Thursday, 2013-06-13

*** thansen has quit IRC00:00
*** gdubreui has joined #openstack00:01
*** rturk is now known as rturk-away00:01
FatDarrelgcheng: need it such that we don't have to enter the root password00:01
gchengcreate and download the ssh key pairs,00:02
*** darjeeling has quit IRC00:02
gchengthen you can ssh -i <keypair.pem> <VMNode>00:02
gchengroot@<VMNode>, or ec2_user@<VMNode> for some images.00:03
*** dims has quit IRC00:04
*** racedo has joined #openstack00:06
*** malone1 has quit IRC00:07
*** gdubreui has quit IRC00:08
*** gdubreui has joined #openstack00:10
*** jhesketh_ has quit IRC00:11
gchengwith openstack setup on top of KVM,  can we disable virbr0 NAT, or just remove it to shorten the iptables length? nevertheless, openstack seems doesn't use that NAT.00:11
*** lloydde has quit IRC00:11
*** morganfainberg has joined #openstack00:11
*** WMipv6 has quit IRC00:12
*** rnorwood1 has joined #openstack00:15
*** hemna is now known as hemnafk00:15
*** tmichael has quit IRC00:19
*** ryanpetrello has joined #openstack00:20
*** dims has joined #openstack00:20
*** lloydde has joined #openstack00:20
*** tmichael has joined #openstack00:20
*** darjeeling has joined #openstack00:21
*** majeff has quit IRC00:22
*** marun has joined #openstack00:24
*** FatDarrel has quit IRC00:24
*** swwet has joined #openstack00:26
*** katylava has quit IRC00:27
*** swwet has left #openstack00:27
*** marun has quit IRC00:28
*** moos3 has quit IRC00:28
*** lloydde has quit IRC00:30
Chocobo2013-06-12 20:29:00  WARNING [keystone.contrib.stats.core] Unable to resolve API as either public or admin: 10.80.255.1:3535700:31
ChocoboWhat does that mean?00:31
*** WMipv6 has joined #openstack00:32
*** ryanpetrello has quit IRC00:32
*** doublerr has quit IRC00:32
*** goldyfruit has quit IRC00:34
*** iswc has quit IRC00:36
*** wajiii is now known as wajiii-afk00:37
*** freedomhui has joined #openstack00:40
Apsu`gcheng: You talking about the "default" libvirt network? 192.168.122.0/24?00:40
*** vlad_starkov has joined #openstack00:40
*** jasondotstar has joined #openstack00:40
gcheng@Apsu, yes00:40
*** ssalevan has joined #openstack00:40
Apsu`gcheng: Yes you can disable it. virsh net-destroy default; virsh net-autostart default --disable00:41
gchengCan we disable the default libvirt network, it seems never used in openstack00:41
*** grizzle has quit IRC00:41
gcheng@Apsu, does it has any side effects to openstack?00:41
*** darjeeling has quit IRC00:41
*** darjeeling has joined #openstack00:42
*** grizzle has joined #openstack00:43
*** jecarey has joined #openstack00:43
*** huan has joined #openstack00:43
*** dhellmann is now known as dhellmann-away00:43
*** vlad_starkov has quit IRC00:45
*** darjeeling has quit IRC00:46
*** kevein has joined #openstack00:46
*** rcleere has joined #openstack00:48
*** fandikurnia01 has quit IRC00:48
gcheng@Apsu, a surprise, I run the commands, and find that all iptables rules immediately went away.00:48
gchengand so I can not access VM nodes on it,00:48
*** darjeeling has joined #openstack00:49
*** bdpayne has quit IRC00:49
*** grizzle has quit IRC00:50
*** yocum has joined #openstack00:51
*** grizzle has joined #openstack00:51
*** ryanpetrello has joined #openstack00:52
*** giulivo has quit IRC00:52
*** yaguang has joined #openstack00:53
*** yidclare has quit IRC00:58
*** ben_duyujie has quit IRC00:59
*** grizzle has quit IRC01:00
*** grizzle has joined #openstack01:01
*** Alssi has joined #openstack01:02
*** dtxasd has left #openstack01:03
*** dtxasd has joined #openstack01:03
dtxasdword01:03
*** sudorandom has joined #openstack01:07
*** fnaval has joined #openstack01:07
*** fnaval has quit IRC01:07
*** dtxasd has left #openstack01:07
*** ladquin is now known as ladquin_afk01:07
*** fnaval has joined #openstack01:07
*** dtx00ff has joined #openstack01:08
*** dtxasd has joined #openstack01:08
*** zeron has quit IRC01:11
*** billowen has quit IRC01:11
*** terry7 has quit IRC01:14
*** verdurin has joined #openstack01:18
*** dtxasd has left #openstack01:19
*** majeff has joined #openstack01:19
*** grizzle has quit IRC01:20
*** grizzle has joined #openstack01:21
*** cp16net|away is now known as cp16net01:21
*** Shmouel is now known as Shmouel`away01:22
*** Blackavar has quit IRC01:23
*** egallen has quit IRC01:23
*** majeff has quit IRC01:24
*** evanjfraser has joined #openstack01:29
*** mkouhei has joined #openstack01:29
*** grizzle has quit IRC01:30
*** grizzle has joined #openstack01:31
*** ryanpetrello has quit IRC01:32
*** WMipv6 has quit IRC01:33
*** meghal1 has quit IRC01:35
*** majeff has joined #openstack01:37
*** erkules_ has joined #openstack01:38
*** moos3 has joined #openstack01:39
*** kindjal has joined #openstack01:40
*** erkules has quit IRC01:40
*** souvik has joined #openstack01:40
*** sthaha has joined #openstack01:41
*** sthaha has quit IRC01:41
*** sthaha has joined #openstack01:41
*** bknudson has quit IRC01:41
*** huan has quit IRC01:46
*** Tim__ has joined #openstack01:47
*** huan has joined #openstack01:48
*** huan has quit IRC01:48
*** yamahata has quit IRC01:49
*** Tim__ has quit IRC01:53
*** DredTiger has quit IRC01:53
*** carif has quit IRC01:54
*** gcheng has quit IRC01:54
*** melwitt has quit IRC01:54
*** blackboxsw has quit IRC01:57
*** warik has quit IRC01:57
*** s51itxsyc has joined #openstack02:00
*** grizzle has quit IRC02:05
*** yamahata has joined #openstack02:06
*** grizzle has joined #openstack02:06
*** anniec has quit IRC02:09
*** Alssi has quit IRC02:10
*** rnorwood1 has quit IRC02:12
*** majeff has quit IRC02:14
*** majeff has joined #openstack02:15
*** rnorwood1 has joined #openstack02:16
*** rnorwood1 has quit IRC02:16
*** Alssi has joined #openstack02:17
*** grizzle has quit IRC02:18
*** grizzle has joined #openstack02:19
*** mestery has joined #openstack02:20
*** jecarey has quit IRC02:21
*** racker_markd has joined #openstack02:24
*** racker_markd has quit IRC02:25
*** jasondotstar has quit IRC02:26
*** racker_markd has joined #openstack02:26
*** ahasenack has quit IRC02:29
*** darjeeling has quit IRC02:30
*** darjeeling has joined #openstack02:30
*** rnorwood1 has joined #openstack02:32
*** dtx00ff has quit IRC02:32
*** bing_bu has joined #openstack02:34
*** bing_bu has quit IRC02:35
*** Blackavar has joined #openstack02:35
*** bing_bu has joined #openstack02:35
*** racker_markd has quit IRC02:35
*** majeff has quit IRC02:37
*** rnorwood1 has quit IRC02:37
*** grizzle_ has joined #openstack02:38
*** grizzle has quit IRC02:38
*** grizzle_ is now known as grizzle02:38
*** ryanpetrello has joined #openstack02:40
*** dims has quit IRC02:45
*** grizzle has quit IRC02:45
*** grizzle has joined #openstack02:48
*** sudorandom has quit IRC02:49
*** jergerber has quit IRC02:49
*** miclorb has quit IRC02:49
*** carif has joined #openstack02:50
*** richardjortega has joined #openstack02:51
*** afazekas has joined #openstack02:54
*** richardjortega has left #openstack02:54
*** carif has quit IRC02:58
*** jbresnah has joined #openstack02:58
*** trevorgfrancis has quit IRC03:00
*** cp16net is now known as cp16net|away03:00
*** cp16net|away is now known as cp16net03:00
*** souvik has quit IRC03:02
*** jbresnah has quit IRC03:03
*** sammyfung has joined #openstack03:04
*** grizzle has quit IRC03:05
*** ethicalsystem has joined #openstack03:05
*** ethicalsystem has left #openstack03:06
*** grizzle has joined #openstack03:07
*** trevorgfrancis has joined #openstack03:07
*** trevorgfrancis has left #openstack03:07
*** networkstatic has quit IRC03:08
*** ryanpetrello has quit IRC03:10
*** kindjal has quit IRC03:11
*** otherwiseguy has joined #openstack03:15
*** mjfork has quit IRC03:18
*** bdpayne has joined #openstack03:18
*** spzala has quit IRC03:18
*** bdpayne has quit IRC03:19
*** perlstein_ has quit IRC03:20
*** rwsu has joined #openstack03:20
*** cody-somerville has quit IRC03:22
*** Alssi1 has joined #openstack03:24
*** vkmc has quit IRC03:24
*** Alssi has quit IRC03:24
*** goldyfruit has joined #openstack03:28
*** mdomsch has joined #openstack03:28
*** evanjfraser has quit IRC03:28
*** sridhar_ has quit IRC03:29
*** TREllis has quit IRC03:29
*** TREllis has joined #openstack03:29
*** sridhar_ has joined #openstack03:29
*** evanjfraser has joined #openstack03:30
*** Alssi1 has quit IRC03:30
*** Alssi has joined #openstack03:30
*** desai has quit IRC03:31
*** unlockit has joined #openstack03:32
*** SvenDowideit has quit IRC03:33
*** vishal has joined #openstack03:33
*** yocum has quit IRC03:35
*** SvenDowideit_ has joined #openstack03:36
*** tecepe has joined #openstack03:36
*** goldyfruit has quit IRC03:37
*** starmer has joined #openstack03:40
*** racker_KevinS has quit IRC03:43
*** TheSphinX_ has quit IRC03:44
*** engkur has joined #openstack03:44
*** Dharmit has joined #openstack03:45
*** SergeyLukjanov has joined #openstack03:45
*** TheSphinX^ has joined #openstack03:47
*** Ryan_Lane has quit IRC03:48
*** chandankumar has joined #openstack03:49
*** unlockit has quit IRC03:50
*** martine has joined #openstack03:51
*** shaon has joined #openstack03:55
*** amccabe_ has joined #openstack03:56
*** amccabe has quit IRC03:59
*** grizzle has quit IRC04:00
*** grizzle has joined #openstack04:01
*** doublerr has joined #openstack04:02
*** ssalevan has quit IRC04:03
*** otherwiseguy has quit IRC04:03
*** Qten has quit IRC04:05
*** chandankumar has quit IRC04:05
*** Qten has joined #openstack04:06
*** otherwiseguy has joined #openstack04:08
*** rwsu is now known as rwsu-away04:08
*** martine has quit IRC04:10
*** jpfuentes2 has quit IRC04:11
*** meghal has joined #openstack04:12
*** danblack has quit IRC04:13
*** MarkAtwood has joined #openstack04:14
*** sviesusisalus has joined #openstack04:15
*** kaushikc has joined #openstack04:17
*** fandikurnia01 has joined #openstack04:18
*** souvik has joined #openstack04:18
*** abhishekkr_ has quit IRC04:20
*** reed has quit IRC04:23
*** berendt has joined #openstack04:24
*** Ryan_Lane has joined #openstack04:24
*** danblack has joined #openstack04:27
*** n0ano has joined #openstack04:27
*** berendt has quit IRC04:28
*** devzhark has joined #openstack04:28
devzharkhello04:29
*** miclorb has joined #openstack04:30
*** koolhead17 has joined #openstack04:32
*** ssalevan has joined #openstack04:33
sviesusisalushello. i've just installed single node openstack. everything looks like working, but there is a problem with volume snapshots. i can create them, but if i try to delete, they stuck in deleting. server load rises from 0.3 to 9. anny suggestions how to fix this ?04:34
*** sammyfung has quit IRC04:35
*** kaushikc has quit IRC04:35
*** kaushikc1 has joined #openstack04:35
*** starmer has quit IRC04:35
*** alekibango has quit IRC04:35
*** davelowe has quit IRC04:36
*** SergeyLukjanov has quit IRC04:37
koolhead17sviesusisalus, can you check if something log has to tell you. Also do you have enough space to save your snapshot?04:40
koolhead17sviesusisalus, also check for same on Ask see if someone has reported the same issue & got answered04:41
*** ssalevan has quit IRC04:41
*** cp16net is now known as cp16net|away04:42
*** meghal has quit IRC04:42
*** jbresnah has joined #openstack04:43
*** sammyfung has joined #openstack04:43
sviesusisalusi have plenty free space, it looks like snapshot creation completes successfuly, but deletion impossible04:44
sviesusisalusnova-volume log says nothing suspicious04:44
koolhead17sviesusisalus, if you are trying it from command line do a verbose option and see whats going on04:44
sviesusisalusim trying from dashboard04:45
koolhead17sviesusisalus, ok.04:46
*** amerine has quit IRC04:48
*** abhishekkr_ has joined #openstack04:48
*** freedomhui has quit IRC04:50
*** danblack has quit IRC04:53
*** sviesusisalus has quit IRC04:53
*** kagan has joined #openstack04:56
*** xBytez has quit IRC04:56
*** mikedawson has quit IRC04:57
*** krypto has joined #openstack04:57
*** kaushikc1 has quit IRC05:00
*** otherwiseguy has quit IRC05:01
*** sviesusisalus has joined #openstack05:03
*** magg has joined #openstack05:04
*** majeff has joined #openstack05:04
sviesusisaluslooks like snapshot zeroing blows up my computers load05:05
sviesusisalusbut writes nothing to the hard drive05:05
*** garyk has joined #openstack05:06
*** danblack has joined #openstack05:06
*** starmer has joined #openstack05:06
*** berendt has joined #openstack05:10
*** job_ has joined #openstack05:10
*** berendt has quit IRC05:11
*** job_ has left #openstack05:12
*** eglynn has joined #openstack05:14
*** abhishekkr_ has quit IRC05:14
*** sayan has joined #openstack05:16
*** kaushikc has joined #openstack05:16
*** danblack has quit IRC05:18
*** lukego has joined #openstack05:18
*** evanjfraser has quit IRC05:18
*** danblack has joined #openstack05:18
*** fandikurnia01 has quit IRC05:19
*** magg has quit IRC05:24
*** networkstatic has joined #openstack05:27
*** abhishekkr_ has joined #openstack05:27
*** tualatrix has joined #openstack05:27
*** redthrux has quit IRC05:28
*** huan has joined #openstack05:29
*** thansen has joined #openstack05:29
*** rackerjoe has quit IRC05:29
*** rackerjoe has joined #openstack05:31
*** redthrux has joined #openstack05:32
*** comay has quit IRC05:32
*** jcoufal has joined #openstack05:33
*** kaushikc has quit IRC05:34
*** anniec has joined #openstack05:36
*** ultrabizweb has quit IRC05:36
*** ultrabizweb has joined #openstack05:36
*** kaushikc has joined #openstack05:37
*** msgodf has quit IRC05:39
*** garyk has quit IRC05:39
*** anniec_ has joined #openstack05:40
*** grizzle has quit IRC05:40
*** anniec has quit IRC05:41
*** anniec_ is now known as anniec05:41
*** grizzle has joined #openstack05:41
*** doublerr has quit IRC05:42
*** navid_ has joined #openstack05:42
*** freedomhui has joined #openstack05:45
*** mrunge has joined #openstack05:46
*** gcheng has joined #openstack05:46
*** psedlak has joined #openstack05:47
*** mkollaro has joined #openstack05:49
*** evanjfraser has joined #openstack05:49
*** grizzle has quit IRC05:50
*** morganfainberg has left #openstack05:52
*** morganfainberg has joined #openstack05:52
*** sayan has quit IRC05:53
*** eglynn has quit IRC05:53
*** grizzle has joined #openstack05:54
*** ryanpetrello has joined #openstack05:54
*** dtx00ff has joined #openstack05:56
*** lukego has quit IRC05:58
*** linuxfreck has joined #openstack05:58
*** HenryG_ has joined #openstack06:02
*** henrynash has joined #openstack06:02
*** crazed_ has joined #openstack06:03
*** jdurgin1 has quit IRC06:04
*** morganfainberg has quit IRC06:04
*** walrus has quit IRC06:04
*** walrus has joined #openstack06:04
*** smyers has quit IRC06:04
*** tualatrix has quit IRC06:04
*** Xenith has quit IRC06:05
*** jdurgin1 has joined #openstack06:05
*** crazed has quit IRC06:05
*** zigo has quit IRC06:06
*** zigo has joined #openstack06:06
*** HenryG has quit IRC06:06
*** briancline has quit IRC06:06
*** wajiii-afk has quit IRC06:06
*** Xenith has joined #openstack06:07
*** morganfainberg has joined #openstack06:07
*** Ile has joined #openstack06:07
*** briancline has joined #openstack06:07
*** ik04ka has joined #openstack06:07
*** ifarkas has joined #openstack06:08
*** anande has joined #openstack06:08
*** wajiii-afk has joined #openstack06:08
*** kagan has left #openstack06:08
*** wajiii-afk is now known as wajiii06:09
*** miclorb has quit IRC06:09
*** devvesa has joined #openstack06:09
*** aeperezt has quit IRC06:10
*** jbresnah has quit IRC06:10
*** melmoth has joined #openstack06:11
*** sayan has joined #openstack06:12
*** smyers has joined #openstack06:12
*** vartom112 has joined #openstack06:13
*** miclorb has joined #openstack06:14
*** jprovazn has joined #openstack06:14
*** miclorb has quit IRC06:15
*** miclorb has joined #openstack06:15
*** acabrera has quit IRC06:17
*** mkollaro has quit IRC06:17
*** davi has joined #openstack06:18
*** davi has joined #openstack06:18
*** evanjfraser has quit IRC06:18
*** MarkAtwood has quit IRC06:18
*** grizzle has quit IRC06:20
*** eglynn has joined #openstack06:20
*** huan has quit IRC06:20
*** egallen has joined #openstack06:22
*** grizzle has joined #openstack06:22
*** devvesa has quit IRC06:23
*** jbresnah has joined #openstack06:27
*** vlad_starkov has joined #openstack06:36
*** eglynn has quit IRC06:37
*** egallen has quit IRC06:37
*** berendt has joined #openstack06:38
*** miclorb has quit IRC06:40
*** sayan has quit IRC06:41
*** huan has joined #openstack06:41
*** scrollback has joined #openstack06:41
*** vlad_starkov has quit IRC06:42
*** sdake_ has quit IRC06:42
*** dneary has joined #openstack06:43
*** berendt has quit IRC06:43
*** ryanpetrello has quit IRC06:43
*** jbresnah has quit IRC06:44
*** jbresnah has joined #openstack06:44
*** flaper87 has joined #openstack06:45
*** koolhead17 has quit IRC06:45
*** navid_ has left #openstack06:46
*** souvik has quit IRC06:46
*** sileht has joined #openstack06:47
*** dal has joined #openstack06:47
*** vishal has quit IRC06:48
*** navid__ has joined #openstack06:50
*** sushils has joined #openstack06:51
*** ladquin_afk has quit IRC06:53
*** miclorb has joined #openstack06:54
*** berendt has joined #openstack06:56
*** vlad_starkov has joined #openstack06:58
*** timello has quit IRC06:58
*** timello has joined #openstack06:58
*** msgodf has joined #openstack06:58
*** mkollaro has joined #openstack06:58
*** giorgiodinapoli has joined #openstack06:59
*** jeffreyio has joined #openstack07:00
*** guigui1 has joined #openstack07:00
*** krypto has quit IRC07:01
*** krypto has joined #openstack07:02
*** devvesa has joined #openstack07:02
*** _ffio_ has joined #openstack07:03
*** ffio_ has quit IRC07:03
*** reidrac has joined #openstack07:04
*** jprovazn has quit IRC07:04
*** dizquierdo has joined #openstack07:05
*** virt_ has joined #openstack07:05
*** dneary has quit IRC07:05
*** vlad_starkov has quit IRC07:06
*** jtomasek has joined #openstack07:10
*** corXi has joined #openstack07:10
*** shardy_afk is now known as shardy07:11
*** virt_1 has joined #openstack07:12
*** jbresnah has quit IRC07:13
*** virt_ has quit IRC07:13
*** jbresnah has joined #openstack07:13
*** danblack has quit IRC07:13
*** SergeyLukjanov has joined #openstack07:14
*** navid_ has joined #openstack07:14
*** shang has joined #openstack07:18
*** giorgiodinapoli has quit IRC07:18
*** devzhark has quit IRC07:19
*** egallen has joined #openstack07:19
*** huan_ has joined #openstack07:19
*** texarcana has quit IRC07:21
*** davi has quit IRC07:21
*** texarcana has joined #openstack07:22
*** erwan_ta- is now known as erwan_taf07:22
*** gdubreui has quit IRC07:22
*** huan has quit IRC07:22
*** jprovazn has joined #openstack07:23
*** dizquierdo has quit IRC07:24
*** virt_1 has quit IRC07:24
*** danblack has joined #openstack07:25
*** pokoli has joined #openstack07:26
*** koolhead17 has joined #openstack07:26
*** virt_ has joined #openstack07:27
*** giulivo has joined #openstack07:27
*** majeff has quit IRC07:27
*** navid__ has quit IRC07:29
*** dmsimard has joined #openstack07:29
*** hk_peter has joined #openstack07:32
*** dmsimard1 has joined #openstack07:33
*** briancline has quit IRC07:33
*** jgallard has joined #openstack07:34
*** briancline has joined #openstack07:34
*** linuxfreck has quit IRC07:34
*** grizzle has quit IRC07:35
*** linuxfreck has joined #openstack07:35
*** dmsimard has quit IRC07:35
*** AnilV4 has joined #openstack07:36
*** grizzle has joined #openstack07:36
*** ujjain has joined #openstack07:38
*** garyk has joined #openstack07:40
hk_peteris tenant == project ?07:40
erwan_tafsomehow yes, it's a set of ressources that some will use. Ressources + setup + users makes the tenant07:41
erwan_tafs/makes the/are associated with a/07:42
*** virt_ has quit IRC07:42
*** fsimonce has joined #openstack07:42
*** vladdy_ has joined #openstack07:45
*** SergeyLukjanov has quit IRC07:45
*** tim|mint has joined #openstack07:46
*** jhesketh has joined #openstack07:47
*** vladdy has quit IRC07:47
*** jbresnah has quit IRC07:48
tim|minthi all, I'm just looking at OpenStack and I'm wondering if a shared storage solution is required or if it can work with 'normal' local storage on hosts?07:49
*** darjeeling has quit IRC07:49
*** darjeeling has joined #openstack07:50
koolhead17both works07:50
tim|mintok, cool, so we could start out with cheap off-the-shelf (as in, old hardware :)) and switch to something like ceph at a later time07:51
erwan_tafceph does use local storage so no problem to use your existing setup07:53
*** jhesketh has quit IRC07:53
koolhead17yes. reading openstack operators guide will be helpful07:55
hk_peterkeystone user-role-list can list out which user is in which tenant. But which API/command i can assign a user to a tenant?07:56
*** fbo has joined #openstack07:56
*** eglynn has joined #openstack07:57
*** majeff has joined #openstack07:57
*** davi has joined #openstack07:57
*** dmsimard1 has quit IRC07:57
*** leseb has joined #openstack07:58
*** jpich has joined #openstack07:58
*** rmartinelli has quit IRC07:58
*** Dodge has quit IRC07:58
hk_peteri want to complete the tenant management, so i need to know how to assign a user for a tenant. I know when creating user, you can assign a tenant for him. But user:tenant should be one to many.07:58
hk_peterhttps://www.dropbox.com/s/wjw3u0l7iyf04gf/pandora%20progress%2020130613-1.png07:58
tim|minterwan_taf: yes, but I can't use ceph for storage on compute nodes, right? or will it make sure it always prefers to access local storage first? I'm a bit worried about our 1GB network between nodes and how it could get saturated pretty quickly if you use network storage07:59
*** linuxfreck has quit IRC08:00
tim|mintIO performance for VPSes is what keeps most of our customers on dedicated hardware08:00
tim|mintand switching to 10G network will take some time08:00
*** grizzle has quit IRC08:00
erwan_taftim|mint: that's always a tradeof between the money you spend and the global performance you have08:01
dtx00ff@hk_peter yes tenant is equivalent to project08:01
*** alekibango has joined #openstack08:01
tim|mintagreed, but that's why we're starting with local storage first, so we can upgrade to a faster network first :)08:01
dtx00ffone way of adding users to tenant is through Horizon as an admin08:01
hk_peterso i am pretty confirm that keystone missed an APU to assign user to tenant08:01
hk_peteran API i meant08:02
dtx00ffno there is an API to add a to the user but not well documented08:02
dtx00fflet me dig08:02
erwan_taftim|mint: that would prevent live migration for example08:02
*** grizzle has joined #openstack08:02
hk_peteror i should directly write to mysql ? and work around?08:02
hk_peterthanks dtx00ff08:03
dtx00ff@hk_peter if Horizon has a feature then that means there is an API for it, there is no bypassing that is done by the UI08:03
tim|minttrue, but live migration is for us a nice-to-have, currently... we don't have that in our current setup... we're just looking for tooling to move into the current decade instead of creating VMs by hand (with local scripts), first08:03
dtx00ff@hk_peter it is never advised to directly mess with the DB, not for any service. bad practice08:03
*** virt_ has joined #openstack08:03
hk_peterhorizon dashboard cann't assign a user to a tenant, it can only do : when you are creating a new user, you can assign a primary tenant for him08:03
hk_peterIf i got no way to assign user to tenant, the user-tenant design is pretty useless in openstack08:04
dtx00ff@hk_peter if ou log in as admin and go to projects - plus sign - choose from a list of members you have to add a member08:04
hk_peterreally can't see the plus sign, i am using "F" version. Can you point me out?08:05
dtx00ffhmm, give me a few minutes.08:05
dtx00ffdoing couple of things08:05
*** jhesketh has joined #openstack08:06
*** johnthetubaguy has joined #openstack08:06
*** perfectsine has quit IRC08:06
*** jbresnah has joined #openstack08:06
*** psedlak has quit IRC08:06
hk_peterdtx00ff, are you in any openstack sub-project team?08:07
dtx00ff@tim|mint that is what openstack does, it is just a BIG script to create VMs, you can invest in a team to spawn computes off KVM, add other services on top and you have your own OpenStack08:07
*** freck has joined #openstack08:07
dtx00ff@tim|mint there is nothing 'current decade' about this, it's just a fast forward, cut the crap solution08:08
*** arif-ali has joined #openstack08:08
*** mmagr has joined #openstack08:09
*** rmartinelli has joined #openstack08:10
*** Ile has quit IRC08:10
*** starmer has quit IRC08:11
*** jbresnah has quit IRC08:12
*** starmer has joined #openstack08:13
*** danblack has quit IRC08:16
*** bbcmicrocomputer has joined #openstack08:16
*** bbcmicrocomputer has joined #openstack08:16
hk_peterI want to invite some people to my opensource project, but seems not many people are interesting :(08:16
*** cocoadaemon has joined #openstack08:16
ekarlsohk_peter: what project ?08:18
*** carif has joined #openstack08:18
cocoadaemonhi08:19
*** jbresnah has joined #openstack08:20
hk_peterA project call "Pandora", a new admin UI for openstack. Our customers complaint that the dashboard are far from production.08:20
hk_peterhttps://code.google.com/p/c2-pandora/08:20
cocoadaemonI've got that question about privatizing parts of an openstack clouds08:20
*** number80 has quit IRC08:20
hk_petertake a look the screen shots http://peter.kingofcoders.com/?cat=2608:20
*** starmer has quit IRC08:20
cocoadaemonSorry to interrupt08:21
fifieldtlooks shiny hk_peter :) you should post on the mailing list (https://wiki.openstack.org/wiki/MailingLists#Future_Development) so people in US/EU can look when they wake up08:21
fifieldtwhat is your question cocoadaemon?08:21
hk_peterthanks fifields, I will release the first version to public, it is completely opensource. In the first version, all you can do in dashboard, you can do in Pandora.08:22
cocoadaemonwell basically, we have a new client coming, requesting 15 physicals with cloud clontrol.08:22
cocoadaemonQuestion is : do we a separate openstack instance or can we isolate his servers08:22
cocoadaemon^do we a^do we create08:23
uvirtbotcocoadaemon: Error: You must be registered to use this command. If you are already registered, you must either identify (using the identify command) or add a hostmask matching your current hostmask (using the "hostmask add" command).08:23
cocoadaemon ^do we a^do we create08:23
fifieldtYou have options to use the same control infrastructure, but segregate physical servers: http://docs.openstack.org/trunk/openstack-ops/content/scaling.html#segregate_cloud08:23
koolhead17hk_peter: waoo cool. I thought its some commercial dashboard08:23
fifieldtHost Aggregates is probably the easiest08:23
cocoadaemonah, thanks. segragation sounds cool. Wait...08:23
cocoadaemon;)08:23
koolhead17fifieldt: hellos08:24
*** lukego has joined #openstack08:24
*** starmer has joined #openstack08:24
hk_peteryeah, we want to make it commercial, helping company to build private cloud08:24
fifieldthi koolhead1708:24
* fifieldt may be coming to OpenStack India day08:25
*** jeffreyio has quit IRC08:26
cocoadaemonfifieldt, thanks a lot.08:27
*** SergeyLukjanov has joined #openstack08:27
*** SergeyLukjanov has quit IRC08:27
* koolhead17 gives hi5 fifieldt 08:27
dtx00ff@hk_peter08:27
fifieldtyou're very welcome cocoadaemon08:27
dtx00fftry this https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/v3/users.py#L4108:27
*** SergeyLukjanov has joined #openstack08:28
dtx00ffand experiment with keystone user-create [...]08:28
hk_peter@dtx00ff, thanks so much08:29
*** fandikurnia01 has joined #openstack08:29
dtx00ff@hk_peter np, and again, one advice, dont bypass the API and mess with DB, can cause all kinds of nightmare08:29
hk_petertotally agree with that08:30
hk_peterappreciate08:30
*** grizzle has quit IRC08:30
*** tzn has quit IRC08:31
*** grizzle has joined #openstack08:32
*** number80 has joined #openstack08:34
*** darjeeling has quit IRC08:34
*** zoresvit has joined #openstack08:35
*** souleymane has joined #openstack08:37
*** davi has quit IRC08:37
*** jodok has joined #openstack08:38
*** jodok has joined #openstack08:38
*** kaushikc has quit IRC08:38
*** kaushikc has joined #openstack08:38
*** zoresvit has quit IRC08:38
*** derekh has joined #openstack08:38
*** zoresvit has joined #openstack08:38
*** gakott has joined #openstack08:39
*** arif-ali has quit IRC08:40
*** jcoufal has quit IRC08:41
*** jcoufal has joined #openstack08:41
*** Nitrodex has joined #openstack08:42
*** Dharmit has quit IRC08:42
*** Dharmit has joined #openstack08:42
*** garyk has quit IRC08:43
*** mkollaro has quit IRC08:43
*** Dharmit has joined #openstack08:43
*** kevein has quit IRC08:43
*** alekibango has quit IRC08:45
*** kevein has joined #openstack08:46
*** mrunge has quit IRC08:47
*** msavy has joined #openstack08:47
*** arif-ali has joined #openstack08:47
*** Keith_Pawson has joined #openstack08:47
*** jcoufal has quit IRC08:47
*** jcoufal has joined #openstack08:47
*** dmi|afk is now known as dmi08:48
*** gcheng has quit IRC08:48
*** Ryan_Lane has quit IRC08:49
*** shadower has quit IRC08:50
*** foexle has joined #openstack08:50
*** shadower has joined #openstack08:50
*** grizzle has quit IRC08:50
*** shadower has quit IRC08:51
*** shadower has joined #openstack08:51
*** grizzle has joined #openstack08:51
*** miclorb has quit IRC08:52
*** giulivo has quit IRC08:52
*** giulivo has joined #openstack08:52
*** mrunge has joined #openstack08:53
*** ozstacker has joined #openstack08:54
*** evanjfraser has joined #openstack08:54
*** jichenjc has joined #openstack08:54
*** afazekas has quit IRC08:55
*** carif has quit IRC08:56
*** jichenjc has quit IRC08:56
*** vlad_starkov has joined #openstack08:58
*** jichenjc has joined #openstack08:59
*** tzn has joined #openstack09:00
*** GusM has quit IRC09:03
*** bing_bu has quit IRC09:04
*** psedlak has joined #openstack09:05
*** grizzle has quit IRC09:05
*** jbresnah has quit IRC09:05
*** grizzle has joined #openstack09:06
*** vsergeyev has quit IRC09:07
*** zoresvit has quit IRC09:07
*** vsergeyev has joined #openstack09:07
*** zoresvit has joined #openstack09:09
tim|mintdtx00ff: true, but scripts not being maintained by us is good progress :) we're sysadmins, not programmers (late reply, sorry)09:09
*** gakott has quit IRC09:09
*** gakott has joined #openstack09:10
dtx00ffthen it makes sense09:10
dtx00ffand np09:10
dtx00ffmouse enable09:11
*** dtx00ff has quit IRC09:11
*** evanjfraser has quit IRC09:12
*** dmarkey has joined #openstack09:12
*** freck has quit IRC09:14
*** egallen has quit IRC09:14
*** BjoernC has joined #openstack09:14
*** DoniRS has joined #openstack09:15
*** skort has joined #openstack09:16
*** carif has joined #openstack09:16
*** vishal has joined #openstack09:17
*** egallen has joined #openstack09:17
*** lukego has quit IRC09:18
*** bobba has joined #openstack09:18
*** gakott has quit IRC09:20
*** s51itxsyc has quit IRC09:24
*** egallen has quit IRC09:28
*** netsrob has joined #openstack09:28
*** egallen has joined #openstack09:29
*** egallen has quit IRC09:31
*** gdubreui has joined #openstack09:31
netsrobhi, after an upgrade of nova and keystone i get 'Network list can not be retrieved.' and  'Unable to retrieve quota information.' - how can i fix this? i've already checked most of the corresponding logs09:33
*** dizquierdo has joined #openstack09:35
*** andyandy has joined #openstack09:35
*** jichenjc has quit IRC09:35
*** vsergeyev has quit IRC09:36
netsrobcinder and glance seem to work like before09:36
*** vsergeyev has joined #openstack09:37
*** Dady has joined #openstack09:38
*** Dady has quit IRC09:39
*** alekibango has joined #openstack09:40
*** martyntaylor has joined #openstack09:40
jpichnetsrob: "Network list can not be retrieved" would indicate an issue talking to quantum09:40
*** Dady has joined #openstack09:41
netsrobjpich: quantum net-list works for me, just horizon refuses to show me stuff09:41
jpichnetsrob: Is there more info in the apache logs when that happens, like a traceback?09:42
netsrobjpich: couldn't find anything useful, is there the possibility to set a debug flag somewhere for this?09:43
netsrob[error] \x1b[31;1mRecoverable error: [Errno 111] Connection refused\x1b[0m maybe09:44
jpichnetsrob: If this is a dev or test system (not production) you could set DEBUG to True in the local_settings.py09:44
netsrobjpich: it's on the way to production ^^09:45
netsrobi'll have a try09:45
*** egallen has joined #openstack09:45
jpichnetsrob: Ok, then that "connection refused" message probably comes back from quantum. Can you double check all the URLs for networking in the keystone catalogue are correct?09:45
*** huan_ has quit IRC09:46
*** Dave2 is now known as Dave09:47
*** pokoli has quit IRC09:47
*** miclorb has joined #openstack09:48
netsrobjpich: all internal IP's are the same and external IP's too (single-node setup) so thats correct09:49
sviesusisalushi. i have single node install. my eth0 is public 192.168.10.10 and flat eth0:1 is 192.168.22.1. my fixed range is 192.168.22.32/27 and floating range is starting at 192.168.10.225. i have bridged flat eth0:1 to br100. after rebooting my server eth0 gets 192.168.10.225 and default gateway is set to flat ip. where is the problem ?09:50
*** gakott has joined #openstack09:50
netsrobjpich: admin-IP's schould be the internal ones?09:51
*** pantea has joined #openstack09:52
jpichnetsrob: They all look the same on my test system too, http://<ip>:9696/09:52
*** miclorb has quit IRC09:52
*** huats_ is now known as huats09:52
jpichnetsrob: I'm kind of stuck for ideas, particularly if this is a single node setup. The "network list" error message + "connection refused" suggest to me that Horizon cannot reach the quantum server09:53
jpichnetsrob: What OS is this?09:54
netsrobok, thanks for your ideas anyway :)09:54
netsrobUbuntu 12.04 LTS09:54
*** skort has quit IRC09:55
jpichnetsrob: Yeah, so I'm really out of ideas, sorry about this09:55
*** miclorb has joined #openstack09:55
*** aruntomar has quit IRC09:55
*** grizzle has quit IRC09:55
*** grizzle has joined #openstack09:56
netsrobjpich: no problem ;) are the ports at the second entry different too? internal: http://<ip>:5000/v2.0 Admin: http://<ip>:35357/v2.009:57
jpichnetsrob: That's keystone / identity rather than quantum / network here, right? That looks correct to me for keystone09:58
*** aruntomar has joined #openstack09:59
netsrobshould be, i'm not that experienced with openstack ;)09:59
netsrobon both ports are some python-services listening, so it should be allright10:00
*** anande has quit IRC10:00
*** bobba has quit IRC10:00
jpichnetsrob: quantum should be listening on 9696. When you run "keystone catalog" as an admin, it should show you each service name + their urls including ports10:02
netsrobok, quantum is listening on 969610:04
*** aruntomar has quit IRC10:04
netsrobstrange thing is: when working as admin on cli quantum works10:05
*** pixelbeat has joined #openstack10:11
*** vlad_starkov has quit IRC10:12
*** aruntomar has joined #openstack10:12
*** jgallard has quit IRC10:13
*** ik04ka has quit IRC10:17
*** drewlander has joined #openstack10:17
*** grizzle has quit IRC10:20
*** skort has joined #openstack10:20
*** branen_ has quit IRC10:21
*** grizzle has joined #openstack10:21
*** gakott has quit IRC10:23
*** hush has quit IRC10:24
*** mrunge has quit IRC10:24
*** Shmouel`away is now known as Shmouel10:24
*** pokoli has joined #openstack10:25
*** mkouhei has left #openstack10:25
*** mrunge has joined #openstack10:26
*** alekibango has quit IRC10:26
*** dtx00ff has joined #openstack10:27
*** dtxasd has joined #openstack10:28
*** sthaha has quit IRC10:29
dtx00ffas10:29
*** dtxasd has left #openstack10:30
*** fri9876 has joined #openstack10:31
fri9876@dtx00ff can we speak here?10:32
*** dtx00ff has quit IRC10:34
*** dtx00ff has joined #openstack10:35
*** StarBeast has joined #openstack10:35
*** grizzle has quit IRC10:35
*** vishal has quit IRC10:36
fri9876@dtx00ff ?10:36
*** grizzle has joined #openstack10:36
*** fri9876 has quit IRC10:37
*** leseb has quit IRC10:37
*** dtx00ff has left #openstack10:37
*** Dodge has joined #openstack10:37
*** miclorb has quit IRC10:39
*** jjmb has quit IRC10:41
*** dcasier_ has joined #openstack10:41
*** skort has quit IRC10:41
*** skort has joined #openstack10:41
*** danblack has joined #openstack10:41
*** skort has quit IRC10:41
*** skort has joined #openstack10:42
*** virt_ has quit IRC10:42
*** samc_ has joined #openstack10:46
*** zeron has joined #openstack10:51
*** miclorb has joined #openstack10:52
*** arrsim has joined #openstack10:52
*** WMipv6 has joined #openstack10:53
*** miclorb has quit IRC10:54
*** sammyfung has quit IRC10:54
*** timello has quit IRC10:54
*** timello has joined #openstack10:55
*** miclorb has joined #openstack10:57
*** yaguang has quit IRC10:57
*** hk_peter has quit IRC10:58
*** fandikurnia01 has quit IRC10:58
*** sthaha has joined #openstack10:58
*** sthaha has quit IRC10:58
*** sthaha has joined #openstack10:58
*** freedomhui has quit IRC10:59
*** fandikurnia01 has joined #openstack10:59
*** majeff has quit IRC10:59
*** arif-ali has quit IRC11:00
*** Jahkeup_ has joined #openstack11:04
*** devvesa has quit IRC11:05
*** chasmo has quit IRC11:06
*** leseb has joined #openstack11:07
*** dcasier_ has quit IRC11:08
*** henrynash has quit IRC11:08
*** ashka has joined #openstack11:08
ashkahello there, I was wondering if anyone ever tried to get storage working with a synology NAS11:09
*** psedlak has quit IRC11:10
*** amerine has joined #openstack11:10
*** fandikurnia01 has quit IRC11:12
*** arif-ali has joined #openstack11:13
*** leseb has quit IRC11:14
*** alexisT has joined #openstack11:15
*** alexisT has quit IRC11:15
*** grizzle has quit IRC11:15
*** grizzle has joined #openstack11:17
*** mjfork has joined #openstack11:20
*** desai has joined #openstack11:20
*** leseb has joined #openstack11:21
*** rmartinelli has quit IRC11:21
*** afazekas has joined #openstack11:22
*** iDrac has joined #openstack11:26
*** berendt has quit IRC11:27
*** berendt has joined #openstack11:28
*** jcarter has joined #openstack11:28
*** psedlak has joined #openstack11:29
*** tmclaugh[work] has joined #openstack11:31
*** dizquierdo has left #openstack11:32
*** jpich has quit IRC11:37
*** tmclaugh[work] has quit IRC11:37
*** virt_ has joined #openstack11:38
*** grizzle has quit IRC11:40
*** marun has joined #openstack11:40
*** Trixboxer has joined #openstack11:40
*** dmz has quit IRC11:41
*** grizzle has joined #openstack11:41
*** Tauqeer has joined #openstack11:42
TauqeerHi all11:43
*** simon_lucy has joined #openstack11:46
*** chandankumar has joined #openstack11:48
*** yocum has joined #openstack11:48
*** desai has quit IRC11:48
*** ogelbukh has quit IRC11:49
*** choforo has quit IRC11:51
*** dmz has joined #openstack11:53
*** vkmc has joined #openstack11:53
*** vkmc has quit IRC11:53
*** vkmc has joined #openstack11:53
*** dims has joined #openstack11:54
*** jcoufal has quit IRC11:55
*** spideyman has joined #openstack11:56
*** mrunge has quit IRC11:56
*** lborda has joined #openstack11:57
*** DoniRS has quit IRC11:58
*** jcoufal has joined #openstack11:59
*** grizzle has quit IRC12:00
*** dhellmann-away has quit IRC12:00
*** ahasenack has joined #openstack12:01
*** grizzle has joined #openstack12:01
*** dneary has joined #openstack12:02
*** carif has joined #openstack12:02
*** carif has quit IRC12:03
*** miclorb has quit IRC12:03
*** ogelbukh has joined #openstack12:03
fifieldthi Tauqeer12:08
Tauqeerhi fifieldt12:08
fifieldthow are you?12:08
Tauqeergood thanks, how are you?12:08
*** chasmo has joined #openstack12:08
*** ryanpetrello has joined #openstack12:09
*** jpich has joined #openstack12:09
*** WMipv6 has quit IRC12:09
fifieldtnot bad :)12:10
fifieldtjust organising a min-conference at the last minute12:10
Tauqeergreat. I need some help about openstack specifically in keystone. Can you please help me ?12:10
fifieldtI'm not an expert, but I'll try my best :)12:11
TauqeerOK did you try debugging openstack or keystone in eclipse?12:11
fifieldtunfortunately not -12:12
Tauqeer:(12:12
fifieldtthough I recall a good answer on eclipse debugging here: https://ask.openstack.org/question/815/how-do-i-debug-nova-service-with-eclipse-and-pydev/12:12
fifieldtThere's also: http://debugopenstack.blogspot.com.au/12:13
Tauqeeri tried but i guess the help was not complete so i miss some steps.12:13
*** leseb has quit IRC12:13
fifieldtwhat's going wrong?12:13
*** racker_markd has joined #openstack12:14
*** noslzzp has joined #openstack12:14
Tauqeerhttps://wiki.openstack.org/wiki/Setup_keystone_in_Eclipse12:15
*** skort has quit IRC12:15
TauqeerI am using this help.12:15
*** wa- has quit IRC12:15
*** skort has joined #openstack12:15
*** martine_ has joined #openstack12:15
fifieldtok12:15
Tauqeerpip-python install -r tools/pip-require, this command is not working for me12:16
fifieldtok, what is it saying?12:16
*** desai has joined #openstack12:16
*** ryanpetrello has quit IRC12:17
Tauqeerpip-python command not found12:17
fifieldtoh12:17
fifieldttry replacing pip-python with pip12:17
*** dneary has quit IRC12:17
Tauqeeri did but no use12:18
fifieldtstill 'command not found' ?12:18
Tauqeerwhat is your area of work, I mean what area you doing in OpenStack?12:18
fifieldttry # sudo apt-get install python-pip12:19
*** freedomhui has joined #openstack12:19
fifieldtI'm actually the OpenStack Community Manager, working at the OpenStack foundation. Previously, I ran an OpenStack cloud for the Australian public research sector.12:19
*** FunnyLookinHat has joined #openstack12:20
Tauqeercan you please share some knowledge how did you ran OpenStack for that sector12:20
*** grizzle has quit IRC12:20
fifieldtmost of my knowledge is in this book: http://docs.openstack.org/ops/ :)12:21
fifieldtis there something specifically you're interested in?12:21
*** noslzzp has quit IRC12:21
*** grizzle has joined #openstack12:21
fifieldtstaffing? procurement? development? design?12:21
TauqeerActually I am also working in a company and we are trying yo deploy OpenStack and my responsibility is to deal with security of our cloud12:21
fifieldtoh, a very important role12:21
*** darjeeling has joined #openstack12:22
fifieldtso, are you looking at IDS like snort or broIDS?12:22
Tauqeeryeah but there is nothing good help available anywhere on net :(12:22
fifieldtit take a lot of tweaking, yes12:22
Tauqeerand I am quite new to openstack too so i need to read and understand everything before deploying it12:23
fifieldtknow the feeling :)12:23
fifieldtI can recommend the book then :)12:23
fifieldtas a security professional you might also be interested in getting in touch with the OpenStack Security team12:23
*** jasondotstar has joined #openstack12:23
Tauqeerwhich book? the one you said above?12:24
*** kofno has joined #openstack12:24
fifieldtyeah12:24
*** adalbas has joined #openstack12:24
fifieldtit's got information about designing clouds and operations best practices12:24
fifieldtit's not an install guide12:24
fifieldtfyr: https://wiki.openstack.org/wiki/SecurityTeams12:24
*** kofno has left #openstack12:24
*** aruntomar has quit IRC12:25
*** martine_ has quit IRC12:26
*** ssalevan has joined #openstack12:26
*** zeron has quit IRC12:26
*** grizzle has quit IRC12:27
*** skort has quit IRC12:27
TauqeerI dont know why we dont have enough info about OpenStak available :(12:27
*** gdubreui has quit IRC12:27
*** grizzle has joined #openstack12:27
*** garyk has joined #openstack12:27
fifieldtit's an issue we're trying to address (according to http://justwriteclick.com/2013/04/26/who-wrote-openstack-grizzly-docs/ only 3 main contributors for the documentation)12:27
fifieldtI believe the security team is even working on a book of their own12:28
Tauqeerbut right now they have shared nothing12:29
*** ctooley has joined #openstack12:29
fifieldtI believe the plan is to get a few people to the same location for one week and write it in a sprint12:29
*** desai has quit IRC12:30
*** chandankumar has quit IRC12:30
*** jergerber has joined #openstack12:30
*** ssalevan has quit IRC12:31
TauqeerBut for right now to whom should I contact ?12:31
fifieldtthe one labelled OSSG: https://wiki.openstack.org/wiki/Security_Teams12:33
*** networkstatic has quit IRC12:33
TauqeerI sent them mail already. Hope they will reply..12:33
fifieldtgood luck :)12:34
fifieldtthe openstack-operators mailing list is another good one12:34
*** acabrera has joined #openstack12:34
fifieldthttps://wiki.openstack.org/wiki/MailingLists#Operators12:34
fifieldtbut yeah, they all work better if you have specific questions12:34
fifieldtYou can also try https://ask.openstack.org/ for specific questions12:34
fifieldtsometimes it gets better responses than the mailing list, sometimes not12:35
*** Jahkeup_ has quit IRC12:35
*** aruntomar has joined #openstack12:35
*** zul has quit IRC12:36
Tauqeerbelieve me I tried posting almost everywhere but I dont know why no answer :S12:37
*** zul has joined #openstack12:38
*** zeron has joined #openstack12:38
*** mikedawson has joined #openstack12:39
*** Domin has quit IRC12:40
*** chandankumar has joined #openstack12:41
*** leseb has joined #openstack12:42
*** goldyfruit has joined #openstack12:43
*** mikedawson_ has joined #openstack12:45
*** rcleere has quit IRC12:45
*** mikedawson has quit IRC12:47
*** Domin has joined #openstack12:47
*** mikedawson_ is now known as mikedawson12:47
*** rackerjoe has quit IRC12:48
Tauqeerfifieldt ??12:50
*** kaushikc has quit IRC12:51
*** mikedawson_ has joined #openstack12:51
fifieldtsorry - was afk.  can you send me links to your unanswered ask.openstack.org questions, or your mailing list posts ?12:51
*** rackerjoe has joined #openstack12:51
fifieldteg using http://openstack.markmail.org/12:52
*** mikedawson has quit IRC12:52
*** mikedawson_ is now known as mikedawson12:52
*** kaushikc1 has joined #openstack12:53
*** HenryG_ has quit IRC12:53
*** aliguori has joined #openstack12:56
*** desai has joined #openstack12:56
*** zoresvit has quit IRC12:57
*** vsergeyev has quit IRC12:58
*** sayan has joined #openstack12:58
*** zoresvit has joined #openstack12:59
*** vsergeyev has joined #openstack12:59
*** jnoller has joined #openstack12:59
*** h0cin has joined #openstack12:59
*** jpfuentes2 has joined #openstack13:00
Tauqeerfifieldt I asked here too right now, I hope someone will answer.13:00
TauqeerI posted in stackoverflow and other communities before..13:00
*** npasqua has joined #openstack13:00
*** scrollback has quit IRC13:01
*** desai has quit IRC13:01
*** henrynash has joined #openstack13:02
vkmcTauqeer, Hey, can you share the links of your unanswered ask.openstack.org questions or your mailing lists posts?13:02
*** jecarey has joined #openstack13:03
TauqeerVKMC, my questions are related to keystone as i want to work on it,13:05
*** henrynash has quit IRC13:07
*** adalbas has quit IRC13:07
vkmcTauqeer, Work on it... like, contribute?13:07
*** rmartinelli has joined #openstack13:08
Tauqeervkmc, actually right now my focus is to undestand it, in future if my company will need to add some fucntioanlity then we will contribute too13:08
*** HenryG has joined #openstack13:09
vkmcTauqeer, That's really cool :)13:09
Tauqeerbut right now I am stuck with understanding keystone13:09
Tauqeereverywhere high level info is there, nobody has explained how keystone works internally :(13:10
vkmcTauqeer, Well, first of all I would suggest you to read the docs... I know it's not the quicker way, but official docs are really well written and you will learn a lot from there13:10
*** jodok has quit IRC13:10
Tauqeervkmc, which docs you mean?13:10
*** spzala has joined #openstack13:10
fifieldtTauqeer, have you read the keystone developer reference: http://docs.openstack.org/developer/keystone/ ?13:10
vkmcThose suggested by fifieldt, to start developing13:12
vkmcTauqeer, But to start from scratch, I would also suggest reading the administration guide here http://docs.openstack.org/grizzly/openstack-compute/admin/content/ch-identity-mgmt-config.html13:13
*** Deoan has joined #openstack13:13
*** acabrera has quit IRC13:13
vkmcTauqeer, And... to get more details about it, the API reference http://docs.openstack.org/api/openstack-identity-service/2.0/content/13:14
*** moha_hunt has joined #openstack13:14
Tauqeervkmc, I went through API doc, but I guess other two will be really helpful , thanks :)13:16
fifieldtTauqeer, I have to go to sleep, but before I do - one technique that has helped me in the past getting assistance in learning about new and complex systems. I like to write down my understanding of the system and send that out as a question - this way people can invalidate the assumptions and it leads to more specific questions13:17
fifieldtgood luck :)13:17
*** kaushikc1 has quit IRC13:17
*** fifieldt has quit IRC13:17
*** rnirmal has joined #openstack13:18
*** adalbas has joined #openstack13:18
*** jjmb has joined #openstack13:18
*** morazi has joined #openstack13:19
vkmcTauqeer, I strongly suggest you reading the first one :) The other two... you will get to them later13:20
vkmcTauqeer, But understanding how it works is the most important right now13:20
*** malone has joined #openstack13:20
vkmcTauqeer, Also, play with Keystone... try creating tenants, users, adding user to tenants and those kind of stuff :) That will you experience and you will help you to enjoy the learning step13:21
*** jodok has joined #openstack13:21
*** jodok has joined #openstack13:21
*** KLevenstein has joined #openstack13:21
vkmcTauqeer, Also, feel free to join #openstack-101 to know other newcomers and #openstack-keystone to chat with the current Keystone's developing community13:22
*** vartom112 has quit IRC13:22
vkmcs/know/meet13:22
*** Keith_Pawson has quit IRC13:22
Tauqeeryeah I will do that, how to join openstack-keystone13:23
*** abhishekkr_ has quit IRC13:25
*** otherwiseguy has joined #openstack13:26
*** Jahkeup_ has joined #openstack13:26
ashkaclick or doubleclick it, or type /join #openstack-keystone13:26
*** martine_ has joined #openstack13:27
vkmcAs ashka says :) Although... I'm checking that there is not much people there :/13:27
*** sandywalsh has quit IRC13:28
*** jnoller has quit IRC13:28
*** vlad_starkov has joined #openstack13:29
*** henrynash has joined #openstack13:29
*** bknudson has joined #openstack13:30
*** digi has quit IRC13:30
*** Jahkeup_ has quit IRC13:31
*** redbeard2 has quit IRC13:31
*** gmi has joined #openstack13:32
*** digi has joined #openstack13:32
*** garyk has quit IRC13:32
*** krtaylor has quit IRC13:33
ChocoboWhat exactly do that stats_monitoring and stats_reporting do in keystone?13:34
*** garyk has joined #openstack13:34
*** aeperezt has joined #openstack13:34
*** robbiew has joined #openstack13:35
*** ben_duyujie has joined #openstack13:35
Tauqeer#openstack-keystone13:38
*** chandankumar has quit IRC13:39
*** danfrincu has joined #openstack13:40
*** danfrincu has left #openstack13:40
*** Jahkeup_ has joined #openstack13:40
ChocoboHmm, I didn't realize there was a channel for each service.  cool.13:40
*** sandywalsh has joined #openstack13:40
*** zehicle_at_dell has joined #openstack13:42
*** prad_ has joined #openstack13:42
*** abhishekkr_ has joined #openstack13:42
*** kbringard has joined #openstack13:43
*** prad_ has quit IRC13:43
*** YW has joined #openstack13:43
*** chandankumar has joined #openstack13:43
*** YW is now known as Guest5722013:43
*** blackboxsw has joined #openstack13:43
*** navid_ has left #openstack13:44
*** ssalevan has joined #openstack13:44
*** zeron has quit IRC13:44
*** Guest33987 has quit IRC13:46
*** mtreinish has joined #openstack13:46
*** mdomsch has quit IRC13:48
*** msmedved has joined #openstack13:49
*** jnoller has joined #openstack13:50
*** grizzle has quit IRC13:50
*** med_ has quit IRC13:50
*** henrynash has quit IRC13:51
*** grizzle has joined #openstack13:51
*** Dharmit has quit IRC13:53
*** johnthetubaguy has quit IRC13:54
*** zoresvit has quit IRC13:54
*** rcleere has joined #openstack13:55
*** davelowe has joined #openstack13:56
*** zoresvit has joined #openstack13:56
*** chandankumar has quit IRC13:56
*** ssalevan has quit IRC13:58
*** chrismaul has joined #openstack13:58
*** vishal has joined #openstack13:59
*** fandikurnia01 has joined #openstack13:59
*** majeff has joined #openstack13:59
*** johnthetubaguy has joined #openstack13:59
*** BjoernC has quit IRC13:59
*** moha_hunt has quit IRC14:00
*** desai has joined #openstack14:01
*** johnthetubaguy has quit IRC14:01
*** devoid has joined #openstack14:03
*** susanne-balle has joined #openstack14:03
*** devoid has quit IRC14:04
*** mikal has quit IRC14:04
*** cp16net|away is now known as cp16net14:05
*** devoid has joined #openstack14:05
*** mikal has joined #openstack14:06
*** abhishekkr_ has quit IRC14:06
*** mrunge has joined #openstack14:07
*** cody-somerville has joined #openstack14:07
*** ryanpetrello has joined #openstack14:08
*** andreaf has quit IRC14:09
*** andyandy has quit IRC14:09
*** andreaf has joined #openstack14:09
*** dizquierdo has joined #openstack14:10
*** andyandy has joined #openstack14:10
*** henrynash has joined #openstack14:10
*** dmsimard has joined #openstack14:10
*** yocum_ has joined #openstack14:11
*** leseb has quit IRC14:12
*** ben_duyujie has quit IRC14:12
*** jkienitz has joined #openstack14:12
*** rnorwood1 has joined #openstack14:13
*** jkienitz has quit IRC14:13
*** DredTiger has joined #openstack14:14
*** ben_duyujie has joined #openstack14:14
*** martines has joined #openstack14:15
*** johnthetubaguy has joined #openstack14:15
*** UICTamale1 has joined #openstack14:15
*** cody-somerville has quit IRC14:15
*** jdaggett has joined #openstack14:16
*** krtaylor has joined #openstack14:16
*** tzn has quit IRC14:17
*** jecarey_ has joined #openstack14:19
*** adepti37 has quit IRC14:21
*** henrynash has quit IRC14:21
*** monst has joined #openstack14:22
*** davi has joined #openstack14:23
*** davi has joined #openstack14:23
*** jecarey has quit IRC14:23
*** adepti37 has joined #openstack14:24
chrisscohi, can i allocate a instance more ram without creating a new instance?14:24
*** grizzle has quit IRC14:25
*** grizzle has joined #openstack14:26
*** katylava has joined #openstack14:27
*** Tauqeer has quit IRC14:28
*** ejat has joined #openstack14:28
*** ejat has joined #openstack14:28
*** rwsu-away has quit IRC14:29
*** spideyman has quit IRC14:29
*** redbeard2 has joined #openstack14:29
*** aliguori has quit IRC14:30
*** eharney has joined #openstack14:31
*** digi has quit IRC14:31
*** garyk has quit IRC14:32
*** leseb has joined #openstack14:32
*** digi has joined #openstack14:33
*** WMipv6 has joined #openstack14:33
*** zeron has joined #openstack14:33
*** shaon has quit IRC14:34
*** BjoernC has joined #openstack14:35
*** lfazio has quit IRC14:35
*** litong has joined #openstack14:35
*** lorin1 has joined #openstack14:35
*** chandankumar has joined #openstack14:36
*** vishal has quit IRC14:36
*** kenperkins has quit IRC14:36
jpichchrissco: Hi. There's a resize option that lets you choose a new flavour, so you could select a flavour that has more RAM to achieve this14:36
*** zerick has joined #openstack14:37
*** jvrbanac has joined #openstack14:38
*** zerick has quit IRC14:38
*** shaon has joined #openstack14:39
*** doublerr has joined #openstack14:39
*** Jahkeup__ has joined #openstack14:40
*** andyandy_ has joined #openstack14:40
*** DoniRS has joined #openstack14:41
*** andyand__ has joined #openstack14:41
*** datsun180b has joined #openstack14:42
*** ppyy has joined #openstack14:42
*** andyandy has quit IRC14:42
*** AutoEight has joined #openstack14:44
*** Jahkeup_ has quit IRC14:44
*** devvesa has joined #openstack14:44
*** lfazio has joined #openstack14:44
*** malone has quit IRC14:44
*** andyandy_ has quit IRC14:44
*** zeron has quit IRC14:45
*** timello has quit IRC14:45
*** dhellmann has joined #openstack14:45
*** ssalevan_ has joined #openstack14:45
*** timello has joined #openstack14:46
*** julianwa_ has joined #openstack14:46
*** henrynash has joined #openstack14:46
*** AutoEight has quit IRC14:47
*** ladquin has joined #openstack14:48
*** julianwa has quit IRC14:49
*** luis_ has joined #openstack14:50
*** jprovazn has quit IRC14:50
*** rwsu has joined #openstack14:51
*** grizzle_ has joined #openstack14:51
*** kenperkins has joined #openstack14:51
*** sgviking has quit IRC14:52
*** ejat has quit IRC14:52
*** souleymane_ has joined #openstack14:52
*** krypto has quit IRC14:52
*** grizzle has quit IRC14:53
*** grizzle_ is now known as grizzle14:53
*** souleymane has quit IRC14:53
*** johnthetubaguy has quit IRC14:53
*** johnthetubaguy has joined #openstack14:53
*** maurosr- is now known as maurosr14:54
*** mdomsch has joined #openstack14:56
*** fnaval has quit IRC14:56
*** mkollaro has joined #openstack14:57
*** jdaggett has quit IRC14:57
*** netsrob has quit IRC14:57
*** ejat has joined #openstack14:58
*** ejat has joined #openstack14:58
*** hk_peter has joined #openstack14:58
*** berendt has quit IRC14:59
*** iDrac has quit IRC15:00
*** vlad_starkov has quit IRC15:00
*** kmartin has quit IRC15:01
*** reidrac has quit IRC15:01
*** mkollaro1 has joined #openstack15:01
*** mkollaro has quit IRC15:01
ChocoboHas anyone seen an error like this before?  http://paste.ubuntu.com/5761706/15:02
*** garyk has joined #openstack15:02
ChocoboThis was after trying to do a "cinder list"15:02
*** ffio has joined #openstack15:03
*** jasper22 has quit IRC15:03
*** _ffio_ has quit IRC15:03
*** aliguori has joined #openstack15:03
*** yocum_ has quit IRC15:04
*** malone has joined #openstack15:04
*** yidclare has joined #openstack15:04
*** cocoadaemon has quit IRC15:06
*** kbrierly has quit IRC15:06
*** berendt has joined #openstack15:06
*** sammmmm has joined #openstack15:07
*** kbrierly has joined #openstack15:08
*** mmagr has quit IRC15:08
*** ctooley has quit IRC15:09
*** medberry is now known as med_15:11
*** branen has joined #openstack15:12
*** moos3 has quit IRC15:12
*** bsd77565 has joined #openstack15:12
*** afazekas has quit IRC15:13
*** nickbartos has quit IRC15:13
*** kmartin has joined #openstack15:13
*** portante has joined #openstack15:13
*** nickbartos has joined #openstack15:14
*** nickbartos has quit IRC15:15
*** pmathews has joined #openstack15:15
*** fnaval has joined #openstack15:16
*** mdomsch has quit IRC15:16
*** sudorandom has joined #openstack15:16
*** moos3 has joined #openstack15:16
*** garyk has quit IRC15:17
*** garyk has joined #openstack15:17
*** jtomasek has quit IRC15:17
*** acabrera has joined #openstack15:17
*** mkerrin has quit IRC15:18
*** danblack has quit IRC15:18
*** kebray has joined #openstack15:19
*** torandu has quit IRC15:19
*** freedomhui has quit IRC15:19
*** sayan has quit IRC15:21
*** dmsimard1 has joined #openstack15:22
*** maoy has joined #openstack15:22
*** dmsimard has quit IRC15:23
*** choforo has joined #openstack15:24
*** kmartin has quit IRC15:24
*** CoilDomain has quit IRC15:25
*** ayoung has joined #openstack15:25
*** iswc has joined #openstack15:25
*** CoilDomain has joined #openstack15:26
*** sthaha has quit IRC15:28
*** ejat has quit IRC15:29
*** vlad_starkov has joined #openstack15:29
*** jnoller has quit IRC15:29
*** mkerrin has joined #openstack15:30
*** dmsimard has joined #openstack15:30
*** dmsimard1 has quit IRC15:31
*** chandankumar has quit IRC15:31
*** mdomsch has joined #openstack15:31
*** starmer has quit IRC15:31
*** jprovazn has joined #openstack15:31
*** kip_io has joined #openstack15:32
*** zeus` has joined #openstack15:33
*** jodok has quit IRC15:33
*** jcoufal has quit IRC15:34
*** koolhead17 has quit IRC15:34
*** sammmmm has quit IRC15:34
*** zehicle_at_dell has quit IRC15:35
*** simon_lucy has quit IRC15:35
*** rohit404 has joined #openstack15:35
*** souvik has joined #openstack15:36
*** ejat has joined #openstack15:36
*** souvik1 has joined #openstack15:36
*** ejat has quit IRC15:36
*** ejat has joined #openstack15:36
*** majeff has quit IRC15:36
*** lukego has joined #openstack15:37
*** crazed_ is now known as crazed15:38
*** elake is now known as etank15:38
*** fandikurnia01 has quit IRC15:38
ChocoboOk, can someone help me with an authentication issue?  http://pastie.org/pastes/8039490/text   It gets the token fine from keystone, but then when it passes it back to cinder it gets an "Authentication Required" error.15:39
*** abhishekkr_ has joined #openstack15:40
*** engkur has quit IRC15:40
*** souvik has quit IRC15:40
*** kindjal has joined #openstack15:41
*** bdpayne has joined #openstack15:41
*** yo61 has joined #openstack15:42
*** Dady has quit IRC15:43
*** afazekas has joined #openstack15:44
*** kip_io has quit IRC15:45
*** ifarkas has quit IRC15:45
gmiChocobo: anything in the cinder-api logs?15:46
*** aliguori has quit IRC15:47
Chocobogmi: http://pastie.org/private/pgdq0zchka9t97vi6frig15:48
*** majeff has joined #openstack15:48
Chocobothings like "2013-06-13 11:21:32    ERROR [keystoneclient.common.cms] Verify error: Verification failure15:48
Chocobo139680882570912:error:0407006A:rsa routines:RSA_padding_check_PKCS1_type_1:block type is not 01:rsa_pk1.c:100:" look "off"15:48
*** tim|mint has quit IRC15:48
*** thansen has quit IRC15:49
gmiChocobo: is the token exactly the same?15:49
Chocobogmi: I can turn debug on if that is helpful for logging but I find it fills up with a lot of useless stuff.15:50
Chocobogmi: let me rerun it15:50
*** SergeyLukjanov has quit IRC15:50
*** erkules_ is now known as erkules15:51
Chocobogmi: yes, they are identical15:52
*** perfectsine has joined #openstack15:53
ChocoboI should also note that all the glance, and keystone functions seem to work fine :/15:53
*** tecepe has quit IRC15:53
gmiChocobo:do you run multiple keystone servers? maybe the token is cached on a different keystone server than the one who created it15:54
*** virt_ has left #openstack15:54
*** joyhu2013 has joined #openstack15:55
*** tychoish has joined #openstack15:55
*** joyhu2013 has left #openstack15:55
*** Pyus has joined #openstack15:55
Chocobogmi: I do have multiple keystone servers, but they are current off.15:55
*** tychoish has left #openstack15:55
*** Pyus has quit IRC15:56
*** dal has quit IRC15:56
Chocobogmi: I thought to test that.  Plus with haproxy I have non-local services set as "backup" so they don't get used unless they are down locally15:56
*** Pyus has joined #openstack15:56
*** zehicle_at_dell has joined #openstack15:57
*** alop has joined #openstack15:59
*** berendt has quit IRC15:59
ChocoboI am even watching the traffic with tcpdump on the other nodes.  Nothing. everything is going to the same node.  Perhaps I should change the endpoint, and point cinder to the keystone on the localip and see if that works?16:00
*** cp16net is now known as cp16net|away16:01
*** cp16net|away is now known as cp16net16:01
*** foexle has quit IRC16:01
*** UICTamale1 has quit IRC16:01
*** zerick has joined #openstack16:02
*** afazekas has quit IRC16:03
*** spideyman has joined #openstack16:03
*** UICTamale1 has joined #openstack16:04
*** wajiii has quit IRC16:05
*** garyk has quit IRC16:05
gmiChocobo: you could disable the PKI token format in keystone, restart it and try again16:05
*** wajiii-afk has joined #openstack16:05
*** koolhead17 has joined #openstack16:05
*** devvesa has quit IRC16:06
*** wajiii-afk is now known as wajiii16:06
*** blair has joined #openstack16:06
Chocobogmi: what should I set token_format to?16:06
ChocoboI haven't really modified much of the low level stuff.16:06
*** leseb has quit IRC16:06
*** berendt has joined #openstack16:07
*** portante has quit IRC16:07
*** tecepe has joined #openstack16:07
*** BjoernC has quit IRC16:09
gmiChocobo: if you comment out "token_format = PKI" in keystone.conf and restart keystone, it should use UUID type tokens16:10
Chocobogmi: that line is already commented out.16:11
Chocobogmi: I should probably mention I am using Grizzly.  Not sure if that matters16:12
gmiChocobo: can you put in pastebin the output of: egrep -v "^$|^#" /etc/keystone/keystone.conf16:13
*** koolhead11|away has joined #openstack16:13
*** jpfuentes2 has quit IRC16:14
Chocobogmi: http://pastie.org/private/ytmfwht98b4hb2xuckpdpw16:14
Chocobohmmm, I see something16:15
*** dims has quit IRC16:15
*** bsd77565 has quit IRC16:16
*** Tross has quit IRC16:16
*** msgodf has quit IRC16:16
ChocoboHmm, I remove the "token" from [auth] methods.   Didn't seem to do anything16:17
*** beagles has quit IRC16:17
*** Jahkeup_ has joined #openstack16:18
*** Tross has joined #openstack16:19
*** colinmcnamara has joined #openstack16:19
bknudsonchocobo: the default for token format changed in G. token_format = UUID to switch to UUID tokens.16:19
*** hemna_ is now known as hemna16:20
*** thansen has joined #openstack16:20
*** Jahkeup__ has quit IRC16:20
*** pixelbeat has quit IRC16:21
*** Kharec has quit IRC16:21
ChocoboHuh!16:22
Chocobobknudson: thanks16:22
*** bknudson has left #openstack16:22
*** yidclare has quit IRC16:22
*** bknudson has joined #openstack16:22
ChocoboIt worked without token authentication!  What the heck!?16:22
*** Kharec has joined #openstack16:22
wahlyi'm having a heck of a time getting images added via glance on a new control node install (following http://docs.openstack.org/grizzly/basic-install/yum/content/basic-install_controller.html). can anyone point me in the right direction? http://pastebin.com/CkrSyxv816:23
*** Kharec has quit IRC16:23
*** mkollaro1 has quit IRC16:23
*** okrieg has joined #openstack16:23
*** mattymo has quit IRC16:23
*** mkollaro has joined #openstack16:23
*** moha_hunt has joined #openstack16:23
ChocoboIs there something else I have to do to setup PKI?   I didn't see anything about it in the guides.16:24
*** Kharec has joined #openstack16:24
Chocobogmi: thanks!  I will have to look into this more.  Maybe I will make a post to the mailing list.16:24
*** dgel has joined #openstack16:25
*** gyee has joined #openstack16:25
*** judd7 is now known as judd_lunch16:25
gmiChocobo:there is something about that in the guide, but I didn't do that step and PKI tokens work fine for me, so ...http://docs.openstack.org/grizzly/openstack-compute/install/apt/content/install-keystone.html16:26
*** dgel has quit IRC16:26
*** npasqua has quit IRC16:30
*** iDrac has joined #openstack16:30
gmiChocobo: more keystone stuff here: http://docs.openstack.org/developer/keystone/configuration.html16:30
*** dims has joined #openstack16:30
*** Free_maN has quit IRC16:30
*** Free_maN has joined #openstack16:31
*** KyleMacDonald has joined #openstack16:31
*** meghal has joined #openstack16:31
*** pantea has quit IRC16:31
*** okrieg has quit IRC16:31
*** warik has joined #openstack16:32
*** meghal has quit IRC16:32
*** networkstatic has joined #openstack16:33
*** dizquierdo has left #openstack16:33
*** fbo has quit IRC16:34
gmiChocobo: I think you hit this bug https://bugs.launchpad.net/cinder/+bug/107583816:35
*** jkienitz has joined #openstack16:35
*** sgviking has joined #openstack16:36
*** kaushikc has joined #openstack16:36
*** anniec has quit IRC16:37
*** jpich has quit IRC16:38
*** lukego has quit IRC16:38
*** warik has quit IRC16:39
*** monst has quit IRC16:39
*** kaushikc has quit IRC16:39
*** kaushikc1 has joined #openstack16:39
*** gourneau_ has quit IRC16:40
*** eglynn has quit IRC16:40
*** goozbach has quit IRC16:41
*** tmclaugh[work] has joined #openstack16:41
*** ppyy has quit IRC16:41
*** cruxeternus has quit IRC16:42
*** mattymo has joined #openstack16:42
*** kmartin has joined #openstack16:42
*** zoresvit has quit IRC16:44
*** zz_tott has quit IRC16:44
*** cmark has joined #openstack16:44
*** agy has quit IRC16:44
*** Guest88054 has quit IRC16:45
*** tmclaugh[work] has quit IRC16:45
*** cmark has quit IRC16:45
*** tmclaugh[work] has joined #openstack16:45
*** cmark has joined #openstack16:45
*** KyleMacDonald has quit IRC16:46
*** cruxeternus has joined #openstack16:46
*** gourneau has joined #openstack16:46
*** kpg2012 has joined #openstack16:46
*** monst has joined #openstack16:47
*** lukego has joined #openstack16:48
*** odyssey4me has joined #openstack16:48
*** KyleMacDonald has joined #openstack16:48
*** whenry has joined #openstack16:48
*** freedomhui has joined #openstack16:48
*** walrus has quit IRC16:49
*** zxvff has quit IRC16:49
*** katylava has quit IRC16:49
*** kaushikc1 has quit IRC16:49
*** kaushikc has joined #openstack16:49
yo61I'm doing some testing with Grizzly on CentOS 6.416:50
*** samba35 has joined #openstack16:50
*** gourneau has quit IRC16:50
yo61I see a custom kernel build is required to support Quantum16:50
yo61kernel-2.6.32-358.6.2.openstack.el616:50
*** kip_io has joined #openstack16:50
*** zxvff has joined #openstack16:51
yo61However, the latest 6.4 kernel supercedes this16:51
*** cruxeternus has quit IRC16:51
*** kaushikc1 has joined #openstack16:51
*** Dave is now known as Dave216:51
*** kaushikc has quit IRC16:52
yo61Have the required changes been merged to the later release? (kernel-2.6.32-358.11.1.el6.x86_64)16:52
*** wu_wenxiang has joined #openstack16:52
*** cruxeternus has joined #openstack16:53
*** eglynn has joined #openstack16:53
*** jbresnah has joined #openstack16:53
*** beagles has joined #openstack16:54
*** zxvff has quit IRC16:55
*** zz_tott has joined #openstack16:55
*** koolhead17 is now known as koolhead1116:55
*** zxvff has joined #openstack16:55
*** walrus has joined #openstack16:56
*** SergeyLukjanov has joined #openstack16:56
*** agy has joined #openstack16:56
*** gourneau has joined #openstack16:56
*** dhellmann has quit IRC16:57
*** franck has joined #openstack16:57
*** dhellmann has joined #openstack16:57
*** franck is now known as Guest4891116:57
*** KyleMacDonald has quit IRC16:58
*** guigui1 has quit IRC16:58
*** torandu has joined #openstack16:58
*** Tross has quit IRC16:58
*** kaushikc1 has quit IRC16:58
*** Guest48911 has quit IRC16:58
*** Guest48911 has joined #openstack16:58
*** goozbach has joined #openstack16:58
*** Guest48911 is now known as Liir16:58
*** kip_io has quit IRC16:59
*** martyntaylor has quit IRC16:59
*** Tross has joined #openstack16:59
*** jpfuentes2 has joined #openstack17:00
*** zz_tott has quit IRC17:00
*** Blackavar has quit IRC17:00
*** derekh has quit IRC17:01
*** terry7 has joined #openstack17:02
*** cmark_ has joined #openstack17:02
*** afazekas has joined #openstack17:02
*** kaushikc has joined #openstack17:02
*** eglynn has quit IRC17:02
*** ryanpetr_ has joined #openstack17:02
*** dtx00ff has joined #openstack17:02
*** npasqua has joined #openstack17:03
*** ryanpetr_ has quit IRC17:03
*** lukego has quit IRC17:04
*** ryanpetr_ has joined #openstack17:04
*** ujjain has quit IRC17:04
*** cmark has quit IRC17:05
*** zz_tott has joined #openstack17:05
*** ryanpetrello has quit IRC17:05
*** BjoernC has joined #openstack17:05
*** harlowja has quit IRC17:06
*** leseb has joined #openstack17:07
*** corXi has quit IRC17:07
*** jprovazn is now known as jprovazn_afk17:07
*** aliguori has joined #openstack17:09
*** jbresnah has quit IRC17:09
*** dpippenger has quit IRC17:09
*** harlowja has joined #openstack17:09
*** yidclare has joined #openstack17:10
*** gcheng has joined #openstack17:11
*** leseb has quit IRC17:11
*** gmi has quit IRC17:14
*** dims has quit IRC17:16
*** warik has joined #openstack17:16
*** ejat has quit IRC17:17
*** tmclaugh[work] has quit IRC17:17
*** bknudson has left #openstack17:17
*** dims has joined #openstack17:17
*** jjmb has quit IRC17:17
*** dmi is now known as dmi|afk17:18
*** eglynn has joined #openstack17:19
*** Ryan_Lane has joined #openstack17:19
*** zz_tott has quit IRC17:20
*** Guest88054 has joined #openstack17:20
*** kaushikc has quit IRC17:20
*** kaushikc has joined #openstack17:20
*** dims has quit IRC17:22
*** dims has joined #openstack17:23
*** samba35 has quit IRC17:23
*** testing has joined #openstack17:24
*** dtx00ff has quit IRC17:24
*** bbcmicrocomputer has quit IRC17:25
*** testing has quit IRC17:25
*** jbresnah has joined #openstack17:25
*** odyssey4me has quit IRC17:26
*** freedomhui has quit IRC17:26
*** vartom112 has joined #openstack17:26
*** cocoadaemon has joined #openstack17:29
*** tmclaugh[work] has joined #openstack17:29
*** CoilDomain has joined #openstack17:30
*** mrunge has quit IRC17:30
*** kaushikc has quit IRC17:31
*** zz_tott has joined #openstack17:31
*** kaushikc has joined #openstack17:31
*** cmark_ has quit IRC17:31
*** prad_ has joined #openstack17:32
*** fikst has joined #openstack17:32
*** jnoller has joined #openstack17:32
*** kaushikc has quit IRC17:34
*** andyand__ has quit IRC17:35
*** Ryan_Lane has quit IRC17:35
goozbachhaving an issue with glance-manage db_sync17:36
*** kaushikc has joined #openstack17:36
goozbachfollowing http://docs.openstack.org/grizzly/openstack-compute/install/yum/content/configure-glance-files.html17:36
*** Tross has quit IRC17:37
*** comay has joined #openstack17:38
*** Tross has joined #openstack17:38
*** ravikumar_hp has joined #openstack17:38
goozbachdouble checked all the passwords/configs in all the config files, the services are restarting... but glance-manage db_sync has the following error17:38
goozbach2013-06-13 13:34:07.407 11867 CRITICAL glance [-] (OperationalError) (1045, "Access denied for user 'glance'@'localhost' (using password: YES)") None None17:39
*** reed_ has joined #openstack17:39
goozbachI've double-checked the users in mysql, where else should I look?17:39
*** DoniRS has quit IRC17:40
*** kindjal has quit IRC17:40
*** kaushikc has quit IRC17:41
Chocobothanks gmi17:41
*** lfazio has quit IRC17:42
*** leseb has joined #openstack17:44
goozbachthere doesn't seem to be anything other than that error in the log files...17:45
*** responsiPaul has quit IRC17:46
*** responsiPaul has joined #openstack17:46
*** whenry has quit IRC17:46
*** epim has joined #openstack17:47
*** vkmc has quit IRC17:47
*** lukego has joined #openstack17:47
*** berendt has quit IRC17:48
*** johnthetubaguy1 has joined #openstack17:50
monstI am failing to spawn instances on one of my compute nodes. Error "HTTPInternalServerError: HTTPInternalServerError (HTTP 500)17:50
*** fpatwa has joined #openstack17:50
monstrunning glance image-list seems to work fine from commandline17:50
monstnot sure what the deal is17:50
*** arif-ali has quit IRC17:51
*** Ryan_Lane has joined #openstack17:51
*** johnthetubaguy has quit IRC17:51
*** johnthetubaguy1 has quit IRC17:54
*** Ryan_Lane1 has joined #openstack17:55
*** Ryan_Lane has quit IRC17:55
*** Ryan_Lane1 is now known as Ryan_Lane17:55
*** Ryan_Lane has joined #openstack17:55
*** lloydde has joined #openstack17:56
*** leseb has quit IRC17:57
*** ayoung has quit IRC17:57
*** racker_KevinS has joined #openstack17:59
*** elopez has joined #openstack18:00
*** jbresnah has quit IRC18:00
*** elopez is now known as Guest4490918:00
*** fpatwa has quit IRC18:01
*** zehicle_at_dell has quit IRC18:01
ChocoboKind of a strange question.  When sending email to the openstack mailing list, should I put [Openstack] in the subject?  I notice all the posts I receive have it.18:01
*** danger_fo_away is now known as danger_fo18:02
*** electrichead has joined #openstack18:02
monstglance image-download is giving me HTTPInternalServerError: HTTPInternalServerError (HTTP 500)18:02
monst=\18:02
*** AnilV4 has quit IRC18:02
*** cocoadaemon has quit IRC18:03
*** kebray has quit IRC18:03
*** berendt has joined #openstack18:04
*** tecepe has quit IRC18:04
*** Guest44909 has quit IRC18:05
monsthttp://paste.openstack.org/raw/38530/18:05
*** Dodge has quit IRC18:06
*** DredTiger has quit IRC18:08
*** pokoli has quit IRC18:08
*** smerdis has joined #openstack18:09
*** bknudson has joined #openstack18:09
*** shang has quit IRC18:09
*** davi has quit IRC18:10
*** zz_tott has quit IRC18:10
smerdisHi all, I've managed to install Openstack following this guide: https://github.com/mseknibilel/OpenStack-Grizzly-Install-Guide/blob/OVS_SingleNode/OpenStack_Grizzly_Install_Guide.rst18:11
*** fpatwa has joined #openstack18:11
*** iDrac has quit IRC18:11
*** reed_ is now known as reed18:11
*** douglas has joined #openstack18:12
*** cody-somerville has joined #openstack18:12
smerdisWhat I don't know is how to connect my computer to the servers I run.18:12
*** zz_tott has joined #openstack18:12
smerdisDo you people know of some wiki that talks about it?18:12
douglasHello, I am running grizzly and would like to turn a VM into a router. Does anyone know if any libvirt rules need to be changed in order for the VM to forward traffic on behalf of another VM?18:13
*** sushils has quit IRC18:13
*** wu_wenxiang has quit IRC18:13
smerdisThe servers and my pc are in different networks.18:14
*** dtx00ff has joined #openstack18:15
*** mikedawson has quit IRC18:17
*** ctooley has joined #openstack18:17
*** alunduil has quit IRC18:18
ctooleyMy location: Berkeley, United States18:18
ctooleyDoh that wasn't intentional. Not that it's private.18:19
*** fpatwa has quit IRC18:19
*** fpatwa has joined #openstack18:19
douglasTim is that you at Berkley?18:20
douglasberkeley18:20
*** wu_wenxiang has joined #openstack18:20
*** wu_wenxiang has quit IRC18:20
ctooleyNope, Chris Tooley18:20
*** jprovazn_afk has quit IRC18:21
*** souleymane_ has quit IRC18:21
*** ctooley has quit IRC18:22
*** mikedawson has joined #openstack18:22
*** ctooley has joined #openstack18:22
*** zehicle_at_dell has joined #openstack18:23
*** e_steve has joined #openstack18:26
*** LargePizza has joined #openstack18:26
*** jdaggett has joined #openstack18:26
e_steveDoes anyone here have a good amount of experience working with glance and imaging? I have a few questions but the answers can't be found on openstack's documentaiton18:26
*** leseb has joined #openstack18:27
*** carif has joined #openstack18:27
*** primeministerp has quit IRC18:27
*** LargePizza has quit IRC18:28
*** alop has quit IRC18:28
rohit404douglas: are you planning on a running quagga in a vm or what sort of VM router do you wanna run ?18:28
douglasI just have ip forwarding enabled18:29
douglasnet.ipv4.ip_forward = 118:29
rohit404on a vm ?18:29
douglasthat's correct18:29
douglasSo what I have is OpenVPN setup between two tenants18:30
douglasone tenant is in one cloud18:30
douglasone tenant is another18:30
douglasI setup the OpenVPN server on one cloud an and OpenVPN client on another18:30
*** alop has joined #openstack18:30
*** fpatwa has quit IRC18:30
douglasI want to use the openvpn server in the one tenant as a gateway for the rest of the vms in the tenant, so they can get across the tunnel to the other clouds private subnet18:31
*** Blackavar has joined #openstack18:31
*** smerdis has quit IRC18:31
rohit404setting the tenant subnets default gateway on the openvpn server should do it no ?18:31
douglaswhen I run a ping from the private ip addresses in one cloud to a private ip address in another cloud I am seeing icmp echo requests leaving the openvpn server that is doing the routing but I am NOT seeing them hit the qvo interface on the OVS on the compute node18:32
douglaswell I actually didnt set the default gateway18:32
douglasI just added a static route for that particular subnet18:32
douglasI just posted the question here https://answers.launchpad.net/quantum/+question/23071418:33
douglasI think its a libvirt rule of some kind18:33
*** leseb has quit IRC18:34
rohit404on the compute node18:35
rohit404yes18:35
*** hush has joined #openstack18:35
*** hush has quit IRC18:35
rohit404if this a test setup, you could could flush iptables and confirm the behavior18:35
*** cody-somerville has quit IRC18:36
douglasI havent touched the compute nodes at all18:36
douglasI am using the OVS plugin with GRE tunnels18:36
douglasI turned off ip tables completely on the vm that is doing the forwarding18:36
douglasIm sorry, on BOTH vms that are doing the routing18:36
douglasthe icmp request only gets so far18:37
douglasit never gets OUT of the VM towards OVS18:37
*** leseb has joined #openstack18:37
*** carif has quit IRC18:38
douglasthe source address when it leaves the VM will be different then what it usually is18:38
douglasI am wondering if libvirt blocks that somehow18:38
*** Jahkeup__ has joined #openstack18:38
douglasSo the traffic leaving the VM has a different source address then what it normally has18:39
*** Jahkeup_ has quit IRC18:39
*** jcoufal has joined #openstack18:39
douglasits pointing towards some kind of libvirt rule but I dont know what one to change18:39
douglasmaybe the IP spoofing stuff?18:39
douglas any ideas?18:40
rohit404looking18:40
*** Ruetobas has quit IRC18:40
*** fandikurnia01 has joined #openstack18:40
douglasI think its a libvirt rule but I could be wrong18:41
*** OutBackDingo has quit IRC18:42
douglasIf run a packet capture from the VM that is doing the routing I see the ICMP request LEAVING18:42
douglaswhen I run a capture on the tap interface for that vm on the compute node18:42
douglasI also see the ICMP request leaving18:43
douglasBUT, if run the capture on the qv port associated with the tap interface, I don't see the request anymore18:43
kbringarddouglas: check to make sure you have the noop driver set as the firewall driver in nova.conf18:43
kbringardI had a problem where quantum and compute were both making rules, but only one was making the correct rules18:43
kbringardso the other was hitting the deny *18:44
*** DoniRS has joined #openstack18:44
rohit404and there is a flag that disables Q_SECURITY_GROUPS18:44
*** DoniRS has quit IRC18:44
douglasok, I like both of those suggestions, it looks like my firewall driver in nova.conf is set to firewall_driver=nova.virt.libvirt.firewall.IptablesFirewallDriver18:45
rohit404Q_USE_SECGROUP=False18:45
douglasI can just put that in nova.conf?18:47
douglasreally18:47
douglasok18:47
douglasI like that alot too18:47
*** mkollaro has quit IRC18:48
*** alpha_ori has quit IRC18:48
*** alpha_ori_ has joined #openstack18:48
douglaslet me try that right now18:48
*** alpha_ori_ is now known as alpha_ori18:48
*** leseb has quit IRC18:49
*** egallen has quit IRC18:50
*** networkstatic_ has joined #openstack18:53
*** fbo has joined #openstack18:54
douglasI just enabled the firewall driver in nova.conf18:55
douglasstill seeing the same bahvior18:55
douglasbehavior18:55
*** berendt has quit IRC18:55
*** networkstatic has quit IRC18:55
*** networkstatic_ is now known as networkstatic18:55
*** AndroUser2 has joined #openstack18:56
*** garyk has joined #openstack18:57
*** ctooley has quit IRC18:57
*** vartom112 has quit IRC19:00
*** souvik has joined #openstack19:00
*** JordanRinke has quit IRC19:01
*** AndroUser2 has quit IRC19:01
*** maoy has quit IRC19:02
*** JordanRinke has joined #openstack19:02
*** souvik1 has quit IRC19:03
*** spideyman has quit IRC19:03
*** numero8 has joined #openstack19:03
*** robbiew has quit IRC19:03
*** networkstatic_ has joined #openstack19:04
douglasthis might be something19:04
douglassince there is only one interface on the vm19:04
douglashttp://tldp.org/HOWTO/Adv-Routing-HOWTO/lartc.kernel.rpf.html19:04
douglasbut I am seeing it in the tcpdump on eth019:04
douglasI am seeing requests comming from the other side19:05
douglasbut sent out over that interface19:05
Apsu`douglas: I can probably help with your issue. Can you summarize it for me? Just walking in and there's lots of scrollback from various testing.19:05
Apsu`Would help a lot to see some pastes of your network setup as well. ovs-vsctl show, ip a, ip r, etc19:05
ekarlsolifeless: yo19:05
*** zeus` has quit IRC19:05
*** grizzle has quit IRC19:06
*** grizzle has joined #openstack19:06
lifelessekarlso: yoyo19:06
*** melwitt has joined #openstack19:07
*** koolhead11|away is now known as koolhead1719:07
*** gyee has quit IRC19:07
douglasno problem Apsu19:07
*** ayoung has joined #openstack19:07
douglasI posted my question on launchpad here https://answers.launchpad.net/quantum/+question/23071419:07
douglasI an instance acting as an OpenVPN server in one tenant on one cloud19:07
douglasI have an instance acting as a vpn client on another cloud19:08
*** networkstatic has quit IRC19:08
*** networkstatic_ is now known as networkstatic19:08
*** jpfuentes2 has quit IRC19:08
*** koolhead11 has quit IRC19:08
Apsu`Ah. So you're trying to run a network quantum doesn't know about inside of a VM, inside of a quantum-networked cluster?19:08
Apsu`Though you're tunneling it over OpenVPN, which is SSL/TLS19:08
douglasI have turned both those intances into routers by doing echo 1 > /proc/sys/net/ipv4/ip_forward19:08
douglasI am using the server instance as a gateway for the other vms in that tenant to get to the private subnet in the other cloud that the vpn client is sitting in19:09
*** wramthun has joined #openstack19:10
douglasthe vms have routes to the far end private networks19:10
douglasI set the gateway for the far end subnets to be the vm instance running either the vpn server or the vpn client19:11
Apsu`So in this cloud, you have VMs on multiple compute hosts with routes to a particular VM, that has the VPN tunnel19:11
douglasand because those are doing routing they also have routes pointing to the far end subnets, directing any traffic destined for those subnets over the tunnel19:11
Apsu`Right. I follow you.19:12
douglasthats correct19:12
douglasI think its a libvirt rule19:12
douglasbut Im not sure19:12
*** torandu has quit IRC19:13
Apsu`Well, there's several things going on here.19:13
Apsu`First of all, with Quantum networking, libvirt (through nwfilter) doesn't insert any ebtables rules on hosts, unlike Nova network.19:14
douglaso ok, darn19:14
douglasthere goes that idea19:14
Apsu`In fact, the only place iptables/ebtables could apply is on the native Linux bridges named qbr*, where the VM tap* plugs into, that patches to the integration bridge over a qvo* and qvb* "veth pair"19:14
Apsu`However, there are iptables rules for security groups, and Quantum does some anti-spoofing (MAC/IP) rule insertions as well19:15
Apsu`But!19:15
*** krtaylor has quit IRC19:15
douglaswhen I ran the capture at the tap I am seeing the traffic19:15
Apsu`You're supposedly tunneling all your traffic in this OpenVPN tunnel, which will appear to Quantum as an SSL connection.19:15
Apsu`Which tap? Gateway VM? Client VM?19:15
douglaswhen I ran it at the qvo interface im not seeing it19:15
*** yocum_ has joined #openstack19:16
Apsu`And what traffic? VPN tunneled traffic?19:16
douglasok so19:16
*** maoy has joined #openstack19:16
douglasthe tap that I was looking at, was off of the VPN server, I see the echo requests from the far end on that tap19:16
douglasHOWEVER19:16
*** zehicle_at_dell has quit IRC19:17
douglaswhen I run a tcpdump on the qvo interface associated with that tap I dont see the echo requests anymore19:17
douglasits like somwhere between the tap and the qvo the reqests from the other side of the tunnel are dropped19:17
Apsu`Which would mean it's dying on the qbr19:17
*** zehicle_at_dell has joined #openstack19:17
douglasahhh ok19:17
douglasI see I see19:17
Apsu`So that'd be due to iptable19:17
Apsu`s19:17
*** dv__ has joined #openstack19:17
Apsu`Now, before we dig into that19:18
Apsu`Tell me what traffic it is you're seeing.19:18
*** vlad_starkov has quit IRC19:18
Apsu`Because if it were the tunneled traffic, it should pass just fine.19:18
Apsu`If it's purely getting routed, that'd be why you're having the issue.19:18
Apsu`My guess is it's not exiting through the tunnel.19:18
douglasnormally Id agree with you but why would I see icmp requests from the far end private subnet on eth019:19
douglasIm seeing it move through tun0 when I run tcpdump on the interface19:19
douglasso from the far end19:20
Apsu`Well, wait. We need to get really clear on one point here19:20
Apsu`When you tcpdump on the tap19:20
Apsu`*what* are you seeing in the dump?19:20
Apsu`Because if it's going through an OpenVPN tunnel, it will be encrypted.19:21
Apsu`You will not see the remote network IPs, or the client VM's IP, or anything inside the VPN payload at all19:21
*** epopt37 has quit IRC19:21
douglasthats uh interesting19:21
Apsu`If you're seeing anything but the gateway VM's IP and the remote VPN endpoint IP, you're not tunneling19:21
douglasbecause I am...19:21
*** stoned75 has joined #openstack19:22
monsthmm19:22
Apsu`Unless you forced OpenVPN into not encrypting, just encapsulating19:22
monstI am getting unauthorized doing "curl http://172.16.120.6:9292/v1/images"19:22
Apsu`But out of the box, so to speak, it encrypts :P19:22
monstfrom one of my compute nodes19:22
*** dmsimard has quit IRC19:22
monstnm its happening on all my compute nodes19:23
Apsu`douglas: How about this. Save some of the tcpdump capture to a file, upload it to cloudshark.org, link me to it19:23
*** afazekas has quit IRC19:23
Apsu`douglas: We can look at it together :)19:23
monstApsu`: if you have a second could you take a peek at http://paste.openstack.org/raw/38530/19:23
Apsu`Particularly when pinging19:23
douglas15:22:54.242888 IP VPN_END_POINT.openvpn > PRIVATE IP.openvpn: UDP, length 12519:23
douglas15:22:54.245506 IP PRIVATE IP > ANOTHER PRIVATE IP: ICMP echo request, id 13638, seq 1689, length 6419:24
douglasthats excatly what im saying19:24
douglassince that vm is routing traffic19:24
douglaswhy wouldnt I see those echo requests?19:24
douglasbecause its out of the tunnel at that point19:24
*** yidclare has quit IRC19:24
Apsu`douglas: Ok, we need to look at the interfaces/bridges (if any) and routing table on the gateway VM.19:24
douglasthats no problem19:25
Apsu`douglas: Also, did you make any iptables rules for the OpenVPN traffic? If so, or maybe just because, need to see "iptables-save -c"19:25
*** epopt37 has joined #openstack19:25
douglasthere is no bridges on the routing vm19:25
Apsu`kk, makes this easier19:25
Apsu`So19:25
douglasiptables is off19:26
Apsu`ip a, ip r19:26
douglason both vms doing routing19:26
Apsu`The output of those is what I need to see.19:26
Apsu`Use a paste site and link :)19:26
*** psedlak has quit IRC19:26
*** Jahkeup_ has joined #openstack19:27
Apsu`monst: IOError: [Errno 13] Permission denied: u'/var/lib/glance/images/02be9f41-a08e-4d34-9e33-494b0ed3d0e8'19:27
monstYeah, not sure if my token is wrong or something19:27
douglasalright let me ask you this19:27
Apsu`monst: Check your permissions on that directory tree. Or, make sure you're rootwrapping in glance.19:27
douglasif a virtual machine forwards traffic out its interface and the source address is different the ip address assigned to that eth interface on the vm19:28
douglasis there rules in place that will drop it at the compute node19:28
douglasdifferent then the ip address assigned*19:28
*** lukego has quit IRC19:28
Apsu`douglas: Yes. Quantum's anti-spoofing iptables rules will drop traffic that's A) not from the VM's assigned MAC and/or B) not from the VM's assigned IP.19:28
Apsu`douglas: But if your routing is correct, this traffic should go through the VPN tunnel, which *is* from the VM's MAC/IP.19:29
monstApsu`: that was it, the other compute had the images cached so it was working19:29
*** Jahkeup__ has quit IRC19:29
monstty sir19:30
Apsu`monst: You bet19:30
Apsu`douglas: Got that "ip a; ip r" for me?19:30
*** shardy is now known as shardy_afk19:31
douglasunfortunately I can't post anything at this time19:31
douglasbut I think thats the problem19:31
douglasthose quantum anti-spoofing ip tables rules19:31
*** ayoung has quit IRC19:31
douglasbecause the traffic is going over the tunnel to the vm that will do the routing19:31
*** jdaggett has quit IRC19:32
douglasthe vm unencapsulates and notices the destination address is not its eth0 interface, so a routing descion is made to forward it out eth019:32
*** davi has joined #openstack19:32
*** davi has joined #openstack19:32
*** JoeBurke has joined #openstack19:32
douglasand Im seeing that im just not seeing it hit the qv interface on the ovs19:32
Apsu`douglas: No... you just need to have the right routing rules setup on the VPN VM.19:33
douglasI do they are there19:33
douglasIm already directly connected to the subnet im going to19:33
Apsu`I'm sure you have Some routing rules, but19:33
Apsu`I can almost certainly tell you what's up if I can see the routing table and interfaces :)19:34
*** carl689 has quit IRC19:35
*** grizzle has quit IRC19:36
*** hartsocks has joined #openstack19:36
douglasIm going to see about turning off the quantum ip spoofing rules on the compute node19:36
douglasI think thats going to fix this19:36
douglasbecause the vm is routing the traffic correctly, because Im seeing it leaving eth0 when I run tcpdump19:36
*** kebray has joined #openstack19:36
Apsu`You shouldn't be :)19:36
Apsu`So.. pretty sure that won't do you any favors.19:37
*** jpn has joined #openstack19:37
*** grizzle has joined #openstack19:37
Apsu`But if you want the anti-spoofing off, you have to do a little work19:37
*** fbo has quit IRC19:37
*** networkstatic has quit IRC19:37
*** dpippenger has joined #openstack19:38
*** Jahkeup_ has quit IRC19:39
*** Jahkeup_ has joined #openstack19:40
douglasI dont understand why if I sit on the actual vm, and I run tcpdump on the only ethernet interface on the vm, I am seeing packets with a source address different then what is actually assigned to eth0. Doesn't that mean routing is working correctly?19:40
douglasthose packets are echo requests from the private subnet on the other side of the tunnel19:40
*** zeus` has joined #openstack19:41
*** obondarev has quit IRC19:42
*** vipul is now known as vipul|away19:42
*** vipul|away is now known as vipul19:42
*** meghal has joined #openstack19:42
*** garyk has quit IRC19:43
*** obondarev has joined #openstack19:44
*** marun has quit IRC19:44
*** yidclare has joined #openstack19:45
*** grizzle has quit IRC19:45
*** grizzle has joined #openstack19:46
*** jpfuentes2 has joined #openstack19:47
Apsu`douglas: If you're seeing them *exit* the VM, they should be going out the tunnel interface. If you're seeing them *enter*, then yes, that's expected. But also fairly useless. That bit should work regardless, assuming you're allowing the type of traffic you're trying to tunnel in your security groups.19:47
Apsu`douglas: What matters is what's leaving the VPN VM, and on what interface.19:47
Apsu`douglas: Are you telling me that you *can* or *can't* successfully ping across the VPN tunnel from a client VM?19:48
douglasok I know why there is miscommunication19:48
douglasyou are looking in the opposite direction19:48
douglasthe echo request goes over the tunnel to the VPN VM19:48
douglasits there19:49
douglasnow it needs to get to a vm on the private subnet that, that VM is connected to19:49
douglasand I see it the traffic leaving the ethrnet interface going towards the vm19:49
douglasbut it never gets there19:49
douglasthe vpn is working19:49
douglasits there man19:49
*** networkstatic has joined #openstack19:50
*** krtaylor has joined #openstack19:50
Apsu`Oh, so, you want [Client A, Net A] -> [VPN] -> [Client B, Net A] -> [Quantum] -> [Client C, Net B]?19:50
Apsu`And you're getting Client A -> B working, but not A -> C?19:51
*** davi has quit IRC19:52
*** JuanDRay has joined #openstack19:52
douglasSo I just have one client19:52
Apsu`Because if so, that won't work directly with Quantum's filtering, when Quantum doesn't know about Net A19:52
douglasand one server19:52
Apsu`Replace "Client" with "Node"19:52
douglasok19:52
Apsu`There's three participants here, and two networks, right?19:52
douglasI have one node in one cloud19:52
douglasI have one node in another cloud19:52
douglasthere is a tunnel between these two nodes19:52
*** marun has joined #openstack19:52
Apsu`Right19:53
douglasthese nodes do routing19:53
Apsu`And a third node, on another network, that you want to route to19:53
douglasthese nodes are attached to private networks19:53
douglaswhen you say another network19:53
Apsu`network/subnet19:53
douglasits on the same network as the "node" that is doing the routing for that subnet19:54
*** lborda has quit IRC19:54
Apsu`The important question is what quantum knows, vs. what the VPN tunnel knows, vs. what the remote cloud knows.19:54
Apsu`It's quite difficult to successfully run a network quantum doesn't know about from within a VM, VPN tunneled or otherwise, if you need machines to source connections from IPs in that network.19:55
douglasso quantum one one cloud will never know about the private subnet on the other cloud19:55
Apsu`Right.19:55
douglasobviously19:55
*** lborda has joined #openstack19:55
douglasyes19:56
Apsu`You have to remove all the filtering and security group bits.19:56
douglasyes19:56
douglasthats the problem19:56
douglasthat vm, that is doing the routing19:56
douglasis sourcing traffic from a vm that quantum doesnt know about19:56
Apsu`You could always just SNAT in your gateway VMs.19:56
Apsu`Wouldn't need reverse routes that way, either.19:57
Apsu`iptables -t nat -A POSTROUTING -o <tunnel> -j MASQUERADE, for instance19:57
Apsu`On each gateway VM on each cloud.19:57
*** vmesons has quit IRC19:57
Apsu`Then when traffic from either side heads towards the other side, they'll get SNAT'd to the VPN tunnel IP as their source when they cross19:58
douglasjust that one rule? I'm not even running iptables on the gateway vms19:58
*** acabrera has quit IRC19:58
Apsu`iptables isn't actually a daemon; it's a userspace tool that talks to a kernel side subsystem, known collectively as netfilter.19:58
Apsu`Not having any existing rules doesn't mean you can't simply add one.19:58
douglasthis cent os19:58
douglascent os19:59
Apsu`Yep. So... try adding that rule.19:59
douglasalright ill add that rule19:59
Apsu`(on both ends)19:59
douglasstart iptables with that rule19:59
douglasok19:59
Apsu`Er, don't "start" anything.19:59
Apsu`Just run exactly what I typed.19:59
douglasok19:59
*** vmeson has joined #openstack20:00
Apsu`If it works, we'll talk about how to make it persistent :20:00
Apsu`:P20:00
*** souvik has quit IRC20:00
douglasiptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE20:00
Apsu`Yep.20:00
*** drewlander has quit IRC20:01
*** bdpayne has quit IRC20:01
Apsu`That way traffic exiting through the tunnel will get SNAT'd to the (primary) IP on the tunnel interface.20:01
*** javierglaz has joined #openstack20:01
*** maoy has quit IRC20:01
Apsu`So responses will go right back to that interface, and the remote end should already know that network. At least I assume so, given what you've told me thus far.20:01
*** bdpayne has joined #openstack20:02
*** jdaggett has joined #openstack20:02
*** yocum_ has quit IRC20:02
douglasalright both rules are in place20:02
*** meghal has quit IRC20:02
*** esimmers has joined #openstack20:02
*** esimmers has left #openstack20:03
*** souvik has joined #openstack20:03
*** jmh_ has joined #openstack20:04
*** acabrera has joined #openstack20:04
douglasstill not working20:05
*** zeron has joined #openstack20:05
*** grizzle has quit IRC20:05
douglasservice iptables start?20:05
Apsu`That'll just load whatever saved rules are stored in /etc/sysconfig/iptables*, which won't include your rule20:06
*** grizzle has joined #openstack20:07
sc68calq/window 1320:07
*** blamar has quit IRC20:08
*** Jahkeup_ has quit IRC20:08
Apsu`douglas: I hate troubleshooting complex networks over IRC without being able to see interfaces/IPs/routes/bridges/etc :P20:08
Apsu`It's basically impossible to be effective, hehe20:08
douglasI think I almost have it20:09
*** egallen has joined #openstack20:09
*** jcoufal has quit IRC20:09
*** koolhead17 has quit IRC20:10
*** jdaggett has quit IRC20:11
*** dv__ has quit IRC20:11
Apsu`douglas: Perhaps you'll want to MASQUERADE on the gateway VM's -o eth0, and not -o tun020:11
*** carif has joined #openstack20:12
Apsu`douglas: Which will isolate the VPN and remote network from Quantum, as that's where your issue seemed to be.20:12
Apsu`douglas: I'd try that. You can -t nat -F to flush the nat rules, and add the new one appropriately20:12
*** gyee has joined #openstack20:13
*** Harpe has joined #openstack20:14
*** acu has quit IRC20:14
*** torandu has joined #openstack20:15
*** Harpe has left #openstack20:16
*** maoy has joined #openstack20:17
*** amber_nic has joined #openstack20:18
amber_nicHi, I installed Openstack on a SingleNode but can't ping the Ubuntu server image that's running from the Openstack node. They are on the same network. Does anyone have a clue of what can be happening?20:19
amber_nicMaybe the Ubuntu server image is not mapped to eth1?20:19
*** torandu_ has joined #openstack20:21
*** torandu_ has quit IRC20:21
*** bruges_ has quit IRC20:21
Apsu`amber_nic: You need to add security group rules to allow ICMP, or any other traffic you want to use20:21
amber_nicYou mean on the default group, those on ICMP and SSH?20:22
amber_nicI'll try.20:22
*** cocoadaemon has joined #openstack20:23
douglasGetting a destination prohibited message sent back from the gateway to the my vm that I am pinging from20:23
douglasI just added this rule20:23
douglasiptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE20:23
*** bruges has joined #openstack20:23
douglaslet me say that again20:23
douglasgetting a destination prohibited message sent back from the gateway to my vm that I am pinging from20:24
*** cody-somerville has joined #openstack20:25
*** odyssey4me has joined #openstack20:25
*** Harpe has joined #openstack20:26
*** Harpe has left #openstack20:26
*** souvik has quit IRC20:28
amber_nicNo, unfortunatelly doesn't work.20:28
Apsu`amber_nic: Yes.20:30
Apsu`amber_nic: You should provide more details on what exactly you added and how, and how you're testing.20:30
*** odyssey4me has quit IRC20:30
*** tmclaugh[work] has quit IRC20:31
*** desai has quit IRC20:31
*** odyssey4me has joined #openstack20:31
amber_nicI followed this tuto: https://github.com/mseknibilel/OpenStack-Grizzly-Install-Guide/blob/OVS_SingleNode/OpenStack_Grizzly_Install_Guide.rst20:31
*** evanjfraser has joined #openstack20:31
Apsu`douglas: That's quite odd.20:31
Apsu`douglas: Did you remove the previous rules?20:31
douglasiptables -F20:31
douglasthen I issued this command20:32
douglasiptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE20:32
douglasit looks like its not even going over the tunnel now20:32
douglasand when I say it I mean the echo request20:32
amber_nicNow via ssh on the openstack single node (.95) i'm trying to ping .9620:32
douglaswish I knew more about iptables20:33
*** Jahkeup_ has joined #openstack20:34
*** grizzle has quit IRC20:35
Apsu`douglas: Well, what's happening here is any traffic which leaves eth0 is having its source IP set to the (primary) IP on eth0.20:35
Apsu`douglas: For most traffic, that will change nothing. Only the routed traffic we're concerned with (coming out tun0 and then through eth0) should have a different source20:36
*** grizzle has joined #openstack20:36
*** SergeyLukjanov has quit IRC20:37
*** leseb has joined #openstack20:37
*** javierglaz has left #openstack20:38
*** fandikurnia01 has quit IRC20:39
*** cody-somerville has quit IRC20:41
*** sushils has joined #openstack20:42
douglaso ok20:42
*** jbresnah has joined #openstack20:42
douglaslet me see if I see it going over the tunnel20:42
douglasor see if I see more traffic on the tunnel20:42
*** otherwiseguy has quit IRC20:43
*** egallen has quit IRC20:43
Apsu`Sure20:44
*** egallen has joined #openstack20:44
douglasthats strange20:45
douglaswhen I do 'tcpdump -i tun0'20:45
douglason both nodes doing the routing20:45
douglasim not seeing any traffic now20:45
*** egallen has quit IRC20:46
*** sushils has quit IRC20:47
*** arif-ali has joined #openstack20:47
*** msgodf has joined #openstack20:47
douglaslet me turn off iptables on both nodes that are doing the routing and see what happens20:48
*** sushils has joined #openstack20:48
*** spzala has quit IRC20:48
*** vartom112 has joined #openstack20:49
*** krtaylor has quit IRC20:49
*** OutBackDingo has joined #openstack20:50
*** wramthun has quit IRC20:50
amber_nicCan someone give me a clue?20:50
*** egallen has joined #openstack20:50
*** numero8 has quit IRC20:51
*** carif has quit IRC20:51
Apsu`douglas: Maybe you'd better paste the output of "iptables-save -c" on your boxes :P20:51
Apsu`amber_nic: You said you followed a guide, but, how did you add the rules? Can you show us the security group rules you added? Or just link to a paste of "iptables-save -c" from the host20:51
*** wramthun has joined #openstack20:52
amber_nicIt's here: http://paste.openstack.org/show/38538/20:54
*** JuanDRay has quit IRC20:54
*** rmartinelli has quit IRC20:55
douglas[root@192-168-49-2 ~]# iptables-save -c # Generated by iptables-save v1.4.7 on Thu Jun 13 16:55:55 2013 *nat :PREROUTING ACCEPT [181:15212] :POSTROUTING ACCEPT [0:0] :OUTPUT ACCEPT [3:984] [3:984] -A POSTROUTING -o eth0 -j MASQUERADE COMMIT # Completed on Thu Jun 13 16:55:55 2013 # Generated by iptables-save v1.4.7 on Thu Jun 13 16:55:55 2013 *filter :INPUT ACCEPT [0:0] :FORWARD ACCEPT [0:0] :OUTPUT ACCEPT [340:37579] [141:12046]20:56
*** rnorwood1 has quit IRC20:56
douglashere ya go20:56
douglashttp://paste.openstack.org/show/38539/20:56
Apsu`douglas: Bet you started the iptables service, didn't ya?20:57
douglasya20:57
douglasI did20:57
Apsu`douglas: Look at lines 19 and 2020:57
Apsu`Your service injected ICMP prohibited messages for INPUT and FORWARD20:58
douglasI see that20:58
Apsu`Exactly what you're seeing now :)20:58
douglasfair enough20:58
douglaslike I said20:58
douglasI dont know anything about iptabels20:58
douglasiptables20:58
douglashow can I just a permit ip any any20:58
douglasjust do20:58
*** bdpayne has quit IRC20:59
*** devvesa has joined #openstack20:59
*** bdpayne has joined #openstack21:00
*** dsockwell has joined #openstack21:00
dsockwellmorning21:00
dsockwellso i'm creating a toy openstack environment in a vm for a demo, and the last time i touched it was during diablo21:01
dsockwelli only need one lvm group dedicated to openstack for things to nominally work, right?21:01
*** iscsi has joined #openstack21:01
Apsu`douglas: You can clear the filter table, for now.21:01
iscsimorning21:01
Apsu`douglas: iptables -t filter -F21:01
Apsu`douglas: You'll need to save the rules correctly for the iptables service, later, once it works.21:02
*** racker_markd has quit IRC21:02
*** dtx00ff has quit IRC21:02
*** shaon has quit IRC21:02
douglasok I cleared with iptables -t filter -F21:02
* iscsi fight against quantum21:03
Apsu`iscsi: Morning.21:03
Apsu`Quantum loves you!21:03
*** dtx00ff has joined #openstack21:04
*** h0cin has quit IRC21:04
Apsu`douglas: Now test your VPN. Should work again. Then test the other bits.21:04
*** npasqua has quit IRC21:04
*** blamar has joined #openstack21:05
*** sandywalsh has quit IRC21:05
smyersdouglas: In addition to flushing chains, double check the default policy on them (iptables -L), and change them to ACCEPT if necessary (look at iptables -D).21:05
*** KyleMacDonald has joined #openstack21:05
smyersIgnore this if everything's working, though. :)21:05
*** arif-ali has quit IRC21:05
*** johnthetubaguy has joined #openstack21:05
*** jdaggett has joined #openstack21:05
iscsiApsu`: can you feel my pain? :)21:05
Apsu`smyers: Chain policies are ACCEPTs, got an iptables-save -c finally, but good idea to mention!21:05
*** grizzle has quit IRC21:06
dtx00ff@iscsi lol is that a registered nick. haha.21:06
douglaslokos like the vpn is working again21:06
douglashowever the issue still remains21:06
Apsu`iscsi: Spent the last 3 weeks mastering Quantum, fixing bugs, building clusters, shoring up our cookbooks around it, and am deploying it for a customer this week.21:06
amber_nicGuys, here I can't make it work :(21:06
smyersExcept I said iptables -D, which deletes stuff, not iptables -P, which changes default policy. So yeah. If it's working definitely ignore this. :D21:06
Apsu`iscsi: So... yep!21:06
*** jmh_ has quit IRC21:06
Apsu`But I've had great success, so yey21:06
Apsu`smyers: haha21:06
douglaswith the clients in one cloud trying to talk to clients in another cloud21:06
*** grizzle has joined #openstack21:07
Apsu`amber_nic: Couple of things. You said you're on .95, trying to ping .96, right?21:07
*** wramthun has quit IRC21:07
amber_nicYes, but I deleted the instance and now is in .9821:08
Apsu`amber_nic: Yeah, ok. Just checking, since I took a look at your iptables paste :)21:08
amber_nicThanks :)21:08
Apsu`amber_nic: So... the host has an IP in this same network, visible on an interface when you run "ip a"?21:08
*** Deoan has quit IRC21:09
*** wramthun has joined #openstack21:09
iscsidtx00ff: `iscsi' keyword is hard to find in internet search, try :)21:09
wahlyi'm setting up a fresh openstack install (following http://docs.openstack.org/grizzly/basic-install/yum/content/basic-install_controller.html) and I'm getting the following error from nova services: "Unable to connect to AMQP server: connection-forced: Authentication failed(320)". any pointers on how i should start fixing the nova/qpid communication?21:10
*** litong has quit IRC21:10
dtx00ff@iscsi: i know what ISCSI is, thus my amusement21:10
dtx00fflol21:10
amber_nicApsu`: nope21:11
*** JoeBurke has quit IRC21:11
*** JoeBurke has joined #openstack21:11
iscsiwahly: try look into configuration files, see authentication parameters21:11
Apsu`amber_nic: Then that's your issue. You can ping from the network namespace, so the source IP will be the one dnsmasq uses.21:11
iscsiwahly: or try http://openstack.redhat.com/Quickstart21:12
Apsu`amber_nic: Run "ip netns" to list the namespaces; you should see a qdhcp* namespace, and possibly a qrouter* namespace if you're using l3-agents21:12
*** dhellmann has quit IRC21:12
wahlyiscsi: aside from an rpm install, there wasn't realy any configuration done for qpidd. i did see qpid_user/qpid_pass (as guest/guest) in the nova configs, but that doesn't seem to be working21:12
wahlynot sure if i need to create that user, or how to verify if it even exists21:13
Apsu`amber_nic: Then, run "ip netns exec <namespace> ip a" to list the interfaces/IPs in that namespace.21:13
*** cococafe has joined #openstack21:13
*** johnthetubaguy has quit IRC21:13
*** mikedawson has quit IRC21:13
iscsiwahly: dig into keystone, I guess21:13
*** bdavenport has quit IRC21:13
Apsu`amber_nic: Find the one that has the IP you're using for DHCP (.97 from your iptables), then run "ping x.x.x.98" instead of "ip a" at the end of the namespace command.21:13
Apsu`amber_nic: Likewise you can ssh from inside the namespace.21:14
amber_nicI have 4 namespaces: qrouter-37622bd4-7242-4cfa-84a6-cf7fe8decbb921:14
amber_nicqdhcp-3acb6679-79bd-4791-be46-7d46b6e9093d21:14
amber_nicqdhcp-3b3d77f0-bb35-41aa-a303-f7cb6b2f4f6521:14
amber_nicqdhcp-410e0960-442d-41fb-9e57-4a1e8c362bbb21:14
Apsu`amber_nic: Don't paste large chunks of text into the channel, please.21:14
amber_nicSorry21:14
Apsu`I gave you steps to follow to figure out which namespace is the right one :)21:14
*** bdavenport has joined #openstack21:14
Apsu`You can also identify it by the network your instance is connected to with the CIDR you care about21:14
Apsu`quantum net-list, copy the UUID of the appropriate net, and use the "qdhcp-<that UUID>" namespace21:15
*** grizzle has quit IRC21:15
cococafeam trying to install ceilometer in DevStack.  does anyone know where it gets installed or is it done outside of the startup21:16
cococafe?21:16
*** grizzle has joined #openstack21:16
amber_nicI typed: "ip netns exec qdhcp-3acb6679-79bd-4791-be46-7d46b6e9093d ip a"21:17
*** networkstatic has quit IRC21:18
amber_nicThis is the output: http://paste.openstack.org/show/38540/21:18
amber_nicWhat should I do next?21:18
*** grizzle_ has joined #openstack21:19
*** rohit404 has quit IRC21:19
*** jnoller has quit IRC21:20
*** ryanpetr_ has quit IRC21:20
*** msgodf has quit IRC21:20
*** lloydde has quit IRC21:21
*** grizzle has quit IRC21:21
Apsu`amber_nic: I told you :) ping from the namespace next.21:21
*** grizzle_ is now known as grizzle21:21
Apsu`amber_nic: The command you typed was "ip netns exec <namespace> <command>", with "ip a" as the command.21:21
*** martine_ has quit IRC21:21
Apsu`amber_nic: So... replace "ip a" with "ping <instance IP>"21:22
*** krtaylor has joined #openstack21:22
Apsu`amber_nic: It should succeed. And given your other security group rule for TCP port 22, you should be able to ssh too.21:22
amber_nicYes I did so but still haven't ping.21:22
*** danblack has joined #openstack21:22
*** malone has quit IRC21:23
*** KyleMacDonald has quit IRC21:23
Apsu`amber_nic: You tried "ip netns exec qdhcp-3acb6679-79bd-4791-be46-7d46b6e9093d ping 190.99.97.98"?21:23
*** flaper87 has quit IRC21:23
*** jecarey_ has quit IRC21:23
*** otherwiseguy has joined #openstack21:23
amber_nicExactly Apsu but still host unreachable.21:24
*** esheffield has quit IRC21:24
*** hartsocks has quit IRC21:24
*** sandywalsh has joined #openstack21:24
Apsu`amber_nic: Check "nova console-log <instance-name>", make sure your instance actually Got an IP from DHCP.21:25
Apsu`Just because nova assigned it doesn't mean the instance communicated successfully.21:25
wahlyiscsi: thanks for your help. i decided to just disable auth for qpidd. everything works now :) i'll worry about securing things later21:25
*** jdaggett has quit IRC21:26
*** grizzle has quit IRC21:26
*** coredump has joined #openstack21:26
amber_nicERROR: No server with a name or ID of 'qdhcp-3acb6679-79bd-4791-be46-7d46b6e9093d' exists.21:26
Apsu`amber_nic: Instance name, not namespace :)21:26
Apsu`"nova list" to view them21:26
amber_nicOk21:27
kbringardanyone running ceilometer?21:27
amber_nichttp://paste.openstack.org/show/38547/21:28
coredumpSo I have 2 instances running on the same host, that also runs a nova-network. I also have a floating IP address that is associated to instance1. Every machine on my network can connect to a certain UDP port on instance1, but not the instance that is running on the same host. I guess there's some firewall shenanigan going on because they are on the same host, did anyone ever see something like that?21:29
*** vlad_starkov has joined #openstack21:29
Apsu`amber_nic: Yep, I was right. Didn't get an IP from DHCP. There's your problem.21:29
*** jasondotstar has quit IRC21:29
Apsu`amber_nic: In order to help further, I'll need a lot more info about the host network/quantum config. I can tell you what to paste, if you're game.21:30
amber_nicSure.21:30
*** Vek__ is now known as Vek21:30
*** jpfuentes2 has quit IRC21:30
*** Vek has quit IRC21:30
*** Vek has joined #openstack21:30
*** lorin1 has quit IRC21:31
*** souvik has joined #openstack21:31
Apsu`amber_nic: Actually... before we do that... might be a simple fix. Is this ubuntu?21:32
amber_nicYes21:32
*** vlad_starkov has quit IRC21:32
*** melmoth has quit IRC21:33
Apsu`amber_nic: Using the ovs plugin?21:33
amber_nicYes21:33
Apsu`Cool21:33
Apsu`Start with: pkill dnsmasq; pkill quantum-ns; restart quantum-dhcp-agent; restart quantum-l3-agent21:34
*** danblack has quit IRC21:34
Apsu`Reboot your instance, watch the console-log, see if the "ciinfo" line for eth0 gets an actual IP21:34
amber_nicOk21:35
done__hi folks! in grizzly, does a compute node need any kind of database connection? I'm seeing some sql_connection settings mentioned in the "Compute Node" installation instructions.21:35
Apsu`amber_nic: If you're lucky, it's just dnsmasq not correctly reloading for providing the lease21:35
*** sgordon has quit IRC21:36
amber_nicciinfo: eth0  : 1 190.99.97.98    255.255.255.0   fa:16:3e:bc:81:68!21:36
amber_nic:)21:36
Apsu`Voila.21:37
Apsu`Now you should be able to ping/ssh from the namespace21:37
Apsu`(or externally)21:37
*** spideyman has joined #openstack21:37
Apsu`(assuming your subnet has a gateway and is on a provider network)21:37
*** lloydde has joined #openstack21:38
amber_nicStill no ping and no ssh.21:38
*** choforo has quit IRC21:38
*** rnorwood1 has joined #openstack21:38
Apsu`amber_nic: From in the namespace?21:39
Apsu`amber_nic: Maybe get on the console over VNC (or through horizon), we can test a couple things.21:39
*** ixx has joined #openstack21:39
iscsiwahly: np21:40
amber_nicVNC doesn't work.21:40
amber_nicWhat's from in the namespace?21:40
Apsu`amber_nic: ping/ssh?21:40
*** ixx has left #openstack21:40
Apsu`VNC not working is bothersome :P21:40
iscsiamber_nic: security group?21:41
*** devvesa has quit IRC21:41
amber_nicdefault: 2 rules TP from 22 to 22 and ICMP from 1 to 255.21:41
iscsifrom -1 to -121:42
Apsu`The security groups are correct, iptables looks good21:43
Apsu`http://paste.openstack.org/show/38538/21:43
amber_niciscsi: changed it but still no connection21:43
Apsu`amber_nic: Are you still testing ping/ssh from the namespace, using ip netns exec?21:43
*** rnorwood1 has quit IRC21:44
*** UICTamale1 has quit IRC21:44
*** UICTamale1 has joined #openstack21:44
*** cocoadaemon has quit IRC21:44
*** rnorwood1 has joined #openstack21:44
amber_nicNo, just regular ping from the ssh session on the Openstack SingleNode21:44
amber_nicAnd from my win box.21:44
*** lbrower has quit IRC21:45
*** morazi has quit IRC21:45
*** mtreinish has quit IRC21:45
Apsu`amber_nic: Try it from the namespace, please, just like before.21:45
amber_nicOk21:45
Apsu`Talking to it externally is potentially a separate problem to solve21:45
Apsu`But we know it can talk to the DHCP server, now21:45
Apsu`So if we talk From the DHCP server's IP (in the namespace), it should work.21:45
amber_nicCool I got ping from there!21:46
*** mjfork has quit IRC21:46
Apsu`Woot!21:46
amber_nicip netns exec qdhcp-3acb6679-79bd-4791-be46-7d46b6e9093d ping 190.99.97.9821:46
Apsu`Should be able to ssh into it as well, then.21:46
kbringardyou can also do "ip netns exec qdhcp-3acb6679-79bd-4791-be46-7d46b6e9093d bash" to just go into the namespace and then ping, ssh, etc from there21:47
kbringardFYI21:47
Apsu`True21:47
*** arif-ali has joined #openstack21:47
*** leseb has quit IRC21:47
Apsu`Was hoping to reduce the complexity of spawning a shell and remembering which one you're in by sticking with one-liners, but namespaced shell = win21:48
kbringardlol, totally21:48
Apsu`:D21:48
*** redbeard2 has quit IRC21:48
kbringardyea, sorry, wasn't trying to cause confusion21:48
Apsu`Nah, s'all good21:48
amber_nicssh ubuntu@190.99.97.98 Read from socket failed: Connection reset by peer21:48
*** jdaggett has joined #openstack21:49
Apsu`amber_nic: Did you run "ip netns exec qdhcp-3acb6679-79bd-4791-be46-7d46b6e9093d ssh ubuntu@190.99.97.98"?21:49
dsockwellcan you run tcpdump on all the involved interfaces?21:49
dsockwellsee where the RST packet originates21:49
amber_nicNow I did and I got connection reset by peer. It's ubuntu 12.04 precise img.21:49
amber_nicWhen I ran stackops it did the same to me.21:50
amber_nicDon't know if it's an issue with that image.21:50
Apsu`amber_nic: Possible. Do you have another image to test spinning up? cirros perhaps?21:52
amber_nicYes, I'll do that. Go down with ubuntu and try cirros.21:52
*** alop has quit IRC21:52
*** ryanpetrello has joined #openstack21:53
*** dhellmann has joined #openstack21:53
Apsu`Cool. Once you can ssh into it (assuming you can), assuming this subnet has a gateway, and you've got a provider bridge/network setup right, qrouter or directly, presumably then you can hit the VM from externally21:53
*** Egyptian[Laptop] has joined #openstack21:54
Apsu`If not you can unwind those issues one at a time21:55
*** acabrera has quit IRC21:55
*** coredump has quit IRC21:55
amber_nicThanks for all guys!21:56
amber_nicBye!21:56
*** amber_nic has quit IRC21:56
*** cody-somerville has joined #openstack21:57
*** alop has joined #openstack21:57
*** jpn has quit IRC21:57
*** eglynn has quit IRC21:58
*** chang1p has quit IRC21:59
*** henrynash has quit IRC21:59
*** Egyptian[Laptop] has quit IRC22:00
*** Egyptian[Laptop] has joined #openstack22:00
*** lbrower has joined #openstack22:01
*** lbrower has joined #openstack22:01
*** odyssey4me has quit IRC22:02
*** doublerr_ has joined #openstack22:02
*** acabrera has joined #openstack22:02
*** odyssey4me has joined #openstack22:02
*** doublerr has quit IRC22:03
*** doublerr_ is now known as doublerr22:03
*** rnirmal has quit IRC22:03
*** FunnyLookinHat has quit IRC22:04
*** maoy has quit IRC22:04
*** odyssey4me2 has joined #openstack22:04
*** fsimonce has quit IRC22:04
*** Egyptian[Laptop] has quit IRC22:05
*** cococafe has quit IRC22:05
*** robbiew has joined #openstack22:07
*** obondarev_ has joined #openstack22:07
*** odyssey4me has quit IRC22:07
*** cococafe has joined #openstack22:07
done__hi!  anyone know what the setting is to tell nova-compute to use nova-conductor instead of trying to access the database directly?22:07
*** obondarev has quit IRC22:07
*** cococafe has quit IRC22:07
*** cococafe has joined #openstack22:07
*** zehicle_at_dell has quit IRC22:08
*** dhellmann has quit IRC22:08
*** acabrera has quit IRC22:10
*** cafedecade has joined #openstack22:10
*** vartom112 has quit IRC22:11
*** davelowe has quit IRC22:11
*** MarkAtwood has joined #openstack22:12
*** goldyfruit has quit IRC22:12
*** jhesketh has quit IRC22:13
*** goldyfruit has joined #openstack22:14
*** jcarter has quit IRC22:14
*** GusM has joined #openstack22:15
*** arif-ali has quit IRC22:15
*** prad_ has quit IRC22:16
*** zeus` has quit IRC22:16
*** fzylogic has joined #openstack22:17
*** pixelbeat has joined #openstack22:17
*** stoned75 has quit IRC22:18
*** dhellmann has joined #openstack22:18
*** markpeek has joined #openstack22:18
*** dhellmann has quit IRC22:19
*** obondarev_ has quit IRC22:19
*** Egyptian[Laptop] has joined #openstack22:19
*** hemna_ has joined #openstack22:20
*** danblack has joined #openstack22:20
*** cmark has joined #openstack22:21
*** obondarev has joined #openstack22:21
*** hemna has quit IRC22:22
*** goldyfruit has quit IRC22:23
*** arrsim has quit IRC22:23
*** backjlack has quit IRC22:24
*** e_steve has quit IRC22:24
*** choforo has joined #openstack22:24
*** chang1p has joined #openstack22:25
*** datsun180b has quit IRC22:26
*** rnorwood2 has joined #openstack22:27
*** jcarter has joined #openstack22:27
*** jakewarner_ has joined #openstack22:28
*** doublerr has quit IRC22:28
*** rnorwood1 has quit IRC22:28
*** yidclare has quit IRC22:28
*** doublerr has joined #openstack22:29
*** ryanpetrello has quit IRC22:30
*** jakewarner has quit IRC22:30
*** jakewarner_ is now known as jakewarner22:30
*** zodiak has joined #openstack22:31
*** KaZeR has joined #openstack22:31
KaZeRhi there22:31
*** aliguori has quit IRC22:35
*** eharney has quit IRC22:37
*** meghal has joined #openstack22:37
*** meghal has left #openstack22:38
*** dims has quit IRC22:42
done__hi!  seems like an empty room22:43
*** cafedecade has quit IRC22:43
*** kebray has quit IRC22:44
*** fnaval has quit IRC22:44
*** souvik has quit IRC22:47
*** StarBeast has quit IRC22:49
*** goldyfruit has joined #openstack22:49
*** devoid has quit IRC22:50
*** terriyu has quit IRC22:50
*** monst has quit IRC22:52
*** dtx00ff_ has joined #openstack22:53
*** dtx00ff has quit IRC22:53
*** KLevenstein has quit IRC22:53
*** Guest47743 is now known as cheez0r22:56
*** ljt has joined #openstack22:57
*** hashfail has joined #openstack22:57
ljtG'day. I realise it's impossible to answer this definitively, but does anyone know the rough # of OpenStack deployments?22:58
*** doublerr has quit IRC23:00
*** ssalevan_ has quit IRC23:01
*** jakewarner_ has joined #openstack23:01
*** ffio_ has joined #openstack23:03
*** ffio has quit IRC23:03
*** jakewarner has quit IRC23:04
*** jakewarner_ is now known as jakewarner23:04
*** cdub has quit IRC23:04
*** pmathews has quit IRC23:04
*** dmz has quit IRC23:05
*** goldyfruit has quit IRC23:06
*** Jahkeup__ has joined #openstack23:07
*** sudorandom has quit IRC23:07
*** Trixboxer has quit IRC23:07
*** fifieldt has joined #openstack23:08
*** desai has joined #openstack23:08
*** Jahkeup_ has quit IRC23:08
*** electrichead has quit IRC23:09
*** jergerber has quit IRC23:10
*** jhesketh has joined #openstack23:11
*** blamar has quit IRC23:12
*** lloydde has quit IRC23:12
*** jergerber has joined #openstack23:13
*** datajerk has quit IRC23:14
*** goldyfruit has joined #openstack23:14
*** markpeek has quit IRC23:16
*** jakewarner_ has joined #openstack23:17
*** kbrierly has quit IRC23:17
*** dmz has joined #openstack23:17
*** mdomsch_ has joined #openstack23:19
*** mdomsch_ has quit IRC23:19
*** jrex_laptop has joined #openstack23:19
*** jakewarner has quit IRC23:20
*** jakewarner_ is now known as jakewarner23:20
*** ljt has quit IRC23:20
*** zz_tott has quit IRC23:22
*** bdpayne has quit IRC23:23
*** jakewarner_ has joined #openstack23:23
*** zz_tott has joined #openstack23:23
*** vladimir3p has joined #openstack23:23
*** cococafe has quit IRC23:24
*** odyssey4me has joined #openstack23:24
*** afazekas has joined #openstack23:24
*** afazekas has quit IRC23:25
*** blamar has joined #openstack23:25
*** vladimir3p has quit IRC23:25
*** odyssey4me2 has quit IRC23:25
*** MarkAtwood has quit IRC23:25
*** jakewarner has quit IRC23:26
*** jakewarner_ is now known as jakewarner23:26
*** branen has quit IRC23:26
*** jrex_laptop has quit IRC23:27
*** dims has joined #openstack23:29
*** iswc has quit IRC23:29
*** thansen has quit IRC23:29
*** alop has quit IRC23:29
*** krtaylor has quit IRC23:30
*** alop has joined #openstack23:31
*** hartsocks has joined #openstack23:31
*** egallen has quit IRC23:31
*** Ruetobas has joined #openstack23:31
*** odyssey4me has quit IRC23:33
*** KaZeR has quit IRC23:33
*** ayoung has joined #openstack23:34
*** jhesketh has quit IRC23:36
*** danger_fo is now known as danger_fo_away23:36
*** gcheng has left #openstack23:36
*** jvrbanac has quit IRC23:36
*** rcleere has quit IRC23:37
*** alop has quit IRC23:37
*** lloydde has joined #openstack23:38
*** spideyman has quit IRC23:39
*** ayoung has quit IRC23:39
*** gdubreui has joined #openstack23:40
*** KaZeR_ has joined #openstack23:41
*** colinmcnamara has quit IRC23:42
*** giulivo has quit IRC23:42
*** majeff has quit IRC23:42
*** KaZeR_ is now known as KaZeR23:43
*** jakewarner_ has joined #openstack23:44
*** zerick has quit IRC23:44
*** racker_markd has joined #openstack23:45
*** jcarter has quit IRC23:45
*** otherwiseguy has quit IRC23:46
*** desai has quit IRC23:47
*** grizzle has joined #openstack23:47
*** jakewarner has quit IRC23:47
*** jakewarner_ is now known as jakewarner23:47
*** miclorb has joined #openstack23:49
*** tserong_ has joined #openstack23:49
*** jdaggett has quit IRC23:50
*** sushils has quit IRC23:50
*** wajiii is now known as wajiii-afk23:52
*** tserong has quit IRC23:53
*** giroro_ has joined #openstack23:54
*** lloydde has quit IRC23:55
*** ravikumar_hp has quit IRC23:56
*** hashfail has quit IRC23:56
*** sushils has joined #openstack23:57
*** Ruetobas has quit IRC23:57
*** bknudson has quit IRC23:58
*** robbiew has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!