #openstack04:49
*** hankj has quit IRC04:50
*** vmfan has quit IRC04:55
uvirtbotNew bug: #890538 in nova "Verifying whether a melange subnet exists could be made more efficient" [Undecided,Confirmed] https://launchpad.net/bugs/89053804:55
*** tokuzfunpi has quit IRC04:59
*** tokuzfunpi has joined #openstack04:59
*** rnorwood has quit IRC05:00
*** tokuzfunpi has quit IRC05:00
*** jobicoppola has quit IRC05:06
*** adjohn has joined #openstack05:12
*** brian_sc has quit IRC05:13
*** Fu4ny has quit IRC05:15
*** cdub has quit IRC05:24
*** sahuram_ has joined #openstack05:24
*** sahuram has quit IRC05:26
*** koolhead17 has joined #openstack05:30
*** vernhart has joined #openstack05:30
*** vernhart has joined #openstack05:30
*** polvi has quit IRC05:33
*** obino has joined #openstack05:35
*** mjfork has quit IRC05:39
*** sahuram has joined #openstack05:44
*** sahuram_ has quit IRC05:46
*** lzyeval_ has joined #openstack05:52
*** lzyeval has quit IRC05:52
*** lzyeval_ is now known as lzyeval05:52
*** cdub has joined #openstack05:57
*** nijaba has quit IRC05:57
winston-dlivemoon : hi06:01
*** stevegjacobs has quit IRC06:02
*** pradeep1 has quit IRC06:03
*** nijaba has joined #openstack06:08
*** nijaba has joined #openstack06:08
*** rwmjones has quit IRC06:11
*** negronjl has quit IRC06:13
*** jj0hns0n has quit IRC06:14
*** nijaba has quit IRC06:16
*** nijaba has joined #openstack06:16
*** nijaba has joined #openstack06:16
*** nerens has joined #openstack06:17
*** pradeep has joined #openstack06:18
*** stevegjacobs has joined #openstack06:20
stevegjacobsHow do you move a running instance in to a different security group? I don't see anything simple in dashboard or nova commands to do this06:22
*** soosfarm has quit IRC06:24
*** soosfarm has joined #openstack06:25
*** dachary has joined #openstack06:26
*** Ryan_Lane has joined #openstack06:32
*** rsampaio has quit IRC06:32
livemoonhi,winston-d06:33
*** jj0hns0n has joined #openstack06:37
*** sahuram has quit IRC06:44
*** jj0hns0n has quit IRC06:46
*** arBmind has joined #openstack06:46
*** vmfan has joined #openstack06:47
*** Fu4ny has joined #openstack06:50
*** brian_sc has joined #openstack06:51
*** CongNT_ has joined #openstack06:51
*** brian_sc1 has joined #openstack06:53
*** brian_sc has quit IRC06:53
*** brian_sc1 has quit IRC06:53
*** rocambol1 has joined #openstack06:53
*** brian_sc has joined #openstack06:53
*** brian_sc has joined #openstack06:54
*** brian_sc1 has joined #openstack06:54
*** nati2_ has joined #openstack06:54
*** Fu4ny has quit IRC06:54
*** brian_sc1 has quit IRC06:54
*** brian_sc2 has joined #openstack06:54
*** nati2 has quit IRC06:55
*** dolphm has joined #openstack06:55
*** brian_sc1 has joined #openstack06:56
*** brian_sc has quit IRC06:58
*** brian_sc1 has quit IRC06:58
*** brian_sc has joined #openstack06:58
*** brian_sc has joined #openstack06:59
*** sahuram has joined #openstack06:59
*** brian_sc has quit IRC07:01
*** brian_sc has joined #openstack07:03
*** vmfan has quit IRC07:03
*** brian_sc has quit IRC07:04
*** hugokuo has joined #openstack07:04
*** brian_sc has joined #openstack07:04
*** vernhart has quit IRC07:04
*** vernhart has joined #openstack07:07
*** CongNT_ has quit IRC07:07
*** brian_sc1 has joined #openstack07:07
*** cdub has quit IRC07:07
*** brian_sc1 has quit IRC07:08
*** brian_sc1 has joined #openstack07:08
*** brian_sc1 has quit IRC07:08
*** brian_sc1 has joined #openstack07:08
*** brian_sc has quit IRC07:09
*** brian_sc has joined #openstack07:10
*** brian_sc has quit IRC07:10
*** brian_sc1 has joined #openstack07:10
*** brian_sc has joined #openstack07:12
*** nati2_ has quit IRC07:12
*** brian_sc has joined #openstack07:13
*** brian_sc has quit IRC07:13
*** brian_sc has joined #openstack07:13
*** brian_sc1 has joined #openstack07:14
*** brian_sc has quit IRC07:14
*** brian_sc has joined #openstack07:14
*** brian_sc1 has joined #openstack07:15
*** brian_sc has quit IRC07:15
*** brian_sc has joined #openstack07:15
*** pradeep has quit IRC07:16
*** brian_sc has quit IRC07:16
*** brian_sc has joined #openstack07:16
*** brian_sc has joined #openstack07:16
*** brian_sc has quit IRC07:16
*** brian_sc has joined #openstack07:17
*** dolphm has quit IRC07:20
*** brian_sc has joined #openstack07:20
*** brian_sc1 has joined #openstack07:20
*** brian_sc has quit IRC07:20
*** brian_sc has joined #openstack07:21
*** sahuram_ has joined #openstack07:27
*** sahuram has quit IRC07:31
*** pradeep1 has joined #openstack07:32
*** mgoldmann has joined #openstack07:33
*** tryggvil___ has joined #openstack07:35
*** dolphm has joined #openstack07:35
*** bengrue has quit IRC07:37
*** tryggvil_ has quit IRC07:38
*** arBmind has quit IRC07:43
*** koolhead17 has quit IRC07:44
*** derjohn_mob has joined #openstack07:48
*** Fu4ny has joined #openstack07:52
*** KAM has quit IRC07:56
*** mcclurmc has quit IRC08:00
*** mcclurmc has joined #openstack08:01
*** dolphm has quit IRC08:06
*** kirkland has quit IRC08:11
*** reidrac has joined #openstack08:11
*** kirkland has joined #openstack08:11
*** TheOsprey has joined #openstack08:13
*** sahuram__ has joined #openstack08:15
*** sahuram_ has quit IRC08:19
*** dobber has joined #openstack08:19
*** CongNT_ has joined #openstack08:19
*** vernhart has quit IRC08:21
*** Fu4ny has quit IRC08:23
*** vernhart has joined #openstack08:27
*** pradeep1 has quit IRC08:31
*** adjohn has quit IRC08:33
*** foexle has joined #openstack08:36
foexleahoi08:36
*** MarkAtwood has quit IRC08:38
*** lzyeval has quit IRC08:40
*** lzyeval has joined #openstack08:42
*** Ryan_Lane has quit IRC08:45
*** sahuram has joined #openstack08:53
*** sahuram__ has quit IRC08:55
livemoonhi09:02
*** cdub has joined #openstack09:06
*** GeoDud has quit IRC09:07
*** GeoDud has joined #openstack09:07
*** Tekni has joined #openstack09:07
*** elasticdog has quit IRC09:07
*** Teknix has quit IRC09:08
*** elasticdog has joined #openstack09:08
*** BasTichelaar has joined #openstack09:09
*** katkee has joined #openstack09:10
*** koolhead17 has joined #openstack09:12
koolhead17hi all09:12
*** javiF has joined #openstack09:15
*** katkee has quit IRC09:15
*** javiF has quit IRC09:16
*** javiF has joined #openstack09:16
*** mies has joined #openstack09:19
*** Razique has joined #openstack09:26
RaziqueHey guys!09:27
koolhead17hello Razique09:27
foexleheyho Razique09:27
Raziquehey you09:28
RaziqueI did a live upgrade yesterday in production09:28
RaziqueCactus -> Diablo09:28
*** Fu4ny has joined #openstack09:28
foexle:D09:28
koolhead17Razique: seems like everything has changed in past 1 days :(09:28
Raziqueeverything went great09:28
Raziquekoolhead17: what do you mean ?09:28
koolhead17awesome09:28
koolhead171409:28
Razique14 ? :p09:29
* koolhead17 was out of internet for 14 days09:29
Raziqueahhhh09:29
Raziquewell the main topics here were about HA stuff I'd say :)09:29
Raziquehow to live migrate, how to save instances ; how to restart instances,etc...09:30
RaziqueI've deployed GlusterFS in lab, in order to valdate migration, but remains too handy for me :/09:30
koolhead17and what is this PPA thing for keystone?09:30
Raziquekoolhead17: I dunno09:31
*** nacx has joined #openstack09:31
*** CongNT_ has quit IRC09:32
*** darraghb has joined #openstack09:33
livemooncongrautlation Razique09:39
livemoonkoolhead17: not see you for a few days09:40
Raziquethanks :D09:40
Raziqueyah koolhead17 had internet issues09:40
livemoontoday I use devstack reinstall my all server09:40
koolhead17livemoon: howdy!!09:40
*** alperkanat has joined #openstack09:48
*** alperkanat has joined #openstack09:48
*** pixelbeat has joined #openstack09:53
alperkanatis it possible to add specific mimetypes for certain files? (maybe during upload, or just downloading?) i'm asking this for swift of course09:54
*** BK_man has joined #openstack09:54
BK_manhi all. who's running cloudpipe? I noticed that FORWARD rules in iptables on FLAGS.vpn_ip suddently disappeared.09:56
*** tunix has joined #openstack09:57
tunixis it possible to add specific mimetypes for certain files? (maybe during upload, or just downloading?) i'm asking this for swift of course09:57
Raziquealperkanat: tunix waw :D09:58
*** tunix has quit IRC09:58
*** tunix has joined #openstack09:58
*** alperkanat has quit IRC09:58
tunixRazique: ?09:58
Raziquetwo ppl asking the exact same question ^^09:59
Raziquefuny09:59
RaziqueI think Swift does yah09:59
RaziqueIt rings me a bell09:59
Raziquelet me check09:59
*** tunix is now known as alperkanat09:59
alperkanatRazique: i'm the same people but had connectivity issues09:59
alperkanati need to know if it's possible to define mimetypes for files?09:59
chmouelI confirm, Swift does that10:00
*** Fu4ny has quit IRC10:01
*** Fu4ny has joined #openstack10:01
*** clopez has joined #openstack10:02
*** katkee has joined #openstack10:03
*** uksysadmin has joined #openstack10:03
alperkanatchmouel: how?10:04
*** dirkx_ has joined #openstack10:05
chmouelreading thru my https://github.com/chmouel/upcs/blob/master/upcs it just a matter to :10:05
chmouelset the content-type to whatever needed10:05
chmoueldon't have the documentation handy but this should be documented there10:06
chmouel(or that's a bug)10:06
uvirtbotNew bug: #890612 in openstack-ci "Nova trunk PPA FTBFS" [High,Confirmed] https://launchpad.net/bugs/89061210:11
*** pixelbeat has quit IRC10:12
*** dirkx__ has joined #openstack10:14
*** dirkx_ has quit IRC10:14
alperkanatchmouel: ok thanks10:15
*** scottjg has quit IRC10:19
*** cdub has quit IRC10:22
Raziquechmouel: let's follow your github :)10:24
*** redconnection has joined #openstack10:25
*** miclorb_ has joined #openstack10:27
*** livemoon has left #openstack10:28
*** Hakon|mbp has joined #openstack10:36
*** chomping has quit IRC10:36
*** koolhead17 has quit IRC10:37
*** cdub has joined #openstack10:38
*** koolhead17 has joined #openstack10:39
*** jollyfoo has joined #openstack10:40
koolhead17Razique, got disconnected10:41
*** dnjaramba has joined #openstack10:43
*** popux has joined #openstack10:44
*** sahuram has quit IRC10:49
*** miclorb_ has quit IRC10:49
*** miclorb_ has joined #openstack10:50
*** popux has quit IRC10:51
*** jollyfoo has quit IRC10:58
*** lzyeval has quit IRC11:00
foexlehey guys, i have a problem with enabling the second compute node with network-manager. I set multi_host=True11:04
foexlethe vserver on the new node will spawn, but the network doesn't work11:04
foexlei get no errors in each log11:04
foexlenetwork runs correctly but the service doesn't define new iptable rules11:05
foexleok i see i get an error: Dead loop on virtual device vlan100, fix it urgently!11:06
*** BK_man has quit IRC11:08
*** alperkanat has quit IRC11:08
Raziquekoolhead17: hey11:09
Raziquefoexle: mmm11:09
Raziquealready seen that error11:09
foexlehttps://bugs.launchpad.net/ubuntu/+source/linux/+bug/85641711:09
Raziquefoexle: is nova-network installed on the second compute-node ?11:10
foexleyes11:10
Raziqueok is the interface set in nova.conf good ,11:11
Razique?11:11
foexleand starts without errors11:11
foexlejap is exactly the same server/configuration as the first node11:11
Raziqueso they use the same physical interface ?11:11
foexleyes the server has the same two interfaces with the same configuration11:13
foexleall services are in running state11:15
foexlebut if i start a new insance, the second compute node will spawn this instance but the network service do nothing11:15
Raziqueyah cuz of the dead loop error11:16
Raziquecould u tear down the vlan on the compute node and the brdige11:16
Raziquerestart nova-compute and nova-network ?11:16
foexlei try it with reboot the complete server11:16
*** miclorb_ has quit IRC11:16
*** dirkx__ has quit IRC11:17
*** zatix has joined #openstack11:18
foexlebrdige looks like ok11:21
*** PiotrSikora has quit IRC11:23
foexlethe man page of isatapd says, i get this error because the routing table are incomplete11:24
*** hugokuo has quit IRC11:27
*** PiotrSikora has joined #openstack11:28
*** popux has joined #openstack11:30
Raziquemmm dead loop  ; not so sure :/11:31
Raziquebut could be wrong ofc11:31
Raziquefoexle: can I see brctl show11:32
Raziqueand cat /proc/net/vlan/config ?11:32
foexlehmmm anything is wrong .... the second network service will not be requested11:32
foexlefrom nova-api11:33
*** jollyfoo has joined #openstack11:34
Raziquewhat do u mean foexle  ?11:37
*** Fu4ny has quit IRC11:38
Raziquetime to eat :D i'll be back around 211:39
foexle2011-11-15 12:37:57,872 DEBUG nova.utils [-] Running cmd (subprocess): sudo ip addr add 169.254.169.254/32 scope link dev lo from (pid=1804) execute /usr/lib/pymodules/python2.6/nova/utils.py:16511:40
foexle2011-11-15 12:37:57,882 DEBUG nova.utils [-] Result was 2 from (pid=1804) execute /usr/lib/pymodules/python2.6/nova/utils.py:18011:40
foexlethink thats the problem11:40
Raziquemmm not so sure :p11:40
Raziquetry to run it manually11:40
koolhead17foexle, did you add interface info in nova.conf11:41
Raziquedoes it work ?11:41
Raziqueit's only a route to manage metadatas11:41
Raziqueshouldn't prevent an instances from being accessible though11:41
foexleok it's not the problem11:41
foexlekoolhead17: yes11:41
foexlekoolhead17: it's the same config from node 111:41
Raziquefoexle: you use eth1 for vlan right ?11:42
Raziqueon both servers11:42
foexlejap11:42
koolhead17i had same issue but got it solved after adding the info in nova.conf11:42
Raziquedo you have a flag --bridge_interface into nova.conf11:42
foexleRazique: yes11:42
koolhead17foexle, and you are using ubuntu oneiric11:43
Raziquefoexle: a --vlan_interface also ? :p11:43
foexleRazique: yes11:44
foexlekoolhead17: no lts11:44
Raziquefoexle: ok can I see the result of the two commands ?11:44
Raziquethe dead loop stuff is a issue with either the brdige or the vlan11:45
foexlehttp://pastebin.com/dFisA0Sd11:45
foexlenothing is set11:46
Raziqueok into the networks table11:46
Raziqueselect * from networks11:46
RaziqueI'm interested by the "brdige_interface" field11:47
Raziquemaybe a mismatch11:47
Raziquetime to eat :p cya later11:47
foexleok i think i see the problem11:48
*** livemoon has joined #openstack11:49
foexlein networks table are onle one network defined11:50
foexleonly11:50
*** n1md4 has quit IRC11:50
*** redconnection has quit IRC11:55
*** jollyfoo has quit IRC11:56
*** Hakon|mbp has quit IRC11:57
*** kimc has quit IRC11:57
*** stevegjacobs_ has joined #openstack12:01
stevegjacobs_hello12:02
stevegjacobs_is there a way to change a running instance from one security group to another?12:03
*** jollyfoo has joined #openstack12:05
*** rods has joined #openstack12:05
*** redconnection has joined #openstack12:08
*** Hakon|mbp has joined #openstack12:10
*** jollyfoo_ has joined #openstack12:10
*** jollyfoo has quit IRC12:10
foexlecan i set in the network table n hosts ?12:11
foexlebecause a vlan could expand over more as one machine12:12
*** osier has quit IRC12:13
*** jollyfoo has joined #openstack12:16
*** jollyfoo_ has quit IRC12:16
*** jollyfoo has quit IRC12:17
*** jollyfoo has joined #openstack12:18
*** vernhart has quit IRC12:20
*** jollyfoo has quit IRC12:22
*** dirkx_ has joined #openstack12:49
*** jollyfoo has joined #openstack12:52
*** dendro-afk is now known as dendrobates12:54
*** lzyeval has joined #openstack12:59
*** deshantm_laptop has joined #openstack13:06
*** lorin1 has joined #openstack13:07
Raziquestevegjacobs: in live not sure13:09
Raziquefoexle: back13:09
Raziquehave u resolved the issue ?13:09
foexleRazique: heyho :) .... no but i think i found my problem13:10
Raziqueenlighten me13:10
uvirtbotNew bug: #890672 in quantum "ovs_quantum_agent should use sqlalchemy" [Undecided,New] https://launchpad.net/bugs/89067213:10
foexleso we defined a network for a project with "host" => node1 and vpn_public_address => node113:11
foexlebut i dont have a network for the other network service13:11
foexleon the other node13:11
Raziqueah yup I recall that13:11
foexleso my question .... i need for each networking service on each compute node a extra network ?13:11
Raziquenope not really13:12
foexlehmmm13:12
Raziquein fact that field should be blank I'd say13:12
Raziquealso "bridge_interface"13:12
Raziquebut make sure multi-host is enabled for that network13:12
foexlehmmm but its set all three13:12
foexleattributes13:12
Raziqueand into nova.conf of every node, the flag13:12
foexleahhh13:13
foexleok13:13
foexlethe flag are enabled13:13
foexlebut not in the database13:13
*** sandywalsh_ has joined #openstack13:13
foexleso i should set vpn_public_address and host and bridge_interface to NULL?13:13
foexlein the database13:14
*** dendrobates is now known as dendro-afk13:14
*** javiF has quit IRC13:16
foexlehmmm if i set this attributes to NULL the network dont run on every node13:19
uvirtbotNew bug: #890362 in glance (main) "Should glance user's shell be /bin/false?" [Undecided,New] https://launchpad.net/bugs/89036213:21
Raziquefoexle: in fact the multi_host <> vpn host13:21
Raziquefor ur setup13:22
Raziquebridge_interface into database : null13:22
Raziquemulti_host= On13:22
Raziqueand for every node into nova.conf13:22
foexleon or True ?13:22
Razique--brdige_interface=ethX13:22
Raziquewhere ethX will be the same if as vlan_interface13:22
Raziqueand --vlan_interface=ethX13:22
Raziquelet me check13:23
Razique113:23
Razique:D13:23
foexlein the db yes13:23
foexleand the config flag=1, too?13:23
Raziquenope13:23
RaziqueTrue I think13:24
*** chomping has joined #openstack13:24
foexlek13:24
foexlei have13:24
Raziqueyah that's "True"13:24
*** hallyn has quit IRC13:25
*** hallyn has joined #openstack13:26
foexlebut the bridge_interface should be br100 or something like that no?13:27
Raziqueyup13:28
Raziquebr10013:28
*** Binbin has quit IRC13:29
Raziquehere is my network13:29
Raziquehttp://paste.openstack.org/show/3339/13:29
*** msivanes has joined #openstack13:30
*** osier has joined #openstack13:30
*** kbringard has joined #openstack13:31
*** supriya has joined #openstack13:32
foexleyeah but you see you have set a vpn_pub_address => 192.168.71.13813:34
RaziqueEverytime I try to spawn a new instance under diablo, I've this error : Instance quota exceeded13:34
Raziqueany hiny ?13:34
*** PeteDaGuru has joined #openstack13:34
*** ldlework has joined #openstack13:34
Raziqueit's the endpoint of the vpn tunnel; so set it to the public ip of the cloud13:34
Raziqueor one that will be open on 119413:35
Razique(openvpn port)13:35
foexlei think i have problems with understanding multi network services13:35
foexlebut i try to resolv first now13:35
*** AlanClark has joined #openstack13:38
Raziquefoexle: in fact multi host is a sexy way to remove spof13:38
Raziqueby installing nova-network as multi_host on every node13:38
Raziqueit allows you to have the compute node acting as a gateway for instances13:38
foexleyes thats my intension :D13:38
*** hadrian has joined #openstack13:38
Raziquethus, you turn every compute node into independant routed server13:38
Raziqueand then your instances remain reacheable if you have only one compute node running13:39
Raziquethat's hell of a feature :)13:39
foexleok now are all network services broken :D13:45
*** kke has joined #openstack13:47
kkewhy doesn't stackops installer see my br0?13:48
Raziquehehe I just spawned 20 instances13:48
Raziquelet's see how the server will handle the request13:48
viddRazique, have you adjusted the quata limits in nova.conf?13:49
Raziquevidd: nope, into database yup13:49
Raziquei've set everything to 102413:49
Raziqueand everytime I've that quota exceeded error :/13:50
RaziqueI've 18 running instances and can't run a 19th13:50
viddRazique, i think you have to set it in the conf as well13:50
viddwell13:50
Raziquevidd: so what would be the point of having it into DB13:50
Raziquemaybe a per-project into db13:50
viddthen setting quota in database workks then=]13:51
Raziqueand global into conf ?13:51
Raziquevidd: mmm howst's that ?13:51
viddyou passed the "nova sets quota to 10" default13:51
viddso your issue is not qutoa related as far as the quato limits per se13:52
Raziquevidd: ah yes13:52
Raziquei've been able to reproduce that behaviour in pre-production13:52
*** jollyfoo has quit IRC13:52
Raziquehttp://paste.openstack.org/show/3340/13:53
viddcan it be a ram or cor quota?13:53
Raziquenot that sure since my compute node cannot handle the 25 running instances13:54
Raziqueand they remain in "pending " state13:54
Raziquehere is the part of the code which handle quotas13:55
Raziquehttp://paste.openstack.org/show/3341/13:55
RaziqueI go into the "if num_instances <= 0:13:55
Razique                message = _("Instance quota exceeded. You cannot run any "13:55
Razique                            "more instances of this type.")"13:55
Razique:D13:55
*** jollyfoo has joined #openstack13:55
KiallRazique: the default scheduler has a fixed limit of 16 cores per server (even if you only have 2, or you have 32, it defaults to 16)13:57
kkeshould i just skip the stackops installer and run the scripts manually?13:58
Raziquethat means if you use a 1 core flavor, u'll be limited by 16 instances13:58
Raziqueno matter the node ?13:59
KiallRazique: yes, unless you either change the setting, or choose a different scheduler13:59
RaziqueKiall: where can I change that setting ?13:59
Kiallnova.conf ;)13:59
Kiallthe simple scheduler (the default): https://github.com/openstack/nova/blob/stable/diablo/nova/scheduler/simple.py14:00
Kiallit has 3x nova.conf flags listed at the top14:00
Kiallor, you can choose a different scheduler: https://github.com/openstack/nova/tree/stable/diablo/nova/scheduler14:00
vidd--quota_cores "default = 20"14:00
Kiall+--quota_cores?14:01
Kiallyou mean "--max_cores"14:01
RaziqueKiall: but how come I've been able to launch 25 instances ?14:01
Raziquewhile the node is a 8 cores server14:01
viddhttp://docs.openstack.org/diablo/openstack-compute/admin/content/reference-for-flags-in-nova-conf.html14:01
Kiallthe scheduler is thinking about about virtual cores, as in, cores seen from inside VMs, not physical cores14:02
viddKiall, max-core = per commpute node14:02
KiallRazique: if you managed to launch 25 instances, then there is a bug in the scheduler ;)14:02
Raziquethanks for that I was asking myself yesterday if I had to update the nova.conf of is the db's quotas were enough14:02
viddquota-core = per tenant14:02
Kiallvidd: yea - thats exactly what I'm talking about14:03
RaziqueKiall: yah look http://paste.openstack.org/show/3340/14:03
Raziqueoh,14:03
Raziquethanks a lot guys14:03
Raziqueso let's update the nova.conf14:03
viddKiall, quota-cores and max-cores are two diffent items adjusting two different things...he should set both14:05
Kiallvidd: I know, But he says has already updated the quotas, so I was simply telling him about the other setting!14:06
Raziquevidd: "quota-core = per tenant"14:06
*** cereal_bars has joined #openstack14:06
viddKiall, he adjusted his quotas in the db...other apps dont have access to his nova db so they look at nova conf =]14:06
Raziqueneed to be seen a a global quota then14:06
Raziquewhile the one you set into databse applies to a node ?14:07
kkei have three servers and mostly want to run a lot of vm's. how do i set this thing up? i installed one of them with the contorller option of stackops installer and two of them as nodes. this is practically where i'm at now.14:07
*** dgags has quit IRC14:07
kkecomplicated stuff.14:07
viddRazique, "max-cores" =#of cores per compute node "quota-cores" = per tenant/nova project14:08
Kiallkke: I've never used the stackops installer, it sounds like its setup and all you need to do is launch some instances14:08
Raziquevidd: ah ok14:08
Raziquecan I read extra docs about the way quotas work ?14:09
viddRazique, and dont trust apps to look at the database for all the answers as somethings wont look there14:09
Raziqueok ; good to know then =)14:10
*** mjfork has joined #openstack14:11
uvirtbotNew bug: #890692 in nova "Nova trunk PPA FTBFS (dup-of: 890612)" [Undecided,Invalid] https://launchpad.net/bugs/89069214:11
Raziqueyah guys that worked :)14:12
Raziquethanks a ton14:12
Raziqueweird thing14:13
RaziqueI see "-quota_volumesdefault: '10'"14:13
Raziquewhile without that setting into my nova conf I've more than 20 volumes here14:13
*** djw_ has joined #openstack14:14
viddRazique, did you alter that in your database?14:14
Raziqueoh yes , volumes = 102414:15
Raziquethat means the database quota overrides the nova.conf one ? :D14:15
viddin this particular instances14:15
viddif you use dashboard, however, there is a possibility of an issue14:16
viddi cant say for sure because i dont just arbitrarily change stuff in the database =]14:16
*** stuntmachine has joined #openstack14:17
Raziquevidd: I've set these quotas a long time back14:17
Raziquebut don't use dash at all here ;)14:17
viddits a "for example"14:17
*** Hakon|mbp has quit IRC14:18
Raziqueoh ok14:18
Razique:D14:18
viddby not having the alterations you make in the database reflected in the nova.conf file it opens the door to issues14:18
Raziqueyah you are right14:19
Raziqueso you advise me to keep the same number for quotas between nova.conf and db ?14:19
viddlets just say it would never cause an issue14:19
vidd=]14:19
Raziqueok, i'll do that14:20
Raziquemmm in fact, that doesn't go weel14:20
Raziquewell*14:20
viddbut it does have the potential to prevent one =]14:20
Razique4 running instances , I'm trying to spawn 2514:20
Raziqueerror : You can only run 21 more instances of this type14:20
*** vernhart has joined #openstack14:20
Raziqueit's like the math is being done between the running instances and the number I ask14:20
Raziqueweird14:20
Razique5 running instance,  ask to spawn 2514:21
RaziqueYou can only run 20 more instances of this type14:21
*** osier has quit IRC14:24
*** mestery has quit IRC14:24
*** jollyfoo has quit IRC14:24
*** jollyfoo has joined #openstack14:25
*** joesavak has joined #openstack14:26
Kiallvidd: If i understand the quotas correctly, the nova.conf quota settings are the defaults, and these defaults can be overridden in the database.14:26
RaziqueKiall: not sure since a quota into the DB is linked to a project_id14:27
Raziquemmm or maybe in fac14:27
Raziquet14:27
Kiallexactly - the defaults are in nova.conf, and per-project/tenant overrides are in the DB14:28
Raziquesorry to be naive but why despite my quotas into the databse for the project I still have the overquota issue then ?14:28
KiallRazique: honestly, I'm not sure. It might be a bug, or maybe the quotas are set wrong..14:29
Raziqueyah, that is a possibility here ; I'll try to figure out why now it's like I've a 25 instances limit14:30
*** lts has joined #openstack14:30
kbringardI set a lot of defaults… instances, cores, ram and gigabytes14:30
kbringardfor quotas14:30
Raziquehey kbringard :)14:31
kbringard'cause if you set instances and not cores14:31
kbringardthen you still hit the same logical limit, just on a different quota14:31
KiallRazique: maybe set the global to 1 instance in nova.conf, and the project to 2 in the DB, that gives you a way to check that the DB quotes are being respected14:31
*** tryggvil___ has quit IRC14:31
kbringardhey Razique :-)14:31
Raziquekbringard: into nova.conf and database ?14:31
kbringardI don't set anything in the DB14:31
kbringardbut I'm also not trying to enforce at this point14:31
Raziqueok good to know14:31
*** rbergeron has joined #openstack14:31
kbringardI just don't want to hit the low default limits :-D14:31
KiallRazique: nova.conf is just the default for all projects. DB is per-project overrides.14:31
KiallSo, Setting them in either place should work.14:32
RaziqueKiall: i've removed the quota into database14:32
Raziqueand i'll set every quota to let's say 514:32
Kiallif you set every quota to 5, you're not going to get that many instances going ;)14:32
Kiallas in - you'll have 5GB of ram, 5GB of disk etc14:33
Raziquewell that 25 limit is very strange14:33
*** tryggvil_ has joined #openstack14:33
Raziquesince the database was set to 1024 for every quota14:33
*** deshantm_laptop has quit IRC14:33
Raziqueand into nova.conf to 51214:33
kbringardI always thought that what was in the DB was the global default, but its applied per project14:33
RaziqueI've removed the DB quotas14:33
kbringardthen you can override a specific project14:33
viddRazique, 1024 quato for ram?14:34
kbringardso 25 insdtances in the nova.conf means you can have 25 instances in each project by default, etc14:34
Raziquevidd: that quota wasn't set into db14:34
Razique:p14:34
viddRazique, default: '51200'14:34
*** blakeyeager has quit IRC14:34
kbringardI don't remember what the default units are14:35
Raziquemegabytes14:35
viddRazique, yes14:35
*** Lumiere has quit IRC14:35
kbringardso if you have it set to 1024, then that means you can have 1GB of ram allocated to instances across an entire project14:35
kbringardwhich you're going to hit pretty quick14:35
KiallI have just tested that the DB values are indeed respected. You must be hitting one of the limits.14:35
*** dendro-afk is now known as dendrobates14:35
RaziqueKiall: ok thanks14:36
*** Fu4ny has joined #openstack14:36
viddRazique, what sise instances were you launching14:36
Raziquem1.small14:36
viddsmall = 2gb ram?14:36
Kiallm1.small: Memory: 2048MB, VCPUS: 1, Storage: 20GB, FlavorID: 2, Swap: 0MB, RXTX Quota: 0GB, RXTX Cap: 0MB14:36
viddyep...there is is14:37
vidd2048 x 25 =5120014:37
viddyou hit the ram ceiling14:37
Kiallso, for 25 of those .. the quote needs to be 51200 ram14:37
viddRazique, you need to set the --quota_ram14:38
Raziquewell seen14:38
Raziquelet's try14:38
Kiallso, for 25 of those .. the quote needs to be 51200 ram / 500 gigabytess / instances 25 / floating_ips 25 / cores 2514:38
Raziqueok so nova I don't have any quota into databse14:38
*** andrewbogott has joined #openstack14:38
Raziqueand quota_cores=1024; instances=512;max_cores=512, quota_ram=10240014:39
KiallRazique: check the quotes with: nova-manage project quota --project=214:39
Kiallwhere 2 = the tenant ID14:39
Raziquehttp://paste.openstack.org/show/3343/14:40
*** supriya has quit IRC14:40
Raziqueseems good14:40
Raziqueyah it worked :D14:41
Raziquedon't have the limit now14:41
Kiallwell, you do... its just a larger limit ;)14:41
Raziquehttp://paste.openstack.org/show/3344/14:41
kbringarddepending on how you have your flavors setup, yo'll probably want to make max_cores be a multiplier of instances14:41
RaziqueI mean, the overquota message :p14:41
foexleok next question :D .... my second node are running now. Every new instance gets an ip and i can from the dom0 ping to this vm14:41
kbringardsince 1 instance can have 2, 4, 8, etc cores14:42
Raziquemy biggest plan uses 8 vcpus actually14:42
foexlebut i cant ping from Host1:vm1 to host2:vm114:42
Kiallfoexle: what network type are you using?14:42
foexleits the same network but no routes are exist14:42
foexlevLan14:42
KiallOkay, and do both nodes run nova-network? or just 1?14:43
Raziqueso last question; does nova.conf overrides DB or is it the DB that overrides nova.conf ,14:43
foexleboth14:43
Kialland the network was setup with the --multi_node=True option?14:43
RaziqueI always thought that was the DB that was overriding, but kbringard thinks it's the opposite14:43
foexleKiall: yes14:43
kbringardRazique: I really have no idea14:43
foexleKiall: the network in the db too14:43
*** dirkx_ has quit IRC14:43
kbringarddo you have icmp allowed in your security groups?14:44
KiallRazique: Nova.conf = defaults, which can be overridden by the DB on a per project bases14:44
Kiallfoexle: okay, and are your switches VLAN capable?14:44
Kialland what kbringard said ;)14:44
koolhead17kbringard, hey14:44
*** nerens has quit IRC14:44
foexleyes and yes D14:44
foexle:D14:44
kbringardhehe, sorry  Kiall, don't mean to jump on your parade :-)14:45
kbringardhey koolhead1714:45
Raziqueok thanks guys14:45
Raziqueworking now14:45
koolhead17foexle, that br100 thing is resolved?14:45
Kiallfoexle: okay, and are the switch ports setup to accept and forward tagged packages for the relevant VLAN's?14:45
Raziquehey koolhead17 :)14:45
Kiallkoolhead17: VLAN doesnt use a br100, at least, not one you manually setup14:45
Raziquefoexle: is the vlan up on the node14:45
koolhead17Razique, my friend change the port number :P14:45
koolhead17Kiall, yes sir :D14:46
Raziquekoolhead17: hehe yah that would be surprising if the port would have been updated like this :D14:46
foexleRazique: it is vlan100        | 100  | br10014:46
Kialls/packages/packets/*14:46
Raziquefoexle: cat /proc/net/vlan/config now :D14:46
foexlevlan100        | 100  | br10014:46
livemooni14:47
livemoonh14:47
*** livemoon has left #openstack14:47
*** livemoon has joined #openstack14:47
foexleKiall: i running vlans in this network14:47
Kiallfoexle: and `brctl show` says that br100 is has vlan100 and vnetX as members?14:47
foexlesorry with these switches14:47
foexleyes14:47
KiallOkay, and what eth interface should the VLAN traffic be on?14:47
foexleeth114:48
foexle--vlan_interface=eth114:48
Kialldo you have --vlan_interface=eth1 in both nova.conf's?14:48
foexle:D14:48
Kiallbeat me to it ;14:48
*** supriya has joined #openstack14:48
Kiall)14:48
koolhead17Razique, i think i will have to check keystone code at github to confirm that :D14:48
foexleKiall: so i have on all nodes14:48
livemoonkoolhead17: you expert in python?14:48
Kiallfoexle: okay - everything sounds like its setup. I would bet its a switch mic-configuration...14:49
Kiallmis*14:49
*** jollyfoo has quit IRC14:49
koolhead17livemoon, no am a n00b14:49
Kiallfoexle: are they managed switches? or just switches that will happily accept+pass on VLAN tagged packets?14:50
Kiallbrb14:50
RaziqueKiall: vidd ok perfet14:50
Raziqueprefect14:50
Raziquethe quota update in production worked14:50
foexleKiall: managed14:50
*** tryggvil_ has quit IRC14:51
Raziquethe next beer is on me ;)14:51
*** tryggvil_ has joined #openstack14:51
foexleRazique: great! :D14:51
koolhead17Razique, http://bit.ly/u5CNub see this and especially  # Port the bind the Admin API server to section14:51
* koolhead17 scratches his head again14:51
* koolhead17 pokes zul 14:52
koolhead17hola zykes-14:52
*** mestery has joined #openstack14:52
zulwhats up?14:52
*** mordred_ has joined #openstack14:52
*** mordred_ has joined #openstack14:52
*** ChanServ sets mode: +v mordred_14:52
*** Hakon|mbp has joined #openstack14:52
*** mordred_ is now known as mtaylor-xchat14:52
koolhead17zul, am telling Razique about the admin_port  number change, u mentioned long time back14:53
zulok14:53
Raziquekoolhead17: these are the good ports14:58
Razique5000 public port, and 35357 for the admin port14:58
koolhead17Razique, yes14:59
*** javiF has joined #openstack15:00
Kiallfoexle: and have the switch ports been setup as trunk's + Access for vlan100+15:00
KiallEverything on the nova side looks (well .. sounds) correct.. I'm betting its the switch config15:01
foexleKiall: sec please ... i'm talking with the datacenter admin15:01
foexleto communicate with the other node, thw switch must understand tagged vlan right ?15:02
KiallYes/No .. If its a managed switch, it might block VLAN's you havent specifically said are allowed15:03
KiallIf its not managed, sometimes they just scrap the VLAN tag and pass the packet through on VLAN0 (aka no vlan)15:03
livemoonRazique: have you update your migration doc?15:03
Kiallfoexle: Basically - the ports need to be set to trunk mode, and given access to VLAN100+15:04
ryan_fox1985hello I'm want to debug the swift part. But I don't know what I need.15:04
Raziquelivemoon: it's in the review but the one online works15:05
RaziqueI've tested it just yesterday :p15:05
foexleKiall: ah ok .... but i see here with brctl show only vlan iface and the vm-interfaces and no eht1 .... how knows the system the correct physical interface ?15:05
*** nphase has joined #openstack15:06
Kiallyea, brctl show only shows vlanX + vethX15:06
*** tryggvil_ has quit IRC15:07
foexleKiall: it's ok :D i've the answer -.- => nova.conf ;)15:07
Kialllol - what were you missing?15:07
annegentleRazique: sorry I missed that review, going to look now15:08
*** swill has quit IRC15:08
*** robbiew has joined #openstack15:08
foexlei mean how the system knows the physical interface for comunicate with the other vm's => nova.conf // vlan_interface=eth1 !15:08
*** lzyeval has quit IRC15:08
*** tryggvil_ has joined #openstack15:09
Kiallfoexle: ah ..15:09
KiallJust to be sure.. cat /proc/net/vlan/vlan10015:09
Kiallit should have  Device: eth1 line15:09
Raziquehey annegentle :)15:10
foexlehmmm15:10
foexleDevice: br10015:10
Kiallthere we go ;)15:10
Kiallwhat does your nova DB networks table look like? specifically the "bridge_interface" column?15:11
foexle   bridge_interface: br10015:11
Kiallyea, that should be eth115:11
foexleah ok15:11
Kiallwill probably need to reboot the nodes to have it reconfig everything15:12
foexleyeah cool thanks i'll try it!15:12
*** dolphm has joined #openstack15:17
koolhead17annegentle, ping15:20
annegentlekoolhead17: welcome back!15:20
uvirtbotNew bug: #890727 in openstack-manuals "openstack-identity guide needs to correct port number for  admin API " [Undecided,New] https://launchpad.net/bugs/89072715:20
koolhead17annegentle, how have you been? superbusy as ever15:21
*** mindpixel has joined #openstack15:22
*** jwalcik has joined #openstack15:23
koolhead17annegentle, i have assigned #890727 for myself :)15:23
annegentlekoolhead17: great, thanks. Things are going well. Last week we made epub output from the books -I'll ask MurthyRaju if he's interested in that output.15:24
annegentlekoolhead17: I think it looks pretty good, though epub>mobi needs one more fix. And there aren't any cover pages, yet.15:25
*** msivanes has left #openstack15:27
*** nati2 has joined #openstack15:29
*** katkee has quit IRC15:29
*** troytoman-away is now known as troytoman15:30
*** redconnection has quit IRC15:31
*** lborda has joined #openstack15:31
*** redconnection has joined #openstack15:31
*** swill has joined #openstack15:35
*** imsplitbit has joined #openstack15:36
*** redconnection has quit IRC15:37
*** jollyfoo has joined #openstack15:42
*** livemoon has left #openstack15:45
*** dirkx_ has joined #openstack15:47
*** nerens has joined #openstack15:48
*** llang629 has joined #openstack15:48
*** llang629 has left #openstack15:48
*** dgags has joined #openstack15:49
*** swift82 has joined #openstack15:52
foexleKiall: wohoooo it runs ! ;)15:52
foexleKiall: thanks15:52
*** cdub has quit IRC15:53
Raziquefoexle: what was the trick ?15:55
Raziqueput eth1 under brige_name ?15:56
foexleRazique: in the database yes15:56
*** cdub has joined #openstack15:56
Raziquebut u didn't tried that earlier ? :p15:56
*** mtaylor-xchat has quit IRC15:58
foexleno because i thought the network service gets all from nova.conf but the database attribute will overrite that15:58
*** mrjazzcat has joined #openstack15:58
Raziqueah ok :)15:58
foexle:)15:59
*** adjohn has joined #openstack15:59
Raziquewell good to know15:59
*** TheOsprey has quit IRC15:59
Raziquethat gives us even more elements to update the multi nic doc16:00
*** llang629_ has joined #openstack16:00
*** llang629_ is now known as llang62916:00
*** dirkx_ has quit IRC16:01
*** troytoman is now known as troytoman-away16:01
*** llang629 has left #openstack16:04
*** uksysadmin has quit IRC16:05
*** dgags has quit IRC16:05
*** dragondm has joined #openstack16:05
*** dolphm has quit IRC16:06
*** chomping has quit IRC16:06
*** deshantm_laptop has joined #openstack16:06
*** misheska has joined #openstack16:07
*** jollyfoo_ has joined #openstack16:08
annegentleyay for rain! (really have to notice it when we're in the middle of a drought!)16:08
*** haji has joined #openstack16:10
hajihello16:10
Raziquehere cold and grey, winter''s coming =d16:10
koolhead17annegentle, :P16:10
Raziquehey haji :)16:10
*** jollyfoo has quit IRC16:11
uvirtbotNew bug: #890741 in openstack-manuals "Method to Update the metadata on an Account is undocumented" [Undecided,New] https://launchpad.net/bugs/89074116:11
*** dgags has joined #openstack16:12
hajiso i have a question, i updated kiall packages and removes tgt, does this mean i have to remove the flag in nova.conf iscsi_helper=tgtadm16:12
*** jollyfoo_ has quit IRC16:13
*** medberry has quit IRC16:13
*** freeflyi1g has quit IRC16:13
*** medberry has joined #openstack16:13
*** medberry has quit IRC16:13
*** medberry has joined #openstack16:13
*** freeflying has joined #openstack16:15
*** rsampaio has joined #openstack16:16
foexlehaji: to diablo ?16:16
foexlehaji: so upgrade ;)16:16
hajiyeah16:17
foexlehaji: yes you can remove that16:17
hajibut do i need to replace the flag?16:17
*** Hakon|mbp has quit IRC16:17
hajiwith something else16:17
foexlehaji: i think :D .... so i dont have this flag and my iscsi luns working verry well16:17
foexlehaji: i have this flag --iscsi_ip_prefix=192.168. but dont know if you need it16:18
hajikk16:18
hajithanks16:18
foexlenp16:19
swift82Hi guy's. Just a fast question, when i do a euca-associate-address -i i-00000023 91.224.249.128 all works fine (nova-networks adds the adress). And ip addr list gives the IP on the interface. But a simpel ping gives a error on the host, ping: sendmsg: Operation not permitted Does anyone something I am missing?16:19
*** obino has quit IRC16:19
foexleswift82: yeah you must allow icmp16:20
foexleswift82: to your security group16:20
foexlehttp://docs.openstack.org/cactus/openstack-compute/admin/content/enabling-ping-and-ssh-on-vms.html16:21
swift82Check, i have that. 0.0.0.0/24 from -1 to -1 cidr 0.0.0.0/2416:21
foexleits for cactus but in diablo are the same16:21
foexleok16:21
foexleso try again16:21
swift82Yeh i have tried that16:22
swift82Is there a command that I can check the securtygroups on a instance?16:22
*** jollyfoo has joined #openstack16:23
foexlenot on a instance16:23
foexlebut on a project16:23
foexleeuca-describe-groups16:23
foexleswift82: do you have all on the same host ?16:24
*** chomping has joined #openstack16:24
swift82Yes for testing now16:24
swift82I have multible machines16:24
foexleswift82: iptables -L and iptables -L -t nat.... do you find your ip in the iptable rules ?16:25
*** doude has quit IRC16:25
foexleso the associated address16:25
*** doude has joined #openstack16:25
uvirtbotNew bug: #890749 in swift "POST of metadata to a Container is inconsistent with that of an Object" [Undecided,New] https://launchpad.net/bugs/89074916:25
swift82No, i don't see my adress there16:27
swift82iptables -L -t nat | grep 12816:28
swift82DNAT       all  --  anywhere             91.224.249.128      to:10.0.0.1016:28
swift82ACCEPT     all  --  10.0.0.0/24          10.128.0.0/2416:28
swift82DNAT       all  --  anywhere             91.224.249.128      to:10.0.0.1016:28
swift82SNAT       all  --  10.0.0.10            anywhere            to:91.224.249.12816:28
swift82so with the -L -t nat i do see my address16:28
Raziqueswift82: in fact i'd say it's a VLAN stuff16:30
Raziquenothing to do with security rules16:30
*** reidrac has quit IRC16:30
Raziquecuz that would result to a timeout16:30
Raziquenot a "not permitted"16:30
swift82Okey..16:30
hajiim getting this error when trying to connect to the vnc console16:30
hajihttp://pastebin.com/ai3cT6Uq16:30
swift82sounds good16:30
*** rsampaio has quit IRC16:30
Raziquehaji restart rabbimq-server16:31
Raziquethen nova-scheduler16:31
*** cereal_bars has quit IRC16:31
*** rsampaio has joined #openstack16:31
*** guigui has joined #openstack16:31
swift82member:identifier:razique: I am useing vlans yes. But it's on the localhost so i would say i don't need it yet16:32
hajiokk16:32
*** negronjl has joined #openstack16:33
Raziqueswift82: ok go for flatDHCP then :)16:33
swift82No i want to use High Availability Manager16:35
Raziqueso u need it :p16:36
Raziquehow many servers do u have ?16:36
*** mindpixel has quit IRC16:37
swift821 controller, 5 machines for VM's16:37
hajidamn..16:38
*** koolhead17 has quit IRC16:38
hajii get the novnc welcome screen but Failed to connect to server16:38
*** dobber has quit IRC16:40
*** code_franco has joined #openstack16:41
Raziqueswift82: ok, where nova-network runs ?16:41
*** redconnection has joined #openstack16:42
swift82on the nova-compute nodes16:42
*** Fu4ny has quit IRC16:43
Raziqueok so you use multi_host mode ?16:43
*** code_franco has quit IRC16:43
*** dprince has joined #openstack16:46
*** nati2 has quit IRC16:46
*** dolphm has joined #openstack16:46
*** misheska has quit IRC16:47
*** redconnection has quit IRC16:47
*** n81 has joined #openstack16:48
*** n88 has quit IRC16:48
*** rocambol1 has quit IRC16:50
*** dprince has quit IRC16:50
*** code_franco has joined #openstack16:50
Raziqueneed to leave swift82 be back in a hour top16:52
Raziquecya guys16:52
*** Razique has left #openstack16:52
swift82yeh16:52
swift82thanks16:52
*** swift82 has quit IRC16:52
*** cdub has quit IRC16:53
hajiis it normal for vnc proxy to be in another zone17:01
hajihttp://pastebin.com/np45fG5c17:01
uvirtbotNew bug: #890777 in keystone "No way to diagnose tests easily" [Undecided,New] https://launchpad.net/bugs/89077717:05
hajikiall?17:11
hajiu there17:11
*** hggdh has quit IRC17:11
*** gyee has joined #openstack17:13
*** gyee has quit IRC17:15
*** mies has quit IRC17:15
*** gyee has joined #openstack17:15
*** hggdh has joined #openstack17:15
*** redconnection has joined #openstack17:16
*** gyee has quit IRC17:16
*** popux has quit IRC17:16
*** rnirmal has joined #openstack17:17
*** koolhead17 has joined #openstack17:18
uvirtbotNew bug: #890775 in openstack-manuals "The "uec-publish-tarball" command is replaced by "cloud-publish-tarball" in diablo" [Medium,Confirmed] https://launchpad.net/bugs/89077517:18
*** javiF has quit IRC17:18
*** adjohn has quit IRC17:20
*** obino has joined #openstack17:21
*** adjohn has joined #openstack17:22
*** supriya has quit IRC17:22
*** derjohn_mob has quit IRC17:23
*** dirkx_ has joined #openstack17:24
*** cereal_bars has joined #openstack17:26
*** clauden_ has quit IRC17:27
*** clauden has joined #openstack17:27
*** lorin1 has quit IRC17:29
*** rsampaio has quit IRC17:30
*** rsampaio has joined #openstack17:30
*** jog0 has joined #openstack17:34
*** jog0 has quit IRC17:35
*** jog0 has joined #openstack17:36
*** negronjl has quit IRC17:36
*** localhost has joined #openstack17:36
*** supriya has joined #openstack17:38
*** dirkx_ has quit IRC17:38
*** dgags has quit IRC17:39
*** aliguori has quit IRC17:39
*** arBmind has joined #openstack17:39
*** alekibango has quit IRC17:41
*** alekibango has joined #openstack17:41
*** alekibango_ has joined #openstack17:42
*** ohnoimdead has joined #openstack17:46
*** juddm has joined #openstack17:46
*** jdurgin has joined #openstack17:51
*** clauden has quit IRC17:51
*** clauden_ has joined #openstack17:51
*** Ryan_Lane has joined #openstack17:54
*** lorin1 has joined #openstack17:55
*** clauden_ has quit IRC17:56
*** clauden_ has joined #openstack17:57
*** blakehaggerty has joined #openstack18:01
*** blakehaggerty has left #openstack18:01
*** adjohn has quit IRC18:01
*** stuntmac_ has joined #openstack18:03
*** stuntmachine has quit IRC18:03
*** stuntmac_ is now known as stuntmachine18:03
*** TheOsprey has joined #openstack18:07
*** arBmind has quit IRC18:08
*** supriya has quit IRC18:09
*** krow has joined #openstack18:10
*** carlp has joined #openstack18:13
*** dgags has joined #openstack18:14
*** MarkAtwood has joined #openstack18:15
hajido i need to add a rule to connect to the vnc console in the dashboard?18:16
*** ewindisch has joined #openstack18:16
rmkhaji: nope -- guessing you're seeing an immediate server disconnected message18:17
hajioh18:18
hajirmk: which log should check for problems18:18
rmkvncproxy isn't working with the latest versions of chrome18:18
rmkis that what you're testing with?18:19
hajifirefox18:19
haji7.0.118:19
hajii get the Failed to connect to server message in red18:20
rmkDo you have vncproxy_url set in your nova.conf?18:20
hajii have this:18:21
haji--vnc_enabled=true18:21
haji--vncserver_host=10.10.10.218:21
haji--vncproxy_url=http://10.10.10.2:608018:21
haji--ajax_console_proxy_url=http://10.10.10.2:800018:21
hajifor the vnc conf in the nova conf18:22
*** clauden_ has left #openstack18:22
*** dwcramer has joined #openstack18:23
*** mrbuffneff has joined #openstack18:23
*** kke has left #openstack18:25
*** nacx has quit IRC18:26
*** lorin11 has joined #openstack18:26
uvirtbotNew bug: #890801 in keystone "GET /extensions returns an empty list" [Undecided,New] https://launchpad.net/bugs/89080118:26
*** lorin11 has quit IRC18:26
haji:(18:26
*** lorin1 has quit IRC18:27
hajiam i missing anything?18:27
*** n81 has quit IRC18:27
*** jakedahn has joined #openstack18:31
*** mdomsch has joined #openstack18:31
*** ejat has joined #openstack18:32
*** ejat has joined #openstack18:32
*** n81 has joined #openstack18:32
*** lorin1 has joined #openstack18:32
*** f-yang has joined #openstack18:35
*** darraghb has quit IRC18:35
*** dprince has joined #openstack18:36
*** jsavak has joined #openstack18:38
*** localhost has quit IRC18:38
*** guigui has quit IRC18:40
*** joesavak has quit IRC18:41
*** Hakon|mbp has joined #openstack18:42
*** rsampaio has quit IRC18:43
*** jakedahn_ has joined #openstack18:44
uvirtbotNew bug: #890807 in keystone "Curl examples show outdated for response GET /" [Low,Confirmed] https://launchpad.net/bugs/89080718:46
*** jakedahn has quit IRC18:46
*** jakedahn_ is now known as jakedahn18:46
*** vladimir3p has joined #openstack18:47
mrbuffneffStupid quit, but anyone know how to filter all the join/quit messages?18:47
*** PiotrSikora has quit IRC18:49
viddmrbuffneff, "filter" as in how? and from where?18:49
*** rsampaio has joined #openstack18:49
mrbuffneffvidd, in this IRC chat room, i see all kind of noise.   "xxxx has quit.  xxxx has joined"18:51
viddmrbuffneff, it is a setting in your program...what program do you use?18:51
mrbuffneffI have to use webchat.freenode.net due to my company's firewall.18:52
mrbuffneffOh thanks vidd!  I found the option in the upper left.18:52
viddhehe18:53
*** rwmjones has joined #openstack18:53
viddmrbuffneff, im glad you found it...i never use that client and i LIKE to know who is coming and going =]18:54
*** PiotrSikora has joined #openstack18:54
hajii cant connect to my instances using the vnc console in the dashboard18:55
hajihelp18:55
notmynamettx: looks like I'll actually be here for the meeting today18:55
hajinovnc says Failed to connect to server18:55
viddhaji, is novnc running?18:55
hajividd, im assuming it is... when i click on the vnc console link novnc runs on the browser, i get the nonvc splash screen in yellow an green18:57
*** mrjazzcat has left #openstack18:57
hajibut i get a message in red that says Failed to connect to server18:57
*** rsampaio has quit IRC18:58
viddhaji, that is the noVNC client...is the nova-vncproxy running and is it set in your nova.conf file18:58
hajiyep18:58
*** mgoldmann has quit IRC18:58
hajii get a happy face for it user service list18:58
viddso "ps aux |grep vnc shows the vnc proxy?18:59
viddhaji, i suppose the smiley works too =]18:59
hajilol18:59
viddhaji, your several steps ahead of me...i never got the noVNC client to come up so.....im not the one with your answer =]19:00
hajihttp://paste.openstack.org/show/3354/19:00
hajividd get kiall packs19:00
viddi dont WANT to =]19:01
hajiwhy?19:01
Kiallbecause he dislikes me ;)19:01
hajihahaha19:02
viddfor one...i am going to need to be able to do this all on my own and i cant fly Kiall in to my datacenter if things go sideways =]19:02
Kialllol ..19:02
Kiallsure you cna19:02
hajiany ideas kiall, with my problem19:02
hajican u connect using novnc?19:02
Kiallsure you can*19:02
hajion the dashboard19:02
Kiallhaji: what browser are you using?19:03
hajifirefox 7.0.119:03
*** jedi4ever has joined #openstack19:03
Kiallhaji: what happens when you click the noVNC link?19:03
KiallVNC link*19:03
Kiallhaji: also, I see in your pastebin "-vnc 10.10.10.2:1"19:04
*** hingo has joined #openstack19:04
KiallI tend to set --vncserver_host to 0.0.0.019:05
Kiallso its binds on all interfaces19:05
*** rsampaio has joined #openstack19:05
hajihttp://imgur.com/DbaRO19:06
hajihow do i change that?19:06
Kialljust--vncserver_host=0.0.0.0 in nova.conf19:07
KiallBut, the change will only take effect for new instances19:07
hajii have this in my conf19:08
haji--vnc_enabled=true19:08
haji--vncserver_host=10.10.10.219:08
haji--vncproxy_url=http://10.10.10.2:608019:08
haji--vnc_console_proxy_url=http://10.10.10.2:608019:08
haji--ajax_console_proxy_url=http://10.10.10.2:800019:08
hajishould i change all those to 0.0.0.019:09
Kiallno, just --vncserver_host19:09
hajiook19:09
Kialland I don't think vnc_console_proxy_url is actually a setting ;)19:09
hajioops19:10
KiallI think it was renamed to vncserver_host in diablo19:10
hajiok ill delete it19:10
hajihehe19:10
hajithanks19:10
Kiallanyway, other than that, it looks fine. try starting a new instance once that change is made, and all nova-* services are restarted19:11
Kiallthen see if you can VNC to that instance19:11
KiallI'm thinking the VNC proxy is trying to connect to 127.0.0.1, which vncserver_host=10.10.10.2 is preventing19:11
*** RobNeff has joined #openstack19:12
*** develtech has joined #openstack19:13
*** ogelbukh has joined #openstack19:15
*** stuntmachine has quit IRC19:16
*** mrmartin has joined #openstack19:17
Spiriliswow just used dodai to install glance and nova, going to test it soon but two caveats: preinstall rabbitmq-server on the rabbitmq box, and for the nova volume hosts, get iscsitarget-dkms and iscsitarget preinstalled19:17
*** stuntmachine has joined #openstack19:17
Spiriliskept failing until I shored up those reqs...19:17
Kialldodai?19:17
Spirilishttps://github.com/nii-cloud/dodai-deploy/wiki19:17
Spirilisfound it off the openstack wiki19:18
Spirilisseems like some kind of fancy automated installer that uses a web GUI to launch puppet scripts to get the right software installed on proposed nova/glance/swift hosts19:18
*** PiotrSikora has quit IRC19:19
*** localhost has joined #openstack19:19
*** cp16net has joined #openstack19:19
*** stuntmachine has quit IRC19:19
Spirilisgiving the 'test' feature a run now... supposedly it pulls up a canned server image and boots it to test things out19:20
*** stuntmachine has joined #openstack19:20
Spirilistest failed... hmm19:21
*** PiotrSikora has joined #openstack19:21
*** rnorwood has joined #openstack19:21
*** develtech has quit IRC19:22
hajiit worked... but19:23
hajihttp://imgur.com/HfRLL19:23
hajifml19:23
Kiallhaji: your trying to boot a 64 bit instance on a 32bit host ;)19:23
Kiallyou're*19:23
hajibut im sure this machine is 64 bits19:24
KiallIf you followed my instructions, they assume 64bit  servers! Sorry!19:24
Kiallhaji: on the server run "uname -a"19:24
*** stuntmachine has quit IRC19:24
hajiuname -a19:25
hajiLinux cloudHQ1 3.0.0-12-generic-pae #20-Ubuntu SMP Fri Oct 7 16:37:17 UTC 2011 i686 i686 i386 GNU/Linux19:25
KiallSo, either its a 32bit host... or its a 64bit host and you installed a 32bit version of ubuntu ;)19:26
hajifuuuuuuuuu19:26
KiallIf its the latter, start over!19:26
hajiLOL19:27
*** Ryan_Lane has quit IRC19:27
*** dolphm has quit IRC19:27
Kiallhaji: it should only take an hour, now that you know how stuff works ;)19:27
hajiyeah thanks kiall19:28
hajilaterz19:28
*** Adri2000 has quit IRC19:30
*** Adri2000 has joined #openstack19:30
*** aliguori has joined #openstack19:31
*** syah_ has quit IRC19:32
*** stuntmachine has joined #openstack19:32
viddok...so i backed off and only installed nova/glance without keystone and im getting nothing when i run "euca-describe-availability-zones"19:32
*** dolphm has joined #openstack19:33
*** syah has joined #openstack19:33
*** dolphm has quit IRC19:33
*** dolphm has joined #openstack19:34
*** ssreedharan has joined #openstack19:36
ttxnotmyname: oh? cool. Starting in 80min19:39
*** koolhead17 has quit IRC19:39
*** imsplitbit has quit IRC19:45
*** jakedahn has quit IRC19:46
*** adjohn has joined #openstack19:47
*** rnorwood1 has joined #openstack19:47
Kiallvidd: do you not need the verbose option? eg "euca-describe-availability-zones verbose"19:49
Kiall(I dont use the euca tools, the nova ones are nicer since you can name stuff, eg "web12" rather than "i-8e5790ty"19:49
viddKiall, i feel stupid =\19:49
Kiallso you should :P19:49
*** rnorwood has quit IRC19:50
uvirtbotNew bug: #890829 in nova "openvz driver spawn broken with trunk" [Undecided,New] https://launchpad.net/bugs/89082919:50
viddthat means there was probably nothing wrong with yesterday's install and this format/reinstall was unnede19:50
vidd*unessisary19:51
*** djw_ has quit IRC19:51
KiallLOL19:51
viddspelling lessons on the other hand are much needed!19:51
vidd*sigh* at least my scripting is getting "fine tuned"19:52
viddmaking it "idiot resistant"19:53
Kiallvidd: BTW, are you scripting the install from git?19:53
viddim doing nova/glance from stock repo, keystone/horizon from git19:53
Kiallfrom ubuntu repo's? or the OS PPA?19:54
viddstock ubuntu19:54
KiallHumm...19:54
Kiall;)19:54
viddos ppa is not "stock" its essex19:54
Kiallthey have a diablo PPA for nova etc19:54
Kiallthe ubuntu packages are missing a *pile* of fixes19:54
vidd*buntu wont let me add it19:54
Kiallof course it lets you!19:55
vidd=-\19:55
KiallAnyway, both the ubuntu and openstack diablo PPA are missing all the updates to stable/diablo...19:56
Spirilisah nice19:56
Spirilisyeah when I did my dodai install and it tried to add the PPA I opted out and opted to use the ubuntu repos19:56
*** rsampaio has quit IRC19:56
KiallSpamapS: well, the openstack PPA is missing then too...19:56
Kiallthem*19:56
KiallSpirilis*19:56
Spirilisgotcha19:57
viddKiall, then what's the point of using the ppa  then =\19:57
*** mjfork has quit IRC19:57
KiallNo idea ;)19:57
KiallThis PPA provides packages for Ubuntu 10.04 LTS (Lucid), Ubuntu 10.10 (Maverick) and Ubuntu 11.04 (Natty).19:57
KiallUsers of Ubuntu 11.10 (Oneiric) should directly use the packages available in Ubuntu official repository, there is no need for them to add this PPA.19:57
viddKiall, yeah...thats what i got when i tried to add it19:58
Kiallno - thats part of the PPA description, not an error message ;)19:58
SpamapSMost likely that is there because there were no stable updates to prior releases.19:58
KiallThe PPA does include oneiric packages19:58
SpamapSThough 11.10 *should* get those updates in oneiric-proposed/oneiric-updates19:59
KiallSpamapS: only when Openstack mint a versioned release19:59
SpamapSUpdates whose versions should supersede the packages in the PPA.. one would hope.19:59
Kiallwhich, so far, they haven't done.19:59
SpamapSKiall: not necessarily, we cherry pick stuff into Ubuntu all the time.19:59
*** rsampaio has joined #openstack19:59
viddSpamapS, are you a packager for *buntu?20:00
KiallSpamapS: sure, and thats happened with a few fixes for nova..20:00
SpamapSindeed I am20:00
*** dendrobates is now known as dendro-afk20:00
*** anotherjesse has joined #openstack20:00
Kiallbut things like keystone have been left utterly broken20:00
Glaceeanyone have found a good way to track bandwith usage in swift?20:00
viddlook at Kiall 's packages and get them added PLEASE =]20:00
Kialllol20:00
Spirilisah hmm20:01
notmynameGlacee: for what purpose?20:01
Spirilisso the weird authentication errors I keep getting with my test install are probably broken pkgs?20:01
Glaceenotmyname: billing20:01
SpamapSTypically a bug report and a poke to somebody in #ubuntu-server or #ubuntu-devel should get them into oneiric-proposed.20:01
*** code_franco has quit IRC20:01
KiallSpamapS: if you're using keystone, then yes20:01
notmynameGlacee: parse the proxy logs for that20:01
Spirilisnot actually sure if this dodai install is using keystone though, I didn't install it... so maybe not...20:01
Glaceenotmyname: oh ok.. I will start looking at it thanks20:01
SpamapSKiall: got bugs ? I'll poke from within.. ;)20:02
KiallSpamapS: I gave up waiting for ubuntu to get them fixed ;) https://launchpad.net/~managedit/+archive/openstack20:02
viddSpamapS, Kiall went all "Billy the exterminator" on them =]20:02
*** CaptTofu has joined #openstack20:02
*** RobNeff has quit IRC20:02
*** mrbuffneff has quit IRC20:02
*** jakedahn has joined #openstack20:03
SpamapSIf you have packages in a PPA, those should be easy to turn into a debdiff for upload to oneiric-proposed20:03
viddSpamapS, once Kiall 's ppa gets blessed by the *buntu gods, i can use them20:03
KiallSpamapS: maybe, but they are only semi based on the ubuntu ones, and use different upstream versions etc20:04
Kiall(I'm using the stable/diablo branches of stuff)20:04
*** rsampaio has quit IRC20:04
SpamapSKiall: if by them you mean bug reports, then shame on us for not jumping on top of them... one good place to bring this up is also the weekly ubuntu server meeting.20:04
SpamapSKiall: semi based on the ubuntu ones? so these aren't just a few cherry picked patches?20:05
*** code_franco has joined #openstack20:05
KiallNo, infact, all the patches from the stock ubuntu packages have been removed, and upstream source updated20:05
KiallHence why I keep telling vidd my packages wont be making it into ubuntu anytime soon20:06
viddSpamapS, they are re-writes from source directly from the makers20:07
viddor is that not accurate Kiall20:07
*** rsampaio has joined #openstack20:07
Kiallwell - I borrowed the ubuntu packages debian/ folders as a base, but the similarity ends there ;)20:07
SpamapSKiall: if keystone is actually totally unusable in 11.10, such a thing might still be considered.20:07
KiallSpamapS: put it this way.. sometime before the "diablo" release, a file was moved from keystone -> nova (or the other way around).20:08
viddSpamapS, keystone and horizon both are toast in repo-proper20:08
SpamapSKiall: unfortunately the weekly meeting was about 4 hours ago. But I would suggest bringing this up at next week's meeting. https://wiki.ubuntu.com/ServerTeam/Meeting20:08
KiallThat file doesnt exist in the ubuntu packages ;)20:08
viddand passlib is completely missuing20:08
Kiallvidd: passlib isnt in ubuntu.. hence it was backported by OpenStack in their PPA20:09
SpamapSSounds like some bugs need to be filed.20:09
*** negronjl_mobile has joined #openstack20:09
KiallSpamapS: there are some in there already I believe20:11
*** po has joined #openstack20:12
KiallAnyway - its not specific bugs per-se, at least with keystone, an update to a newer version is needed. There have been *lots* of fixes to nova and keystone since the release...20:12
Kialland .. the openstack-dashboard package could never have worked either ;)20:13
KiallAnyway - I'm happy to keep my PPA up to date, since I would prefer to keep on top of bugfixes from OpenStack faster then ubuntu is likely to be able to keep u20:14
kbringardanyone know what flag to use in Diablo if I don't want projects to be able to talk to each other on internal addresses in FlatDHCP mode?20:14
Kialllikely to keep up*20:14
kbringardI know that in VLAN mode it used to be --allow_project_net_traffic=false20:15
kbringardhas that changed?20:15
*** ssreedharan has quit IRC20:15
Kiallno, thats still the option, and it defaults to true20:16
viddkbringard, projects can talk to each other via private ip? isnt that a feature?20:16
n81hello channel! Does OS support EBS-backed instances?20:17
kbringardwait, sorry, I misspoke20:17
kbringard--allow_project_net_traffic=false will keep VMs in the *same* project from talking to each other, unless explicitly allowed by a rule20:18
kbringardby default all VMs in the same project can talk to each other on their private IP20:18
*** haji has quit IRC20:18
kbringardwhat I'm seeing is20:18
*** arBmind has joined #openstack20:18
kbringardI'm using FlatDHCP, and VMs in different projects can talk to each other on their private IPs20:18
viddkbringard, from what i understand, flt networking only "officially" supports one private network20:19
kbringardvidd: right, it's all one network, but it's supposed to use ebtables/nwfilter to segregate project traffic20:20
KiallThat's what I thought aswell..20:20
kbringardlike how ec2 works20:20
kbringardalthough, ec2 uses Xen and likelly does it at the vswitch, but the functionality should be the same20:20
kbringardI thought that --allow_same_net_traffic=false was supposed to resolve that20:20
kbringardbut I don't know20:21
Kiallkbringard: thats what we're saying, it only supports 1 network officially, which means only 1 project can get a network..20:21
KiallI could be wrong though, I don't use the flat managers...20:21
kbringardhmmmmm, I could have sworn it supported multiple projects20:21
kbringardyea, I don't usually either20:21
KiallI haven't looked at it since I first looked at OpenStack, but thats what I remember.20:22
kbringardyea, weird20:22
kbringardI'll figure it out, no worries20:22
kbringardthanks guys20:22
viddkbringard, "officially" one project per network20:22
Kiallvidd: you have (or had) the master branch of dashboard running a while ago right?20:23
viddyes20:23
KiallDid its security group stuff support using either a cidr, or source group?20:24
viddthe cidr was acting strangely...it did not accept 0.0.0.0/0 for example, so i did all that from euca20:24
Kiallheh weird, 0.0.0.0/0 works for me.. but there is no option for using a source group instead.. was wondering if I could cherry-pick support for that back ;)20:25
Spirilisah yunno I think my big hangup was dodai mucking everything up, adding multiple hosts by concatenating their hostnames into one long jumble in /etc/nova/nova.conf20:26
Spirilisdeleting all that junk and starting from scratch now20:26
viddKiall, what you do is you set a "default" sec group, and you make "custom" sec groups20:26
KiallI'm aware of that ;)20:26
KiallI'm talking about a dashboard version of this:20:27
Kiallnova secgroup-add-group-rule --ip_proto tcp --from_port 1234 --to_port 1234 web mysql20:27
Kiallso, web servers can access mysql servers on tcp port 123420:27
viddIIRC nova secgroup = security group20:28
*** dolphm has quit IRC20:28
*** jakedahn has quit IRC20:29
KiallYou're not understanding ;)20:29
Kiallnova secgroup-add-rule --ip_proto tcp --from_port 1234 --to_port 1234 web 0.0.0.0/020:29
Kiall0.0.0.0/0 can access web servers...20:29
Kiallnova secgroup-add-group-rule --ip_proto tcp --from_port 1234 --to_port 1234 mysql web20:29
viddif you want to add that rull to every security group, i believe you have to either add it to the default to be inherited by the others or add it to each security group20:29
KiallNo!20:29
KiallYou can add rules saying that servers in the "web" security group can access servers in the "mysql" security group20:30
Kiallwithout using a CIDR20:30
Kiallno inheritance20:30
Kiallnot*20:30
viddah...i understand now....no...i did not see that20:30
viddbut i was not looking for it either20:30
*** lorin1 has joined #openstack20:31
KiallegL http://paste.openstack.org/show/3359/20:31
Kialleg:*20:31
viddi did not create custom recurity rules in dashboard20:31
Kiallfair enough then!20:31
*** dolphm has joined #openstack20:32
*** jakedahn has joined #openstack20:34
*** imsplitbit has joined #openstack20:36
kbringardah, you guys are right, it was working as expected20:36
kbringardthe person testing it had set port 22 to allow from 0/020:36
kbringardso of course it was going to work :-D20:36
kbringardthe nwfilter stuff just does L2 protection to make sure you're not arping around the rules, I guess20:37
*** dendro-afk is now known as dendrobates20:39
*** MarkAtwood has quit IRC20:41
*** MarkAtwood has joined #openstack20:43
*** anotherjesse has quit IRC20:48
*** dolphm has quit IRC20:48
*** sandywalsh_ has quit IRC20:49
*** anotherjesse has joined #openstack20:50
*** hingo has quit IRC20:50
*** mnour has joined #openstack20:51
*** GheRivero_ has joined #openstack20:51
*** corrigac has joined #openstack20:52
*** jog0 has quit IRC20:52
*** GheRivero_ is now known as GheAway20:52
*** jeremy_ has joined #openstack20:52
*** jeremy_ has quit IRC20:52
*** jeremy_ has joined #openstack20:52
*** GheRivero has quit IRC20:52
*** jeremy has quit IRC20:52
*** jeremy_ is now known as jeremy20:53
*** ccorrigan has quit IRC20:55
*** robertn has joined #openstack20:55
*** jj0hns0n has joined #openstack20:57
*** johnpur has joined #openstack20:58
*** dprince has quit IRC20:59
*** joesavak has joined #openstack21:01
*** jj0hns0n has quit IRC21:01
*** Razique has joined #openstack21:04
*** dolphm has joined #openstack21:05
*** jsavak has quit IRC21:05
*** jj0hns0n has joined #openstack21:06
*** dgags has quit IRC21:07
*** anotherjesse has quit IRC21:08
*** anotherjesse has joined #openstack21:08
*** jakedahn has quit IRC21:08
*** nitram_macair has quit IRC21:09
*** redconnection has quit IRC21:10
*** nitram_macair has joined #openstack21:12
*** mrjazzcat has joined #openstack21:13
*** dendrobates is now known as dendro-afk21:13
*** mrjazzcat has left #openstack21:14
*** Ryan_Lane has joined #openstack21:14
*** cereal_bars has quit IRC21:14
*** dendro-afk is now known as dendrobates21:15
*** bengrue has joined #openstack21:22
*** adjohn has quit IRC21:23
*** haji has joined #openstack21:25
swillin keystone, what is the significance of /v1.0 and /v2.0?21:25
swillin the url (if that was not obvious).21:28
viddswill, when you access a service...IE talking to nova the service expects to be spoken to on a specific http url21:29
swillvidd: so i am working with swift right now.  does swift to expect to be spoken to on /v2.021:30
swillvidd:21:30
*** jj0hns0n has quit IRC21:30
viddNOVA_URL=http://$NOVA_HOST_IP:8774/v1.1/ is where keyston needs to talk to nova21:31
swillor did i misunderstand your asnwer21:31
viddyes...that is exactly what i mean21:31
viddacually IIRC swift needs to be spoke to as http://$SWIFT_HOST_IP/v2.0/%TENANT_ID%21:32
viddacually IIRC swift needs to be spoke to as http://$SWIFT_HOST_IP:SWIFT_PORT/v2.0/%TENANT_ID%21:32
*** redconnection has joined #openstack21:33
swillvidd: is that valid for the swiftauth middleware as well?21:33
swillhttps://github.com/openstack/keystone/blob/master/keystone/middleware/swift_auth.py21:33
notmynamevidd: is that supposed to be a storage url?21:33
viddnotmyname, what url?21:34
viddwhich*21:34
notmynamethe template you just pasted for swill21:34
viddnotmyname, thats what you send keystone-manage21:35
viddfor the endpoint21:35
* vidd does not use swift21:35
notmynamethen I think the "v2.0" part is wrong. it should be "v1"21:35
*** clopez has quit IRC21:36
*** Ruetobas has quit IRC21:36
swillthe v1 is what i was using for the swift template21:36
* notmyname uses swift but not keystone21:36
notmynameswill: that sounds right21:36
swillbut i was using v2.0 for the identity (keystone) template21:36
notmynameyes, that sounds right too21:36
swillbut i was not adding the tenant id to it21:36
notmynameI have no idea about that :-)21:37
viddswill, the swift endpoint needs the %TENANT%21:37
swilland i was getting 404s when it was looking for /v2.0/token/999888777yadayad21:37
swillvidd: ok, i will do that now and see if it helps.21:37
*** lorin1 has quit IRC21:37
*** troytoman-away is now known as troytoman21:38
swillvidd: it is worth noting that the sampledata.py file in test does not have the tenant id in the endpoint template setup.21:38
notmynamethe "/v2.0/token/" request should be going to keystone. keystone then should return an endpoint for swift that looks like "http[s]://<storgagedomain>/v1/<something>"21:39
swilli am not using the sample data one because i wrote my own, but i was using it as a reference21:39
viddswill, endpointTemplates add RegionOne swift https://192.168.15.199:8080/v1/AUTH_%tenant_id%21:39
swilli meant the identity template21:39
*** jwalcik has quit IRC21:39
swillfor keystone, not for swift21:39
viddswill, the sample data work with keystone/swift?21:40
swillvidd: i never got it to work.  i wrote my own in the process of troubleshooting.  i will try your tentant id idea and see if that resolves my problem.21:40
vidddang it....why is there a static IP in my template?!?21:41
swillhaha21:41
viddno wonder my stuff is blowing up21:41
devcamcarmtaylor: i have email notifications for "new changes" set for nova/glance/quantum/swift but i don't receive them21:41
devcamcarmtaylor: also, horizon isn't in the list yet :)21:41
viddthat server isnt there anymore =]21:41
kbringardanyone here use crowbar at all?21:41
mtaylordevcamcar: are they set for the projects "openstack/nova" and "openstack/glance" etc?21:42
*** Ruetobas has joined #openstack21:42
devcamcarmtaylor: yes21:42
mtaylorok.21:42
mtayloryou have an email set in https://review.openstack.org/#settings,contact ?21:42
viddswill, notice that the URL ends with /v1/AUTH_%tenant_id%21:42
devcamcarmtaylor: yes, i receive notifications on comments and other stuff, but not on new merge proposals21:42
mtaylorWEIRD. ok. because I get this shit spammed out of me with those things. shall look in to it21:43
swillvidd: yes, i have that for my swift template.  what do you have for your identity template21:43
swillvidd:  do you have this: http://$SWIFT_HOST_IP:SWIFT_PORT/v2.0/%25TENANT_ID%2521:43
swillwithout the 25s21:43
swill:)21:44
viddhttp://192.168.15.199:5000/v2.0/21:44
swillhmm, thats what i have21:44
swillwhere did the url i just pasted above come from?  with the tenant_id in it?21:44
viddI got it from the keystone documentation21:45
swillvidd: i had a working version with tokenauth, but i am trying to get swiftauth middleware to work as per this bug: https://bugs.launchpad.net/keystone/+bug/89041521:45
swillvidd: which version of the documentation?  haha, there are many.21:46
*** negronjl_mobile has quit IRC21:47
*** negronjl_mobile has joined #openstack21:47
swillvidd: i just realized i did not have the trailing slash on my identity template like you do, i will try that.21:47
notmynameswill: tokenauth has that bug you linked (since it has no authorize function). swiftauth is what you want21:49
swillnotmyname: exactly.  i had a working version of tokenauth, so instead i am trying to get swiftauth to work.21:50
notmyname[filter:keystone]21:51
notmynameuse = egg:keystone#swiftauth21:51
notmynamekeystone_admin_token = 99988877766621:51
notmynamekeystone_url = http://127.0.0.1:3535721:51
swillhang on.  you are using the admin port in there?21:51
notmynameswill: ^ that's from my swift proxy config. everything I have for keystone is default (including the sampledata.py)21:52
swillnotmyname: i will try with the admin port, i had the service port in there.21:52
swill500021:53
*** rsampaio has quit IRC21:53
*** Ryan_Lane has quit IRC21:53
swillnotmyname: you are also not putting in a /v#.0 in the keystone_url either?21:53
*** dirkx_ has joined #openstack21:53
*** rsampaio has joined #openstack21:54
notmynameswill: that's what I have and it worked the last time I used keystone (several weeks ago)21:54
*** arBmind has quit IRC21:54
swillok perfect, i will try now.  thank you.  :)21:54
notmynamenp21:54
notmynamegotta run. I'll be back later21:54
*** nitram_macair has quit IRC21:57
*** jog0 has joined #openstack21:58
*** rsampaio has quit IRC22:00
*** miclorb_ has joined #openstack22:01
*** GheAway is now known as GheRivero22:01
uvirtbotNew bug: #890881 in keystone "auth_token.py middleware calls Keystone twice" [Undecided,New] https://launchpad.net/bugs/89088122:01
*** anotherjesse has quit IRC22:03
*** anotherjesse has joined #openstack22:04
*** joesavak has quit IRC22:06
*** stuntmachine has quit IRC22:06
swillnotmyname: you rock!!!  that worked perfectly.  thank you...22:06
*** miclorb_ has quit IRC22:07
*** rsampaio has joined #openstack22:08
*** llang629 has joined #openstack22:09
*** anotherjesse has quit IRC22:10
*** mrmartin has quit IRC22:11
*** llang629 has left #openstack22:12
*** jj0hns0n has joined #openstack22:12
*** dirkx_ has quit IRC22:12
*** rsampaio has quit IRC22:15
*** rsampaio has joined #openstack22:19
*** lts has quit IRC22:19
*** thingee has joined #openstack22:21
*** dendrobates is now known as dendro-afk22:23
*** dendro-afk is now known as dendrobates22:23
*** BasTichelaar has quit IRC22:25
uvirtbotNew bug: #890888 in swift "ChunkReadTimeout exception in file_iter in swift proxy server not handled" [Undecided,New] https://launchpad.net/bugs/89088822:25
*** lionel has quit IRC22:27
*** lionel has joined #openstack22:27
*** sticky has joined #openstack22:28
*** msivanes1 has joined #openstack22:31
*** rnirmal has quit IRC22:36
*** msivanes1 has quit IRC22:37
*** derrick has quit IRC22:39
*** martines has joined #openstack22:39
*** dendrobates is now known as dendro-afk22:39
*** msivanes has joined #openstack22:40
*** msivanes has left #openstack22:40
*** dendro-afk is now known as dendrobates22:42
*** anotherjesse has joined #openstack22:45
*** nRy has joined #openstack22:45
*** lborda has quit IRC22:46
*** rsampaio has quit IRC22:47
*** TheOsprey has quit IRC22:48
*** jog0 has left #openstack22:51
*** cdub has joined #openstack22:51
*** jog0 has joined #openstack22:52
*** GheRivero has quit IRC22:52
*** clopez has joined #openstack22:53
*** cp16net has quit IRC22:53
*** dwcramer has quit IRC22:54
*** Razique has quit IRC22:55
*** haji has quit IRC22:56
*** derrick has joined #openstack22:56
*** nerens has quit IRC22:56
*** rnorwood1 has quit IRC22:59
*** rsampaio has joined #openstack23:01
*** mszilagyi has joined #openstack23:02
*** aclark_ has joined #openstack23:03
*** AlanClark has quit IRC23:03
*** carlp has quit IRC23:03
*** andrewbogott has quit IRC23:04
*** aclark_ is now known as AlanClark23:07
*** nitram_macair has joined #openstack23:08
*** nitram_macair has left #openstack23:08
*** rsampaio has quit IRC23:08
*** troytoman is now known as troytoman-away23:11
*** rnorwood has joined #openstack23:11
*** negronjl_mobile has quit IRC23:12
*** lzyeval has joined #openstack23:12
*** negronjl_mobile has joined #openstack23:13
*** freeflying has quit IRC23:14
*** rsampaio has joined #openstack23:17
*** mszilagyi has quit IRC23:17
*** n81 has quit IRC23:17
*** robbiew has quit IRC23:18
*** imsplitbit has quit IRC23:18
*** dendrobates is now known as dendro-afk23:20
*** swill has quit IRC23:20
uvirtbotNew bug: #890906 in nova "os-virtual-interfaces extension should take a uuid instead of an instance id" [Undecided,New] https://launchpad.net/bugs/89090623:21
*** adjohn has joined #openstack23:22
*** dendro-afk is now known as dendrobates23:23
*** code_franco has quit IRC23:27
*** aliguori has quit IRC23:28
uvirtbotNew bug: #890908 in horizon "Use metadata rather than description for servers" [Undecided,New] https://launchpad.net/bugs/89090823:30
*** negronjl_mobile has quit IRC23:35
*** kbringard has left #openstack23:41
*** ldlework has quit IRC23:43
*** cp16net has joined #openstack23:45
*** carlp has joined #openstack23:45
*** nati2 has joined #openstack23:46
*** ejat has quit IRC23:50
*** cp16net has quit IRC23:53
*** jakedahn has joined #openstack23:56
*** lzyeval has quit IRC23:59
*** rnorwood has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!