Judd,
this is a great idea... actually so great, that some folks @Dell and
OpsCode, me included, have been working on it.
Have a peek on :
https://github.com/opscode/openstack-cookbooks/tree/master/cookbooks
This effort is also being included into Crowbar (take a peek here:
at 11:35 AM, Judd Maltin j...@newgoliath.com wrote:
Hi Andi,
Indeed, the swift recipes hadn't been updated since mid 2010, so I pushed
forward with my own.
Thanks!
-judd
On Thu, Apr 28, 2011 at 10:03 AM, andi abes andi.a...@gmail.com wrote:
Judd,
this is a great idea... actually so
I was trying to better understand Swift, and to that end I thought it would
be interesting to log the requests coming in and out of the different
servers. Alas, I'm new to Paste (and very rusty on the little python I knew)
- hence I've having problems achieving this.
I found the following:
, but I'm dedicating
Sunday to this. So if you have time Sunday, that would be best to catch up
via IRC, IM or voice.
Having a node classifier of some sort is critical.
-Judd
Judd Maltin
+1 917 882 1270
Happiness is a straight line and a goal. -fn
On Apr 28, 2011, at 11:59, andi abes andi.a
I'm not sure who wins in git vs. bzr ease of use... guess it depends on how
quickly I get over this error:
$ bzr pull lp:swift/1.3
bzr: ERROR: Cannot lock LockDir(
http://bazaar.launchpad.net/~swift/swift/omega-1.3.0-7/.bzr/branch/lock):
Transport oper
ation not possible: http does not support
-compute. and
the swift cluster is built (because of async nature of multi-node
deployments, it might require a few chef-client runs while the ring files
are generated and pushed around.
have a spin. eager to hear comments.
On Mon, May 2, 2011 at 11:36 AM, andi abes andi.a...@gmail.com wrote
I would expect that the API of each service would have to interpret the role
assigned to a user in the context of that service - roles for swift nova
glance quantum etc would probably carry very different semantics.
So, to my understanding, key stone provides authentication and user
information -
to know to
check with an authorization subsystem whether the incoming request is
allowed based on the who is making the request and the 3-tuple mentioned
previously.
Jason
*From:* andi abes [mailto:andi.a...@gmail.com]
*Sent:* Wednesday, June 15, 2011 9:18 AM
*To:* Rouault, Jason (Cloud
not to beat my own drum here... but also check out dell.com/openstack
(I happen to be working on that)
On Thu, Jun 23, 2011 at 12:15 PM, Stephen Spector
stephen.spec...@openstack.org wrote:
Fahad:
Thank you for your interest in OpenStack and considering this technology as
the Public Cloud
I'm assuming you've the following:
- you installed cactus (the 1.3 release)
- you're playing both the provider role (administrating users and such) and
the end user (creating files and containers).
I that is the case, then you should also look into swauth.
This section of the guide could help:
as shareable among
different implementations (Ex: compute:admin)
Thoughts?
And comments inline ZNS
From: Rouault, Jason (Cloud Services) jason.roua...@hp.com
Date: Thu, 16 Jun 2011 19:54:22 +
To: andi abes andi.a...@gmail.com
Cc: Ziad Sawalha ziad.sawa...@rackspace.com,
openstack
Yuriy,
a use-case scenario for keystone would be a service provider servicing
large customers with their own authentication infrastructure (e.g. LDAP/
AD etc). Obviously, different tenants have different instances. To
authenticate a user, the correct authentication back end must be selected.
is
one single central repository, DB, LDAP or may be some billing system. If we
have two isolated systems, we should consider using two separate auth
services.
Kind regards, Yuriy.
On Fri, Jul 15, 2011 at 21:40, andi abes andi.a...@gmail.com wrote:
Yuriy,
a use-case scenario for keystone
, at 15:07, andi abes andi.a...@gmail.com wrote:
I guess sfdc disagrees with you - they allow e.g Dell to use a single sign
on to authenticate to their services - as a @dell user, you can login with
the same email/password to internal resources as well as sfdc ones. ( in
case it's not obvious - you
hmm - they definitely muddy the waters, but provide a really cool feature
set:
Amazon EBS Snapshots
Amazon EBS provides the ability to back up point-in-time snapshots of your
data to Amazon S3 for durable recovery. Amazon EBS snapshots are incremental
backups, meaning that only the blocks on the
can take crowbar for a spin in a virutal environment or on bare metal
hw.
take it for a spin, drop us a note.
(p.s. it subsumes (by a lot) the previous swift-only recipes from this
thread, and includes some bug fixes)
On Mon, May 23, 2011 at 1:41 PM, andi abes andi.a...@gmail.com wrote
I think John pointed you to some info on how to achieve the the hierarchical
structure requirement
The other requirement was around syncing remote clusters:
Swift Diablo (1.4) can probably be suited for the scenario you're
describing:
See the spec for Multi cluster sync for swift [1] and
the
is this just to avoid the need for the long lived token, or are there other
issues in dash/keystone integration?
2011/9/28 Devin Carlen devin.car...@gmail.com
We should have a drop of Keystone by the end of the week that fully support
Diablo. This will fix the Dashboard issues as well.
I'm a bit confused with the state of affairs for swift diablo.
I've seen notes and checkins for backports to nova from essex, and found
https://launchpad.net/~openstack-release/+archive/2011.3 which seems to be
the repo for the patched packages...
Is that right? Is this the location that will be
Just a quick shout out to folks in the Boston and NE area - we're putting
the final touch on a meetup on 11/29 in Lexington MA at 6pm.
checkout the meetup page, and throw in topics for the unconference
discussion here (or just write them on the board that evening):
take a look at this: https://github.com/notmyname/slogging
It collects usage information for swift, including storage usage and
traffic statistics.
(it has pretty good documentation - just build from source in doc/)
On Wed, Nov 30, 2011 at 6:45 PM, pf shineyear shin...@gmail.com wrote:
my
You could try to use the container sync added in 1.4.4.
The scheme would be to setup 2 separate clusters in each data center.
Obviously requests will be satisfied locally.
You will also setup your containers identically, and configure them to
sync, to make sure data is available in both DC's.
sorry, should have included the link:
http://swift.openstack.org/overview_container_sync.html
On Tue, Dec 6, 2011 at 2:49 PM, andi abes andi.a...@gmail.com wrote:
You could try to use the container sync added in 1.4.4.
The scheme would be to setup 2 separate clusters in each data center
I'm getting really funny ( :( ) results trying to get swift to work w/
keystone.
A few questions (about keystone 2012.1)
a) does the swift middleware work with v1.0 or 2.0 auth?
b) are folks using swift-keystone2 or the middleware bundled with keystone
(auth_token + swift_auth).
c) when trying
reading the script..
you either have it in localrc file as *ADMIN_PASSWORD, *or you were
prompted during install to type it in.
*
*
On Thu, Dec 15, 2011 at 1:38 PM, sn alaya...@gmail.com wrote:
and also the default username of openstack that has been installed using
devstack script...
On
Does the swift proxy enforce SSL connections if it's configured with a
cert/key file? Or is it assumed that there's an external entity performing
that?
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
See http://wiki.openstack.org/GerritWorkflow
On Jan 3, 2012, at 8:11, Akira Yoshiyama akirayoshiy...@gmail.com wrote:
Hi,
I hope to merge my patches to upstream. What should I do?
Thank you,
Akira Yoshiyama
2012/01/03 21:32 adrian_f_sm...@dell.com:
Is it possible to use Swift’s S3 API if
I'm finding this thread a bit confusing. You're comparing offered SERVICES
to Software. While some of the details of the software will dictate what's
possible, some are heavily dependent on how you deploy the swift software,
and what kind of deployment decisions you (or your service provider)
nice reply ;)
On Fri, Jan 20, 2012 at 6:35 PM, Pete Zaitcev zait...@redhat.com wrote:
On Fri, 20 Jan 2012 15:17:32 -0500
Nikolaus Rath nikol...@rath.org wrote:
Thanks! So there is no way to reliably get the most-recent version of an
object under all conditions.
If you bend the
You would need to have the following occur, to make your scenario plausible:
* you write the object, which places it on a majority of the replica nodes
(i.e. 2 out of 3)
* replication is slowly churning away, but doesn't quite catch up
* both the nodes that have the updated data fail
apologies for possible duplicates - some replies last night were from the
wrong email account (and didn't make it to the list)
On Mon, Feb 6, 2012 at 9:37 PM, Jesse Andrews anotherje...@gmail.comwrote:
I know that the RCB deploy team works with the Crowbar team on chef
recipes for that
I've seen a few folks apologizing for top-posts and a few pokes in some
threads about folks with less than intelligent email clients.
Which leads me to ask: are there any pointers to best practices on the
mailing list?
(replying to the right message in a thread, ideally inline with the context
-
On Tue, Feb 7, 2012 at 1:33 PM, Jay Pipes jaypi...@gmail.com wrote:
On 02/07/2012 01:08 PM, andi abes wrote:
I've seen a few folks apologizing for top-posts and a few pokes in
some threads about folks with less than intelligent email clients.
Which leads me to ask: are there any pointers
On Wed, Feb 8, 2012 at 7:59 AM, Chmouel Boudjnah chmo...@openstack.orgwrote:
Mark McLoughlin mar...@redhat.com writes:
I wrote this some time ago:
https://fedorahosted.org/rhevm-api/wiki/Email_Guidelines
If it's helpful, I'm happy to move it across to the OpenStack wiki
+1
+1 to
To summarize the intent:
- we add a string UID to the database schema
- For deployments with the integer ID, we copy that into the UID field
- For deployments where the ID is a string (cactus and pre-Diablo) we
copy that into the UID field
- We use the UID field in the
On Wed, Feb 8, 2012 at 11:42 AM, Jay Pipes jaypi...@gmail.com wrote:
On 02/08/2012 01:40 AM, Monty Taylor wrote:
On 02/07/2012 08:32 PM, Jay Pipes wrote:
Well, in my original email I proposed using the NTT PF Lab branch point
for the stable/diablo branch of the upstream chef repos. If we
On Sun, Feb 19, 2012 at 8:57 PM, Ed Leafe ed.le...@rackspace.com wrote:
On Feb 19, 2012, at 12:53 PM, Mark Washenberger wrote:
For this reason, whatever name we choose I would hope we prefix it with
compute- (i.e. compute-zone or compute-cell) so that we aren't letting
language trick us out
You can find details on configuring swift here:
http://swift.openstack.org/deployment_guide.html
To get packages for RHEL, it seems that the fedora project packages,
http://rpmfind.net/linux/rpm2html/search.php?query=openstack-swiftsubmit=Search+...system=arch=
hth,
a
On Sun, Feb 19, 2012 at
Essex-4 is almost here, and once it comes out, you’d probably want to
install it.
A bunch of folks from across the country and across Dell, Rackspace,
OpsCode, Niciria, Nokia and more, will be getting together on an
IRC/Skype (and in person) to hash out deployment issues to get the
major
On Tue, Feb 28, 2012 at 2:44 PM, Jay Pipes jaypi...@gmail.com wrote:
cc'ing list, since it's a great question and good follow-up conversation to
have...
On 02/28/2012 02:32 PM, andi abes wrote:
Interesting. Would you mind doing a code review on Mary Newby's Swift All
in
One cookbook
2012/2/29 Dan Wendlandt d...@nicira.com:
2012/2/29 Jérôme Gallard jeronimo...@gmail.com
Hi Jason,
Thank you very much for your answer.
The problem about the wrong ip address is solved now! Perhaps this
octect should be excluded automatically by nova at the network
creation time?
I
I like where this discussion is going. So
I'd like to throw a couple more sticks into the fire, around test/SAIO
vs production deployments..
* Swift cookbooks (and in general) should not assume control of system
side resources, but rather use the appropriate cookbook (or better
yet definition if
Maybe a happy path exists, between efficiency and correctness ;) I
think the Rsync is probably a good comparison to the use case at hand
(it identifies identical blocks between the source and target, and
only sends deltas of the wire).
It combines a quick has to identify candidates that might be
On Sun, Mar 11, 2012 at 3:49 PM, Caitlin Bestler
caitlin.best...@nexenta.com wrote:
Restricting fingerprinting to blocks would make block level compares
possible, but as I noted on an earlier reply
it would *always* require that the blocks be transferred to perform the
calculation. It is a
bugs as I'm not getting anywhere fast with what
I currently *think* are the correct steps.
Cheers,
Kev
On 13 March 2012 11:27, andi abes andi.a...@gmail.com wrote:
Hi Kevin, sorry for the hard time you're having.
However, most of the methods you described, are NOT meant for
production
Hi Salman,
a) it might be more appropriate to post Crowbar specific questions on
the crowbar mailing list... crow...@lists.us.dell.com
b) The errors you're seeing seem to be cause the node failing to
communicate with the admin node (it did for a while, then something
changed...). That code is
Caitlin, I'm curious what were the use cases and concerns in DCB?
If my memory serves me right (from rate limiting at L2 level) the main
issues are guaranteeing QoS, effective bandwidth usage, fair
allocation of memory buffer space. All of those goals damaged pretty
badly if congestion occurs and
than the traditional bandwidth only rate limits.
On Fri, Mar 30, 2012 at 2:40 PM, Caitlin Bestler
caitlin.best...@nexenta.com wrote:
Caitlin Replies inline /Caitlin
-Original Message-
From: andi abes [mailto:andi.a...@gmail.com]
Sent: Friday, March 30, 2012 11:32 AM
To: Jay Pipes
During the summit, there was an API proposal for service insertion,
present by folks from Clear path.
Does anyone have links?
a.
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe :
So the ability to create a snapshot, rollback to a snapshot and to create a
new snapshot that references a snapshot as its base are strong
candidates for abilities to design for volume drivers. Any device that did
not support this capability would simply state so. Snapshotting would
then
On Wed, Apr 25, 2012 at 3:39 PM, Caitlin Bestler
caitlin.best...@nexenta.com wrote:
andi.abes asked:
Would this also be applicable to the ephemeral instance storage?
An ephemeral instance is essentially a non-persistent clone of a snapshot
image.
that's an interesting perspective. But
the full setup is described here: http://wiki.openstack.org/GerritJenkinsGithub
On Fri, Apr 27, 2012 at 2:42 PM, John Postlethwait
john.postlethw...@nebula.com wrote:
If you are asking how it becomes approved the answer is that two
core-contributors of the specific project need to manually
swift updates the account and container listings as containers and
objects are created.
So, if what you're looking for is a list of objects or containers...
your can just query the proxy: A GET on the tenant url would return
the list of containers, a GET on a container will return the list of
Quick note about our next meetup, morrow 5/16, @ Harvard University.
If you happen to be in Boston area, come eat some pizza, get to know
some cool folks and have some Openstack shop-talk
(if you're commuting, fear not the parking. There are instructions on
getting cheap parking at Harvard
Remember that when an object is written to swift, it's not written
just to the object server, the container and account servers are
updated as well... the container for object listings (and timestmaps)
and the account for overall statistics. Also, the proxy ensures a
quorum for the newly written
-- Forwarded message --
From: andi abes andi.a...@gmail.com
Date: Mon, Aug 27, 2012 at 1:54 PM
Subject: nova-compute on VirtualBox with qemu
To: openstack-operat...@lists.openstack.org
I'm using Essex on virtual box, and am having some issues getting
nova-compute to not hate me
late to the party... but I'll dabble.
On Mon, Aug 27, 2012 at 12:21 PM, Chris Wright chr...@sous-sol.org wrote:
* rob_hirschf...@dell.com (rob_hirschf...@dell.com) wrote:
We've been discussing using Open vSwitch as the basis for non-Quantum Nova
Networking deployments in Folsom. While not
I've heard of folks having issues with UDP checksum not being
generated correctly, and having success by running the command below
on the nova compute nodes.
iptables -A POSTROUTING -t mangle -p udp --dport 68 -j CHECKSUM --checksum-fill
I'm not sure if this affects the versions you're working
On Wed, Sep 5, 2012 at 1:01 PM, Dan Wendlandt d...@nicira.com wrote:
On Wed, Sep 5, 2012 at 5:23 AM, andi abes andi.a...@gmail.com wrote:
late to the party... but I'll dabble.
On Mon, Aug 27, 2012 at 12:21 PM, Chris Wright chr...@sous-sol.org wrote:
* rob_hirschf...@dell.com (rob_hirschf
Has a fix for this been backported to essex/stable branch?
On Thu, Aug 30, 2012 at 11:35 AM, Russell Bryant rbry...@redhat.com wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
This advisory included the wrong CVE. It was CVE-2012-3540. Sorry
about that.
On 08/30/2012 11:10 AM,
is the plan going forward to announce these on friday afternoons?
On Fri, Sep 28, 2012 at 4:50 PM, Russell Bryant rbry...@redhat.com wrote:
OpenStack Security Advisory: 2012-016
CVE: CVE-2012-4457
Date: September 28, 2012
Title: Token authorization for a user in a disabled tenant is allowed
On Tue, Oct 23, 2012 at 12:16 PM, Emre Sokullu e...@groups-inc.com wrote:
Folks,
This is the 3rd day and I see no or very little (kb.s) change with the new
disks.
Could it be normal, is there a long computation process that takes time
first before actually filling newly added disks?
Or
On Sat, Nov 3, 2012 at 9:30 AM, Aniruddha Khadkikar
askhadki...@gmail.com wrote:
@Rob - excellent points. It would be good to know in real life
deployments how often are configurations changed so the question of
network interruptions are handled in a befitting way. It is my
impression that
On Mon, Feb 25, 2013 at 5:46 PM, Shawn Starr shawn.st...@rogers.com wrote:
On Monday, February 25, 2013 10:34:11 PM Jeremy Stanley wrote:
On 2013-02-25 06:20 -0500 (-0500), Shawn Starr wrote:
[...]
I see no options on how to control what nova-compute nodes can be
'provisioned' into
Is there a listing of the summint conference (not the design part at [1])
available somewhere? (there used to be the vote for speakers list, but that
now is gone).
[1] http://summit.openstack.org/
___
Mailing list: https://launchpad.net/~openstack
Post
65 matches
Mail list logo