| *** CaptTofu has quit IRC | 00:03 | |
| *** CaptTofu has joined #openstack | 00:04 | |
| *** CaptTofu has quit IRC | 00:06 | |
| *** tmichael has joined #openstack | 00:09 | |
| *** miclorb_ has quit IRC | 00:09 | |
| *** miclorb_ has joined #openstack | 00:09 | |
| *** p0 has joined #openstack | 00:14 | |
| *** v0id has joined #openstack | 00:16 | |
| *** po has quit IRC | 00:18 | |
| *** rnorwood has quit IRC | 00:30 | |
| *** clauden___ has joined #openstack | 00:32 | |
| *** clauden has quit IRC | 00:32 | |
| *** clauden___ is now known as clauden | 00:32 | |
| *** yshh has joined #openstack | 00:33 | |
| *** clauden has quit IRC | 00:35 | |
| *** huslage has joined #openstack | 00:37 | |
| *** Ryan_Lane has joined #openstack | 00:39 | |
| *** clauden has joined #openstack | 00:39 | |
| *** pixelbeat has quit IRC | 00:41 | |
| *** p0 has quit IRC | 00:44 | |
| *** tmichael has quit IRC | 00:46 | |
| tightwork | how long should nova-manage db sync take? | 00:47 |
|---|---|---|
| *** tmichael has joined #openstack | 00:47 | |
| *** yshh has quit IRC | 00:48 | |
| *** livemoon has joined #openstack | 00:51 | |
| Spirilis | seconds | 00:51 |
| *** tmichael has quit IRC | 00:52 | |
| *** dotdevops has quit IRC | 00:52 | |
| Spirilis | if it's frozen, first place to look might be the mysql config in /etc/nova/nova.conf to see where it's pointing/validate you can connect to that mysql instance with the 'mysql' cli | 00:53 |
| Spirilis | i.e. the --sql_connection string | 00:53 |
| tightwork | arg its just hanging and if I strace the python process its just hanging at the mysql connect:connect(4, {sa_family=AF_INET, sin_port=htons(3306), sin_addr=inet_addr("10.10.0.1")}, 16 | 00:53 |
| Spirilis | aye, can you "telnet 10.10.0.1 3306" from that shell? | 00:54 |
| tightwork | NO... eek, maybe iptables rule? ... | 00:54 |
| tightwork | i set my.cnf to bind 0.0.0.0 | 00:54 |
| Spirilis | yeah that sounds right .. could be iptables, is 10.10.0.1 that same box you're running it from? | 00:55 |
| tightwork | it is | 00:55 |
| tightwork | hmm.. but I can mysql -h10.10.0.21 -uroot -p just fine | 00:56 |
| tightwork | wait a min sorry, telnet now I get a response | 00:56 |
| *** andrewbogott has quit IRC | 00:57 | |
| *** jdg has quit IRC | 00:59 | |
| tightwork | oh junk my pebcak... the box is really 0.21 and I had 0.1 in conf | 00:59 |
| *** MarkAtwood has quit IRC | 00:59 | |
| tightwork | UGH | 00:59 |
| tightwork | its migrating :) | 01:00 |
| tightwork | ty | 01:00 |
| livemoon | morning | 01:00 |
| tightwork | hi | 01:01 |
| *** ben_duyujie has joined #openstack | 01:01 | |
| *** clauden has quit IRC | 01:02 | |
| *** cmasseraf has quit IRC | 01:04 | |
| *** cdbs has quit IRC | 01:05 | |
| *** MarkAtwood has joined #openstack | 01:12 | |
| tightwork | The private network, is also considered the 'fixed range' and is configured as the bridged interface so its possible to communicate VMs across hypervisors? | 01:13 |
| Spirilis | yep | 01:18 |
| Spirilis | sounds right | 01:18 |
| Spirilis | and the "floating" network is publically routable IPs you can assign to individual VMs (funny enough the VMs don't even know about them, because they're entirely implemented in the nova-network router node's iptables as DNAT rules) | 01:19 |
| *** osier has quit IRC | 01:20 | |
| *** longhudou has joined #openstack | 01:22 | |
| *** heut2008 has joined #openstack | 01:22 | |
| tightwork | true, just like amazon | 01:22 |
| tightwork | is using nova-mange user admin novaadmin the --deprecated_auth ? The new hotness is keystone? | 01:27 |
| tightwork | the zipfile is deprecated | 01:28 |
| Spirilis | yeah | 01:28 |
| tightwork | hmm | 01:28 |
| tightwork | ok | 01:28 |
| Spirilis | I'm not that well versed in the deprecated vs. new keystone auth, only have experience with keystone atm | 01:28 |
| *** suedoh has quit IRC | 01:28 | |
| Spirilis | there's supposedly a way to enable EC2 access with keystone too, someone posted a pastebin of it | 01:28 |
| Spirilis | the bookmark's on my netbook though so I don't have it handy :( | 01:29 |
| tightwork | what you mean? like I cant use hybridfox with keystone? | 01:29 |
| tightwork | keystone should still be EC2 api auth no? | 01:29 |
| Spirilis | from what I understand just setting up straight users with keystone, you can't use the EC2 stuff right away, just the 'nova' cmd and such, but there's a special EC2 token type or something that you can use to associate it with a keystone user | 01:32 |
| Spirilis | then I think you should be able to hit it with an EC2 client. | 01:32 |
| tightwork | ohh | 01:32 |
| Spirilis | and the url is the nova-api direct, not the keystone url like you use for the nova cmds | 01:32 |
| tightwork | hmm | 01:33 |
| Spirilis | course that's how it works in deprecated auth too I think, you hit the nova-api directly with EC2 requests | 01:33 |
| tightwork | openstack-dashboard is working with keystone atm? | 01:33 |
| Spirilis | but with the new keystone your nova cmd hits up the keystone url | 01:33 |
| Spirilis | yeah | 01:33 |
| tightwork | I guess ill go the distance then | 01:33 |
| *** dougsland_ has joined #openstack | 01:34 | |
| Spirilis | I modeled my install after devstack's gits, and it uses keystone | 01:34 |
| Spirilis | works pretty well | 01:34 |
| tightwork | cool cant wait | 01:34 |
| tightwork | horror story.. just found new work, old work they spent over a year building a vm environment bandaid all in bash and php. Was horrible. | 01:35 |
| tightwork | About 50 bash scripts wrapped around virt-install | 01:36 |
| tightwork | api over an api | 01:36 |
| tightwork | id ask the sr devs why they didnt use libvirt api and they shurg or tell me to get lost | 01:37 |
| *** rnorwood has joined #openstack | 01:37 | |
| Spirilis | hahaha | 01:37 |
| Spirilis | ouch! | 01:37 |
| tightwork | prob blew over 500k in hardware..The gear wasnt bad, super micro 2U quad nodes, infiniband to zfs... y u no api? no idea | 01:39 |
| tightwork | life is weird | 01:39 |
| Spirilis | yeah | 01:40 |
| tightwork | and yea needless to say, it would crash and corrupt all the customer VMs | 01:41 |
| tjoy | damn | 01:42 |
| tightwork | even cooler to know one of the lead guys in charge of this dotBASH revolution got hired at facebook | 01:42 |
| *** miclorb_ has joined #openstack | 01:43 | |
| Spirilis | nice | 01:43 |
| dougsland_ | hello - anyone around uses gerrit-review? | 01:43 |
| *** halfss has joined #openstack | 01:43 | |
| Spirilis | I heard how deep facebook is into PHP, they drove the whole PHP-to-C++ compiler project (forget the name of it) because they just loved PHP so much and wanted to make it faster | 01:43 |
| halfss | hi,is there any body use chinese? dashboard can't input chinese | 01:44 |
| tightwork | if the cloud got DDos it would crash and corrupt VMs | 01:44 |
| tightwork | probably writing logs to the wrong place | 01:44 |
| *** andrewbogott has joined #openstack | 01:48 | |
| *** JesperA has quit IRC | 01:51 | |
| *** MarkAtwood has quit IRC | 01:56 | |
| *** sdake has quit IRC | 01:58 | |
| *** zul has quit IRC | 01:58 | |
| *** cdbs has joined #openstack | 02:00 | |
| *** cdbs has joined #openstack | 02:00 | |
| *** cdbs is now known as bilal | 02:00 | |
| uvirtbot | New bug: #907969 in glance "'index' instruction performance low" [Undecided,New] https://launchpad.net/bugs/907969 | 02:01 |
| *** JesperA has joined #openstack | 02:02 | |
| *** zul has joined #openstack | 02:03 | |
| *** neodosh has quit IRC | 02:03 | |
| *** rnorwood has quit IRC | 02:06 | |
| Spirilis | hmm | 02:06 |
| Spirilis | anyone in here know what it takes to get console output from your VM into that console.log? | 02:06 |
| Spirilis | my custom built VM doesn't seem to do it... wonder what I need to tweak to send dmesg and bootup stuff there | 02:06 |
| *** woleium has quit IRC | 02:09 | |
| *** JesperA has quit IRC | 02:09 | |
| *** erkules|away has joined #openstack | 02:09 | |
| *** erkules has quit IRC | 02:12 | |
| *** rods has quit IRC | 02:15 | |
| tightwork | Spirilis: you have to build that in? I thought that was just apart of --logdir ? | 02:16 |
| Spirilis | er? | 02:17 |
| Spirilis | not sure what --logdir is :) | 02:17 |
| Spirilis | kinda new to this | 02:17 |
| tightwork | Spirilis: flag in nova.conf | 02:17 |
| Spirilis | oh, no, I mean each running VM's console output... in /var/lib/nova/instances/instance-<blahblah>/console.log is supposed to have a log of console output from the guest I think | 02:19 |
| Spirilis | I think that tty.tgz stripped down vm image that devstack uses actually dumps output to there, but, I don't see it populated with my centos kvm image I just created. maybe it's just /dev/ttyS0 serial console or something | 02:20 |
| tightwork | ah yeah it is.. i had a slightly working system with devstack script but its way to fragile so im starting from scratch | 02:20 |
| tightwork | the cirros image | 02:20 |
| Spirilis | ah yeah that is exactly it, from the qemu-kvm cmdline: | 02:21 |
| Spirilis | -chardev file,id=charserial0,path=/var/lib/nova/instances/instance-00000004/console.log -device isa-serial,chardev=charserial0,id=serial0 | 02:21 |
| Spirilis | well having the spiffy html5 noVNC vnc-console is good enough for me imo | 02:22 |
| Spirilis | (served out through the horizon openstack-dashboard gui) | 02:22 |
| Spirilis | probably feels better/more native to the folks at work who'll be using it | 02:22 |
| tightwork | the pros of going kvm | 02:23 |
| tightwork | I guess it works with xen too? | 02:24 |
| tightwork | just weird you cant vnc into amazon | 02:24 |
| tightwork | scares me | 02:24 |
| *** maplebed has quit IRC | 02:25 | |
| *** bilal has quit IRC | 02:28 | |
| winston-d | hi guys, anyone has experience with multiple zone for nova? | 02:31 |
| *** woleium has joined #openstack | 02:32 | |
| tightwork | when I run keystone-manage from the docs, am I to run it verbatim with %HOST_IP% as this is a working variable? | 02:33 |
| tightwork | When creating endpoints | 02:34 |
| winston-d | tightwork : you leave %HOST_IP% as is when creating endpoint templates | 02:35 |
| *** hugo_kuo has joined #openstack | 02:36 | |
| *** hugo_kuo has quit IRC | 02:37 | |
| *** ClemSF has quit IRC | 02:41 | |
| *** rnorwood has joined #openstack | 02:41 | |
| tightwork | any bid to get the docs into epub? | 02:43 |
| tightwork | I know docs is already a chore :-/ | 02:44 |
| *** MarkAtwood has joined #openstack | 02:45 | |
| *** davlap has quit IRC | 02:54 | |
| *** osier has joined #openstack | 02:55 | |
| *** JesperA has joined #openstack | 02:57 | |
| *** rustam__ has quit IRC | 02:58 | |
| *** JesperA has quit IRC | 03:01 | |
| hugokuo | does anyone interesting about our openstack related service admin GUI ? | 03:04 |
| hugokuo | does anyone interesting about | 03:04 |
| hugokuo | http://dl.dropbox.com/u/16209558/ss.png | 03:04 |
| hugokuo | by Joe Yang.... | 03:04 |
| *** LarsN has left #openstack | 03:14 | |
| Spirilis | woo that's a nice looking horizon gui, is that the latest trunk or something? | 03:14 |
| tightwork | I'm trying to configure keystone, I run keystone-manage endpointTemplates add hv1 swift http://%HOST_IP/%:8080/v1/AUTH_%tenant_id% http://%HOST_IP%:8080/ http://%HOST_IP%:8080/v1/AUTH_%tenant_id% 1 1 and it says successful although I run keystone-manage service list and the list is empty? | 03:17 |
| winston-d | hugokuo: , i'm interested... | 03:17 |
| winston-d | hugokuo : have you tried multiple zones in nova? | 03:23 |
| *** tokuzfunpi has joined #openstack | 03:25 | |
| hugokuo | winston-d , not yet ..... | 03:25 |
| winston-d | hugokuo : i can't find any doc about that. don't know where to start | 03:25 |
| hugokuo | The Cloudena GUI made by , tokuzfunpi | 03:25 |
| hugokuo | winston-d , first step is http://dl.dropbox.com/u/16209558/ss.png | 03:27 |
| hugokuo | sorry | 03:27 |
| hugokuo | winston-d , http://nova.openstack.org/devref/distributed_scheduler.html | 03:27 |
| hugokuo | winston-d , after distributed_scheduler then you can read http://nova.openstack.org/devref/zone.html | 03:28 |
| hugokuo | I test multi-zone with these two documents before .... | 03:28 |
| winston-d | hugokuo : thx! very helpful. | 03:29 |
| winston-d | hugokuo : the problem is i see only 404 when using 'nova zone-list' or 'nova zone-info' | 03:30 |
| hugokuo | It's long time ago of my previous test .... can not remember all details ... But it seems the problem from scheduler type .... | 03:31 |
| hugokuo | you should change to distributer_scheduler or it can not get zone info | 03:31 |
| hugokuo | not sure .... did you fire up a QA in launchpad QA board about this issue ? | 03:32 |
| hugokuo | tty might give you a nice answer ... I guess | 03:32 |
| hugokuo | s/tty/ttx/g | 03:32 |
| winston-d | really? doesn't seem like the root cause but I will try change scheduler type. | 03:32 |
| winston-d | yeah, i should have tried QA board. thx | 03:33 |
| winston-d | where should i put the 'allow-admin-api' flag into? nova.conf? | 03:35 |
| winston-d | hugokuo: i got it. it is nova.conf | 03:37 |
| *** ldlework has quit IRC | 03:41 | |
| *** vizsla has quit IRC | 03:41 | |
| *** woleium has quit IRC | 03:50 | |
| *** woleium has joined #openstack | 03:50 | |
| *** oubiwann has quit IRC | 03:55 | |
| *** ben_duyujie has left #openstack | 03:55 | |
| livemoon | hugokuo: so cool GUI | 03:56 |
| tightwork | Adding endpoint templates with keystone-manage endpointTemplate add Zone nova correlates into keystone.conf's service-header-mappings = {'nova': 'X-Server-Management-Url' ? | 03:56 |
| *** gohko_nao has quit IRC | 03:57 | |
| *** gohko_nao has joined #openstack | 03:57 | |
| *** jeremy_ has joined #openstack | 03:58 | |
| *** jeremy_ has quit IRC | 03:58 | |
| *** jeremy_ has joined #openstack | 03:58 | |
| *** jeremy has quit IRC | 03:59 | |
| *** jeremy_ is now known as jeremy | 03:59 | |
| *** mjfork has quit IRC | 04:00 | |
| *** neodosh has joined #openstack | 04:02 | |
| *** jeremy has quit IRC | 04:06 | |
| *** huslage has quit IRC | 04:08 | |
| *** ldlework has joined #openstack | 04:09 | |
| *** jeremy has joined #openstack | 04:11 | |
| *** jeremy has quit IRC | 04:11 | |
| *** jeremy has joined #openstack | 04:11 | |
| *** tungvs has joined #openstack | 04:14 | |
| *** jeremy_ has joined #openstack | 04:17 | |
| *** jeremy_ has quit IRC | 04:17 | |
| *** jeremy_ has joined #openstack | 04:17 | |
| *** jeremy has quit IRC | 04:18 | |
| *** jeremy_ is now known as jeremy | 04:18 | |
| *** bilal has joined #openstack | 04:19 | |
| *** bilal has joined #openstack | 04:19 | |
| *** jeremy_ has joined #openstack | 04:21 | |
| *** jeremy_ has quit IRC | 04:21 | |
| *** jeremy_ has joined #openstack | 04:21 | |
| *** jeremy has quit IRC | 04:22 | |
| *** jeremy_ is now known as jeremy | 04:22 | |
| *** woleium has quit IRC | 04:27 | |
| *** jeremy_ has joined #openstack | 04:33 | |
| *** jeremy_ has quit IRC | 04:33 | |
| *** jeremy_ has joined #openstack | 04:33 | |
| *** bilal has quit IRC | 04:34 | |
| tungvs | hi guys, I'm doing a project to deploy openstack in my company, but I can not find any document about fully deployment design of openstack (which ensures security and high availability). Any suggests please ? | 04:35 |
| *** jeremy has quit IRC | 04:35 | |
| *** jeremy_ is now known as jeremy | 04:35 | |
| *** nRy has quit IRC | 04:35 | |
| *** llang629 has joined #openstack | 04:36 | |
| notmyname | tungvs: what part or parts of openstack? compute, storage, ? | 04:39 |
| *** jeremy has quit IRC | 04:39 | |
| tungvs | hi notmyname, I 'd like a total solution, but firstly let's say compute | 04:39 |
| notmyname | my expertise is more on the storage side :-). First off, any deployment of a large-scale distributed system needs to take into account your needs. IOW, it all depends on your use case | 04:40 |
| notmyname | that's sort of a cop-out, on my part though :-) | 04:40 |
| *** Rajaram has joined #openstack | 04:41 | |
| notmyname | I know there are several companies that will be happy to sell you their services to help design and/or deploy an openstack system | 04:42 |
| *** llang629 has quit IRC | 04:42 | |
| *** llang629_ has joined #openstack | 04:42 | |
| notmyname | rackspace, nebula, piston, perhaps others like HP, dell, or citrix | 04:42 |
| tungvs | thanks anyway, I'm looking for deployment design topology to compare between the above companies. | 04:43 |
| tungvs | I've got some basic ideas about vmware cloud, redhat is hard to find, Xen is the same :( | 04:43 |
| notmyname | ah. so stuff like "at least 4 servers here doing this, and 6 servers here. all using this sort of networking and etc"? | 04:44 |
| tungvs | openstack I've digged for sometimes, but for experiments only. When things get more serious, openstack documents are not enough | 04:44 |
| tungvs | yes, exactly, I'd like a topology and explainations how can it ensure the availability, loadbalancing ... etc | 04:45 |
| notmyname | indeed. openstack currently requires some good ops people to set it up and run it. it's not yet something that can be deployed at large scale with no handholding | 04:45 |
| notmyname | I can give guidelines on the swift side, but I really don't know the current best way to do things for nova | 04:46 |
| notmyname | (actually, I don't know the previous best way or any way for nova) | 04:46 |
| tungvs | then I would google some more about other solutions while waiting for some nova experts here. When it comes to storage, I would knock your door. Tks | 04:47 |
| notmyname | any time. | 04:47 |
| notmyname | I'll be in and out between now and the new year. this time of year I expect more people to be out than in. don't despair if you don't get a quick response :-) | 04:49 |
| tungvs | This is a free support channel, so it's good to have the answers, if there's none, despair is not my attitude :) | 04:50 |
| *** llang629__ has joined #openstack | 04:51 | |
| *** llang629_ has quit IRC | 04:51 | |
| *** jeremy has joined #openstack | 04:53 | |
| *** jeremy has quit IRC | 04:53 | |
| *** jeremy has joined #openstack | 04:53 | |
| *** supriya has joined #openstack | 04:53 | |
| *** llang629___ has joined #openstack | 04:56 | |
| *** llang629__ has quit IRC | 04:56 | |
| *** jeremy has quit IRC | 04:56 | |
| *** nyeates has joined #openstack | 05:00 | |
| *** bengrue has quit IRC | 05:02 | |
| *** tmichael has joined #openstack | 05:02 | |
| *** nyeates has quit IRC | 05:03 | |
| *** dpippenger has quit IRC | 05:03 | |
| *** llang629____ has joined #openstack | 05:05 | |
| *** llang629___ has quit IRC | 05:05 | |
| *** miclorb_ has quit IRC | 05:05 | |
| *** llang629____ is now known as llang629 | 05:05 | |
| *** jeremy has joined #openstack | 05:11 | |
| *** Gordonz has joined #openstack | 05:14 | |
| *** llang629 has left #openstack | 05:15 | |
| *** tmichael has quit IRC | 05:23 | |
| *** tmichael has joined #openstack | 05:24 | |
| *** tmichael has quit IRC | 05:28 | |
| *** v0id has quit IRC | 05:32 | |
| *** tungvs has quit IRC | 05:37 | |
| tightwork | errors errors errors | 05:40 |
| tightwork | oh errors | 05:40 |
| *** tungvs has joined #openstack | 05:41 | |
| *** nati2_ has joined #openstack | 05:43 | |
| *** nati2 has quit IRC | 05:46 | |
| *** bengrue has joined #openstack | 05:47 | |
| *** zhenhua has joined #openstack | 06:00 | |
| *** PeteDaGuru has quit IRC | 06:01 | |
| *** Gordonz has quit IRC | 06:02 | |
| *** jedi4ever has joined #openstack | 06:03 | |
| *** pradeep1 has joined #openstack | 06:11 | |
| *** avoine has left #openstack | 06:14 | |
| *** llang629 has joined #openstack | 06:18 | |
| *** krow has quit IRC | 06:25 | |
| *** llang629 has quit IRC | 06:31 | |
| *** llang629 has joined #openstack | 06:31 | |
| *** llang629_ has joined #openstack | 06:41 | |
| *** llang629 has quit IRC | 06:41 | |
| *** llang629_ has quit IRC | 06:45 | |
| *** llang629 has joined #openstack | 06:45 | |
| *** ldlework has quit IRC | 06:47 | |
| *** llang629 has quit IRC | 06:50 | |
| *** llang629 has joined #openstack | 06:50 | |
| *** vishy has left #openstack | 06:55 | |
| *** tssgery1 has joined #openstack | 06:56 | |
| *** llang629 has quit IRC | 07:02 | |
| *** llang629 has joined #openstack | 07:03 | |
| *** Bryanstein has quit IRC | 07:03 | |
| *** miclorb_ has joined #openstack | 07:07 | |
| *** Bryanstein has joined #openstack | 07:08 | |
| *** llang629_ has joined #openstack | 07:14 | |
| *** llang629 has quit IRC | 07:15 | |
| *** llang629_ is now known as llang629 | 07:15 | |
| *** perestrelka has quit IRC | 07:19 | |
| *** andrewbogott has quit IRC | 07:21 | |
| *** llang629_ has joined #openstack | 07:24 | |
| *** llang629 has quit IRC | 07:24 | |
| *** Ryan_Lane has quit IRC | 07:24 | |
| *** supriya has quit IRC | 07:27 | |
| *** marcuz has joined #openstack | 07:28 | |
| *** llang629__ has joined #openstack | 07:30 | |
| *** llang629__ is now known as llang629 | 07:30 | |
| *** wilmoore has quit IRC | 07:30 | |
| *** llang629_ has quit IRC | 07:31 | |
| *** wilmoore has joined #openstack | 07:31 | |
| *** krow has joined #openstack | 07:34 | |
| *** guigui has joined #openstack | 07:37 | |
| *** llang629_ has joined #openstack | 07:39 | |
| *** llang629 has quit IRC | 07:40 | |
| *** supriya has joined #openstack | 07:43 | |
| *** tjikkun has quit IRC | 07:46 | |
| *** tjikkun has joined #openstack | 07:46 | |
| *** tjikkun has joined #openstack | 07:46 | |
| *** llang629_ has quit IRC | 07:53 | |
| *** llang629 has joined #openstack | 07:53 | |
| *** foexle has joined #openstack | 07:58 | |
| *** rnorwood has quit IRC | 07:58 | |
| *** arusa has joined #openstack | 07:59 | |
| *** hingo has joined #openstack | 08:00 | |
| *** llang629 has quit IRC | 08:01 | |
| *** llang629 has joined #openstack | 08:02 | |
| *** Ryan_Lane has joined #openstack | 08:03 | |
| *** longhudou has quit IRC | 08:06 | |
| *** ben_duyujie has joined #openstack | 08:09 | |
| *** Bryanstein has quit IRC | 08:10 | |
| *** ben_duyujie has left #openstack | 08:10 | |
| *** miclorb_ has quit IRC | 08:10 | |
| *** dev_sa has joined #openstack | 08:16 | |
| *** dev_sa has left #openstack | 08:16 | |
| *** tungvs has quit IRC | 08:17 | |
| *** wariola has joined #openstack | 08:18 | |
| *** javiF has joined #openstack | 08:19 | |
| *** Bryanstein has joined #openstack | 08:20 | |
| *** katkee has joined #openstack | 08:20 | |
| *** llang629 has quit IRC | 08:24 | |
| *** llang629 has joined #openstack | 08:24 | |
| *** llang629 has quit IRC | 08:32 | |
| *** llang629 has joined #openstack | 08:32 | |
| *** ben_duyujie has joined #openstack | 08:35 | |
| *** Ryan_Lane has quit IRC | 08:37 | |
| *** llang629__ has joined #openstack | 08:45 | |
| *** llang629 has quit IRC | 08:45 | |
| *** krow has quit IRC | 08:46 | |
| *** llang629__ has quit IRC | 08:55 | |
| *** llang629__ has joined #openstack | 08:55 | |
| *** supriya has quit IRC | 08:56 | |
| *** llang629__ is now known as llang629 | 08:56 | |
| *** nacx has joined #openstack | 08:59 | |
| *** nati2_ has quit IRC | 08:59 | |
| *** heyho has joined #openstack | 09:00 | |
| *** llang629 has quit IRC | 09:01 | |
| *** llang629 has joined #openstack | 09:01 | |
| heyho | Hello, I can't ping and can't ssh into instances created with euca2tools. I also have used euca-authorize for tcp 22 and icmp. Does anyone know what should I do next? | 09:06 |
| *** javiF has quit IRC | 09:07 | |
| *** ben_duyujie has quit IRC | 09:12 | |
| *** pixelbeat has joined #openstack | 09:17 | |
| *** derekh has joined #openstack | 09:18 | |
| flamboz | heyho, did you associate any public ip address to your instance ? | 09:18 |
| *** llang629 has quit IRC | 09:21 | |
| *** llang629 has joined #openstack | 09:21 | |
| heyho | flamboz: actually no. Should I do that with euca-allocate and euca-associate? | 09:23 |
| *** adam_ has joined #openstack | 09:26 | |
| *** llang629 has quit IRC | 09:27 | |
| *** llang629 has joined #openstack | 09:27 | |
| adam_ | Hello, Im really new to OpenStack and have managed to get a devstack system up. Im now struggling to get a VM running on the stack. Can someone point me in the right direction to either create a ubuntu vm or upload a pre made image? | 09:28 |
| flamboz | adam_ wget http://uec-images.ubuntu.com/releases/10.04/release/ubuntu-10.04-server-uec-amd64.tar.gz | 09:29 |
| flamboz | then uec-publish-tarball ubuntu-10.04-server-uec-amd64.tar.gz mybucket | 09:29 |
| *** tokuzfunpi has quit IRC | 09:29 | |
| adam_ | Thanks Flamboz... | 09:29 |
| adam_ | is there any reading i can do on that method? | 09:29 |
| flamboz | you can visiti uec-images.ubuntu.com from your browser to pick your desired distro | 09:30 |
| heyho | flamboz: Ok I did it and now I can ssh via the vm pubblic address; however, in the opestack starter guide the ssh command was set to connect via the private adress. How is that possible? | 09:31 |
| flamboz | adam_ there are many ways to have an image... you either build it by yourself (using KVM and VNC), or download one from UEC, then either publish it using Glance or by using uec-publish-tarball | 09:31 |
| adam_ | Glance is for the kvm mehtod? | 09:32 |
| flamboz | heyho, I can connect to my VM using the private ip only from the machine where I run nova-network or from other VMs | 09:32 |
| *** katkee has quit IRC | 09:32 | |
| *** llang629 has quit IRC | 09:33 | |
| flamboz | adam_ , not really... cause you can still use Glance to upload your image after you made it from scratch | 09:33 |
| *** llang629 has joined #openstack | 09:33 | |
| heyho | flamboz: Ok, I get it. Is there a way to avoid to manually assign a public ip to the instance? | 09:33 |
| adam_ | flamboz , Thanks ill take a look at the uec-publish-tarball method. Looks to be the easiest. | 09:34 |
| *** Eyk^off is now known as Eyk | 09:35 | |
| flamboz | heyho you don't always want to do that... in the case of a database instance, where you only want another instance to access it (the app server) .... but found auto_assign_floating_ip flag that you can set to true (But I haven't tested it) | 09:36 |
| flamboz | heyho in case it doesn't work, this should fix http://uksysadmin.wordpress.com/2011/12/02/openstack-auto-assign-floating-ip-not-working-in-diablo/ | 09:37 |
| adam_ | flamboz sorry to keep bothering you but im using 'cloud-publish-tarball oneiric-server-cloudimg-amd64.tar.gz mybucket' and getting the error 'Unable to run euca--describe-images. Is environment for euca- set up?' | 09:41 |
| flamboz | did you source the novarc ? | 09:41 |
| flamboz | right ? | 09:41 |
| adam_ | sorry i dont understand, im really just starting off as a bit of a personal learning | 09:42 |
| flamboz | did you create a project ? | 09:42 |
| adam_ | I thought i have | 09:43 |
| *** erkules|away has quit IRC | 09:43 | |
| *** erkules|away has joined #openstack | 09:43 | |
| *** erkules|away is now known as erkules | 09:43 | |
| flamboz | a user ? | 09:43 |
| adam_ | i thought devstack creates one | 09:43 |
| flamboz | oww | 09:43 |
| flamboz | wait | 09:43 |
| flamboz | can you do a euca-describe-images ? | 09:44 |
| heyho | flamboz, thanks for the info | 09:44 |
| adam_ | yes, i get EC2_ACCESS_KEY environment variable must be set. | 09:44 |
| *** llang629 has quit IRC | 09:45 | |
| flamboz | is there any nova.zip in the folder where you executed the script ? | 09:45 |
| *** llang629 has joined #openstack | 09:46 | |
| adam_ | no | 09:46 |
| flamboz | I'm taking a look at the script | 09:47 |
| *** Vivek has joined #openstack | 09:47 | |
| adam_ | ok Thanks flamboz | 09:47 |
| *** kaigan has joined #openstack | 09:50 | |
| *** wilmoore has quit IRC | 09:51 | |
| flamboz | adam_ can you point your browser to where you executed the script | 09:51 |
| flamboz | you should actually have a nice web interface ready | 09:51 |
| adam_ | yes i do, i have a dashboard | 09:51 |
| adam_ | and can log in | 09:51 |
| flamboz | along with an image (tty linux) | 09:52 |
| adam_ | and there is a demo project i believe | 09:52 |
| adam_ | i dont see any images | 09:52 |
| adam_ | ill log in now | 09:52 |
| flamboz | try to start an instance from that dashboard | 09:52 |
| adam_ | I can do that | 09:52 |
| adam_ | the only image i have is cirros-0.3.0-x86_64-blank | 09:52 |
| adam_ | which doenst do alot | 09:53 |
| flamboz | did you run the latest devstack script ? | 09:53 |
| adam_ | this is why i was wanting to upload a pre built image | 09:53 |
| adam_ | yes i think so | 09:53 |
| flamboz | I'm afraid to break your setup... as it's all depending on keystone (which I don't use yet) | 09:54 |
| adam_ | its ok i have it on a vm | 09:55 |
| flamboz | I'd create a user "nova-manage user admin adam" | 09:55 |
| flamboz | then a project "nova-manage project create adamproj adam" | 09:55 |
| adam_ | ok | 09:55 |
| flamboz | then get the credentials for it "nova-manage project zipfile adamproj adam" | 09:55 |
| flamboz | it will generate a nova.zip | 09:56 |
| flamboz | that you should unzip then source the novarc "source novarc" | 09:56 |
| flamboz | after that you can interact with your cloud using euca2ools... | 09:56 |
| *** uksysadmin has joined #openstack | 09:56 | |
| adam_ | ok it looks like there are some errors just using nova-manage user admin adam | 09:57 |
| adam_ | i think that i should maybe do a manual install | 09:57 |
| adam_ | it may help my understanding of the components | 09:57 |
| flamboz | I did a manual install and I can help you with it... | 09:58 |
| adam_ | ok great, well Ill give it a go and may be back in the new year! | 09:58 |
| flamboz | if nova-manage doesn't work for the users, then use keystone | 09:58 |
| flamboz | http://docs.openstack.org/diablo/openstack-identity/admin/content/ | 09:58 |
| adam_ | Thanks for the help flamboz | 10:00 |
| *** livemoon has left #openstack | 10:01 | |
| flamboz | ;) | 10:02 |
| *** rustam has joined #openstack | 10:05 | |
| *** llang629_ has joined #openstack | 10:07 | |
| *** llang629 has quit IRC | 10:07 | |
| *** j^2 has quit IRC | 10:07 | |
| *** j^2 has joined #openstack | 10:08 | |
| *** llang629__ has joined #openstack | 10:11 | |
| *** llang629_ has quit IRC | 10:12 | |
| *** katkee has joined #openstack | 10:15 | |
| *** llang629 has joined #openstack | 10:17 | |
| *** pradeep1 has quit IRC | 10:18 | |
| *** llang629__ has quit IRC | 10:18 | |
| *** javiF has joined #openstack | 10:19 | |
| *** llang629_ has joined #openstack | 10:23 | |
| *** llang629 has quit IRC | 10:23 | |
| *** halfss has quit IRC | 10:28 | |
| *** llang629 has joined #openstack | 10:30 | |
| *** llang629_ has quit IRC | 10:30 | |
| *** wariola has quit IRC | 10:31 | |
| *** supriya has joined #openstack | 10:34 | |
| *** hugokuo has quit IRC | 10:34 | |
| *** po has joined #openstack | 10:35 | |
| *** zigo has joined #openstack | 10:38 | |
| *** yshh has joined #openstack | 10:42 | |
| *** llang629__ has joined #openstack | 10:42 | |
| *** llang629 has quit IRC | 10:42 | |
| *** adam_ has quit IRC | 10:43 | |
| *** llang629__ has quit IRC | 10:47 | |
| *** llang629 has joined #openstack | 10:48 | |
| *** anticw has quit IRC | 10:49 | |
| *** anticw has joined #openstack | 10:49 | |
| *** lxu has joined #openstack | 10:51 | |
| lxu | hi guys. I want to create redundancy for nova-volumes between two nodes. I was looking at lvm redundancy but looks like this need to be done at lv creation, which is the responsability of openstack to do it. There's some way i can do it? | 10:54 |
| jd___ | you mean replication ? | 10:55 |
| foexle | lxu clvm+corosync | 10:55 |
| foexle | and glusterfs | 10:56 |
| lxu | yes, replication | 10:56 |
| lxu | foexle ty i will take a look at this tools | 10:59 |
| jd___ | sheepdog or ceph | 11:03 |
| *** qazwsx has joined #openstack | 11:04 | |
| *** yshh has quit IRC | 11:05 | |
| *** kaigan has quit IRC | 11:10 | |
| *** Bryanstein has quit IRC | 11:11 | |
| *** souza has joined #openstack | 11:11 | |
| *** MarkAtwood has quit IRC | 11:13 | |
| *** zigo has quit IRC | 11:19 | |
| *** llang629 has quit IRC | 11:22 | |
| *** llang629 has joined #openstack | 11:23 | |
| *** pradeep has joined #openstack | 11:32 | |
| *** katkee has quit IRC | 11:36 | |
| *** supriya has quit IRC | 11:36 | |
| *** llang629___ has joined #openstack | 11:45 | |
| *** llang629 has quit IRC | 11:45 | |
| *** katkee has joined #openstack | 11:46 | |
| *** llang629____ has joined #openstack | 11:50 | |
| *** llang629___ has quit IRC | 11:51 | |
| *** dougsland_ has left #openstack | 11:52 | |
| *** heyho has quit IRC | 11:54 | |
| *** llang629 has joined #openstack | 12:01 | |
| *** llang629____ has quit IRC | 12:02 | |
| *** llang629_ has joined #openstack | 12:07 | |
| *** llang629 has quit IRC | 12:07 | |
| *** Bryanstein has joined #openstack | 12:08 | |
| *** osier has quit IRC | 12:12 | |
| *** llang629__ has joined #openstack | 12:13 | |
| *** llang629_ has quit IRC | 12:13 | |
| *** vizsla has joined #openstack | 12:15 | |
| *** javiF has quit IRC | 12:27 | |
| *** llang629___ has joined #openstack | 12:32 | |
| *** llang629__ has quit IRC | 12:32 | |
| *** tssgery1 has left #openstack | 12:33 | |
| *** llang629___ has quit IRC | 12:41 | |
| *** llang629 has joined #openstack | 12:41 | |
| *** MrHeat has joined #openstack | 12:49 | |
| MrHeat | hi folks | 12:49 |
| *** Bryanstein has quit IRC | 12:51 | |
| *** llang629 has quit IRC | 12:54 | |
| *** llang629 has joined #openstack | 12:54 | |
| *** Bryanstein has joined #openstack | 12:56 | |
| *** lxu has quit IRC | 12:58 | |
| *** oarcher has quit IRC | 12:59 | |
| *** llang629 has quit IRC | 13:00 | |
| *** rustam has quit IRC | 13:14 | |
| *** lxu has joined #openstack | 13:15 | |
| *** darraghb has joined #openstack | 13:16 | |
| lxu | im having a problem with nova-network. I coudn't ping instances that were created on another computer than the controller. Now i see that restarting the nova-network makes it available. | 13:16 |
| lxu | i suppose that i don't need to that for each isntance that i run | 13:17 |
| *** PotHix has joined #openstack | 13:23 | |
| MrHeat | Someone knows how to solve error on nova-network? It says on log: RTNETLINK error 254 | 13:25 |
| MrHeat | same error as here: https://answers.launchpad.net/nova/+question/178399 (at least, i think) | 13:31 |
| *** Hakon|mbp has joined #openstack | 13:33 | |
| *** leifmadsen has joined #openstack | 13:34 | |
| *** oarcher has joined #openstack | 13:40 | |
| *** dprince has joined #openstack | 13:41 | |
| *** lxu has quit IRC | 13:42 | |
| *** heut2008 has quit IRC | 13:43 | |
| *** rustam has joined #openstack | 13:49 | |
| *** supriya has joined #openstack | 13:50 | |
| *** darraghb has quit IRC | 13:51 | |
| benner | MrHeat: try to see ip addr show if your IP already exists | 13:52 |
| MrHeat | well, after restaring nova-network its works fine. but i had to restart nova-network everytime i init a instance.... | 13:53 |
| *** mjfork has joined #openstack | 13:55 | |
| *** leifmadsen has quit IRC | 13:56 | |
| *** oarcher has quit IRC | 13:56 | |
| MrHeat | mjfork: remember the error that i had yesterday, i need to restart nova-network every instance that i rune. Should it be a new bug? | 13:56 |
| mjfork | MrHeat: yes, i would open it. | 13:57 |
| mjfork | MrHeat: so every time you deploy, no connecitivty to instances until nova-network is rebhooted? | 13:57 |
| MrHeat | Yes, no extern connectivity util you reboot nova-instance | 13:58 |
| mjfork | the instance or nova-network? | 13:58 |
| MrHeat | nova-network, sorry | 13:58 |
| MrHeat | I'm using ubuntu repos, ubuntu 11.10 | 13:58 |
| mjfork | diablo or essex | 13:58 |
| MrHeat | diablo | 13:58 |
| MrHeat | its official from ubuntu 11.10 | 13:59 |
| mjfork | i haven't seen that before, so there must be something unique about your setup. | 13:59 |
| mjfork | can you send me a nova-network and nova-compute log for a new deployment ? | 14:00 |
| MrHeat | 2011.3 (2011.3-nova-milestone-tarball:tarmac-20110922115702-k9nkvxqzhj130av2) | 14:00 |
| MrHeat | let me get it | 14:00 |
| *** lloydde has joined #openstack | 14:01 | |
| *** lloydde_ has joined #openstack | 14:01 | |
| benner | ubuntu 11.10 by self has openstack packets? | 14:02 |
| Kiall | yes, but the keystone and dashboard packages are broken, so if you want those you need to look elsewhere for packages.. | 14:02 |
| *** leifmadsen has joined #openstack | 14:03 | |
| MrHeat | mjfork can u give me an email to send to you? | 14:03 |
| mjfork | MrHeat: use paste.openstack.org | 14:04 |
| *** souza has quit IRC | 14:04 | |
| *** lloydde has quit IRC | 14:05 | |
| benner | Kiall: will change situation on 12.04? | 14:05 |
| mjfork | benner: is yuor goal a PoC Environemnt? | 14:05 |
| *** PeteDaGuru has joined #openstack | 14:06 | |
| Kiall | benner: it should get fixed in 11.10 eventually... | 14:06 |
| MrHeat | ok, i'll send you later, had to go | 14:07 |
| Kiall | I ended up repackaging everything because the stock ubuntu keystone/dashboatd packages are broken, and the stock packages for everything are outdated.. There have been loads of bugfixes since the diablo release... | 14:07 |
| *** MrHeat has quit IRC | 14:07 | |
| Kiall | I have them all in a public PPA if they are of any use to you... http://launchpad.net/~managedit/+archive/openstack | 14:09 |
| *** kbringard has joined #openstack | 14:09 | |
| *** crayon_z has joined #openstack | 14:13 | |
| *** uksysadmin has quit IRC | 14:25 | |
| *** adasiek_abix has quit IRC | 14:32 | |
| *** adasiek_abix has joined #openstack | 14:35 | |
| *** mchenetz has joined #openstack | 14:37 | |
| *** huslage has joined #openstack | 14:39 | |
| *** cmasseraf has joined #openstack | 14:43 | |
| *** cmasseraf has quit IRC | 14:45 | |
| *** cmasseraf has joined #openstack | 14:48 | |
| *** Eyk is now known as Eyk^off | 14:55 | |
| *** Eyk^off is now known as Eyk | 14:55 | |
| *** hadrian has joined #openstack | 15:00 | |
| *** mattray has joined #openstack | 15:01 | |
| *** CaptTofu has joined #openstack | 15:02 | |
| *** robbiew has joined #openstack | 15:03 | |
| benner | mjfork: just researching atm | 15:05 |
| mjfork | ok, you can use the standard repos packages + keystone/dashbaord from source. | 15:05 |
| mjfork | if you just want to get a feel for it | 15:05 |
| Kiall | mjfork: or my 11.10 packages.. ;) | 15:06 |
| benner | now i am doing as docs.openstack/ says basicly | 15:07 |
| mjfork | yeah, or Kiall's | 15:07 |
| benner | :) | 15:07 |
| mjfork | benner: if you want a fast deployment, use devstack | 15:07 |
| *** exekias has joined #openstack | 15:08 | |
| mjfork | single machine | 15:08 |
| *** pradeep has quit IRC | 15:08 | |
| *** Rajaram has quit IRC | 15:08 | |
| *** judd7 has joined #openstack | 15:09 | |
| *** guigui has quit IRC | 15:09 | |
| benner | hw is not the case, so for now i have 5 storage nodes, 1 proxy, 1 mysql for swift. swauth is runing good, trying to do keystone for auth. next will be glance and then nova | 15:09 |
| benner | i think it is correct order to try :) | 15:10 |
| *** rnorwood has joined #openstack | 15:10 | |
| *** corrigan has joined #openstack | 15:10 | |
| *** PiotrSikora has quit IRC | 15:10 | |
| Kiall | yea, keystone -> glance -> nova -> dashboard is thew right order... | 15:10 |
| Kiall | You can do them in any order really, but that order lets you test each component works before moving on to the next | 15:11 |
| benner | yes, but for example to make correct i must use swift as storage backend in glance, so i thirst need understand cocepts of swift and have it running | 15:12 |
| *** PiotrSikora has joined #openstack | 15:12 | |
| benner | *first | 15:12 |
| *** huslage has quit IRC | 15:13 | |
| *** pradeep1 has joined #openstack | 15:13 | |
| *** tmichael has joined #openstack | 15:14 | |
| notmyname | benner: why do you have a box for mysql for swift? | 15:15 |
| *** shaon has joined #openstack | 15:20 | |
| *** ldlework has joined #openstack | 15:22 | |
| *** lloydde_ has quit IRC | 15:29 | |
| *** perestrelka has joined #openstack | 15:32 | |
| *** JesperA has joined #openstack | 15:39 | |
| benner | notmyname: for keystone | 15:45 |
| *** cp16net has joined #openstack | 15:49 | |
| notmyname | benner: ah ok. carry on then :-) | 15:50 |
| Glacee | notmyname: morning | 15:55 |
| notmyname | Glacee: sorry, I'm just getting in the car to go visit family for a few days | 15:56 |
| *** notmyname has left #openstack | 15:56 | |
| *** cmasseraf has quit IRC | 15:59 | |
| *** arusa has quit IRC | 16:06 | |
| *** nyeates has joined #openstack | 16:06 | |
| *** marcuz has quit IRC | 16:08 | |
| *** freeflyi1g has quit IRC | 16:10 | |
| *** freeflying has joined #openstack | 16:10 | |
| *** bcwaldon has joined #openstack | 16:11 | |
| *** davlap has joined #openstack | 16:11 | |
| *** stuntmachine has joined #openstack | 16:23 | |
| *** sdake has joined #openstack | 16:29 | |
| *** stuntmachine has quit IRC | 16:29 | |
| sdake | hi - if I kill a virtual machine with euca-terminate-instances, sometimes the remaining virtual machines network goes out for 30-60 seconds | 16:36 |
| sdake | I have tracked this down to what looks like an arp response being corrupted - first 2 bytes are changed from FE to 02 | 16:37 |
| sdake | any tips? | 16:37 |
| *** wilmoore has joined #openstack | 16:37 | |
| *** sdake has quit IRC | 16:39 | |
| *** JesperA has quit IRC | 16:39 | |
| *** sdake has joined #openstack | 16:40 | |
| *** nyeates has quit IRC | 16:40 | |
| *** nati2 has joined #openstack | 16:44 | |
| *** zigo has joined #openstack | 16:45 | |
| *** Hakon|mbp has quit IRC | 16:50 | |
| *** adjohn has joined #openstack | 16:54 | |
| mjfork | sdake: open a bug report | 16:59 |
| mjfork | sdake: https://bugs.launchpad.net/nova/+filebug | 17:00 |
| *** leifmadsen has quit IRC | 17:03 | |
| *** adjohn has quit IRC | 17:04 | |
| *** cp16net has quit IRC | 17:05 | |
| *** cp16net has joined #openstack | 17:06 | |
| *** woleium has joined #openstack | 17:06 | |
| uvirtbot | New bug: #908180 in glance "Test migrations on PostgreSQL" [Wishlist,Triaged] https://launchpad.net/bugs/908180 | 17:06 |
| *** leifmadsen has joined #openstack | 17:16 | |
| *** leifmadsen has quit IRC | 17:16 | |
| *** leifmadsen has joined #openstack | 17:16 | |
| *** dotdevops has joined #openstack | 17:18 | |
| *** oubiwann has joined #openstack | 17:19 | |
| sdake | mjfork will do | 17:19 |
| *** cp16net has quit IRC | 17:21 | |
| *** cp16net has joined #openstack | 17:21 | |
| *** zigo has quit IRC | 17:22 | |
| *** katkee has quit IRC | 17:23 | |
| *** livemoon has joined #openstack | 17:24 | |
| livemoon | hi,all | 17:24 |
| livemoon | Does nova(using kvm) support resize cpu or mem ? | 17:25 |
| *** Vivek has quit IRC | 17:27 | |
| *** Eyk is now known as Eyk^off | 17:27 | |
| mjfork | livemoon: yes, i believe so, but requires live migration | 17:28 |
| livemoon | ok | 17:29 |
| mjfork | livemoon: looking for link | 17:29 |
| livemoon | thanks | 17:29 |
| *** cp16net has quit IRC | 17:29 | |
| *** cp16net has joined #openstack | 17:30 | |
| mjfork | livemoon: http://docs.openstack.org/api/openstack-compute/1.1/content/Resize_Server-d1e3707.html | 17:30 |
| *** JesperA has joined #openstack | 17:32 | |
| *** rustam has quit IRC | 17:33 | |
| *** sniperd has quit IRC | 17:33 | |
| *** jblesage has joined #openstack | 17:34 | |
| *** nacx has quit IRC | 17:34 | |
| *** sniperd has joined #openstack | 17:35 | |
| *** derekh has quit IRC | 17:35 | |
| *** hugokuo has joined #openstack | 17:36 | |
| *** ejat has joined #openstack | 17:36 | |
| *** ejat has joined #openstack | 17:36 | |
| *** JesperA has quit IRC | 17:36 | |
| *** hggdh has quit IRC | 17:39 | |
| *** hggdh has joined #openstack | 17:43 | |
| *** tmichael has quit IRC | 17:46 | |
| uvirtbot | New bug: #908194 in nova "ARP table removed for br0 on host when node terminated" [Undecided,New] https://launchpad.net/bugs/908194 | 17:46 |
| *** tmichael has joined #openstack | 17:47 | |
| *** tmichael has quit IRC | 17:48 | |
| *** jblesage has quit IRC | 17:55 | |
| mjfork | sdake: thanks! | 17:56 |
| *** Ryan_Lane has joined #openstack | 18:02 | |
| *** cp16net has quit IRC | 18:02 | |
| *** nati2_ has joined #openstack | 18:08 | |
| *** nati2 has quit IRC | 18:08 | |
| *** jblesage has joined #openstack | 18:12 | |
| *** mynnx has joined #openstack | 18:13 | |
| *** mynnx has left #openstack | 18:14 | |
| *** swill has joined #openstack | 18:16 | |
| swill | who wrote and maintains the swift3 middleware? | 18:18 |
| Kiall | the swift team I would imagine ;) | 18:18 |
| swill | i am concerned about the implementation because it is very difficult to write auth middleware support for it. | 18:19 |
| *** hugokuo has quit IRC | 18:19 | |
| swill | so many assumptions. | 18:19 |
| Kiall | you'd need to talk with someone on the swift team about that :) There are usually a few of them here.. But, its probably a bad time of year ;) | 18:21 |
| swill | ya im sure it is. :) | 18:21 |
| swill | does anyone here use the swift3 middleware at all? | 18:21 |
| sdake | mjfork not sure if its a bug in kernel or openstack - but somewhat stuck hope the info helps | 18:22 |
| Kiall | swill: I'm sure there are lots of people who do, but I dont have any use for swift so have never used it... | 18:23 |
| Kiall | swill: from a look at the code, all the swift3 middleware does is translate requests from S3 to Swift format, auth it handled further down the middleware stack... | 18:24 |
| Kiall | auth is* | 18:24 |
| swill | Kiall: yes, but they make assumptions about the 'account_name' and such. | 18:25 |
| *** davlap has quit IRC | 18:25 | |
| swill | Kiall: if you have a standard 'User' and 'Key' implementation, it will not work. | 18:25 |
| *** clauden_ has joined #openstack | 18:27 | |
| Kiall | swill: yes, OS has 3 items for users .. Account (Tenant), User and Password.. | 18:28 |
| Kiall | And, since S3 simply uses key + secret peoples S3 key is "account:user" and secret = "password" | 18:28 |
| swill | Kiall: the swift3 implementation assumes that the aws_access_key is just the 'account' and essentially does '/v1/aws_access_key' | 18:29 |
| swill | Kiall: but the aws_secret_key is not possible to access because of the signature. | 18:29 |
| swill | Kiall: how are you supposed to confirm if the password is correct if you can't ever check it? | 18:30 |
| Kiall | Honestly dont know the specifics of how to do (as I said, I dont use swift!), but I would bet they dont have a giant security hole like that.. | 18:32 |
| Kiall | of how they do* | 18:33 |
| swill | Kiall: the problem is that there is no way to verify what the user has entered in the current implementation. this is strange. | 18:34 |
| Kiall | have you tested that they PW is not verified? I would be very surprised if it was not! | 18:35 |
| *** clauden_ has quit IRC | 18:35 | |
| *** clauden___ has joined #openstack | 18:35 | |
| *** cp16net has joined #openstack | 18:35 | |
| *** MrWGW has joined #openstack | 18:40 | |
| agy | this is by design. the swift3 middleware says: "To add this middleware to your configuration, add the swift3 middleware in front of the auth middleware, [...]" | 18:40 |
| MrWGW | is it possible to mount an ISO image to a VM managed by OpenStack, for OS installation et cetera | 18:40 |
| Kiall | agy: I believe swill is talking about how the PW is never sent, other than as part of the signature.. So the auth middleware has no way to verify the password is actually correct | 18:42 |
| *** shaon has quit IRC | 18:42 | |
| swill | Kiall: agy: exactly... | 18:42 |
| Kiall | agy: but .. I dont believe OS would leave a giant hole like that open ;) I would bet there is something I'm not seeing that allows for the sugnature to be verified | 18:42 |
| *** andrewbogott has joined #openstack | 18:42 | |
| *** vizsla has quit IRC | 18:42 | |
| swill | Kiall: i have been looking for that too. but even if you try to build it based on the headers, they change the headers, so you cant even rebuild the signature to see if it matches. | 18:43 |
| Kiall | Have you got swift installed? | 18:43 |
| Kiall | The fact that the request still has to pass via the auth middleware is enough for me to be very confident the request is validated somehow | 18:44 |
| swill | Kiall: ya, i have everythign working. i have built my own auth middleware and it works perfectly with the swift command and curl. | 18:44 |
| Kiall | Okay, So enable the swift3 middleware and try 2 requests.. 1 with the correct password, 1 with an invalid password... | 18:44 |
| swill | Kiall: yes it hits the middleware, but i cant find a way to verify it. | 18:44 |
| Kiall | Then you know | 18:44 |
| swill | Kiall: haha, if it was only that easy. :) | 18:45 |
| Kiall | I'm pretty sure it ;) (Unless this is a production install) | 18:45 |
| *** adjohn has joined #openstack | 18:45 | |
| Kiall | it is* | 18:45 |
| swill | Kiall: but how is the auth middleware supposed to verify the user? | 18:45 |
| swill | Kiall: they create their own token | 18:46 |
| swill | Kiall: so the the X-Auth-Token is not the same as what would be created by the auth middleware | 18:46 |
| Kiall | I have no clue how it does it, but you can verify if it does or not fairly quickly! | 18:46 |
| swill | Kiall: I can verify that they do not give me enough info to verify the user. haha | 18:47 |
| Kiall | If the swift3 middleware can do it.. so can your's ;) | 18:47 |
| swill | swift3 middleware does not verify anything, it just creates its own token and passes along the aws_access_key | 18:49 |
| swill | Kiall: I can decode the token, but it is only 'GET <date> <path>' | 18:49 |
| *** mynnx has joined #openstack | 18:50 | |
| swill | Kiall: I have been trying to see if i can figure something out based on the signature, but I have not been able to decode it yet. | 18:50 |
| *** robbiew has quit IRC | 18:51 | |
| swill | Kiall: and I have not been able to figure out how the Signature is built. This all I can find for how it is added: 'AWS %(AWSAccessKeyId)s:%(Signature)s' % req.GET | 18:52 |
| *** rnorwood has quit IRC | 18:52 | |
| *** adjohn has quit IRC | 18:53 | |
| swill | Kiall: whatever, I will keep working on it. | 18:53 |
| *** qazwsx|2 has joined #openstack | 18:57 | |
| *** ejat has quit IRC | 18:58 | |
| *** qazwsx has quit IRC | 19:00 | |
| *** dpippenger has joined #openstack | 19:01 | |
| *** woleium has quit IRC | 19:01 | |
| *** woleium has joined #openstack | 19:03 | |
| *** maplebed has joined #openstack | 19:06 | |
| *** maplebed has quit IRC | 19:07 | |
| *** maplebed has joined #openstack | 19:08 | |
| *** pixelbeat has quit IRC | 19:10 | |
| pabelanger | If I'm create ubuntu lucid images for openstack, should I be using the 'linux-image-virtual' package for the kernel? Can't find much information on google | 19:16 |
| kbringard | yea, probably… if you download the uec images they have kernels with them as separate files, that may be useful | 19:18 |
| Kiall | pabelanger: I believe the recommended way is to use the kernel/ramdisk from http://people.canonical.com/~smoser/lucid-loaders/ | 19:18 |
| Kiall | then, inside the VM use the "linux-image-virtual" package.. | 19:19 |
| Kiall | Without the "loader kernel" the kernel from the instances /boot is never used.. | 19:19 |
| pabelanger | Kiall: great, thanks. Reading up on it now | 19:21 |
| Kiall | Yea, anything pre-maverick should use the (badly named) "lucid" loader.. | 19:22 |
| Kiall | anything post maverick should use the .img download, rather than the .tar.gz download.. | 19:22 |
| Kiall | the .tar.gz's arent suitable for OS... | 19:22 |
| *** Ryan_Lane has quit IRC | 19:24 | |
| *** mynnx has left #openstack | 19:26 | |
| *** krow has joined #openstack | 19:30 | |
| *** robbiew has joined #openstack | 19:33 | |
| *** markwash_ has quit IRC | 19:35 | |
| *** Ramonster has joined #openstack | 19:40 | |
| *** katkee has joined #openstack | 19:48 | |
| *** Ramonster has quit IRC | 19:57 | |
| *** qazwsx has joined #openstack | 19:58 | |
| *** hadrian has quit IRC | 19:59 | |
| *** qazwsx|2 has quit IRC | 19:59 | |
| *** andrewbogott has quit IRC | 20:03 | |
| maplebed | anybody have good data about the relative cpu/memory/io levels I should expect with swift? I'm seeing much more cpu activity on the storage nodes than I expected. | 20:04 |
| uvirtbot | New bug: #908232 in python-mox "Nova stable/diablo branch unit tests fail when using the ubuntu python-mox package" [Undecided,New] https://launchpad.net/bugs/908232 | 20:06 |
| *** oubiwann has quit IRC | 20:07 | |
| *** DeRbi has joined #openstack | 20:11 | |
| *** DeRbi has quit IRC | 20:12 | |
| *** DeRbi has joined #openstack | 20:12 | |
| *** DeRbi has quit IRC | 20:15 | |
| *** DeRbi has joined #openstack | 20:15 | |
| *** DeRbi has quit IRC | 20:16 | |
| *** DeRbi has joined #openstack | 20:16 | |
| * DeRbi ::::::::::::::::> WWW.MEGA-HD.ORG <:::::::::::::::: {{{{{{{{{{ The best FREE High Definition movies, videos, FREE SOFTWARE }}}}}}}}}} | 20:17 | |
| kbringard | really? | 20:17 |
| DeRbi | ::::::::::::::::> WWW.MEGA-HD.ORG <:::::::::::::::: {{{{{{{{{{ The best FREE High Definition movies, videos, programs }}}}}}}}}} | 20:18 |
| DeRbi | ::::::::::::::::> WWW.MEGA-HD.ORG <:::::::::::::::: {{{{{{{{{{ The best FREE High Definition movies, videos, programs }}}}}}}}}} | 20:18 |
| DeRbi | ::::::::::::::::> WWW.MEGA-HD.ORG <:::::::::::::::: {{{{{{{{{{ The best FREE High Definition movies, videos, programs }}}}}}}}}} | 20:18 |
| *** oubiwann has joined #openstack | 20:20 | |
| *** sdake has quit IRC | 20:23 | |
| *** sdake has joined #openstack | 20:23 | |
| *** kloeri has joined #openstack | 20:24 | |
| *** ejat has joined #openstack | 20:27 | |
| *** andrewbogott has joined #openstack | 20:32 | |
| *** sdake has quit IRC | 20:35 | |
| *** oubiwann has quit IRC | 20:46 | |
| *** oubiwann has joined #openstack | 20:51 | |
| *** JesperA has joined #openstack | 20:51 | |
| tightwork | I am totally lost with keystone | 20:59 |
| tightwork | I get json when I curl http://0.0.0.0:35357 but where do I go from here? how do I auth to nova and begin creating VMs? | 21:00 |
| *** krow has quit IRC | 21:06 | |
| *** judd7 has quit IRC | 21:09 | |
| uvirtbot | New bug: #908250 in nova "os-cloudpipe extension needs documentation" [Undecided,New] https://launchpad.net/bugs/908250 | 21:11 |
| *** dpippenger has quit IRC | 21:14 | |
| *** jblesage has quit IRC | 21:15 | |
| *** sdake has joined #openstack | 21:17 | |
| *** dprince has quit IRC | 21:21 | |
| *** hingo has quit IRC | 21:21 | |
| *** bcwaldon has quit IRC | 21:26 | |
| *** floehman1 has quit IRC | 21:28 | |
| *** floehmann has joined #openstack | 21:30 | |
| *** DeRbi has quit IRC | 21:31 | |
| *** dotdevops has quit IRC | 21:32 | |
| *** andrewbogott has quit IRC | 21:33 | |
| *** dotdevops has joined #openstack | 21:36 | |
| *** JesperA has quit IRC | 21:37 | |
| *** swill has quit IRC | 21:44 | |
| *** mchenetz has quit IRC | 21:46 | |
| *** robbiew has quit IRC | 21:53 | |
| *** corrigan has quit IRC | 22:03 | |
| *** leifmadsen has quit IRC | 22:14 | |
| *** nati2 has joined #openstack | 22:15 | |
| *** nati2_ has quit IRC | 22:15 | |
| *** lloydde has joined #openstack | 22:19 | |
| *** rnorwood has joined #openstack | 22:27 | |
| *** ldlework has quit IRC | 22:43 | |
| *** mattray has quit IRC | 22:45 | |
| *** rbergeron has quit IRC | 22:46 | |
| *** rbergeron has joined #openstack | 22:46 | |
| *** kbringard has quit IRC | 22:51 | |
| *** _cerberus_ is now known as readsquid | 22:54 | |
| *** readsquid is now known as _cerberus_ | 22:57 | |
| *** PotHix has quit IRC | 23:02 | |
| *** dotdevops has quit IRC | 23:06 | |
| *** lloydde has quit IRC | 23:08 | |
| tightwork | I login as joeuser to dashboard and get: Invalid service catalog service: compute? | 23:11 |
| tightwork | ServiceCatalogException at /nova/ | 23:11 |
| tightwork | overall id like to use devstack but it really screws the environment, does not place things in standard locations there are no start up scripts and the only doc is just to read the code | 23:13 |
| *** cp16net has quit IRC | 23:17 | |
| *** rustam has joined #openstack | 23:23 | |
| *** pradeep1 has quit IRC | 23:35 | |
| uvirtbot | New bug: #908296 in keystone "table user_roles already exists" [Undecided,New] https://launchpad.net/bugs/908296 | 23:36 |
| *** sdake has quit IRC | 23:51 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
