Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
Anyone had success automating this process? Is there a blueprint for this class of problem? Thank you, -- @lloyddewolf http://www.pistoncloud.com/ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
There is a specific need for this in incident response for some SOC teams. They may need to isolate a compromised instance to a more secure and security controlled tenancy. I think this would be an advantageous blueprint for next release. -Matt On Tue, Jul 16, 2013 at 9:46 AM, Lloyd Dewolf lloydost...@gmail.com wrote: Anyone had success automating this process? Is there a blueprint for this class of problem? Thank you, -- @lloyddewolf http://www.pistoncloud.com/ ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
The step 2 and 3 can be left out. Because the instance snapshot can be marked public. Then we can lanuch instance from the snapshot in another tenant. Forgot that one ;-) How about when the instance is attached with volume? How to migrate the Volume? It seems that the Volume can not be marked publice? Do you have any ideas? There is a dirty hack that you could perform for that. What you could do is (depends on your storage backend): - detach the volume from project A - create a dummy volume on project B - make pointed the volume from project A to the dummy in project B - delete the volume from project A If you use Ceph RBD it's really easy for example. For the rest I don't know. -- Bien cordialement. Sébastien HAN. On Thu, Nov 29, 2012 at 9:55 AM, Lei Zhang zhang.lei@gmail.com wrote: Hi Sébastien, Good ideas. There is a very tricky way to solve this problem. In addition, The step 2 and 3 can be left out. Because the instance snapshot can be marked public. Then we can lanuch instance from the snapshot in another tenant. Anothe Question, How about when the instance is attached with volume? How to migrate the Volume? It seems that the Volume can not be marked publice? Do you have any ideas? On Thu, Nov 29, 2012 at 3:38 PM, Sébastien Han han.sebast...@gmail.comwrote: Hi, What I will do to achieve what you want: _ take a snapshot of your instance _ export the snapshot from wherever it's stored (filesystem for instance) _ import it to Glance, make the image to public or assign it to the tenant (not 100% sure if the latest is possible though...) _ run a new vm with the based image previously created Some steps could be avoided like step 2 and 3. You could use the admin user to snapshot and then run the snapshot from the other tenan. However it's NOT recommended. Cheers. On Nov 29, 2012 7:47 AM, Tim Bell tim.b...@cern.ch wrote: We were also interested in this function but could not find an easy way to do it. The operation becomes more complex when there are attached volumes and potentially different permissions between the two projects. Tim From: openstack-bounces+tim.bell=cern...@lists.launchpad.net [mailto: openstack-bounces+tim.bell=cern...@lists.launchpad.net] On Behalf Of Lei Zhang Sent: 29 November 2012 06:09 To: openstack@lists.launchpad.net Subject: [Openstack] Is there any way to migrate the Instance between the projects/tenants? Hi all, As the subject say, is there any way to do this? I search the Internet and only found the migration bewteen two physical machine. thanks -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
Hi Sébastien, Good ideas. There is a very tricky way to solve this problem. In addition, The step 2 and 3 can be left out. Because the instance snapshot can be marked public. Then we can lanuch instance from the snapshot in another tenant. Anothe Question, How about when the instance is attached with volume? How to migrate the Volume? It seems that the Volume can not be marked publice? Do you have any ideas? On Thu, Nov 29, 2012 at 3:38 PM, Sébastien Han han.sebast...@gmail.comwrote: Hi, What I will do to achieve what you want: _ take a snapshot of your instance _ export the snapshot from wherever it's stored (filesystem for instance) _ import it to Glance, make the image to public or assign it to the tenant (not 100% sure if the latest is possible though...) _ run a new vm with the based image previously created Some steps could be avoided like step 2 and 3. You could use the admin user to snapshot and then run the snapshot from the other tenan. However it's NOT recommended. Cheers. On Nov 29, 2012 7:47 AM, Tim Bell tim.b...@cern.ch wrote: We were also interested in this function but could not find an easy way to do it. The operation becomes more complex when there are attached volumes and potentially different permissions between the two projects. Tim From: openstack-bounces+tim.bell=cern...@lists.launchpad.net [mailto: openstack-bounces+tim.bell=cern...@lists.launchpad.net] On Behalf Of Lei Zhang Sent: 29 November 2012 06:09 To: openstack@lists.launchpad.net Subject: [Openstack] Is there any way to migrate the Instance between the projects/tenants? Hi all, As the subject say, is there any way to do this? I search the Internet and only found the migration bewteen two physical machine. thanks -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
[Openstack] Is there any way to migrate the Instance between the projects/tenants?
Hi all, As the subject say, is there any way to do this? I search the Internet and only found the migration bewteen two physical machine. thanks -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
We were also interested in this function but could not find an easy way to do it. The operation becomes more complex when there are attached volumes and potentially different permissions between the two projects. Tim From: openstack-bounces+tim.bell=cern...@lists.launchpad.net [mailto:openstack-bounces+tim.bell=cern...@lists.launchpad.net] On Behalf Of Lei Zhang Sent: 29 November 2012 06:09 To: openstack@lists.launchpad.net Subject: [Openstack] Is there any way to migrate the Instance between the projects/tenants? Hi all, As the subject say, is there any way to do this? I search the Internet and only found the migration bewteen two physical machine. thanks -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l smime.p7s Description: S/MIME cryptographic signature ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
First of all, I think this feature is reasonable. In my scenario, I have two projects. One is a test env and another is production env. I use different projects to isolate the two env. All should I do is to prepare in the test env. When all is ok, I can push it to the production env. @Tim, you are right. The permissions is a big potentail issue. It should be a complex procedure when migrate instances between projects/tenants? Maybe I am using a bad solution for my scenario. So could anybody give me some advise how to handle this situation? On Thu, Nov 29, 2012 at 2:46 PM, Tim Bell tim.b...@cern.ch wrote: ** ** We were also interested in this function but could not find an easy way to do it. ** ** The operation becomes more complex when there are attached volumes and potentially different permissions between the two projects. ** ** Tim ** ** *From:* openstack-bounces+tim.bell=cern...@lists.launchpad.net [mailto: openstack-bounces+tim.bell=cern...@lists.launchpad.net] *On Behalf Of *Lei Zhang *Sent:* 29 November 2012 06:09 *To:* openstack@lists.launchpad.net *Subject:* [Openstack] Is there any way to migrate the Instance between the projects/tenants? ** ** Hi all, ** ** As the subject say, is there any way to do this? I search the Internet and only found the migration bewteen two physical machine. thanks -- Lei Zhang ** ** Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ** ** -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Is there any way to migrate the Instance between the projects/tenants?
Hi, What I will do to achieve what you want: _ take a snapshot of your instance _ export the snapshot from wherever it's stored (filesystem for instance) _ import it to Glance, make the image to public or assign it to the tenant (not 100% sure if the latest is possible though...) _ run a new vm with the based image previously created Some steps could be avoided like step 2 and 3. You could use the admin user to snapshot and then run the snapshot from the other tenan. However it's NOT recommended. Cheers. On Nov 29, 2012 7:47 AM, Tim Bell tim.b...@cern.ch wrote: We were also interested in this function but could not find an easy way to do it. The operation becomes more complex when there are attached volumes and potentially different permissions between the two projects. Tim From: openstack-bounces+tim.bell=cern...@lists.launchpad.net [mailto: openstack-bounces+tim.bell=cern...@lists.launchpad.net] On Behalf Of Lei Zhang Sent: 29 November 2012 06:09 To: openstack@lists.launchpad.net Subject: [Openstack] Is there any way to migrate the Instance between the projects/tenants? Hi all, As the subject say, is there any way to do this? I search the Internet and only found the migration bewteen two physical machine. thanks -- Lei Zhang Blog: http://jeffrey4l.github.com twitter/weibo: @jeffrey4l ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
