Thursday, 2011-11-17

*** brian_sc has joined #openstack00:00
notmynamehsom: file a bug, I guess (sorry, it's getting late here and I don't feel well)00:00
*** bengrue has quit IRC00:01
hsomno worries, thanks for trying00:02
viddKiall, you still here?00:02
*** vernhart has quit IRC00:03
*** hingo has quit IRC00:03
*** rods has quit IRC00:04
daMaestronotmyname, there are debs and other information in that tgz00:05
daMaestronotmyname, for me to be able to stick it into a package and not ship extra data... i need a new tgz00:05
*** haji has joined #openstack00:06
vidddaMaestro, can you download the current tar.gz, rip it open, strip what you personally dont need and zip it back up?00:07
*** dwcramer has quit IRC00:13
daMaestroyes, but policy dictates we have an upstream file location that can be verified00:14
daMaestroi can put anything into the spec, it's just "proper" to have an upstream location to point to for source verification00:14
daMaestrofor now, i've just made the spec unpack the upstream source and then unpack the inner source00:14
*** afm1 has joined #openstack00:16
*** vernhart has joined #openstack00:16
*** afm has quit IRC00:17
*** vladimir3p has quit IRC00:20
*** vladimir3p has joined #openstack00:20
*** rnirmal has quit IRC00:23
*** misheska has joined #openstack00:26
*** vernhart1 has joined #openstack00:27
*** haji has quit IRC00:28
*** dwcramer has joined #openstack00:30
*** vernhart has quit IRC00:31
*** miclorb_ has quit IRC00:33
*** cdub has quit IRC00:37
*** haji has joined #openstack00:37
*** rsampaio has joined #openstack00:37
*** bengrue has joined #openstack00:39
*** miclorb_ has joined #openstack00:40
*** rsampaio has quit IRC00:42
*** afm1 has quit IRC00:48
*** rsampaio has joined #openstack00:49
*** livemoon has joined #openstack00:50
livemoonmorning00:51
andrewbogottWhat's the story with Horizon and gerrit?  I'm following http://wiki.openstack.org/GerritWorkflow but dead end with "The current project name, openstack/horizon.git, is not a known project."00:51
viddhello livemoon00:51
*** dragondm has quit IRC00:52
*** nati2__ has quit IRC00:55
*** KumarKR has quit IRC00:56
*** pixelbeat has quit IRC00:58
*** bengrue has quit IRC00:59
*** bwong has quit IRC01:00
*** jdg has quit IRC01:03
*** sdake has joined #openstack01:06
*** cdub has joined #openstack01:08
*** Fu4ny has joined #openstack01:08
*** daMaestro has quit IRC01:10
*** jog0 has quit IRC01:12
*** nati2 has joined #openstack01:15
*** dendrobates is now known as dendro-afk01:17
*** sandywalsh has quit IRC01:17
*** maplebed has joined #openstack01:18
*** rnorwood has quit IRC01:18
maplebedhi, I'm going through http://swift.openstack.org/howto_installmultinode.html and am adding devices to the rings.01:18
*** Fu4ny has quit IRC01:18
maplebedthe example says swift-ring-builder account.builder add z$ZONE-$STORAGE_LOCAL_NET_IP:6002/$DEVICE $WEIGHT01:18
maplebeddoes it require an IP address or can it use a hostname instead?01:18
*** miclorb__ has joined #openstack01:19
*** miclorb_ has quit IRC01:19
*** obino has quit IRC01:22
maplebed(for the $STORAGE_LOCAL_NET_IP field, that is)01:22
*** jj0hns0n has joined #openstack01:22
*** mnour has joined #openstack01:22
*** sdake has quit IRC01:23
*** jj0hns0n has quit IRC01:26
n881) is there anybody still here and 2) has somebody got dashboard working?01:26
*** jj0hns0n has joined #openstack01:26
hajianybody here knows how to configure a cisco switch with openstack01:27
vidd1.) yes 2.)no01:27
btorchhsom: what version of swift are you using ? this auth-server.conf error kind of reminds me of really old swift release when devauth was still used and there was an auth-server daemon if I recall correctly01:27
btorchhsom: nevermind skipped some of the conversation lines with notmyname01:28
*** miclorb__ has quit IRC01:29
n88vidd: thanks :-P01:30
viddn88, its not that i cant get horizon to work....01:30
n88vidd: I got it up and running and can log in but I've got something mis-configured with keystone or dashboard b/c I'm getting I don't have permission errors01:30
viddkeystone is my issue01:30
n88vidd: maybe we are in the same boat…can you see any actual information in dashboard?01:30
viddwow...what a coincidence01:30
viddn88, let me ask you a different question....01:31
n88vidd: shoot!01:31
vidddid you test euca before installing keystone?01:31
n88vidd: test euca? you mean eucalyptus cloud stuff? or euca commands?01:32
viddeuca commands01:32
n88vidd: I found **most** of them worked01:32
viddi use euca-describe-availability-zones verbose --debug01:32
viddthat is my "tester"01:32
viddbefore keystone...all smiles01:32
viddafter keystone, they wont even talk to me01:33
n88vidd: let me guess…after keystone…no smiles?01:33
viddnot even no smiley01:33
n88vidd: all XXX or not even a listing?01:33
viddif i got all XXX it would be a step in the right direction01:33
livemoonmorning vidd01:33
viddhello livemoon01:34
n88vidd: I actually just tried that command and realized I'm still using the —use_deprecated_auth in my nova.conf01:34
viddn88 im getting a timeout01:34
*** troya has joined #openstack01:34
n88vidd: if I comment that line out is there any more nova.conf flags you've set for keystone?01:34
viddn88 did you get the smileys?01:34
livemoonyesterday I thought using private cloud to replace LAMP01:34
n88vidd: I'm still using the old authentication b/c I haven't changed my nova.conf…but I'm about to do that01:35
n88vidd: is there any other nova.conf settings youv'e chnaged for keystone?01:35
viddn88, my question was not"do you have the deprec auth flag...the question was did you get the smileys01:35
n88also…does anyone know where dashboard stores its log files? I know that seems like a silly question but I can't seem to find them01:35
troyahi alll01:35
viddn88, they are in your apache error logs =]01:36
viddits a web site after all01:36
*** Turicas has joined #openstack01:36
troyahi vidd and livemoon01:36
viddhello troy01:36
viddhello troya01:36
n88vidd: I'm getting smiles right now after installing Keystone but that's b/c I believe I'm still using Secret and access key authentication b/c I haven't commented out --use_deprecated_auth01:36
n88vidd: ah right…yeah… *smacks self in head*01:37
viddn88 its not as obvious as one might think =]01:37
*** coulda has joined #openstack01:37
troyavidd, i get new server now, by the way what's the best OS for openstack ?01:37
troyaCentos or UBuntu ?01:37
couldahi,how to config Multiple nodes with a single adapter?01:37
viddsince Red Hat scares the b'Jesus out of me, and i used to work with the xubuntu dev team...im not sure im one to give an unbiased answer01:38
n88vidd: lol01:38
*** nyeates has joined #openstack01:39
viddcoulda, you can [try] using my scripts as long as you opt-out of keystone and dashboard01:40
viddmy keystone and dashboard scripts are causing me issues i have to track down yet01:41
viddcoulda, https://github.com/vidd/vidd01:42
*** v0id has joined #openstack01:42
*** dwcramer has quit IRC01:45
couldavidd,i have readed network_setup.sh ,bu i want to use flatnetwork01:47
viddcoulda, dont take this the wrong way...but why? why would you not want to have your private ip's automatically assigned to your instaces by your controller node?01:48
couldavidd ,i am doing  proof of concept in vmware+NAT01:49
*** haji has quit IRC01:52
viddcoulda, i would suggest at least attempting the dhcp route first01:52
viddbut in theory, you set your /etc/networking/interfaces up with iface eth0 manual01:54
viddthen set up your br100 with your eth0 info01:55
vidd*iface eth0 inet manual01:55
*** jj0hns0n has quit IRC01:56
*** jj0hns0n has joined #openstack01:56
couldavidd ,i use flatnetwork,but  I am getting the following error  DataSourceEc2.py[WARNING]: ‘http://169.254.169.254′ failed: url error,01:56
*** jj0hns0n has quit IRC01:57
couldavidd ,-A nova-network-PREROUTING -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination xxxx:8773,But no effect01:57
*** ohnoimdead has quit IRC01:57
hsomException: Could not create account AUTH_system for user system:root01:57
hsomusing tempauth ^01:58
viddcoulda, your opening up port 80 for port 8773 traffic01:58
*** dwcramer has joined #openstack01:58
*** troya has quit IRC01:58
viddthats not going to work01:59
*** adjohn has quit IRC01:59
couldavidd ,i use tcpdump,but i do not  capture any data02:00
viddcan you open all the ports?02:00
couldavidd,yes02:01
viddand your ip range looks weird  .... why specify a /32 or is that the way IP tables have to be?02:03
livemoonwho know how to put scripts into instance when it start02:04
*** PeteDaGuru has quit IRC02:04
*** bcwaldon has quit IRC02:06
*** jog0 has joined #openstack02:07
*** brian_sc1 has joined #openstack02:07
*** anotherjesse has quit IRC02:07
*** brian_sc2 has joined #openstack02:08
*** brian_sc1 has quit IRC02:08
couldavidd,you can see config in http://paste.openstack.org/show/3383/02:09
*** brian_sc has quit IRC02:11
viddcoulda, you have no eth ports specified in your nova.conf02:11
*** dolphm has quit IRC02:11
viddlook at my nova-preload https://github.com/vidd/vidd/blob/master/nova-preload.sh02:12
n88vidd: Is your euca-describe-availability showing it trying to use the keystone service? Or do you have a Secret/Access key?02:12
n88does euca-describe-instances even support keystone? I don't think it does02:13
viddn88, im sure it does02:13
viddn88, you getting smileys sill?02:13
*** jdurgin has quit IRC02:16
couldavidd,which flag?02:17
*** chadh has quit IRC02:17
*** chadh has joined #openstack02:17
viddcoulda, the last 4 in the networking section02:17
*** jakedahn has joined #openstack02:17
couldavidd,ok,i try it02:19
*** brian_sc2 has quit IRC02:19
couldavidd,thanks02:19
viddjust pay the bill when ya get it in the mail =]02:19
*** jog0 has left #openstack02:20
*** osier has joined #openstack02:20
*** jog0 has joined #openstack02:20
*** jog0 has quit IRC02:20
*** jog0 has joined #openstack02:20
n88vidd: I get smileys but I can't launch instances02:21
viddn88 your 3 steps ahead of me =\02:21
*** andrewbogott has quit IRC02:22
*** coulda has quit IRC02:22
viddeverything was fine until keystone shoed up =\02:22
*** CaptTofu has quit IRC02:22
vidd*showed02:23
n88vidd: yeah…well this whole openstack suite is definitely got some growing pains02:23
viddi keeps this up its going to get some lead poisoning =]02:24
vidd*it keeps....02:24
*** gyee has quit IRC02:26
n88well this is odd…did you realize dashboard installs nova-compute?02:27
n88well at least Kiall's PPAs do02:28
viddn88, nova-compute? or novaclient?02:28
n88nova-compute02:28
viddn88, you should already HAVE nova-compute02:29
n88I'll have to let him know…unless he has a good reason for his openstack-dashboard project to have a dependency on nova-compute02:29
viddnova-compute is what lets you launch instances02:29
viddi should say "let's you host VM's02:30
n88vidd: yes, but I'm running a cloud controller and 3 compute nodes and my cloud controller isn't supposed to run nova-compute02:30
*** deshantm_laptop_ has joined #openstack02:30
n88esp since it can't…it's a 7 year old machine with no VT-extensions :-PO02:31
viddn88 it still needs nova-compute02:31
*** reed has joined #openstack02:34
*** deshantm_laptop has quit IRC02:34
*** jdg has joined #openstack02:34
*** woleium has quit IRC02:36
*** miclorb_ has joined #openstack02:36
*** anotherjesse has joined #openstack02:41
*** anotherjesse has quit IRC02:42
*** jdg has quit IRC02:43
hugokuodoes anyone have idea about using Bittorrent to spread an object in Swift ?02:43
*** jdg has joined #openstack02:44
*** Turicas has quit IRC02:52
*** stewart has quit IRC02:53
livemoonhugokuo: you have so advanced02:54
livemoonvidd02:54
hugokuo?02:54
viddlivemoon, ??02:55
livemoonhugo:ÄãÒѽ›ºÜ³¬Ç°ÁË02:55
livemoonvidd: do you know how to put scripts into instance when instance is been started02:55
viddlivemoon, no02:56
* vidd barely knows how to get scripts onto real computers =]02:56
viddlivemoon, you may want to look at puppet02:57
viddlivemoon, yoiu have keystone working....02:57
livemoonyes, and you?02:57
viddno...i cant get it working now02:57
livemooncool02:58
n88livemoon: look at cloud-init if you're running ubuntu instances02:58
viddi dont know what i did differently =\02:58
livemoonthanks02:58
livemoonyou are repo+ git?02:58
n88livemoon: I know some people also couple cloud-init with puppet…I have only used cloud-init02:58
viddlivemoon, no...pure Kiall ppa's02:58
livemoonwhat about aother os?02:59
*** supriya_ has joined #openstack02:59
livemoonrhel, centos?02:59
viddi have to be doing something wrong with my converting to keystone, because i can run euca commands before keystone but not after03:00
*** clauden_ has quit IRC03:01
*** dwcramer has quit IRC03:06
*** clauden_ has joined #openstack03:06
*** jdg has quit IRC03:06
*** ejat has joined #openstack03:13
*** ejat has joined #openstack03:13
*** woleium has joined #openstack03:13
*** nati2 has quit IRC03:16
*** clopez has quit IRC03:18
*** dwcramer has joined #openstack03:18
*** ejat has quit IRC03:20
*** miclorb_ has quit IRC03:21
*** ejat has joined #openstack03:21
*** ejat has joined #openstack03:21
*** nati2 has joined #openstack03:22
*** Ryan_Lane has quit IRC03:28
*** cdub has quit IRC03:32
*** miclorb_ has joined #openstack03:34
*** nati2 has quit IRC03:36
*** adjohn has joined #openstack03:37
*** stewart has joined #openstack03:40
*** ldlework has quit IRC03:43
*** mdomsch has joined #openstack03:45
*** haji has joined #openstack03:47
viddlivemoon, where did you get your keystone?03:50
livemoongit03:50
viddin your databse, do you have a "service_id " field for "roles"03:51
Kiallvidd: still have ec2+keystone issues?03:52
Kiallhttp://paste.openstack.org/show/3384/03:52
Kiallthats the client side covered...03:52
Kiallthen, in keystone creds table key = $user:$project and secret = $password03:53
viddKiall, is the region needed?03:53
KiallYea - for some reason it seems to be03:53
KiallBut, its not used by euca commands03:54
Kialland yes, i have service_id column, but all NULL's03:54
*** vladimir3p has quit IRC03:55
KiallIf matching those doesn't work, then make sure your actually using all my PPA packages.. pastebin `dpkg -l | grep -E (openstack|nova|glance|keystone)` and i can check...03:55
viddso NOT $AWSkeys:$prject03:55
KiallI use $username:$project as my $awskey03:56
Kialland $password as my $awssecret03:56
Kiallbut, they can be anything...03:56
Kiallpop in some random uuid's if you like etc03:56
Kiallgive `dpkg -l | grep -E "(openstack|nova|glance|keystone)"` a go, EC2 issues are something fixed in stable/diablo and not the ubuntu packages..03:59
Kiallyou could be using one of those by mistake03:59
viddpasslib 1.5.2-1~openstack0~oneiric103:59
Kiallthere should be a pile more than that ;)03:59
Kiallhttp://paste.ubuntu.com/740843/03:59
*** krow has quit IRC04:00
viddhttp://dpaste.com/657809/04:01
Kiallno openstackx?04:01
viddnope04:01
viddUnpacking openstackx (from .../openstackx_0.2.0~20111021-0mit5_all.deb04:02
Kiallbounce nova-api after its done04:02
viddbounced them all04:03
KiallI wonder if I should just make that a nova-api dependency04:03
*** deshantm_laptop_ has quit IRC04:03
*** deshantm_laptop has joined #openstack04:04
viddKiall, yeah04:04
*** sdake has joined #openstack04:04
*** miclorb_ has quit IRC04:04
Kiallmy nova api-paste http://paste.ubuntu.com/740848/04:04
* Kiall loves the "pastebinit" command ;)04:05
vidd??pastebinit??04:06
Kiallyea .. `pastebinit /etc/nova/nova.conf` or ..  `dpkg -l | grep -E "(openstack|nova|glance|keystone)" | pastebinit`04:07
Kiallit sends it up and pops a URL out04:07
Kiallanyway, any joy with openstackx installed? or my api-paste?04:09
viddnope04:10
Kiallyou used my exact api-paste, with just the service-token changed?04:10
viddyep04:12
viddno joy04:12
viddcan you run euca-describe-availability-zones verbose ?04:12
Kialloh!04:12
viddor is this just something NOT to use as a test =\04:12
Kiall--keystone_ec2_url=http://78.153.XXX.XXX:5000/v2.0/ec2tokens in nova.conf?04:12
viddyes04:13
Kiallyea - euca-describe-availability-zones verbose works04:13
*** misheska has quit IRC04:13
viddKiall, you want to look at my https://github.com/vidd/vidd/blob/master/convert_keystone.sh04:14
viddbefore this peaches and cream...after dead04:14
Kiallmy nova.conf, maybe there is something in it04:14
Kiallhttp://paste.ubuntu.com/740852/04:14
Kiallyou called the repo "vidd" lol ;)04:15
*** robbiew has quit IRC04:15
viddit did it all on its own =\04:16
Kialllies04:16
viddok...so i didit accidentally cuzz i have no idea how this daggone github uploader doodad worked04:17
KiallI don't see anything off in that script..04:17
vidd[and im still not that sure]04:17
Kiallwhat do you have in the keystone credentials table?04:17
viddi did have $EC2_ACCESS_KEY:$proj  and $EC2_SECRET_KEY04:19
Kiallyou should have: user_id = 1, tenant_id = 1, type = EC2, key = admin:admin, secret = password04:19
Kiallassuming user_id=admin04:19
Kialltenant_id=admin04:19
*** wariola has joined #openstack04:19
*** nyeates has quit IRC04:19
Kialladmin's password=password04:19
KiallThats assuming the ENV vars I pasted earlier using04:20
viddthen i changed it to $NOVA_USERNAME:$NOVA_PROJECT_ID and $NOVA_API_KEY04:20
Kiallso, what exactly is in your EC2 vars, and your keystone creds table.. (password blocked out ofc)04:20
*** andrewbogott has joined #openstack04:22
*** nati2 has joined #openstack04:23
viddright now.... creds table is: id =1 user_id =1, tenant_id = 1 type=EC2 key=vidd:viddnet secret= vidd04:23
Kialland EC2 env vars?04:24
*** dolphm has joined #openstack04:24
viddEC2_SECRET_KEY=xxxxxx-xxxx-xxxx-xxxxxx-xxxxxx04:25
Kialluhh04:25
Kiallsorry?04:25
viddEC2_USER_ID=4204:25
KiallStop.04:26
KiallEC2_SECRET_KEY=vidd04:26
KiallEC2_ACCESS_KEY=vidd:viddnet04:26
Kiallworking?04:28
hsomanyone here familiar w/ swift?04:28
hsomi'm having a HELLUVA time gettin git running.  i have some general questions04:29
viddKiall, nope04:29
*** bcwaldon has joined #openstack04:29
viddstill timing out04:29
Kialltiming out?04:29
Kiallsitting there hanging?04:29
vidd2011-11-16 23:28:45,382 euca2ools [DEBUG]:received 500 response, retrying in 2 seconds04:30
Kiallrun it with --verbose (or is it --debug) if its hanging04:30
viddi always do that04:30
viddthats how i know its timing out04:30
Kiallwas this a fresh ubuntu install when you started with the packages?04:30
viddyep04:30
* vidd is not afraid to format a machine [6x a day][04:31
Kiallpastebin /usr/share/pyshared/keystone/middleware/ec2_token.py will ya? ;)04:31
viddhttp://paste.ubuntu.com/740862/04:32
viddwow...that pastebinit IS cool =]04:32
Kiall;)04:32
KiallOkay - that has the fix in it ;)04:32
viddi should hope so...its your stuff =]04:33
Kiallcan you scrap any EC2 env vars you have bar EC2_SECRET_KEY, EC2_ACCESS_KEY and EC2_URL04:33
Kialland, what is your EC2_URL set to?04:33
Kiallthose are the only 3 EC2 vars I have set, and it works for me ;)04:34
KiallMaybe one of the others like EC2_USER_ID=42 is doing something weird04:34
viddEC2_URL=http://192.168.15.200:8773/services/Cloud04:34
Kiallyea - thats right..04:34
viddi dont know how to deep-6 an env =\04:35
Kiallenv --unset EC2_USER_ID etc04:35
vidd=\ wtf04:36
Kiallit works?04:36
viddthats not working04:36
viddthe env is staying04:36
Kialloh .. maybe that command is wrong then¬04:36
*** miclorb_ has joined #openstack04:36
Kiallvidd: sorry its "unset EC2_bla"04:37
hsomswift anyone?04:39
Kiallhsom: sorry, never used it04:39
hsom:(04:39
v0idhsom, answers.launchpad.net/swift04:40
*** Ryan_Lane has joined #openstack04:41
Kiallvidd: unsetting them help?04:42
viddKiall, this is the garbage i get http://paste.ubuntu.com/740868/04:42
Kiallhows the time sync between everything BTW?04:42
viddKiall, maybe i should have you run my scripts in a vm and see if they work for ya =]04:43
Kialllol ..04:43
viddits all on one machine04:43
KiallOr you run mine, they work :P04:43
viddi only have one nic'04:43
Kiallvidd: pastebin your nova.conf04:43
Kiall*maybe* there is something ...04:44
viddi doubt it04:44
*** scottjg has joined #openstack04:44
Kialltry me ;)04:45
viddhttp://dpaste.com/657819/04:45
Kialluhh, I hope dpaste just messed that up?04:46
Kiall--keystone_ec2_url=192.168.15.200:5000/v2.0/ec2tokens04:46
Kiall--ajax_console_proxy_url=http:192.168.15.200//:800004:46
*** cdub has joined #openstack04:47
viddnope...those them04:47
viddurl needs to have http04:47
Kiallexactly.04:48
KiallYour one's dont04:48
*** dolphm_ has joined #openstack04:48
Kialland your console proxy url has slashes in the middle of it ;)04:48
*** bcwaldon has quit IRC04:49
viddalright! we have progress04:50
vidd2011-11-16 23:49:44,508 euca2ools [ERROR]:401 Unauthorized04:50
KiallOMG04:50
KiallThat was the issue -_-04:50
*** dolphm has quit IRC04:50
Kiallwhile (respect > 0) respect--;04:51
vidd?04:51
KiallAnyway, you have EC2_SECRET_KEY=vidd and EC2_ACCESS_KEY=vidd:viddnet now?04:53
viddKiall, yes...in both keystone and env04:54
viddand now i have 401 error04:54
viddat least its not timing out anymore04:55
Kialland what role have you given the user?04:55
*** hadrian has quit IRC04:55
viddall roles04:55
viddadmin, keystoneadmin and member04:55
viddadmin with a Capital A04:56
Kialli have: Admin w/ tenant NULL, Admin w/ tenant 1, KeystoneAdmin w/ tenant NULL, KeystoneServiceAdmin w/ tenant NULL04:56
viddmy user has all 3 roles04:57
KiallYes, but 4 entries in the user_roles table04:57
Kiall(Not sure if they are all needed, but whatever)04:57
viddi only have 3 roles =\04:58
*** hsom has quit IRC04:59
viddAdmin, KeystoneServiceAdmin, Member04:59
Kiallwell 4 roles, of which the user has 2 of them with tenant = NULL and 1 with both tenant = NULL and tenant = 104:59
KiallThats just what I have, frankly, I don't know if they are all needed04:59
*** dolphm has joined #openstack05:00
KiallI stole the devstack sample data..05:00
viddAdmin is needed do euca stuff, member is needed to doe horizon stuff, and keystoneServiceAdmin is not active yet05:00
KiallWell, The devstack sample data works for me.. ;)05:02
Kiallhttps://github.com/managedit/openstack-setup/blob/master/keystone_data.sh.tmpl05:02
Kiall(they devstack one has changed recently)05:02
*** dolphm_ has quit IRC05:03
livemoonhi05:03
livemooni am back05:03
viddis --FAKE_subdomain=ec2 needed?05:05
Kiallnope.05:05
Kiallmy nova.conf - http://paste.ubuntu.com/740852/05:05
*** dwcramer has quit IRC05:08
viddKiall, i fixed my typo's you want to take my scripts for a spin in a VM?05:08
*** vladimir3p has joined #openstack05:09
KiallI'd much prefer you try the devstack sample data before I go to all that effort ;)05:09
*** nati2 has quit IRC05:12
*** miclorb_ has quit IRC05:13
*** dolphm has quit IRC05:15
hajican you tell me anything about cloudaudit? when can i use it with openstack05:15
*** sandywalsh_ has quit IRC05:16
*** Ryan_Lane has quit IRC05:17
*** dolphm_ has joined #openstack05:25
*** CaptTofu has joined #openstack05:26
viddKiall, so, there is some thing in that data that works05:27
Kiall?05:27
KiallAs in, you have it working?05:27
viddi have to figure out what it is because i cant use garbage data05:27
Kialldelete the user_roles entries 1 at a go from the DB, restarting KS after each go..05:28
Kiallmight tell you ;)05:28
viddor...just add this KeystoneAdmin role05:30
Kiall;)05:30
viddyou think it would be nice of the ppl that put these apps together to be so kind as to pre-load required roles when you first fire up the app =\05:31
KiallI'm pretty sure they accept patches ;)05:31
viddi'll take a combat ribbon =\05:32
viddoh...and the garbage data didnt work out of the box either05:33
Kiallactually, you can barely use git.. you probably shouldn't bother trying to submit a patch with gerrit ;)05:33
Kialldoes for me :P05:33
*** Satya has joined #openstack05:33
viddi had to completely dump the entire database an load it fresh05:34
viddand manually add the endpoints05:34
viddand the passwords were messed up05:34
viddbut....other than that!05:35
viddworked like a charm05:35
Kiallwell, at least it works ;)05:36
viddso...my issue is not with the convert...its with the template load05:36
viddno...it doesnt work....it functions05:37
Kiall..and the convert mucks up nova.conf ;)05:37
viddno...the nova-preload mucked up the nova config05:37
*** chomping has quit IRC05:38
viddthe convert just turned the broken piece on05:38
viddand apparently, the ajax thing wasnt even in the mix =]05:38
Kiall;)05:39
viddso...i think my issue with my keystone_template is just the missing KeystoneAdmin role05:46
viddi think everything else is golden05:46
viddoh...and i have to pull the prompt for a password05:46
*** v0id has quit IRC05:53
*** rnorwood has joined #openstack05:53
*** haji has quit IRC05:54
*** rsampaio has quit IRC05:58
*** deshantm_laptop has quit IRC06:00
*** brian_sc has joined #openstack06:02
*** rnorwood has quit IRC06:03
*** brian_sc has left #openstack06:03
*** nerens has joined #openstack06:07
*** vladimir3p has quit IRC06:07
*** sophiap has quit IRC06:09
*** dolphm_ has quit IRC06:28
*** dolphm has joined #openstack06:30
*** supriya_ has quit IRC06:32
*** kaigan has joined #openstack06:33
viddKiall, you still here?06:34
*** andrewbogott has quit IRC06:35
*** objectiveous has joined #openstack06:36
*** objectiveous has left #openstack06:36
livemoonhi06:37
viddhello livemoon06:38
livemoonvidd06:38
livemoonI remove 70-persistent-net.rules, but after reboot it is created06:39
viddok....i have no idea what you mean06:40
livemoonoh06:40
*** guigui1 has joined #openstack06:43
*** CaptTofu has quit IRC06:44
*** wariola has quit IRC06:45
*** shaon has joined #openstack06:49
*** jedi4ever has joined #openstack06:52
*** wariola has joined #openstack06:53
*** Bryanstein has quit IRC07:00
*** jog0 has quit IRC07:02
*** mnour has quit IRC07:02
*** mindpixel has joined #openstack07:07
*** dolphm has quit IRC07:08
*** wariola has quit IRC07:09
*** obino has joined #openstack07:09
*** woleium has quit IRC07:14
*** mgoldmann has joined #openstack07:14
*** wariola has joined #openstack07:21
*** shaon has quit IRC07:22
*** wariola has quit IRC07:23
*** wariola has joined #openstack07:27
*** matt_ has joined #openstack07:28
*** matt_ is now known as Guest5702707:28
*** dolphm has joined #openstack07:28
vidddolphm, hello07:29
vidddolphm, you had expressed an interest in my scripts some hours ago...i was wondering if you had an opertunity to look at them07:31
*** dolphm has quit IRC07:32
*** wariola has quit IRC07:33
*** Guest57027 has left #openstack07:34
*** lucrecius has joined #openstack07:36
*** jksd has joined #openstack07:38
*** lucrecius has left #openstack07:39
*** Bryanstein has joined #openstack07:40
*** vidd is now known as vidd-away07:45
*** wariola has joined #openstack07:46
*** jksd has left #openstack07:47
*** adjohn has quit IRC07:55
*** wariola has quit IRC07:57
*** shaibn has joined #openstack07:58
*** mrevell has joined #openstack08:01
*** lucrecius has joined #openstack08:03
livemoonhi08:04
*** MarkAtwood has quit IRC08:04
*** vladimir3p has joined #openstack08:04
*** derjohn_mob has joined #openstack08:07
*** wariola has joined #openstack08:07
*** vladimir3p has quit IRC08:09
*** lucrecius has quit IRC08:09
*** sophiap has joined #openstack08:10
*** jog0 has joined #openstack08:18
*** MarkAtwood has joined #openstack08:19
*** Satya has quit IRC08:20
*** mrevell has quit IRC08:21
*** TheOsprey has joined #openstack08:25
*** vernhart has joined #openstack08:27
*** vernhart1 has quit IRC08:30
*** foexle has joined #openstack08:31
foexlehiho08:31
*** jog0 has quit IRC08:33
*** superjudge_ has joined #openstack08:33
*** shaon has joined #openstack08:37
*** katkee has quit IRC08:38
*** redconnection has joined #openstack08:42
*** nacx has joined #openstack08:42
*** alekibango_ has quit IRC08:43
*** alekibango_ has joined #openstack08:43
*** chemikadze has quit IRC08:46
*** chemikadze has joined #openstack08:48
*** pixelbeat has joined #openstack08:52
*** Razique has joined #openstack08:54
*** PotHix has joined #openstack08:56
*** koolhead17 has joined #openstack08:56
*** koolhead17 has joined #openstack08:57
*** superjudge_ has quit IRC08:58
*** superjudge_ has joined #openstack08:58
*** TreeStump has joined #openstack09:06
*** javiF has joined #openstack09:12
*** epic_k has quit IRC09:15
*** dobber has joined #openstack09:19
*** javiF has quit IRC09:19
*** javiF has joined #openstack09:19
*** cdub has quit IRC09:21
*** foexle has quit IRC09:22
*** foexle has joined #openstack09:22
*** darraghb has joined #openstack09:23
koolhead17hi all09:23
livemoonhi,koolhead1709:24
koolhead17hi livemoon09:24
livemoonhave you think use openstack as replace traditional datacenter arch09:25
livemoonfor example. replace LAMP in one machine09:29
*** shaon has quit IRC09:31
*** clopez has joined #openstack09:33
*** scottjg has quit IRC09:34
*** reed has quit IRC09:37
Raziquehi all09:39
livemoonhi09:39
livemoonRazique09:39
*** cdub has joined #openstack09:40
*** clopez has quit IRC09:40
*** saju_m has joined #openstack09:41
*** flamboz has quit IRC09:44
*** ejat has quit IRC09:47
koolhead17hey Razique09:49
*** smulcahy has joined #openstack09:49
smulcahymorning09:49
smulcahyis there any pointers to a minimum spec for a small openstack test cluster?09:49
guaqua_what kind of stuff do you wont to do?09:50
smulcahywould 1 x cloud controller, 1 x storage and 3 x compute node be reasonable?09:50
guaqua_just nova or also swift?09:50
guaqua_nova needs 2 nodes09:50
smulcahyquaqua_: basically r&d to figure out if the stuff we're running on ec2 atm could be moved onto a private cloud09:50
guaqua_nova = compute, swift = storage09:51
*** guaqua_ is now known as guaqua09:51
smulcahyso need something that could be migrated to semi-production at some stage09:51
smulcahyI guess I want to run both nova and swift so?09:51
guaquayou probably want 3 separate nodes for tsorage09:51
smulcahydo I need swift for a small private cloud?09:51
guaquaand run proxy on some or all of them09:51
smulcahyor it is only if I want s3 type functionality?09:51
guaquayep09:51
foexlehi Razique09:52
guaquano need if you don't store lots and lots of data09:52
smulcahyah ok09:52
smulcahystill, I guess we need to play around with it anyway09:52
guaquaif you move in the under-terabyte -range09:52
guaquaor just don't need scaling just yet09:52
smulcahywe do terabytes well here09:52
Raziquehey foexle09:52
guaquahmm09:52
Raziquekoolhead17: livemoon what's up ?09:52
smulcahyso maybe worth spec'ing some storage anyway09:52
*** katkee has joined #openstack09:53
smulcahyso 1 x cc, 2 x nova and 1 x swift would give a working minimal config?09:53
guaquain general, you want 3 replicas, which means 3 zones, which means at least 3 nodes for storage09:53
*** reed has joined #openstack09:53
smulcahyah ok09:53
koolhead17Razique, fighting with proxy to enable pip install :P09:53
guaquayou can run swift on a single node as well09:53
guaquayou just need to scale it up later, set it up again09:53
smulcahyright09:53
smulcahyyeah, thats do-able and maybe better initial use of hw09:54
guaquahaven't tried myself, if you can actually up the number of replicas09:54
guaquaif you do just 1 replica and 1 storage node running everything09:54
guaquaand then incrementally add more to the cluster and rebalance it09:54
guaquayou can add more nodes to a running cluster in general, but changing the replica count is sort of 'undefined' but what i understood is that it's just not a common use case09:55
guaquarunning 1 storage nodes just doesn't give you redundancy, but you can test all the interfaces and all that09:55
guaquado the integration part09:55
guaquaand then dive into swift specifics later on09:56
guaquahopefully someone else provides their opinion aswell :)09:56
guaquai'm not running a production setup, yet09:56
ogelbukhi'm sorry, but couldn't we have 3 replicas on one server?09:56
smulcahythats a good start anyway, thanks a lot for the feedback09:56
guaquaogelbukh: well, yes. taking 3 times the disk space :)09:56
ogelbukh^)09:57
uvirtbotogelbukh: Error: ")" is not a valid command.09:57
livemoonkoolhead17 , Razique: have you used swift?09:57
ogelbukhbut easier to scale later09:57
guaquayou can run many "nodes" on a single host09:57
Raziquelivemoon: nope, never09:57
guaquayeah, easier to scale later09:57
ogelbukhok09:57
ogelbukhthanks )09:57
ogelbukhjust wanted to clarify09:57
guaquayeah09:57
smulcahyin terms of machine spec09:58
smulcahywhat are people running here typically?09:58
smulcahydual quad core, 32GB ram type machines?09:58
smulcahyor bigger/smaller?09:58
ogelbukhi'm working on a pretty same configuration now ) one node for swift to be scaled later09:58
guaquayou should look at what rackspace runs09:58
guaquaogelbukh: you have multiple storage nodes on one physical node?09:58
ogelbukhi'm evaluating this possibility right now )09:59
guaquaokay :)09:59
smulcahyhttp://www.referencearchitecture.org/hardware-specifications/09:59
smulcahyhhmm09:59
guaquagood to hear others doing this stuff09:59
guaquai'm planning a 4 node start for a swift cluster09:59
*** troya has joined #openstack09:59
smulcahynot sure the budget will stretch for nodes with 96GB of ram just now09:59
smulcahy:)09:59
guaquaram is mostly for memcached if i understand correctly10:00
guaquaand disc cache10:00
reidracguaqua: 4U storage nodes with 24 disks are very popular :)10:00
guaquai'm thinking of going for something a lot less radical10:00
reidrac4 storage nodes, and a couple of proxies it's a good start for a production cluster10:01
guaquastarting small and replacing them when we have actual billing10:01
reidracthere's a problem with that, because you can't change the number of partitions in the ring10:01
troyahi all10:01
guaquareidrac: i.e. can't have different kind of nodes in the ring or?10:02
reidracyou can start with a large number of partitions because you expect to add drives later10:02
troyahi reidrac10:03
reidracguaqua: yes you can, but the number of partitions can be changed once the ring is created10:03
guaquacan or can't be?10:03
guaquaisn't this just a planning decision, not as much a technical one?10:03
reidracyou can have different kind of nodes10:03
guaquai.e. plan for x amount of storage?10:04
reidracthe main planning issue with swift is that you need to calculate how many partitions you want to have in advance10:04
reidracand that value is important because if p is partitions and s is cluster size, p is constant10:05
reidracso if you increase s, that means the partitions will be bigger... but not that you'll have more partitions10:05
reidracans that affects directly to the replication10:05
reidrac*and10:05
livemoonhi, troy10:05
guaquaslower replication?10:05
livemoonsee you once in the morning and see another time in the evening10:06
reidracif you partitions are too big, that would mean that in the event of losing a data (ie. three disks broken in three different zones)10:06
reidracyou'll lose more content10:06
guaquauhh. i need to clear this stuff up for myself. the concept of a partition isn't quite clear enough10:06
reidracand yes... I guess replication performance can be affected10:06
*** MarkAtwood has left #openstack10:07
reidracguaqua: I agree. It's not a disk partition but a logical partition inside the cluster10:07
guaquahmm. so, basically, you'd like to have partition size optimized so that they are not too small and not too large10:08
reidracyep10:08
reidracbased in the maximum size of your cluster10:08
guaquahaving them too small means overhead, having them too large makes the probability of losing a partition due to a disk failure higher10:08
reidraclet's say you're using 4U 24 disks storage nodes with 2TB disks10:08
*** Satya has joined #openstack10:09
reidracyou can do the maths based on the probability of disk failure, the number of storage nodes, the number of replicas10:09
SatyaHi all10:09
reidracand guess an average file size10:09
Satyai have some issue10:09
reidracetc10:09
reidrac:D10:09
guaquareidrac: okay10:10
guaquareidrac: this is good stuff10:10
Satyaif a instance is rebuilded from a image which is in saving state its goes to rebuild state after if it rebuilded with an active state good image it fails to come to active state10:11
reidracguaqua: swift is pretty cool when something goes wrong, but getting the numbers right it's definitely very important10:11
guaquareidrac: okay10:11
Satyaand stays in rebuild state always10:11
guaquareidrac: what kind of cluster are you running?10:11
guaquaand for what use?10:11
reidracwe have different clusters at the moment, but we when with 4 zones and 3 replicas based on our numbers10:12
Satyaany help on it !! is it a possible bug?10:12
reidracie. the expected probability of disk failure10:13
*** donatello92 has joined #openstack10:13
smulcahythanks all for feedback10:13
*** smulcahy has quit IRC10:13
reidracs/when/went/10:13
reidracguaqua: docs recommends a hw spec from rackspace experience, it's worth looking at it!10:14
*** reed has quit IRC10:14
ogelbukhreidrac: thanks for hints!10:14
*** miclorb_ has joined #openstack10:16
guaquareidrac: yeah, i'll go over it again :)10:16
guaquareidrac: and thanks for this! very good stuff10:16
reidracyou're welcome10:16
*** clopez has joined #openstack10:18
*** nerens has quit IRC10:19
*** dirkx_ has joined #openstack10:21
*** nerens has joined #openstack10:23
*** donatello92 has left #openstack10:24
*** dirkx_ has quit IRC10:24
*** dirkx_ has joined #openstack10:25
*** dpippenger has quit IRC10:25
*** Frodent has joined #openstack10:26
*** FroMaster has quit IRC10:26
*** aliguori has quit IRC10:26
Raziqueanyone have succeed in instances suspend ?10:27
*** aliguori has joined #openstack10:27
*** redconnection has quit IRC10:27
*** dpippenger has joined #openstack10:28
*** troya has quit IRC10:28
koolhead17Razique, i think i did, when i used from source10:29
Raziquethe novaclient or nova-compute ?10:29
koolhead17nova-compute10:30
Raziquegood to know10:32
*** dirkx_ has quit IRC10:32
*** superjudge_ has joined #openstack10:33
*** Satya has quit IRC10:37
*** donatello92 has joined #openstack10:42
*** donatello92 has left #openstack10:43
*** Satya has joined #openstack10:45
koolhead17Razique, did horizon added few deps as well?10:45
koolhead17new10:45
Raziquedeps ?10:46
livemoonhi10:46
Satyahi10:46
livemoonwho knows git and puppet well?10:46
*** livemoon has left #openstack10:49
*** GheRivero has joined #openstack10:50
*** wariola has quit IRC10:51
*** ahasenack has joined #openstack11:04
*** vernhart1 has joined #openstack11:09
Raziqueok guys i found out the suspend issue11:09
RaziqueI needed to update etc/apparmor.d/usr.lib.libvirt.virt-aa-helper11:10
Raziqueand add this http://paste.openstack.org/show/3385/11:10
*** vernhart has quit IRC11:12
*** livemoon has joined #openstack11:13
livemoonhi11:13
*** viraptor has joined #openstack11:14
*** adjohn has joined #openstack11:15
viraptorhow does the 'osapi_extension' flag work? I see there's a "magic" extension "standard_extensions" which loads everything else, but if I wanted to load only some specific ones, what would I have to put there? list of extension classes, or modules?11:15
*** livemoon has quit IRC11:27
*** adjohn has quit IRC11:37
*** vernhart1 has quit IRC11:38
*** FloFri has joined #openstack11:41
FloFrihello everyone, its me again ^^ . have still the problem with the metadata injection11:42
FloFriRazique: are you there?11:42
*** cdub has quit IRC11:48
*** dirkx_ has joined #openstack11:51
*** livemoon has joined #openstack11:57
*** FloFri has quit IRC11:57
*** miclorb_ has quit IRC12:01
* koolhead17 getting dumber as day progressing :(12:02
koolhead17when am using keystone for dashboard, i have to do a syncdb and provide user credentials how are they handled in kestone?12:03
koolhead17**keystone12:03
livemoon12:05
foexlekoolhead17: credentials12:06
foexletable12:06
koolhead17foexle, of keystone ?12:06
foexleyep12:06
foexleits for assotiation of keystone and nova12:07
foexle-of + for12:07
*** PeteDaGuru has joined #openstack12:07
koolhead17foexle, but when am installing dashboard without keystone i had to run syncdb for credentials.12:07
*** vdo has joined #openstack12:08
foexlehmmm i think dashboard will not run wihtout keystone auth12:08
foexlebecause you need to login (Username/PW) dashboard send this creds to keystone and keystone look in the credentials table which access and private key this user has in nova12:09
koolhead17my question is the file local_settings.py12:10
koolhead17OPENSTACK_KEYSTONE_URL = "http://localhost:5000/v2.0/"12:11
koolhead1712:11
foexlei dont know if is possible to sync the novadb creds to keystone with a command12:11
koolhead17OPENSTACK_KEYSTONE_ADMIN_URL = "http://localhost:35357/v2.0"12:11
foexleahhhh :D12:11
koolhead17will point to my keystone server12:11
foexleyes thats right12:11
foexledont forget the last slash !12:11
*** katkee has quit IRC12:18
*** katkee has joined #openstack12:18
*** praefect has joined #openstack12:19
*** vdo has quit IRC12:23
*** tryggvil_ has quit IRC12:31
*** stewart has quit IRC12:32
Raziqueback12:39
*** reed has joined #openstack12:41
foexleRazique: wb12:42
pvofoexle: there was a script to take the novadb creds and put them into keystone but it probably hasn't been touched in a while and keystone has gone through some changes.12:42
foexlepvo: oh yes ? where i can find this script ?12:43
pvoit was a nova-manage option. looking it up right now.12:43
foexleah ok .... i'll find it thanks12:44
pvo./bin/nova-manage shell export12:44
pvobut it looks broken12:44
pvoso, no help there. sorry12:44
*** marrusl_ has joined #openstack12:45
foexlehmmm12:45
foexleok12:45
pvoit may just need some tweaking to fix it though12:45
*** marrusl_ has quit IRC12:46
*** Oneiroi has joined #openstack12:46
*** katkee has quit IRC12:48
livemoonhi12:50
*** tryggvil_ has joined #openstack12:50
Oneiroiok finally for 2 x 6.1 boxes built have nova installing now :)12:50
Oneiroionly taken a couple months ><12:50
livemoonhas anyone use openstack with puppet?12:50
pvolivemoon: yea a few people do.12:51
livemoonpvo: use puppet deploy instance?12:51
livemoonor deploy node?12:51
pvoto deploy nodes that run openstack.12:51
livemoonI want to deploy instances12:51
pvoI don't use it to boot an instance12:51
livemoonif I have a linux image, I send "user data" to it when it is be started, and some puppte command in 'user data',12:52
*** osier has quit IRC12:52
livemoonthen instance can do something,ie: install LAMP12:53
pvosomething like that could work12:54
livemoonI think it can but I havenot do it12:54
*** vidd-away is now known as vidd12:54
viddKiall, ae you here?12:55
livemoonvidd: you are get up?12:55
pvosomething may have to call the script after you get it booted12:55
pvoyou can pass it in, but you'll have to find a place that it will exe on boot12:55
pvofor your distro12:55
pvoor ssh in and exe it after it is pinging12:55
viddyeah ... time to get the kid off to school12:55
livemoonin nova, there is 'user_data'12:56
livemoonI think it can work12:56
livemoonmorning vidd12:56
viddwho knew one child [age 6] could sound like a herd of elephants?12:56
*** dwcramer has joined #openstack12:56
livemoonvidd: ah12:56
koolhead17am i doing sumthing wrong http://paste.ubuntu.com/741131/12:57
livemoonkoolhead17: I also have this case12:57
koolhead17livemoon, what is the solution?12:58
livemoonno, I just reinstall12:58
livemoonhave you use "sudo python setup.py install"12:58
livemoonplease try to use "sudo python setup.py develop" replace "install"12:59
*** katkee has joined #openstack13:00
*** dprince has joined #openstack13:03
koolhead17livemoon, ok. let me see it again :)13:06
viddkoolhead17, what i do is first do python setup install in the django-openstack folder13:07
*** chemikadze has quit IRC13:07
koolhead17ok13:08
viddthen do the python setup.py install in the openstack-dashboard folder13:08
viddand i never use the with_venv.sh13:09
*** Razique_ has joined #openstack13:09
* vidd thinks keeping somethig with "magic reaches" into your stuff should not be "protected" from automatic security updates13:10
koolhead17and yes am uing lucid 10.0413:10
*** zparta has quit IRC13:10
koolhead17:)13:10
viddkoolhead17, should not matter....in theory, you can use the git meathod on windows13:11
koolhead17indeed13:11
*** pradeep has joined #openstack13:12
*** Razique has quit IRC13:12
*** Razique_ is now known as Razique13:12
koolhead17i remember last time i had to only sudo sh run_tests.sh13:13
koolhead17and everything worked for me13:13
*** yogi_ has joined #openstack13:15
*** zparta has joined #openstack13:16
*** kbringard has joined #openstack13:18
*** dwcramer has quit IRC13:20
*** mdomsch has quit IRC13:21
viddok so i thin i have an issue with glance now =\13:22
livemoonwhat?13:22
viddi cant get anything to upload to it13:23
livemoonwhat error?13:24
Oneiroinova.exception.ClassNotFound: Class Client could not be found: No module named dec :-/ *joy*13:25
vidderror: [Errno 111] ECONNREFUSED13:25
livemoonglance-api13:26
viddfull text here:http://dpaste.com/658079/13:27
livemooncheck glance-api process13:27
livemoonps aux | grep glance13:27
livemooncheck your keystone process13:27
viddall good there13:28
*** daniel__ has joined #openstack13:30
livemoonnetstat -lntp13:31
livemoonall port is open?13:31
viddhttp://dpaste.com/658080/13:32
daniel__hello .... could anyone give me a hint if it is possible to activate the ec2 api in an openstack installation with keystone ... is that possible ... and if yes, where do i have to configure that?13:32
vidddaniel__, yes...it is possible13:32
viddeverythig work elsewhere?13:33
livemoonvidd: have you change anything in glance?13:33
livemoonand can it upload well before?13:33
viddlivemoon, i set the flags to keystone...but other than that no13:33
viddno..never tried to upload13:34
livemoonset your glance-registry.conf and glance-api.conf13:34
vidddaniel__, make sure your user is set to admin role with NO tenant set13:34
livemoonno set , paste13:34
daniel__yeah ... everything else works .... nova-api works fine ... dshboard and glance as well .... i also have set ec2 credentials in keystone ... but ehn i start keystone ... the only api's that are started are the nova service and nova admin api ... not the ec213:35
foexlevidd: really ? no tenant ? if i look in the keystone db i see a tenant is set in the user table13:35
foexlevidd: if i set to NULL i cant login anymore via dashboard13:36
viddand add a credential as such "credentials add $NOVA_USERNAME EC2 $EC2_ACCESS_KEY $EC2_SECRET_KEY $NOVA_PROJECT_ID13:36
*** dwcramer has joined #openstack13:36
viddfoexle, your user needs to be in the "member" role to use dashboard13:37
koolhead17vidd, you used mysql or sqlite for as database 4 dashboard13:37
koolhead17?13:37
viddkoolhead17, mysql13:37
*** pradeep has quit IRC13:37
koolhead17vidd, and you install python-mysql from ubuntu pkg ?13:37
livemoonI am ready to sleep13:38
koolhead17am having same issue again13:38
foexlevidd: yeah he is ... but without a tenant id, i don't get a login13:38
koolhead17livemoon, see ya13:38
daniel__user is set to admin with no tenant13:38
foexlelivemoon: bye13:38
viddfoexle, its the "add user roles" section that you skip the tenant....not the add user" section13:39
livemoonvidd: it seems your glance never connect to keystone13:39
livemoonvidd: try to use glance -A token index13:39
livemoonto see if it is the same error13:39
daniel__vidd, is there any tutorial how to start keystone with ec2?13:39
viddlivemoon,  yep13:40
vidddaniel__, no13:40
viddi just told you how13:40
livemooni think your glance config need to modify13:40
daniel__i had an installation via devstack .... users roles are good i think and ec2 credentials are set via credentials add13:41
vidddaniel__, do your EC2 creds match your ENV??13:41
*** deshantm_laptop has joined #openstack13:41
daniel__vidd, i think so ... but i dont even know where the ec2 endpoint is ... i diddnt set it in any configfile ... and after i start keystone there seems to be nothing at port 877313:43
vidddaniel__, run this keystone-manage credentials add $NOVA_USERNAME EC2 $EC2_ACCESS_KEY $EC2_SECRET_KEY $NOVA_PROJECT_ID13:43
daniel__okay ... ill try that ... thanks for the moment13:44
viddno substitutions...just copy paste as is13:44
*** dwcramer has quit IRC13:44
viddit will pull the info from yoiur ENV so they match13:44
daniel__from the .../keystone/bin dir?13:44
viddand [in theory] you will be able to use EC2 commands13:45
vidddaniel__, if keystone-manage is not already in your path...yes13:45
daniel__hmm ... ERROR: Unable to locate any configuration file. Cannot load application admin13:46
vidddaniel__, is you keystone even up?13:47
daniel__yes .. dashboard works nova api woks13:48
*** alekibango_ has quit IRC13:48
daniel__works13:48
*** alekibango_ has joined #openstack13:48
foexlecan i use swift (cli) with keystone ? .... the keystone doc say yes, but i get a url parsing error13:50
vidddaniel__, what command did you enter?13:50
daniel__localadmin@openstackmaster:/opt/stack/keystone/bin$ keystone-manage credentials add $NOVA_USERNAME EC2 $EC2_ACCESS_KEY $EC2_SECRET_KEY $NOVA_PROJECT_ID13:50
vidddaniel__, whay os?13:52
daniel__ubuntu server 11.0413:52
daniel__openstack installation via devstack13:53
*** ldlework has joined #openstack13:53
vidddrop the /opt/stack/keytone/bin$ crap13:54
viddkeystone is in your path13:54
viddyou can run this command from anywhere on your system13:54
daniel__hm okay ...13:56
daniel__... but that doesnt change the behaviour .... just get that error http://pastebin.com/PevncuDN13:58
daniel__and that is the output after starting keystone ... http://pastebin.com/2P3N2FWh14:00
*** dwcramer has joined #openstack14:00
vidddaniel__, copy your keystone config file (wherever you currently have it) to /etc/keystone (you may need to mkdir that folder first)14:00
n88vidd: hello…did you ever get your keystone working?14:01
*** hadrian has joined #openstack14:02
daniel__keystone is installed in /opt/stack and not systemwide ....but okay ... ill try that ;)14:02
*** redconnection has joined #openstack14:02
livemoonyou can set you own $DEST rather than /opt/stack14:02
viddn88, yep...turns out that when you assign your user the "Admin" role, he CANNOT have a tenant specified14:02
livemoonvidd14:03
daniel__SUCCESS: Credentials admin created.14:03
vidddaniel__, it IS installed systemwide14:03
daniel__Yeah! Sounds good ...14:03
livemoondo you knonw 'user_data' in nova?14:03
viddlivemoon, not sure what you mean14:04
*** ldlework has quit IRC14:04
vidddaniel__, it just didnt know where to find its config file14:04
livemoonwhen you see dashboard launch instance14:05
livemoonthere is a field name 'user data'14:05
livemoonIt seems can input data to the instance14:05
daniel__vidd, yes .. thats correct thanks! ... and now the ec2 endpoind is http://<ip>:8773/services/Cloud ??14:05
viddby default it looks "/etc/keystone/ then /etc , then ~/keystone, then ~/14:05
praefectlivemoon: I use user_data to configure instances on the fly14:05
praefectlivemoon: I pass the user data through hybridfox, and the the VM reads this user_data and acts accordingly (self-config)14:06
vidddaniel__, no...no endpoint needed14:06
livemoonpraefect: cool14:06
daniel__how does the eucatools or any other ec2 client knows how to communicate?14:06
livemoon"user data" just set command in it?14:07
praefectlivemoon: you can also pass binary files in user_data, https://help.ubuntu.com/community/CloudInit I use it with ubuntu and also windows instances14:07
vidddaniel__, EC2 already knows how to to the stuff...it just needs the nod from keystone14:07
livemoonpraefect: what about centos or rhel?14:08
vidddashboard has no clue how to do euca stuff...so it needs an endpoint from keystone14:08
praefectlivemoon: check the link I sent you, it's basically a BLOB, you can pass whatever you need and receive it on the other side, there is a strict limit (1MB I think)14:08
livemoonpraefect: thanks14:08
daniel__vidd ... no not for dashboard ... ill try to run a ec2 api to use eucatools with openstack14:09
* koolhead17 kicks himself14:09
praefectlivemoon: basically, any OS you have, you just need to query http://169.254.169.254/latest/metadata/user_data (or something like that), and the cloud will return the user-data you passed to this particular instance, you then do whatever you want14:09
vidddaniel__, you dont understand.....14:09
praefectlivemoon: it's just well documented and well organised in ubuntu but obviously you can do it with any system14:10
livemoon:)14:10
daniel__vidd, kinda ;) sry ...14:10
daniel__so how could i connect a ec2 client to keystone?14:10
vidddaniel__, endpoints are for application A to talk to application B14:11
vidddaniel__, you already did14:11
viddyour done14:11
viddit should work14:11
*** msivanes has joined #openstack14:11
*** ldlework has joined #openstack14:11
*** msivanes has left #openstack14:12
livemoonbye,all'14:12
daniel__what is with EC2_URL in my ENV14:12
livemoonsee you tomorrow14:12
praefectlivemoon: ciao14:12
vidd?14:13
vidddaniel__, what do you mean?14:13
daniel__i cant understand how to configure the eucatools to connect to keystone ....14:13
*** livemoon has left #openstack14:13
daniel__or for exaple hybridfox ....14:13
daniel__example14:13
vidddaniel__, does dashboard work?14:14
daniel__yes14:14
daniel__worked all the time14:14
viddso that means euca is ALREADY configured to work with keystone14:14
viddacually...i should say keystone knows how to work with euca =]14:15
daniel__so could i use a ec2 client now to use the cloud?14:15
daniel__for example hybridfox from another host ....14:16
vidddaniel__, yes...in theory14:16
viddyou test by doing it from CLI14:16
daniel__and every ec2 client needs an EC2_URL14:17
daniel__or am i wrong?14:17
*** rods has joined #openstack14:17
viddthe url you need you can find [assuming your local CLI works] by typing env |grep EC2_URL=http14:18
daniel__that is the url i set in my .bashrc14:19
daniel__for example ... that command:14:19
*** msivanes has joined #openstack14:19
daniel__euca-describe-availability-zones14:19
daniel__diddnt work14:19
vidddaniel__, thats because the command is euca-describe-availability-zones verbose14:20
daniel__no the command diddnt even end ..14:21
*** foexle has quit IRC14:21
daniel__no output ... and i have to ctrl+c it14:21
daniel__after ctrl+c that error occurs http://pastebin.com/DNHmutrW14:22
*** ejat has joined #openstack14:22
*** ejat has joined #openstack14:22
viddthen you either do not have a user  $NOVA_USERNAME in your keystone database, or he is not set to the "Admin" role or he IS set to the "Admin" role and his tenant was included14:23
daniel__okay14:24
koolhead17yeah14:24
viddkoolhead17, so how you doing?14:25
koolhead17vidd, same error14:25
daniel__in the keystone database ..... there is a user admin .... the following way:14:26
vidddaniel__,14:26
viddi did not ask about your admoin user14:26
viddi asked about the user we gave credentials to14:26
vidddaniel__, do you have a "Role" = "Admin"14:27
daniel__yes .. with id 114:28
viddCapital A not lower case a14:28
viddbecause "Admin" != "admin"14:29
*** andrewbogott has joined #openstack14:30
vidddo you have a user that is the same as your  $NOVA_USERNAME from your "env |grep NOVA14:30
*** deshantm_laptop_ has joined #openstack14:30
daniel__oh ... thats it! I have Admin14:30
daniel__no ... Admin is what i have to have, right?14:31
vidddaniel__, dont get ahead of me14:31
*** deshantm_laptop_ has quit IRC14:32
*** deshantm_laptop_ has joined #openstack14:32
viddlets look at "roles" first14:32
viddis there a role "Admin"14:33
*** deshantm_laptop has quit IRC14:33
*** deshantm_laptop_ has quit IRC14:34
daniel__http://pastebin.com/3qyKa5zx that are the database tables14:34
*** deshantm_laptop has joined #openstack14:34
vidddoes  $NOVA_USERNAME = admin or demo?14:35
*** dwcramer has quit IRC14:36
daniel__that are my exports http://pastebin.com/5QgU9cjc14:36
daniel__so direct to your question ... $NOVA_USERNAME = admin14:37
n88vidd: in your nova.conf files, you DO NOT have --use_deprecated_auth Correct?14:39
viddn88 correct...but Kiall does14:39
*** jaypipes has joined #openstack14:39
msivanesping bdill14:40
*** hadrian has quit IRC14:40
n88vidd: does Kiall have his nova.conf posted somewhere? i wanted to suggest he put it up on git since it would be pretty useful to see14:41
daniel__maybe i have to restart nova? now that keystone knows where its config is?14:41
vidddaniel__,  do you have in user_roles table "user_id =1 role_id=1 tenant_id-NULL?14:41
daniel__i just saw that there is a flag in nova.conf: --ec2_url=http://172.22.161.101:8773/services/Cloud14:42
daniel__and I DO NOT have --use_deprecated_auth14:42
n88vidd: so I know this may be repeating yourself…but what were all the modifications you had to make to Kiall's scripts/setup to get things working?14:42
daniel__no i have 1, 1, 1, 114:43
vidddaniel__, there is your issue14:43
daniel__could i just change that in the database?14:43
viddtenant MUST = NULL for the Admin role14:43
viddyes14:43
daniel__or by keystone-manage?14:43
n88vidd: you mean under the token table?14:44
viddn88, check out my scrips on gethub14:44
n88ok sure…what's your linky?14:44
n88vidd: also…what exactly are 'tenants'? I understand users and roles…but tenants…is that like 'projects'?14:44
viddn88 https://github.com/vidd/vidd14:45
viddn88, be warned...my glance currently does NOT work14:45
vidddaniel__, do it right from the database14:45
n88vidd: it's ok….I feel like it's the pushme-pullme from Dr. DoLittle (if that reference makes sense)14:46
n88you get one thing working, something else may break14:46
n88but I'll get it14:46
*** rsampaio has joined #openstack14:47
viddn88 and if you catch something PLEASE let me know!14:47
*** bryguy has quit IRC14:47
*** lorin1 has joined #openstack14:47
n88vidd: also what's the api-paste-nova? What's that file? Do I need it? Where does it go?14:48
viddn88 my scripts take it, customize it for you and put it into your /etc/nova/api-paste.ini14:49
viddn88, dont forget to read the README!14:51
*** hadrian has joined #openstack14:51
*** bryguy has joined #openstack14:51
*** Oneiroi has quit IRC14:53
*** Oneiroi has joined #openstack14:53
*** Oneiroi has quit IRC14:53
*** Oneiroi has joined #openstack14:53
praefectI'm setting up keystone... when I had endpointTemplates, do I have to enter %HOST_IP% or the actual IP of my server?14:53
*** Oneiroi has quit IRC14:53
praefectanyone has a good walkthrough for keystone setup (besides identity starter guide)14:54
vidd%HOST_IP% should be replaced....14:54
vidd%TENANT_ID% should NOT be replaced14:54
n88vidd: ok thanks…that was another question/issue I had14:54
n88vidd: about %TENANT_ID%14:55
praefectwow... so easy! =) thanks vidd14:55
*** dwcramer has joined #openstack14:56
*** robbiew has joined #openstack14:56
praefectwhen setting up keystone endponts, is the region the nova "zone" or it's domething different entirely than my compute zone?14:57
*** wilmoore has joined #openstack14:58
*** pradeep has joined #openstack14:58
viddi would set it as the nova zone14:58
*** CaptTofu has joined #openstack14:59
*** AlanClark has joined #openstack14:59
viddpraefect, that may be the answer to why my glance wont work =]14:59
*** lts has joined #openstack15:00
*** CaptTofu has quit IRC15:00
praefectvidd: yeah I'm thinking this region thing is something entirely different than the compute zone, after all, keystone encompasses more than just nova...15:01
*** mattray has joined #openstack15:02
praefectvidd: did you create services with "keystone-manage add service add nova compute ..." it is not even in the identity starter guide but it is in some other doc...15:02
viddpraefect, yes i did15:03
*** wilmoore_ has joined #openstack15:03
viddi even wrote a script for it =]15:03
*** wilmoore has quit IRC15:03
viddi wrote a script for everything15:03
*** Shentonfreude has joined #openstack15:04
praefectvidd: I'd really like to have a look at your script, even if you only managed to have keystone and nova linked, that's what I'm trying to do, could you paste it to paste.openstack.org?15:04
praefectvidd: that would be of great healp15:04
viddtake me from a machine with internet access to full [albiet not-fully function] stack15:04
praefecthelp15:04
viddpraefect,  https://github.com/vidd/vidd15:05
praefectvidd: nice, I'm getting, I'm using puppet and I can build a cloud in no time.. and it always incorporated my latests recipes, works great for me15:05
*** reed has quit IRC15:05
*** cmasseraf has joined #openstack15:05
praefectvidd: thanks for the link15:05
viddpraefect, if you see a mistake PLEASE let me know!15:06
cmasserafHello everyone, I'm looking for a while now... where's the documentation abou installing openstack with one ethernet only?15:06
viddpraefect, just to let you know, my scripts pull from Kiall 's ppa15:06
*** mdomsch has joined #openstack15:07
praefectvidd: I won't be able to run your script as I'm on RHEL using packages but it will be of great help for sure... thanks again15:07
*** rsampaio has quit IRC15:07
viddcmasseraf, such documentation does not exist so far as I have found15:07
viddcmasseraf, it can be done...its just not recommeded or documented15:09
cmasserafI've read about it in the Ubuntu site... but I could not find it.. I've 6 Servers where I'm going to install openstack however I only have one ethernet15:09
n88vidd: a tenant in keystone = a project in nova, correct?15:09
viddeach server only has one ethernet adaptor?15:09
*** mcclurmc has quit IRC15:09
cmasserafyes15:09
viddn88 no, a tenant in keystone is a tenant in keystone15:10
Raziquehey vidd n88 :)15:10
*** mcclurmc has joined #openstack15:10
viddn88 in nova, can a user have more than one project?15:11
viddcan a project have more than one user?15:11
vidd[i do not know these answers]15:11
Raziquevidd: yah a user can have multiple projects :)15:12
viddbut i can say with authority....a tenant in keystone != a project in nova15:12
Raziquewhen u create a project, u define an admin15:12
*** lionel has quit IRC15:12
cmasserafanyone know how to install openStack with only 1 thernet adapter?15:13
*** whaley has joined #openstack15:13
viddRazique, so user A can have 15 projects and different creds for each project15:13
*** lionel has joined #openstack15:13
viddcmasseraf, yes...i have done it15:13
Raziquevidd: in fact you can have the same creds15:13
viddglance and dashboard a re a little flacky though15:13
Raziquesince they appli per user15:13
Raziquein fact what changes is the project/ region15:14
*** GheRivero_ has joined #openstack15:14
Raziqueeg nova --project_name=my_project boot --flavor --image server15:14
*** heiko has joined #openstack15:14
viddRazique, so region in keystone [should]= project in nova?15:15
Raziquenope15:16
Raziquetenant in KS = project in nova15:16
Raziqueregion = group of services15:16
Raziquewith api as endpoint15:16
n88Raz: morning15:16
heikoanother question :D ... never ending story hahahah, so it's sufficent to create a user with creds in keystone if i use keystone for auth ?15:16
n88or afternoon15:16
Raziquen88: :)15:17
viddheiko, yes15:17
*** heiko is now known as foexle15:17
foexlevidd: thx15:17
viddthis is assuming you intend to use something like dashboard to do your dirty work15:17
n88raz: does that mean my nova projects (e.g. 'project1') should match my tenant names in keystone?15:17
Raziquen88: yup15:18
Raziquein fact a nova-manage export (don't remember) allows you to generate keystone-mange commands15:19
n88Raz: oh really? ah crap…haha ok let me try that first before I add all these entires into my keystone DB15:19
Raziqueeg projet "project1" would generate a "keystone-manage tenant create "project1""15:19
*** PiotrSikora has quit IRC15:23
n88Raz: as a follow-up if my 'cloudAdmin' is given global Admin roles in keystone then do they need to be specifically added to each project/tenant? Or is global role sufficient to give them access to all projects/tenants?15:23
foexleRazique: is that right now to check swift auth ? curl -d '{"passwordCredentials"15:23
foexleand to port 5000 ?15:24
n88and are roles hierarchical? Meaning if I'm a global role Admin I also am a Member as well?15:24
foexlebecause the swift cli are broken i think15:25
*** PiotrSikora has joined #openstack15:25
foexleand the documentation are verry old i guess15:25
viddis this correct (someone with keystone + glance) --storage_availability_zone=nova15:26
*** code_franco has joined #openstack15:26
*** dendro-afk is now known as dendrobates15:27
*** duckhand has joined #openstack15:28
*** swill has joined #openstack15:28
*** daniel__ has quit IRC15:32
swillI am trying to get swift3 to work with swiftauth and I am currently getting a 500 error: Exception: Could not autocreate account 'AUTH_1'.  Has anyone seen this before?15:34
*** saju_m has quit IRC15:34
foexlesoooo ok i think i have a bug in swift or in the doc of keystone15:34
swillfoexie which keystone auth method are you using?15:35
foexleself.keystone_url = urlparse(conf.get('keystone_url')) => fail15:35
swillfoexle: swiftauth i am guessing?15:35
*** jeh has joined #openstack15:35
foexleuse = egg:keystone#swiftauth15:35
foexleyeah15:36
foexleshould i use tokenauth ?15:36
swillno, use swift auth15:36
swillone second15:36
swillfoexle: check my post in this bug, it may shed some slight on the situation: https://bugs.launchpad.net/keystone/+bug/89041515:37
foexleswill: thx i'll check15:37
swillyour url should be http://keystone_url:admin_port/v2.015:37
jehI need to add an additional iptable rule to nova-network-snat, but it gets removed when a new instance is created. Anyone know how I can add additional rules to this on diablo?15:38
swillfoexle: the admin port is configured in your keystone.conf file.15:38
foexleyes i know15:38
foexleswill: but i dont have a attribite with keystone url15:38
foexlebecause in doc isn't use this attribute15:38
foexle+the15:38
swillfoexle: in the proxy-server.conf file?15:40
foexleso the answer from yogesh in your bug report is using other attributes in the keystone filter section as the actual doc15:40
foexleyes15:40
foexlelook at the post of yogesh and the readme "swift integration" step 615:41
foexleits verry different15:41
*** rustam has joined #openstack15:41
swillwhat yogesh posted is what you should use15:42
foexleso are the doc incorrect15:42
swillassuming you changed the default admin_port to 5000 in your keystone.conf file.15:42
foexleyes yes :) i know ;)15:43
swillfoexle: link the doc you are looking at15:43
foexlehttps://github.com/openstack/keystone15:43
foexlereadme "swift integration"15:43
foexlestep 615:43
*** abecc has joined #openstack15:43
*** dgags has joined #openstack15:43
*** vladimir3p has joined #openstack15:44
swillso that readme is for using tokenauth15:44
swillyou will notice at the very bottom: Note: Keystone currently allows any valid token to do anything with any account.15:44
swillthe new way of doing it so you do not have that issue is with swiftauth.15:45
foexleahhh ok15:45
foexleok ok thats a statement :)15:45
foexlethx15:45
swillthe bug i referenced is to update the docs so the docs use swiftauth15:46
*** redconnection has quit IRC15:46
swillbut the swiftauth docs are a little unclear, which is what my comment is about in that bug.15:46
*** robbiew has quit IRC15:47
*** robbiew has joined #openstack15:47
n88vidd: you there? If so, I see in your config you add endpoints for all your tenants…do you have to do this?15:49
*** wilmoore_ has quit IRC15:49
*** tryggvil_ has quit IRC15:49
foexleswill: thanks :) thats a good explanation :)15:49
*** tryggvil_ has joined #openstack15:49
viddn88, for each user...dunno about each tenant15:50
*** GheRivero_ has quit IRC15:50
swillfoexle: no worries.  if you run into other issues, ping me, i have been doing the same thing as you for the past few days.  :)15:50
*** jakedahn has quit IRC15:50
foexleswill: all right :)15:51
swillhas anyone run into a 500 error "Exception: Could not autocreate account 'AUTH_1'" when trying to get swift3 to work with swiftauth?15:53
chmouelswill: you prob didn't create the account first with swauth-add-user15:56
*** alekibango_ has quit IRC15:57
*** MarkAtwood has joined #openstack15:57
*** alekibango_ has joined #openstack15:57
chmouelactually you using tempauth or swauth?15:57
swillchmouel: i am using swiftauth, not swauth.15:57
chmouelchmouel: keystone swift auth right?15:58
foexlechmouel: he's using keystone15:58
foexlewith swift15:58
swillchmouel: i have swiftauth working, but when i put swift3 in front of it, it stops working15:58
chmouelokay cool, so if autocreation are not working it's probably have to be that the account server cannot write on the fs15:58
chmouelcheck the logs on the storage servers15:58
viddim getting an error when trying to talk to glance: http://dpaste.com/658130/15:58
chmouelah15:58
chmoueloh sorry15:58
chmouelyeah i'm woring on that 8-)15:59
swillchmouel: i think it has something to do with the tokens that swift3 tries to create are not going through (or something like that).15:59
chmouelyeah it's not supported yet15:59
chmouelneed to do token validation on s3 first15:59
swillchmouel: ahhh, ok...15:59
chmouelon s3 token validation on keystone I mean15:59
chmouelthere is a patch floating which I was integrating15:59
*** wilmoore has joined #openstack16:00
chmouelbut had to fix other bug in keystone middleware first before addming that16:00
swillchmouel: ok, iw ill look around for the pathc.16:00
*** imsplitbit has joined #openstack16:00
*** guigui1 has quit IRC16:00
*** mdomsch has quit IRC16:00
swillchmouel: ya for sure.  i will look into it and see if i can verify the patch works.16:01
*** mdomsch has joined #openstack16:01
swilland if not, i will see what is needed to fix it.16:01
chmouelwell basically it's s3 tokens validation on keystone16:02
swillchmouel: will it have to happen in swiftauth (i am assuming)16:03
*** javiF has quit IRC16:03
chmouelno on keystone16:03
*** dendrobates is now known as dendro-afk16:03
chmoueland swiftauth will use that to validate the token16:03
*** dendro-afk is now known as dendrobates16:04
swillright...  that makes sense.16:04
foexleswill: how do you create a new user if they exists in keystone but not in swift ?16:04
chmouelfoexle: it use the autocreate feature of swift16:05
*** dragondm has joined #openstack16:05
chmouelso baiscally mean trust everything the auth give to me16:05
*** ahasenack has quit IRC16:06
*** dendrobates is now known as dendro-afk16:06
*** ahasenack has joined #openstack16:07
*** wilmoore has quit IRC16:08
jehfor reference I fixed my iptables rules by using POSTROUTING, instead of nova-network-snat16:08
swillchmouel: do you have a link to the patch for keystone to do s3 token validation?16:08
*** rwmjones has quit IRC16:08
swillchmouel: i have my setup installing with chef, so i can play with it and blow it away if i break things more.  :)16:08
*** freeflying has joined #openstack16:10
viddanyone here have glance working with keystone?16:11
*** mindpixel has quit IRC16:12
foexleswill: can you use "swfit" command ?16:12
swillfoexle: the swift command you mean?16:13
*** rnorwood has joined #openstack16:13
foexlejop16:13
chmouelswill: that's the patch i am looking to integrate http://www.debian.or.jp/~yosshy/openstack-diablo/ but that's not prob going to be in this form16:13
*** freeflyi1g has quit IRC16:13
swillfoexle: yes, i use: swift -A http://127.0.0.1:5000/v1.0 -U username -K password stat -v16:13
*** obino has quit IRC16:14
foexlei get a issue then16:14
foexlecurl works fine16:14
swillchmouel: ok.  i will wait for the official patch then.16:14
swillfoexle: notice the /v1.016:14
swillnot 2.016:14
foexleyeah16:14
swill5000 is the keystone service_port in this case16:15
foexlehttp://pastebin.com/p1PnXLwt16:15
foexleyes i know16:15
swillchecking16:15
foexlethats all correct16:15
swillthat means that you are using the wrong url and keystone is not returning something that is useful16:16
swillor your endpoints are not setup correctly16:16
foexle°°16:16
foexlehmmm16:16
foexle-.-16:17
viddanyone here have glance working with keystone?16:17
swillpastebin what you used to setup your keystone template endpoints16:17
*** cp16net has joined #openstack16:17
foexleRegionOne |         11 | http://192.168.0.2:5000/v2.0              | http://192.168.0.2:5001/v2.0             | http://192.168.0.2:5001/v2.016:17
viddswill, you have keystone and glance working...right?16:17
*** maplebed has quit IRC16:17
swillvidd: not glance, just keystone and swift.16:18
foexleand yes keystone are running on all interfaces16:18
swillvidd: what method are you using tokenauth?16:18
swillfoexle: that 11, is that identity?16:18
swillfoexle: and what do you have for swift?16:18
*** reidrac has quit IRC16:19
viddauthtoken16:19
foexleswift16:19
foexle|  1 | RegionOne |         10 | http://%HOST_IP%:8080/v1/AUTH_%tenant_id% | http://%HOST_IP%:8080/                   | http://%HOST_IP%:8080/v1/AUTH_%tenant_id%16:19
swillvidd: i have a working version of swift with authtoken, but i have not worked with glance yet.16:19
foexleand yes16:19
foexle| 11 | Keystone    | identity | Keystone Identity Service    |16:19
swillfoexle: i believe you have to associate a tentant with each of your users otherwise you get this error.16:20
swillif you have done that, then it is an enpoint problem16:20
swilljust remembered that.16:20
swilli will send you what iuse to setup my env.16:21
foexleyes my user has a tenant id16:21
*** cmasseraf has quit IRC16:21
swillhttp://pastebin.com/geA3ZqUP16:22
swillin your keystone.conf file, you have two roles defined, probably Admin and KeystoneServiceAdmin.  do you have both of them defined in your keystone env?16:23
foexleyes16:23
*** Badri has joined #openstack16:24
*** mikeyp has joined #openstack16:24
*** hadrian has quit IRC16:24
*** redconnection has joined #openstack16:24
foexlebut today it's fine :) ... i'm tired and hungry :D .... so cu later or tomorrow ! bye guys16:24
*** rwmjones has joined #openstack16:24
*** rnorwood has quit IRC16:25
BadriHas anyone tried nova boot with --key_path? I dont think it works. However --key_name seems to work.16:25
swillfoexle: cheers.  :)16:25
foexleswill: thx 4 your help i'll try tomorrow ;)16:25
swillfoexle: no worries.  gl16:25
*** foexle has quit IRC16:25
*** cp16net has quit IRC16:27
*** bcwaldon has joined #openstack16:28
*** jeh has quit IRC16:29
*** jeh has joined #openstack16:29
BadriFolks:: Has anyone tried nova boot with --key_path? I dont think it works. However --key_name seems to work.16:31
*** mikeyp has quit IRC16:31
*** PiotrSikora has quit IRC16:31
*** dobber has quit IRC16:32
*** derjohn_mob has quit IRC16:32
*** cdub has joined #openstack16:32
*** PiotrSikora_ has joined #openstack16:32
*** ahale- has quit IRC16:32
*** viraptor has quit IRC16:32
*** redconnection has quit IRC16:33
BuZZ-Tdoes anyone know what causes this bug: https://bugs.launchpad.net/horizon/+bug/88838516:35
BuZZ-Tit happends if i try to install horizon on Ubuntu 11.10 via git16:35
*** cp16net has joined #openstack16:36
BuZZ-T"InstallationError: No files/directores in /home/rneff/OpenStackDashboardSrc/horizon/openstack-dashboard/.dashboard-venv/src/quantum (from dependency_links.txt)" (including the typo in "directores")16:36
*** hadrian has joined #openstack16:38
*** Badri has quit IRC16:40
*** mikeyp has joined #openstack16:41
viddKiall, you here?16:41
viddBuZZ-T, the first "error" is your using the venv16:42
viddthe second is, since your using the venv, quantum is not getting into your venv16:43
*** jakedahn has joined #openstack16:43
viddBuZZ-T, is there a reason you dont use Kiall 's repos?16:43
viddBuZZ-T, https://github.com/managedit/openstack-setup16:44
*** Turicas has joined #openstack16:44
*** nyeates has joined #openstack16:45
*** Razique has quit IRC16:45
GlaceeSwift question: Lets say if your cluster reach the point of maximum drives ( 100 partitions per drive).. your pretty much screwed right? any good experience of rings resizing in prod?16:47
*** nphase has quit IRC16:49
*** vdo has joined #openstack16:50
*** negronjl has joined #openstack16:50
koolhead17vidd, am still stuck at same place :(16:51
viddkoolhead17, dont feel bad...so am i16:51
viddinfact...im doing a clean install right now16:52
*** jaypipes has quit IRC16:52
Kiallvidd, yea.. i'm around16:54
BuZZ-Tvidd: i just followed the instructions from http://docs.openstack.org/diablo/openstack-compute/admin/content/install-dashboard.html16:54
viddkoolhead17, where are you stuck at exactly16:54
*** jakedahn has quit IRC16:54
*** jakedahn has joined #openstack16:54
koolhead17vidd, let me pastebin exact comamnds i used16:54
koolhead17hey Kiall16:54
viddBuZZ-T, you followed the instructions for diablo but you installed essex dashboard16:54
Kialln88, ping16:55
*** katkee has quit IRC16:55
BuZZ-Ti see...16:55
viddKiall, i was going to ask you for some assistance getting glance and keystone to work together...but i have already formatted and started a re-install16:56
Kialln88, you mentioned that my dashboard packages depend on nova-compute a while back .. As near as I can tell, they dont!16:56
Kiallvidd, lol16:56
BuZZ-Tso what's the better way? Installing the dashboard for diablo or using an instruction for essex?16:56
Kiallmay I suggest trying all this in a VM that you can snapshot? ;)16:56
KiallYou must be on install #250 at this stage16:56
viddKiall, im going to follow your stripts line by line and see if the result is different16:57
viddKiall, ive already had to replace the hard drive once...i think i wore a hole in the platter of the old one =]16:57
KiallMy keystone+glance+dashboard+nova "scripts" (up to the network command) should work for any network type ;)16:58
*** nphase has joined #openstack16:58
*** maplebed has joined #openstack16:58
*** obino has joined #openstack16:58
viddKiall, you do need to add a line to your README about installing that python tool to get a PPA added though16:59
koolhead17vidd, http://paste.ubuntu.com/741366/  this is what i followed17:00
Kiallvidd, https://github.com/managedit/openstack-setup/commit/ee32a45266cc83bc8e6fc2582114cce63c72401c17:01
viddkoolhead17, tools/with_venv.sh dashboard/manage.py syncdb17:01
*** pradeep has quit IRC17:01
viddthere you go using the venv17:01
koolhead17vidd, yes am using virtualenv17:01
viddthen i cant help you17:02
*** TheOsprey has quit IRC17:03
viddthe venv isolated openstack dashboard from django-openstack and i dont know how to get around that17:03
*** kaigan has left #openstack17:04
viddif you lose the venv you should lose the issue17:04
*** RobertLaptop has joined #openstack17:05
*** rnorwood has joined #openstack17:05
koolhead17vidd, does it mean this isolation or code change has happened recently? i was able to setup the dashboard same way earlier17:05
viddno...im saying there is a way around this but i dont know what it is17:06
*** StarX has joined #openstack17:06
*** RobertLaptop has left #openstack17:07
viddyour missing some step that i never took17:07
*** aliguori has quit IRC17:07
viddkoolhead17, is there some reason you MUST use isolation?17:08
*** maplebed has left #openstack17:10
*** hsmod has joined #openstack17:11
Kiallvidd, https://github.com/managedit/openstack-setup/commit/9a1259346691bb677bd25e9f9560cae9ff89a9d717:12
*** lvaughn_ has quit IRC17:13
*** lvaughn has joined #openstack17:13
*** dolphm has joined #openstack17:18
*** phschwartz has quit IRC17:19
*** helfrez has joined #openstack17:19
*** lvaughn_ has joined #openstack17:22
*** mencken has joined #openstack17:23
*** mrevell has joined #openstack17:25
*** mrevell has joined #openstack17:26
*** lvaughn has quit IRC17:26
viddKiall, you may want to review my "basics" script for inclusion17:30
Kialllets see?17:31
*** phschwartz has joined #openstack17:31
viddKiall, it does things like tell ya "hey! you dont have apache...."17:31
viddhttps://github.com/vidd/vidd/blob/master/basics.sh17:32
KiallBut apache is listed as a dependency of openstack-dashboard ;)17:32
KiallAlso - https://github.com/managedit/openstack-setup/commit/caa599994cbd8c72a88296fa3052757c4d6fb2d817:32
viddthe very first thing your script did was tell me it could talk to mysql =\17:33
Kiallcould?17:33
Kiallor couldnt?17:33
viddcould not17:33
Kiallhttps://github.com/managedit/openstack-setup/blob/master/keystone.sh17:33
KiallThe first thing is does is install what it needs...17:34
*** juddm has joined #openstack17:34
*** aliguori has joined #openstack17:35
viddright...but it does not set mysql to listen to 0.0.0.017:35
KiallOh ..17:35
hsmodis there a channel dedicated to swift?17:35
Spirilisdon't think there is..17:36
*** cmasseraf has joined #openstack17:36
*** vdo has quit IRC17:38
*** Satya has quit IRC17:39
Kiallvidd, does that basics.sh not screw with the ntp.conf? ;)17:40
Kiallit looks like you have used n\ rather than \n17:40
hsmodfollowing http://swift.openstack.org/howto_installmultinode.html, when i do the first test curl cmd curl -k -v -H 'X-Storage-User: system:root' -H 'X-Storage-Pass: testpass' https://$PROXY_LOCAL_NET_IP:8080/auth/v1.0,  i get:17:40
hsmodException: Could not create account AUTH_system for user system:root17:40
viddno...its right17:41
viddlet me triplecheck17:41
hsmodi checked my /srv/node dir is correctly owned by swift:swift (and its subdirs)17:41
viddit does it correctly17:41
hsmod/var/log/syslog gives me no indication of any problems.   anyone have any idea what it might be?17:41
Kiallvidd, https://github.com/managedit/openstack-setup/commit/1f0f96a69289d04a78cf3cfb8bc1c62b01911ee017:42
Spirilishsmod: you got the account-server running on all the nodes?17:42
hsmodSpirilis, i'm using tempauth17:42
Spirilisah gotcha17:42
hsmodas instructed in that url17:42
hsmodshould i just go to swauth instead?17:43
viddKiall, n\ is bash reserved work for "new line"17:43
Kiallah.. news to me ;)17:43
*** vernhart has joined #openstack17:43
Spirilisthough it sounds like account-server is still needed17:43
Spiriliseven with tempauth17:44
hsmodok.  i'll try that17:44
hsmodthx17:44
Spirilisor at least that document tells you to write its config file on the storage nodes and start the account-* services...17:44
*** TheOsprey has joined #openstack17:45
hsmodyes but the account-container services are not really the auth17:45
Spirilisyeah17:45
hsmodaccont-container is the ring manager for the account-builder rings if i understand correclty17:45
*** jog0 has joined #openstack17:46
Spirilisthe account ring does have to contain the 'system' account you're creating though right?17:46
hsmodright, but isn't that transferred when i scp the .gz files over?17:46
hsmodi'll try anything though... i'm just trying to clarify which file i should try copying to storage nodes.17:47
hsmod:)17:47
Spirilisnaw the .gz files are rings, meaning, definitions for where data objects created in that "ring" should go17:47
Spirilisthat whole ring concept took me like 2 weeks to finally understand when I first installed swift17:47
hsmodoh ok, so which files should i ensure are transferred to storage nodes?17:47
hsmodyes tell me about it :)  rings are not straightforward17:48
Spirilisjust make sure all the .gz files are transferred and all the account, container & object services are running17:48
hsmodindeed, i ensured all those things17:48
Spiriliscould be something else going wrong and that'd be outside my knowledge :)17:48
hsmodyou mentioned something about a config17:48
Spirilisyeah just talking about the /etc/swift/account-server.conf file that you created if you followed that webpage's steps17:48
Spiriliswhat they provided should be correct I believe17:48
hsmodyes i did that17:49
hsmodit doesn't have any info pertinent to the tempauth acccount tho, so i figured wasn't the issue17:49
Spirilisyeah probably not17:49
hsmodthe tempauth creds appear to be in the proxy.conf17:49
hsmodwhich i moved over to storage nodes just for kicks17:49
hsmodi'll just bite the bullet and try swauth or keystone.  which do u recommend for proof of concept?17:50
hsmodi heard keystone is not fun17:50
*** jaypipes has joined #openstack17:50
Spirilisswauth wasn't too hard for me IMO17:50
hsmodok cool, i'll try that out then17:50
Spirilisand our POC runs it for now17:50
hsmodthanks for your help!17:51
Spirilisnp17:51
*** dprince has quit IRC17:51
viddKiall, look at this:http://dpaste.com/658184/17:51
Kiallvidd, yea obtain-token.sh failed17:51
Kialltry the curl command by hand17:51
viddand ppl wonder why i keep my hair cut less then 1/4 inch =]17:51
viddthis is the exact same issue i had with my setup scripts with glance17:52
*** jog0 has quit IRC17:53
viddi dont understand how to do "curl command by hand"17:53
*** vernhart has quit IRC17:53
Kiallhttps://github.com/managedit/openstack-setup/blob/master/obtain-token.sh17:53
*** Ryan_Lane has joined #openstack17:53
Kiallbwteen L8 and L9 add 2x lines:17:54
Kiallecho $RAW_TOKEN17:54
Kiallexit17:54
*** dysinger has joined #openstack17:55
viddraw token = NULL17:55
Kiallthen keystone is failing for some reason17:56
GlaceeSwift question: Lets say if your cluster reach the point of maximum drives ( 100 partitions per drive).. your pretty much screwed right? any good experience of rings resizing in prod?17:58
*** Ryan_Lane has quit IRC17:58
*** mdomsch_ has joined #openstack17:58
*** mdomsch has quit IRC17:59
viddi did http://paste.ubuntu.com/741430/18:00
viddand i get the first 2 but no raw token18:00
viddKiall,18:00
KiallRAW_TOKEN should be whatever HTTP respose keystone is giving18:01
Kiallback18:01
Kiallso, If its not giving something, keystone is not working for some reason?18:02
viddis it possible im missing this json thing18:02
koolhead17is quantum a must requirement/dependency for dashboard18:03
kbringarddon't think so18:03
Kiallkoolhead17, no18:03
viddkoolhead17, no....18:03
kbringardkeystone is, though18:03
kbringardat least for any recent rev18:04
viddset it to "false" in your local_settings.py18:04
*** jdurgin has joined #openstack18:04
*** vernhart has joined #openstack18:05
*** Shentonfreude has quit IRC18:05
viddKiall, so...your keystone is broken...not my script [i feel MUCH better]18:06
*** mrevell has quit IRC18:06
Kiallvidd, go on?18:06
viddyour keystone is not working18:06
koolhead17vidd, now i think http://docs.openstack.org/diablo/openstack-compute/admin/content/install-dashboard.html  this needs to be modified18:07
*** dprince has joined #openstack18:07
viddi didnt use my script at all this time so its not my script that did it18:07
Kiallvidd, okay .. but how is it not working?18:07
koolhead17i spent lots many hours in setting up dashboard and no luck :)18:07
viddKiall, i dont understand how it works when it does work....how am i supposed to know how it isnt working18:08
Kialllol18:08
KiallOkay, I'll tell you what.. I'll test it on a clean VM ;)18:08
viddanyway...i say its broken because it does not retern a token18:08
viddwhich means glance is not going to work18:08
*** mjfork has joined #openstack18:09
Kiallwell, if keystone-test.sh worked earlier..18:09
Kiallthen, it worked earlier ;)18:09
viddkeystone-test.sh FAILED before...even though it said it succeded18:09
Kialllol, how did it fail? Or are you assuming it failed?18:10
*** nerens has quit IRC18:10
Kialln88, ping18:10
Kiallyou just got my keystone packages working right?18:10
vidd8 lines of error code followed by a single line "Success" does not assume me things are well in the world =\18:10
KiallThen why did you move on -_-18:11
viddi didnt18:11
*** CaptTofu has joined #openstack18:11
viddim at "    ./keystone-test.sh18:11
vidd"18:11
viddepic failure18:11
Kiallvidd, I'm installing a VM on esx at the mo, give me 30 mins...18:12
viddtake your time18:12
*** medberry is now known as mka18:13
viddill be over here in the corner crying in my coffee and banging my head against the wall =]18:14
*** mka is now known as medberry18:14
*** adjohn has joined #openstack18:14
*** cmasseraf has quit IRC18:15
*** katkee has joined #openstack18:16
*** mdomsch_ has quit IRC18:16
*** GheRivero_ has joined #openstack18:17
*** cmasseraf has joined #openstack18:17
*** ohnoimdead has joined #openstack18:18
*** Shentonfreude has joined #openstack18:18
hsmodSpirilis, so i installed swauth, made the necessary configs to proxy conf file, fired up the proxy and so when I try to use any of the swauth cmds to initialize the backend or even create a user, it just hangs indefinitely.  telnet to the port (8080) to do a GET / also hangs indefinitely.18:20
dolphmvidd: Kiall: what's the keystone issue ya'll are having?18:20
hsmodSpirilis, you ever seen that before?18:20
*** rustam has quit IRC18:20
*** woleium has joined #openstack18:21
vidddolphm, we are using Kiall 's ppa and keystone wont return a token18:21
Kiallvidd, it does fore n88 and I ;)18:21
Kiallfor*18:21
Spirilishsmod: that sounds AWFULLY familiar... trying to remember what it was...18:21
dolphmvidd: stable/diablo?18:21
Kialldolphm, yea.. my PPA packages are stable/diablo18:22
Kiallthey work for me, and a bunch of others.. he has something setup wrong! I'm *sure* of it18:22
dolphmKiall: do you have a relevant paste or something i can look at?18:22
dolphmvidd: ^^18:22
KiallYea.. https://github.com/managedit/openstack-setup/18:23
viddKiall, i cant possibly have something set up wrong =\ its a fresh install i ahve not set up anything !18:23
*** negronjl has quit IRC18:23
Kialldolphm, there is a keystone-paste template in there..18:23
Kialland data template18:23
viddis this json thing something that needs to be installed and im somehow not getting it?18:24
dolphmKiall: let me fire up a server then18:24
Spirilishsmod: can't recall the exact reason I had that, but can you make sure each box's hostname resolves to its correct IP (with hostname -i)?  think it might've been related to that...18:24
viddim doing a stock ubuntu 11.10 installer from usb stick18:25
*** negronjl has joined #openstack18:25
hsmodSpirilis, ok18:25
hsmodthx again for the tip , i'll keep looking18:25
viddmaybe ill burn down another install and test that devstack thing =]18:25
Kialllol18:25
*** jog0 has joined #openstack18:25
*** dirkx_ has quit IRC18:26
Kiallvidd, stop. All that you get from re-installing is a waste of time..18:26
KiallYou're missing something. And, Since you dont know what it is, You're going to be missing it again next time.18:26
viddthats why im asking...is this json thing the curl is crying about something i can install18:27
*** magg has joined #openstack18:28
Spirilishsmod: also anything on /var/log/syslog on the proxy host?18:28
hsmodnothing :(18:28
maggif im using --multi_host=T do i need to put this in the nova.conf18:28
Spirilisunfortunately I didn't jot down why swauth kept doing that but I remember it being a roadblock for a little while18:28
hsmodjust that it started up the children18:29
hsmodlots of roadblocks, that's for sure :)18:29
Kiallvidd, its not that, since when you exit'ed before the JSON parse, it had nothing to parse18:30
Spirilisok one thing I recall adding to my proxy-server.conf is under the [filter:swauth] section, "default_swift_cluster = local#https://<proxy-node-hostname>/v1" ... if you're just using http with port 8080 then make that http://<proxy-node-hostname>:8080/v118:31
Spirilisand additionally under [app:auth-server], a "default_cluster_url = https://<proxy-node>/v1" (make similar changes for your http-port-8080 config)18:32
dolphmKiall: which OS are you intending this for?18:32
dolphmKiall: 11.04? 11.10?18:32
Kiall11.1018:32
Spirilisotherwise those sections also use the same "super_admin_key" with the same password of course18:33
Spirilisand it looks like that "super_admin_key" directive is only found in the [filter:swauth] and [app:auth-server] sections18:34
dolphmKiall: i can't test it right now then :/18:34
*** perestre1ka has quit IRC18:34
dolphmKiall: well, maybe i can..18:35
Kialldolphm, no hassle .. I'm installing a VM at the mo to test this with18:35
maggif im using --multi_host=T do i need to put this in the nova.conf??? help18:35
*** PiotrSikora_ is now known as PiotrSikora18:38
hsmodSpirilis, i don't have an '[app:auth-server]' section at all in my proxy-server.conf18:38
hsmodmaybe that is my problem.  i got my proxy-server.conf from http://swift.openstack.org/howto_installmultinode.html18:39
Spirilishsmod: [app:auth-server], underneath that "use = egg:swift#auth", under that "default_cluster_url = https://<proxynodehostname>/v1", under that "super_admin_key = <my super admin key password>"18:39
hsmodalthough i don't see that section here either http://docs.openstack.org/diablo/openstack-object-storage/admin/content/installing-and-configuring-the-proxy-node.html18:39
hsmodok thx i'll try that18:39
hsmodi wonder why they omitted that from docs18:40
Spirilisok that is weird18:40
Spirilisyeah18:40
hsmodoh that goes into auth-server.conf18:40
*** localhost has quit IRC18:41
Spiriliserm hm, I don't have an auth-server.conf and that's at the end of my proxy-server.conf18:41
*** perestrelka has joined #openstack18:41
hsmodstrange!18:41
Kiallvidd, VM installed.. Will snapshot it and make sure those instructions work as advertised ;)18:42
hsmodya it only exists here http://swift.openstack.org/1.2/howto_installmultinode.html  (old version of doc)?   doesn't exist here http://swift.openstack.org/howto_installmultinode.html18:42
hsmodanyway, adding now18:42
viddhehe18:42
Spirilisyeah, you're retracing all my old steps lol18:42
*** localhost has joined #openstack18:42
*** carlp has quit IRC18:42
hsmoddid you have to do a swift-init auth start?18:42
SpirilisI was doing google searches all over the place looking for example configs until I stumbled across something that worked18:42
hsmodor do u have to startup swauth at all?  i didn't do any of that18:43
*** dubsquared has joined #openstack18:43
*** gyee has joined #openstack18:43
Spirilisno18:43
Spirilisthe proxy node only needed swift-init proxy-server start18:43
Spirilisand storage nodes needed the account-*, container-* and object-* servers various start cmds18:43
Spirilisnothing about auth-server18:43
SpirilisI think it's built into the proxy server, that's why it's in proxy-server.conf18:44
*** carlp has joined #openstack18:45
maggi need help with a multi_host configuration18:45
*** scottjg has joined #openstack18:45
hsmodno luck.18:46
*** whaley has quit IRC18:48
Spirilisk then I don't know what's wrong :)18:48
hsmodthanks for trying :)18:49
Spirilisnp18:49
viddKiall, the curl is now working18:53
*** hsmod has quit IRC18:53
*** dendro-afk is now known as dendrobates18:53
Kiallwhat did you change?18:53
viddidk18:54
koolhead17ok i had some luck.  now the dashborad says "Could not import dashboard.views. Error was: No module named Crypto.Cipher18:54
koolhead17"18:54
*** StarX has quit IRC18:55
Kiallkoolhead17, apt-get install python-crypto maybe18:55
viddi did a clean install with no LAMP18:55
viddand added none of my normal packages18:55
viddno mysql, no apache18:56
viddso something on my basics list or in the lamp install is messing it up?18:56
viddor was there a typo somewhre18:56
*** katkee has quit IRC18:56
Kiallvidd, give me 20 mins.. I'll be back with 100% working scripts ;)18:57
*** ahale has joined #openstack18:57
viddKiall, you might find it interesting that there are currently NO endpoints in the keystone database18:58
*** rnorwood has quit IRC18:58
*** hsmod has joined #openstack18:58
*** darraghb has quit IRC19:00
*** swill has left #openstack19:02
viddKiall, glance.sh is missing httplib219:02
*** nacx has quit IRC19:03
* koolhead17 wonders why pycrypto was not added in pip-requires file :(19:03
*** rnorwood has joined #openstack19:03
viddKiall, python-httplib219:04
KiallHumm - really?19:04
KiallI wonder which specific package needs that..19:04
vidd/usr/lib/python2.7/dist-packages/glance/common/auth.py", line 33, in <module>19:05
vidd    import httplib219:05
viddi suppose that is the api?19:05
viddglance-manage =]19:06
KiallI'll figure it out later, for now just install it ;)19:06
viddalready done...just letting you knwp19:06
Kiallk19:06
*** dev_sa has joined #openstack19:06
*** dev_sa has left #openstack19:07
*** whaley has joined #openstack19:07
*** dirkx_ has joined #openstack19:07
*** ivano has joined #openstack19:08
ivanociao19:08
*** imsplitbit has quit IRC19:08
*** ivano has quit IRC19:09
*** ivano has joined #openstack19:09
Kiallvidd, dooh19:10
Kiallsomehow I've just done this VM with the ubuntu packages -_-19:10
Kiallthank god for snapshots ;)19:11
hsmodSpirilis, i was finally able to get some response by doing :  swauth-prep -K swauthkey -A https://192.168.0.50/auth19:11
vidduhhh whoops?19:11
hsmodgo figure19:11
hsmodcorrection,  -A https://192.168.0.50:8080/auth19:11
viddKiall, apt-get auto-remove --purge?19:11
Kiallvidd, already back at a clean VM..19:12
*** kerouac has quit IRC19:12
*** katkee has joined #openstack19:12
*** binbash_ has quit IRC19:13
*** ryan_fox1985 has quit IRC19:13
*** webx has quit IRC19:13
*** taihen has quit IRC19:13
*** vishy has quit IRC19:13
*** gohko_nao has quit IRC19:13
*** dmarkey has quit IRC19:13
*** laurensell has quit IRC19:13
*** guitarzan has quit IRC19:13
*** AntoniHP has quit IRC19:13
*** aimka has quit IRC19:13
*** comstud has quit IRC19:13
*** Archeron has quit IRC19:13
*** root_ has quit IRC19:13
*** dannf has quit IRC19:13
*** Aurelgadjo has quit IRC19:13
*** cloud0_ has quit IRC19:13
*** cloud0_ has joined #openstack19:13
*** guitarzan has joined #openstack19:13
*** root_ has joined #openstack19:13
*** AntoniHP has joined #openstack19:13
*** taihen has joined #openstack19:13
*** binbash_ has joined #openstack19:13
*** vishy has joined #openstack19:13
*** dannf has joined #openstack19:13
*** dmarkey has joined #openstack19:13
*** comstud has joined #openstack19:13
*** webx has joined #openstack19:13
*** ryan_fox1985 has joined #openstack19:13
*** Archeron has joined #openstack19:13
*** gohko_nao has joined #openstack19:13
*** laurensell has joined #openstack19:14
*** aimka has joined #openstack19:14
*** magg has left #openstack19:14
viddKiall, this is interesting..... ./keystone-test.sh19:15
vidd returns a token but ./glance-upload-oneiric.sh19:15
vidd fails as "unauthorized19:15
*** haji has joined #openstack19:15
hajihello19:15
koolhead17booooh. dashboard does need quantum pkg19:15
Kiallvidd, few mins ;)19:16
Kiallkoolhead17, no it doesnt -_-19:16
koolhead17Kiall, Could not import dashboard.views. Error was: No module named quantum19:16
hajiso nova-network gets a XXX on my controller node19:16
koolhead17i removed that quantum git path from pip-requires19:16
*** timo_ has joined #openstack19:17
Kiallkoolhead17, odd.. mayber your using the essex dashboard?19:17
*** timo_ is now known as Guest7838219:17
viddkoolhead17, did you set the quatum to "false" in the local.py?19:17
koolhead17vidd, yes i did that19:17
Guest78382good afternoon all!  Im having some issues with my swift test cluster, getting object6000 no found from rsync.  Can anyone help me out?19:18
koolhead17Kiall, git clone https://github.com/4P/horizon19:18
koolhead17is that wrong ?19:18
KiallYes, For one.. Its https://github.com/openstack/horizon ;)19:18
viddkoolhead17, that will get you the "master" vesion19:18
KiallAnd both of those commands on their own will give you the essex version19:19
hajiand nova-network.log doesnt say anything19:19
hajihelp19:19
koolhead17so what should is use instead Kiall ?19:19
*** dysinger has quit IRC19:20
Kiallyour using diablo right? You should use the diablo branch of those repos19:20
*** jog0 has quit IRC19:20
*** jog0_ has joined #openstack19:20
viddkoolhead17, git clone https://github.com/openstack/horizon.git horizon && horizon && git checkout stable/diablo19:20
*** dysinger has joined #openstack19:20
koolhead17Kiall, yes diablo19:20
viddor use kiall's repos =]19:20
haji:(19:20
Kialllol19:20
Kiallhaji, no errors?19:21
hajinop19:21
Kialland NTP is okay between all the servers?19:21
koolhead17Kiall, vidd  thanks let me try that19:21
hajikiall: i installed nova-network on both nodes19:21
hajilike u said19:21
Kiallhaji, did those VLAN commands work BTW? (I replied to your mailing list message)19:21
*** jog0_ has quit IRC19:21
hajiyeah i say it thanks19:21
koolhead17http://docs.openstack.org/diablo/openstack-compute/admin/content/installing-openstack-dashboard.html am filing a bug and assigning to myself.19:21
hajithey worked19:21
*** jog0 has joined #openstack19:21
praefectI have issues with lock files race condition and it's driving me nuts!!!! anyone ever seen something like that???19:21
Kialldidnt notice a respose, openstack flooded my inbox today ;)19:22
hajii saw it***19:22
hajiu were the first to reply19:22
*** stewart has joined #openstack19:22
viddthats cuzz Kiall rocks =]19:22
Kialllol19:22
viddhis statue is in the mail somewhere....19:22
*** dendrobates is now known as dendro-afk19:22
hajihehehe19:24
Kiallvidd, weird.. having thr same issue with glance..19:24
Kiallbut just restarting them fixed it19:24
Kialleven thought I did already restart them -_-19:24
viddrestarting....glance? keystone?19:24
hajibut, yeah nova-network is XXX on the controller... and i dont have any br or vlan interfaces on the other node19:24
viddthe server?19:24
Kiallglance19:25
Kiallapi and reg19:25
hajiis this because im using multi node T?19:25
viddhaji, did you state host ip on each machine as the controller ip?19:25
*** cmasseraf has quit IRC19:25
*** scottjg has quit IRC19:26
hajimmm19:26
hajiyeah...19:26
hajiwell in the nova.conf almost all IP have the controllers ip19:27
zykes-wazzup vidd ?19:27
jehanyone using nginx to load balance nova-api?19:27
koolhead17vidd, horizon: command not found19:27
viddhaji, there should also be a --my_ip flag set to the server ip the file resides on19:27
koolhead17when i execute git clone https://github.com/openstack/horizon.git horizon && horizon && git checkout stable/diablo19:28
koolhead17zykes-, where have you been :D19:28
*** negronjl has quit IRC19:28
haji--my_ip=10.10.10.2 on the controller? and --my_ip=10.10.10.3 on the compute?19:29
viddsorry koolhead17  missed the "cd" git clone https://github.com/openstack/horizon.git horizon && cd horizon && git checkout stable/diablo19:30
hajiwell ok19:30
hajidone19:30
viddhello zykes-19:30
viddjust banging my head against a wall =]19:31
koolhead17vidd, so am i19:31
koolhead17:P19:31
*** timolow has joined #openstack19:32
viddthe ppl with the white coats and the pleasent smiles are coming to visit me later with the intersting night-robe and the sleeping room with the cusioned walls....=]19:32
hajimaybe the two nova-networks are conflicting19:32
*** negronjl has joined #openstack19:32
hajiwith each other?19:32
vidd[in other words they're going to be dragging me away in a stright-jacket to a padded room]19:33
koolhead17Kiall, even in diablo/stable i see -e git+https://github.com/openstack/quantum.git#egg=quantum19:33
koolhead17 inside pip-require . let me do it all again :p19:33
timolowhowdy, im getting errors with my swift implementation.  anyone come across this error with rsync before? 2011/11/17 19:33:20 [14561] connect from i-00006471.novalocal (10.4.1.5)19:34
timolow2011/11/17 19:33:20 [14561] unknown module 'object6000' tried from i-00006471.novalocal (10.4.1.5)19:34
Kiallkoolhead17, yea, dashboard can make use of quantum19:34
Kiallbut does not require it19:34
hajikiall i need your nova.confs plz19:34
*** dendro-afk is now known as dendrobates19:34
Kiallhaji, https://github.com/managedit/openstack-setup/blob/master/nova.conf.tmpl19:34
*** fabiand__ has joined #openstack19:35
viddKiall, still no dice on glance19:35
Kiallvidd, give me a few ;)19:36
hajikiall so i need to put the same file on the compute nodes19:36
Kiallhaji, yea.. they should all be the same pretty much19:36
viddKiall, im sorry...i thought you said it worked for you and i just had to restart19:36
hajii dont need extra commands for the multi node T config19:37
Kialloh .. sorry, still checking everything ;)19:37
viddi know you can only do 15 things at once =]19:38
KiallWell, Waiting for the oneiric and lucid image downloads ;)19:38
*** Ryan_Lane has joined #openstack19:39
hajiand on the compute nodes i install nova-compute nova-network and mysql-client only?19:39
hajido i need nova-api?19:39
*** blamar has quit IRC19:39
KiallI put nova-api on, but its not needed at all19:39
*** blamar has joined #openstack19:39
*** nerens has joined #openstack19:39
*** reiddraper has joined #openstack19:40
*** mirrorbox has quit IRC19:43
*** mirrorbox has joined #openstack19:43
*** cmasseraf has joined #openstack19:43
hajiook19:45
*** anotherjesse has joined #openstack19:46
Kiallvidd, it looks like `keystone-manage token add` is failing19:47
*** Guest78382 has quit IRC19:47
viddvunderbar19:48
viddso it is NOT me =]19:48
viddi feel better now =]19:49
viddKiall, do you have endpoints in your keystone database?19:50
*** PeteDaGuru has quit IRC19:50
*** PeteDaGuru1 has joined #openstack19:50
*** imsplitbit has joined #openstack19:50
Kiallno19:51
*** negronjl has quit IRC19:51
KiallDo have endpoint_templates19:51
viddcould that be the issue?19:51
KiallNope.. Dont think so19:51
KiallMy live stuff has an empty endpoints table19:51
*** cmasseraf has quit IRC19:52
*** praefect has quit IRC19:53
*** cmasseraf has joined #openstack19:53
*** negronjl has joined #openstack19:54
*** Transformer has joined #openstack19:56
*** Transformer has quit IRC19:57
*** rnorwood has quit IRC19:58
*** stewart has quit IRC19:59
*** dirkx_ has quit IRC19:59
viddKiall, any ideas?20:02
Kiallyea, kinda20:03
Kialllooks like keystone was half installing20:03
viddare you part of the development team there?20:03
Kiallno20:03
Kiallwait - where is "there" ? ;)20:04
viddrackspace UK20:04
vidd[you are from the Islands right?]20:04
KiallNo, I dont work for rackspace ;)20:05
KiallI'm from Ireland20:05
viddsorry for the UK crack then =]20:05
Kiall;)20:05
viddy'all dont refer to them as the "British Iles...ya call them the Invaded Lands=]20:08
*** mattray has quit IRC20:10
*** anotherjesse has quit IRC20:10
*** anotherjesse has joined #openstack20:11
*** TreeStump has quit IRC20:13
*** duckhand has quit IRC20:13
*** pweiss has joined #openstack20:15
*** anotherjesse_ has joined #openstack20:15
viddso have you figured out what part of keystone is not installing and [more importantly]how to fix it?20:15
*** duckhand has joined #openstack20:16
Kiallvidd, waiting on the 2x images to download so I can snapshot those ;)20:16
KiallPITA waiting for them everytime i revert to a previous snapshot20:16
viddah ic20:17
viddwell...not really...but i understand =]20:17
*** anotherjesse has quit IRC20:17
*** anotherjesse_ is now known as anotherjesse20:17
koolhead17Kiall, so even on diablo quantum is needed :P20:17
Kialleven with that VM having at least 1Gb/s connection.. the cloud-images.ubuntu.com server is soooo sloooow20:17
koolhead17Could not import dashboard.views. Error was: No module named quantum.client20:18
Kiall<Kiall> koolhead17, yea, dashboard can make use of quantum20:18
Kiall<Kiall> but does not require it20:18
viddkoolhead17, why not just install it?20:19
*** anotherjesse has quit IRC20:19
*** dolphm_ has joined #openstack20:19
koolhead17vidd, installing it20:19
*** rnorwood has joined #openstack20:23
*** dolphm has quit IRC20:23
Kiallvidd, turns out i was doing something too fast ..20:24
*** dolphm_ has quit IRC20:24
vidd?20:24
Kialla sleep 5 between restarting keystone and running the data script fixed it20:24
*** lorin1 has left #openstack20:24
koolhead17vidd, http://paste.ubuntu.com/741546/  this is why :)20:25
KiallJust talking the "After Glance Complete" snapshot ;)20:26
Kiallvidd ^20:26
Kiallbased on the scripts in https://github.com/managedit/openstack-setup/tree/automated/20:26
Kiall(note the branch, its not the master branch)20:27
*** n88 has quit IRC20:28
cmasserafHello, I'm going to start installing openstack on a 1 ethernet server... I've read it has some modifications needed, anyone can poit me which ones? (I've only installed once in a 2 ethernet PC as a test)20:30
mjforkcmasseraf: i am not aware of any modifications needed - what are you tryign to do20:31
*** nati2 has joined #openstack20:32
*** haji has quit IRC20:33
*** dolphm has joined #openstack20:33
cmasserafinstall the cloud controller20:33
cmasserafsimple install20:34
*** rsampaio has joined #openstack20:34
koolhead17vidd, you think this strange issue am having cos of virtualenv20:34
*** dolphm has quit IRC20:35
mjforkcmasseraf: then no, should be no special things for yuo to do20:35
viddkoolhead17, it is definantly a possibility20:36
*** Aurelgadjo has joined #openstack20:37
cmasserafthanks everyone, will try a simple package install (since the script assumes 2 ethernets) and see what happens20:37
*** chrism_ has joined #openstack20:37
juddmfolks seeing this?  keystone-manage user list\n  "IndexError: tuple out of range."20:37
*** dprince has quit IRC20:37
chrism_I've got a cactus->diablo upgrade that refuses to start an instance now.   They perpetually hang in "pending" status.  No errors in any logs. =(20:38
chrism_any ideas?20:38
juddmnevermind. :)20:39
mjforkcmasseraf: are you not installing from package?20:40
*** Archeron has quit IRC20:40
*** dirkx_ has joined #openstack20:42
cmasserafthe last time I installed from a script which assumed 2 ethernets20:51
*** jeh has quit IRC20:51
*** jaypipes has quit IRC20:52
*** maplebed has joined #openstack20:52
maplebedI'm setting up swift and see in the /etc/swift/*-server.conf files, it requires a bind_ip.  If I leave that blank (or omit the directive) will it bind to all IPs on the host?  I'm trying to deploy a stardardized config and it'd be simpler if I didn't need to modify it per-host.20:53
*** Archeron has joined #openstack20:53
*** dgags has quit IRC20:54
viddmaplebed, most apps on openstack bind to 0.0.0.020:55
maplebedok.20:55
maplebedhttp://swift.openstack.org/howto_installmultinode.html keeps recommending specific IP addresses all over the place.20:56
viddmaplebed, i personally dont use swift =]20:56
maplebedgotcha.20:57
Spirilismaplebed: I can personally vouch that ignoring bind_ip causes it to bind 0.0.0.020:57
maplebedexcellent.20:57
maplebedthanks!20:57
*** katkee has quit IRC20:59
viddKiall, looks like its working =]21:01
viddwhat is different?21:01
Kiallvidd, yea, i was just about to say...21:01
vidd[so i can incorperate it in my scripts]21:01
KiallAll the scripts are working ;)21:01
Kiallbasically - a pile of sleeps21:01
vidddid you add sleeps to the keystone script as well?21:02
Kiallall over the place ;)21:02
viddwhat does the sleep do? is there a reason it is significant?21:03
Kiallyea - it lets stuff settle, DB tables get created etc etc etc21:05
viddso let me guess...doing a massive keystone data dump needs to sleep after each line?21:06
chrism_any ideas what would cause an instance to get stuck in "pending" state during creation on diablo?21:06
chrism_no errors in any logs. =(21:07
*** nyeates has quit IRC21:07
viddchrism_, all kinds of things can do that =]21:07
*** jaypipes has joined #openstack21:07
viddare you on an all in one?21:07
*** cp16net has quit IRC21:08
*** fulanito has joined #openstack21:08
chrism_vidd: nah, one system is api+scheduler+network and two are compute+volume21:09
viddare all machines in sync time-wise?21:09
fulanitokiall: do you know what does Cidr stads for?21:09
chrism_I believe, let me verify21:09
viddtime sync issues is usually the biggest culprit =]21:10
chrism_yeah, within like .05 of a second21:10
chrism_sorry, .00521:10
chrism_lol21:10
fulanitokiall: I wanto to assign a port 22 rule in the edit security group rules section in the dashboard, any advice?21:11
viddso....all smiles on the services list?21:11
chrism_yep21:11
fulanitohelp!!! anybody?21:12
*** dev_sa has joined #openstack21:12
chrism_i see the query hit the compute node, and get logged in /v/l/nova/nova-compute.log, but then it just sits there21:12
*** mgoldmann has quit IRC21:12
*** dev_sa has left #openstack21:12
viddKiall, those n\ 's are suposed to be \n\ 's21:14
fulanitovidd: http://docs.openstack.org/diablo/openstack-compute/starter/content/Security_Overview-d1e2505.html...... in this URL do you know who is 192.168.0.1?21:14
fulanitovidd: sorry, its 192,168.1.121:15
vidd[space]\n\[space]21:15
nouseHey guys, I'm trying to run euca-restart-instances but nova-network (Cactus release) seems to error out with this in the logs. http://pastebin.com/ii5eAdME21:15
*** fabiand__ has left #openstack21:15
viddfulanito, thats for the private ip's21:17
*** Turicas has quit IRC21:17
*** mdomsch has joined #openstack21:18
chrism_nouse: 184.75.196.201/32 is already bound to the system21:18
nousechrism_: Yes, it's assigned to another instance. The instance I'm trying to restart is .20021:18
Kiallvidd, I thoughts so ;)21:19
chrism_hrm yeah for some reason it's trying to use the same IP again21:19
Kiallvidd, BTW .. I have it down to "install ubuntu, login as root, install git, clone the scripts, edit settings, run ./all-in-one.sh" ;)21:20
*** msivanes has quit IRC21:22
*** haji has joined #openstack21:23
*** dolphm has joined #openstack21:23
hajikiall I still get a route to host21:24
hajiwith ssh21:24
Kiallhaji, this is with multiple servers, VLANs, and multi-node network right?21:26
hajiyep21:26
Kialland youre sure the switches and security group rules are right?21:27
*** haji has quit IRC21:31
*** jedi4ever has quit IRC21:31
chrism_so any ideas on how to debug these VMs getting stuck in "pending" during startup?21:33
chrism_I've added --debug to nova.conf and --verbose=1 i believe on all nodes21:33
chrism_=(21:33
*** nacx has joined #openstack21:34
*** haji has joined #openstack21:34
*** mdomsch has quit IRC21:34
hajithe vlan nova-network are working right21:35
*** nati2 has quit IRC21:35
hajithe security groups rules I don't know21:36
viddKiall, mine is similar....with the settings built as you go =]21:37
Kiallokay, well, from the compute node, you should be able to "bypass" the rules and access the fixed_ip directly21:38
hajiI don't which address from I should allow21:38
Kiall0.0.0.0/021:39
*** clopez has quit IRC21:40
hajioh21:40
*** hsmod has quit IRC21:40
Kiall0.0.0.0/0 == From anywhere...21:41
hajiokkk21:41
cmasserafwhen I made a nova-manage project zipfile... it returned a whron EC2_ACESS_KEY variable21:42
cmasserafit returned user:project when I wanted the key21:44
pweisskiall: which scripts are you using?21:44
cmasserafinstalling by package following http://www.rhonabwy.com/wp/2011/09/23/installing-openstack-diablo-release-nova-and-glance/21:44
Kiallpweiss, mine ;)21:45
pweisskiall: are you sharing?21:45
Kiallhttps://github.com/managedit/openstack-setup21:46
pweissthank you21:46
cmasserafthe problem is: I did not save that key... is there a way to retreive it?21:46
*** Razique has joined #openstack21:47
*** Razique_ has joined #openstack21:48
*** Razique has quit IRC21:48
*** Razique_ is now known as Razique21:48
*** Razique has quit IRC21:49
*** nacx has quit IRC21:49
*** Razique has joined #openstack21:49
*** troytoman-away is now known as troytoman21:50
cmasserafanyway to retreive the EC2_ACCESS_KEY from it?21:50
*** dwcramer has quit IRC21:52
Kiallcmasseraf, why are you thinking nova-manage gave you the wrong thing?21:52
cmasserafit gave me EC2_ACCESS_KEY as a user:project21:53
Kiallyea?21:54
Raziquehi :)21:54
Kiallcmasseraf, have you checked if they work? or just assuming they are wrong? ;)21:54
*** cdub has quit IRC21:55
cmasserafcloud-publish-image is giving me errors, and there was a comment on the guide I'm following about it21:55
KiallI would imagine its unrelated to the EC2 key, Nova doesnt use the same format of key ..21:56
Kiall..doesnt use the same format of key as EC2..*21:56
cmasserafoh21:57
cmasserafok21:57
cmasserafError: Unable to run euca--describe-images.  Is environment for euca- set up?21:57
Kiallif you type `env | grep EC2` you do you see the EC2 settings? (Just in case!)21:58
*** rnorwood has quit IRC21:58
KiallOtherwise, run with --debug, and failing that, check the server side logs21:58
cmasserafall variables are there... I'll try the --debug21:59
*** dendrobates is now known as dendro-afk22:00
*** rnorwood has joined #openstack22:00
*** dirkx_ has quit IRC22:00
cmasserafI returned me unrecnized option --debug22:00
Kiallmaybe its verbose, i use the nova tools rather than the eucalyptus tools myself...22:01
viddcmasseraf, you have keystone installed?22:02
*** dendro-afk is now known as dendrobates22:03
*** nati2 has joined #openstack22:03
cmasserafvidd: no, I don't22:04
cmasserafI'm finishing the instalation of nova now22:04
cmasserafKiall: didn't work either22:04
cmasserafunrecognized option22:04
viddcmasseraf, have you sources your creds?22:04
cmasserafyes22:04
vidddid you fix the EC2 env?22:05
cmasseraffix?22:05
viddby defaut it comes out $nova_user_name:$noav_project22:05
cmasserafyes22:06
viddit needs to be $REAL_KEY:$NOVA_PROJECT22:06
cmasserafthat's what I tought it was wrong22:06
Kiallreally?22:06
KiallI never had to change the project zipfiles22:06
viddKiall, yes...really22:06
cmasserafthe problem is I didn't save the real key...22:06
KiallBut, its been ages since I used nova without keystone22:06
viddcmasseraf, you used mysql right?22:07
cmasserafyes22:07
viddquerry your database22:07
vidd[or look it up in phpmyadmin]22:07
*** zparta has quit IRC22:07
cmasserafwhich table?22:08
vidduse i believe22:08
viddgive me a sec to verify22:08
viddyes...users22:09
cmasserafaccess_key?22:09
viddyep22:09
*** deshantm_laptop has quit IRC22:10
cmasserafchanged it and got the same error22:11
viddyou need to re-sourse your creds22:12
cmasserafdid it22:12
*** nati2 has quit IRC22:12
viddwhat error message?22:12
cmasserafUnable to run euca--describe-images.  Is environment for euca- set up?22:12
viddthen your creds are not properly sources22:12
vidddid you copy the *.pem 's to your ~/ folder?22:13
cmasseraf~/nova/creds/22:13
viddrun this:22:14
*** clauden_ has quit IRC22:14
viddcp ~/nova/creds/*.pem ~/22:14
Kiallvidd, wait. what22:14
Kiallno22:14
*** clauden_ has joined #openstack22:14
viddKiall, what do you mean "no"?22:14
Kialllook at the novarc file, the first thing it does is figure out what folder its in so it can set the ENV vars to the correct paths..22:15
*** haji has quit IRC22:15
viddif you look at the ENV it says the PEM is in the ~/folder22:15
Kiallthey, without a shadow of a doubt, do not need to be in the ~ folder22:15
cmasseraf#NOVA_KEY_DIR is setted correctly22:15
viddKiall, i always has to move them =\22:16
KiallBefore I started with keystone, I always unzipped nova.zip to ~/.nova .. and never had to edit the file..22:16
viddcmasseraf, humor me22:16
cmasserafI coppied anyway... no change22:17
*** stewart has joined #openstack22:17
cmasserafbut the variable is setted correctly22:17
viddcmasseraf, ok...delete the files that were copied (or if you moved them move them back)22:17
viddsome variable is not correct =\22:18
cmasserafI'll tray extracting it again22:18
cmasseraftry*22:18
viddcmasseraf, are you typing"--" in that command?22:19
*** marrusl has quit IRC22:20
cmasserafI'm running "cloud-publish-tarball $image imageBucket"22:20
viddcmasseraf, is that failing?22:20
cmasserafyes22:20
viddwhat is that error message?22:21
cmasserafbecause euca-describe-images fails22:21
cmasserafthe one I've sent22:21
cmasserafUnable to run euca--describe-images.  Is environment for euca- set up?22:21
*** mrevell has joined #openstack22:21
*** clauden_ has quit IRC22:21
viddcloud-publish-tarball should not be trying to do a describe image22:22
viddand "euca--describe-images" is an invalid command22:22
WormManthere's a reason I avoid the cloud publish and euca tarball stuff22:23
KiallWormMan++22:24
Kiallwhy use tools for eucalyptus with openstack, rather than openstacks own tools22:24
fulanitoanybody knows how to make an ssh to an instance?22:28
fulanitothe ip of the instance does not respond22:28
Kiallfulanito, have you setup the security rules to allow ssh?22:31
fulanitoyep, i did it for 0.0.0.0/022:31
Kialland you're sure the instance has booted correctly?22:32
Kiall(you checked the console logs..)22:32
*** haji has joined #openstack22:32
hajinope i still can't22:32
Kiallhaji, your internet connection must suck ;) constant ping timeouts!22:32
*** ldlework has quit IRC22:32
hajii can ping my vlan and br100 interface between nodes22:33
hajii can ping the public interface between nodes22:33
fulanitoyep is running and it ask for a user and password,22:33
hajibut i cant ping the fixed address from the instance22:33
Kiallfulanito, what do you mean it asks for a user/pass? in VNC?22:33
hajinor the floating ip22:34
fulanitoyes22:34
Kiallfulanito, ok .. thats normal so ;)22:34
Kiallfulanito, is it one of the stock ubuntu images? or something else?22:34
fulanitostock ubuntu images22:34
cmasserafNOVA_API_KEY should be userName or RealKey?22:35
Kiallcmasseraf, its been a while since i used nova without keystone, so I cant remember.. But I do remember not having to edit the novarc file22:35
Kiallfulanito, try enabling ping aswell and see if you can ping it22:36
Kiallhaji, honestly, I dont know..22:36
*** mikeyp is now known as mikeyp-lurking22:36
Kiallhaji, brctl show has the instance and vlan listed as bridged to br100?22:37
Kiallhaji, also.. eth1 is your public? and eth0 your VLAN right?22:37
hajieth1 is my public int22:39
hajiyep22:39
fulanitokiall: I have already enable port 22 for 0.0.0.0/0 ip22:39
KiallMaybe there is something up with that, I've only noticed a setting for the vlan interface22:39
hajibr100 8000.02163e2981d no vlan10022:40
Kiallfulanito, sure, but maybe something is wrong with SSH on the instance22:40
Kialltry enabling ICMP -1:-1 from 0.0.0.0/0 and pinging it22:40
fulanitowhen I ping it on a compute node it says de destination host is unreachable22:40
KiallAh .. the compute node should be able to ping the fixed IP of the node, regardless of security group rules22:41
Kiallhaji, do you have vlan_interface=eth0 and public_interface=eth1 set in your nova.conf's?22:42
hajiyeah22:42
hajii tried your updated scripts22:43
fulanitoit still does not respond22:43
Kiallhaji, really? I setup a 2x nic VM a few mins ago and they work a charm22:45
Kiallthey dont have a public_interface setting though22:45
Kiall(I just added it now that I found it)22:45
hajioh22:46
hajilet me add it22:46
hajithen22:46
*** mahmoh has joined #openstack22:46
cmasserafjust droped the database and restart the configuration to see if I did anything wrong22:49
*** mrevell has quit IRC22:49
hajithe ip address on the vlan interface should 172.16.X.X something22:51
hajicuz i have 192.168.X.X22:51
haji:o22:51
Kiallhaji, working?22:53
*** redconnection has joined #openstack22:53
hajinop22:54
Kiallhttp://paste.openstack.org/show/3409/22:54
Kiallthats my /etc/network/interfaces22:54
Kiallswap the eth0's obv22:54
Kiallbut ignore the vlan interface IP22:54
*** rsampaio has quit IRC22:55
Kiallset it to something completely unused, something that will never be used.22:55
KiallI use 172 for fixed IP stuff, and "real" IPs for Floating IPs and physical servers22:55
Kiallhence - the 192 address thats never seen a single packet of traffic22:56
*** nati2 has joined #openstack22:56
*** rsampaio has joined #openstack22:58
*** robbiew has quit IRC22:58
cmasserafnow my nova-manage is trhowing an exection on FlagsError(e)22:59
cmasserafI'll do a complete reinstall and use keystone22:59
Kiallhaji, http://paste.openstack.org/show/3410/23:00
Kiallcmasseraf, may I suggest the easy route? ;) https://github.com/managedit/openstack-setup/23:00
ohnoimdeadare there some magical instructions somewhere on how to acquire and upload a oneiric image to openstack with glance and keystone (and using the glance cli tool not euca2ools)?23:01
*** GheRivero_ has quit IRC23:02
ejatohnoimdead : i just pass that phase .. by studying backward :)23:02
*** aliguori has quit IRC23:02
Kiallglance add  -A KEYSTONE_TOKEN name="bla" is_public=true disk_format=qcow2 container_format=ovf < filename23:02
* ejat wish to have GUI for it rather than the glance CLI tools23:02
Kiallfrom memory23:02
pweisskiall…for your scripts….anything other than 11.10 and 2 nics? will it run in a VM?23:03
ejatKiall :)23:03
Kiallpweiss, everything bar the compute node will..23:03
ohnoimdeadyeah, adding image upload is on the roadmap for horizon. but right now, i'm pulling out what little hair i have left.23:03
Kialland .. i suppose, that could probably work too23:03
cmasserafKiall: scripts for each instalation? are they customizable?23:03
pweissthanks23:03
ohnoimdeadKiall: is filename the sec .img?23:03
hajikiall: http://pastebin.com/xQfgG9DL23:04
Kiallyea23:04
Kiallcmasseraf, semi... it makes some assumptions around VLAN network rather than FlatDHCP, and 2x nics etc23:04
ejatohnoimdead : noted23:04
Kiallcmasseraf, all the settings are here https://github.com/managedit/openstack-setup/blob/master/settings23:04
cmasserafI use only one ethenet device here23:04
Kiall(ie - not much..)23:04
*** stewart has quit IRC23:04
KiallBut it gives you a working nova+keystone+glace+dashboard at the end ;)23:05
cmasseraf=)23:05
cmasserafI'm having a look23:05
KiallInstalled from .deb's rather than git clones and random crap spewed accross /ust/local ;)23:05
*** jj0hns0n has joined #openstack23:06
Kiallhaji, 192.168.3.1 is the public facing IP of the conttroller node?23:06
hajii dont have the floating ips on the my public interface23:06
hajino thats the private interface23:06
cmasserafthe only problem is that my server only has eth023:07
hajior vlan interface connected to the switch23:07
Kiallk23:07
Kiallso that means 10.10.10.2 is the public IP of the controller node?23:07
cmasserafso how would I setup your script?23:07
hajiyeah23:07
ejatif using the devstack … how do i start all the component after restart the machine ?23:08
Kiallcmasseraf, 100% clean install (really - do this step), install git, clone the repo, edit settings.. run the files in the order the readme says23:08
ejatwithout rerun the script again ?23:08
*** imsplitbit has quit IRC23:09
Kiallhaji, honestly, I dont know!23:09
KiallMaybe take a step back and try with a single node first ;)23:09
haji:o23:10
KiallI just managed a full setup in 40mins with those scripts (excluding OS install)..  its not that long ;)23:10
Kialland 10 mins of that was downloading lucid and oneiric images ;)23:10
ejatKiall :)23:10
pweisskiall…was that an all in one?23:11
hajifml23:11
KiallYea23:11
Kiallgive the experimental "all-in-one.sh" a go ;)23:11
Kiallliterally - edit settings23:11
Kiallhit go23:11
Kialldone23:11
ejatsame goes to me ..23:11
hajii already tried devstack on a vm23:11
pweissim working on it…wanting for 11.10 to finish downloading23:11
Kiallhaji, sure.. what I mean is..23:12
cmasserafkiall: what I'm saying is23:12
Kiallstart with an all in one23:12
hajii used this to create floating ips: sudo nova-manage floating create --ip_range=10.10.10.224/2723:12
Kiallthen add a second compute node23:12
hajiaaah23:12
hajiooks23:12
Kiallthen remove compute from the controller if you want23:12
cmasserafI only have eth0 what i'd use here: PUBLIC_INTERFACE="eth0" # Interface for Floating IP traffic23:12
cmasserafVLAN_INTERFACE="eth1" # Interface for Fixed IP VLAN traffic23:12
cmasserafI only have the floating trafic23:12
Kiallcmasseraf, Honestly, I've never tried a single interface setup.. I simply have no clue if setting them both to eth0 will work23:12
Kiallmaybe it will.. but i have no idea!23:13
ohnoimdeadKiall: i can upload the oneiric .img into glance and it shows up fine. but when i try to launch an instance based on that image it has "0 bytes" ram and 0 GB disk. is there some metadata i'm missing or something?23:13
ejatKiall : i did with the single interface23:13
pweisskiall…what does your topology look like? 2 nics…one switch or two?23:13
mjforkohnoimdead: i am goign to guess a cached base image exists already with no content23:14
Kiallpweiss, the simple version of Public SW -> eth0 Server eth1 -> VLAN Switch23:14
Kialls/of/is/23:14
cmasserafejat: How did you do it?23:14
Kiallpweiss, but in real life, its 2x switches and nested VLANs ;)23:15
pweissmakes sense23:15
*** fulanito has quit IRC23:15
ejatcmasseraf : http://paste.ubuntu.com/741728/23:16
ejati edit the stack.sh as per instruction23:16
mjforkohnoimdead: look for a file in the images directory that has the ID of the base image that will not start23:16
ejatbut u still can change the fixed_range23:16
ejatthe u associate to the instance23:17
ohnoimdeadmjfork: where does glance store images?23:18
mjforknot glance, but on the nova node23:18
mjforkohnoimdead: basically, nova caches the image at first use.23:18
mjforkthe images directory is on the same level as instances23:19
ohnoimdeadmjfork: ok, same question: where does nova cache the image?23:20
*** robix has joined #openstack23:20
mjforkon my redhat box, /var/lib/libvirt/23:21
robixSeeing this error in Horizon in keypairs and other places.  Using devstack:  unexpected keyword argument 'api_key'23:21
ejatmjfork under qemu right ?23:22
mjforkejat: what do you mean?23:22
cloudflyhrmm23:22
ejat /var/lib/libvirt/qemu ?23:23
cloudflywhat's the clean way to restart a devstack install after a reboot?23:23
*** TheOsprey has quit IRC23:23
ohnoimdeadrobix: that is due to https://bugs.launchpad.net/horizon/+bug/891442 you can work around by updating python-novaclient in the horizon venv (tools/with_venv.sh pip install python-novaclient --update)23:23
*** Shentonfreude has quit IRC23:24
ohnoimdeadrobix: in horizon/openstack-dashboard/23:24
ejatcloudfly : rerun .. it will drop the db then will recreate back if im not mistaken ..23:25
mjforkejat: yes, that could be. whereever the instances are created. you can tell from the logs too.23:25
mikeyp-lurkingcloudfly: I hacked an if/else into the script, to just restart the services and screen sessions ear the end of the script.23:26
ejatok noted23:26
ejat$ ./with_venv.sh pip install python-novaclient --update23:26
ejat./with_venv.sh: line 4: ./../.dashboard-venv/bin/activate: No such file or directory23:26
*** mikeyp-lurking is now known as mikeyp23:26
*** colon_D has joined #openstack23:27
mjforkejat: ohnoimdead the file you need to delete serves as the base of the qcow2 disks23:27
ohnoimdeadejat: from one layer up: cd .. then tools/with_venv.sh blah blah23:27
ohnoimdeadmjfork: ok i'm looking at the libvirt.xml and this thing is totally borked. it's not even close to something functional. whatever part of nova that is building the libvirt.xml is expecting information that is not being provided...23:28
mikeypcloudfly: a rerun also works, but it rebuilds the db, not sure if it has other effects if you've tweaked things.23:28
mjforkgot an example?23:29
ejat.dashboard-venv23:29
ejat??23:29
ohnoimdeadmjfork: https://gist.github.com/137493323:30
mjforkohnoimdead: looks god to me23:30
*** rsampaio has quit IRC23:30
*** rsampaio has joined #openstack23:31
mjforkohnoimdead:  "cd /opt/stack/nova/nova/..//instances/instance-00000002/disk"23:31
ohnoimdeadmjfork: shouldn't there be a disk node?23:31
mjforki see 2 of them?23:31
ohnoimdeadmjfork: good lord, nm not looking at the right thing…23:32
*** redconnection has quit IRC23:32
ohnoimdeadmjfork: still, no love on firing up the instance23:32
*** dgags has joined #openstack23:33
*** ahasenack has quit IRC23:34
ohnoimdeadejat: run "tools/with_venv.sh pip install python-novaclient --upgrade" from the horizon/openstack-dashboard directory23:34
mjforkohnoimdead: do you have any running instances?23:34
ohnoimdeadwell nova says this one is "active"23:35
ejatstack@thinkpad:/opt/stack/horizon/openstack-dashboard$ tools/with_venv.sh pip install python-novaclient --upgrade23:35
ejattools/with_venv.sh: line 4: tools/../.dashboard-venv/bin/activate: No such file or directory23:35
mjforkohnoimdead: can you terminate it?23:35
ohnoimdeadejat: do you have the virtual env installed? is there a .dashboard-venv directory in openstack-dashboard? if not go all the way up to the horizon root and run "./run_tests.sh"23:36
ohnoimdeadmjfork: i could before (this is the fourth or fifth try) but i'll try again23:36
ejatnope23:36
*** llang629 has joined #openstack23:36
mjforkohnoimdead: once it is terminated, see if images or instances directories have any contents23:37
*** llang629 has left #openstack23:37
ohnoimdeadmjfork: terminated23:37
mjforkohnoimdead: is there anything in instances or images directories?23:38
ohnoimdeadmjfork: here's something odd, i only have an instances directory, not an images… instances now contains "_base"23:39
mjforkahh, yes. what is in _base23:40
mjforksorry, was doing this from memory and was confusing _base with imagse :(23:40
ohnoimdeadmjfork: stuff23:40
*** anotherjesse has joined #openstack23:40
mjforkdelete it23:40
ohnoimdeadmjfork: https://gist.github.com/137496723:41
mjforkdo an ls -l on it, i bet it has 0 length23:41
ohnoimdeadmjfork: including the _base dir or just its contents?23:41
mjforkjust the contents is fine23:42
ohnoimdeadmjfork: https://gist.github.com/137497123:42
ohnoimdeadmjfork: still want me to delete it?23:42
andrewbogottDoes this message mean that my instances have to have access to the outside internet in order to properly start up?23:42
andrewbogottwaiting for metadata service at http://169.254.169.254/2009-04-04/meta-data/instance-id23:42
mjforkohnoimdead: yes, i would. even though it lokos good.23:43
andrewbogottOr is 169.254.169.254 supposed to map to my host, somehow?23:43
mjforkohnoimdead: gievs you a fresh start. be sure to turn on verbose logging in nova.conf on this create23:43
andrewbogottHm... nm, may've found an answer...23:44
*** dubsquared has quit IRC23:45
cloudflyi'll give it a shot23:45
cloudflythanks23:45
andrewbogottwell, wait, this thread says that that shouldn't happen with flat dhcp (which I am using)23:46
mjforkandrewbogott: no, that is a speical url for resolving metadata that (i believe) has an iptables entry to resolve23:47
*** redconnection has joined #openstack23:48
andrewbogottYeah, I see.  So something is messed up with the network on my host.  (Foolishly, I expected devstack to take care of that for me.)23:49
mjforksingle machine sinstall?23:49
*** rsampaio has quit IRC23:49
ejatohnoimdead : Successfully installed python-novaclient httplib2 argparse prettytable23:50
ejatthanks23:50
*** rnorwood1 has joined #openstack23:51
*** AlanClark has quit IRC23:51
*** rsampaio has joined #openstack23:51
ohnoimdeadejat: cool, glad that helped23:51
ohnoimdeadmjfork: same deal but here's all of the logs i could get which may, or may not, be useful: https://gist.github.com/137500123:52
*** nerens has quit IRC23:54
mjforkone waning, but it looks ok. "ignoring error injecting data into image 4 (Mapped device was not found (we can only inject raw disk images): /dev/mapper/nbd15p1)"23:54
*** rnorwood has quit IRC23:54
*** Razique has quit IRC23:54
andrewbogottmjfork:  Yep, single machine, two nics.23:54
mjforkohnoimdead: what status does nova report for you instance? and what does virsh list show.23:54
mjforkandrewbogott: i would have expected it to just work. is nova-network running?23:55
andrewbogottyep, network is running. Nothing obvious in the logfile, but I'm still looking...23:56
*** troytoman is now known as troytoman-away23:56
*** ejat has quit IRC23:56
mjforkandrewbogott: run "ip addr show" is 169.254.169.254 shown?23:58
*** ejat has joined #openstack23:58
mjforkfor me it is on lo23:58
andrewbogottNope, lo is 127.0.0.1.23:59
*** daMaestro has joined #openstack23:59
daMaestrois it possible to do http://docs.amazonwebservices.com/AmazonS3/latest/dev/index.html?HTTPPOSTForms.html with openstack swift3?23:59
daMaestroit looks like it should be23:59
andrewbogottmjfork:  I do have HOST_IP=192.168.56.20 set because I wanted horizon to run in a place where I could reach it.  Maybe that's confounding the devstack setup.23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!