| *** kindaopsdevy has quit IRC | 00:00 | |
| *** JStoker has quit IRC | 00:03 | |
| *** MarkAtwood has quit IRC | 00:04 | |
| *** adjohn has quit IRC | 00:10 | |
| *** JStoker has joined #openstack | 00:15 | |
| *** sandywalsh has joined #openstack | 00:19 | |
| *** sandywalsh_ has quit IRC | 00:19 | |
| *** Glace has quit IRC | 00:26 | |
| *** warik has left #openstack | 00:28 | |
| *** Aaton is now known as Aaton_off | 00:29 | |
| *** natea has joined #openstack | 00:29 | |
| *** natea has quit IRC | 00:34 | |
| *** MyAzhax has joined #openstack | 00:40 | |
| *** s0mik has quit IRC | 00:43 | |
| uvirtbot | New bug: #1015355 in nova "LoopingCalls in libvirt return immediately" [High,In progress] https://launchpad.net/bugs/1015355 | 00:51 |
|---|---|---|
| *** sae has joined #openstack | 00:53 | |
| *** RamJett has joined #openstack | 00:53 | |
| *** anderstj has joined #openstack | 00:54 | |
| *** sinaNeCTAR has joined #openstack | 01:00 | |
| *** warik_ has joined #openstack | 01:05 | |
| *** nmistry has joined #openstack | 01:06 | |
| *** anderstj has quit IRC | 01:06 | |
| *** mkouhei has joined #openstack | 01:07 | |
| *** ryanpetrello has joined #openstack | 01:08 | |
| *** warik_ has quit IRC | 01:10 | |
| *** matwood has joined #openstack | 01:10 | |
| *** MarkAtwood has joined #openstack | 01:11 | |
| *** vitiho has joined #openstack | 01:12 | |
| *** rods has quit IRC | 01:13 | |
| *** bencherian has quit IRC | 01:14 | |
| *** bencherian has joined #openstack | 01:17 | |
| *** rnorwood has quit IRC | 01:17 | |
| *** dtroyer_zzz is now known as dtroyer | 01:18 | |
| *** adjohn has joined #openstack | 01:19 | |
| *** rods has joined #openstack | 01:19 | |
| *** littleidea has quit IRC | 01:19 | |
| *** littleidea has joined #openstack | 01:21 | |
| *** ryanpetrello has quit IRC | 01:22 | |
| *** vitiho_ has joined #openstack | 01:24 | |
| *** vitiho has quit IRC | 01:24 | |
| *** MarkAtwood has quit IRC | 01:25 | |
| *** nmistry has quit IRC | 01:25 | |
| *** MarkAtwood has joined #openstack | 01:25 | |
| *** jplewi has quit IRC | 01:26 | |
| *** warik has joined #openstack | 01:26 | |
| *** datsun180b has quit IRC | 01:26 | |
| *** jog0_ has joined #openstack | 01:27 | |
| *** zeriouz_ has quit IRC | 01:27 | |
| *** johnpostlethwait has quit IRC | 01:29 | |
| *** jedi4ever has quit IRC | 01:30 | |
| *** bencherian has quit IRC | 01:31 | |
| *** jog0_ has quit IRC | 01:32 | |
| *** kmulvey has quit IRC | 01:32 | |
| *** rods has quit IRC | 01:33 | |
| *** GeorgeH has quit IRC | 01:36 | |
| *** ryanpetrello has joined #openstack | 01:40 | |
| *** jackh has joined #openstack | 01:43 | |
| *** networkstatic has left #openstack | 01:53 | |
| *** Mike656 has joined #openstack | 01:53 | |
| *** edygarcia has joined #openstack | 01:57 | |
| *** Mike656 has quit IRC | 01:59 | |
| *** derchris has joined #openstack | 02:00 | |
| *** cooper_ has joined #openstack | 02:02 | |
| *** osier has joined #openstack | 02:02 | |
| *** freeflying_ has joined #openstack | 02:03 | |
| *** jdurgin has quit IRC | 02:05 | |
| *** warik has quit IRC | 02:06 | |
| *** warik has joined #openstack | 02:07 | |
| *** Leseb has joined #openstack | 02:11 | |
| *** MyAzhax has quit IRC | 02:12 | |
| *** Leseb has quit IRC | 02:15 | |
| *** julianwa has joined #openstack | 02:16 | |
| *** littleidea has quit IRC | 02:17 | |
| *** cooper has quit IRC | 02:17 | |
| *** cooper_ is now known as cooper | 02:17 | |
| *** jcannava has joined #openstack | 02:17 | |
| *** cooper has quit IRC | 02:17 | |
| *** freeflying_ has quit IRC | 02:19 | |
| *** littleidea has joined #openstack | 02:19 | |
| *** markmcclain has joined #openstack | 02:20 | |
| *** adalbas has quit IRC | 02:20 | |
| *** zinjacoder has quit IRC | 02:24 | |
| *** julianwa has quit IRC | 02:24 | |
| *** littleidea has quit IRC | 02:25 | |
| *** julianwa has joined #openstack | 02:25 | |
| *** s0mik has joined #openstack | 02:26 | |
| *** littleidea has joined #openstack | 02:26 | |
| *** littleidea has quit IRC | 02:26 | |
| *** hermy|away is now known as hermy | 02:27 | |
| *** littleidea has joined #openstack | 02:29 | |
| *** freeflying_ has joined #openstack | 02:29 | |
| *** dtroyer is now known as dtroyer_zzz | 02:32 | |
| *** johnpur has quit IRC | 02:32 | |
| *** koolhead17|afk has quit IRC | 02:32 | |
| *** RicardoSSP has quit IRC | 02:34 | |
| *** warik has quit IRC | 02:38 | |
| *** MyAzhax has joined #openstack | 02:38 | |
| *** jcannava has quit IRC | 02:39 | |
| *** jcannava has joined #openstack | 02:39 | |
| *** littleidea has quit IRC | 02:40 | |
| *** agonella has quit IRC | 02:41 | |
| *** julianwa has quit IRC | 02:41 | |
| *** julianwa has joined #openstack | 02:42 | |
| *** miclorb has quit IRC | 02:49 | |
| *** noob has quit IRC | 02:51 | |
| *** rnorwood has joined #openstack | 02:51 | |
| *** julianwa has quit IRC | 02:51 | |
| *** salgado-afk has quit IRC | 02:53 | |
| *** julianwa has joined #openstack | 02:53 | |
| *** sandfish8 has quit IRC | 02:54 | |
| *** blamar has joined #openstack | 02:57 | |
| *** blamar has quit IRC | 02:58 | |
| *** blamar has joined #openstack | 02:58 | |
| *** rmartinelli has joined #openstack | 03:00 | |
| *** MarkAtwood has quit IRC | 03:05 | |
| *** matwood has quit IRC | 03:05 | |
| *** andutros has joined #openstack | 03:08 | |
| *** mnaser has joined #openstack | 03:09 | |
| *** s0mik has quit IRC | 03:10 | |
| *** littleidea has joined #openstack | 03:10 | |
| *** anderstj has joined #openstack | 03:10 | |
| *** nmistry has joined #openstack | 03:10 | |
| *** anderstj has quit IRC | 03:12 | |
| *** leeight_ has joined #openstack | 03:13 | |
| *** s0mik has joined #openstack | 03:14 | |
| *** clopez has quit IRC | 03:15 | |
| *** martin has quit IRC | 03:16 | |
| *** edygarcia has quit IRC | 03:16 | |
| *** julianwa has quit IRC | 03:17 | |
| *** johnpur has joined #openstack | 03:19 | |
| *** ChanServ sets mode: +v johnpur | 03:19 | |
| *** MarkAtwood has joined #openstack | 03:19 | |
| *** johnpur has quit IRC | 03:19 | |
| *** matwood has joined #openstack | 03:20 | |
| *** freeflying_ has quit IRC | 03:21 | |
| *** sandfish8 has joined #openstack | 03:22 | |
| *** martin has joined #openstack | 03:22 | |
| *** vitiho_ has quit IRC | 03:26 | |
| *** vitiho has joined #openstack | 03:26 | |
| *** natea has joined #openstack | 03:28 | |
| *** asalkeld has joined #openstack | 03:30 | |
| *** jedi4ever has joined #openstack | 03:32 | |
| hugokuo | morning | 03:37 |
| hugokuo | how's everyone :> | 03:37 |
| *** rmartinelli has quit IRC | 03:37 | |
| *** KavanS has quit IRC | 03:39 | |
| *** dtroyer_zzz is now known as dtroyer | 03:39 | |
| *** nati_ueno has quit IRC | 03:40 | |
| *** bharata has joined #openstack | 03:42 | |
| *** sandywalsh has quit IRC | 03:46 | |
| *** dwcramer has quit IRC | 03:47 | |
| *** ewindisch has quit IRC | 03:47 | |
| *** osier has quit IRC | 03:48 | |
| *** littleidea has quit IRC | 03:51 | |
| *** rnorwood has quit IRC | 03:55 | |
| *** sae has quit IRC | 03:59 | |
| uvirtbot | New bug: #1015385 in quantum "samplev2plugin shows error while trying to create subnet/networks" [Undecided,New] https://launchpad.net/bugs/1015385 | 04:01 |
| *** miclorb has joined #openstack | 04:03 | |
| *** sae has joined #openstack | 04:03 | |
| *** anderstj has joined #openstack | 04:08 | |
| *** hunglin has joined #openstack | 04:11 | |
| *** sae has quit IRC | 04:12 | |
| *** sae has joined #openstack | 04:14 | |
| *** chrisfer has quit IRC | 04:16 | |
| *** natea has quit IRC | 04:20 | |
| *** markmcclain has quit IRC | 04:22 | |
| *** sae has quit IRC | 04:25 | |
| *** dolphm has joined #openstack | 04:26 | |
| *** Abhilash has joined #openstack | 04:26 | |
| *** anderstj has quit IRC | 04:27 | |
| *** metral has joined #openstack | 04:27 | |
| *** Guest7599 has quit IRC | 04:29 | |
| *** metral_ has joined #openstack | 04:30 | |
| *** metral has quit IRC | 04:31 | |
| *** metral has joined #openstack | 04:31 | |
| *** cooper_ has joined #openstack | 04:31 | |
| *** cheako has quit IRC | 04:32 | |
| *** sae has joined #openstack | 04:32 | |
| *** metral_ has quit IRC | 04:35 | |
| *** garyk has quit IRC | 04:38 | |
| *** llang629 has joined #openstack | 04:39 | |
| *** sae has quit IRC | 04:41 | |
| *** freeflying_ has joined #openstack | 04:41 | |
| *** andutros has quit IRC | 04:43 | |
| *** andutros has joined #openstack | 04:44 | |
| *** llang629 has left #openstack | 04:44 | |
| *** vibhav has joined #openstack | 04:48 | |
| *** vibhav is now known as Guest81049 | 04:49 | |
| *** hermy is now known as hermy|away | 04:51 | |
| *** dolphm has quit IRC | 04:53 | |
| *** shang has quit IRC | 04:56 | |
| *** cheako has joined #openstack | 04:56 | |
| *** s0mik has quit IRC | 05:00 | |
| *** steveb_ has quit IRC | 05:00 | |
| *** zigo has joined #openstack | 05:02 | |
| *** deepakcs has joined #openstack | 05:05 | |
| *** andrewsben is now known as andrewsben_zz | 05:07 | |
| *** daniele- has quit IRC | 05:10 | |
| *** oneiroi has quit IRC | 05:10 | |
| *** trapni has quit IRC | 05:11 | |
| *** sri_ has joined #openstack | 05:11 | |
| *** daniele- has joined #openstack | 05:11 | |
| *** zykes- has quit IRC | 05:11 | |
| *** oneiroi has joined #openstack | 05:12 | |
| *** trapni has joined #openstack | 05:12 | |
| *** zykes- has joined #openstack | 05:12 | |
| *** adjohn has quit IRC | 05:25 | |
| *** anderstj has joined #openstack | 05:30 | |
| *** Abhilash has quit IRC | 05:35 | |
| *** jcannava has left #openstack | 05:35 | |
| *** ejat has joined #openstack | 05:35 | |
| *** arBmind has joined #openstack | 05:37 | |
| *** Abhilash has joined #openstack | 05:38 | |
| *** adjohn has joined #openstack | 05:40 | |
| *** dtroyer is now known as dtroyer_zzz | 05:41 | |
| *** sae has joined #openstack | 05:44 | |
| *** osier has joined #openstack | 05:47 | |
| *** ejat has quit IRC | 05:50 | |
| *** halfss has joined #openstack | 05:51 | |
| halfss | is there anyone migrate tempauth to keystone on swift? | 05:51 |
| *** mRy has joined #openstack | 05:52 | |
| *** mRy is now known as Guest44656 | 05:52 | |
| *** dachary has joined #openstack | 05:53 | |
| *** ejat has joined #openstack | 05:54 | |
| *** erikzaadi has joined #openstack | 05:56 | |
| *** adjohn has quit IRC | 05:57 | |
| *** adjohn has joined #openstack | 05:57 | |
| *** adjohn has quit IRC | 05:58 | |
| *** garyk has joined #openstack | 05:59 | |
| *** hattwick has quit IRC | 06:01 | |
| *** zigo has quit IRC | 06:02 | |
| *** leeight_ has quit IRC | 06:02 | |
| *** vitiho_ has joined #openstack | 06:03 | |
| *** vitiho has quit IRC | 06:03 | |
| *** RamJett has quit IRC | 06:03 | |
| *** adjohn has joined #openstack | 06:05 | |
| *** ryanpetrello has quit IRC | 06:05 | |
| *** leeight_ has joined #openstack | 06:06 | |
| trapni | hey. I can connect to VNC on instances on compute node also being the controller. but I cannot connect to instances located on other compute nodes. what could the reason be? Anyone a hint? :) | 06:08 |
| *** JStoker has quit IRC | 06:09 | |
| *** rocambole has joined #openstack | 06:11 | |
| *** JStoker has joined #openstack | 06:12 | |
| *** andutros has quit IRC | 06:12 | |
| *** halfss has quit IRC | 06:15 | |
| *** blamar has quit IRC | 06:16 | |
| *** shaon has joined #openstack | 06:19 | |
| *** vanchester12416 has joined #openstack | 06:19 | |
| *** anderstj has quit IRC | 06:19 | |
| uvirtbot | New bug: #1015410 in quantum "Some unit tests for Cisco plugin are failing" [High,Confirmed] https://launchpad.net/bugs/1015410 | 06:22 |
| *** matwood has quit IRC | 06:24 | |
| *** mindpixel has joined #openstack | 06:25 | |
| *** erikzaadi has quit IRC | 06:28 | |
| *** jbarratt has quit IRC | 06:29 | |
| *** MyAzhax has quit IRC | 06:29 | |
| vanchester12416 | Hello. Can someone explain me keystone's token flow? | 06:29 |
| *** MyAzhax has joined #openstack | 06:29 | |
| sri_ | can someone tell where an instance's password is stored in database | 06:30 |
| *** nmistry has quit IRC | 06:31 | |
| vanchester12416 | my timezone is so bad :( | 06:34 |
| *** dpippenger has quit IRC | 06:35 | |
| *** jbarratt has joined #openstack | 06:38 | |
| *** ttrifonov_zZzz is now known as ttrifonov | 06:39 | |
| trapni | vanchester12416: (AFAIK!!) tokens are generated on authentication, and can then be reused for a certain period of time. | 06:43 |
| vanchester12416 | traphi, i understand that, thank you. But i want to know what happens on first client's request when there is no token. | 06:44 |
| vanchester12416 | i want to know WHO (which module) calls the procedure of it's generation | 06:45 |
| trapni | that's out of my knowledge, sorry for that. | 06:46 |
| *** alex88 has joined #openstack | 06:46 | |
| *** alex88 has joined #openstack | 06:46 | |
| vanchester12416 | np, anyway u tried. thx :) | 06:46 |
| trapni | are you using nova-compute already? | 06:48 |
| vanchester12416 | traphi, no i'm using swift | 06:49 |
| *** adjohn has quit IRC | 06:49 | |
| trapni | ah | 06:49 |
| trapni | yeah, that's on my roadmap (sometime later) | 06:49 |
| *** asavu has joined #openstack | 06:50 | |
| vanchester12416 | now i'm working on keystone - auth system | 06:51 |
| vanchester12416 | the question i have is "What guyz do you compute on your Novas?" :) | 06:52 |
| *** jedi4ever has quit IRC | 06:52 | |
| *** mrjazzcat has quit IRC | 06:52 | |
| *** livemoon has joined #openstack | 06:53 | |
| *** dachary has quit IRC | 06:53 | |
| uvirtbot | New bug: #1015418 in quantum "devstack support for policy.json" [Undecided,Confirmed] https://launchpad.net/bugs/1015418 | 06:56 |
| *** prakasha-log has joined #openstack | 07:00 | |
| *** chasmo has quit IRC | 07:01 | |
| *** etnt has joined #openstack | 07:01 | |
| *** etnt has quit IRC | 07:02 | |
| *** etnt has joined #openstack | 07:02 | |
| *** chasmo has joined #openstack | 07:03 | |
| *** Triade has joined #openstack | 07:03 | |
| *** asavu has quit IRC | 07:05 | |
| *** metral has quit IRC | 07:09 | |
| *** Leseb has joined #openstack | 07:12 | |
| trapni | hmm. Does anyone know why I can connect to VNC on one compute node but not to VNC on other compute nodes? (via nova get-vnc-console nor dashboard) ? | 07:13 |
| *** erikzaadi has joined #openstack | 07:14 | |
| livemoon | hi | 07:17 |
| livemoon | how can make keystone use ssl? | 07:18 |
| *** Leseb has quit IRC | 07:18 | |
| *** reidrac has joined #openstack | 07:18 | |
| *** erikzaadi has quit IRC | 07:19 | |
| *** arBmind has quit IRC | 07:19 | |
| *** erikzaadi has joined #openstack | 07:19 | |
| *** Leseb has joined #openstack | 07:20 | |
| uvirtbot | New bug: #1015423 in nova "xenapi ImageTooLarge exception leaves VDI around" [Undecided,New] https://launchpad.net/bugs/1015423 | 07:21 |
| *** freeflying_ has quit IRC | 07:23 | |
| vanchester12416 | livemoon, i didn't try, but look at etc/keystone.conf.sample file. There is ssl section in it | 07:23 |
| *** arBmind has joined #openstack | 07:26 | |
| *** mnaser has quit IRC | 07:30 | |
| trapni | anyone here using VNC console access in multi-node setups? | 07:40 |
| *** freeflying_ has joined #openstack | 07:42 | |
| *** vanchester12416 has quit IRC | 07:42 | |
| *** freeflying_ has quit IRC | 07:42 | |
| *** Abhilash has quit IRC | 07:42 | |
| *** Abhilash has joined #openstack | 07:44 | |
| *** Stratisphere has joined #openstack | 07:47 | |
| livemoon | vanchester12416, thanks | 07:47 |
| Stratisphere | Morning all. I've got a bit of a newb question regarding "cloud" computing (and therefore, openstack)... | 07:48 |
| Stratisphere | I get the whole idea behind cloud... always available instances of whatever. But i'm slightly confused to what to the end user, it provides. I.e. is openstack similar to amazon in the sense that it basically provides you with a virtual machine? | 07:48 |
| trapni | Should novncproxy_base_url point to the IP of the cloud controller (where novnc-proxy is running) or to every compute nodes management IP? | 07:52 |
| *** ramjett has joined #openstack | 07:52 | |
| *** pixelbeat has joined #openstack | 07:55 | |
| *** darraghb has joined #openstack | 07:56 | |
| *** hattwick has joined #openstack | 07:58 | |
| *** primozf has joined #openstack | 08:00 | |
| *** pnavarro has quit IRC | 08:00 | |
| *** freeflying_ has joined #openstack | 08:02 | |
| *** befreax has joined #openstack | 08:02 | |
| *** dachary has joined #openstack | 08:05 | |
| *** Free_maN has joined #openstack | 08:05 | |
| *** Free_maN has joined #openstack | 08:05 | |
| *** nacx has joined #openstack | 08:06 | |
| *** comstud has quit IRC | 08:13 | |
| *** comstud has joined #openstack | 08:13 | |
| hugokuo | does anyone know about how to export bugs list/contents from launchpad ....? | 08:16 |
| *** miclorb has quit IRC | 08:17 | |
| *** notze has joined #openstack | 08:18 | |
| *** davepigott has joined #openstack | 08:19 | |
| *** notze has quit IRC | 08:20 | |
| *** jobycxa has joined #openstack | 08:23 | |
| *** zigo has joined #openstack | 08:24 | |
| *** Triade has quit IRC | 08:25 | |
| *** Triade has joined #openstack | 08:25 | |
| *** Triade has quit IRC | 08:29 | |
| *** Triade1 has joined #openstack | 08:29 | |
| *** jgruber has joined #openstack | 08:30 | |
| *** popux has joined #openstack | 08:32 | |
| *** trapni has quit IRC | 08:34 | |
| *** trapni has joined #openstack | 08:34 | |
| *** jgruber has quit IRC | 08:37 | |
| *** Abhilash has quit IRC | 08:37 | |
| *** notze has joined #openstack | 08:38 | |
| *** msavy has joined #openstack | 08:44 | |
| *** asavu has joined #openstack | 08:49 | |
| chrisg | i dont think that openstack-db is great in the way it checks to see if mysql-server is installed | 08:50 |
| chrisg | whats the procedure for recommending updates to stuff in particular parts of openstack? | 08:50 |
| uvirtbot | New bug: #1015453 in nova "instance nwfilter has no MAC parameter in dom definition file" [Undecided,New] https://launchpad.net/bugs/1015453 | 08:51 |
| chrisg | basically because we use percona here, and that provides mysql-server, but when I try and use the openstack-db helper script, it doesn't see we've already got a mysql server | 08:53 |
| mikal | chrisg: are you using distro packages? If so, you probably want to file a bug with your distro... | 09:00 |
| chrisg | i'm using percona | 09:03 |
| chrisg | it's provided by them | 09:03 |
| chrisg | they call it percona-server | 09:03 |
| chrisg | not mysql-server | 09:04 |
| chrisg | they also name the init script differently :\ | 09:04 |
| chrisg | http://pastie.org/4119398 | 09:04 |
| chrisg | seems to work | 09:04 |
| chrisg | but yeah percona-server rpm "provides" mysql-server | 09:05 |
| *** bbcmicrocomputer has joined #openstack | 09:07 | |
| *** freeflying_ has quit IRC | 09:10 | |
| *** ramjett has left #openstack | 09:14 | |
| *** Trixboxer has joined #openstack | 09:14 | |
| *** dachary has quit IRC | 09:14 | |
| *** shadower has joined #openstack | 09:16 | |
| *** keruspe has joined #openstack | 09:16 | |
| *** pretec has joined #openstack | 09:18 | |
| etnt | running 'nova-network -dv' gives me: ERROR nova.rpc.common [-] AMQP server on 192.168.1.172:5672 is unreachable: Socket closed | 09:20 |
| etnt | but with wireshark I can see that it start exchanging messages with rabbitmq, anyone seen this before? | 09:21 |
| uvirtbot | New bug: #1015462 in nova "openstack-db script Percona compatibility issue" [Undecided,New] https://launchpad.net/bugs/1015462 | 09:21 |
| etnt | btw, I've been trying for three days to get openstack up and running...has anyone been able to follow the docs recently with a successful outcome ? | 09:23 |
| *** Ryan_Lane has quit IRC | 09:25 | |
| keruspe | Which part of a vm creation does create its disk ? | 09:29 |
| keruspe | It seems to be (maybe !) the last thing failing here to get a functionnal openstack install | 09:29 |
| keruspe | (It only creates a 6.1MB file as the disk, and the vm doesn't get defined in libvirt) | 09:30 |
| *** alex88 has quit IRC | 09:31 | |
| *** miclorb has joined #openstack | 09:37 | |
| *** jongleur has joined #openstack | 09:39 | |
| *** popux has quit IRC | 09:41 | |
| jongleur | Hi. I followed the walkthrough of hastexo now to install openstack and everything works fine up to starting the first VM. The startup fails with nova show myfirstVM showing as fault a "RemoteError" code 500. any idea what could be wrong and how to find a solution? | 09:51 |
| *** jackh has quit IRC | 09:51 | |
| *** uksysadmin has joined #openstack | 09:53 | |
| uksysadmin | g'day all | 09:53 |
| uksysadmin | Any NetApp folk lurking around? | 09:54 |
| chrisg | i'm yet to get my dfm license | 09:54 |
| chrisg | so i havent tested teh netapp driver yet | 09:54 |
| uksysadmin | I noticed an interesting netapp.py piece in nova-volume... raising eyebrow... | 09:54 |
| chrisg | netapp have this lovley policy where you get dfmserver/opcommander by default but you need to request it | 09:54 |
| chrisg | which takes time | 09:54 |
| chrisg | what raised your eyebrow, uksysadmin ? | 09:55 |
| *** Samos123 has joined #openstack | 09:56 | |
| Samos123 | Hi, im working on a small monitoring tool collecting data with libvirt and collectd, now I wanna create a small webservice in horizon which returns the xml data of rrdtool xport. I created a django app instead of the suggested dashboard way as I want to make this independent of a dashboard. Is this ok? | 09:58 |
| Samos123 | I can think it may not be secure to do it this way as I'm bypassing horizon kind of | 09:59 |
| *** matwood has joined #openstack | 09:59 | |
| *** Stratisphere has quit IRC | 10:03 | |
| *** mkouhei has left #openstack | 10:05 | |
| uksysadmin | So in response to netapp.py - given nova-volume is a SPOF, anything to reduce this risk. | 10:05 |
| *** SvenDowideit has quit IRC | 10:10 | |
| *** tty has joined #openstack | 10:13 | |
| *** GheRivero has quit IRC | 10:13 | |
| *** GheRivero has joined #openstack | 10:13 | |
| tty | hey. is there a simple explanation why server1, server2 and client1 are required for openstack installation according to the doc.? Is this mentioned in the doc? It seems to elude some major hints as i've said. | 10:16 |
| *** ywu has quit IRC | 10:19 | |
| *** miclorb has quit IRC | 10:20 | |
| uksysadmin | tty, explain? | 10:21 |
| *** Ryan_Lane has joined #openstack | 10:22 | |
| tty | uksysadmin: i mean why is server2 important? to show the nova scaling to more resources? | 10:22 |
| *** supriya has joined #openstack | 10:22 | |
| *** clopez has joined #openstack | 10:23 | |
| uksysadmin | tty, can you point me to the doc? | 10:23 |
| tty | uksysadmin: http://docs.openstack.org/essex/openstack-compute/starter/content/Introduction-d1e390.html | 10:23 |
| uksysadmin | tty, I can only presume that people want to make sure their environment doesn't fail when server1 dies | 10:23 |
| tty | let alone images that are "broken" | 10:24 |
| tty | the starter guide uses server1 and server2. | 10:24 |
| uksysadmin | tty, they're telling you that a typical "start" environment is one server has everything on, and the second is demonstrating that you can scale-out easily with compute by just adding extra compute nodes | 10:24 |
| tty | uksysadmin: heap. that's what i thought. | 10:25 |
| tty | yeap* | 10:25 |
| *** livemoon has quit IRC | 10:26 | |
| uksysadmin | Shame the page is broken - but that's what they're trying to portray | 10:29 |
| uksysadmin | technically you can run ALL OpenStack services on a single VM if you fancy a play/dev | 10:30 |
| *** zigo has quit IRC | 10:30 | |
| *** clopez has quit IRC | 10:33 | |
| trapni | Hey. I can only connect to vnc-console of the nova-compute hosts that's also the controller node. any other instance on any other compute node fails (I'm using noVNC) - I searched the docs, and tried filling the values in nova.conf right. but still, I can't connect. Can anybody give me a hint, here? | 10:36 |
| *** miclorb has joined #openstack | 10:37 | |
| *** zinjacoder has joined #openstack | 10:39 | |
| tty | uksysadmin: i see. so, client1 is required only to connect to server1 and manage images etc richt? | 10:39 |
| tty | right* | 10:39 |
| uksysadmin | yeah - its a client - your laptop, or vm will do | 10:40 |
| uksysadmin | will be the thing to run the nova commands or euca2ools | 10:40 |
| tty | i see that ntp is required to sync with the server1 clock? why is that? can i skip client1? | 10:40 |
| uksysadmin | ntp is a requirement for multi-node | 10:40 |
| tty | like server2 where you "sync" to server1 ntp clock right? | 10:41 |
| uksysadmin | yeah | 10:41 |
| *** ejat has quit IRC | 10:41 | |
| uksysadmin | the times need to be in sync by about 5 seconds for multi-node to work - else you get XXX intermittently, or permanently for available services | 10:41 |
| tty | and is it reuiqred for there client to sync to server1? | 10:41 |
| uksysadmin | no - dont' need client to sync - but its just good practice so that you can troubleshoot easily | 10:42 |
| *** littleidea has joined #openstack | 10:48 | |
| tty | ok. | 10:49 |
| tty | so connecting to server1 via ssh or web interface should be ok. | 10:50 |
| *** popux has joined #openstack | 10:50 | |
| *** camm has quit IRC | 10:50 | |
| *** camm has joined #openstack | 10:51 | |
| *** vanchester12416 has joined #openstack | 10:53 | |
| tty | uksysadmin: what about the client tools required to client1. should i set up the exports on my laptop before connecting to server1/etc? | 10:55 |
| tty | i suppose no | 10:55 |
| *** SvenDowideit has joined #openstack | 10:58 | |
| *** tty has quit IRC | 11:00 | |
| *** gongys has quit IRC | 11:02 | |
| *** leeight_ has quit IRC | 11:02 | |
| uksysadmin | tty, yes if you're using the command line you need your ENV set up accordingly | 11:06 |
| *** osier has quit IRC | 11:06 | |
| *** sae has quit IRC | 11:07 | |
| *** vanchester12416 has quit IRC | 11:08 | |
| *** vanchester12416 has joined #openstack | 11:08 | |
| *** deepakcs has quit IRC | 11:10 | |
| *** vrturbo has joined #openstack | 11:10 | |
| *** rmartinelli has joined #openstack | 11:17 | |
| *** tty has joined #openstack | 11:17 | |
| *** wariola has quit IRC | 11:18 | |
| *** alexn6 has joined #openstack | 11:19 | |
| *** never2far has quit IRC | 11:20 | |
| *** wiliam has joined #openstack | 11:21 | |
| *** alex88 has joined #openstack | 11:22 | |
| *** alex88 has joined #openstack | 11:22 | |
| *** zul has quit IRC | 11:23 | |
| *** arBmind has quit IRC | 11:26 | |
| *** shang has joined #openstack | 11:28 | |
| *** jgruber has joined #openstack | 11:28 | |
| *** DavidLevin has quit IRC | 11:30 | |
| *** clopez has joined #openstack | 11:32 | |
| *** zul has joined #openstack | 11:33 | |
| uvirtbot | New bug: #1015516 in openstack-manuals "typo in networking dhcpoption" [Undecided,New] https://launchpad.net/bugs/1015516 | 11:35 |
| *** shang has quit IRC | 11:35 | |
| uvirtbot | New bug: #1015512 in ceilometer "dhcpoption typo" [Undecided,New] https://launchpad.net/bugs/1015512 | 11:36 |
| *** saschpe has quit IRC | 11:40 | |
| *** ewindisch has joined #openstack | 11:40 | |
| *** saschpe has joined #openstack | 11:42 | |
| *** natea has joined #openstack | 11:47 | |
| *** ewindisch has quit IRC | 11:53 | |
| *** chrisfer has joined #openstack | 11:55 | |
| *** zigo has joined #openstack | 11:55 | |
| *** ahasenack has joined #openstack | 11:59 | |
| *** littleidea has quit IRC | 12:00 | |
| *** agonella has joined #openstack | 12:01 | |
| *** popux has quit IRC | 12:07 | |
| *** arBmind has joined #openstack | 12:10 | |
| *** dolphm has joined #openstack | 12:11 | |
| *** salgado has joined #openstack | 12:11 | |
| *** cooper_ has quit IRC | 12:12 | |
| *** natea has quit IRC | 12:13 | |
| *** supriya has quit IRC | 12:15 | |
| *** zul has quit IRC | 12:16 | |
| *** asavu has quit IRC | 12:16 | |
| *** vrturbo has quit IRC | 12:17 | |
| *** drewlander has joined #openstack | 12:18 | |
| *** Guest81049 is now known as vibhav | 12:19 | |
| vanchester12416 | oh, hi dolphm, i have questions :) | 12:20 |
| dolphm | vanchester12416: go for it | 12:21 |
| uvirtbot | New bug: #1015535 in devstack "Propose to stop a specified service with unstack.sh" [Undecided,New] https://launchpad.net/bugs/1015535 | 12:21 |
| *** miclorb has quit IRC | 12:21 | |
| *** eglynn__ has quit IRC | 12:22 | |
| *** nethope has joined #openstack | 12:23 | |
| *** eglynn__ has joined #openstack | 12:25 | |
| *** dtroyer_zzz is now known as dtroyer | 12:27 | |
| vanchester12416 | dolphm, So, i've looked on swiftauth and token_auth middleware and i have a question about it's work. The swiftauth middleware embeds in swift's pipeline and after getting request it makes request [POST, GET] /tokens to separated keystone server, isn't it? | 12:29 |
| *** jedi4ever has joined #openstack | 12:29 | |
| dolphm | vanchester12416: it should only be using GET /tokens at that point, but yet | 12:29 |
| dolphm | yes* | 12:29 |
| vanchester12416 | dolphm, isn't it creates tokens? who else? | 12:30 |
| dolphm | vanchester12416: what do you mean? | 12:30 |
| vanchester12416 | who makes POST /tokens request? i'm still don't understand :) | 12:31 |
| dolphm | vanchester12416: the user does that themselves | 12:32 |
| dolphm | vanchester12416: (exchanging credentials .. username + password usually .. with the keystone server for a token ID) | 12:33 |
| vanchester12416 | i.e. we use swift | 12:33 |
| dolphm | vanchester12416: then the middleware protecting swift simply validates the provided token with keystone as well | 12:33 |
| *** DavidLevin has joined #openstack | 12:33 | |
| agonella | Hi, Im running a compute-controller + compute+node, and I already launched one instance based on linux iso. When I tried to launch a second instance, it can not start, it says that instance status is ¨error¨and task status ¨scheduling¨. I m running over QEMU. Any idea? | 12:34 |
| vanchester12416 | dolphm, wait a sec, ain't client makes only GET /acc/cont/obj etc request? | 12:34 |
| *** dachary has joined #openstack | 12:34 | |
| dolphm | vanchester12416: ? | 12:35 |
| vanchester12416 | i'm lost again) | 12:35 |
| *** mikal has quit IRC | 12:35 | |
| vanchester12416 | dolphm, i expect that swift client makes only GET /a/c/o request, isn't it? | 12:35 |
| *** dachary has quit IRC | 12:35 | |
| *** bharata has quit IRC | 12:35 | |
| *** dachary has joined #openstack | 12:36 | |
| dolphm | vanchester12416: the specific request being made to swift doesn't matter, unless it doesn't pass through a pipeline protected by auth_token | 12:36 |
| dolphm | vanchester12416: i'm logging off for now, will be back on in about an hour | 12:36 |
| *** dolphm has quit IRC | 12:36 | |
| *** mikal has joined #openstack | 12:37 | |
| *** markvoelker has joined #openstack | 12:37 | |
| agonella | Hi, Im running a compute-controller + compute+node, and I already launched one instance based on linux iso. When I tried to launch a second instance, it can not start, it says that instance status is ¨error¨and task status ¨scheduling¨. I m running over QEMU. Any idea? | 12:38 |
| *** Glace has joined #openstack | 12:39 | |
| *** never2far has joined #openstack | 12:43 | |
| *** zigo has quit IRC | 12:46 | |
| *** vanchester12416 has quit IRC | 12:46 | |
| *** jackh has joined #openstack | 12:47 | |
| *** jongleur1 has joined #openstack | 12:47 | |
| *** jongleur has quit IRC | 12:47 | |
| *** jackh has quit IRC | 12:48 | |
| *** jobycxa has quit IRC | 12:48 | |
| *** jackh has joined #openstack | 12:49 | |
| *** ejat has joined #openstack | 12:52 | |
| *** hggdh has quit IRC | 12:53 | |
| *** h0cin has joined #openstack | 12:53 | |
| *** vanchester has joined #openstack | 12:55 | |
| *** DavidLevin has quit IRC | 12:55 | |
| *** hggdh has joined #openstack | 12:55 | |
| *** sandywalsh has joined #openstack | 12:56 | |
| *** nacx has quit IRC | 12:56 | |
| jongleur1 | I have a problem with the network configuration. I'm trying to set up a single-host openstack cloud following the install walkthrough published by hastexo.com http://hastexo.com/resources/docs/installing-openstack-essex-20121-ubuntu-1204-precise-pangolin . | 12:59 |
| *** NashTrash has joined #openstack | 12:59 | |
| *** befreax has quit IRC | 13:00 | |
| jongleur1 | my host machine only has one physical ethernet card. Therefore I followed the comment to use an ethernet alias eth0:1 instead of eth1, but now restarting the nova services breaks the network connection to the outside. Any idea how to do it? Or do I have to add a second physical ethernet card | 13:00 |
| *** mindpixel has quit IRC | 13:01 | |
| *** davepigott has quit IRC | 13:02 | |
| *** davepigott_ has joined #openstack | 13:02 | |
| *** iccha has joined #openstack | 13:03 | |
| *** mindpixel has joined #openstack | 13:03 | |
| *** c0t0d0s0 has joined #openstack | 13:04 | |
| *** lborda has joined #openstack | 13:04 | |
| *** abniyi has joined #openstack | 13:05 | |
| abniyi | hi | 13:05 |
| abniyi | i have a problem with nova | 13:05 |
| *** lazyshot has joined #openstack | 13:05 | |
| abniyi | can someone be of help please | 13:06 |
| abniyi | nova-manage service list is empty | 13:07 |
| *** adalbas has joined #openstack | 13:07 | |
| *** markmcclain has joined #openstack | 13:07 | |
| abniyi | is there anyone here to help | 13:08 |
| abniyi | with nova | 13:08 |
| *** dachary has quit IRC | 13:08 | |
| *** marrusl has joined #openstack | 13:09 | |
| *** hunglin has quit IRC | 13:09 | |
| *** robix has quit IRC | 13:09 | |
| *** nacx has joined #openstack | 13:09 | |
| *** mindpixel has quit IRC | 13:10 | |
| abniyi | hey | 13:10 |
| abniyi | any body to help | 13:10 |
| evil_steve | abniyi: it's porbbaly an idea to wait more than 2 minutes between asking if people can help you | 13:10 |
| abniyi | thanks | 13:10 |
| *** taupen has joined #openstack | 13:11 | |
| uvirtbot | New bug: #1015555 in openstack-manuals "Quantum docs no longer linked at docs.openstack.org" [Undecided,New] https://launchpad.net/bugs/1015555 | 13:11 |
| abniyi | hey steve | 13:12 |
| *** joesavak has joined #openstack | 13:12 | |
| *** dachary has joined #openstack | 13:12 | |
| abniyi | can you help please | 13:12 |
| chrisg | it's amazing the little things you forget about vi(m) that make it so amazing (i.e. ctrl-A) | 13:13 |
| *** sandywalsh_ has joined #openstack | 13:13 | |
| *** sandywalsh has quit IRC | 13:13 | |
| *** DavidLevin has joined #openstack | 13:14 | |
| *** rods has joined #openstack | 13:14 | |
| abniyi | nova-manage service list showing nothing | 13:15 |
| *** koolhead11 has joined #openstack | 13:15 | |
| *** stuntmachine has joined #openstack | 13:15 | |
| abniyi | has anyone encounter this problem where nova-manage service is not showing any service | 13:16 |
| *** roge has joined #openstack | 13:16 | |
| koolhead11 | hi all | 13:16 |
| *** esm has joined #openstack | 13:17 | |
| *** esm is now known as Guest50318 | 13:17 | |
| NashTrash | chmouel: Are you around by any chance? | 13:18 |
| *** noob has joined #openstack | 13:18 | |
| NashTrash | abniyi: Do you have any services that should be showing up there? | 13:18 |
| NashTrash | scheduler, network, compute, etc.. | 13:19 |
| abniyi | yes nashtrash | 13:19 |
| abniyi | I have restart all the services | 13:19 |
| NashTrash | abniyi: Do you see them in the database table? | 13:19 |
| *** KarinLevenstein has joined #openstack | 13:19 | |
| NashTrash | and, have they ever been there? | 13:19 |
| noob | zynzel: you around? | 13:19 |
| abniyi | let me check please | 13:19 |
| abniyi | this really strange | 13:20 |
| *** zul has joined #openstack | 13:20 | |
| abniyi | there is no table in the nova database | 13:20 |
| chmouel | NashTrash: yes | 13:20 |
| noob | i'm getting an error in the openstack dashboard when i click on the user list. it says unable to retrive user list. anyone know where i should look for what to change? | 13:20 |
| abniyi | i have ran nova-manage db sync | 13:20 |
| koolhead11 | abniyi: did you executed dbsysnc commanf | 13:20 |
| NashTrash | chmouel: I am still running into that Swift3 problem. It looks like you found some issues with the Swift3 version from github. | 13:21 |
| koolhead11 | did it gave any error | 13:21 |
| *** DavidLevin has quit IRC | 13:21 | |
| abniyi | yes i did | 13:21 |
| NashTrash | abniyi: Are there any tables in the DB? | 13:21 |
| chmouel | NashTrash: could you import that python module which made error? | 13:22 |
| jongleur1 | koolhead11: Hi. You pointed me to the openstack install guide on hastexo.com, right; thanks for that - I'm a few steps further now ;) | 13:22 |
| *** ryanpetrello has joined #openstack | 13:22 | |
| NashTrash | chmouel: Have not tried manual import yet. My python foo is not strong. | 13:22 |
| koolhead11 | abniyi: did you modified nova.conf to listen to mysql db ? | 13:22 |
| abniyi | yes | 13:22 |
| koolhead11 | jongleur1: welcome. kepp blogging and spread the word :D | 13:22 |
| chmouel | NashTrash: I think I copied you a paste last night which showed you how to do that | 13:23 |
| jongleur1 | koolhead11: well... I have one problem left, probably you have an idea there, too: I have only one physical ethernet adapter and therefore tried to use the hint given in one comment of that walkthrough: to use eth0:1 with the internal ip adress. | 13:23 |
| abniyi | the tables is still empty | 13:23 |
| abniyi | nova database is empty | 13:24 |
| abniyi | no table recorded | 13:24 |
| NashTrash | chmouel: If you still have the paste around, please send it my way again. I can't seem to find it. Thanks. | 13:24 |
| jongleur1 | now it always breaks down the public network connection (and with that the ssh shell) when I try to restart the nova services. Any idea how to solve that without attatching a second ethernet device to the hardware? | 13:24 |
| chmouel | NashTrash: I don't :( give me the error again so I can show you I can't remember which module was bugging you | 13:25 |
| *** eric_ has joined #openstack | 13:25 | |
| koolhead11 | jongleur1: unfortunately am no network guru, probably uksysadmin will help :D | 13:25 |
| jongleur1 | uksysadmin: an idea? ;) | 13:25 |
| NashTrash | abniyi: It sounds like your DB settings in nova.conf are not right. Do you get any error messages in nova-manage.log? | 13:25 |
| *** lts has joined #openstack | 13:25 | |
| NashTrash | chmouel: Here is the error I get when I try to start up 1.4.8 on 12.04 with the latest Swift3 from github: http://paste.openstack.org/show/18644/ | 13:26 |
| *** natea has joined #openstack | 13:27 | |
| chmouel | NashTrash: did you change to swift3#swift3 like I was telling you last night? | 13:27 |
| *** eric_ has quit IRC | 13:27 | |
| chmouel | NashTrash: instead of swift3#middleware | 13:27 |
| NashTrash | My proxy-server.conf looks like this: http://paste.openstack.org/show/18645/ | 13:27 |
| *** sandywalsh_ has quit IRC | 13:27 | |
| abniyi | the only error in the nova-manage.log is debug nova.utils[-] backend <module 'nova.db.sqlachemy.migration..... | 13:28 |
| chmouel | NashTrash: line 52 change to swift3#swif3 instead of swift3#middleware | 13:28 |
| NashTrash | chmouel: Yes, and when I do that I get the following: http://paste.openstack.org/show/18646/ | 13:28 |
| chmouel | nashtrash: yeah so now do a python and at the command line prompt type/paste this from swift.common.wsgi import WSGIContext | 13:29 |
| *** vanchester has quit IRC | 13:29 | |
| chmouel | NashTrash: if you have an error then it means you have an installation problem probably need to see with the ubuntu packagers | 13:29 |
| NashTrash | chmouel: Hmm…Ok. I will give it a try. Thanks for the help. | 13:31 |
| *** markmcclain has quit IRC | 13:31 | |
| *** markmcclain has joined #openstack | 13:31 | |
| *** sandywalsh has joined #openstack | 13:31 | |
| *** edygarcia has joined #openstack | 13:32 | |
| *** japage has joined #openstack | 13:32 | |
| *** realnorth has joined #openstack | 13:34 | |
| *** vanchester has joined #openstack | 13:35 | |
| realnorth | anyone able to help with an "Internal Server Error" upon logging into the OpenStack Dashboard? | 13:35 |
| *** dachary has quit IRC | 13:35 | |
| realnorth | Keystone.log reports a deprecated method | 13:35 |
| koolhead11 | realnorth: does apache log says anything? | 13:35 |
| realnorth | haven't checked the apache logs only nova logs | 13:36 |
| NashTrash | chmouel: It is a no go from the python shell. It too gives me a 'ImportError: cannot import name WSGIContext' error | 13:36 |
| *** mnaser has joined #openstack | 13:36 | |
| *** dtroyer is now known as dtroyer_zzz | 13:37 | |
| chmouel | NashTrash: which version of swift? | 13:37 |
| notmyname | chmouel: NashTrash: swift 1.4.8 should be using the included swift3. use the external swift3 with swift 1.5.0 | 13:37 |
| NashTrash | notmyname: chmouel: Ok, how do I switch it to the internal version of swift3? | 13:38 |
| *** ewindisch has joined #openstack | 13:38 | |
| *** vanchester has quit IRC | 13:39 | |
| *** vanchester has joined #openstack | 13:39 | |
| realnorth | checked the apache logs get "No handlers could be found for logger "openstack_dashboard" " | 13:40 |
| notmyname | the "use =" line in the swift3 section should be egg:swift#swift3 | 13:41 |
| koolhead11 | realnorth: what are u running devstack | 13:41 |
| realnorth | but that was yesterday and I've tried logging in since then | 13:41 |
| realnorth | no installed using the openstack compute starter guide | 13:42 |
| noob | does anyone know what perms are needed in mysql for the nova user? | 13:42 |
| noob | i keep getting access denied | 13:42 |
| *** jedi4ever_ has joined #openstack | 13:42 | |
| *** DavidLevin has joined #openstack | 13:42 | |
| realnorth | created a node with everything but openstack-volume | 13:42 |
| *** dubsquared has joined #openstack | 13:42 | |
| *** jedi4ever has quit IRC | 13:43 | |
| *** jedi4ever_ is now known as jedi4ever | 13:43 | |
| *** dolphm has joined #openstack | 13:43 | |
| *** dubsquared has quit IRC | 13:43 | |
| *** dolphm_ has joined #openstack | 13:43 | |
| *** vladdy has quit IRC | 13:44 | |
| *** jongleur1 has quit IRC | 13:44 | |
| *** shang has joined #openstack | 13:45 | |
| *** etnt has quit IRC | 13:45 | |
| *** sri_ has quit IRC | 13:45 | |
| *** jongleur has joined #openstack | 13:45 | |
| *** etnt has joined #openstack | 13:45 | |
| realnorth | any ideas? | 13:46 |
| realnorth | I'm installing on Ubuntu 12.04 | 13:47 |
| *** asavu has joined #openstack | 13:47 | |
| *** shang has quit IRC | 13:47 | |
| *** shang has joined #openstack | 13:48 | |
| *** dprince has joined #openstack | 13:48 | |
| *** dolphm has quit IRC | 13:48 | |
| vanchester | dolphm_, are you free to speech? | 13:49 |
| dolphm_ | vanchester: yep, i'm back | 13:50 |
| *** vladdy has joined #openstack | 13:50 | |
| zynzel | noob: yes | 13:50 |
| *** dtroyer_zzz is now known as dtroyer | 13:51 | |
| vanchester | dolphm_, cool. So another question is about example of middleware for remote authentication, like AD or OpenID, do you know some? | 13:51 |
| dolphm_ | vanchester: the middleware wouldn't handle that; that would be handled by a keystone driver on the keystone service itself | 13:51 |
| *** jedi4ever has quit IRC | 13:51 | |
| noob | zynzel: hey :) | 13:52 |
| *** dubsquared has joined #openstack | 13:52 | |
| noob | zynzel: i'm having an issue with the openstack dashboard where the user list and projects just times out | 13:52 |
| noob | zynzel: i granted ALL on *.* to nova in the database | 13:52 |
| *** pretec has quit IRC | 13:53 | |
| zynzel | noob: check keystone endpoints :) | 13:53 |
| noob | zynzel: ok. | 13:53 |
| vanchester | dolphm_, will it? As i understand the middleware used when we have no full access to users database (as OpenID) but identity backends used when we create ourself database (i.e. of using LDAP server) | 13:53 |
| zynzel | especialy admin url in identify service | 13:53 |
| noob | zynzel: what do the keystone endpoints mean? | 13:53 |
| zynzel | especialy check if you have port 35357 and not 5000 | 13:53 |
| vanchester | by full access i mean read and Write | 13:53 |
| *** ejat has quit IRC | 13:54 | |
| zynzel | noob: url for services in openstack | 13:54 |
| *** rnorwood has joined #openstack | 13:54 | |
| alex88 | hi guys, i'm trying to create a new network, but i get http://pastebin.com/hrSKpMEL , any idea? | 13:54 |
| noob | zynzel: ok that would make sense. it's prob trying to hit the wrong url | 13:54 |
| zynzel | alex88: what db are you using? | 13:55 |
| zynzel | sqlite? | 13:55 |
| dolphm_ | vanchester: that's not true at all; everyone needs auth_token middleware if they want keystone authentication to protect other services, and you'll need an identity backend of some kind to feed keystone, regardless of the implementation | 13:55 |
| *** osier has joined #openstack | 13:55 | |
| *** hggdh has quit IRC | 13:55 | |
| noob | zynzel: yes the endpoints def look wrong. | 13:55 |
| alex88 | zynzel, in nova.conf i have --sql_connection=mysql://novadbadmin:password@10.8.0.1/nova | 13:56 |
| uksysadmin | jongleur, what's up? | 13:56 |
| zynzel | alex88: nova-manage service list works? | 13:56 |
| alex88 | zynzel, same error | 13:56 |
| koolhead11 | realnorth: around buddy? | 13:57 |
| vanchester | dolphm_, i'm not sure that i understand you. Now i don't touch auth_token middleware, i just speak about logic of keystone | 13:57 |
| zynzel | alex88: try mysql -u novadbadmin -h 10.8.0.1 -p nova | 13:57 |
| abniyi | nova-manage db sync does not create tables in the database | 13:57 |
| zynzel | and enter password from config | 13:57 |
| realnorth | I'm here | 13:57 |
| zynzel | if it dont work, check credentials/ip | 13:58 |
| dolphm_ | vanchester: alright, then what's your question? | 13:58 |
| alex88 | zynzel, connects and db nova has tables | 13:58 |
| *** hggdh has joined #openstack | 13:58 | |
| *** rnorwood has quit IRC | 13:58 | |
| jongleur | uksysadmin: I have only one pysical ethernet card in the one and only host for my openstack installation. for the internal network of the VMs I tried to add eth0:1 as a virtual network adapter, but since the hosts network breaks whenever I start the nova services. any idea how to get a virtual network adapter that does not break the physical eth0, without the need to install a second pysical eth card? | 13:58 |
| *** rnorwood has joined #openstack | 13:59 | |
| alex88 | jongleur, i created a tap device and used that one | 13:59 |
| vanchester | dolphm_, do we use backend when we manage ourself users database but middleware when we authorize through remote services like OpenID and AD? | 13:59 |
| vanchester | sry for english | 14:00 |
| alex88 | jongleur, using vde_tunctl you can create a virtual device that you'll attach later on other servers if you have only 1 interface on them | 14:00 |
| alex88 | zynzel, also it says check log, but the only log it writes is on stdout | 14:00 |
| dolphm_ | vanchester: you will use middleware, regardless | 14:01 |
| dolphm_ | vanchester: and you will use backend drivers in keystone, regardless | 14:01 |
| dolphm_ | vanchester: they're not somehow interchangable or applicable to conflicting use cases | 14:01 |
| jongleur | alex88: could be what I searched for, thanks. Will try that as soon as I get physical access to the server again (to fix the network that broke down now...) | 14:02 |
| *** zynzel has quit IRC | 14:02 | |
| *** zynzel has joined #openstack | 14:02 | |
| vanchester | dolphm_, of course. But i though it's enough to use one of them for that. | 14:02 |
| *** rnorwood has quit IRC | 14:02 | |
| alex88 | jongleur, i used that on some servers @ ovh and it worked fine to create a virtual network between them | 14:03 |
| uksysadmin | jongleur, you want your public and private on the same interface? | 14:03 |
| uksysadmin | you don't need to add an alias for that | 14:03 |
| alex88 | zynzel, it seems ilk it's still searching for file db right? | 14:03 |
| zynzel | alex88: probably yes | 14:03 |
| zynzel | check /etc/nova permissions | 14:03 |
| *** Guest44656 has quit IRC | 14:04 | |
| dolphm_ | vanchester: enough of what to use one of what for what? be more specific | 14:04 |
| jongleur | uksysadmin: not necessarily, I think, the TUN/TAP solution proposed by alex88 will be fine, too. Using the same interfaces was proposed by a commenter on the hastexo guide as a working solution | 14:04 |
| *** Guest44656 has joined #openstack | 14:04 | |
| alex88 | /etc/nova has 700, user is nova | 14:04 |
| uksysadmin | jongleur, http://docs.openstack.org/trunk/openstack-compute/admin/content/configuring-flat-networking.html | 14:04 |
| zynzel | alex88: and /etc/nova/nova.conf ? | 14:05 |
| uksysadmin | jongleur, I've never used a set up that used a single interface - I can only presume for testing? | 14:05 |
| alex88 | zynzel, 644 nova:nova | 14:05 |
| koolhead11 | alex88: hey | 14:05 |
| jongleur | uksysadmin: it's a small one-host cloud for testing, yes | 14:05 |
| zynzel | alex88: change it to 600 | 14:05 |
| vanchester | dolphm_, my target is implementation of AD authorization, that's it. | 14:05 |
| * koolhead11 finds some of the old folks have disappeared from the channel | 14:05 | |
| alex88 | zynzel, now? | 14:05 |
| alex88 | still not working | 14:05 |
| alex88 | hi koolhead11 | 14:05 |
| koolhead11 | alex88: it will work am sure :) | 14:06 |
| alex88 | koolhead11, what? :) | 14:06 |
| vanchester | dolphm_, so, i'm looking for opportunities in keystone's middleware and backends | 14:06 |
| koolhead11 | after the chown magic :D | 14:06 |
| *** Gordonz has joined #openstack | 14:06 | |
| vanchester | dolphm_, in middleware for now | 14:07 |
| koolhead11 | alex88: long time BTW | 14:07 |
| dolphm_ | vanchester: have you looked at keystone.identity.backends.ldap? | 14:07 |
| zynzel | alex88: well | 14:07 |
| zynzel | strange. | 14:07 |
| alex88 | koolhead11, nope it didn't :( btw, sorry, i don't remember :( | 14:07 |
| koolhead11 | :) | 14:07 |
| uksysadmin | koolhead11, they've gone off to openstack-dev I suspect... | 14:07 |
| koolhead11 | uksysadmin: +1 :) | 14:07 |
| alex88 | zynzel, don't get mad with me.. i was missing sudo in nova-manage :S | 14:08 |
| zynzel | alex88: lol. | 14:08 |
| sstent | anyone know if there is away to get pat the current devstack lesscss bug? https://bugs.launchpad.net/devstack/+bug/1014735 | 14:08 |
| vanchester | dolphm_, yes, but there is one feature in it - it stores the whole information including roles and tenants in formatted database, managed by cloud owner. | 14:09 |
| dolphm_ | vanchester: you can write your own however you wish, i'm just pointing it out as a reference | 14:09 |
| alex88 | zynzel, sorry for that | 14:09 |
| zynzel | no problem :) | 14:09 |
| *** rnorwood has joined #openstack | 14:09 | |
| koolhead11 | sstent: why don`t you use Essex branch if your not testing using devstack | 14:10 |
| marrusl | question: how can you limit the block of fixed addresses so that, for example, you're using a /24 but don't want it to hand out anything below .10 ? | 14:10 |
| abniyi | nova-manage db syn does not write tables in the database any idea on how to solve this | 14:10 |
| marrusl | --flat_network_dhcp_start doesn't seem to work any more | 14:11 |
| keruspe | I have a disk with a "raw" format stored in glance. If I use it as an argument to "nova boot", it only creates a 6.1MB file instead of the expected file in the instance-XXXXXXX dir (the file in _base is ok) and it tags it as "qcow2" in the libvirt.xml file | 14:11 |
| keruspe | Why does this happen ? | 14:11 |
| vanchester | dolphm_, but AD is often used as a storage for manies of services so we have no opportunity to change it. We can only check credentials. | 14:11 |
| *** Guest50318 has quit IRC | 14:12 | |
| sstent | koolhead1: just trying to test the latest master branch, and found this bug. just wanted to know if there was any asy resolution | 14:12 |
| dolphm_ | vanchester: great, then you only have to implement keystone.identity.core.Driver.authenticate() | 14:12 |
| * alex88 likes all smiles in service list after first try install | 14:12 | |
| noob | zynzel: success! the dashboard works now! | 14:12 |
| koolhead11 | sstent: check the buglist and if not available file it :D | 14:12 |
| dolphm_ | alex88: ui design ftw | 14:12 |
| * koolhead11 hi5 noob :) | 14:13 | |
| noob | woo! | 14:13 |
| uksysadmin | marrusl, you can manually edit the database, or split the 24 into something other than a 24 (25 and use 128 addresses, say) | 14:13 |
| alex88 | dolphm_, true that ;) | 14:13 |
| *** zigo has joined #openstack | 14:13 | |
| uksysadmin | marrusl, I also noticed a "reserved" column in the db too | 14:13 |
| noob | koolhead11: my dashboard still spins when i click on the projects tab but everything else works now | 14:13 |
| sstent | koolhead1: the bug is there and it looks like a missing dependency, jsut not sure what needs to be installed https://bugs.launchpad.net/devstack/+bug/1014735 | 14:13 |
| vanchester | dolphm_, but there is a question about architecture :) shouldn't i implement it like a middleware since we don't store credentials? | 14:14 |
| zynzel | noob: great | 14:14 |
| uksysadmin | which OpenStack uses to reserve the first couple of IPs for VPN and route for guests | 14:14 |
| koolhead11 | sstent: if you can find the pip dependancy add it as comment :) | 14:14 |
| marrusl | uksysadmin, yeah, ok. that makes some sense. I *hate* it when the answer is "edit the database". :) | 14:15 |
| koolhead11 | marrusl: :D | 14:15 |
| marrusl | uksysadmin, we're weighing the other approach (smaller net) too. Thanks! | 14:15 |
| dolphm_ | vanchester: the existing architecture works pretty well; re-implementing all of keystone as middleware is certainly do-able, but i don't see what it buys you other than saving a LAN connection and a lot of extra work | 14:16 |
| uksysadmin | marrusl, unfortunately it is a sticking point - the tools used sometimes don't cover all use-cases, whereas a hack will. Not ideal and noted at the design summit. | 14:16 |
| vanchester | dolphm_, i won't re-implement keystone. There is no AD authentication system, LDAP works different. | 14:19 |
| dolphm_ | vanchester: sure | 14:19 |
| *** Gordonz has quit IRC | 14:20 | |
| dolphm_ | vanchester: were you planning on contributing your effort back to keystone? | 14:20 |
| vanchester | yes | 14:20 |
| evil_steve | abniyi: please do not private message me asking for help. | 14:20 |
| *** Gordonz has joined #openstack | 14:20 | |
| *** realnorth has quit IRC | 14:20 | |
| Ryan_Lane | vanchester: AD is different than what? LDAP? | 14:21 |
| dolphm_ | vanchester: i'm going to suggest implementing keystone.identity.core.Driver then | 14:21 |
| vanchester | Ryan_Lane, nope, implementation of LDAP backend is different than AD usage methods expects | 14:22 |
| vanchester | oh, guys, sorry for my english :) | 14:23 |
| Ryan_Lane | so, you mean the schema is different | 14:23 |
| Ryan_Lane | because AD is LDAP | 14:23 |
| Ryan_Lane | are the attributes and objectclasses hardcoded in keystone? | 14:23 |
| *** ccorrigan has quit IRC | 14:23 | |
| dolphm_ | vanchester: you can also just extend the LDAP implementation | 14:24 |
| vanchester | Ryan_Lane, something like that. It's normal for AD not to change existing schema if we already have ifrastructure, but other LDAP-servers are more free for that. Am I right? | 14:24 |
| vanchester | Ryan_Lane, yes they are | 14:25 |
| * Ryan_Lane groans | 14:25 | |
| vanchester | oh, wai... or no... | 14:25 |
| Ryan_Lane | vanchester: well, keystone doesn't use custom schema | 14:25 |
| Ryan_Lane | it uses a standard one | 14:26 |
| Ryan_Lane | of course, AD may not use that standard (which would be normal for AD) | 14:26 |
| * Ryan_Lane hates AD | 14:26 | |
| vanchester | Ryan_Lane it use custom chema | 14:27 |
| *** cooper has joined #openstack | 14:27 | |
| Ryan_Lane | keystone does/ | 14:27 |
| vanchester | or i don't understand what custom is | 14:27 |
| Ryan_Lane | I'm pretty sure keystone does not use a custom schema | 14:27 |
| Ryan_Lane | lemme look | 14:27 |
| *** dachary has joined #openstack | 14:27 | |
| *** chuck_ has joined #openstack | 14:28 | |
| vanchester | http://adam.younglogic.com/2012/02/openstack-keystone-ldap-redux/ | 14:28 |
| noob | zynzel: is there another endpoint to configure when you click on the projects tab in the dashboard? | 14:28 |
| noob | zynzel: in the admin tab the projects list but when i click on the tab it just stalls | 14:28 |
| *** rnorwood has quit IRC | 14:29 | |
| vanchester | dolphm_, extending is first what i was thought about | 14:29 |
| *** zul has quit IRC | 14:29 | |
| Ryan_Lane | vanchester: none of that schema is custom | 14:29 |
| *** jongleur has quit IRC | 14:29 | |
| *** esm has joined #openstack | 14:29 | |
| *** chuck_ has quit IRC | 14:29 | |
| *** esm is now known as Guest74684 | 14:29 | |
| Ryan_Lane | organizationalRole, roleOccupant, groupOfNames and inetOrgPerson are all standard schemas | 14:29 |
| *** AlanClark has joined #openstack | 14:30 | |
| Ryan_Lane | again, AD may not include that schema.... | 14:30 |
| Ryan_Lane | I know for sure it does include groupOfNames and inetOrgPerson | 14:30 |
| Ryan_Lane | I'd be very surprised if inetOrgPerson wasn't already an objectclass on your user entries | 14:31 |
| vanchester | Ryan_Lane, ok, but AD AFAIK uses this schemas for something different | 14:31 |
| Ryan_Lane | for groups, AD uses its own schema | 14:31 |
| vanchester | yeah | 14:31 |
| Ryan_Lane | but that doesn't mean you can't use groupOfNames | 14:31 |
| Ryan_Lane | seems OrganizationalRole is also included in AD: http://msdn.microsoft.com/en-us/library/windows/desktop/ms683885%28v=vs.85%29.aspx | 14:32 |
| vanchester | i'm confused by all of that... | 14:32 |
| *** drewlander has quit IRC | 14:32 | |
| *** AlanClark has quit IRC | 14:33 | |
| Ryan_Lane | http://msdn.microsoft.com/en-us/library/cc221556%28v=prot.10%29.aspx | 14:33 |
| Ryan_Lane | ^ there's groupOfNames | 14:33 |
| uvirtbot | Ryan_Lane: Error: "there's" is not a valid command. | 14:33 |
| *** jackh has quit IRC | 14:33 | |
| Ryan_Lane | it's kind of sad that keystone hardcodes the attributes and objectclasses, though | 14:35 |
| Ryan_Lane | because it would be ideal for AD users to use the group objectclass, rather than groupOfNames | 14:35 |
| Ryan_Lane | though it's probably a good idea to use organizationalRole | 14:35 |
| *** zul has joined #openstack | 14:35 | |
| vanchester | Ryan_Lane, well thank you for advices and feedback. I'm really didn't thought about and understand that stuff) | 14:38 |
| Ryan_Lane | well, I'm basically just saying that keystone will work perfectly fine | 14:38 |
| Ryan_Lane | with AD | 14:38 |
| Ryan_Lane | based on the current design | 14:39 |
| *** rnorwood has joined #openstack | 14:39 | |
| *** jcannava has joined #openstack | 14:39 | |
| *** koolhead11 has quit IRC | 14:41 | |
| *** shang has quit IRC | 14:41 | |
| *** robbiew has joined #openstack | 14:41 | |
| *** paulmillar_ has quit IRC | 14:42 | |
| *** paulmillar has joined #openstack | 14:42 | |
| trapni | what is noVNC meaning by "Invalid Token"? | 14:45 |
| *** shang has joined #openstack | 14:45 | |
| *** littleidea has joined #openstack | 14:52 | |
| *** asavu has quit IRC | 14:53 | |
| *** blamar has joined #openstack | 14:53 | |
| *** datsun180b has joined #openstack | 14:56 | |
| *** KavanS has joined #openstack | 14:58 | |
| *** bencherian has joined #openstack | 14:58 | |
| *** sstent has quit IRC | 15:00 | |
| *** sleepson- has quit IRC | 15:00 | |
| *** littleidea has quit IRC | 15:00 | |
| *** sleepson- has joined #openstack | 15:00 | |
| *** sstent has joined #openstack | 15:01 | |
| *** reidrac has quit IRC | 15:01 | |
| *** cryptographrix has quit IRC | 15:01 | |
| *** cryptographrix has joined #openstack | 15:02 | |
| *** alexn6 has left #openstack | 15:02 | |
| *** Triade1 has quit IRC | 15:03 | |
| vanchester | dolphm_, is token_auth a mdware for inserting to service's pipeline or into keystone pipeline? :) | 15:03 |
| *** hunglin has joined #openstack | 15:04 | |
| *** dubsquared has quit IRC | 15:04 | |
| *** rnirmal has joined #openstack | 15:05 | |
| *** Glace has quit IRC | 15:05 | |
| uvirtbot | New bug: #1015613 in glance "Test output polluted with debug logging" [Undecided,In progress] https://launchpad.net/bugs/1015613 | 15:05 |
| alex88 | from dashboard i can't get users and project, what could be the problem? | 15:06 |
| alex88 | from logs i cannot see any request to api | 15:06 |
| *** anderstj has joined #openstack | 15:07 | |
| *** cgrage has joined #openstack | 15:08 | |
| *** anderstj has quit IRC | 15:08 | |
| *** vachon has joined #openstack | 15:09 | |
| *** shaon has quit IRC | 15:09 | |
| vachon | anyone have a quick way to get a S3 AMI into glance? | 15:09 |
| dolphm_ | vanchester: keystone.middleware.core.TokenAuthMiddleware (token_auth) runs in keystone's pipeline; keystone.middleware.auth_token.AuthProtocol (auth_token) protects other services and talks remotely to keystone | 15:09 |
| *** blamar has quit IRC | 15:09 | |
| alex88 | vachon, i usually download ubuntu ec2 images and add those | 15:10 |
| vachon | i have prebuilt ones i need | 15:10 |
| vachon | they are chunked too | 15:10 |
| *** freeflyi1g has joined #openstack | 15:11 | |
| *** mattray has joined #openstack | 15:11 | |
| *** dachary has quit IRC | 15:12 | |
| *** jedi4ever has joined #openstack | 15:12 | |
| *** tty has quit IRC | 15:13 | |
| vachon | of course s3 chunked ones are encrypted…. awesome, screw it, new squeeze isos for now | 15:13 |
| *** kbringard has joined #openstack | 15:13 | |
| *** freeflying has quit IRC | 15:14 | |
| *** dwcramer has joined #openstack | 15:15 | |
| *** c0t0d0s0 has quit IRC | 15:15 | |
| *** dachary has joined #openstack | 15:17 | |
| *** Glace has joined #openstack | 15:18 | |
| *** shang has quit IRC | 15:19 | |
| *** dachary has quit IRC | 15:21 | |
| *** dachary has joined #openstack | 15:21 | |
| *** dachary has quit IRC | 15:21 | |
| *** ohad_ has joined #openstack | 15:23 | |
| *** dachary has joined #openstack | 15:23 | |
| noob | i found my error | 15:23 |
| noob | BadRequest: Unable to communicate with identity service: [Errno 110] Connection timed out. (HTTP 400) | 15:23 |
| *** blamar has joined #openstack | 15:23 | |
| noob | when i click on anyhting in the project panel i get that | 15:24 |
| *** heckj has joined #openstack | 15:25 | |
| *** rwmjones_afk is now known as rwmjones | 15:25 | |
| *** ohad has quit IRC | 15:26 | |
| noob | this has to do with keystone i think | 15:26 |
| *** dachary has quit IRC | 15:27 | |
| *** nethope has left #openstack | 15:30 | |
| *** dubsquared has joined #openstack | 15:30 | |
| *** nmistry has joined #openstack | 15:31 | |
| vanchester | dolphm_, thank you. The question was about second one. | 15:33 |
| *** uksysadmin has quit IRC | 15:34 | |
| *** Protux has joined #openstack | 15:34 | |
| *** davepigott_ has quit IRC | 15:35 | |
| uvirtbot | New bug: #1015629 in openstack-ci "gmail not accepting connections from stackforge gerrit" [Undecided,New] https://launchpad.net/bugs/1015629 | 15:36 |
| *** asavu has joined #openstack | 15:36 | |
| *** shang has joined #openstack | 15:36 | |
| noob | when the horizon dashboard says Could not retrieve tenant list is that something i should configure in keystone? | 15:37 |
| *** mrjazzcat has joined #openstack | 15:38 | |
| noob | i'm not sure what horizong is using to connect with | 15:38 |
| *** maoy has joined #openstack | 15:38 | |
| *** shang has quit IRC | 15:40 | |
| *** dcramer_ has joined #openstack | 15:42 | |
| uvirtbot | New bug: #1015638 in nova "JSON returned by nova not conform to docs" [Undecided,New] https://launchpad.net/bugs/1015638 | 15:45 |
| *** dwcramer has quit IRC | 15:46 | |
| *** NashTrash has quit IRC | 15:47 | |
| *** joearnold has joined #openstack | 15:49 | |
| *** shang has joined #openstack | 15:50 | |
| *** arBmind has quit IRC | 15:50 | |
| *** shang has quit IRC | 15:51 | |
| *** arBmind has joined #openstack | 15:51 | |
| *** jkelly has joined #openstack | 15:51 | |
| *** trevman2001 has joined #openstack | 15:52 | |
| *** zul has quit IRC | 15:52 | |
| *** dubsquared has quit IRC | 15:53 | |
| *** whenry has quit IRC | 15:54 | |
| *** jkelly has left #openstack | 15:54 | |
| *** taupen has quit IRC | 15:54 | |
| *** osier has quit IRC | 15:54 | |
| *** ramjett has joined #openstack | 15:57 | |
| *** littleidea has joined #openstack | 15:58 | |
| *** ramjett has left #openstack | 15:59 | |
| *** nmistry has quit IRC | 16:00 | |
| *** littleidea has quit IRC | 16:01 | |
| uvirtbot | New bug: #1015650 in openstack-ci "pypi mirror not used in all cases" [High,Triaged] https://launchpad.net/bugs/1015650 | 16:01 |
| *** whenry has joined #openstack | 16:01 | |
| *** vitiho_ has quit IRC | 16:02 | |
| *** ejat has joined #openstack | 16:04 | |
| *** ejat has quit IRC | 16:04 | |
| *** ejat has joined #openstack | 16:04 | |
| *** dcramer_ has quit IRC | 16:05 | |
| *** Leseb has quit IRC | 16:05 | |
| *** nmistry has joined #openstack | 16:06 | |
| *** dubsquared has joined #openstack | 16:07 | |
| *** ahasenack has quit IRC | 16:07 | |
| *** lloydde has joined #openstack | 16:09 | |
| *** bencherian has quit IRC | 16:09 | |
| *** leifmadsen has quit IRC | 16:09 | |
| *** sstent has quit IRC | 16:15 | |
| *** ahasenack has joined #openstack | 16:17 | |
| *** garyk has quit IRC | 16:17 | |
| *** andutros has joined #openstack | 16:18 | |
| *** nacx has quit IRC | 16:19 | |
| *** taupen has joined #openstack | 16:20 | |
| *** immotus_ has joined #openstack | 16:20 | |
| *** shaon has joined #openstack | 16:21 | |
| *** vitiho has joined #openstack | 16:21 | |
| *** nati_ueno has joined #openstack | 16:21 | |
| *** paulmillar has quit IRC | 16:21 | |
| *** s0mik has joined #openstack | 16:22 | |
| derchris | hi there. i was wondering if anyone can recommend a hoster which i can use to try and play around with openstack? | 16:25 |
| derchris | or better said, what does a hoster need to provide in order to run a openstack environment | 16:25 |
| *** Glace has quit IRC | 16:28 | |
| vachon | technically you can run it anywhere under qemu | 16:28 |
| vachon | it just will suck | 16:28 |
| *** zul has joined #openstack | 16:28 | |
| *** dneary has joined #openstack | 16:28 | |
| dneary | Hi all | 16:29 |
| dneary | I'm a little confused | 16:29 |
| vachon | derchris: what are you trying to test | 16:29 |
| *** metral has joined #openstack | 16:29 | |
| dneary | What is the relationship between OpenStack Compute/Storage/Networking/Identity/Dashboard and Swift/Quantum/Nova/Glance/Keystone? | 16:30 |
| dneary | Are the latter codenames for the former? I find theml in URLs and code projects, but not on the opnestack.org/projects page | 16:30 |
| vachon | compute = nova, storage = swift, networking = quantum, identity = keystone, dashboard = horizon | 16:30 |
| notmyname | compute = nova, object storage = swift, networking = quantum, identity = keystone, dashboard = horizon | 16:30 |
| dolphm_ | image storage = glance | 16:31 |
| notmyname | marketing names vs. code project names | 16:31 |
| immotus_ | dneary: this doc has been helping me with those questions... http://docs.openstack.org/essex/openstack-compute/admin/content/conceptual-architecture.html | 16:31 |
| *** reed has quit IRC | 16:31 | |
| derchris | vachon, i would like to install a whole openstack environment, which can be reached over the internet. but from what i know so far, there are certain hw/sw requirments | 16:31 |
| vachon | you could run devstack on any VPC | 16:32 |
| dneary | immotus: Thanks! | 16:32 |
| vachon | it will run gemu and be slow | 16:32 |
| vachon | very very slow | 16:32 |
| vachon | if it works | 16:32 |
| vachon | *qemu | 16:32 |
| vachon | you are better off just using virtual box and doing stuff in there | 16:32 |
| *** salgado is now known as salgado-lunch | 16:33 | |
| abniyi | does any one know documentation for install openstack on a system with single nic | 16:34 |
| immotus_ | dneary: np. I'm very new to OpenStack myself, but the docs seem to be pretty well written | 16:34 |
| derchris | i should have the hw power, just not aware of any special requirments. like i can have vlan support for more then 2 servers, but do i need it? | 16:34 |
| dneary | So Horizon == Dashboard, Nova == Compute, Glance + Swift == Storage, Keystone == Identity? | 16:34 |
| vachon | Swift is object storage | 16:35 |
| vachon | glance is image storage | 16:35 |
| dneary | OK | 16:35 |
| notmyname | dneary: glance provides a bridge between nova and swift | 16:35 |
| vachon | swift CAN back glance, but its not a prerequisite | 16:35 |
| dneary | vachon, So as they relate to "OpenStack Storage"... | 16:35 |
| vachon | yea | 16:35 |
| *** ejat has quit IRC | 16:35 | |
| derchris | so if i have 2 servers with 2 nics, one external with internet ip, and the other one connected to a vlan for internal communication. that should work. if i use one as storage, and the for compute? | 16:37 |
| *** NashTrash has joined #openstack | 16:37 | |
| *** anderstj has joined #openstack | 16:37 | |
| vachon | not really | 16:37 |
| vachon | the switch needs to support vlan trunking and passthrough | 16:38 |
| *** dwcramer has joined #openstack | 16:38 | |
| *** somik has joined #openstack | 16:39 | |
| derchris | it sounds like i would have to look into co-location | 16:39 |
| vachon | it "has" been done on ec2 | 16:39 |
| vachon | vmware workstation handles it like a champ | 16:40 |
| *** alekibango has quit IRC | 16:40 | |
| *** s0mik has quit IRC | 16:40 | |
| *** somik is now known as s0mik | 16:40 | |
| vachon | depends your spend and how deep down the rabbit hole you want to go for testing | 16:40 |
| derchris | the result should be a running cloud environment, where i and a few friends can go an create os instances for testing | 16:41 |
| *** asavu has quit IRC | 16:41 | |
| *** rpawlik has joined #openstack | 16:41 | |
| vachon | well, yea, dedicated boxes or colo are your best bet imho | 16:42 |
| vachon | but thats a bit of change | 16:42 |
| vachon | if you have nice INET at your house, you can run it on a couple of old beater desktops | 16:42 |
| *** Glace has joined #openstack | 16:42 | |
| derchris | as i said, i have one who offers vlan support | 16:42 |
| vachon | then go for it, i can tell you it takes quite a while to get everything great. I bought a big cluster, still doing setup/re-setup/re-re-setup | 16:43 |
| vachon | before i send it to a colo | 16:43 |
| vanchester | dolphm_, i sorry for strange question (there is all in the docs) but why do we need token_auth middleware (from token_auth.py)? | 16:44 |
| derchris | its ok if it takes a while, just wanted to make sure it will run it | 16:44 |
| vanchester | dolphm_, ain't keystone by itself manages all actions about tokens? | 16:44 |
| dolphm_ | vanchester: where are you seeing "token_auth.py"? | 16:45 |
| derchris | i know, ideally you should have each service running on its own host. but can i group some of them together? | 16:45 |
| *** alekibango has joined #openstack | 16:45 | |
| dolphm_ | derchris: absolutely | 16:45 |
| vanchester | dolphm_, auth_token.py | 16:45 |
| vachon | derchris: i run a ton on one for testing things | 16:46 |
| dolphm_ | vanchester: do you want any authentication in front of your openstack services? | 16:46 |
| derchris | sounds like i would be ok to get a single server for now then | 16:46 |
| *** garyk has joined #openstack | 16:47 | |
| derchris | and have all running on the same host? | 16:47 |
| dolphm_ | vanchester: if not, remove auth_token from your pipeline and forge requests as you please | 16:47 |
| vachon | swift might be cranky | 16:47 |
| vachon | its however, optional | 16:47 |
| vachon | so yes, i would start there, then vlan'ing isn't as super critical | 16:47 |
| *** warik has joined #openstack | 16:47 | |
| *** e1mer has quit IRC | 16:48 | |
| derchris | cool, might do that then | 16:48 |
| *** tty has joined #openstack | 16:48 | |
| vanchester | dolphm_, but why docs says us to insert also keystone middleware? http://docs.openstack.org/developer/keystone/configuringservices.html#configuring-swift-to-use-keystone | 16:48 |
| *** littleidea has joined #openstack | 16:48 | |
| derchris | and hopefully, adding new services should be easy enough | 16:48 |
| *** littleidea_ has joined #openstack | 16:48 | |
| dolphm_ | vanchester: because most people prefer to secure their swift deployment | 16:49 |
| vanchester | ah, yeah, this one is only for swift | 16:49 |
| *** g has joined #openstack | 16:49 | |
| vanchester | so i need to look what does it doing | 16:49 |
| *** g is now known as Guest36831 | 16:49 | |
| *** littleidea has quit IRC | 16:52 | |
| *** littleidea_ is now known as littleidea | 16:52 | |
| *** pixelbeat has quit IRC | 16:53 | |
| *** immotus_ has quit IRC | 16:53 | |
| *** jog0 has joined #openstack | 16:53 | |
| *** nmistry has quit IRC | 16:54 | |
| *** leifmadsen has joined #openstack | 16:54 | |
| *** joesavak has quit IRC | 16:55 | |
| uvirtbot | New bug: #1015685 in glance "Consistent logger instantiation" [Wishlist,In progress] https://launchpad.net/bugs/1015685 | 16:55 |
| *** jog0 has left #openstack | 16:58 | |
| *** littleidea has quit IRC | 16:58 | |
| *** Leseb has joined #openstack | 16:59 | |
| noob | does anyone know how to get quantum to show up on the dashboard? | 17:01 |
| *** GheRivero_ has joined #openstack | 17:03 | |
| *** r0tha has joined #openstack | 17:03 | |
| *** zinjacoder has quit IRC | 17:05 | |
| vanchester | dolphm_, yeah, now i understand that middleware and backends are different things. Middleware are used by services - thats what i didn't even thought about :) | 17:08 |
| *** metral_ has joined #openstack | 17:08 | |
| vanchester | dolphm_, thx for your patient explanation | 17:08 |
| *** zinjacoder has joined #openstack | 17:09 | |
| *** metral has quit IRC | 17:09 | |
| *** metral_ is now known as metral | 17:09 | |
| *** zinjacoder has quit IRC | 17:09 | |
| *** vachon has left #openstack | 17:10 | |
| *** marrusl has quit IRC | 17:10 | |
| *** ccustine has joined #openstack | 17:12 | |
| *** marrusl has joined #openstack | 17:13 | |
| *** koolhead17|afk has joined #openstack | 17:14 | |
| *** dachary has joined #openstack | 17:15 | |
| *** darraghb has quit IRC | 17:17 | |
| *** dachary has quit IRC | 17:18 | |
| *** jfluhmann has joined #openstack | 17:18 | |
| *** jplewi has joined #openstack | 17:19 | |
| *** natea has quit IRC | 17:19 | |
| *** primozf has quit IRC | 17:19 | |
| *** natea has joined #openstack | 17:19 | |
| uvirtbot | New bug: #1015702 in horizon "Lazy tab loading overwrites query params" [Medium,In progress] https://launchpad.net/bugs/1015702 | 17:20 |
| *** notze has quit IRC | 17:21 | |
| *** keruspe has quit IRC | 17:21 | |
| *** nphase has joined #openstack | 17:21 | |
| *** koolhead17|afk is now known as koolhead17 | 17:22 | |
| *** salgado-lunch is now known as salgado | 17:24 | |
| *** Leseb has quit IRC | 17:26 | |
| *** notze has joined #openstack | 17:30 | |
| uvirtbot | New bug: #1015705 in devstack "devstack won't install with http_proxy set" [Undecided,New] https://launchpad.net/bugs/1015705 | 17:31 |
| *** arBmind has quit IRC | 17:31 | |
| *** notze_ has joined #openstack | 17:34 | |
| *** notze has quit IRC | 17:35 | |
| *** Ryan_Lane has quit IRC | 17:35 | |
| *** notze has joined #openstack | 17:37 | |
| *** Guest74684 has quit IRC | 17:37 | |
| *** vanchester has quit IRC | 17:38 | |
| *** notze_ has quit IRC | 17:39 | |
| *** noob has quit IRC | 17:41 | |
| *** shang has joined #openstack | 17:42 | |
| *** dpippenger has joined #openstack | 17:44 | |
| *** mszilagyi has joined #openstack | 17:45 | |
| *** reed has joined #openstack | 17:46 | |
| *** zul has quit IRC | 17:46 | |
| *** taupen has quit IRC | 17:46 | |
| *** zul has joined #openstack | 17:52 | |
| *** GheRivero_ has quit IRC | 17:53 | |
| *** matwood has quit IRC | 17:53 | |
| *** jedi4ever has quit IRC | 17:54 | |
| *** sstent has joined #openstack | 17:55 | |
| *** matwood has joined #openstack | 17:55 | |
| *** notze has quit IRC | 17:56 | |
| *** pnavarro has joined #openstack | 17:57 | |
| *** hunglin has quit IRC | 17:58 | |
| *** Dr_Who has joined #openstack | 18:03 | |
| *** Dr_Who has joined #openstack | 18:03 | |
| *** Dr_Who has quit IRC | 18:04 | |
| *** erikzaadi has quit IRC | 18:04 | |
| *** shang has quit IRC | 18:07 | |
| *** shang has joined #openstack | 18:08 | |
| *** realnorth has joined #openstack | 18:08 | |
| *** dhellmann has quit IRC | 18:10 | |
| realnorth | anyone have experience putting glance on its own separate node? | 18:10 |
| uvirtbot | New bug: #1015731 in nova "resize leave leftover libvirt configs" [Undecided,New] https://launchpad.net/bugs/1015731 | 18:11 |
| *** dhellmann has joined #openstack | 18:11 | |
| *** hunglin has joined #openstack | 18:13 | |
| *** metral has quit IRC | 18:14 | |
| *** metral has joined #openstack | 18:14 | |
| *** NashTrash has quit IRC | 18:16 | |
| *** Guest44656 has quit IRC | 18:16 | |
| *** dubsquared has quit IRC | 18:19 | |
| *** avoine has joined #openstack | 18:20 | |
| *** NashTrash has joined #openstack | 18:20 | |
| NashTrash | Hello Stackers! | 18:22 |
| NashTrash | Does anyone have swift + keystone + s3 working that could help me? | 18:22 |
| NashTrash | I get " WARNING:keystone.middleware.auth_token:Unable to find authentication token in header" in the proxy-server logs. | 18:23 |
| *** leifmadsen has quit IRC | 18:23 | |
| *** dubsquared has joined #openstack | 18:24 | |
| *** warik has left #openstack | 18:25 | |
| dolphm_ | NashTrash: are you using delay_auth_decision = 1? | 18:26 |
| NashTrash | dolphm_: Yes | 18:27 |
| *** marrusl_ has joined #openstack | 18:27 | |
| dolphm_ | NashTrash: and the s3token middleware is in front of authtoken? | 18:27 |
| NashTrash | dolphm_: here is my pipeline — pipeline = catch_errors healthcheck cache swift3 s3token authtoken keystone proxy-server | 18:27 |
| *** ea1het has joined #openstack | 18:28 | |
| NashTrash | dolphm_: And the relevant proxy-server.conf info — http://paste.openstack.org/show/18663/ | 18:28 |
| dolphm_ | NashTrash: well, with delay_auth_decision = 1, that warning is *only* a warning -- is the request in question still being rejected as unauthorized? | 18:28 |
| *** marrusl has quit IRC | 18:28 | |
| NashTrash | dolphm_: Yes. The client (CyberDuck) can not connect. | 18:29 |
| *** dendro-afk is now known as dendrobates | 18:30 | |
| *** Glace has quit IRC | 18:31 | |
| *** wiliam has quit IRC | 18:34 | |
| *** littleidea has joined #openstack | 18:35 | |
| *** realnorth has quit IRC | 18:37 | |
| *** abniyi has quit IRC | 18:37 | |
| *** realnorth has joined #openstack | 18:38 | |
| *** wiliam has joined #openstack | 18:41 | |
| *** joesavak has joined #openstack | 18:43 | |
| *** eglynn__ has quit IRC | 18:44 | |
| *** eglynn has joined #openstack | 18:44 | |
| *** Free_maN has quit IRC | 18:48 | |
| realnorth | anyone setup glance and swift on their own server before? | 18:49 |
| realnorth | can't get Glance to connect to the conrtol node | 18:49 |
| *** Glace has joined #openstack | 18:49 | |
| *** jog0 has joined #openstack | 18:49 | |
| *** jog0 has quit IRC | 18:50 | |
| *** jog0 has joined #openstack | 18:50 | |
| *** nmistry has joined #openstack | 18:51 | |
| *** Glace has quit IRC | 18:51 | |
| *** Glace has joined #openstack | 18:53 | |
| *** epim has joined #openstack | 18:54 | |
| *** nati_ueno has quit IRC | 18:55 | |
| *** never2far has quit IRC | 18:55 | |
| sniperd | realnorth: not glance, just swift | 18:55 |
| NashTrash | dolphm_: Figured it out. I had to add the s3_extension to Keystone. | 18:55 |
| realnorth | oh I'm trying to get Glance on its own node and can't seem to get them to connect | 18:56 |
| realnorth | http://serverfault.com/questions/391449/openstack-multiple-nodes-separate-glance-and-keystone-machines | 18:56 |
| realnorth | similar to that | 18:56 |
| NashTrash | dolphm_: Now my admin user can connect just fine, but my user with role=memberRole gets a 403 | 18:56 |
| *** ea1het has quit IRC | 18:56 | |
| realnorth | I added the two python libraries | 18:56 |
| *** dendrobates is now known as dendro-afk | 18:57 | |
| *** albert23 has joined #openstack | 18:58 | |
| *** leifmadsen has joined #openstack | 18:58 | |
| realnorth | http://pastebin.com/zFdHCWiZ that's a link to my log info from the last time I ran it | 18:59 |
| realnorth | just did /etc/init.d/glance-registry restart | 18:59 |
| realnorth | and it prints that into the thing | 18:59 |
| realnorth | the upstart log just says connection closed | 18:59 |
| *** notze has joined #openstack | 19:00 | |
| *** optiz0r has joined #openstack | 19:03 | |
| *** optiz0r_ has quit IRC | 19:04 | |
| *** notze has quit IRC | 19:05 | |
| realnorth | anyone have any ideas? | 19:06 |
| sniperd | realnorth: sorry, I have no idea on glance, if it was a swift issue I might be able to help | 19:07 |
| realnorth | I understand | 19:07 |
| *** clopez has quit IRC | 19:13 | |
| *** koolhead17 has quit IRC | 19:16 | |
| *** DavidLevin has quit IRC | 19:17 | |
| *** DavidLevin has joined #openstack | 19:20 | |
| *** omenar has joined #openstack | 19:21 | |
| omenar | hello :D | 19:21 |
| *** s34n has joined #openstack | 19:22 | |
| *** lts has quit IRC | 19:23 | |
| omenar | I've got a question: Is possible to add a compute-node to the cloud which is not in the same network that the cloud-controller? | 19:23 |
| *** ttrifonov is now known as ttrifonov_zZzz | 19:23 | |
| omenar | for example... the cloud-controller and 2 compute-nodes are in the 10.10.14.x subnet and the other nodes are in the 10.10.21.x subnet... | 19:24 |
| omenar | I've been thinking that this could be problematic... | 19:25 |
| zynzel | this depends on nova-network not nova-compute. | 19:26 |
| zynzel | if nova-compute could connect to rabbit&&mysql it will work. | 19:27 |
| omenar | really? and the bridge? | 19:27 |
| zynzel | omenar: and the bridge is menaged by nova-network ;P | 19:27 |
| zynzel | in many cases* :) | 19:27 |
| omenar | uhm, I understand... so... I don't need to do anything special for this? | 19:28 |
| zynzel | omenar: you dont understand, this depends on your architecture | 19:29 |
| zynzel | where nova-network is running | 19:29 |
| zynzel | what network manager is used | 19:29 |
| zynzel | what is 10.10.14.x? float? fixed? mgmt? | 19:30 |
| zynzel | and bazylion other options. | 19:30 |
| omenar | nova-network is running with the cloud controller... | 19:30 |
| zynzel | nobody know yours env, so nobody can help you | 19:30 |
| zynzel | without more info. | 19:30 |
| omenar | and... 10.10.14.21 are the float ips | 19:30 |
| omenar | the fixed ips are like 192.168.22.x | 19:30 |
| omenar | which are bridged by all the compute-nodes | 19:30 |
| omenar | 10.10.14.x* sorry | 19:31 |
| *** swift-india has joined #openstack | 19:31 | |
| zynzel | omenar: if you have one nova-network service | 19:31 |
| omenar | aham, | 19:31 |
| zynzel | so only cloud controler can be in 10.10.14.x | 19:31 |
| zynzel | not compute nodes. | 19:31 |
| *** epim has quit IRC | 19:31 | |
| omenar | why? =S | 19:31 |
| omenar | (I'm very new to openstack... sorry =( ) | 19:32 |
| zynzel | omenar: and for what compute node use 10.10.14.x? ;) | 19:32 |
| zynzel | omenar: no problem, maybe i can clear you some openstack hacks :) | 19:32 |
| omenar | let see... I have three machines... | 19:33 |
| omenar | 10.10.14.21 is running nova-api, nova-network, nova-compute, nova-volume, etc... | 19:33 |
| omenar | 10.10.14.22 is running only nova-compute | 19:33 |
| omenar | and 10.10.14.23 is also running only nova-compute | 19:33 |
| *** Guest36831 has quit IRC | 19:33 | |
| *** dwcramer has quit IRC | 19:34 | |
| omenar | (10.10.14.21 is also running mysql, rabbitmq, keystone and glance) | 19:34 |
| *** realnorth has quit IRC | 19:35 | |
| zynzel | omenar: so, if you have another compute-node with address 10.10.21.10 (for example) | 19:35 |
| omenar | that's right | 19:35 |
| *** alex88 has quit IRC | 19:35 | |
| zynzel | it will works until you have routing between 10.10.14.x and 10.10.21.x | 19:35 |
| zynzel | so 21.10 can connect to 14.21 | 19:35 |
| omenar | that's interesting... | 19:35 |
| *** dneary has quit IRC | 19:36 | |
| omenar | and, what about the VMs? | 19:36 |
| zynzel | and 21.10 have acess to 192.168.22.x (vlan?) | 19:36 |
| zynzel | not exacly 21.10 but vms running on 21.10 :) | 19:36 |
| omenar | nope, flatmanager =/... I made a bad choice? | 19:36 |
| zynzel | omenar: so 192.168.22 is on other interface? | 19:37 |
| zynzel | is alias on 10.10.14.x interface? | 19:37 |
| omenar | is an alias... exactly | 19:37 |
| omenar | eth0:1 | 19:37 |
| *** jedi4ever has joined #openstack | 19:37 | |
| *** asavu has joined #openstack | 19:38 | |
| zynzel | omenar: so its depends on your network infrastructure | 19:38 |
| zynzel | simply test it :) | 19:38 |
| zynzel | run server with address 10.10.21.10 && alias 192.168.22.X | 19:38 |
| zynzel | and check if you have access to 192.168.22.0/24 network | 19:38 |
| zynzel | if yes, great you are done. | 19:39 |
| omenar | FlatManager is recommended in this situation? :S | 19:39 |
| *** rkukura has quit IRC | 19:39 | |
| zynzel | omenar: best solution is quantum (but this is not very stable in essex as i know) | 19:39 |
| zynzel | we use flatdhcp+few changes | 19:40 |
| omenar | few changes sounds like dark magic... | 19:40 |
| omenar | hehehe | 19:40 |
| zynzel | omenar: bond+vlan on system level | 19:40 |
| zynzel | +few changes in nova code for availability zones :) | 19:40 |
| *** robbiew has quit IRC | 19:41 | |
| *** joesavak has quit IRC | 19:41 | |
| *** larsks has joined #openstack | 19:41 | |
| omenar | anyway... I will try tomorrow this setup (in 5 minutes the lab will be close)... thanks for your help and patience!!! | 19:41 |
| *** dolphm_ has quit IRC | 19:42 | |
| omenar | I have a little question... related to availability zones... | 19:42 |
| zynzel | omenar: ?:) | 19:42 |
| omenar | Essex is "availability zones" capable? | 19:42 |
| zynzel | not really | 19:42 |
| zynzel | there are a few fail in code | 19:43 |
| zynzel | but mostly it works :) | 19:43 |
| *** never2far has joined #openstack | 19:43 | |
| zynzel | 95% of code is done | 19:43 |
| omenar | in Essex? that's weird... I've been reading that was removed and that will be back in Folsom :S | 19:43 |
| zynzel | omenar: zones was removed | 19:44 |
| zynzel | not availability zones :) | 19:44 |
| omenar | what's the difference? :S | 19:44 |
| zynzel | good question :D | 19:44 |
| zynzel | zone is logical separation/connection of services | 19:45 |
| *** notze has joined #openstack | 19:45 | |
| *** dendro-afk is now known as dendrobates | 19:45 | |
| zynzel | zone have parent, and if any request goes to parent it will be transfered to chilldren | 19:46 |
| zynzel | (imo, dont read about this too much) | 19:46 |
| omenar | and availability zones is only related to nova-compute and scheduling of instances? | 19:46 |
| zynzel | in folsom, zones should be renamed to 'ceils' | 19:46 |
| zynzel | omenar: exacly, also to nova-volume | 19:47 |
| zynzel | and in my env also to nova-network ;) | 19:47 |
| omenar | I see... | 19:47 |
| omenar | You are using the diablo release? | 19:47 |
| zynzel | omenar: 2rc before essex | 19:48 |
| omenar | that release is "availability zones" capable? | 19:48 |
| zynzel | omenar: as i say, mostly :) | 19:49 |
| omenar | (I'm doing a work for my university related with geographically distributed computing... that is why I'm interested in Openstack and availability zones...) | 19:49 |
| *** heckj has quit IRC | 19:49 | |
| *** notze_ has joined #openstack | 19:50 | |
| *** notze has quit IRC | 19:50 | |
| larsks | This duplicates a question I posted to the list, but I thought I'd try my luck here: In a FlatDHCP networking world, how are instances supposed to contact the metadata server? The iptables rules set up by nova-network skip SNAT for access to the metadata server, and this is causing routing issues for us. | 19:50 |
| *** robbiew has joined #openstack | 19:50 | |
| omenar | zynzel: anyway... got to go... thank you very very very much! | 19:50 |
| *** zigo has quit IRC | 19:50 | |
| zynzel | omenar: no problem. | 19:50 |
| omenar | omenar: have a nice day :) | 19:51 |
| zynzel | larsks: mabe install nova-api-metadata on compute-node? | 19:51 |
| omenar | omenar: or night... hahaha | 19:51 |
| *** swift-india has quit IRC | 19:51 | |
| zynzel | omenar: you too | 19:51 |
| zynzel | :) | 19:51 |
| *** omenar has quit IRC | 19:51 | |
| Diopter | larsks: Are you not running metadata directly on your compute nodes? It sounds like you're trying to route the 169.254.0.0/16 IP space, which is somewhat difficult to do. | 19:51 |
| *** swift-india has joined #openstack | 19:51 | |
| larsks | On *each* compute node? I guess I'm not clear exactly where the metadata service is supposed to be located. | 19:51 |
| Diopter | larsks: On each, yes. | 19:51 |
| larsks | Ah, got it. We have it running on our controller right now along with nova-api. | 19:51 |
| zynzel | larsks: in large deployment you should have nova-api-metadata on every compute-node | 19:51 |
| zynzel | it is slow, so if you have 1, 2 or 3 metadata-api only they will die ;) | 19:52 |
| Diopter | larsks: 169.254/16 is the APIPA range (IPv4 link-local) and is treated specially in *n?x and other RFC compliant systems when it comes to routing. | 19:52 |
| zynzel | larsks: also if you use smth before essex, check for patches :) | 19:52 |
| larsks | Thanks for the suggestions. I'll give it a shot and see how it works out. | 19:52 |
| larsks | Diopter: We're not trying to route the 169.254.169.254 address; SNAT on the host rewrites that before packets hit the network. | 19:53 |
| larsks | We're running Essex right now. | 19:53 |
| Diopter | larsks: Maybe, maybe not. Depends on if your VIFs are bridged. Bridged interfaces enter the netfilter hooks (such as the NAT table's POSTROUTING chain) differently than non-bridged interfaces | 19:54 |
| *** robbiew has joined #openstack | 19:54 | |
| larsks | Diopter: I promise, we're not :). But thanks for the suggestion. | 19:54 |
| Diopter | larsks: I'm just pointing out that relying on being able to route/NAT 169.254 is difficult at best :) | 19:54 |
| *** pretec has joined #openstack | 19:55 | |
| larsks | With the packaging for Fedora/CentOS, openstack-nova-metadata-api can be started separately...but it looks like nova-api will *also* start the metadata service if it's not otherwise running. Is this expected behavior? | 19:55 |
| *** dachary has joined #openstack | 19:58 | |
| *** rnorwood has quit IRC | 19:58 | |
| *** notze_ has quit IRC | 19:59 | |
| *** Glace has quit IRC | 20:01 | |
| larsks | Argh. So, with the metadata api service on the compute host, it assigns 169.254.169.254 to a local interface, rather than using an SNAT rule...so access works fine on port 8775, but now we've lost the magic that redirects access to port 80 at 169.254.169.254 to port 8775 (which some of the existing VM images out there seem to rely on). How are people dealing with this? | 20:02 |
| *** mutex has left #openstack | 20:02 | |
| *** Glace has joined #openstack | 20:02 | |
| *** rkukura has joined #openstack | 20:02 | |
| larsks | I guess I can set up a simple tcp proxy... | 20:02 |
| larsks | ...or iptables -t nat -I PREROUTING 1 -d 169.254.169.254 -p tcp --dport 80 -j REDIRECT --to-ports 8775 works. Now to figure out why nova-network doesn't add this automatically... | 20:04 |
| *** Leseb has joined #openstack | 20:04 | |
| *** Leseb has quit IRC | 20:05 | |
| *** jaustinpage has joined #openstack | 20:05 | |
| *** japage has quit IRC | 20:05 | |
| uvirtbot | New bug: #1015773 in openstack-manuals "Need -1 instead of one for compute_fill_first_cost_fn_weight=1.0" [Undecided,New] https://launchpad.net/bugs/1015773 | 20:06 |
| *** Leseb has joined #openstack | 20:06 | |
| *** Leseb has quit IRC | 20:07 | |
| *** dendrobates is now known as dendro-afk | 20:07 | |
| *** Leseb has joined #openstack | 20:07 | |
| *** dwcramer has joined #openstack | 20:07 | |
| *** matwood is now known as matwood-lunch | 20:07 | |
| *** dubsquared has quit IRC | 20:09 | |
| *** dendro-afk is now known as dendrobates | 20:09 | |
| *** datsun180b_ has joined #openstack | 20:10 | |
| *** rmartinelli has quit IRC | 20:11 | |
| *** datsun180b has quit IRC | 20:14 | |
| *** datsun180b_ is now known as datsun180b | 20:14 | |
| *** dolphm has joined #openstack | 20:15 | |
| *** sdake has quit IRC | 20:15 | |
| *** sdake has joined #openstack | 20:15 | |
| *** sdake has quit IRC | 20:16 | |
| *** sdake has joined #openstack | 20:16 | |
| *** wiliam has quit IRC | 20:16 | |
| *** johnpostlethwait has joined #openstack | 20:16 | |
| *** Ryan_Lane has joined #openstack | 20:18 | |
| s34n | I'm trying to throw together some minimum hardware to start playing with openstack. Do the servers need to be VT-enabled? | 20:19 |
| *** DavidLevin has left #openstack | 20:20 | |
| *** dubsquared has joined #openstack | 20:23 | |
| *** jcannava has left #openstack | 20:24 | |
| *** DavidLevin has joined #openstack | 20:24 | |
| annegentle | s34n: for LXC, no, see http://docs.openstack.org/trunk/openstack-compute/install/content/compute-system-requirements.html | 20:25 |
| larsks | Hmm, linux_net.py is creating a DNAT rule that doesn't work. Replacing it with a REDIRECT rule works correctly. | 20:27 |
| Diopter | larsks: Elaborate? | 20:28 |
| larsks | linux_net.py creates: -A nova-network-PREROUTING -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j DNAT --to-destination 127.0.0.1:8775 | 20:28 |
| larsks | This clearly matches packets, but they never making this to the metadata service. | 20:29 |
| larsks | Replacing this rule with: -A nova-network-PREROUTING -d 169.254.169.254/32 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8775 | 20:29 |
| larsks | ...everything works. | 20:29 |
| larsks | I'm not sure that DNAT is meant to work with traffic that is both sourced and consumed on the same host... | 20:29 |
| Diopter | larsks: REDIRECT's purpose is to change the destination IP to the primary on the incoming interface, which ostensibly should be lo, and the primary should be 127.0.0.1 | 20:30 |
| Diopter | larsks: So... what does your loopback look like? :P | 20:30 |
| Diopter | An "ip a" would probably be handy | 20:31 |
| larsks | 'ip addr show dev lo' yields: | 20:31 |
| larsks | 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 16436 qdisc noqueue state UNKNOWN | 20:31 |
| *** Ryan_Lane has quit IRC | 20:31 | |
| larsks | link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 | 20:31 |
| larsks | inet 127.0.0.1/8 scope host lo | 20:31 |
| larsks | inet 169.254.169.254/32 scope link lo | 20:31 |
| *** cgrage has left #openstack | 20:31 | |
| *** datsun180b has quit IRC | 20:31 | |
| *** datsun180b has joined #openstack | 20:31 | |
| Diopter | Well that's certainly interesting that your DNAT doesn't seem to work while your REDIRECT does, since they should have the exact same effect in this case. | 20:31 |
| larsks | Yeah. The iptables documentation isn't explicit as to whether or not DNAT should work in this case...but I presume other folks have had success with this rule. So I'm puzzled. | 20:33 |
| Diopter | larsks: It definitely does, and should. The only potential snafu with NAT behavior involves bridges, but that would affect any rule in the NAT table chains the same, whether DNAT or REDIRECT | 20:34 |
| *** Trixboxer has quit IRC | 20:34 | |
| *** zul has quit IRC | 20:35 | |
| larsks | Hmm. I will stare at it a bit more before throwing up my hands :). | 20:35 |
| Diopter | larsks: Maybe it'd help if you pastebin'd some network info. "ip a; ip r; iptable-save; netstat -lntp" sort of thing | 20:36 |
| Diopter | Might be something subtle. | 20:37 |
| Diopter | Maybe add in ip rule for funsies | 20:37 |
| Diopter | brctl show... | 20:37 |
| *** dwcramer has quit IRC | 20:38 | |
| larsks | Here's a start: https://gist.github.com/2962087 | 20:41 |
| *** epim has joined #openstack | 20:42 | |
| *** dprince has quit IRC | 20:42 | |
| larsks | The output of `ip addr show` has been filtered to only include interfaces with ipv4 addresses (because there are a lot of them, otherwise). | 20:42 |
| *** dieterdemeyer has quit IRC | 20:42 | |
| *** Glace has quit IRC | 20:42 | |
| *** arBmind has joined #openstack | 20:42 | |
| Diopter | larsks: I see. And you're not still getting hits on the DNAT rule? | 20:43 |
| larsks | Oh, it's clearly getting *hit* (the packet and byte count increases). The packets simply never reach the metadata service. | 20:45 |
| BLZbubba | if i want to prepare a compute node for a reboot, is there an easy way to move all of its vm's to another compute node? | 20:45 |
| Diopter | larsks: I mean now that you have the REDIRECT above it. | 20:45 |
| larsks | Right, the REDIRECT modifies the packet so that it no longer matches the destination in the DNAT rule. | 20:46 |
| Diopter | larsks: Ostensibly, if the redirection was occurring to 127.0.0.1, the -d criteria of the following dnat rule wouldn't match anymore, and it should stop getting hit | 20:46 |
| *** dieterdemeyer has joined #openstack | 20:47 | |
| Diopter | larsks: So I'm testing the assumption concerning what it's redirecting to by asking the question ;P | 20:47 |
| larsks | I can confirm that with both rules in place, the DNAT rule is never hit. | 20:47 |
| *** cooper has quit IRC | 20:48 | |
| Diopter | Very interesting. | 20:48 |
| *** lborda has quit IRC | 20:49 | |
| Diopter | Looks like you're on Fedora/RHEL, based on the em# interface naming | 20:50 |
| larsks | CentOS 6.2. | 20:50 |
| *** stuntmachine has quit IRC | 20:50 | |
| *** KavanS has quit IRC | 20:51 | |
| *** lborda has joined #openstack | 20:52 | |
| *** immotus_ has joined #openstack | 20:52 | |
| *** Leseb has quit IRC | 20:52 | |
| Diopter | larsks: Hrm. One thing I see as being a little different is that my "-A nova-network-snat -s <fixed range> -j SNAT --to-source ..." rule has 127.0.0.1 as the to-source. | 20:54 |
| Diopter | larsks: Which is pulled out of the nova-postrouting-bottom, as the fallback. | 20:54 |
| Diopter | I wonder if that source is assisting in the packet matching the conntrack entry to reverse the DNAT on response packets | 20:55 |
| Diopter | Whereas the redirect isn't relying on conntrack and just pretending like it got the packet on 127.0.0.1 in the first place. | 20:55 |
| larsks | Let's see what happens if I modify the rule... | 20:56 |
| *** jedi4ever has quit IRC | 20:58 | |
| larsks | I don't think the SNAT rules are even being hit, since the packets are never leaving the system. | 20:58 |
| larsks | Yeah, the packet count doesn't increase, even for successful access to 169.254.169.254:8775. | 20:58 |
| Diopter | Mm. Odd. | 20:59 |
| zynzel | anyone from germany? :D | 21:00 |
| chrisg | I used to live in Frankfurt | 21:01 |
| chrisg | :p | 21:01 |
| chrisg | ich war ein hessischer | 21:02 |
| chrisg | aber ich bin wirklich ein englander | 21:02 |
| chrisg | ;p | 21:02 |
| zykes- | easy now | 21:02 |
| zykes- | keep it english :p | 21:02 |
| chrisg | :D | 21:02 |
| zynzel | i want to buy car from berlin ;D | 21:02 |
| *** steveb_ has joined #openstack | 21:02 | |
| zynzel | but dont have idea how this works :) | 21:03 |
| *** ttrifonov_zZzz is now known as ttrifonov | 21:03 | |
| chrisg | exporting from germany to another country? | 21:03 |
| zynzel | creiht: yeah | 21:03 |
| chrisg | i've no idea, i hired cars when i lived over there | 21:04 |
| chrisg | and dont own a car now im back in the uk | 21:04 |
| chrisg | no point, as i'm a londoner | 21:04 |
| chrisg | youll need to check with your driver registration people, in the uk youd ask the dvla about it | 21:05 |
| chrisg | they'd give you information about paying import taxes and registering the car with them | 21:05 |
| notmyname | zynzel: pandemicsyn may be able to give you some info | 21:05 |
| *** swift-india has quit IRC | 21:06 | |
| * zynzel may deploy openstack cluster for a car! | 21:06 | |
| zynzel | :) | 21:06 |
| *** ttrifonov is now known as ttrifonov_zZzz | 21:07 | |
| *** asavu has quit IRC | 21:08 | |
| *** rnorwood has joined #openstack | 21:09 | |
| *** lazyshot has quit IRC | 21:10 | |
| *** sieutruc has joined #openstack | 21:13 | |
| *** tmichael has quit IRC | 21:13 | |
| *** esm has joined #openstack | 21:18 | |
| *** esm is now known as Guest58843 | 21:18 | |
| *** salgado is now known as salgado-afk | 21:20 | |
| *** kbringard has quit IRC | 21:20 | |
| *** avtar has joined #openstack | 21:21 | |
| *** pnavarro has quit IRC | 21:23 | |
| larsks | Patched linux_net.py to use a REDIRECT rule if metadata_host is 127.0.0.1. It's not pretty but it works. Time to head home... | 21:25 |
| *** jedi4ever has joined #openstack | 21:25 | |
| *** mutex has joined #openstack | 21:26 | |
| *** h0cin has quit IRC | 21:26 | |
| *** matwood-lunch is now known as matwood | 21:27 | |
| *** epim has quit IRC | 21:27 | |
| *** markvoelker has quit IRC | 21:28 | |
| Diopter | larsks: Might want to submit a bug on it + your patch | 21:28 |
| *** dolphm has quit IRC | 21:29 | |
| *** KavanS has joined #openstack | 21:29 | |
| larsks | Yeah. I'm hoping to see some opinions on the mailing list before going there... | 21:30 |
| *** dolphm has joined #openstack | 21:31 | |
| *** ZyTer_ has quit IRC | 21:32 | |
| *** maoy has quit IRC | 21:32 | |
| *** ZyTer_ has joined #openstack | 21:32 | |
| *** jgruber has quit IRC | 21:34 | |
| *** jaypipes has quit IRC | 21:37 | |
| *** nati_ueno has joined #openstack | 21:37 | |
| *** sstent has quit IRC | 21:37 | |
| *** asavu has joined #openstack | 21:38 | |
| *** clopez has joined #openstack | 21:39 | |
| *** sstent has joined #openstack | 21:39 | |
| *** lborda has quit IRC | 21:39 | |
| uvirtbot | New bug: #1015802 in openstack-manuals "For the flavors extension of the Compute API, no GET included on api.openstack.org" [Undecided,New] https://launchpad.net/bugs/1015802 | 21:41 |
| larsks | NB: the DNAT rule works as long as metadata_host is not 127.0.0.1. | 21:42 |
| *** tgall_foo has quit IRC | 21:42 | |
| Diopter | larsks: I thought your netstat showed that the metadata service was bound to 0.0.0.0:8775... | 21:44 |
| larsks | It is. This doesn't have anything to do with where the service is listening; this is an iptables issue. | 21:44 |
| larsks | ...I believe. | 21:44 |
| larsks | Anyway, gotta run. I think I may submit that special-cases 127.0.0.1. | 21:44 |
| Diopter | larsks: Works for me when metadata_host is 127.0.0.1. But submit away, my platform is different than yours. | 21:46 |
| *** leifmadsen has quit IRC | 21:46 | |
| *** james has joined #openstack | 21:47 | |
| *** msavy has quit IRC | 21:47 | |
| *** james has quit IRC | 21:47 | |
| *** leifmadsen has joined #openstack | 21:47 | |
| *** natea has quit IRC | 21:51 | |
| *** panpengjun has joined #openstack | 21:51 | |
| *** shaon has quit IRC | 21:53 | |
| *** panpengjun has quit IRC | 21:54 | |
| *** panpengjun has joined #openstack | 21:56 | |
| *** panpengjun has left #openstack | 21:57 | |
| *** Aaton_off is now known as Aaton | 21:57 | |
| *** markmcclain has quit IRC | 21:59 | |
| *** arBmind has quit IRC | 22:02 | |
| *** Protux has quit IRC | 22:02 | |
| *** dtroyer is now known as dtroyer_zzz | 22:03 | |
| *** crago has joined #openstack | 22:03 | |
| *** johnpostlethwait has quit IRC | 22:04 | |
| *** jplewi has quit IRC | 22:05 | |
| *** wilmoore has joined #openstack | 22:05 | |
| *** nati_uen_ has joined #openstack | 22:05 | |
| *** jplewi has joined #openstack | 22:05 | |
| *** littleidea has quit IRC | 22:06 | |
| *** jplewi has joined #openstack | 22:07 | |
| *** johnpostlethwait has joined #openstack | 22:07 | |
| *** littleidea has joined #openstack | 22:07 | |
| *** jplewi has quit IRC | 22:08 | |
| *** asavu has quit IRC | 22:08 | |
| *** nati_ueno has quit IRC | 22:09 | |
| *** warik has joined #openstack | 22:11 | |
| *** Protux has joined #openstack | 22:12 | |
| *** jplewi has joined #openstack | 22:12 | |
| *** jaustinpage has quit IRC | 22:14 | |
| *** warik has quit IRC | 22:14 | |
| *** robbiew has quit IRC | 22:16 | |
| *** johnpostlethwait has quit IRC | 22:17 | |
| *** warik has joined #openstack | 22:18 | |
| *** rnorwood has quit IRC | 22:18 | |
| *** hunglin has quit IRC | 22:19 | |
| *** ben_duyujie has joined #openstack | 22:19 | |
| *** eglynn has quit IRC | 22:21 | |
| *** dubsquared1 has joined #openstack | 22:23 | |
| *** dubsquared has quit IRC | 22:23 | |
| *** dolphm has quit IRC | 22:23 | |
| *** eglynn has joined #openstack | 22:29 | |
| *** jfluhmann has quit IRC | 22:30 | |
| uvirtbot | New bug: #1015821 in openstack-manuals "Host Aggregates is missing methods on API site" [Undecided,New] https://launchpad.net/bugs/1015821 | 22:31 |
| *** avtar has quit IRC | 22:32 | |
| *** ben_duyujie has quit IRC | 22:38 | |
| *** e1mer has joined #openstack | 22:39 | |
| *** shang has quit IRC | 22:40 | |
| *** heckj has joined #openstack | 22:42 | |
| *** mattray has quit IRC | 22:42 | |
| *** nati_uen_ has quit IRC | 22:44 | |
| *** nati_ueno has joined #openstack | 22:45 | |
| *** littleidea has quit IRC | 22:45 | |
| *** ben_duyujie has joined #openstack | 22:46 | |
| *** littleidea has joined #openstack | 22:46 | |
| *** datsun180b has quit IRC | 22:48 | |
| *** mckraken has joined #openstack | 22:49 | |
| *** johnpostlethwait has joined #openstack | 22:49 | |
| *** vitiho has quit IRC | 22:49 | |
| *** eglynn has quit IRC | 22:51 | |
| *** eglynn has joined #openstack | 22:52 | |
| *** NashTrash has quit IRC | 22:54 | |
| *** hermy|away is now known as hermy | 22:54 | |
| *** KarinLevenstein has quit IRC | 22:55 | |
| mckraken | hi. anyone had problems spawning VM's in Essex with a bunch of these faults: DetachedInstanceError() ? | 22:55 |
| *** heckj has quit IRC | 22:56 | |
| *** albert23 has left #openstack | 22:56 | |
| *** miclorb has joined #openstack | 22:57 | |
| *** eglynn has quit IRC | 22:59 | |
| *** pixelbeat has joined #openstack | 22:59 | |
| *** steveb_ has quit IRC | 23:00 | |
| *** eglynn has joined #openstack | 23:00 | |
| *** dubsquared1 has quit IRC | 23:01 | |
| *** bbcmicrocomputer has quit IRC | 23:02 | |
| *** warik has quit IRC | 23:02 | |
| *** warik has joined #openstack | 23:02 | |
| *** marrusl_ has quit IRC | 23:03 | |
| *** rnirmal has quit IRC | 23:04 | |
| *** steveb_ has joined #openstack | 23:05 | |
| *** tgall_foo has joined #openstack | 23:06 | |
| *** Protux has quit IRC | 23:06 | |
| *** immotus_ has quit IRC | 23:07 | |
| *** trevman2001 has quit IRC | 23:08 | |
| *** dtroyer_zzz is now known as dtroyer | 23:09 | |
| *** patrick1 has joined #openstack | 23:09 | |
| patrick1 | . | 23:09 |
| patrick1 | hi all | 23:09 |
| *** Ryan_Lane has joined #openstack | 23:10 | |
| *** metral_ has joined #openstack | 23:10 | |
| patrick1 | it looks like openstack servers require a static IP address, and the ring builder will not allow the use of hostnames instead of IP | 23:10 |
| patrick1 | is that true, or are we missing something? | 23:10 |
| *** metral_ has quit IRC | 23:11 | |
| *** metral has quit IRC | 23:14 | |
| *** dtroyer is now known as dtroyer_zzz | 23:14 | |
| *** dachary has quit IRC | 23:16 | |
| *** lloydde has quit IRC | 23:18 | |
| *** salgado-afk has quit IRC | 23:19 | |
| *** eglynn has quit IRC | 23:20 | |
| *** ben_duyujie has quit IRC | 23:20 | |
| reed | click around this test site when you get the chance please http://stagelists.openstack.org/cgi-bin/mailman/listinfo/ | 23:21 |
| *** cheako has quit IRC | 23:23 | |
| *** mestery has quit IRC | 23:26 | |
| *** bradm has quit IRC | 23:28 | |
| *** eglynn has joined #openstack | 23:34 | |
| *** dolphm has joined #openstack | 23:34 | |
| *** anderstj has quit IRC | 23:38 | |
| *** dolphm has quit IRC | 23:38 | |
| *** nati_uen_ has joined #openstack | 23:39 | |
| *** dtroyer_zzz is now known as dtroyer | 23:41 | |
| *** nati_ueno has quit IRC | 23:42 | |
| *** bradm has joined #openstack | 23:47 | |
| *** littleidea has quit IRC | 23:48 | |
| *** matwood has quit IRC | 23:49 | |
| *** MarkAtwood has quit IRC | 23:50 | |
| *** pvo has quit IRC | 23:51 | |
| *** pvo has joined #openstack | 23:52 | |
| *** nati_ueno has joined #openstack | 23:53 | |
| *** bradm has joined #openstack | 23:53 | |
| *** nati_uen_ has quit IRC | 23:55 | |
| *** agonella has left #openstack | 23:55 | |
| *** mszilagyi has quit IRC | 23:55 | |
| *** nati_ueno has quit IRC | 23:55 | |
| *** nati_ueno has joined #openstack | 23:55 | |
| *** rnorwood has joined #openstack | 23:56 | |
| JoeJulian | I'm trying to set up a two compute node system for the first time. I have the controller up and running properly. The first compute node I added, however, shows up as XXX (the time is in sync). I'm not even sure where to start looking. This is all that's in the compute log: http://fpaste.org/PdRI/ | 23:58 |
| *** nati_uen_ has joined #openstack | 23:59 | |
| *** nati_ueno has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!