bwong | Hello | 00:00 |
---|---|---|
*** cdub has quit IRC | 00:00 | |
*** lzyeval has quit IRC | 00:01 | |
*** adjohn has joined #openstack | 00:03 | |
swill | Where is the log describing the 500 error if i get this: swift -A http://127.0.0.1:5000/v1.0 -U wstevens -K testing stat -v | 00:05 |
swill | When I run this: swift -A http://127.0.0.1:5000/v1.0 -U wstevens -K testing stat -v | 00:05 |
swill | woops | 00:05 |
swill | the error is this: Account HEAD failed: http://127.0.0.1:8080/v1/AUTH_2 500 Internal Server Error | 00:06 |
swill | Anyone know where I would find that log? | 00:06 |
swill | Cause I cant tell if it was swift or keystone that had the error. | 00:06 |
notmyname | either the proxy server log or the account server log (Account HEAD failed sounds like a swift error) | 00:07 |
*** lzyeval has joined #openstack | 00:08 | |
*** redconnection has quit IRC | 00:09 | |
swill | hmmm, maybe i dont have enough logging enabled. | 00:10 |
*** dendrobates is now known as dendro-afk | 00:12 | |
*** redconnection has joined #openstack | 00:12 | |
*** cdub has joined #openstack | 00:16 | |
*** gutseb has joined #openstack | 00:22 | |
uvirtbot | New bug: #890486 in nova "Cannot create image with kernel_id and ramdisk_id in S3ImageService" [Low,In progress] https://launchpad.net/bugs/890486 | 00:26 |
webx | swill: have you tried with curl to see the actual response? | 00:29 |
swill | yes, that is working | 00:29 |
webx | swill: can you paste the curl command issued? | 00:29 |
swill | webx: here it is: curl -d '{"auth": {"passwordCredentials": {"username": "admin", "password": "testing"}}}' -H "Content-type: application/json" http://127.0.0.1:5000/v2.0/tokens | 00:30 |
swill | with a result of: http://pastebin.com/Behyt0ty | 00:31 |
uvirtbot | New bug: #890489 in nova "multistring flags do not parse properly" [Low,Triaged] https://launchpad.net/bugs/890489 | 00:31 |
webx | swill: those are different credentials than your swift command line. does swift CLI work with admin creds? | 00:32 |
*** reed has quit IRC | 00:33 | |
swill | webx: the credentials are not in that output | 00:34 |
swill | webx: they are in the database init file. one sec, i can link that... | 00:34 |
webx | swill: your initial question was about 500 error with this: s3cmd -c ./conf_s3cmd ls s3://myfiles | 00:34 |
webx | ignore that.. bad paset | 00:34 |
webx | swift -A http://127.0.0.1:5000/v1.0 -U wstevens -K testing stat -v | 00:34 |
swill | webx: the token in the proxy-server.conf file is the same. | 00:34 |
webx | but the paste you gave me was for l: admin p: testing | 00:35 |
swill | webx: oh sorry, i have both users. one is admin and the other is wstevens. | 00:35 |
webx | I understand.. do you get the 500 error with admin, or only wstevens? | 00:35 |
swill | webx: both | 00:35 |
webx | ah | 00:35 |
swill | i am trying to find the log where it logs right now | 00:35 |
*** rsampaio has joined #openstack | 00:35 | |
swill | i think it is logged by syslog, but it is not in proxy.error | 00:36 |
swill | or proxy.og | 00:36 |
webx | you may need to enable debug | 00:36 |
webx | if you haven't already | 00:36 |
swill | proxy.log * | 00:36 |
swill | i did all of the logging described here: http://swift.openstack.org/development_saio.html | 00:37 |
*** bcwaldon1 has quit IRC | 00:38 | |
webx | you can add this to proxy-server.conf, I believe | 00:40 |
webx | og_level =DEBUG | 00:40 |
webx | *log_level = DEBUG | 00:40 |
swill | trying it | 00:41 |
swill | restarting swift* | 00:41 |
webx | without the * on log_level, right? :) | 00:42 |
swill | haha, i understood the correct syntax. :) | 00:42 |
*** adjohn has quit IRC | 00:44 | |
*** jakedahn has quit IRC | 00:44 | |
*** andrewbogott has quit IRC | 00:45 | |
*** dolphm_ has quit IRC | 00:45 | |
swill | webx: all i get is this in the proxy.log | 00:49 |
swill | Nov 14 19:47:07 ubuntu proxy-server Initialising keystone middleware | 00:49 |
swill | Nov 14 19:47:07 ubuntu proxy-server Got token: 999888777666 | 00:49 |
*** juddm has quit IRC | 00:49 | |
*** vernhart has quit IRC | 00:50 | |
swill | nothing in syslog at all | 00:51 |
swill | well for this event anyway. hmmmm | 00:51 |
webx | sorry.. I have no experience with keystone | 00:54 |
*** reed has joined #openstack | 00:56 | |
swill | no worries. i will keep on truckin. :) | 00:57 |
ohnoimdead | anyone on that is familiar with devstack? if so is there a workaround for: https://gist.github.com/1365750 | 00:57 |
*** redconnection has quit IRC | 00:58 | |
*** dendro-afk is now known as dendrobates | 00:59 | |
swill | does anyone know if there is logging for auth in swift beyond what is mentioned here? http://swift.openstack.org/development_saio.html | 00:59 |
swill | this gives me the proxy.error and proxy.log files which should be relevant, but i am getting a 500 error and I can not find it logged anywhere. | 01:00 |
uvirtbot | New bug: #890498 in quantum "ovs plugin pip-requires should have mysql-python" [Low,In progress] https://launchpad.net/bugs/890498 | 01:01 |
*** reed has quit IRC | 01:04 | |
*** reed has joined #openstack | 01:05 | |
*** jakedahn has joined #openstack | 01:06 | |
*** bwong has quit IRC | 01:08 | |
*** praefect has quit IRC | 01:08 | |
*** jakedahn has quit IRC | 01:08 | |
*** mrbuffneff has quit IRC | 01:10 | |
*** dragondm has quit IRC | 01:11 | |
*** livemoon has joined #openstack | 01:11 | |
*** Binbin has joined #openstack | 01:11 | |
*** cereal_bars has joined #openstack | 01:15 | |
*** dendrobates is now known as dendro-afk | 01:17 | |
livemoon | morning | 01:18 |
*** obino has quit IRC | 01:20 | |
*** lzyeval has quit IRC | 01:20 | |
*** negronjl has quit IRC | 01:26 | |
*** cereal_bars has quit IRC | 01:28 | |
*** krow has quit IRC | 01:30 | |
*** gregp76 has quit IRC | 01:32 | |
*** rnorwood has joined #openstack | 01:34 | |
*** lzyeval has joined #openstack | 01:35 | |
*** dendro-afk is now known as dendrobates | 01:36 | |
*** hadrian_ has joined #openstack | 01:37 | |
*** f-yang has quit IRC | 01:38 | |
*** hadrian has quit IRC | 01:39 | |
*** hadrian_ is now known as hadrian | 01:39 | |
*** ohnoimdead has quit IRC | 01:42 | |
*** po has quit IRC | 01:42 | |
*** michael_ has quit IRC | 01:43 | |
*** rsampaio has quit IRC | 01:44 | |
*** oubiwann has quit IRC | 01:45 | |
*** rsampaio has joined #openstack | 01:45 | |
*** gyee has quit IRC | 01:47 | |
*** nphase has quit IRC | 01:47 | |
*** negronjl has joined #openstack | 01:48 | |
*** mgius has quit IRC | 01:51 | |
*** vernhart has joined #openstack | 01:59 | |
*** nati2 has quit IRC | 02:04 | |
*** nati2 has joined #openstack | 02:04 | |
*** reed has quit IRC | 02:07 | |
livemoon | ping vidd | 02:09 |
*** Hakon|mbp has quit IRC | 02:20 | |
*** swill has quit IRC | 02:24 | |
*** swill has joined #openstack | 02:24 | |
*** jog0 has quit IRC | 02:25 | |
*** mdomsch has joined #openstack | 02:29 | |
*** tryggvil__ has quit IRC | 02:32 | |
*** vernhart has quit IRC | 02:32 | |
*** vernhart has joined #openstack | 02:38 | |
*** cdub has quit IRC | 02:38 | |
*** tryggvil has joined #openstack | 02:39 | |
*** dendrobates is now known as dendro-afk | 02:40 | |
*** hadrian has quit IRC | 02:42 | |
WormMan | well, I fixed 1/3 of my openstack instances restarting on physical host reboot problem | 02:42 |
WormMan | now dnsmasq is starting properly, still not reattaching floating IP automatically(and the host still needs 'reboot') | 02:43 |
*** hadrian has joined #openstack | 02:48 | |
*** tryggvil has quit IRC | 02:49 | |
*** rackerhacker has quit IRC | 02:51 | |
*** rackerhacker has joined #openstack | 02:52 | |
*** mdomsch has quit IRC | 02:53 | |
*** tryggvil_ has joined #openstack | 02:53 | |
*** gutseb has quit IRC | 02:53 | |
*** etarasov has joined #openstack | 02:57 | |
*** gohko_ has quit IRC | 02:57 | |
*** cdub has joined #openstack | 02:58 | |
*** joeyang has quit IRC | 02:59 | |
*** jdurgin has quit IRC | 03:02 | |
*** osier has joined #openstack | 03:04 | |
*** exitdescription has quit IRC | 03:05 | |
*** vernhart has quit IRC | 03:07 | |
*** tokuzfunpi has joined #openstack | 03:07 | |
*** hadrian_ has joined #openstack | 03:12 | |
*** dendro-afk is now known as dendrobates | 03:13 | |
*** rackerhacker has quit IRC | 03:15 | |
*** vernhart has joined #openstack | 03:15 | |
*** hadrian has quit IRC | 03:16 | |
*** hadrian_ is now known as hadrian | 03:16 | |
*** rackerhacker has joined #openstack | 03:20 | |
*** dpippenger has quit IRC | 03:26 | |
*** adjohn has joined #openstack | 03:28 | |
*** vmfan has joined #openstack | 03:28 | |
*** cdub has quit IRC | 03:28 | |
*** scottjg has joined #openstack | 03:39 | |
*** hadrian has quit IRC | 03:41 | |
*** jobicoppola has joined #openstack | 03:41 | |
*** hadrian has joined #openstack | 03:41 | |
*** reed has joined #openstack | 03:42 | |
*** Fu4ny has joined #openstack | 03:43 | |
*** koolhead17 has joined #openstack | 03:44 | |
*** 18WAAW0HO has quit IRC | 03:50 | |
*** rackerhacker has joined #openstack | 03:57 | |
*** reed has quit IRC | 03:58 | |
*** supriya has joined #openstack | 04:01 | |
*** Ryan_Lane has quit IRC | 04:04 | |
*** lzyeval has quit IRC | 04:04 | |
*** lzyeval has joined #openstack | 04:05 | |
*** miclorb_ has quit IRC | 04:08 | |
*** miclorb_ has joined #openstack | 04:08 | |
*** cdub has joined #openstack | 04:09 | |
*** oubiwann has joined #openstack | 04:09 | |
*** hadrian has quit IRC | 04:10 | |
*** dendrobates is now known as dendro-afk | 04:10 | |
*** supriya has quit IRC | 04:11 | |
*** adjohn has quit IRC | 04:13 | |
*** supriya has joined #openstack | 04:13 | |
*** vernhart has quit IRC | 04:15 | |
*** KAM has quit IRC | 04:20 | |
*** vernhart has joined #openstack | 04:20 | |
*** KAM has joined #openstack | 04:21 | |
*** miclorb_ has quit IRC | 04:21 | |
*** supriya_ has joined #openstack | 04:23 | |
*** supriya has quit IRC | 04:23 | |
*** nati2_ has joined #openstack | 04:27 | |
*** supriya_ has quit IRC | 04:28 | |
*** nati2 has quit IRC | 04:29 | |
*** supriya_ has joined #openstack | 04:29 | |
*** supriya_ has quit IRC | 04:32 | |
*** koolhead17 has quit IRC | 04:33 | |
*** HugoKuo_ has quit IRC | 04:34 | |
*** nati2 has joined #openstack | 04:38 | |
*** nati2_ has quit IRC | 04:38 | |
*** vernhart has quit IRC | 04:39 | |
*** pradeep1 has joined #openstack | 04:42 | |
*** ldlework has quit IRC | 04:43 | |
*** hankj has joined #openstack | 04:48 | |
*** sahuram has joined #openstack | 04:49 | |
*** hankj has quit IRC | 04:50 | |
*** vmfan has quit IRC | 04:55 | |
uvirtbot | New bug: #890538 in nova "Verifying whether a melange subnet exists could be made more efficient" [Undecided,Confirmed] https://launchpad.net/bugs/890538 | 04:55 |
*** tokuzfunpi has quit IRC | 04:59 | |
*** tokuzfunpi has joined #openstack | 04:59 | |
*** rnorwood has quit IRC | 05:00 | |
*** tokuzfunpi has quit IRC | 05:00 | |
*** jobicoppola has quit IRC | 05:06 | |
*** adjohn has joined #openstack | 05:12 | |
*** brian_sc has quit IRC | 05:13 | |
*** Fu4ny has quit IRC | 05:15 | |
*** cdub has quit IRC | 05:24 | |
*** sahuram_ has joined #openstack | 05:24 | |
*** sahuram has quit IRC | 05:26 | |
*** koolhead17 has joined #openstack | 05:30 | |
*** vernhart has joined #openstack | 05:30 | |
*** vernhart has joined #openstack | 05:30 | |
*** polvi has quit IRC | 05:33 | |
*** obino has joined #openstack | 05:35 | |
*** mjfork has quit IRC | 05:39 | |
*** sahuram has joined #openstack | 05:44 | |
*** sahuram_ has quit IRC | 05:46 | |
*** lzyeval_ has joined #openstack | 05:52 | |
*** lzyeval has quit IRC | 05:52 | |
*** lzyeval_ is now known as lzyeval | 05:52 | |
*** cdub has joined #openstack | 05:57 | |
*** nijaba has quit IRC | 05:57 | |
winston-d | livemoon : hi | 06:01 |
*** stevegjacobs has quit IRC | 06:02 | |
*** pradeep1 has quit IRC | 06:03 | |
*** nijaba has joined #openstack | 06:08 | |
*** nijaba has joined #openstack | 06:08 | |
*** rwmjones has quit IRC | 06:11 | |
*** negronjl has quit IRC | 06:13 | |
*** jj0hns0n has quit IRC | 06:14 | |
*** nijaba has quit IRC | 06:16 | |
*** nijaba has joined #openstack | 06:16 | |
*** nijaba has joined #openstack | 06:16 | |
*** nerens has joined #openstack | 06:17 | |
*** pradeep has joined #openstack | 06:18 | |
*** stevegjacobs has joined #openstack | 06:20 | |
stevegjacobs | How do you move a running instance in to a different security group? I don't see anything simple in dashboard or nova commands to do this | 06:22 |
*** soosfarm has quit IRC | 06:24 | |
*** soosfarm has joined #openstack | 06:25 | |
*** dachary has joined #openstack | 06:26 | |
*** Ryan_Lane has joined #openstack | 06:32 | |
*** rsampaio has quit IRC | 06:32 | |
livemoon | hi,winston-d | 06:33 |
*** jj0hns0n has joined #openstack | 06:37 | |
*** sahuram has quit IRC | 06:44 | |
*** jj0hns0n has quit IRC | 06:46 | |
*** arBmind has joined #openstack | 06:46 | |
*** vmfan has joined #openstack | 06:47 | |
*** Fu4ny has joined #openstack | 06:50 | |
*** brian_sc has joined #openstack | 06:51 | |
*** CongNT_ has joined #openstack | 06:51 | |
*** brian_sc1 has joined #openstack | 06:53 | |
*** brian_sc has quit IRC | 06:53 | |
*** brian_sc1 has quit IRC | 06:53 | |
*** rocambol1 has joined #openstack | 06:53 | |
*** brian_sc has joined #openstack | 06:53 | |
*** brian_sc has joined #openstack | 06:54 | |
*** brian_sc1 has joined #openstack | 06:54 | |
*** nati2_ has joined #openstack | 06:54 | |
*** Fu4ny has quit IRC | 06:54 | |
*** brian_sc1 has quit IRC | 06:54 | |
*** brian_sc2 has joined #openstack | 06:54 | |
*** nati2 has quit IRC | 06:55 | |
*** dolphm has joined #openstack | 06:55 | |
*** brian_sc1 has joined #openstack | 06:56 | |
*** brian_sc has quit IRC | 06:58 | |
*** brian_sc1 has quit IRC | 06:58 | |
*** brian_sc has joined #openstack | 06:58 | |
*** brian_sc has joined #openstack | 06:59 | |
*** sahuram has joined #openstack | 06:59 | |
*** brian_sc has quit IRC | 07:01 | |
*** brian_sc has joined #openstack | 07:03 | |
*** vmfan has quit IRC | 07:03 | |
*** brian_sc has quit IRC | 07:04 | |
*** hugokuo has joined #openstack | 07:04 | |
*** brian_sc has joined #openstack | 07:04 | |
*** vernhart has quit IRC | 07:04 | |
*** vernhart has joined #openstack | 07:07 | |
*** CongNT_ has quit IRC | 07:07 | |
*** brian_sc1 has joined #openstack | 07:07 | |
*** cdub has quit IRC | 07:07 | |
*** brian_sc1 has quit IRC | 07:08 | |
*** brian_sc1 has joined #openstack | 07:08 | |
*** brian_sc1 has quit IRC | 07:08 | |
*** brian_sc1 has joined #openstack | 07:08 | |
*** brian_sc has quit IRC | 07:09 | |
*** brian_sc has joined #openstack | 07:10 | |
*** brian_sc has quit IRC | 07:10 | |
*** brian_sc1 has joined #openstack | 07:10 | |
*** brian_sc has joined #openstack | 07:12 | |
*** nati2_ has quit IRC | 07:12 | |
*** brian_sc has joined #openstack | 07:13 | |
*** brian_sc has quit IRC | 07:13 | |
*** brian_sc has joined #openstack | 07:13 | |
*** brian_sc1 has joined #openstack | 07:14 | |
*** brian_sc has quit IRC | 07:14 | |
*** brian_sc has joined #openstack | 07:14 | |
*** brian_sc1 has joined #openstack | 07:15 | |
*** brian_sc has quit IRC | 07:15 | |
*** brian_sc has joined #openstack | 07:15 | |
*** pradeep has quit IRC | 07:16 | |
*** brian_sc has quit IRC | 07:16 | |
*** brian_sc has joined #openstack | 07:16 | |
*** brian_sc has joined #openstack | 07:16 | |
*** brian_sc has quit IRC | 07:16 | |
*** brian_sc has joined #openstack | 07:17 | |
*** dolphm has quit IRC | 07:20 | |
*** brian_sc has joined #openstack | 07:20 | |
*** brian_sc1 has joined #openstack | 07:20 | |
*** brian_sc has quit IRC | 07:20 | |
*** brian_sc has joined #openstack | 07:21 | |
*** sahuram_ has joined #openstack | 07:27 | |
*** sahuram has quit IRC | 07:31 | |
*** pradeep1 has joined #openstack | 07:32 | |
*** mgoldmann has joined #openstack | 07:33 | |
*** tryggvil___ has joined #openstack | 07:35 | |
*** dolphm has joined #openstack | 07:35 | |
*** bengrue has quit IRC | 07:37 | |
*** tryggvil_ has quit IRC | 07:38 | |
*** arBmind has quit IRC | 07:43 | |
*** koolhead17 has quit IRC | 07:44 | |
*** derjohn_mob has joined #openstack | 07:48 | |
*** Fu4ny has joined #openstack | 07:52 | |
*** KAM has quit IRC | 07:56 | |
*** mcclurmc has quit IRC | 08:00 | |
*** mcclurmc has joined #openstack | 08:01 | |
*** dolphm has quit IRC | 08:06 | |
*** kirkland has quit IRC | 08:11 | |
*** reidrac has joined #openstack | 08:11 | |
*** kirkland has joined #openstack | 08:11 | |
*** TheOsprey has joined #openstack | 08:13 | |
*** sahuram__ has joined #openstack | 08:15 | |
*** sahuram_ has quit IRC | 08:19 | |
*** dobber has joined #openstack | 08:19 | |
*** CongNT_ has joined #openstack | 08:19 | |
*** vernhart has quit IRC | 08:21 | |
*** Fu4ny has quit IRC | 08:23 | |
*** vernhart has joined #openstack | 08:27 | |
*** pradeep1 has quit IRC | 08:31 | |
*** adjohn has quit IRC | 08:33 | |
*** foexle has joined #openstack | 08:36 | |
foexle | ahoi | 08:36 |
*** MarkAtwood has quit IRC | 08:38 | |
*** lzyeval has quit IRC | 08:40 | |
*** lzyeval has joined #openstack | 08:42 | |
*** Ryan_Lane has quit IRC | 08:45 | |
*** sahuram has joined #openstack | 08:53 | |
*** sahuram__ has quit IRC | 08:55 | |
livemoon | hi | 09:02 |
*** cdub has joined #openstack | 09:06 | |
*** GeoDud has quit IRC | 09:07 | |
*** GeoDud has joined #openstack | 09:07 | |
*** Tekni has joined #openstack | 09:07 | |
*** elasticdog has quit IRC | 09:07 | |
*** Teknix has quit IRC | 09:08 | |
*** elasticdog has joined #openstack | 09:08 | |
*** BasTichelaar has joined #openstack | 09:09 | |
*** katkee has joined #openstack | 09:10 | |
*** koolhead17 has joined #openstack | 09:12 | |
koolhead17 | hi all | 09:12 |
*** javiF has joined #openstack | 09:15 | |
*** katkee has quit IRC | 09:15 | |
*** javiF has quit IRC | 09:16 | |
*** javiF has joined #openstack | 09:16 | |
*** mies has joined #openstack | 09:19 | |
*** Razique has joined #openstack | 09:26 | |
Razique | Hey guys! | 09:27 |
koolhead17 | hello Razique | 09:27 |
foexle | heyho Razique | 09:27 |
Razique | hey you | 09:28 |
Razique | I did a live upgrade yesterday in production | 09:28 |
Razique | Cactus -> Diablo | 09:28 |
*** Fu4ny has joined #openstack | 09:28 | |
foexle | :D | 09:28 |
koolhead17 | Razique: seems like everything has changed in past 1 days :( | 09:28 |
Razique | everything went great | 09:28 |
Razique | koolhead17: what do you mean ? | 09:28 |
koolhead17 | awesome | 09:28 |
koolhead17 | 14 | 09:28 |
Razique | 14 ? :p | 09:29 |
* koolhead17 was out of internet for 14 days | 09:29 | |
Razique | ahhhh | 09:29 |
Razique | well the main topics here were about HA stuff I'd say :) | 09:29 |
Razique | how to live migrate, how to save instances ; how to restart instances,etc... | 09:30 |
Razique | I've deployed GlusterFS in lab, in order to valdate migration, but remains too handy for me :/ | 09:30 |
koolhead17 | and what is this PPA thing for keystone? | 09:30 |
Razique | koolhead17: I dunno | 09:31 |
*** nacx has joined #openstack | 09:31 | |
*** CongNT_ has quit IRC | 09:32 | |
*** darraghb has joined #openstack | 09:33 | |
livemoon | congrautlation Razique | 09:39 |
livemoon | koolhead17: not see you for a few days | 09:40 |
Razique | thanks :D | 09:40 |
Razique | yah koolhead17 had internet issues | 09:40 |
livemoon | today I use devstack reinstall my all server | 09:40 |
koolhead17 | livemoon: howdy!! | 09:40 |
*** alperkanat has joined #openstack | 09:48 | |
*** alperkanat has joined #openstack | 09:48 | |
*** pixelbeat has joined #openstack | 09:53 | |
alperkanat | is it possible to add specific mimetypes for certain files? (maybe during upload, or just downloading?) i'm asking this for swift of course | 09:54 |
*** BK_man has joined #openstack | 09:54 | |
BK_man | hi all. who's running cloudpipe? I noticed that FORWARD rules in iptables on FLAGS.vpn_ip suddently disappeared. | 09:56 |
*** tunix has joined #openstack | 09:57 | |
tunix | is it possible to add specific mimetypes for certain files? (maybe during upload, or just downloading?) i'm asking this for swift of course | 09:57 |
Razique | alperkanat: tunix waw :D | 09:58 |
*** tunix has quit IRC | 09:58 | |
*** tunix has joined #openstack | 09:58 | |
*** alperkanat has quit IRC | 09:58 | |
tunix | Razique: ? | 09:58 |
Razique | two ppl asking the exact same question ^^ | 09:59 |
Razique | funy | 09:59 |
Razique | I think Swift does yah | 09:59 |
Razique | It rings me a bell | 09:59 |
Razique | let me check | 09:59 |
*** tunix is now known as alperkanat | 09:59 | |
alperkanat | Razique: i'm the same people but had connectivity issues | 09:59 |
alperkanat | i need to know if it's possible to define mimetypes for files? | 09:59 |
chmouel | I confirm, Swift does that | 10:00 |
*** Fu4ny has quit IRC | 10:01 | |
*** Fu4ny has joined #openstack | 10:01 | |
*** clopez has joined #openstack | 10:02 | |
*** katkee has joined #openstack | 10:03 | |
*** uksysadmin has joined #openstack | 10:03 | |
alperkanat | chmouel: how? | 10:04 |
*** dirkx_ has joined #openstack | 10:05 | |
chmouel | reading thru my https://github.com/chmouel/upcs/blob/master/upcs it just a matter to : | 10:05 |
chmouel | set the content-type to whatever needed | 10:05 |
chmouel | don't have the documentation handy but this should be documented there | 10:06 |
chmouel | (or that's a bug) | 10:06 |
uvirtbot | New bug: #890612 in openstack-ci "Nova trunk PPA FTBFS" [High,Confirmed] https://launchpad.net/bugs/890612 | 10:11 |
*** pixelbeat has quit IRC | 10:12 | |
*** dirkx__ has joined #openstack | 10:14 | |
*** dirkx_ has quit IRC | 10:14 | |
alperkanat | chmouel: ok thanks | 10:15 |
*** scottjg has quit IRC | 10:19 | |
*** cdub has quit IRC | 10:22 | |
Razique | chmouel: let's follow your github :) | 10:24 |
*** redconnection has joined #openstack | 10:25 | |
*** miclorb_ has joined #openstack | 10:27 | |
*** livemoon has left #openstack | 10:28 | |
*** Hakon|mbp has joined #openstack | 10:36 | |
*** chomping has quit IRC | 10:36 | |
*** koolhead17 has quit IRC | 10:37 | |
*** cdub has joined #openstack | 10:38 | |
*** koolhead17 has joined #openstack | 10:39 | |
*** jollyfoo has joined #openstack | 10:40 | |
koolhead17 | Razique, got disconnected | 10:41 |
*** dnjaramba has joined #openstack | 10:43 | |
*** popux has joined #openstack | 10:44 | |
*** sahuram has quit IRC | 10:49 | |
*** miclorb_ has quit IRC | 10:49 | |
*** miclorb_ has joined #openstack | 10:50 | |
*** popux has quit IRC | 10:51 | |
*** jollyfoo has quit IRC | 10:58 | |
*** lzyeval has quit IRC | 11:00 | |
foexle | hey guys, i have a problem with enabling the second compute node with network-manager. I set multi_host=True | 11:04 |
foexle | the vserver on the new node will spawn, but the network doesn't work | 11:04 |
foexle | i get no errors in each log | 11:04 |
foexle | network runs correctly but the service doesn't define new iptable rules | 11:05 |
foexle | ok i see i get an error: Dead loop on virtual device vlan100, fix it urgently! | 11:06 |
*** BK_man has quit IRC | 11:08 | |
*** alperkanat has quit IRC | 11:08 | |
Razique | koolhead17: hey | 11:09 |
Razique | foexle: mmm | 11:09 |
Razique | already seen that error | 11:09 |
foexle | https://bugs.launchpad.net/ubuntu/+source/linux/+bug/856417 | 11:09 |
Razique | foexle: is nova-network installed on the second compute-node ? | 11:10 |
foexle | yes | 11:10 |
Razique | ok is the interface set in nova.conf good , | 11:11 |
Razique | ? | 11:11 |
foexle | and starts without errors | 11:11 |
foexle | jap is exactly the same server/configuration as the first node | 11:11 |
Razique | so they use the same physical interface ? | 11:11 |
foexle | yes the server has the same two interfaces with the same configuration | 11:13 |
foexle | all services are in running state | 11:15 |
foexle | but if i start a new insance, the second compute node will spawn this instance but the network service do nothing | 11:15 |
Razique | yah cuz of the dead loop error | 11:16 |
Razique | could u tear down the vlan on the compute node and the brdige | 11:16 |
Razique | restart nova-compute and nova-network ? | 11:16 |
foexle | i try it with reboot the complete server | 11:16 |
*** miclorb_ has quit IRC | 11:16 | |
*** dirkx__ has quit IRC | 11:17 | |
*** zatix has joined #openstack | 11:18 | |
foexle | brdige looks like ok | 11:21 |
*** PiotrSikora has quit IRC | 11:23 | |
foexle | the man page of isatapd says, i get this error because the routing table are incomplete | 11:24 |
*** hugokuo has quit IRC | 11:27 | |
*** PiotrSikora has joined #openstack | 11:28 | |
*** popux has joined #openstack | 11:30 | |
Razique | mmm dead loop ; not so sure :/ | 11:31 |
Razique | but could be wrong ofc | 11:31 |
Razique | foexle: can I see brctl show | 11:32 |
Razique | and cat /proc/net/vlan/config ? | 11:32 |
foexle | hmmm anything is wrong .... the second network service will not be requested | 11:32 |
foexle | from nova-api | 11:33 |
*** jollyfoo has joined #openstack | 11:34 | |
Razique | what do u mean foexle ? | 11:37 |
*** Fu4ny has quit IRC | 11:38 | |
Razique | time to eat :D i'll be back around 2 | 11:39 |
foexle | 2011-11-15 12:37:57,872 DEBUG nova.utils [-] Running cmd (subprocess): sudo ip addr add 169.254.169.254/32 scope link dev lo from (pid=1804) execute /usr/lib/pymodules/python2.6/nova/utils.py:165 | 11:40 |
foexle | 2011-11-15 12:37:57,882 DEBUG nova.utils [-] Result was 2 from (pid=1804) execute /usr/lib/pymodules/python2.6/nova/utils.py:180 | 11:40 |
foexle | think thats the problem | 11:40 |
Razique | mmm not so sure :p | 11:40 |
Razique | try to run it manually | 11:40 |
koolhead17 | foexle, did you add interface info in nova.conf | 11:41 |
Razique | does it work ? | 11:41 |
Razique | it's only a route to manage metadatas | 11:41 |
Razique | shouldn't prevent an instances from being accessible though | 11:41 |
foexle | ok it's not the problem | 11:41 |
foexle | koolhead17: yes | 11:41 |
foexle | koolhead17: it's the same config from node 1 | 11:41 |
Razique | foexle: you use eth1 for vlan right ? | 11:42 |
Razique | on both servers | 11:42 |
foexle | jap | 11:42 |
koolhead17 | i had same issue but got it solved after adding the info in nova.conf | 11:42 |
Razique | do you have a flag --bridge_interface into nova.conf | 11:42 |
foexle | Razique: yes | 11:42 |
koolhead17 | foexle, and you are using ubuntu oneiric | 11:43 |
Razique | foexle: a --vlan_interface also ? :p | 11:43 |
foexle | Razique: yes | 11:44 |
foexle | koolhead17: no lts | 11:44 |
Razique | foexle: ok can I see the result of the two commands ? | 11:44 |
Razique | the dead loop stuff is a issue with either the brdige or the vlan | 11:45 |
foexle | http://pastebin.com/dFisA0Sd | 11:45 |
foexle | nothing is set | 11:46 |
Razique | ok into the networks table | 11:46 |
Razique | select * from networks | 11:46 |
Razique | I'm interested by the "brdige_interface" field | 11:47 |
Razique | maybe a mismatch | 11:47 |
Razique | time to eat :p cya later | 11:47 |
foexle | ok i think i see the problem | 11:48 |
*** livemoon has joined #openstack | 11:49 | |
foexle | in networks table are onle one network defined | 11:50 |
foexle | only | 11:50 |
*** n1md4 has quit IRC | 11:50 | |
*** redconnection has quit IRC | 11:55 | |
*** jollyfoo has quit IRC | 11:56 | |
*** Hakon|mbp has quit IRC | 11:57 | |
*** kimc has quit IRC | 11:57 | |
*** stevegjacobs_ has joined #openstack | 12:01 | |
stevegjacobs_ | hello | 12:02 |
stevegjacobs_ | is there a way to change a running instance from one security group to another? | 12:03 |
*** jollyfoo has joined #openstack | 12:05 | |
*** rods has joined #openstack | 12:05 | |
*** redconnection has joined #openstack | 12:08 | |
*** Hakon|mbp has joined #openstack | 12:10 | |
*** jollyfoo_ has joined #openstack | 12:10 | |
*** jollyfoo has quit IRC | 12:10 | |
foexle | can i set in the network table n hosts ? | 12:11 |
foexle | because a vlan could expand over more as one machine | 12:12 |
*** osier has quit IRC | 12:13 | |
*** jollyfoo has joined #openstack | 12:16 | |
*** jollyfoo_ has quit IRC | 12:16 | |
*** jollyfoo has quit IRC | 12:17 | |
*** jollyfoo has joined #openstack | 12:18 | |
*** vernhart has quit IRC | 12:20 | |
*** jollyfoo has quit IRC | 12:22 | |
*** dirkx_ has joined #openstack | 12:49 | |
*** jollyfoo has joined #openstack | 12:52 | |
*** dendro-afk is now known as dendrobates | 12:54 | |
*** lzyeval has joined #openstack | 12:59 | |
*** deshantm_laptop has joined #openstack | 13:06 | |
*** lorin1 has joined #openstack | 13:07 | |
Razique | stevegjacobs: in live not sure | 13:09 |
Razique | foexle: back | 13:09 |
Razique | have u resolved the issue ? | 13:09 |
foexle | Razique: heyho :) .... no but i think i found my problem | 13:10 |
Razique | enlighten me | 13:10 |
uvirtbot | New bug: #890672 in quantum "ovs_quantum_agent should use sqlalchemy" [Undecided,New] https://launchpad.net/bugs/890672 | 13:10 |
foexle | so we defined a network for a project with "host" => node1 and vpn_public_address => node1 | 13:11 |
foexle | but i dont have a network for the other network service | 13:11 |
foexle | on the other node | 13:11 |
Razique | ah yup I recall that | 13:11 |
foexle | so my question .... i need for each networking service on each compute node a extra network ? | 13:11 |
Razique | nope not really | 13:12 |
foexle | hmmm | 13:12 |
Razique | in fact that field should be blank I'd say | 13:12 |
Razique | also "bridge_interface" | 13:12 |
Razique | but make sure multi-host is enabled for that network | 13:12 |
foexle | hmmm but its set all three | 13:12 |
foexle | attributes | 13:12 |
Razique | and into nova.conf of every node, the flag | 13:12 |
foexle | ahhh | 13:13 |
foexle | ok | 13:13 |
foexle | the flag are enabled | 13:13 |
foexle | but not in the database | 13:13 |
*** sandywalsh_ has joined #openstack | 13:13 | |
foexle | so i should set vpn_public_address and host and bridge_interface to NULL? | 13:13 |
foexle | in the database | 13:14 |
*** dendrobates is now known as dendro-afk | 13:14 | |
*** javiF has quit IRC | 13:16 | |
foexle | hmmm if i set this attributes to NULL the network dont run on every node | 13:19 |
uvirtbot | New bug: #890362 in glance (main) "Should glance user's shell be /bin/false?" [Undecided,New] https://launchpad.net/bugs/890362 | 13:21 |
Razique | foexle: in fact the multi_host <> vpn host | 13:21 |
Razique | for ur setup | 13:22 |
Razique | bridge_interface into database : null | 13:22 |
Razique | multi_host= On | 13:22 |
Razique | and for every node into nova.conf | 13:22 |
foexle | on or True ? | 13:22 |
Razique | --brdige_interface=ethX | 13:22 |
Razique | where ethX will be the same if as vlan_interface | 13:22 |
Razique | and --vlan_interface=ethX | 13:22 |
Razique | let me check | 13:23 |
Razique | 1 | 13:23 |
Razique | :D | 13:23 |
foexle | in the db yes | 13:23 |
foexle | and the config flag=1, too? | 13:23 |
Razique | nope | 13:23 |
Razique | True I think | 13:24 |
*** chomping has joined #openstack | 13:24 | |
foexle | k | 13:24 |
foexle | i have | 13:24 |
Razique | yah that's "True" | 13:24 |
*** hallyn has quit IRC | 13:25 | |
*** hallyn has joined #openstack | 13:26 | |
foexle | but the bridge_interface should be br100 or something like that no? | 13:27 |
Razique | yup | 13:28 |
Razique | br100 | 13:28 |
*** Binbin has quit IRC | 13:29 | |
Razique | here is my network | 13:29 |
Razique | http://paste.openstack.org/show/3339/ | 13:29 |
*** msivanes has joined #openstack | 13:30 | |
*** osier has joined #openstack | 13:30 | |
*** kbringard has joined #openstack | 13:31 | |
*** supriya has joined #openstack | 13:32 | |
foexle | yeah but you see you have set a vpn_pub_address => 192.168.71.138 | 13:34 |
Razique | Everytime I try to spawn a new instance under diablo, I've this error : Instance quota exceeded | 13:34 |
Razique | any hiny ? | 13:34 |
*** PeteDaGuru has joined #openstack | 13:34 | |
*** ldlework has joined #openstack | 13:34 | |
Razique | it's the endpoint of the vpn tunnel; so set it to the public ip of the cloud | 13:34 |
Razique | or one that will be open on 1194 | 13:35 |
Razique | (openvpn port) | 13:35 |
foexle | i think i have problems with understanding multi network services | 13:35 |
foexle | but i try to resolv first now | 13:35 |
*** AlanClark has joined #openstack | 13:38 | |
Razique | foexle: in fact multi host is a sexy way to remove spof | 13:38 |
Razique | by installing nova-network as multi_host on every node | 13:38 |
Razique | it allows you to have the compute node acting as a gateway for instances | 13:38 |
foexle | yes thats my intension :D | 13:38 |
*** hadrian has joined #openstack | 13:38 | |
Razique | thus, you turn every compute node into independant routed server | 13:38 |
Razique | and then your instances remain reacheable if you have only one compute node running | 13:39 |
Razique | that's hell of a feature :) | 13:39 |
foexle | ok now are all network services broken :D | 13:45 |
*** kke has joined #openstack | 13:47 | |
kke | why doesn't stackops installer see my br0? | 13:48 |
Razique | hehe I just spawned 20 instances | 13:48 |
Razique | let's see how the server will handle the request | 13:48 |
vidd | Razique, have you adjusted the quata limits in nova.conf? | 13:49 |
Razique | vidd: nope, into database yup | 13:49 |
Razique | i've set everything to 1024 | 13:49 |
Razique | and everytime I've that quota exceeded error :/ | 13:50 |
Razique | I've 18 running instances and can't run a 19th | 13:50 |
vidd | Razique, i think you have to set it in the conf as well | 13:50 |
vidd | well | 13:50 |
Razique | vidd: so what would be the point of having it into DB | 13:50 |
Razique | maybe a per-project into db | 13:50 |
vidd | then setting quota in database workks then=] | 13:51 |
Razique | and global into conf ? | 13:51 |
Razique | vidd: mmm howst's that ? | 13:51 |
vidd | you passed the "nova sets quota to 10" default | 13:51 |
vidd | so your issue is not qutoa related as far as the quato limits per se | 13:52 |
Razique | vidd: ah yes | 13:52 |
Razique | i've been able to reproduce that behaviour in pre-production | 13:52 |
*** jollyfoo has quit IRC | 13:52 | |
Razique | http://paste.openstack.org/show/3340/ | 13:53 |
vidd | can it be a ram or cor quota? | 13:53 |
Razique | not that sure since my compute node cannot handle the 25 running instances | 13:54 |
Razique | and they remain in "pending " state | 13:54 |
Razique | here is the part of the code which handle quotas | 13:55 |
Razique | http://paste.openstack.org/show/3341/ | 13:55 |
Razique | I go into the "if num_instances <= 0: | 13:55 |
Razique | message = _("Instance quota exceeded. You cannot run any " | 13:55 |
Razique | "more instances of this type.")" | 13:55 |
Razique | :D | 13:55 |
*** jollyfoo has joined #openstack | 13:55 | |
Kiall | Razique: the default scheduler has a fixed limit of 16 cores per server (even if you only have 2, or you have 32, it defaults to 16) | 13:57 |
kke | should i just skip the stackops installer and run the scripts manually? | 13:58 |
Razique | that means if you use a 1 core flavor, u'll be limited by 16 instances | 13:58 |
Razique | no matter the node ? | 13:59 |
Kiall | Razique: yes, unless you either change the setting, or choose a different scheduler | 13:59 |
Razique | Kiall: where can I change that setting ? | 13:59 |
Kiall | nova.conf ;) | 13:59 |
Kiall | the simple scheduler (the default): https://github.com/openstack/nova/blob/stable/diablo/nova/scheduler/simple.py | 14:00 |
Kiall | it has 3x nova.conf flags listed at the top | 14:00 |
Kiall | or, you can choose a different scheduler: https://github.com/openstack/nova/tree/stable/diablo/nova/scheduler | 14:00 |
vidd | --quota_cores "default = 20" | 14:00 |
Kiall | +--quota_cores? | 14:01 |
Kiall | you mean "--max_cores" | 14:01 |
Razique | Kiall: but how come I've been able to launch 25 instances ? | 14:01 |
Razique | while the node is a 8 cores server | 14:01 |
vidd | http://docs.openstack.org/diablo/openstack-compute/admin/content/reference-for-flags-in-nova-conf.html | 14:01 |
Kiall | the scheduler is thinking about about virtual cores, as in, cores seen from inside VMs, not physical cores | 14:02 |
vidd | Kiall, max-core = per commpute node | 14:02 |
Kiall | Razique: if you managed to launch 25 instances, then there is a bug in the scheduler ;) | 14:02 |
Razique | thanks for that I was asking myself yesterday if I had to update the nova.conf of is the db's quotas were enough | 14:02 |
vidd | quota-core = per tenant | 14:02 |
Kiall | vidd: yea - thats exactly what I'm talking about | 14:03 |
Razique | Kiall: yah look http://paste.openstack.org/show/3340/ | 14:03 |
Razique | oh, | 14:03 |
Razique | thanks a lot guys | 14:03 |
Razique | so let's update the nova.conf | 14:03 |
vidd | Kiall, quota-cores and max-cores are two diffent items adjusting two different things...he should set both | 14:05 |
Kiall | vidd: I know, But he says has already updated the quotas, so I was simply telling him about the other setting! | 14:06 |
Razique | vidd: "quota-core = per tenant" | 14:06 |
*** cereal_bars has joined #openstack | 14:06 | |
vidd | Kiall, he adjusted his quotas in the db...other apps dont have access to his nova db so they look at nova conf =] | 14:06 |
Razique | need to be seen a a global quota then | 14:06 |
Razique | while the one you set into databse applies to a node ? | 14:07 |
kke | i have three servers and mostly want to run a lot of vm's. how do i set this thing up? i installed one of them with the contorller option of stackops installer and two of them as nodes. this is practically where i'm at now. | 14:07 |
*** dgags has quit IRC | 14:07 | |
kke | complicated stuff. | 14:07 |
vidd | Razique, "max-cores" =#of cores per compute node "quota-cores" = per tenant/nova project | 14:08 |
Kiall | kke: I've never used the stackops installer, it sounds like its setup and all you need to do is launch some instances | 14:08 |
Razique | vidd: ah ok | 14:08 |
Razique | can I read extra docs about the way quotas work ? | 14:09 |
vidd | Razique, and dont trust apps to look at the database for all the answers as somethings wont look there | 14:09 |
Razique | ok ; good to know then =) | 14:10 |
*** mjfork has joined #openstack | 14:11 | |
uvirtbot | New bug: #890692 in nova "Nova trunk PPA FTBFS (dup-of: 890612)" [Undecided,Invalid] https://launchpad.net/bugs/890692 | 14:11 |
Razique | yah guys that worked :) | 14:12 |
Razique | thanks a ton | 14:12 |
Razique | weird thing | 14:13 |
Razique | I see "-quota_volumesdefault: '10'" | 14:13 |
Razique | while without that setting into my nova conf I've more than 20 volumes here | 14:13 |
*** djw_ has joined #openstack | 14:14 | |
vidd | Razique, did you alter that in your database? | 14:14 |
Razique | oh yes , volumes = 1024 | 14:15 |
Razique | that means the database quota overrides the nova.conf one ? :D | 14:15 |
vidd | in this particular instances | 14:15 |
vidd | if you use dashboard, however, there is a possibility of an issue | 14:16 |
vidd | i cant say for sure because i dont just arbitrarily change stuff in the database =] | 14:16 |
*** stuntmachine has joined #openstack | 14:17 | |
Razique | vidd: I've set these quotas a long time back | 14:17 |
Razique | but don't use dash at all here ;) | 14:17 |
vidd | its a "for example" | 14:17 |
*** Hakon|mbp has quit IRC | 14:18 | |
Razique | oh ok | 14:18 |
Razique | :D | 14:18 |
vidd | by not having the alterations you make in the database reflected in the nova.conf file it opens the door to issues | 14:18 |
Razique | yah you are right | 14:19 |
Razique | so you advise me to keep the same number for quotas between nova.conf and db ? | 14:19 |
vidd | lets just say it would never cause an issue | 14:19 |
vidd | =] | 14:19 |
Razique | ok, i'll do that | 14:20 |
Razique | mmm in fact, that doesn't go weel | 14:20 |
Razique | well* | 14:20 |
vidd | but it does have the potential to prevent one =] | 14:20 |
Razique | 4 running instances , I'm trying to spawn 25 | 14:20 |
Razique | error : You can only run 21 more instances of this type | 14:20 |
*** vernhart has joined #openstack | 14:20 | |
Razique | it's like the math is being done between the running instances and the number I ask | 14:20 |
Razique | weird | 14:20 |
Razique | 5 running instance, ask to spawn 25 | 14:21 |
Razique | You can only run 20 more instances of this type | 14:21 |
*** osier has quit IRC | 14:24 | |
*** mestery has quit IRC | 14:24 | |
*** jollyfoo has quit IRC | 14:24 | |
*** jollyfoo has joined #openstack | 14:25 | |
*** joesavak has joined #openstack | 14:26 | |
Kiall | vidd: If i understand the quotas correctly, the nova.conf quota settings are the defaults, and these defaults can be overridden in the database. | 14:26 |
Razique | Kiall: not sure since a quota into the DB is linked to a project_id | 14:27 |
Razique | mmm or maybe in fac | 14:27 |
Razique | t | 14:27 |
Kiall | exactly - the defaults are in nova.conf, and per-project/tenant overrides are in the DB | 14:28 |
Razique | sorry to be naive but why despite my quotas into the databse for the project I still have the overquota issue then ? | 14:28 |
Kiall | Razique: honestly, I'm not sure. It might be a bug, or maybe the quotas are set wrong.. | 14:29 |
Razique | yah, that is a possibility here ; I'll try to figure out why now it's like I've a 25 instances limit | 14:30 |
*** lts has joined #openstack | 14:30 | |
kbringard | I set a lot of defaults… instances, cores, ram and gigabytes | 14:30 |
kbringard | for quotas | 14:30 |
Razique | hey kbringard :) | 14:31 |
kbringard | 'cause if you set instances and not cores | 14:31 |
kbringard | then you still hit the same logical limit, just on a different quota | 14:31 |
Kiall | Razique: maybe set the global to 1 instance in nova.conf, and the project to 2 in the DB, that gives you a way to check that the DB quotes are being respected | 14:31 |
*** tryggvil___ has quit IRC | 14:31 | |
kbringard | hey Razique :-) | 14:31 |
Razique | kbringard: into nova.conf and database ? | 14:31 |
kbringard | I don't set anything in the DB | 14:31 |
kbringard | but I'm also not trying to enforce at this point | 14:31 |
Razique | ok good to know | 14:31 |
*** rbergeron has joined #openstack | 14:31 | |
kbringard | I just don't want to hit the low default limits :-D | 14:31 |
Kiall | Razique: nova.conf is just the default for all projects. DB is per-project overrides. | 14:31 |
Kiall | So, Setting them in either place should work. | 14:32 |
Razique | Kiall: i've removed the quota into database | 14:32 |
Razique | and i'll set every quota to let's say 5 | 14:32 |
Kiall | if you set every quota to 5, you're not going to get that many instances going ;) | 14:32 |
Kiall | as in - you'll have 5GB of ram, 5GB of disk etc | 14:33 |
Razique | well that 25 limit is very strange | 14:33 |
*** tryggvil_ has joined #openstack | 14:33 | |
Razique | since the database was set to 1024 for every quota | 14:33 |
*** deshantm_laptop has quit IRC | 14:33 | |
Razique | and into nova.conf to 512 | 14:33 |
kbringard | I always thought that what was in the DB was the global default, but its applied per project | 14:33 |
Razique | I've removed the DB quotas | 14:33 |
kbringard | then you can override a specific project | 14:33 |
vidd | Razique, 1024 quato for ram? | 14:34 |
kbringard | so 25 insdtances in the nova.conf means you can have 25 instances in each project by default, etc | 14:34 |
Razique | vidd: that quota wasn't set into db | 14:34 |
Razique | :p | 14:34 |
vidd | Razique, default: '51200' | 14:34 |
*** blakeyeager has quit IRC | 14:34 | |
kbringard | I don't remember what the default units are | 14:35 |
Razique | megabytes | 14:35 |
vidd | Razique, yes | 14:35 |
*** Lumiere has quit IRC | 14:35 | |
kbringard | so if you have it set to 1024, then that means you can have 1GB of ram allocated to instances across an entire project | 14:35 |
kbringard | which you're going to hit pretty quick | 14:35 |
Kiall | I have just tested that the DB values are indeed respected. You must be hitting one of the limits. | 14:35 |
*** dendro-afk is now known as dendrobates | 14:35 | |
Razique | Kiall: ok thanks | 14:36 |
*** Fu4ny has joined #openstack | 14:36 | |
vidd | Razique, what sise instances were you launching | 14:36 |
Razique | m1.small | 14:36 |
vidd | small = 2gb ram? | 14:36 |
Kiall | m1.small: Memory: 2048MB, VCPUS: 1, Storage: 20GB, FlavorID: 2, Swap: 0MB, RXTX Quota: 0GB, RXTX Cap: 0MB | 14:36 |
vidd | yep...there is is | 14:37 |
vidd | 2048 x 25 =51200 | 14:37 |
vidd | you hit the ram ceiling | 14:37 |
Kiall | so, for 25 of those .. the quote needs to be 51200 ram | 14:37 |
vidd | Razique, you need to set the --quota_ram | 14:38 |
Razique | well seen | 14:38 |
Razique | let's try | 14:38 |
Kiall | so, for 25 of those .. the quote needs to be 51200 ram / 500 gigabytess / instances 25 / floating_ips 25 / cores 25 | 14:38 |
Razique | ok so nova I don't have any quota into databse | 14:38 |
*** andrewbogott has joined #openstack | 14:38 | |
Razique | and quota_cores=1024; instances=512;max_cores=512, quota_ram=102400 | 14:39 |
Kiall | Razique: check the quotes with: nova-manage project quota --project=2 | 14:39 |
Kiall | where 2 = the tenant ID | 14:39 |
Razique | http://paste.openstack.org/show/3343/ | 14:40 |
*** supriya has quit IRC | 14:40 | |
Razique | seems good | 14:40 |
Razique | yah it worked :D | 14:41 |
Razique | don't have the limit now | 14:41 |
Kiall | well, you do... its just a larger limit ;) | 14:41 |
Razique | http://paste.openstack.org/show/3344/ | 14:41 |
kbringard | depending on how you have your flavors setup, yo'll probably want to make max_cores be a multiplier of instances | 14:41 |
Razique | I mean, the overquota message :p | 14:41 |
foexle | ok next question :D .... my second node are running now. Every new instance gets an ip and i can from the dom0 ping to this vm | 14:41 |
kbringard | since 1 instance can have 2, 4, 8, etc cores | 14:42 |
Razique | my biggest plan uses 8 vcpus actually | 14:42 |
foexle | but i cant ping from Host1:vm1 to host2:vm1 | 14:42 |
Kiall | foexle: what network type are you using? | 14:42 |
foexle | its the same network but no routes are exist | 14:42 |
foexle | vLan | 14:42 |
Kiall | Okay, and do both nodes run nova-network? or just 1? | 14:43 |
Razique | so last question; does nova.conf overrides DB or is it the DB that overrides nova.conf , | 14:43 |
foexle | both | 14:43 |
Kiall | and the network was setup with the --multi_node=True option? | 14:43 |
Razique | I always thought that was the DB that was overriding, but kbringard thinks it's the opposite | 14:43 |
foexle | Kiall: yes | 14:43 |
kbringard | Razique: I really have no idea | 14:43 |
foexle | Kiall: the network in the db too | 14:43 |
*** dirkx_ has quit IRC | 14:43 | |
kbringard | do you have icmp allowed in your security groups? | 14:44 |
Kiall | Razique: Nova.conf = defaults, which can be overridden by the DB on a per project bases | 14:44 |
Kiall | foexle: okay, and are your switches VLAN capable? | 14:44 |
Kiall | and what kbringard said ;) | 14:44 |
koolhead17 | kbringard, hey | 14:44 |
*** nerens has quit IRC | 14:44 | |
foexle | yes and yes D | 14:44 |
foexle | :D | 14:44 |
kbringard | hehe, sorry Kiall, don't mean to jump on your parade :-) | 14:45 |
kbringard | hey koolhead17 | 14:45 |
Razique | ok thanks guys | 14:45 |
Razique | working now | 14:45 |
koolhead17 | foexle, that br100 thing is resolved? | 14:45 |
Kiall | foexle: okay, and are the switch ports setup to accept and forward tagged packages for the relevant VLAN's? | 14:45 |
Razique | hey koolhead17 :) | 14:45 |
Kiall | koolhead17: VLAN doesnt use a br100, at least, not one you manually setup | 14:45 |
Razique | foexle: is the vlan up on the node | 14:45 |
koolhead17 | Razique, my friend change the port number :P | 14:45 |
koolhead17 | Kiall, yes sir :D | 14:46 |
Razique | koolhead17: hehe yah that would be surprising if the port would have been updated like this :D | 14:46 |
foexle | Razique: it is vlan100 | 100 | br100 | 14:46 |
Kiall | s/packages/packets/* | 14:46 |
Razique | foexle: cat /proc/net/vlan/config now :D | 14:46 |
foexle | vlan100 | 100 | br100 | 14:46 |
livemoon | i | 14:47 |
livemoon | h | 14:47 |
*** livemoon has left #openstack | 14:47 | |
*** livemoon has joined #openstack | 14:47 | |
foexle | Kiall: i running vlans in this network | 14:47 |
Kiall | foexle: and `brctl show` says that br100 is has vlan100 and vnetX as members? | 14:47 |
foexle | sorry with these switches | 14:47 |
foexle | yes | 14:47 |
Kiall | Okay, and what eth interface should the VLAN traffic be on? | 14:47 |
foexle | eth1 | 14:48 |
foexle | --vlan_interface=eth1 | 14:48 |
Kiall | do you have --vlan_interface=eth1 in both nova.conf's? | 14:48 |
foexle | :D | 14:48 |
Kiall | beat me to it ; | 14:48 |
*** supriya has joined #openstack | 14:48 | |
Kiall | ) | 14:48 |
koolhead17 | Razique, i think i will have to check keystone code at github to confirm that :D | 14:48 |
foexle | Kiall: so i have on all nodes | 14:48 |
livemoon | koolhead17: you expert in python? | 14:48 |
Kiall | foexle: okay - everything sounds like its setup. I would bet its a switch mic-configuration... | 14:49 |
Kiall | mis* | 14:49 |
*** jollyfoo has quit IRC | 14:49 | |
koolhead17 | livemoon, no am a n00b | 14:49 |
Kiall | foexle: are they managed switches? or just switches that will happily accept+pass on VLAN tagged packets? | 14:50 |
Kiall | brb | 14:50 |
Razique | Kiall: vidd ok perfet | 14:50 |
Razique | prefect | 14:50 |
Razique | the quota update in production worked | 14:50 |
foexle | Kiall: managed | 14:50 |
*** tryggvil_ has quit IRC | 14:51 | |
Razique | the next beer is on me ;) | 14:51 |
*** tryggvil_ has joined #openstack | 14:51 | |
foexle | Razique: great! :D | 14:51 |
koolhead17 | Razique, http://bit.ly/u5CNub see this and especially # Port the bind the Admin API server to section | 14:51 |
* koolhead17 scratches his head again | 14:51 | |
* koolhead17 pokes zul | 14:52 | |
koolhead17 | hola zykes- | 14:52 |
*** mestery has joined #openstack | 14:52 | |
zul | whats up? | 14:52 |
*** mordred_ has joined #openstack | 14:52 | |
*** mordred_ has joined #openstack | 14:52 | |
*** ChanServ sets mode: +v mordred_ | 14:52 | |
*** Hakon|mbp has joined #openstack | 14:52 | |
*** mordred_ is now known as mtaylor-xchat | 14:52 | |
koolhead17 | zul, am telling Razique about the admin_port number change, u mentioned long time back | 14:53 |
zul | ok | 14:53 |
Razique | koolhead17: these are the good ports | 14:58 |
Razique | 5000 public port, and 35357 for the admin port | 14:58 |
koolhead17 | Razique, yes | 14:59 |
*** javiF has joined #openstack | 15:00 | |
Kiall | foexle: and have the switch ports been setup as trunk's + Access for vlan100+ | 15:00 |
Kiall | Everything on the nova side looks (well .. sounds) correct.. I'm betting its the switch config | 15:01 |
foexle | Kiall: sec please ... i'm talking with the datacenter admin | 15:01 |
foexle | to communicate with the other node, thw switch must understand tagged vlan right ? | 15:02 |
Kiall | Yes/No .. If its a managed switch, it might block VLAN's you havent specifically said are allowed | 15:03 |
Kiall | If its not managed, sometimes they just scrap the VLAN tag and pass the packet through on VLAN0 (aka no vlan) | 15:03 |
livemoon | Razique: have you update your migration doc? | 15:03 |
Kiall | foexle: Basically - the ports need to be set to trunk mode, and given access to VLAN100+ | 15:04 |
ryan_fox1985 | hello I'm want to debug the swift part. But I don't know what I need. | 15:04 |
Razique | livemoon: it's in the review but the one online works | 15:05 |
Razique | I've tested it just yesterday :p | 15:05 |
foexle | Kiall: ah ok .... but i see here with brctl show only vlan iface and the vm-interfaces and no eht1 .... how knows the system the correct physical interface ? | 15:05 |
*** nphase has joined #openstack | 15:06 | |
Kiall | yea, brctl show only shows vlanX + vethX | 15:06 |
*** tryggvil_ has quit IRC | 15:07 | |
foexle | Kiall: it's ok :D i've the answer -.- => nova.conf ;) | 15:07 |
Kiall | lol - what were you missing? | 15:07 |
annegentle | Razique: sorry I missed that review, going to look now | 15:08 |
*** swill has quit IRC | 15:08 | |
*** robbiew has joined #openstack | 15:08 | |
foexle | i mean how the system knows the physical interface for comunicate with the other vm's => nova.conf // vlan_interface=eth1 ! | 15:08 |
*** lzyeval has quit IRC | 15:08 | |
*** tryggvil_ has joined #openstack | 15:09 | |
Kiall | foexle: ah .. | 15:09 |
Kiall | Just to be sure.. cat /proc/net/vlan/vlan100 | 15:09 |
Kiall | it should have Device: eth1 line | 15:09 |
Razique | hey annegentle :) | 15:10 |
foexle | hmmm | 15:10 |
foexle | Device: br100 | 15:10 |
Kiall | there we go ;) | 15:10 |
Kiall | what does your nova DB networks table look like? specifically the "bridge_interface" column? | 15:11 |
foexle | bridge_interface: br100 | 15:11 |
Kiall | yea, that should be eth1 | 15:11 |
foexle | ah ok | 15:11 |
Kiall | will probably need to reboot the nodes to have it reconfig everything | 15:12 |
foexle | yeah cool thanks i'll try it! | 15:12 |
*** dolphm has joined #openstack | 15:17 | |
koolhead17 | annegentle, ping | 15:20 |
annegentle | koolhead17: welcome back! | 15:20 |
uvirtbot | New bug: #890727 in openstack-manuals "openstack-identity guide needs to correct port number for admin API " [Undecided,New] https://launchpad.net/bugs/890727 | 15:20 |
koolhead17 | annegentle, how have you been? superbusy as ever | 15:21 |
*** mindpixel has joined #openstack | 15:22 | |
*** jwalcik has joined #openstack | 15:23 | |
koolhead17 | annegentle, i have assigned #890727 for myself :) | 15:23 |
annegentle | koolhead17: great, thanks. Things are going well. Last week we made epub output from the books -I'll ask MurthyRaju if he's interested in that output. | 15:24 |
annegentle | koolhead17: I think it looks pretty good, though epub>mobi needs one more fix. And there aren't any cover pages, yet. | 15:25 |
*** msivanes has left #openstack | 15:27 | |
*** nati2 has joined #openstack | 15:29 | |
*** katkee has quit IRC | 15:29 | |
*** troytoman-away is now known as troytoman | 15:30 | |
*** redconnection has quit IRC | 15:31 | |
*** lborda has joined #openstack | 15:31 | |
*** redconnection has joined #openstack | 15:31 | |
*** swill has joined #openstack | 15:35 | |
*** imsplitbit has joined #openstack | 15:36 | |
*** redconnection has quit IRC | 15:37 | |
*** jollyfoo has joined #openstack | 15:42 | |
*** livemoon has left #openstack | 15:45 | |
*** dirkx_ has joined #openstack | 15:47 | |
*** nerens has joined #openstack | 15:48 | |
*** llang629 has joined #openstack | 15:48 | |
*** llang629 has left #openstack | 15:48 | |
*** dgags has joined #openstack | 15:49 | |
*** swift82 has joined #openstack | 15:52 | |
foexle | Kiall: wohoooo it runs ! ;) | 15:52 |
foexle | Kiall: thanks | 15:52 |
*** cdub has quit IRC | 15:53 | |
Razique | foexle: what was the trick ? | 15:55 |
Razique | put eth1 under brige_name ? | 15:56 |
foexle | Razique: in the database yes | 15:56 |
*** cdub has joined #openstack | 15:56 | |
Razique | but u didn't tried that earlier ? :p | 15:56 |
*** mtaylor-xchat has quit IRC | 15:58 | |
foexle | no because i thought the network service gets all from nova.conf but the database attribute will overrite that | 15:58 |
*** mrjazzcat has joined #openstack | 15:58 | |
Razique | ah ok :) | 15:58 |
foexle | :) | 15:59 |
*** adjohn has joined #openstack | 15:59 | |
Razique | well good to know | 15:59 |
*** TheOsprey has quit IRC | 15:59 | |
Razique | that gives us even more elements to update the multi nic doc | 16:00 |
*** llang629_ has joined #openstack | 16:00 | |
*** llang629_ is now known as llang629 | 16:00 | |
*** dirkx_ has quit IRC | 16:01 | |
*** troytoman is now known as troytoman-away | 16:01 | |
*** llang629 has left #openstack | 16:04 | |
*** uksysadmin has quit IRC | 16:05 | |
*** dgags has quit IRC | 16:05 | |
*** dragondm has joined #openstack | 16:05 | |
*** dolphm has quit IRC | 16:06 | |
*** chomping has quit IRC | 16:06 | |
*** deshantm_laptop has joined #openstack | 16:06 | |
*** misheska has joined #openstack | 16:07 | |
*** jollyfoo_ has joined #openstack | 16:08 | |
annegentle | yay for rain! (really have to notice it when we're in the middle of a drought!) | 16:08 |
*** haji has joined #openstack | 16:10 | |
haji | hello | 16:10 |
Razique | here cold and grey, winter''s coming =d | 16:10 |
koolhead17 | annegentle, :P | 16:10 |
Razique | hey haji :) | 16:10 |
*** jollyfoo has quit IRC | 16:11 | |
uvirtbot | New bug: #890741 in openstack-manuals "Method to Update the metadata on an Account is undocumented" [Undecided,New] https://launchpad.net/bugs/890741 | 16:11 |
*** dgags has joined #openstack | 16:12 | |
haji | so i have a question, i updated kiall packages and removes tgt, does this mean i have to remove the flag in nova.conf iscsi_helper=tgtadm | 16:12 |
*** jollyfoo_ has quit IRC | 16:13 | |
*** medberry has quit IRC | 16:13 | |
*** freeflyi1g has quit IRC | 16:13 | |
*** medberry has joined #openstack | 16:13 | |
*** medberry has quit IRC | 16:13 | |
*** medberry has joined #openstack | 16:13 | |
*** freeflying has joined #openstack | 16:15 | |
*** rsampaio has joined #openstack | 16:16 | |
foexle | haji: to diablo ? | 16:16 |
foexle | haji: so upgrade ;) | 16:16 |
haji | yeah | 16:17 |
foexle | haji: yes you can remove that | 16:17 |
haji | but do i need to replace the flag? | 16:17 |
*** Hakon|mbp has quit IRC | 16:17 | |
haji | with something else | 16:17 |
foexle | haji: i think :D .... so i dont have this flag and my iscsi luns working verry well | 16:17 |
foexle | haji: i have this flag --iscsi_ip_prefix=192.168. but dont know if you need it | 16:18 |
haji | kk | 16:18 |
haji | thanks | 16:18 |
foexle | np | 16:19 |
swift82 | Hi guy's. Just a fast question, when i do a euca-associate-address -i i-00000023 91.224.249.128 all works fine (nova-networks adds the adress). And ip addr list gives the IP on the interface. But a simpel ping gives a error on the host, ping: sendmsg: Operation not permitted Does anyone something I am missing? | 16:19 |
*** obino has quit IRC | 16:19 | |
foexle | swift82: yeah you must allow icmp | 16:20 |
foexle | swift82: to your security group | 16:20 |
foexle | http://docs.openstack.org/cactus/openstack-compute/admin/content/enabling-ping-and-ssh-on-vms.html | 16:21 |
swift82 | Check, i have that. 0.0.0.0/24 from -1 to -1 cidr 0.0.0.0/24 | 16:21 |
foexle | its for cactus but in diablo are the same | 16:21 |
foexle | ok | 16:21 |
foexle | so try again | 16:21 |
swift82 | Yeh i have tried that | 16:22 |
swift82 | Is there a command that I can check the securtygroups on a instance? | 16:22 |
*** jollyfoo has joined #openstack | 16:23 | |
foexle | not on a instance | 16:23 |
foexle | but on a project | 16:23 |
foexle | euca-describe-groups | 16:23 |
foexle | swift82: do you have all on the same host ? | 16:24 |
*** chomping has joined #openstack | 16:24 | |
swift82 | Yes for testing now | 16:24 |
swift82 | I have multible machines | 16:24 |
foexle | swift82: iptables -L and iptables -L -t nat.... do you find your ip in the iptable rules ? | 16:25 |
*** doude has quit IRC | 16:25 | |
foexle | so the associated address | 16:25 |
*** doude has joined #openstack | 16:25 | |
uvirtbot | New bug: #890749 in swift "POST of metadata to a Container is inconsistent with that of an Object" [Undecided,New] https://launchpad.net/bugs/890749 | 16:25 |
swift82 | No, i don't see my adress there | 16:27 |
swift82 | iptables -L -t nat | grep 128 | 16:28 |
swift82 | DNAT all -- anywhere 91.224.249.128 to:10.0.0.10 | 16:28 |
swift82 | ACCEPT all -- 10.0.0.0/24 10.128.0.0/24 | 16:28 |
swift82 | DNAT all -- anywhere 91.224.249.128 to:10.0.0.10 | 16:28 |
swift82 | SNAT all -- 10.0.0.10 anywhere to:91.224.249.128 | 16:28 |
swift82 | so with the -L -t nat i do see my address | 16:28 |
Razique | swift82: in fact i'd say it's a VLAN stuff | 16:30 |
Razique | nothing to do with security rules | 16:30 |
*** reidrac has quit IRC | 16:30 | |
Razique | cuz that would result to a timeout | 16:30 |
Razique | not a "not permitted" | 16:30 |
swift82 | Okey.. | 16:30 |
haji | im getting this error when trying to connect to the vnc console | 16:30 |
haji | http://pastebin.com/ai3cT6Uq | 16:30 |
swift82 | sounds good | 16:30 |
*** rsampaio has quit IRC | 16:30 | |
Razique | haji restart rabbimq-server | 16:31 |
Razique | then nova-scheduler | 16:31 |
*** cereal_bars has quit IRC | 16:31 | |
*** rsampaio has joined #openstack | 16:31 | |
*** guigui has joined #openstack | 16:31 | |
swift82 | member:identifier:razique: I am useing vlans yes. But it's on the localhost so i would say i don't need it yet | 16:32 |
haji | okk | 16:32 |
*** negronjl has joined #openstack | 16:33 | |
Razique | swift82: ok go for flatDHCP then :) | 16:33 |
swift82 | No i want to use High Availability Manager | 16:35 |
Razique | so u need it :p | 16:36 |
Razique | how many servers do u have ? | 16:36 |
*** mindpixel has quit IRC | 16:37 | |
swift82 | 1 controller, 5 machines for VM's | 16:37 |
haji | damn.. | 16:38 |
*** koolhead17 has quit IRC | 16:38 | |
haji | i get the novnc welcome screen but Failed to connect to server | 16:38 |
*** dobber has quit IRC | 16:40 | |
*** code_franco has joined #openstack | 16:41 | |
Razique | swift82: ok, where nova-network runs ? | 16:41 |
*** redconnection has joined #openstack | 16:42 | |
swift82 | on the nova-compute nodes | 16:42 |
*** Fu4ny has quit IRC | 16:43 | |
Razique | ok so you use multi_host mode ? | 16:43 |
*** code_franco has quit IRC | 16:43 | |
*** dprince has joined #openstack | 16:46 | |
*** nati2 has quit IRC | 16:46 | |
*** dolphm has joined #openstack | 16:46 | |
*** misheska has quit IRC | 16:47 | |
*** redconnection has quit IRC | 16:47 | |
*** n81 has joined #openstack | 16:48 | |
*** n88 has quit IRC | 16:48 | |
*** rocambol1 has quit IRC | 16:50 | |
*** dprince has quit IRC | 16:50 | |
*** code_franco has joined #openstack | 16:50 | |
Razique | need to leave swift82 be back in a hour top | 16:52 |
Razique | cya guys | 16:52 |
*** Razique has left #openstack | 16:52 | |
swift82 | yeh | 16:52 |
swift82 | thanks | 16:52 |
*** swift82 has quit IRC | 16:52 | |
*** cdub has quit IRC | 16:53 | |
haji | is it normal for vnc proxy to be in another zone | 17:01 |
haji | http://pastebin.com/np45fG5c | 17:01 |
uvirtbot | New bug: #890777 in keystone "No way to diagnose tests easily" [Undecided,New] https://launchpad.net/bugs/890777 | 17:05 |
haji | kiall? | 17:11 |
haji | u there | 17:11 |
*** hggdh has quit IRC | 17:11 | |
*** gyee has joined #openstack | 17:13 | |
*** gyee has quit IRC | 17:15 | |
*** mies has quit IRC | 17:15 | |
*** gyee has joined #openstack | 17:15 | |
*** hggdh has joined #openstack | 17:15 | |
*** redconnection has joined #openstack | 17:16 | |
*** gyee has quit IRC | 17:16 | |
*** popux has quit IRC | 17:16 | |
*** rnirmal has joined #openstack | 17:17 | |
*** koolhead17 has joined #openstack | 17:18 | |
uvirtbot | New bug: #890775 in openstack-manuals "The "uec-publish-tarball" command is replaced by "cloud-publish-tarball" in diablo" [Medium,Confirmed] https://launchpad.net/bugs/890775 | 17:18 |
*** javiF has quit IRC | 17:18 | |
*** adjohn has quit IRC | 17:20 | |
*** obino has joined #openstack | 17:21 | |
*** adjohn has joined #openstack | 17:22 | |
*** supriya has quit IRC | 17:22 | |
*** derjohn_mob has quit IRC | 17:23 | |
*** dirkx_ has joined #openstack | 17:24 | |
*** cereal_bars has joined #openstack | 17:26 | |
*** clauden_ has quit IRC | 17:27 | |
*** clauden has joined #openstack | 17:27 | |
*** lorin1 has quit IRC | 17:29 | |
*** rsampaio has quit IRC | 17:30 | |
*** rsampaio has joined #openstack | 17:30 | |
*** jog0 has joined #openstack | 17:34 | |
*** jog0 has quit IRC | 17:35 | |
*** jog0 has joined #openstack | 17:36 | |
*** negronjl has quit IRC | 17:36 | |
*** localhost has joined #openstack | 17:36 | |
*** supriya has joined #openstack | 17:38 | |
*** dirkx_ has quit IRC | 17:38 | |
*** dgags has quit IRC | 17:39 | |
*** aliguori has quit IRC | 17:39 | |
*** arBmind has joined #openstack | 17:39 | |
*** alekibango has quit IRC | 17:41 | |
*** alekibango has joined #openstack | 17:41 | |
*** alekibango_ has joined #openstack | 17:42 | |
*** ohnoimdead has joined #openstack | 17:46 | |
*** juddm has joined #openstack | 17:46 | |
*** jdurgin has joined #openstack | 17:51 | |
*** clauden has quit IRC | 17:51 | |
*** clauden_ has joined #openstack | 17:51 | |
*** Ryan_Lane has joined #openstack | 17:54 | |
*** lorin1 has joined #openstack | 17:55 | |
*** clauden_ has quit IRC | 17:56 | |
*** clauden_ has joined #openstack | 17:57 | |
*** blakehaggerty has joined #openstack | 18:01 | |
*** blakehaggerty has left #openstack | 18:01 | |
*** adjohn has quit IRC | 18:01 | |
*** stuntmac_ has joined #openstack | 18:03 | |
*** stuntmachine has quit IRC | 18:03 | |
*** stuntmac_ is now known as stuntmachine | 18:03 | |
*** TheOsprey has joined #openstack | 18:07 | |
*** arBmind has quit IRC | 18:08 | |
*** supriya has quit IRC | 18:09 | |
*** krow has joined #openstack | 18:10 | |
*** carlp has joined #openstack | 18:13 | |
*** dgags has joined #openstack | 18:14 | |
*** MarkAtwood has joined #openstack | 18:15 | |
haji | do i need to add a rule to connect to the vnc console in the dashboard? | 18:16 |
*** ewindisch has joined #openstack | 18:16 | |
rmk | haji: nope -- guessing you're seeing an immediate server disconnected message | 18:17 |
haji | oh | 18:18 |
haji | rmk: which log should check for problems | 18:18 |
rmk | vncproxy isn't working with the latest versions of chrome | 18:18 |
rmk | is that what you're testing with? | 18:19 |
haji | firefox | 18:19 |
haji | 7.0.1 | 18:19 |
haji | i get the Failed to connect to server message in red | 18:20 |
rmk | Do you have vncproxy_url set in your nova.conf? | 18:20 |
haji | i have this: | 18:21 |
haji | --vnc_enabled=true | 18:21 |
haji | --vncserver_host=10.10.10.2 | 18:21 |
haji | --vncproxy_url=http://10.10.10.2:6080 | 18:21 |
haji | --ajax_console_proxy_url=http://10.10.10.2:8000 | 18:21 |
haji | for the vnc conf in the nova conf | 18:22 |
*** clauden_ has left #openstack | 18:22 | |
*** dwcramer has joined #openstack | 18:23 | |
*** mrbuffneff has joined #openstack | 18:23 | |
*** kke has left #openstack | 18:25 | |
*** nacx has quit IRC | 18:26 | |
*** lorin11 has joined #openstack | 18:26 | |
uvirtbot | New bug: #890801 in keystone "GET /extensions returns an empty list" [Undecided,New] https://launchpad.net/bugs/890801 | 18:26 |
*** lorin11 has quit IRC | 18:26 | |
haji | :( | 18:26 |
*** lorin1 has quit IRC | 18:27 | |
haji | am i missing anything? | 18:27 |
*** n81 has quit IRC | 18:27 | |
*** jakedahn has joined #openstack | 18:31 | |
*** mdomsch has joined #openstack | 18:31 | |
*** ejat has joined #openstack | 18:32 | |
*** ejat has joined #openstack | 18:32 | |
*** n81 has joined #openstack | 18:32 | |
*** lorin1 has joined #openstack | 18:32 | |
*** f-yang has joined #openstack | 18:35 | |
*** darraghb has quit IRC | 18:35 | |
*** dprince has joined #openstack | 18:36 | |
*** jsavak has joined #openstack | 18:38 | |
*** localhost has quit IRC | 18:38 | |
*** guigui has quit IRC | 18:40 | |
*** joesavak has quit IRC | 18:41 | |
*** Hakon|mbp has joined #openstack | 18:42 | |
*** rsampaio has quit IRC | 18:43 | |
*** jakedahn_ has joined #openstack | 18:44 | |
uvirtbot | New bug: #890807 in keystone "Curl examples show outdated for response GET /" [Low,Confirmed] https://launchpad.net/bugs/890807 | 18:46 |
*** jakedahn has quit IRC | 18:46 | |
*** jakedahn_ is now known as jakedahn | 18:46 | |
*** vladimir3p has joined #openstack | 18:47 | |
mrbuffneff | Stupid quit, but anyone know how to filter all the join/quit messages? | 18:47 |
*** PiotrSikora has quit IRC | 18:49 | |
vidd | mrbuffneff, "filter" as in how? and from where? | 18:49 |
*** rsampaio has joined #openstack | 18:49 | |
mrbuffneff | vidd, in this IRC chat room, i see all kind of noise. "xxxx has quit. xxxx has joined" | 18:51 |
vidd | mrbuffneff, it is a setting in your program...what program do you use? | 18:51 |
mrbuffneff | I have to use webchat.freenode.net due to my company's firewall. | 18:52 |
mrbuffneff | Oh thanks vidd! I found the option in the upper left. | 18:52 |
vidd | hehe | 18:53 |
*** rwmjones has joined #openstack | 18:53 | |
vidd | mrbuffneff, im glad you found it...i never use that client and i LIKE to know who is coming and going =] | 18:54 |
*** PiotrSikora has joined #openstack | 18:54 | |
haji | i cant connect to my instances using the vnc console in the dashboard | 18:55 |
haji | help | 18:55 |
notmyname | ttx: looks like I'll actually be here for the meeting today | 18:55 |
haji | novnc says Failed to connect to server | 18:55 |
vidd | haji, is novnc running? | 18:55 |
haji | vidd, im assuming it is... when i click on the vnc console link novnc runs on the browser, i get the nonvc splash screen in yellow an green | 18:57 |
*** mrjazzcat has left #openstack | 18:57 | |
haji | but i get a message in red that says Failed to connect to server | 18:57 |
*** rsampaio has quit IRC | 18:58 | |
vidd | haji, that is the noVNC client...is the nova-vncproxy running and is it set in your nova.conf file | 18:58 |
haji | yep | 18:58 |
*** mgoldmann has quit IRC | 18:58 | |
haji | i get a happy face for it user service list | 18:58 |
vidd | so "ps aux |grep vnc shows the vnc proxy? | 18:59 |
vidd | haji, i suppose the smiley works too =] | 18:59 |
haji | lol | 18:59 |
vidd | haji, your several steps ahead of me...i never got the noVNC client to come up so.....im not the one with your answer =] | 19:00 |
haji | http://paste.openstack.org/show/3354/ | 19:00 |
haji | vidd get kiall packs | 19:00 |
vidd | i dont WANT to =] | 19:01 |
haji | why? | 19:01 |
Kiall | because he dislikes me ;) | 19:01 |
haji | hahaha | 19:02 |
vidd | for one...i am going to need to be able to do this all on my own and i cant fly Kiall in to my datacenter if things go sideways =] | 19:02 |
Kiall | lol .. | 19:02 |
Kiall | sure you cna | 19:02 |
haji | any ideas kiall, with my problem | 19:02 |
haji | can u connect using novnc? | 19:02 |
Kiall | sure you can* | 19:02 |
haji | on the dashboard | 19:02 |
Kiall | haji: what browser are you using? | 19:03 |
haji | firefox 7.0.1 | 19:03 |
*** jedi4ever has joined #openstack | 19:03 | |
Kiall | haji: what happens when you click the noVNC link? | 19:03 |
Kiall | VNC link* | 19:03 |
Kiall | haji: also, I see in your pastebin "-vnc 10.10.10.2:1" | 19:04 |
*** hingo has joined #openstack | 19:04 | |
Kiall | I tend to set --vncserver_host to 0.0.0.0 | 19:05 |
Kiall | so its binds on all interfaces | 19:05 |
*** rsampaio has joined #openstack | 19:05 | |
haji | http://imgur.com/DbaRO | 19:06 |
haji | how do i change that? | 19:06 |
Kiall | just--vncserver_host=0.0.0.0 in nova.conf | 19:07 |
Kiall | But, the change will only take effect for new instances | 19:07 |
haji | i have this in my conf | 19:08 |
haji | --vnc_enabled=true | 19:08 |
haji | --vncserver_host=10.10.10.2 | 19:08 |
haji | --vncproxy_url=http://10.10.10.2:6080 | 19:08 |
haji | --vnc_console_proxy_url=http://10.10.10.2:6080 | 19:08 |
haji | --ajax_console_proxy_url=http://10.10.10.2:8000 | 19:08 |
haji | should i change all those to 0.0.0.0 | 19:09 |
Kiall | no, just --vncserver_host | 19:09 |
haji | ook | 19:09 |
Kiall | and I don't think vnc_console_proxy_url is actually a setting ;) | 19:09 |
haji | oops | 19:10 |
Kiall | I think it was renamed to vncserver_host in diablo | 19:10 |
haji | ok ill delete it | 19:10 |
haji | hehe | 19:10 |
haji | thanks | 19:10 |
Kiall | anyway, other than that, it looks fine. try starting a new instance once that change is made, and all nova-* services are restarted | 19:11 |
Kiall | then see if you can VNC to that instance | 19:11 |
Kiall | I'm thinking the VNC proxy is trying to connect to 127.0.0.1, which vncserver_host=10.10.10.2 is preventing | 19:11 |
*** RobNeff has joined #openstack | 19:12 | |
*** develtech has joined #openstack | 19:13 | |
*** ogelbukh has joined #openstack | 19:15 | |
*** stuntmachine has quit IRC | 19:16 | |
*** mrmartin has joined #openstack | 19:17 | |
Spirilis | wow just used dodai to install glance and nova, going to test it soon but two caveats: preinstall rabbitmq-server on the rabbitmq box, and for the nova volume hosts, get iscsitarget-dkms and iscsitarget preinstalled | 19:17 |
*** stuntmachine has joined #openstack | 19:17 | |
Spirilis | kept failing until I shored up those reqs... | 19:17 |
Kiall | dodai? | 19:17 |
Spirilis | https://github.com/nii-cloud/dodai-deploy/wiki | 19:17 |
Spirilis | found it off the openstack wiki | 19:18 |
Spirilis | seems like some kind of fancy automated installer that uses a web GUI to launch puppet scripts to get the right software installed on proposed nova/glance/swift hosts | 19:18 |
*** PiotrSikora has quit IRC | 19:19 | |
*** localhost has joined #openstack | 19:19 | |
*** cp16net has joined #openstack | 19:19 | |
*** stuntmachine has quit IRC | 19:19 | |
Spirilis | giving the 'test' feature a run now... supposedly it pulls up a canned server image and boots it to test things out | 19:20 |
*** stuntmachine has joined #openstack | 19:20 | |
Spirilis | test failed... hmm | 19:21 |
*** PiotrSikora has joined #openstack | 19:21 | |
*** rnorwood has joined #openstack | 19:21 | |
*** develtech has quit IRC | 19:22 | |
haji | it worked... but | 19:23 |
haji | http://imgur.com/HfRLL | 19:23 |
haji | fml | 19:23 |
Kiall | haji: your trying to boot a 64 bit instance on a 32bit host ;) | 19:23 |
Kiall | you're* | 19:23 |
haji | but im sure this machine is 64 bits | 19:24 |
Kiall | If you followed my instructions, they assume 64bit servers! Sorry! | 19:24 |
Kiall | haji: on the server run "uname -a" | 19:24 |
*** stuntmachine has quit IRC | 19:24 | |
haji | uname -a | 19:25 |
haji | Linux cloudHQ1 3.0.0-12-generic-pae #20-Ubuntu SMP Fri Oct 7 16:37:17 UTC 2011 i686 i686 i386 GNU/Linux | 19:25 |
Kiall | So, either its a 32bit host... or its a 64bit host and you installed a 32bit version of ubuntu ;) | 19:26 |
haji | fuuuuuuuuu | 19:26 |
Kiall | If its the latter, start over! | 19:26 |
haji | LOL | 19:27 |
*** Ryan_Lane has quit IRC | 19:27 | |
*** dolphm has quit IRC | 19:27 | |
Kiall | haji: it should only take an hour, now that you know how stuff works ;) | 19:27 |
haji | yeah thanks kiall | 19:28 |
haji | laterz | 19:28 |
*** Adri2000 has quit IRC | 19:30 | |
*** Adri2000 has joined #openstack | 19:30 | |
*** aliguori has joined #openstack | 19:31 | |
*** syah_ has quit IRC | 19:32 | |
*** stuntmachine has joined #openstack | 19:32 | |
vidd | ok...so i backed off and only installed nova/glance without keystone and im getting nothing when i run "euca-describe-availability-zones" | 19:32 |
*** dolphm has joined #openstack | 19:33 | |
*** syah has joined #openstack | 19:33 | |
*** dolphm has quit IRC | 19:33 | |
*** dolphm has joined #openstack | 19:34 | |
*** ssreedharan has joined #openstack | 19:36 | |
ttx | notmyname: oh? cool. Starting in 80min | 19:39 |
*** koolhead17 has quit IRC | 19:39 | |
*** imsplitbit has quit IRC | 19:45 | |
*** jakedahn has quit IRC | 19:46 | |
*** adjohn has joined #openstack | 19:47 | |
*** rnorwood1 has joined #openstack | 19:47 | |
Kiall | vidd: do you not need the verbose option? eg "euca-describe-availability-zones verbose" | 19:49 |
Kiall | (I dont use the euca tools, the nova ones are nicer since you can name stuff, eg "web12" rather than "i-8e5790ty" | 19:49 |
vidd | Kiall, i feel stupid =\ | 19:49 |
Kiall | so you should :P | 19:49 |
*** rnorwood has quit IRC | 19:50 | |
uvirtbot | New bug: #890829 in nova "openvz driver spawn broken with trunk" [Undecided,New] https://launchpad.net/bugs/890829 | 19:50 |
vidd | that means there was probably nothing wrong with yesterday's install and this format/reinstall was unnede | 19:50 |
vidd | *unessisary | 19:51 |
*** djw_ has quit IRC | 19:51 | |
Kiall | LOL | 19:51 |
vidd | spelling lessons on the other hand are much needed! | 19:51 |
vidd | *sigh* at least my scripting is getting "fine tuned" | 19:52 |
vidd | making it "idiot resistant" | 19:53 |
Kiall | vidd: BTW, are you scripting the install from git? | 19:53 |
vidd | im doing nova/glance from stock repo, keystone/horizon from git | 19:53 |
Kiall | from ubuntu repo's? or the OS PPA? | 19:54 |
vidd | stock ubuntu | 19:54 |
Kiall | Humm... | 19:54 |
Kiall | ;) | 19:54 |
vidd | os ppa is not "stock" its essex | 19:54 |
Kiall | they have a diablo PPA for nova etc | 19:54 |
Kiall | the ubuntu packages are missing a *pile* of fixes | 19:54 |
vidd | *buntu wont let me add it | 19:54 |
Kiall | of course it lets you! | 19:55 |
vidd | =-\ | 19:55 |
Kiall | Anyway, both the ubuntu and openstack diablo PPA are missing all the updates to stable/diablo... | 19:56 |
Spirilis | ah nice | 19:56 |
Spirilis | yeah when I did my dodai install and it tried to add the PPA I opted out and opted to use the ubuntu repos | 19:56 |
*** rsampaio has quit IRC | 19:56 | |
Kiall | SpamapS: well, the openstack PPA is missing then too... | 19:56 |
Kiall | them* | 19:56 |
Kiall | Spirilis* | 19:56 |
Spirilis | gotcha | 19:57 |
vidd | Kiall, then what's the point of using the ppa then =\ | 19:57 |
*** mjfork has quit IRC | 19:57 | |
Kiall | No idea ;) | 19:57 |
Kiall | This PPA provides packages for Ubuntu 10.04 LTS (Lucid), Ubuntu 10.10 (Maverick) and Ubuntu 11.04 (Natty). | 19:57 |
Kiall | Users of Ubuntu 11.10 (Oneiric) should directly use the packages available in Ubuntu official repository, there is no need for them to add this PPA. | 19:57 |
vidd | Kiall, yeah...thats what i got when i tried to add it | 19:58 |
Kiall | no - thats part of the PPA description, not an error message ;) | 19:58 |
SpamapS | Most likely that is there because there were no stable updates to prior releases. | 19:58 |
Kiall | The PPA does include oneiric packages | 19:58 |
SpamapS | Though 11.10 *should* get those updates in oneiric-proposed/oneiric-updates | 19:59 |
Kiall | SpamapS: only when Openstack mint a versioned release | 19:59 |
SpamapS | Updates whose versions should supersede the packages in the PPA.. one would hope. | 19:59 |
Kiall | which, so far, they haven't done. | 19:59 |
SpamapS | Kiall: not necessarily, we cherry pick stuff into Ubuntu all the time. | 19:59 |
*** rsampaio has joined #openstack | 19:59 | |
vidd | SpamapS, are you a packager for *buntu? | 20:00 |
Kiall | SpamapS: sure, and thats happened with a few fixes for nova.. | 20:00 |
SpamapS | indeed I am | 20:00 |
*** dendrobates is now known as dendro-afk | 20:00 | |
*** anotherjesse has joined #openstack | 20:00 | |
Kiall | but things like keystone have been left utterly broken | 20:00 |
Glacee | anyone have found a good way to track bandwith usage in swift? | 20:00 |
vidd | look at Kiall 's packages and get them added PLEASE =] | 20:00 |
Kiall | lol | 20:00 |
Spirilis | ah hmm | 20:01 |
notmyname | Glacee: for what purpose? | 20:01 |
Spirilis | so the weird authentication errors I keep getting with my test install are probably broken pkgs? | 20:01 |
Glacee | notmyname: billing | 20:01 |
SpamapS | Typically a bug report and a poke to somebody in #ubuntu-server or #ubuntu-devel should get them into oneiric-proposed. | 20:01 |
*** code_franco has quit IRC | 20:01 | |
Kiall | SpamapS: if you're using keystone, then yes | 20:01 |
notmyname | Glacee: parse the proxy logs for that | 20:01 |
Spirilis | not actually sure if this dodai install is using keystone though, I didn't install it... so maybe not... | 20:01 |
Glacee | notmyname: oh ok.. I will start looking at it thanks | 20:01 |
SpamapS | Kiall: got bugs ? I'll poke from within.. ;) | 20:02 |
Kiall | SpamapS: I gave up waiting for ubuntu to get them fixed ;) https://launchpad.net/~managedit/+archive/openstack | 20:02 |
vidd | SpamapS, Kiall went all "Billy the exterminator" on them =] | 20:02 |
*** CaptTofu has joined #openstack | 20:02 | |
*** RobNeff has quit IRC | 20:02 | |
*** mrbuffneff has quit IRC | 20:02 | |
*** jakedahn has joined #openstack | 20:03 | |
SpamapS | If you have packages in a PPA, those should be easy to turn into a debdiff for upload to oneiric-proposed | 20:03 |
vidd | SpamapS, once Kiall 's ppa gets blessed by the *buntu gods, i can use them | 20:03 |
Kiall | SpamapS: maybe, but they are only semi based on the ubuntu ones, and use different upstream versions etc | 20:04 |
Kiall | (I'm using the stable/diablo branches of stuff) | 20:04 |
*** rsampaio has quit IRC | 20:04 | |
SpamapS | Kiall: if by them you mean bug reports, then shame on us for not jumping on top of them... one good place to bring this up is also the weekly ubuntu server meeting. | 20:04 |
SpamapS | Kiall: semi based on the ubuntu ones? so these aren't just a few cherry picked patches? | 20:05 |
*** code_franco has joined #openstack | 20:05 | |
Kiall | No, infact, all the patches from the stock ubuntu packages have been removed, and upstream source updated | 20:05 |
Kiall | Hence why I keep telling vidd my packages wont be making it into ubuntu anytime soon | 20:06 |
vidd | SpamapS, they are re-writes from source directly from the makers | 20:07 |
vidd | or is that not accurate Kiall | 20:07 |
*** rsampaio has joined #openstack | 20:07 | |
Kiall | well - I borrowed the ubuntu packages debian/ folders as a base, but the similarity ends there ;) | 20:07 |
SpamapS | Kiall: if keystone is actually totally unusable in 11.10, such a thing might still be considered. | 20:07 |
Kiall | SpamapS: put it this way.. sometime before the "diablo" release, a file was moved from keystone -> nova (or the other way around). | 20:08 |
vidd | SpamapS, keystone and horizon both are toast in repo-proper | 20:08 |
SpamapS | Kiall: unfortunately the weekly meeting was about 4 hours ago. But I would suggest bringing this up at next week's meeting. https://wiki.ubuntu.com/ServerTeam/Meeting | 20:08 |
Kiall | That file doesnt exist in the ubuntu packages ;) | 20:08 |
vidd | and passlib is completely missuing | 20:08 |
Kiall | vidd: passlib isnt in ubuntu.. hence it was backported by OpenStack in their PPA | 20:09 |
SpamapS | Sounds like some bugs need to be filed. | 20:09 |
*** negronjl_mobile has joined #openstack | 20:09 | |
Kiall | SpamapS: there are some in there already I believe | 20:11 |
*** po has joined #openstack | 20:12 | |
Kiall | Anyway - its not specific bugs per-se, at least with keystone, an update to a newer version is needed. There have been *lots* of fixes to nova and keystone since the release... | 20:12 |
Kiall | and .. the openstack-dashboard package could never have worked either ;) | 20:13 |
Kiall | Anyway - I'm happy to keep my PPA up to date, since I would prefer to keep on top of bugfixes from OpenStack faster then ubuntu is likely to be able to keep u | 20:14 |
kbringard | anyone know what flag to use in Diablo if I don't want projects to be able to talk to each other on internal addresses in FlatDHCP mode? | 20:14 |
Kiall | likely to keep up* | 20:14 |
kbringard | I know that in VLAN mode it used to be --allow_project_net_traffic=false | 20:15 |
kbringard | has that changed? | 20:15 |
*** ssreedharan has quit IRC | 20:15 | |
Kiall | no, thats still the option, and it defaults to true | 20:16 |
vidd | kbringard, projects can talk to each other via private ip? isnt that a feature? | 20:16 |
n81 | hello channel! Does OS support EBS-backed instances? | 20:17 |
kbringard | wait, sorry, I misspoke | 20:17 |
kbringard | --allow_project_net_traffic=false will keep VMs in the *same* project from talking to each other, unless explicitly allowed by a rule | 20:18 |
kbringard | by default all VMs in the same project can talk to each other on their private IP | 20:18 |
*** haji has quit IRC | 20:18 | |
kbringard | what I'm seeing is | 20:18 |
*** arBmind has joined #openstack | 20:18 | |
kbringard | I'm using FlatDHCP, and VMs in different projects can talk to each other on their private IPs | 20:18 |
vidd | kbringard, from what i understand, flt networking only "officially" supports one private network | 20:19 |
kbringard | vidd: right, it's all one network, but it's supposed to use ebtables/nwfilter to segregate project traffic | 20:20 |
Kiall | That's what I thought aswell.. | 20:20 |
kbringard | like how ec2 works | 20:20 |
kbringard | although, ec2 uses Xen and likelly does it at the vswitch, but the functionality should be the same | 20:20 |
kbringard | I thought that --allow_same_net_traffic=false was supposed to resolve that | 20:20 |
kbringard | but I don't know | 20:21 |
Kiall | kbringard: thats what we're saying, it only supports 1 network officially, which means only 1 project can get a network.. | 20:21 |
Kiall | I could be wrong though, I don't use the flat managers... | 20:21 |
kbringard | hmmmmm, I could have sworn it supported multiple projects | 20:21 |
kbringard | yea, I don't usually either | 20:21 |
Kiall | I haven't looked at it since I first looked at OpenStack, but thats what I remember. | 20:22 |
kbringard | yea, weird | 20:22 |
kbringard | I'll figure it out, no worries | 20:22 |
kbringard | thanks guys | 20:22 |
vidd | kbringard, "officially" one project per network | 20:22 |
Kiall | vidd: you have (or had) the master branch of dashboard running a while ago right? | 20:23 |
vidd | yes | 20:23 |
Kiall | Did its security group stuff support using either a cidr, or source group? | 20:24 |
vidd | the cidr was acting strangely...it did not accept 0.0.0.0/0 for example, so i did all that from euca | 20:24 |
Kiall | heh weird, 0.0.0.0/0 works for me.. but there is no option for using a source group instead.. was wondering if I could cherry-pick support for that back ;) | 20:25 |
Spirilis | ah yunno I think my big hangup was dodai mucking everything up, adding multiple hosts by concatenating their hostnames into one long jumble in /etc/nova/nova.conf | 20:26 |
Spirilis | deleting all that junk and starting from scratch now | 20:26 |
vidd | Kiall, what you do is you set a "default" sec group, and you make "custom" sec groups | 20:26 |
Kiall | I'm aware of that ;) | 20:26 |
Kiall | I'm talking about a dashboard version of this: | 20:27 |
Kiall | nova secgroup-add-group-rule --ip_proto tcp --from_port 1234 --to_port 1234 web mysql | 20:27 |
Kiall | so, web servers can access mysql servers on tcp port 1234 | 20:27 |
vidd | IIRC nova secgroup = security group | 20:28 |
*** dolphm has quit IRC | 20:28 | |
*** jakedahn has quit IRC | 20:29 | |
Kiall | You're not understanding ;) | 20:29 |
Kiall | nova secgroup-add-rule --ip_proto tcp --from_port 1234 --to_port 1234 web 0.0.0.0/0 | 20:29 |
Kiall | 0.0.0.0/0 can access web servers... | 20:29 |
Kiall | nova secgroup-add-group-rule --ip_proto tcp --from_port 1234 --to_port 1234 mysql web | 20:29 |
vidd | if you want to add that rull to every security group, i believe you have to either add it to the default to be inherited by the others or add it to each security group | 20:29 |
Kiall | No! | 20:29 |
Kiall | You can add rules saying that servers in the "web" security group can access servers in the "mysql" security group | 20:30 |
Kiall | without using a CIDR | 20:30 |
Kiall | no inheritance | 20:30 |
Kiall | not* | 20:30 |
vidd | ah...i understand now....no...i did not see that | 20:30 |
vidd | but i was not looking for it either | 20:30 |
*** lorin1 has joined #openstack | 20:31 | |
Kiall | egL http://paste.openstack.org/show/3359/ | 20:31 |
Kiall | eg:* | 20:31 |
vidd | i did not create custom recurity rules in dashboard | 20:31 |
Kiall | fair enough then! | 20:31 |
*** dolphm has joined #openstack | 20:32 | |
*** jakedahn has joined #openstack | 20:34 | |
*** imsplitbit has joined #openstack | 20:36 | |
kbringard | ah, you guys are right, it was working as expected | 20:36 |
kbringard | the person testing it had set port 22 to allow from 0/0 | 20:36 |
kbringard | so of course it was going to work :-D | 20:36 |
kbringard | the nwfilter stuff just does L2 protection to make sure you're not arping around the rules, I guess | 20:37 |
*** dendro-afk is now known as dendrobates | 20:39 | |
*** MarkAtwood has quit IRC | 20:41 | |
*** MarkAtwood has joined #openstack | 20:43 | |
*** anotherjesse has quit IRC | 20:48 | |
*** dolphm has quit IRC | 20:48 | |
*** sandywalsh_ has quit IRC | 20:49 | |
*** anotherjesse has joined #openstack | 20:50 | |
*** hingo has quit IRC | 20:50 | |
*** mnour has joined #openstack | 20:51 | |
*** GheRivero_ has joined #openstack | 20:51 | |
*** corrigac has joined #openstack | 20:52 | |
*** jog0 has quit IRC | 20:52 | |
*** GheRivero_ is now known as GheAway | 20:52 | |
*** jeremy_ has joined #openstack | 20:52 | |
*** jeremy_ has quit IRC | 20:52 | |
*** jeremy_ has joined #openstack | 20:52 | |
*** GheRivero has quit IRC | 20:52 | |
*** jeremy has quit IRC | 20:52 | |
*** jeremy_ is now known as jeremy | 20:53 | |
*** ccorrigan has quit IRC | 20:55 | |
*** robertn has joined #openstack | 20:55 | |
*** jj0hns0n has joined #openstack | 20:57 | |
*** johnpur has joined #openstack | 20:58 | |
*** dprince has quit IRC | 20:59 | |
*** joesavak has joined #openstack | 21:01 | |
*** jj0hns0n has quit IRC | 21:01 | |
*** Razique has joined #openstack | 21:04 | |
*** dolphm has joined #openstack | 21:05 | |
*** jsavak has quit IRC | 21:05 | |
*** jj0hns0n has joined #openstack | 21:06 | |
*** dgags has quit IRC | 21:07 | |
*** anotherjesse has quit IRC | 21:08 | |
*** anotherjesse has joined #openstack | 21:08 | |
*** jakedahn has quit IRC | 21:08 | |
*** nitram_macair has quit IRC | 21:09 | |
*** redconnection has quit IRC | 21:10 | |
*** nitram_macair has joined #openstack | 21:12 | |
*** mrjazzcat has joined #openstack | 21:13 | |
*** dendrobates is now known as dendro-afk | 21:13 | |
*** mrjazzcat has left #openstack | 21:14 | |
*** Ryan_Lane has joined #openstack | 21:14 | |
*** cereal_bars has quit IRC | 21:14 | |
*** dendro-afk is now known as dendrobates | 21:15 | |
*** bengrue has joined #openstack | 21:22 | |
*** adjohn has quit IRC | 21:23 | |
*** haji has joined #openstack | 21:25 | |
swill | in keystone, what is the significance of /v1.0 and /v2.0? | 21:25 |
swill | in the url (if that was not obvious). | 21:28 |
vidd | swill, when you access a service...IE talking to nova the service expects to be spoken to on a specific http url | 21:29 |
swill | vidd: so i am working with swift right now. does swift to expect to be spoken to on /v2.0 | 21:30 |
swill | vidd: | 21:30 |
*** jj0hns0n has quit IRC | 21:30 | |
vidd | NOVA_URL=http://$NOVA_HOST_IP:8774/v1.1/ is where keyston needs to talk to nova | 21:31 |
swill | or did i misunderstand your asnwer | 21:31 |
vidd | yes...that is exactly what i mean | 21:31 |
vidd | acually IIRC swift needs to be spoke to as http://$SWIFT_HOST_IP/v2.0/%TENANT_ID% | 21:32 |
vidd | acually IIRC swift needs to be spoke to as http://$SWIFT_HOST_IP:SWIFT_PORT/v2.0/%TENANT_ID% | 21:32 |
*** redconnection has joined #openstack | 21:33 | |
swill | vidd: is that valid for the swiftauth middleware as well? | 21:33 |
swill | https://github.com/openstack/keystone/blob/master/keystone/middleware/swift_auth.py | 21:33 |
notmyname | vidd: is that supposed to be a storage url? | 21:33 |
vidd | notmyname, what url? | 21:34 |
vidd | which* | 21:34 |
notmyname | the template you just pasted for swill | 21:34 |
vidd | notmyname, thats what you send keystone-manage | 21:35 |
vidd | for the endpoint | 21:35 |
* vidd does not use swift | 21:35 | |
notmyname | then I think the "v2.0" part is wrong. it should be "v1" | 21:35 |
*** clopez has quit IRC | 21:36 | |
*** Ruetobas has quit IRC | 21:36 | |
swill | the v1 is what i was using for the swift template | 21:36 |
* notmyname uses swift but not keystone | 21:36 | |
notmyname | swill: that sounds right | 21:36 |
swill | but i was using v2.0 for the identity (keystone) template | 21:36 |
notmyname | yes, that sounds right too | 21:36 |
swill | but i was not adding the tenant id to it | 21:36 |
notmyname | I have no idea about that :-) | 21:37 |
vidd | swill, the swift endpoint needs the %TENANT% | 21:37 |
swill | and i was getting 404s when it was looking for /v2.0/token/999888777yadayad | 21:37 |
swill | vidd: ok, i will do that now and see if it helps. | 21:37 |
*** lorin1 has quit IRC | 21:37 | |
*** troytoman-away is now known as troytoman | 21:38 | |
swill | vidd: it is worth noting that the sampledata.py file in test does not have the tenant id in the endpoint template setup. | 21:38 |
notmyname | the "/v2.0/token/" request should be going to keystone. keystone then should return an endpoint for swift that looks like "http[s]://<storgagedomain>/v1/<something>" | 21:39 |
swill | i am not using the sample data one because i wrote my own, but i was using it as a reference | 21:39 |
vidd | swill, endpointTemplates add RegionOne swift https://192.168.15.199:8080/v1/AUTH_%tenant_id% | 21:39 |
swill | i meant the identity template | 21:39 |
*** jwalcik has quit IRC | 21:39 | |
swill | for keystone, not for swift | 21:39 |
vidd | swill, the sample data work with keystone/swift? | 21:40 |
swill | vidd: i never got it to work. i wrote my own in the process of troubleshooting. i will try your tentant id idea and see if that resolves my problem. | 21:40 |
vidd | dang it....why is there a static IP in my template?!? | 21:41 |
swill | haha | 21:41 |
vidd | no wonder my stuff is blowing up | 21:41 |
devcamcar | mtaylor: i have email notifications for "new changes" set for nova/glance/quantum/swift but i don't receive them | 21:41 |
devcamcar | mtaylor: also, horizon isn't in the list yet :) | 21:41 |
vidd | that server isnt there anymore =] | 21:41 |
kbringard | anyone here use crowbar at all? | 21:41 |
mtaylor | devcamcar: are they set for the projects "openstack/nova" and "openstack/glance" etc? | 21:42 |
*** Ruetobas has joined #openstack | 21:42 | |
devcamcar | mtaylor: yes | 21:42 |
mtaylor | ok. | 21:42 |
mtaylor | you have an email set in https://review.openstack.org/#settings,contact ? | 21:42 |
vidd | swill, notice that the URL ends with /v1/AUTH_%tenant_id% | 21:42 |
devcamcar | mtaylor: yes, i receive notifications on comments and other stuff, but not on new merge proposals | 21:42 |
mtaylor | WEIRD. ok. because I get this shit spammed out of me with those things. shall look in to it | 21:43 |
swill | vidd: yes, i have that for my swift template. what do you have for your identity template | 21:43 |
swill | vidd: do you have this: http://$SWIFT_HOST_IP:SWIFT_PORT/v2.0/%25TENANT_ID%25 | 21:43 |
swill | without the 25s | 21:43 |
swill | :) | 21:44 |
vidd | http://192.168.15.199:5000/v2.0/ | 21:44 |
swill | hmm, thats what i have | 21:44 |
swill | where did the url i just pasted above come from? with the tenant_id in it? | 21:44 |
vidd | I got it from the keystone documentation | 21:45 |
swill | vidd: i had a working version with tokenauth, but i am trying to get swiftauth middleware to work as per this bug: https://bugs.launchpad.net/keystone/+bug/890415 | 21:45 |
swill | vidd: which version of the documentation? haha, there are many. | 21:46 |
*** negronjl_mobile has quit IRC | 21:47 | |
*** negronjl_mobile has joined #openstack | 21:47 | |
swill | vidd: i just realized i did not have the trailing slash on my identity template like you do, i will try that. | 21:47 |
notmyname | swill: tokenauth has that bug you linked (since it has no authorize function). swiftauth is what you want | 21:49 |
swill | notmyname: exactly. i had a working version of tokenauth, so instead i am trying to get swiftauth to work. | 21:50 |
notmyname | [filter:keystone] | 21:51 |
notmyname | use = egg:keystone#swiftauth | 21:51 |
notmyname | keystone_admin_token = 999888777666 | 21:51 |
notmyname | keystone_url = http://127.0.0.1:35357 | 21:51 |
swill | hang on. you are using the admin port in there? | 21:51 |
notmyname | swill: ^ that's from my swift proxy config. everything I have for keystone is default (including the sampledata.py) | 21:52 |
swill | notmyname: i will try with the admin port, i had the service port in there. | 21:52 |
swill | 5000 | 21:53 |
*** rsampaio has quit IRC | 21:53 | |
*** Ryan_Lane has quit IRC | 21:53 | |
swill | notmyname: you are also not putting in a /v#.0 in the keystone_url either? | 21:53 |
*** dirkx_ has joined #openstack | 21:53 | |
*** rsampaio has joined #openstack | 21:54 | |
notmyname | swill: that's what I have and it worked the last time I used keystone (several weeks ago) | 21:54 |
*** arBmind has quit IRC | 21:54 | |
swill | ok perfect, i will try now. thank you. :) | 21:54 |
notmyname | np | 21:54 |
notmyname | gotta run. I'll be back later | 21:54 |
*** nitram_macair has quit IRC | 21:57 | |
*** jog0 has joined #openstack | 21:58 | |
*** rsampaio has quit IRC | 22:00 | |
*** miclorb_ has joined #openstack | 22:01 | |
*** GheAway is now known as GheRivero | 22:01 | |
uvirtbot | New bug: #890881 in keystone "auth_token.py middleware calls Keystone twice" [Undecided,New] https://launchpad.net/bugs/890881 | 22:01 |
*** anotherjesse has quit IRC | 22:03 | |
*** anotherjesse has joined #openstack | 22:04 | |
*** joesavak has quit IRC | 22:06 | |
*** stuntmachine has quit IRC | 22:06 | |
swill | notmyname: you rock!!! that worked perfectly. thank you... | 22:06 |
*** miclorb_ has quit IRC | 22:07 | |
*** rsampaio has joined #openstack | 22:08 | |
*** llang629 has joined #openstack | 22:09 | |
*** anotherjesse has quit IRC | 22:10 | |
*** mrmartin has quit IRC | 22:11 | |
*** llang629 has left #openstack | 22:12 | |
*** jj0hns0n has joined #openstack | 22:12 | |
*** dirkx_ has quit IRC | 22:12 | |
*** rsampaio has quit IRC | 22:15 | |
*** rsampaio has joined #openstack | 22:19 | |
*** lts has quit IRC | 22:19 | |
*** thingee has joined #openstack | 22:21 | |
*** dendrobates is now known as dendro-afk | 22:23 | |
*** dendro-afk is now known as dendrobates | 22:23 | |
*** BasTichelaar has quit IRC | 22:25 | |
uvirtbot | New bug: #890888 in swift "ChunkReadTimeout exception in file_iter in swift proxy server not handled" [Undecided,New] https://launchpad.net/bugs/890888 | 22:25 |
*** lionel has quit IRC | 22:27 | |
*** lionel has joined #openstack | 22:27 | |
*** sticky has joined #openstack | 22:28 | |
*** msivanes1 has joined #openstack | 22:31 | |
*** rnirmal has quit IRC | 22:36 | |
*** msivanes1 has quit IRC | 22:37 | |
*** derrick has quit IRC | 22:39 | |
*** martines has joined #openstack | 22:39 | |
*** dendrobates is now known as dendro-afk | 22:39 | |
*** msivanes has joined #openstack | 22:40 | |
*** msivanes has left #openstack | 22:40 | |
*** dendro-afk is now known as dendrobates | 22:42 | |
*** anotherjesse has joined #openstack | 22:45 | |
*** nRy has joined #openstack | 22:45 | |
*** lborda has quit IRC | 22:46 | |
*** rsampaio has quit IRC | 22:47 | |
*** TheOsprey has quit IRC | 22:48 | |
*** jog0 has left #openstack | 22:51 | |
*** cdub has joined #openstack | 22:51 | |
*** jog0 has joined #openstack | 22:52 | |
*** GheRivero has quit IRC | 22:52 | |
*** clopez has joined #openstack | 22:53 | |
*** cp16net has quit IRC | 22:53 | |
*** dwcramer has quit IRC | 22:54 | |
*** Razique has quit IRC | 22:55 | |
*** haji has quit IRC | 22:56 | |
*** derrick has joined #openstack | 22:56 | |
*** nerens has quit IRC | 22:56 | |
*** rnorwood1 has quit IRC | 22:59 | |
*** rsampaio has joined #openstack | 23:01 | |
*** mszilagyi has joined #openstack | 23:02 | |
*** aclark_ has joined #openstack | 23:03 | |
*** AlanClark has quit IRC | 23:03 | |
*** carlp has quit IRC | 23:03 | |
*** andrewbogott has quit IRC | 23:04 | |
*** aclark_ is now known as AlanClark | 23:07 | |
*** nitram_macair has joined #openstack | 23:08 | |
*** nitram_macair has left #openstack | 23:08 | |
*** rsampaio has quit IRC | 23:08 | |
*** troytoman is now known as troytoman-away | 23:11 | |
*** rnorwood has joined #openstack | 23:11 | |
*** negronjl_mobile has quit IRC | 23:12 | |
*** lzyeval has joined #openstack | 23:12 | |
*** negronjl_mobile has joined #openstack | 23:13 | |
*** freeflying has quit IRC | 23:14 | |
*** rsampaio has joined #openstack | 23:17 | |
*** mszilagyi has quit IRC | 23:17 | |
*** n81 has quit IRC | 23:17 | |
*** robbiew has quit IRC | 23:18 | |
*** imsplitbit has quit IRC | 23:18 | |
*** dendrobates is now known as dendro-afk | 23:20 | |
*** swill has quit IRC | 23:20 | |
uvirtbot | New bug: #890906 in nova "os-virtual-interfaces extension should take a uuid instead of an instance id" [Undecided,New] https://launchpad.net/bugs/890906 | 23:21 |
*** adjohn has joined #openstack | 23:22 | |
*** dendro-afk is now known as dendrobates | 23:23 | |
*** code_franco has quit IRC | 23:27 | |
*** aliguori has quit IRC | 23:28 | |
uvirtbot | New bug: #890908 in horizon "Use metadata rather than description for servers" [Undecided,New] https://launchpad.net/bugs/890908 | 23:30 |
*** negronjl_mobile has quit IRC | 23:35 | |
*** kbringard has left #openstack | 23:41 | |
*** ldlework has quit IRC | 23:43 | |
*** cp16net has joined #openstack | 23:45 | |
*** carlp has joined #openstack | 23:45 | |
*** nati2 has joined #openstack | 23:46 | |
*** ejat has quit IRC | 23:50 | |
*** cp16net has quit IRC | 23:53 | |
*** jakedahn has joined #openstack | 23:56 | |
*** lzyeval has quit IRC | 23:59 | |
*** rnorwood has quit IRC | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!