Re: [Openstack] Network setup - Swift / keystone location and configuraton?

[Brian Ipsen]

Hi,



Just to clear things up:


I am still trying to figure out how the different components interact, and 
exactly what the different parameters on the keystone command does. Once I get 
that understanding, things will probably be much easier :)
[Reply]
Yes , that's the keypoint. You must understand the workflow.
My assumption is your proxy pipline is using tokenauth and keystone even 
swift-auth .
The full request workflow is :
client send username/password --> keystone verify it --> return token and 
service(swift) url to client --> client use returned url and token to 
swift-proxy --> proxy verify the token by asking keystone immediately ---> 
keystone confirmed it with several information includes role etc. --> the 
request pass the token-auth filter --> check the role with swift-auth 
middleware --> do the operation for user --> returned the result(status)

So the client contacts the keystone server first(directly) - on the URL it is 
listening on (NAT'ed from public network)? Keystone returns tokenand service 
URL - and then the client connects to the proxy using the token ?

Regards
Brian

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] Instance blocked when migrate between host.

[Lei Zhang]

Hi all,

Today, I am testing the openstack migrate function. ( not live migration)
After run the command `nova migrate`, the status of the instance became
`Verify Resize` and never changed itself. Event though I found this
instance has been started on another instance.

If is this a bug? Or I forgot something to configure?

-- 
Lei Zhang

Blog: http://jeffrey4l.github.com
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Instance blocked when migrate between host.

[Wolfgang Hennerbichler]

Hi,

same issue here, after changing the flavor. never returned to normal,
had to go into mysql once again.

On 01/21/2013 10:08 AM, Lei Zhang wrote:
> Hi all, 
> 
> Today, I am testing the openstack migrate function. ( not live migration)
> After run the command `nova migrate`, the status of the instance became
> `Verify Resize` and never changed itself. Event though I found this
> instance has been started on another instance. 
> 
> If is this a bug? Or I forgot something to configure? 
> 
> -- 
> Lei Zhang
> 
> Blog: http://jeffrey4l.github.com
> twitter/weibo: @jeffrey4l
> 
> 
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
> 


-- 
DI (FH) Wolfgang Hennerbichler
Software Development
Unit Advanced Computing Technologies
RISC Software GmbH
A company of the Johannes Kepler University Linz

IT-Center
Softwarepark 35
4232 Hagenberg
Austria

Phone: +43 7236 3343 245
Fax: +43 7236 3343 250
wolfgang.hennerbich...@risc-software.at
http://www.risc-software.at

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Instance blocked when migrate between host.

[Lei Zhang]

Hi Wolfgang,

Actually, there is a better way.
```
nova reset-state --active 
```
But I still doubt there is some bug here. The `instance-0001_resize`
folder is never deleted.


On Mon, Jan 21, 2013 at 5:12 PM, Wolfgang Hennerbichler <
wolfgang.hennerbich...@risc-software.at> wrote:

> Hi,
>
> same issue here, after changing the flavor. never returned to normal,
> had to go into mysql once again.
>
> On 01/21/2013 10:08 AM, Lei Zhang wrote:
> > Hi all,
> >
> > Today, I am testing the openstack migrate function. ( not live migration)
> > After run the command `nova migrate`, the status of the instance became
> > `Verify Resize` and never changed itself. Event though I found this
> > instance has been started on another instance.
> >
> > If is this a bug? Or I forgot something to configure?
> >
> > --
> > Lei Zhang
> >
> > Blog: http://jeffrey4l.github.com
> > twitter/weibo: @jeffrey4l
> >
> >
> > ___
> > Mailing list: https://launchpad.net/~openstack
> > Post to : openstack@lists.launchpad.net
> > Unsubscribe : https://launchpad.net/~openstack
> > More help   : https://help.launchpad.net/ListHelp
> >
>
>
> --
> DI (FH) Wolfgang Hennerbichler
> Software Development
> Unit Advanced Computing Technologies
> RISC Software GmbH
> A company of the Johannes Kepler University Linz
>
> IT-Center
> Softwarepark 35
> 4232 Hagenberg
> Austria
>
> Phone: +43 7236 3343 245
> Fax: +43 7236 3343 250
> wolfgang.hennerbich...@risc-software.at
> http://www.risc-software.at
>
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>



-- 
Lei Zhang

Blog: http://jeffrey4l.github.com
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Instance blocked when migrate between host.

[Julie Pichon]

Hi Lei,

"Lei Zhang"  wrote:
> Today, I am testing the openstack migrate function. ( not live
> migration)
> After run the command `nova migrate`, the status of the instance
> became
> `Verify Resize` and never changed itself. Event though I found this
> instance has been started on another instance.
> 
> If is this a bug? Or I forgot something to configure?

Migrate is a 2-steps process: once the instance reaches the VERIFY_RESIZE 
stage, you need to run nova resize-confirm if you're happy with the new 
instance (this will delete the old one), or nova resize-revert if you want to 
go back to the old instance (this will delete the new one). Migrate and resize 
use the same mechanism, hence the naming of these 2 commands.

There probably should be something to indicate this in the 'nova help migrate' 
command, since this is something many people seem to get caught in when first 
running migrate - myself included.

Regards,

Julie

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] Devstack with ESXi Compute Node

[Balamurugan V G]

Hi,

I started with a single node Devstack(with quantum) on a Ubuntu12.0 server
and used a Flat network. It worked fine as I could launch instances and
cover many use cases.

Now I want to added a second compute node to this stack but it has to be an
ESXi. So I launched a Ubuntu12.10 VM (using VMWare client) on ESXi and
installed Devstack on it aswell(I intended to not start the services which
are not needed on it). I then copied over the nova.conf from the first all
in one stack node to this and modified the my_ip, VMWare fields etc as per
http://docs.openstack.org/trunk/openstack-compute/admin/content/vmware.html.

I then modified the devstack/stack-screenrc file to hold just these lines
below and started rejoin-stack.sh.

screen -t q-agt bash
stuff "python /opt/stack/quantum/bin/quantum-openvswitch-agent
--config-file /etc/quantum/quantum.conf --config-file
/etc/quantum/plugins/openvswitch/ovs_quantum_plugin.ini^M"
screen -t n-cpu bash
stuff "cd /opt/stack/nova && sg libvirtd /opt/stack/nova/bin/nova-compute^M"


But I get the following error:

root@ubuntu1210srvr:/home/stack/devstack# 2013-01-21 22:55:02 INFO
nova.virt.driver [-] Loading compute driver 'libvirt.LibvirtDriver'
2013-01-21 22:55:02 INFO nova.manager [-] Skipping periodic task
_periodic_update_dns because its interval is negative
2013-01-21 22:55:03 INFO nova.network.driver [-] Loading network driver
'nova.network.linux_net'
2013-01-21 22:55:03 INFO nova.openstack.common.rpc.common
[req-06c8f346-9939-429c-8f1a-8b7ebfa127b0 None None] Connected to AMQP
server on 10.5.12.20:5672
2013-01-21 22:55:03 CRITICAL nova [req-06c8f346-9939-429c-8f1a-8b7ebfa127b0
None None] *Remote error: UnsupportedRpcVersion Specified RPC version,
1.22, not supported by this endpoint.*
[u'Traceback (most recent call last):\n', u'  File
"/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 277, in
_process_data\nrval = self.proxy.dispatch(ctxt, version, method,
**args)\n', u'  File
"/opt/stack/nova/nova/openstack/common/rpc/dispatcher.py", line 152, in
dispatch\nraise rpc_common.UnsupportedRpcVersion(version=version)\n',
u'UnsupportedRpcVersion: Specified RPC version, 1.22, not supported by this
endpoint.\n'].
2013-01-21 22:55:03 TRACE nova Traceback (most recent call last):
2013-01-21 22:55:03 TRACE nova   File "/opt/stack/nova/bin/nova-compute",
line 59, in 
2013-01-21 22:55:03 TRACE nova db_allowed=False)
2013-01-21 22:55:03 TRACE nova   File "/opt/stack/nova/nova/service.py",
line 525, in create
2013-01-21 22:55:03 TRACE nova db_allowed=db_allowed)
2013-01-21 22:55:03 TRACE nova   File "/opt/stack/nova/nova/service.py",
line 413, in __init__
2013-01-21 22:55:03 TRACE nova
self.conductor_api.wait_until_ready(context.get_admin_context())
2013-01-21 22:55:03 TRACE nova   File
"/opt/stack/nova/nova/conductor/api.py", line 320, in wait_until_ready
2013-01-21 22:55:03 TRACE nova self.ping(context, '1.21 GigaWatts',
timeout=timeout)
2013-01-21 22:55:03 TRACE nova   File
"/opt/stack/nova/nova/conductor/api.py", line 328, in ping
2013-01-21 22:55:03 TRACE nova return
self.conductor_rpcapi.ping(context, arg, timeout)
2013-01-21 22:55:03 TRACE nova   File
"/opt/stack/nova/nova/conductor/rpcapi.py", line 82, in ping
2013-01-21 22:55:03 TRACE nova return self.call(context, msg,
version='1.22', timeout=timeout)
2013-01-21 22:55:03 TRACE nova   File
"/opt/stack/nova/nova/openstack/common/rpc/proxy.py", line 80, in call
2013-01-21 22:55:03 TRACE nova return rpc.call(context,
self._get_topic(topic), msg, timeout)
2013-01-21 22:55:03 TRACE nova   File
"/opt/stack/nova/nova/openstack/common/rpc/__init__.py", line 109, in call
2013-01-21 22:55:03 TRACE nova return _get_impl().call(cfg.CONF,
context, topic, msg, timeout)
2013-01-21 22:55:03 TRACE nova   File
"/opt/stack/nova/nova/openstack/common/rpc/impl_kombu.py", line 765, in call
2013-01-21 22:55:03 TRACE nova rpc_amqp.get_connection_pool(conf,
Connection))
2013-01-21 22:55:03 TRACE nova   File
"/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 379, in call
2013-01-21 22:55:03 TRACE nova rv = list(rv)
2013-01-21 22:55:03 TRACE nova   File
"/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 347, in __iter__
2013-01-21 22:55:03 TRACE nova raise result
2013-01-21 22:55:03 TRACE nova RemoteError: Remote error:
UnsupportedRpcVersion Specified RPC version, 1.22, not supported by this
endpoint.
2013-01-21 22:55:03 TRACE nova [u'Traceback (most recent call last):\n',
u'  File "/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 277, in
_process_data\nrval = self.proxy.dispatch(ctxt, version, method,
**args)\n', u'  File
"/opt/stack/nova/nova/openstack/common/rpc/dispatcher.py", line 152, in
dispatch\nraise rpc_common.UnsupportedRpcVersion(version=version)\n',
u'UnsupportedRpcVersion: Specified RPC version, 1.22, not supported by this
endpoint.\n'].
2013-01-21 22:55:03 TRACE nova
root@ubuntu1210srvr:/opt/stack/nova#

This is my nova.conf lines related to vmware.

Re: [Openstack] Instance blocked when migrate between host.

[Lei Zhang]

Hi Julie

Thank you very much.

I found nothing about these two command, and I am appreciate for adding
some help information in `nova help migrate`.

On Mon, Jan 21, 2013 at 5:28 PM, Julie Pichon  wrote:

> Hi Lei,
>
> "Lei Zhang"  wrote:
> > Today, I am testing the openstack migrate function. ( not live
> > migration)
> > After run the command `nova migrate`, the status of the instance
> > became
> > `Verify Resize` and never changed itself. Event though I found this
> > instance has been started on another instance.
> >
> > If is this a bug? Or I forgot something to configure?
>
> Migrate is a 2-steps process: once the instance reaches the VERIFY_RESIZE
> stage, you need to run nova resize-confirm if you're happy with the new
> instance (this will delete the old one), or nova resize-revert if you want
> to go back to the old instance (this will delete the new one). Migrate and
> resize use the same mechanism, hence the naming of these 2 commands.
>
> There probably should be something to indicate this in the 'nova help
> migrate' command, since this is something many people seem to get caught in
> when first running migrate - myself included.
>
> Regards,
>
> Julie
>



-- 
Lei Zhang

Blog: http://jeffrey4l.github.com
twitter/weibo: @jeffrey4l
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] Openstack shared storage. Examples and considerations?

[zebra z zebra]

Hi.



I'm looking into reference architectures for OpenStack deployments for a
project taking place soonish. I'm looking to build an OpenStack environment
with an as yet undetermined (but might scale to thousands) compute core
count. It'll most likely be based on 10GbE networking constructs.



I've been tasked with looking at backend storage architecture for the
platform, as well as the bigger picture of how it'll all fit together ­ but
first and foremost, there are a lot of guidelines and requirements for
functionality and a minimum level of service I'd like to meet. One such
minimum requirement is true live migration that my company has told me is a
must from an availability perspective.



After looking over the majority of the documentation that I can find, it
would seem to me, the path of least resistance here is to use a shared
storage mechanism. I've read about two kinds of migration, one being block
based, the other being "true" live.



I've talked to a few experienced openstack users and three of them suggest
that the shared storage path is the sensible path for what we're
undertaking, but I'd like to dig deeper here, as I've been given a lot of
comments by others suggesting that such a platform or mechanism (shared
storage array/SAN style architecture) isn't scalable ­ opting for local
storage inter-node instead.



Personally, I'm not convinced of this entirely, and I perceive that with
modern storage arrays and with some of the controller technology we have
available to us now (think: extremely high performance controllers,
inter-array tiering mechanisms including "hot" or "warm" SSD cache
mechanisms) a shared storage methodology could work very well, be easier to
manage and ultimately be a success.



I've been told by several people that if I used shared storage in an effort
to get to a point where live migration is a possibility and is sane, I leave
myself open to flooding the shared storage backend if I boot up lots of VM's
at once and a lack of IO scalability because my storage is "bound" to what a
storage array is capable of [so, to that end, growing it, scaling it and
making it perform could be expensive], but, again, I'm not sure that's
entirely true due to the significant caching that might take place
internally.



I'm very interested in understanding what others have done here and how they
have tackled such scenarios.



Thank  you for your time, openstack list.



--z




___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Devstack with ESXi Compute Node

[Balamurugan V G]

Looks like its due to difference in the devstack src versions in the two
nodes (i am trying to update the other old node and try again).

-Balu

On Mon, Jan 21, 2013 at 3:02 PM, Balamurugan V G wrote:

> Hi,
>
> I started with a single node Devstack(with quantum) on a Ubuntu12.0 server
> and used a Flat network. It worked fine as I could launch instances and
> cover many use cases.
>
> Now I want to added a second compute node to this stack but it has to be
> an ESXi. So I launched a Ubuntu12.10 VM (using VMWare client) on ESXi and
> installed Devstack on it aswell(I intended to not start the services which
> are not needed on it). I then copied over the nova.conf from the first all
> in one stack node to this and modified the my_ip, VMWare fields etc as per
> http://docs.openstack.org/trunk/openstack-compute/admin/content/vmware.html
> .
>
> I then modified the devstack/stack-screenrc file to hold just these lines
> below and started rejoin-stack.sh.
>
> screen -t q-agt bash
> stuff "python /opt/stack/quantum/bin/quantum-openvswitch-agent
> --config-file /etc/quantum/quantum.conf --config-file
> /etc/quantum/plugins/openvswitch/ovs_quantum_plugin.ini^M"
> screen -t n-cpu bash
> stuff "cd /opt/stack/nova && sg libvirtd
> /opt/stack/nova/bin/nova-compute^M"
>
>
> But I get the following error:
>
> root@ubuntu1210srvr:/home/stack/devstack# 2013-01-21 22:55:02 INFO
> nova.virt.driver [-] Loading compute driver 'libvirt.LibvirtDriver'
> 2013-01-21 22:55:02 INFO nova.manager [-] Skipping periodic task
> _periodic_update_dns because its interval is negative
> 2013-01-21 22:55:03 INFO nova.network.driver [-] Loading network driver
> 'nova.network.linux_net'
> 2013-01-21 22:55:03 INFO nova.openstack.common.rpc.common
> [req-06c8f346-9939-429c-8f1a-8b7ebfa127b0 None None] Connected to AMQP
> server on 10.5.12.20:5672
> 2013-01-21 22:55:03 CRITICAL nova
> [req-06c8f346-9939-429c-8f1a-8b7ebfa127b0 None None] *Remote error:
> UnsupportedRpcVersion Specified RPC version, 1.22, not supported by this
> endpoint.*
> [u'Traceback (most recent call last):\n', u'  File
> "/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 277, in
> _process_data\nrval = self.proxy.dispatch(ctxt, version, method,
> **args)\n', u'  File
> "/opt/stack/nova/nova/openstack/common/rpc/dispatcher.py", line 152, in
> dispatch\nraise rpc_common.UnsupportedRpcVersion(version=version)\n',
> u'UnsupportedRpcVersion: Specified RPC version, 1.22, not supported by this
> endpoint.\n'].
> 2013-01-21 22:55:03 TRACE nova Traceback (most recent call last):
> 2013-01-21 22:55:03 TRACE nova   File "/opt/stack/nova/bin/nova-compute",
> line 59, in 
> 2013-01-21 22:55:03 TRACE nova db_allowed=False)
> 2013-01-21 22:55:03 TRACE nova   File "/opt/stack/nova/nova/service.py",
> line 525, in create
> 2013-01-21 22:55:03 TRACE nova db_allowed=db_allowed)
> 2013-01-21 22:55:03 TRACE nova   File "/opt/stack/nova/nova/service.py",
> line 413, in __init__
> 2013-01-21 22:55:03 TRACE nova
> self.conductor_api.wait_until_ready(context.get_admin_context())
> 2013-01-21 22:55:03 TRACE nova   File
> "/opt/stack/nova/nova/conductor/api.py", line 320, in wait_until_ready
> 2013-01-21 22:55:03 TRACE nova self.ping(context, '1.21 GigaWatts',
> timeout=timeout)
> 2013-01-21 22:55:03 TRACE nova   File
> "/opt/stack/nova/nova/conductor/api.py", line 328, in ping
> 2013-01-21 22:55:03 TRACE nova return
> self.conductor_rpcapi.ping(context, arg, timeout)
> 2013-01-21 22:55:03 TRACE nova   File
> "/opt/stack/nova/nova/conductor/rpcapi.py", line 82, in ping
> 2013-01-21 22:55:03 TRACE nova return self.call(context, msg,
> version='1.22', timeout=timeout)
> 2013-01-21 22:55:03 TRACE nova   File
> "/opt/stack/nova/nova/openstack/common/rpc/proxy.py", line 80, in call
> 2013-01-21 22:55:03 TRACE nova return rpc.call(context,
> self._get_topic(topic), msg, timeout)
> 2013-01-21 22:55:03 TRACE nova   File
> "/opt/stack/nova/nova/openstack/common/rpc/__init__.py", line 109, in call
> 2013-01-21 22:55:03 TRACE nova return _get_impl().call(cfg.CONF,
> context, topic, msg, timeout)
> 2013-01-21 22:55:03 TRACE nova   File
> "/opt/stack/nova/nova/openstack/common/rpc/impl_kombu.py", line 765, in call
> 2013-01-21 22:55:03 TRACE nova rpc_amqp.get_connection_pool(conf,
> Connection))
> 2013-01-21 22:55:03 TRACE nova   File
> "/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 379, in call
> 2013-01-21 22:55:03 TRACE nova rv = list(rv)
> 2013-01-21 22:55:03 TRACE nova   File
> "/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 347, in __iter__
> 2013-01-21 22:55:03 TRACE nova raise result
> 2013-01-21 22:55:03 TRACE nova RemoteError: Remote error:
> UnsupportedRpcVersion Specified RPC version, 1.22, not supported by this
> endpoint.
> 2013-01-21 22:55:03 TRACE nova [u'Traceback (most recent call last):\n',
> u'  File "/opt/stack/nova/nova/openstack/common/rpc/amqp.py", line 277, in
> _process_data\nrval = self.proxy.dispatch(ctxt, v

Re: [Openstack] Tenant Isolation - Virtualbox

[Kevin Jackson]

Hi Roni,
VirtualBox should honour the VLAN tagging, but it seems its related to the
driver type used: e1000 strips the VLAN tag it seems.  I don't recall
having this issue, but if I get time I'll be happy to spin an environment
up and have a play.

See this post:
http://humbledown.org/virtualbox-intel-vlan-tag-stripping.xhtml

Regards,
Kev


On 20 January 2013 15:32, Ronivon Costa  wrote:

> Hello,
>
> I am playing with Openstack and VlanManager in a Virtualbox machine. Is it
> tenant isolation supposed to work in this setup?
>
> I have several tenants, and the instances for them have landed on
> different subnets (11.0.1.x, 11.0.2.x, 11.0.3.x, etc).
>
> It is possible to ping and ssh other tenant instances from any tenant!
>
> Is this the correct behaviour for a virtualized deployement ?
>
> Cheers,
> Roni
>
>
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
>


-- 
Kevin Jackson
@itarchitectkev
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] Instances and ARP

[Joe Warren-Meeks]

Hi guys,

I've got openstack essex configured with vlanmanager and an external
gateway and all my networking runs ok generally.

However, I'm trying to setup Linux HA on two instances. They run on
separate compute nodes and can see each other just fine. hb_takeover and
hb_standby works perfectly. The problem is that nothing outside of the
instance with the HA IP address can connect to it.

It seems that something is ignoring the arp is-at from the instance. Doing
a tcpdump on the compute node's bridged network and the instance's eth0 I
can arp requests and responses fine for its main IP, but when I try to get
to the alias address, I see arp requests only on the compute side. On the
instance side I see it responding, but this doesn't show up on the bridged
interface on the compute node.

Has anyone seen this before? My google-fu is failing to find anything.

Kind regards

 -- joe.
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Network setup - Swift / keystone location and configuraton?

[Hugo]

Exactly

從我的 iPhone 傳送

Brian Ipsen  於 2013/1/21 下午4:55 寫道：

> Hi,
>  
> Just to clear things up:
>  
> I am still trying to figure out how the different components interact, and 
> exactly what the different parameters on the keystone command does. Once I 
> get that understanding, things will probably be much easier J
> [Reply] 
> Yes , that's the keypoint. You must understand the workflow. 
> My assumption is your proxy pipline is using tokenauth and keystone even 
> swift-auth .
> The full request workflow is :
> client send username/password --> keystone verify it --> return token and 
> service(swift) url to client --> client use returned url and token to 
> swift-proxy --> proxy verify the token by asking keystone immediately ---> 
> keystone confirmed it with several information includes role etc. --> the 
> request pass the token-auth filter --> check the role with swift-auth 
> middleware --> do the operation for user --> returned the result(status) 
>  
> So the client contacts the keystone server first(directly) - on the URL it is 
> listening on (NAT'ed from public network)? Keystone returns tokenand service 
> URL - and then the client connects to the proxy using the token ?
>  
> Regards
> Brian
>  
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Instances and ARP

[Belmiro Moreira]

Hi Joe,
nova network filtering rules are preventing ip-spoofing.
There is a proposal to modify this behavior when using HA in instances. 
See thread: 
[openstack-dev] VM level HA. Changes in firewall.py question.

You can check with:
virsh nwfilter-dumpxml nova-base

cheers,
Belmiro

On Jan 21, 2013, at 12:25 PM, Joe Warren-Meeks  
wrote:

> Hi guys,
> 
> I've got openstack essex configured with vlanmanager and an external gateway 
> and all my networking runs ok generally.
> 
> However, I'm trying to setup Linux HA on two instances. They run on separate 
> compute nodes and can see each other just fine. hb_takeover and hb_standby 
> works perfectly. The problem is that nothing outside of the instance with the 
> HA IP address can connect to it.
> 
> It seems that something is ignoring the arp is-at from the instance. Doing a 
> tcpdump on the compute node's bridged network and the instance's eth0 I can 
> arp requests and responses fine for its main IP, but when I try to get to the 
> alias address, I see arp requests only on the compute side. On the instance 
> side I see it responding, but this doesn't show up on the bridged interface 
> on the compute node.
> 
> Has anyone seen this before? My google-fu is failing to find anything.
> 
> Kind regards
> 
>  -- joe.
> 
> 
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp


___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

[Daniel P. Berrange]

On Sun, Jan 20, 2013 at 01:46:58PM +0800, harryxiyou wrote:
> Hi all,
> 
> I read the source code of Openstack Nova branch source codes but i
> can not find the  standard libvirt library packages, which i think
> Nova uses libvirt
> interfaces they are from standard libvirt library to attach Sheepdog(or 
> others)
> volumes to QEMU. If i add a new block storage driver for standard libvirt,
> i have to update these libvirt library packages in Openstack Nova brahch.
> Cloud anyone give me some suggestions? Thanks in advance ;-)

The nova driver for talking to libvirt is in nova/virt/libvirt/

The libvirt code itself is not part of openstack, and available from
our website http://libvirt.org

Daniel
-- 
|: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org  -o- http://virt-manager.org :|
|: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Progress on wiki migration to Mediawiki

[Thierry Carrez]

Anne Gentle wrote:
> - Make the landing page mo' better. (Thierry Carrez, ttx) While we won't
> be able to have the migration make the columns on all the pages lovely,
> he can make the first page beautious again.

I pushed an optimized page at https://wiki-staging.openstack.org/wiki.
There is still an issue with uploading images (404 on whatever you
upload) so I could not add those. Would be great to fix that before we
flip the switch.

-- 
Thierry Carrez (ttx)
Release Manager, OpenStack

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

[harryxiyou]

On Mon, Jan 21, 2013 at 8:14 PM, Daniel P. Berrange  wrote:
[...]
> The nova driver for talking to libvirt is in nova/virt/libvirt/
>
Yup, i think so. Therefore, i also think nova driver in nova/virt/libvirt
has some relationships with libvirt code itself, right? Nova driver
send parameters to libvirt client(in Nova branch), then libvirt client
send these parameters to libvirt serever(libvirt code itself). How do
they(libvirt client and libvirt server) communicate with each other
in details? I wonder if they(libvirt client and libvirt server) are a whole
one in libvirt code itself. And Openstack just call libvirt client interfaces,
which Openstack just package libvirt code itself to be a library for calling.
Daniel, do you understand my meanings? Do you agree with me?

> The libvirt code itself is not part of openstack, and available from
> our website http://libvirt.org
Of course, Libvirt and Openstack are two independent and wonderful projects,
i love them very much ;-)

-- 
Thanks
Harry Wei

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

[Daniel P. Berrange]

On Tue, Jan 22, 2013 at 12:13:57AM +0800, harryxiyou wrote:
> On Mon, Jan 21, 2013 at 8:14 PM, Daniel P. Berrange  
> wrote:
> [...]
> > The nova driver for talking to libvirt is in nova/virt/libvirt/
> >
> Yup, i think so. Therefore, i also think nova driver in nova/virt/libvirt
> has some relationships with libvirt code itself, right? Nova driver
> send parameters to libvirt client(in Nova branch), then libvirt client
> send these parameters to libvirt serever(libvirt code itself). How do
> they(libvirt client and libvirt server) communicate with each other
> in details? I wonder if they(libvirt client and libvirt server) are a whole
> one in libvirt code itself. And Openstack just call libvirt client interfaces,
> which Openstack just package libvirt code itself to be a library for calling.

Nova simply uses the standard "libvirt" python module, which is a thin
python wrapper around the libvirt.so C library. This library talks to
the libvirtd server via a private RPC service. Nova only includes its
own custom libvirt integration code, the libvirt python module isn't
part of Nova.

Regards,
Daniel
-- 
|: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org  -o- http://virt-manager.org :|
|: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

[harryxiyou]

On Tue, Jan 22, 2013 at 12:20 AM, Daniel P. Berrange
 wrote:
[...]
> Nova simply uses the standard "libvirt" python module, which is a thin
> python wrapper around the libvirt.so C library.

I think so, but i wonder if the standard "libvirt" python module is
nova/virt/libvirt/driver.py?

> This library talks to the libvirtd server via a private RPC service. Nova
>only includes its own custom libvirt integration code, the libvirt python
>module isn't part of Nova.

But the libvirt python module is in the Nova branch. Why do you think it
is not a part of Nova? Is it part of libvirt code itself?

-- 
Thanks
Harry Wei

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

[Daniel P. Berrange]

On Tue, Jan 22, 2013 at 01:08:23AM +0800, harryxiyou wrote:
> On Tue, Jan 22, 2013 at 12:20 AM, Daniel P. Berrange
>  wrote:
> [...]
> > Nova simply uses the standard "libvirt" python module, which is a thin
> > python wrapper around the libvirt.so C library.
> 
> I think so, but i wonder if the standard "libvirt" python module is
> nova/virt/libvirt/driver.py?

That isn't the libvirt python module. That is Nova's libvirt integration
driver code.

Daniel
-- 
|: http://berrange.com  -o-http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org  -o- http://virt-manager.org :|
|: http://autobuild.org   -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org   -o-   http://live.gnome.org/gtk-vnc :|

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

[harryxiyou]

On Tue, Jan 22, 2013 at 1:10 AM, Daniel P. Berrange  wrote:
[...]
> That isn't the libvirt python module. That is Nova's libvirt integration
> driver code.

That is to say, libvirt.so is from standard libvirt code itself and libvirt
python module is from libvirt.so. They(libvirt.so and libvirt python module)
are part of libvirt. And Nova just uses libvirt integration driver codes.
But i wonder if they(libvirt integration codes and libvirt python module)
have any relationships? What and how do they have? Nova's libvirt integration
codes call libvirt python module, right?

-- 
Thanks
Harry Wei

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Problem running devstack / stack.sh

[Bhandaru, Malini K]

Greetings Dusan!

I am having similar issues and made no progress .. peeled the onion a bit.
Hope somebody else can help us. I posted a request on devstack' s launchpad 
site too.


1)  It helped making a copy of the sample localrc and placing in devstack 
home directory.

2)  The devstack stack.sh script created a stack user but directories such 
as /etc/keystone /etc/glance etc

Were owned by root, so it helped to using chown to make them stack user 
writable (I just made them writable)

3)  I even did not get fancy such as configuring for a real database or 
turning swift on etc, just a plain SQLite type keystone backend.

4)  The keystone service does not start up, thus the command to obtain it's 
service id returns an empty string, and thus the below call fails saying it is 
missing the service-id argument.

KEYSTONE_SERVICE=
+ keystone endpoint-create --region RegionOne --service_id --publicurl 
http://192.168.1.13:5000/v2.0 --adminurl http://192.168.1.13:35357/v2.0 
--internalurl http://192.168.1.13:5000/v2.0
usage: keystone endpoint-create [--region ] --service-id
 [--publicurl ]
[--adminurl ]
[--internalurl ]
keystone endpoint-create: error: argument --service-id/--service_id: expected 
one argument

5)  And with no service up, no end point created, other requests such as 
user, tenant etc create fail, the avalance effect.

From: openstack-bounces+malini.k.bhandaru=intel@lists.launchpad.net 
[mailto:openstack-bounces+malini.k.bhandaru=intel@lists.launchpad.net] On 
Behalf Of Dusan Dordevic
Sent: Sunday, January 20, 2013 7:36 AM
To: openstack@lists.launchpad.net
Subject: [Openstack] Problem running devstack / stack.sh

Hi,
I just downloaded fresh copy of devstack, and I am trying to run in on Ubuntu. 
12.04. I do have stack.sh problem, it seems to me like something related to 
Keystone and database, but I cannot find the problem. Any idea what it might be 
?
Here is full error dump:
./stack.sh
...
+ export OS_SERVICE_ENDPOINT=http://192.168.1.13:35357/v2.0
+ OS_SERVICE_ENDPOINT=http://192.168.1.13:35357/v2.0
+ create_keystone_accounts
++ keystone tenant-create --name admin
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ ADMIN_TENANT=
++ keystone user-create --name admin --pass sifra --email 
ad...@example.com
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ ADMIN_USER=
++ keystone role-create --name admin
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ ADMIN_ROLE=
+ keystone user-role-add --user_id --role_id --tenant_id
usage: keystone user-role-add --user-id  --role-id 
  [--tenant-id ]
keystone user-role-add: error: argument --user-id/--user_id: expected one 
argument
++ keystone tenant-create --name service
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ SERVICE_TENANT=
++ keystone role-create --name=Member
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ MEMBER_ROLE=
++ keystone role-create --name=anotherrole
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ ANOTHER_ROLE=
++ keystone tenant-create --name=invisible_to

[Openstack] Ok, how do I debug this problem?

[Christopher Smith]

So we have this four node Nova cluster running Essex.  It has worked fine, but 
we've added new network interfaces.  Openstack has not yet been configured to 
use them, but changes have been made that allows the system to come up and 
configure the network in a similar way to before.  Now, all of the services 
seem to be up and running, Rabbit is apparently happy as far as I can tell.  
Nova-scheduler and nova-compute are running and talking to Rabbit.  Now then, 
whenever I log into any nova node and boot an instance or ten, all instances 
get started on a single node; always the same node, never any attempt by any of 
the others to start an instance.  I thought this would be a Rabbit problem, but 
rabbit thinks it's doing fine on all nodes and the cluster is intact.  I've 
even tried completely rebuilding the Rabbit configuration, just in case.  If I 
stop services on the one working node, the other nodes don't even appear to 
receive messages from either themselves or each other, regardless of Rabbit's 
supposedly working state.

Any ideas?  Any clue how you would even test this to see what's happening?

Chris

-- 
Christopher Smith
Systems Engineer, Wolfram Research

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] Is nova-client thread safe ?

[Day, Phil]

Hi Folks,

Does anyone know if the nova-client python binding is written to be thread safe 
?

We saw some odd behavour when using it with multiple threads, and before 
digging deeper just thought I'd check if there were known issues, etc.

Thanks
Phil
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Is nova-client thread safe ?

[Jay Pipes]

On 01/21/2013 01:24 PM, Day, Phil wrote:
> Hi Folks,
> 
> Does anyone know if the nova-client python binding is written to be
> thread safe ? 
> 
> We saw some odd behavour when using it with multiple threads, and before
> digging deeper just thought I’d check if there were known issues, etc.

The client itself, as you know, just makes HTTP calls, so it's unlikely
that the client calls themselves are not thread-safe, as they don't have
any state associated with them.

The stuff that may not be thread-safe is wherever novaclient is saving
state. The only thing that does, AFAIK, are the two cache mechanisms --
the keyring token/mgmt_URL caching [1] and the file-based UUID cache
manager [2]. That's where I'd look to make thread-safe changes.

Best,
-jay

[1]
https://github.com/openstack/python-novaclient/blob/master/novaclient/client.py#L381
[2]
https://github.com/openstack/python-novaclient/blob/master/novaclient/base.py#L82

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Problem running devstack / stack.sh

[Dusan Dordevic]

Hi,

I solved a problem. It seems problem was that I previously ran stack.sh
that set up some passwords in MySQL for Keystone. When I re-run it, seems
that I provided different password.

What I've done is following:

-Deleted devstack
-dropped all MySQL databases
-downloaded devstack again
-run stack.sh

and it is working for me now.

Hope might help you as well.

Best regards,
Dusan


On Mon, Jan 21, 2013 at 5:59 PM, Bhandaru, Malini K <
malini.k.bhand...@intel.com> wrote:

>  ** **
>
> Greetings Dusan!
>
> ** **
>
> I am having similar issues and made no progress .. peeled the onion a bit.
> 
>
> Hope somebody else can help us. I posted a request on devstack’ s
> launchpad site too.
>
> ** **
>
> **1)  **It helped making a copy of the sample localrc and placing in
> devstack home directory.
>
> **2)  **The devstack stack.sh script created a stack user but
> directories such as /etc/keystone /etc/glance etc 
>
> Were owned by root, so it helped to using chown to make them stack user
> writable (I just made them writable)
>
> **3)  **I even did not get fancy such as configuring for a real
> database or turning swift on etc, just a plain SQLite type keystone backend.
> 
>
> **4)  **The keystone service does not start up, thus the command to
> obtain it’s service id returns an empty string, and thus the below call
> fails saying it is missing the service-id argument.
>
> KEYSTONE_SERVICE=
> + keystone endpoint-create --region RegionOne --service_id --publicurl
> http://192.168.1.13:5000/v2.0 --adminurl 
> http://192.168.1.13:35357/v2.0--internalurl
> http://192.168.1.13:5000/v2.0
> usage: keystone endpoint-create [--region ] --service-id
>  [--publicurl ]
> [--adminurl ]
> [--internalurl ]
> keystone endpoint-create: error: argument --service-id/--service_id:
> expected one argument
>
> **5)  **And with no service up, no end point created, other requests
> such as user, tenant etc create fail, the avalance effect.
>
> ** **
>
> *From:* 
> openstack-bounces+malini.k.bhandaru=intel@lists.launchpad.net[mailto:
> openstack-bounces+malini.k.bhandaru=intel@lists.launchpad.net] *On
> Behalf Of *Dusan Dordevic
> *Sent:* Sunday, January 20, 2013 7:36 AM
> *To:* openstack@lists.launchpad.net
> *Subject:* [Openstack] Problem running devstack / stack.sh
>
> ** **
>
> Hi,
>
> I just downloaded fresh copy of devstack, and I am trying to run in on
> Ubuntu. 12.04. I do have stack.sh problem, it seems to me like something
> related to Keystone and database, but I cannot find the problem. Any idea
> what it might be ?
>
> Here is full error dump:
>
> ./stack.sh
> ...
> + export OS_SERVICE_ENDPOINT=http://192.168.1.13:35357/v2.0
> + OS_SERVICE_ENDPOINT=http://192.168.1.13:35357/v2.0
> + create_keystone_accounts
> ++ keystone tenant-create --name admin
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected error prevented the server from fulfilling your request.
> (OperationalError) (1045, \"Access denied for user 'root'@'localhost'
> (using password: YES)\") None None", "code": 500, "title": "Internal Server
> Error"}}. (HTTP 500)
> + ADMIN_TENANT=
> ++ keystone user-create --name admin --pass sifra --email
> ad...@example.com
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected error prevented the server from fulfilling your request.
> (OperationalError) (1045, \"Access denied for user 'root'@'localhost'
> (using password: YES)\") None None", "code": 500, "title": "Internal Server
> Error"}}. (HTTP 500)
> + ADMIN_USER=
> ++ keystone role-create --name admin
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected error prevented the server from fulfilling your request.
> (OperationalError) (1045, \"Access denied for user 'root'@'localhost'
> (using password: YES)\") None None", "code": 500, "title": "Internal Server
> Error"}}. (HTTP 500)
> + ADMIN_ROLE=
> + keystone user-role-add --user_id --role_id --tenant_id
> usage: keystone user-role-add --user-id  --role-id 
>   [--tenant-id ]
> keystone user-role-add: error: argument --user-id/--user_id: expected one
> argument
> ++ keystone tenant-create --name service
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected error prevented the server from fulfilling your request.
> (OperationalError) (1045, \"Access denied for user 'root'@'localhost'
> (using password: YES)\") None None", "code": 500, "title": "Internal Server
> Error"}}. (HTTP 500)
> + SERVICE_TENANT=
> ++ keystone role-create --name=Member
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable

Re: [Openstack] Progress on wiki migration to Mediawiki

[Ryan Lane]

Image location is fixed and the redirects are also in. Note that the
redirects are set up for https://wiki.openstack.org, so they aren't
currently testable (though I did manually change the redirect temporarily
to test it). The redirects have the following behavior:

  wiki.openstack.org/Article -> wiki.openstack.org/wiki/Article

All articles should redirect properly, except for /wiki and /w, if they
exist.

- Ryan


On Mon, Jan 21, 2013 at 6:13 AM, Thierry Carrez wrote:

> Anne Gentle wrote:
> > - Make the landing page mo' better. (Thierry Carrez, ttx) While we won't
> > be able to have the migration make the columns on all the pages lovely,
> > he can make the first page beautious again.
>
> I pushed an optimized page at https://wiki-staging.openstack.org/wiki.
> There is still an issue with uploading images (404 on whatever you
> upload) so I could not add those. Would be great to fix that before we
> flip the switch.
>
> --
> Thierry Carrez (ttx)
> Release Manager, OpenStack
>
> ___
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@lists.launchpad.net
> Unsubscribe : https://launchpad.net/~openstack
> More help   : https://help.launchpad.net/ListHelp
>
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] vm can not get ip

[sam lee]

I install openstack folsom on ubuntu 12.04 following this guide
https://github.com/mseknibilel/OpenStack-Folsom-Install-guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst.
Everything is ok util run an instance.  I check the nova console log, it
show that "cloud-setup: checking
http://169.254.169.254/2009-04-04/meta-data/instance-id
wget: can't connect to remote host (169.254.169.254): Network is
unreachable, ...", and i don't use namespace. I am a newbie for
openstack. Appreciate
all the help
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] vm can not get ip

[sam lee]

the following are my dhcp-agent configure and dnsmasq info.

root@network:/home/openstack# ps -ef | grep dnsmasq

nobody2299 1  0 Jan21 ?00:00:00 /usr/sbin/dnsmasq
--no-hosts --no-resolv --strict-order --bind-interfaces
--interface=tapc71e5285-a0 --except-interface=lo --domain=openstacklocal
--pid-file=/var/lib/quantum/dhcp/93e695f6-5dae-41b1-8a92-2bce8cb0e785/pid
--dhcp-hostsfile=/var/lib/quantum/dhcp/93e695f6-5dae-41b1-8a92-2bce8cb0e785/host
--dhcp-optsfile=/var/lib/quantum/dhcp/93e695f6-5dae-41b1-8a92-2bce8cb0e785/opts
--dhcp-script=/usr/bin/quantum-dhcp-agent-dnsmasq-lease-update
--leasefile-ro --dhcp-range=set:tag0,50.50.1.0,static,120s

root  2301  2299  0 Jan21 ?00:00:00 /usr/sbin/dnsmasq
--no-hosts --no-resolv --strict-order --bind-interfaces
--interface=tapc71e5285-a0 --except-interface=lo --domain=openstacklocal
--pid-file=/var/lib/quantum/dhcp/93e695f6-5dae-41b1-8a92-2bce8cb0e785/pid
--dhcp-hostsfile=/var/lib/quantum/dhcp/93e695f6-5dae-41b1-8a92-2bce8cb0e785/host
--dhcp-optsfile=/var/lib/quantum/dhcp/93e695f6-5dae-41b1-8a92-2bce8cb0e785/opts
--dhcp-script=/usr/bin/quantum-dhcp-agent-dnsmasq-lease-update
--leasefile-ro --dhcp-range=set:tag0,50.50.1.0,static,120s
root  9854  4475  0 10:44 pts/100:00:00 grep --color=auto dnsmasq
root@network:/home/openstack#

root@network:/home/openstack# grep -v "#" /etc/quantum/dhcp_agent.ini
[DEFAULT]
state_path = /var/lib/quantum
interface_driver = quantum.agent.linux.interface.OVSInterfaceDriver
dhcp_driver = quantum.agent.linux.dhcp.Dnsmasq
use_namespaces = False
root_helper = sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf
root@network:/home/openstack#

root@network:/var/lib/quantum/dhcp# ovs-vsctl show
d120debb-b01b-4b9a-b824-5e7e23fa1cd4
Bridge br-int
Port "tap9338c64b-13"
tag: 4095
Interface "tap9338c64b-13"
type: internal
Port "qr-ca596884-61"
tag: 1
Interface "qr-ca596884-61"
type: internal
Port "tap063c55b9-17"
tag: 4095
Interface "tap063c55b9-17"
type: internal
Port br-int
Interface br-int
type: internal
Port "tap0dcaeb82-30"
tag: 4095
Interface "tap0dcaeb82-30"
type: internal
Port "tapc71e5285-a0"
tag: 1
Interface "tapc71e5285-a0"
type: internal
Port "int-br-eth1"
Interface "int-br-eth1"
Bridge "br-eth1"
Port "phy-br-eth1"
Interface "phy-br-eth1"
Port "eth0"
Interface "eth0"
Port "br-eth1"
Interface "br-eth1"
type: internal
Bridge br-ex
Port br-ex
Interface br-ex
type: internal
Port "qg-d5d39934-28"
Interface "qg-d5d39934-28"
type: internal
Port "eth1"
Interface "eth1"
ovs_version: "1.4.0+build0"



2013/1/22 sam lee 

> I install openstack folsom on ubuntu 12.04 following this guide
> https://github.com/mseknibilel/OpenStack-Folsom-Install-guide/blob/VLAN/2NICs/OpenStack_Folsom_Install_Guide_WebVersion.rst.
> Everything is ok util run an instance.  I check the nova console log, it
> show that "cloud-setup: checking
> http://169.254.169.254/2009-04-04/meta-data/instance-id
> wget: can't connect to remote host (169.254.169.254): Network is
> unreachable, ...", and i don't use namespace. I am a newbie for
> openstack. Appreciate all the help
>
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

[harryxiyou]

On Tue, Jan 22, 2013 at 9:21 AM, longeek  wrote:
> Hi friends,
>
Hi Meng,

> the python interface of libvirt maybe help you, because openstack uses it in
> nova/virt/libvirt/

If openstack use it direactly, how to call these interface effectively? I think
Nova should place libvirt python module to its source codes directory tree,
then he can call these interfaces. Therefore, i cannot find the libvirt python
module in Nova branch.

Daniel said  libvirt.so is from standard libvirt code itself and libvirt
python module is from libvirt.so. They(libvirt.so and libvirt python module)
are part of libvirt. And Nova just uses libvirt integration driver codes.
But i wonder if they(libvirt integration codes and libvirt python module)
have any relationships? What and how do they have? Nova's libvirt integration
codes call libvirt python module, right? Where does Nova place libvirt python
module? How to call libvirt python module?



-- 
Thanks
Harry Wei

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] using Win AD authentication as keystone backend

[Liu Wenmao]

hello all:

My company use Windows AD(active directory) authentication for internal
user login, is it possible to integrate the current authentication with
keystone backend, so that we do not extra user/password maintaining. Hope
Openstack Folsom has an easy and stable solution.

thanks


Wenmao Liu
NSFOCUS
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

[Openstack] which is the level of unit test cases should be covered

[Xiazhihui (Hashui, IT)]

Hi friends,

 I want to upload a volume driver, right now I'm writing unit test case 
code ( it's also need to be uploaded).

 And I do not know the requirements of the unit test code. Which is the 
level of unit test cases in my unit test code should be covered: Function 
Coverage, Condition coverage, Decision Coverage, Statement Coverage or others? 
Or should I write what I think needs?

   Appreciate Your Help !

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] which is the level of unit test cases should be covered

[Robert Collins]

On 22 January 2013 16:37, Xiazhihui (Hashui, IT)  wrote:
> Hi friends,
>
>
>
>  I want to upload a volume driver, right now I’m writing unit test
> case code ( it’s also need to be uploaded).
>
>
>
>  And I do not know the requirements of the unit test code. Which is
> the level of unit test cases in my unit test code should be covered:
> Function Coverage, Condition coverage, Decision Coverage, Statement Coverage
> or others? Or should I write what I think needs?

Pragmatically speaking, code should be tested such that if either:
 - some precondition it has is changed (either elsewhere in the same
code base or in the behaviour of some other code base) that we find
out
 - if someone changes the code itself and breaks an existing use case,
we find out.

Exactly what that means may be different for different routines :).

My general rule is to start with testing each entry and exit path and
any domain or range corner cases.

-Rob
-- 
Robert Collins 
Distinguished Technologist
HP Cloud Services

___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] QUANTUM: DHCP issue with dnsmasq starting on network node under Folsom release on Ubuntu 12.04-1

[Ivan]

Hi Rob there are no namespaces, the culprit was in fact ubuntu 12.04,
which installs dnsmasq with a LISTEN on ALL network connections
by default.

I just disabled its auto start and it is nor starting cleanly on the
network node when a job is scheduled.


Of course the VM's still doesn't get an IP address.

This is what i see.

I launch an instance.
   the *compute* node creates a TAP interface
   it plumbs vnet0 *under* this

At the same time the *network* node spawns TWO instances of dnsmasq  and
has the correct range of IPs for the subnet so declared and it binds
both of these (seems odd)
to the tap interface.

if I tcpdump for broadcasts I see INCOMING bootp requests from the
correct MAC address of the vnet0 interface on the compute node

if I tail -f the var/log/sysog file I see dnsmasq offering the first
free lease IP t the the correct MAC address of the vnet0 NIC
i.e. I see a DHCPDISCOVER/DHCPOFFER

*HOWEVER**
*vnet0 doesnt get its offered IP address and in fact I do NOT see the
offer being made from the network node BACK to the vnet0 on the compute
node.

*RESULT**
*No NIC on the VM.

It seems like the boroadcast from compute node NIC to the network node
and DNSmasq is OK, but the offered IP address is not sent back.



Any ideas welcome.













On 01/20/2013 01:49 PM, Robert Collins wrote:
> On 19 January 2013 19:17, Ivan  wrote:
>> Hi all,
>>  I've hit a brick wall trying to get the dnsmasq process to bind
>> correctly and get itself ready to answer bootp/dhcp broadcasts.
> do you have net namespaces in use?
>
> (ip netns list)
>
> If not, I suspect your dhcp lease relay and dhcp-agent are binding to
> the same port and will conflict, as you see.
>
> -Rob




___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

Re: [Openstack] Problem running devstack / stack.sh

[Sagar Nikam]

Hi Malani,

Are you trying to run devstack with proxy set.
You also need to set no_proxy.
Please add the following entry in localrc file and execute stack.sh

export no_proxy="localhost,127.0.0.1"


I had faced the same error you have mentioned and the problem was solved by
setting no_proxy


Regards,

Sagar


On Mon, Jan 21, 2013 at 11:29 PM, Bhandaru, Malini K <
malini.k.bhand...@intel.com> wrote:

>  ** **
>
> Greetings Dusan!
>
> ** **
>
> I am having similar issues and made no progress .. peeled the onion a bit.
> 
>
> Hope somebody else can help us. I posted a request on devstack’ s
> launchpad site too.
>
> ** **
>
> **1)  **It helped making a copy of the sample localrc and placing in
> devstack home directory.
>
> **2)  **The devstack stack.sh script created a stack user but
> directories such as /etc/keystone /etc/glance etc 
>
> Were owned by root, so it helped to using chown to make them stack user
> writable (I just made them writable)
>
> **3)  **I even did not get fancy such as configuring for a real
> database or turning swift on etc, just a plain SQLite type keystone backend.
> 
>
> **4)  **The keystone service does not start up, thus the command to
> obtain it’s service id returns an empty string, and thus the below call
> fails saying it is missing the service-id argument.
>
> KEYSTONE_SERVICE=
> + keystone endpoint-create --region RegionOne --service_id --publicurl
> http://192.168.1.13:5000/v2.0 --adminurl 
> http://192.168.1.13:35357/v2.0--internalurl
> http://192.168.1.13:5000/v2.0
> usage: keystone endpoint-create [--region ] --service-id
>  [--publicurl ]
> [--adminurl ]
> [--internalurl ]
> keystone endpoint-create: error: argument --service-id/--service_id:
> expected one argument
>
> **5)  **And with no service up, no end point created, other requests
> such as user, tenant etc create fail, the avalance effect.
>
> ** **
>
> *From:* 
> openstack-bounces+malini.k.bhandaru=intel@lists.launchpad.net[mailto:
> openstack-bounces+malini.k.bhandaru=intel@lists.launchpad.net] *On
> Behalf Of *Dusan Dordevic
> *Sent:* Sunday, January 20, 2013 7:36 AM
> *To:* openstack@lists.launchpad.net
> *Subject:* [Openstack] Problem running devstack / stack.sh
>
> ** **
>
> Hi,
>
> I just downloaded fresh copy of devstack, and I am trying to run in on
> Ubuntu. 12.04. I do have stack.sh problem, it seems to me like something
> related to Keystone and database, but I cannot find the problem. Any idea
> what it might be ?
>
> Here is full error dump:
>
> ./stack.sh
> ...
> + export OS_SERVICE_ENDPOINT=http://192.168.1.13:35357/v2.0
> + OS_SERVICE_ENDPOINT=http://192.168.1.13:35357/v2.0
> + create_keystone_accounts
> ++ keystone tenant-create --name admin
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected error prevented the server from fulfilling your request.
> (OperationalError) (1045, \"Access denied for user 'root'@'localhost'
> (using password: YES)\") None None", "code": 500, "title": "Internal Server
> Error"}}. (HTTP 500)
> + ADMIN_TENANT=
> ++ keystone user-create --name admin --pass sifra --email
> ad...@example.com
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected error prevented the server from fulfilling your request.
> (OperationalError) (1045, \"Access denied for user 'root'@'localhost'
> (using password: YES)\") None None", "code": 500, "title": "Internal Server
> Error"}}. (HTTP 500)
> + ADMIN_USER=
> ++ keystone role-create --name admin
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected error prevented the server from fulfilling your request.
> (OperationalError) (1045, \"Access denied for user 'root'@'localhost'
> (using password: YES)\") None None", "code": 500, "title": "Internal Server
> Error"}}. (HTTP 500)
> + ADMIN_ROLE=
> + keystone user-role-add --user_id --role_id --tenant_id
> usage: keystone user-role-add --user-id  --role-id 
>   [--tenant-id ]
> keystone user-role-add: error: argument --user-id/--user_id: expected one
> argument
> ++ keystone tenant-create --name service
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected error prevented the server from fulfilling your request.
> (OperationalError) (1045, \"Access denied for user 'root'@'localhost'
> (using password: YES)\") None None", "code": 500, "title": "Internal Server
> Error"}}. (HTTP 500)
> + SERVICE_TENANT=
> ++ keystone role-create --name=Member
> ++ grep ' id '
> ++ get_field 2
> ++ read data
> Unable to communicate with identity service: {"error": {"message": "An
> unexpected

Re: [Openstack] Problem running devstack / stack.sh

[Bhandaru, Malini K]

Sagar, thank you for the suggestion. It did not help however
(I already had in my .bashrc file ..)
export no_proxy=localhost,*.local,.intel.com,127.0.0.0/8,143.183.0.0/16,172.16.0

Mysql is installed, shows it has a keystone database and keystone tables such 
as user and end point.
I cross checked mysql root password and that in the localrc file match.

But keymanage-all still spins !!

Would appreciate any other suggestions.
Regards
Malini


From: Sagar Nikam [mailto:sagar.r.ni...@gmail.com]
Sent: Monday, January 21, 2013 9:30 PM
To: Bhandaru, Malini K
Cc: Dusan Dordevic; OpenStack Development Mailing List; 
openstack@lists.launchpad.net
Subject: Re: [Openstack] Problem running devstack / stack.sh

Hi Malani,

Are you trying to run devstack with proxy set.
You also need to set no_proxy.
Please add the following entry in localrc file and execute stack.sh
export no_proxy="localhost,127.0.0.1"

I had faced the same error you have mentioned and the problem was solved by 
setting no_proxy

Regards,
Sagar

On Mon, Jan 21, 2013 at 11:29 PM, Bhandaru, Malini K 
mailto:malini.k.bhand...@intel.com>> wrote:

Greetings Dusan!

I am having similar issues and made no progress .. peeled the onion a bit.
Hope somebody else can help us. I posted a request on devstack' s launchpad 
site too.


1)  It helped making a copy of the sample localrc and placing in devstack 
home directory.

2)  The devstack stack.sh script created a stack user but directories such 
as /etc/keystone /etc/glance etc

Were owned by root, so it helped to using chown to make them stack user 
writable (I just made them writable)

3)  I even did not get fancy such as configuring for a real database or 
turning swift on etc, just a plain SQLite type keystone backend.

4)  The keystone service does not start up, thus the command to obtain it's 
service id returns an empty string, and thus the below call fails saying it is 
missing the service-id argument.

KEYSTONE_SERVICE=
+ keystone endpoint-create --region RegionOne --service_id --publicurl 
http://192.168.1.13:5000/v2.0 --adminurl http://192.168.1.13:35357/v2.0 
--internalurl http://192.168.1.13:5000/v2.0
usage: keystone endpoint-create [--region ] --service-id
 [--publicurl ]
[--adminurl ]
[--internalurl ]
keystone endpoint-create: error: argument --service-id/--service_id: expected 
one argument

5)  And with no service up, no end point created, other requests such as 
user, tenant etc create fail, the avalance effect.

From: 
openstack-bounces+malini.k.bhandaru=intel@lists.launchpad.net
 
[mailto:openstack-bounces+malini.k.bhandaru=intel@lists.launchpad.net]
 On Behalf Of Dusan Dordevic
Sent: Sunday, January 20, 2013 7:36 AM
To: openstack@lists.launchpad.net
Subject: [Openstack] Problem running devstack / stack.sh

Hi,
I just downloaded fresh copy of devstack, and I am trying to run in on Ubuntu. 
12.04. I do have stack.sh problem, it seems to me like something related to 
Keystone and database, but I cannot find the problem. Any idea what it might be 
?
Here is full error dump:
./stack.sh
...
+ export OS_SERVICE_ENDPOINT=http://192.168.1.13:35357/v2.0
+ OS_SERVICE_ENDPOINT=http://192.168.1.13:35357/v2.0
+ create_keystone_accounts
++ keystone tenant-create --name admin
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ ADMIN_TENANT=
++ keystone user-create --name admin --pass sifra --email 
ad...@example.com
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ ADMIN_USER=
++ keystone role-create --name admin
++ grep ' id '
++ get_field 2
++ read data
Unable to communicate with identity service: {"error": {"message": "An 
unexpected error prevented the server from fulfilling your request. 
(OperationalError) (1045, \"Access denied for user 'root'@'localhost' (using 
password: YES)\") None None", "code": 500, "title": "Internal Server Error"}}. 
(HTTP 500)
+ ADMIN_ROLE=
+ keystone user-role-add --user_id --role_id --tenant_id
usage: keystone user-role-add --user-id  --role-id 
  [--tenant-id ]
keystone user-role-add: error: argument --user-id/--user_id: expected one 
argumen

Re: [Openstack] using Win AD authentication as keystone backend

[Tim Bell]

We run Active Directory with Keystone at CERN.

 

The configuration is documented by Jose in the Wiki at
http://wiki.openstack.org/HowtoIntegrateKeystonewithAD.

 

Not sure if all the patches made it into Folsom though.

 

Tim

 

From: openstack-bounces+tim.bell=cern...@lists.launchpad.net
[mailto:openstack-bounces+tim.bell=cern...@lists.launchpad.net] On Behalf Of
Liu Wenmao
Sent: 22 January 2013 04:23
To: openstack@lists.launchpad.net
Subject: [Openstack] using Win AD authentication as keystone backend

 

hello all:

 

My company use Windows AD(active directory) authentication for internal user
login, is it possible to integrate the current authentication with keystone
backend, so that we do not extra user/password maintaining. Hope Openstack
Folsom has an easy and stable solution.

 

thanks 

 

 

Wenmao Liu

NSFOCUS



smime.p7s
Description: S/MIME cryptographic signature
___
Mailing list: https://launchpad.net/~openstack
Post to : openstack@lists.launchpad.net
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp