[Openstack] [Neutron] Multiple allocation pools in a single subnet for floating ips

[Sam Stoelinga]

Hi,

How can I setup neutron so that it supports a range of fragmented ips
within a subnet? Version: Icehouse

For example I have the following floating ips available for use:
192.168.1.10 192.168.1.15
but 192.168.1.11-14 can't be used as floating ips. With nova-network we
could add them 1 by 1.

I tried to do this:
neutron subnet-update c58d4e69-d614-4d05-91e5-95b5cc48b670
--allocation-pools start=192.168.1.10,end=192.168.1.10 --allocation-pools
start=192.168.1.15,end=192.168.1.15

The environment is a lab environment where they gave a limited amount of
floating ips to use. As example I used a private ip space, but in the
actual lab environment I am using a public internet routable ipv4 addresses
as floating ip, hence the restriction and fragmentation of the ip range.

Regards,
Sam
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Mirantis FUEL

[Mike Scherbakov]

Hi Guillermo, Adam,
while itself Fuel is open source technology [1], it still uses OpenStack
packages provided by Mirantis by default. Packages contain some fixes which
are required to ensure HA and some other defects which are not yet merged
in upstream (but we are actively pushing those).

It is already possible to build RPM packages of vanilla OpenStack for Fuel.
Please see blueprint [1], and current status [2] on so-called deployment
openstack from master. The idea is that we will have open spec files for
packages, which are going to be used for both Mirantis OpenStack, and
upstream packages, and we will have packages built periodically, using
vanilla OpenStack.
The following use cases are going to be covered:

   1. If I want to build Fuel ISO with latest already built OpenStack
   vanilla packages, I just run "make iso"
   2. If I want to build Fuel ISO with already built packages, but use my
   own fork of Neutron and Nova (or something else), I can provide it as
   parameters to "make iso". See [3], this is already covered for RPM packages
   3. I want to build my Neutron (or other OpenStack project) package and
   make it available on already running Fuel Master node, so I can immediately
   start deployment of new envs with this new package
  - requires repo rebuild on master node, more complicated for Ubuntu
   4. I want to patch already running OpenStack environment with my version
   of Neutron (or other), doing it by OpenStack patching feature in Fuel (to
   be implemented in 5.1, current milestone).
  - In this case flow would look like: package build -> repo update ->
  patch environment in automated manner, delivering the code in minutes to
  the running environment

If #2 is already implemented for RPMs, then #1 requires OBS (package
builder) and other infrastructure to be setup. It is WIP, and expected to
be ready in a month or two.
#3 and #4 are going to take more.

I hope this helps. We will be announcing this stuff in more details soon in
openstack-dev with [Fuel] in subject: stay tuned.

[1] wiki.openstack.org/fuel
[2] https://blueprints.launchpad.net/fuel/+spec/openstack-from-master
[3] https://etherpad.openstack.org/p/fuel-build-rpms-from-anywhere

Thanks,

On Wed, Sep 10, 2014 at 12:23 AM, Adam Lawson  wrote:

> In a word, no. My experience has been that Fuel really is a Mirantis
> product. Their distro, their support. Folks used to be able to install
> RedHat RDO if they had access to a satellite server but no longer.
>
> But that's how a lot of packages are these days. Ubuntu JujJu, SUSE Cloud
> v4. RedHat RDO, VMware VIO, Each supported by their respective vendors.
> Other vendors package Openstack with their own optimizations (i.e. Piston,
> Cloudscaling, etc).
>
> Are you looking for a product that orchestrates a vanilla install of
> Openstack (not tied to a specific distro)? if so, your best bet is probably
> using something like Puppet, Chef, Salt, Ansible, etc.
>
>
> *Adam Lawson*
> *CEO, Principal Architect*
>
> AQORN, Inc.
> 427 North Tatnall Street
> Ste. 58461
> Wilmington, Delaware 19801-2230
> Toll-free: (844) 4-AQORN-NOW ext. 101
> International: +1 302-387-4660
> Direct: +1 916-246-2072
>
>
> On Tue, Sep 9, 2014 at 11:45 AM, Guillermo Alvarado <
> guillermoalvarad...@gmail.com> wrote:
>
>> Hello Everyone,
>>
>> I am doing some research about Fuel, but I have a big doubt and seems
>> there is not a clear answer in the documents I have been reading. I dont
>> want to waste my time doing an installation to discover after that Fuel
>> only supports The OPenstack Mirantis Distribution.
>>
>> So, the question is, Can I use Fuel and not use the Openstack
>> Distribution of Mirantis?
>>
>> Thanks!
>>
>> ___
>> Mailing list:
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe :
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>
>>
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>


-- 
Mike Scherbakov
#mihgen
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] OpenStack DefCore Community Meetings Wed 6pm PT & Thurs 8 am PT

[Rob_Hirschfeld]

OpenStack Community,

I'd like to invite you to join the DefCore committee in a discussion/review of 
the Havana Designated Sections as recommended by the DefCore committee.
We've scheduled two meetings to ensure global coverage.  The meetings will 
cover the same material, you do not need to attend both.

We would like your feedback on the designated sections as part of the review 
process (here's the latest: 
https://etherpad.openstack.org/p/DefCoreLighthouse.6 ).

What are designated sections?  Before we talk about the sections, we'll review 
the overall process and there's review links below.

Call-in Information: https://etherpad.openstack.org/p/DefCoreLighthouse.7
Agenda:
* Review DefCore status and history  (15 minutes + questions)
* Review & Discuss Designated Sections proposal (remainder, ~45 minutes)

Background Posts

* DefCore Background: 
http://robhirschfeld.com/2014/08/12/patchwork-onion/

* Community Review Process: 
http://robhirschfeld.com/2014/09/02/defcore-process-flow/

* Picking Designated Sections: 
http://robhirschfeld.com/2014/08/18/ugly-baby/

Rob
__
Rob Hirschfeld
Dell,  Sr. Distinguished Cloud Solution Architect
Please note, I am based in the CENTRAL (-6) time zone

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] KVM shows several processes for a single VM on the host

[Narayanan, Krishnaprasad]

Hi,

I used the command ps -AL | grep qemu and I was able to see the process ID 6850 
having 6 thread IDs. In case, if I am interested to measure the hardware 
performance counters / event provided by the CPU registers such as 
CPU_CLK_UNHALTED, BRANCH_MISSES and etc..., can I know which process ID should 
I be using to get this information?

Regards,
Krishnaprasad

From: lchen [mailto:cl55h...@gmail.com]
Sent: Dienstag, 9. September 2014 20:16
To: openstack@lists.openstack.org
Subject: Re: [Openstack] KVM shows several processes for a single VM on the host


On 09/09/2014 11:08 AM, Narayanan, Krishnaprasad wrote:

Hi Chris,



They appear to be processes when I see it in htop. I have attached the 
screenshot of a VM named "instance-01bf" that has 4 virtual cores. In 
total, I can see 6 processes for the above referred VM.



[cid:image001.png@01CFCC80.47374B40]



Can I know is there a way to differentiate between  processes and threads?



They ought to be processes according to the htop man page.  But I suspect those 
are actually the thread IDs - one thread per each vcpu and another thread 
executing the main loop dispatching events. The last one seems to be a temporal 
work thread kicked off by the main loop.
The four threads spent similar amount of time running guest code - the guest 
work load is spread evenly across all vcpus.

You may also run 'ps -AL | grep qemu' to have a look at the thead Ids and the 
associated process ID (thread group ID).


Liang



Best regards,

Krishnaprasad



-Original Message-
From: Chris Friesen [mailto:chris.frie...@windriver.com]
Sent: Dienstag, 9. September 2014 16:31
To: openstack@lists.openstack.org
Subject: Re: [Openstack] KVM shows several processes for a single VM on the host



On 09/09/2014 07:58 AM, Narayanan, Krishnaprasad wrote:

> Hallo all,

>

> I have an OpenStack setup based on Havana with several compute nodes.

> When I instantiate a virtual machine with 1 or more virtual cores, in

> the process list of the compute node, I am able to see more than 1

> process associated to the same VM. The process list that I refer is

> the process which can be seen by running either top or htop.

>

> Can I know the significance of other processes which are associated to

> the same VM? Are these child processes?



Are they separate processes or separate threads?  Separate threads would be 
expected, but separate processes would not be.



Chris





___

Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Post to : 
openstack@lists.openstack.org

Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack




___

Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Post to : 
openstack@lists.openstack.org

Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Mirantis FUEL

[Adam Lawson]

In a word, no. My experience has been that Fuel really is a Mirantis
product. Their distro, their support. Folks used to be able to install
RedHat RDO if they had access to a satellite server but no longer.

But that's how a lot of packages are these days. Ubuntu JujJu, SUSE Cloud
v4. RedHat RDO, VMware VIO, Each supported by their respective vendors.
Other vendors package Openstack with their own optimizations (i.e. Piston,
Cloudscaling, etc).

Are you looking for a product that orchestrates a vanilla install of
Openstack (not tied to a specific distro)? if so, your best bet is probably
using something like Puppet, Chef, Salt, Ansible, etc.


*Adam Lawson*
*CEO, Principal Architect*

AQORN, Inc.
427 North Tatnall Street
Ste. 58461
Wilmington, Delaware 19801-2230
Toll-free: (844) 4-AQORN-NOW ext. 101
International: +1 302-387-4660
Direct: +1 916-246-2072


On Tue, Sep 9, 2014 at 11:45 AM, Guillermo Alvarado <
guillermoalvarad...@gmail.com> wrote:

> Hello Everyone,
>
> I am doing some research about Fuel, but I have a big doubt and seems
> there is not a clear answer in the documents I have been reading. I dont
> want to waste my time doing an installation to discover after that Fuel
> only supports The OPenstack Mirantis Distribution.
>
> So, the question is, Can I use Fuel and not use the Openstack Distribution
> of Mirantis?
>
> Thanks!
>
> ___
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] Mirantis FUEL

[Guillermo Alvarado]

Hello Everyone,

I am doing some research about Fuel, but I have a big doubt and seems there
is not a clear answer in the documents I have been reading. I dont want to
waste my time doing an installation to discover after that Fuel only
supports The OPenstack Mirantis Distribution.

So, the question is, Can I use Fuel and not use the Openstack Distribution
of Mirantis?

Thanks!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] KVM shows several processes for a single VM on the host

[lchen]

On 09/09/2014 11:08 AM, Narayanan, Krishnaprasad wrote:
>
> Hi Chris,
>
>  
>
> They appear to be processes when I see it in htop. I have attached the
> screenshot of a VM named "instance-01bf" that has 4 virtual cores.
> In total, I can see 6 processes for the above referred VM.
>
>  
>
>  
>
> Can I know is there a way to differentiate between  processes and threads?
>
>  
>

They ought to be processes according to the htop man page.  But I
suspect those are actually the thread IDs - one thread per each vcpu and
another thread executing the main loop dispatching events. The last one
seems to be a temporal work thread kicked off by the main loop.
The four threads spent similar amount of time running guest code - the
guest work load is spread evenly across all vcpus.

You may also run 'ps -AL | grep qemu' to have a look at the thead Ids
and the associated process ID (thread group ID).


Liang

> Best regards,
>
> Krishnaprasad
>
>  
>
> -Original Message-
> From: Chris Friesen [mailto:chris.frie...@windriver.com]
> Sent: Dienstag, 9. September 2014 16:31
> To: openstack@lists.openstack.org
> Subject: Re: [Openstack] KVM shows several processes for a single VM
> on the host
>
>  
>
> On 09/09/2014 07:58 AM, Narayanan, Krishnaprasad wrote:
>
> > Hallo all,
>
> > 
>
> > I have an OpenStack setup based on Havana with several compute nodes.
>
> > When I instantiate a virtual machine with 1 or more virtual cores, in
>
> > the process list of the compute node, I am able to see more than 1
>
> > process associated to the same VM. The process list that I refer is
>
> > the process which can be seen by running either top or htop.
>
> > 
>
> > Can I know the significance of other processes which are associated to
>
> > the same VM? Are these child processes?
>
>  
>
> Are they separate processes or separate threads?  Separate threads
> would be expected, but separate processes would not be.
>
>  
>
> Chris
>
>  
>
>  
>
> ___
>
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
> Post to : openstack@lists.openstack.org
> 
>
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
>
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] SWIFT - Write Quorum

[Brent Troge]

Thanks John.. I truly appreciate your clear and concise answers.





On Tue, Sep 9, 2014 at 12:09 PM, John Dickinson  wrote:

> Well listings is slightly different than being able to read the data if
> you already know the object name.
>
> Assuming no failures in the system, the container listings will be up to
> date before the end-user gets a 2xx response. That is, create a new object,
> then immediately do a listing, and you'll see the object in that listing.
>
> However, we can pretty safely assume that there will be failures at some
> point (especially if it's a larger cluster). In that case, the end-user
> will still get a 2xx response because the data was durably flushed to disk,
> but the container listing update may fall back to an asynchronous update.
> In that case, you may or may not get the object in a container listing
> until container replication has completed. But you'll still be able to read
> the object directly if you know the name.
>
> --John
>
>
> On Sep 9, 2014, at 9:15 AM, Brent Troge  wrote:
>
> > Thanks..  My understanding is that an object will not be listed within a
> container until it completes replication throughout the cluster. Thats what
> I meant by 'listing'
> >
> > But you corrected that mis-understanding.  Such that, with respect to my
> 3 write requirement, an object will be available  in each region once I
> receive a 200 upon file ingest.
> >
> >
> >
> >
> >
> > On Tue, Sep 9, 2014 at 10:02 AM, John Dickinson  wrote:
> > I'm not sure what the question is.
> >
> > If you are looking to have a successful response after it's written
> twice in a cluster with 4 replicas, no. Swift's quorum calculation is
> (replicas DIV 2 + 1). This means that for 4 replicas, you have a quorum
> size of 3. What I would suggest you look in to is the write_affinity
> setting so that you can do a full-quorum (at least) write to the local
> region and then asynchronously replicate to the other region. See
> http://docs.openstack.org/developer/swift/admin_guide.html#geographically-distributed-clusters
> and
> https://swiftstack.com/blog/2012/09/16/globally-distributed-openstack-swift-cluster/
> .
> >
> > If you are looking to ensure that there is at least one replica in each
> region, then yes. The quorum size of three (see above) will ensure that,
> without any write_affinity settings, you'll have at least one replica in
> each region and two in another before the client gets a 2xx success
> response code to the PUT request.
> >
> > --John
> >
> >
> >
> > On Sep 9, 2014, at 6:59 AM, Brent Troge 
> wrote:
> >
> > >
> > >
> > > If I configure Swift to use 4 replicas across two regions(two replicas
> per region), is it possible to only list a newly ingested object if it has
> written at least twice? The goal is to only list a new object only if it
> has a presence in each region.
> > >
> > > west coast
> > > region 1 - zone 1
> > > region 1 - zone 2
> > >
> > > east coast
> > > region 2  - zone 1( 3?)
> > > region 2 -  zone 2( 4?)
> > >
> > > Thanks!
> > >
> > >
> > > ___
> > > Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> > > Post to : openstack@lists.openstack.org
> > > Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> >
> >
>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] SWIFT - Write Quorum

[John Dickinson]

Well listings is slightly different than being able to read the data if you 
already know the object name.

Assuming no failures in the system, the container listings will be up to date 
before the end-user gets a 2xx response. That is, create a new object, then 
immediately do a listing, and you'll see the object in that listing.

However, we can pretty safely assume that there will be failures at some point 
(especially if it's a larger cluster). In that case, the end-user will still 
get a 2xx response because the data was durably flushed to disk, but the 
container listing update may fall back to an asynchronous update. In that case, 
you may or may not get the object in a container listing until container 
replication has completed. But you'll still be able to read the object directly 
if you know the name.

--John


On Sep 9, 2014, at 9:15 AM, Brent Troge  wrote:

> Thanks..  My understanding is that an object will not be listed within a 
> container until it completes replication throughout the cluster. Thats what I 
> meant by 'listing'
> 
> But you corrected that mis-understanding.  Such that, with respect to my 3 
> write requirement, an object will be available  in each region once I receive 
> a 200 upon file ingest.
> 
> 
> 
> 
> 
> On Tue, Sep 9, 2014 at 10:02 AM, John Dickinson  wrote:
> I'm not sure what the question is.
> 
> If you are looking to have a successful response after it's written twice in 
> a cluster with 4 replicas, no. Swift's quorum calculation is (replicas DIV 2 
> + 1). This means that for 4 replicas, you have a quorum size of 3. What I 
> would suggest you look in to is the write_affinity setting so that you can do 
> a full-quorum (at least) write to the local region and then asynchronously 
> replicate to the other region. See 
> http://docs.openstack.org/developer/swift/admin_guide.html#geographically-distributed-clusters
>  and 
> https://swiftstack.com/blog/2012/09/16/globally-distributed-openstack-swift-cluster/.
> 
> If you are looking to ensure that there is at least one replica in each 
> region, then yes. The quorum size of three (see above) will ensure that, 
> without any write_affinity settings, you'll have at least one replica in each 
> region and two in another before the client gets a 2xx success response code 
> to the PUT request.
> 
> --John
> 
> 
> 
> On Sep 9, 2014, at 6:59 AM, Brent Troge  wrote:
> 
> >
> >
> > If I configure Swift to use 4 replicas across two regions(two replicas per 
> > region), is it possible to only list a newly ingested object if it has 
> > written at least twice? The goal is to only list a new object only if it 
> > has a presence in each region.
> >
> > west coast
> > region 1 - zone 1
> > region 1 - zone 2
> >
> > east coast
> > region 2  - zone 1( 3?)
> > region 2 -  zone 2( 4?)
> >
> > Thanks!
> >
> >
> > ___
> > Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> > Post to : openstack@lists.openstack.org
> > Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] SWIFT - Write Quorum

[Brent Troge]

Thanks..  My understanding is that an object will not be listed within a
container until it completes replication throughout the cluster. Thats what
I meant by 'listing'

But you corrected that mis-understanding.  Such that, with respect to my 3
write requirement, an object will be available  in each region once I
receive a 200 upon file ingest.





On Tue, Sep 9, 2014 at 10:02 AM, John Dickinson  wrote:

> I'm not sure what the question is.
>
> If you are looking to have a successful response after it's written twice
> in a cluster with 4 replicas, no. Swift's quorum calculation is (replicas
> DIV 2 + 1). This means that for 4 replicas, you have a quorum size of 3.
> What I would suggest you look in to is the write_affinity setting so that
> you can do a full-quorum (at least) write to the local region and then
> asynchronously replicate to the other region. See
> http://docs.openstack.org/developer/swift/admin_guide.html#geographically-distributed-clusters
> and
> https://swiftstack.com/blog/2012/09/16/globally-distributed-openstack-swift-cluster/
> .
>
> If you are looking to ensure that there is at least one replica in each
> region, then yes. The quorum size of three (see above) will ensure that,
> without any write_affinity settings, you'll have at least one replica in
> each region and two in another before the client gets a 2xx success
> response code to the PUT request.
>
> --John
>
>
>
> On Sep 9, 2014, at 6:59 AM, Brent Troge  wrote:
>
> >
> >
> > If I configure Swift to use 4 replicas across two regions(two replicas
> per region), is it possible to only list a newly ingested object if it has
> written at least twice? The goal is to only list a new object only if it
> has a presence in each region.
> >
> > west coast
> > region 1 - zone 1
> > region 1 - zone 2
> >
> > east coast
> > region 2  - zone 1( 3?)
> > region 2 -  zone 2( 4?)
> >
> > Thanks!
> >
> >
> > ___
> > Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> > Post to : openstack@lists.openstack.org
> > Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] floating ip (icehouse)

[Paras pradhan]

Hello,

I have a controller, a network and a compute node setup. When I spin an
instance, it gets its ip and it can reach the internet. Then I assign a
floating ip. From dashboard or cli I can see the ip's assoication with the
instanace but I can't ping this floating ip externally or from within the
instance. Where do I look?.  Distro: ubuntu 14.04 with mls.

Thanks
Paras.
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] Openstack Nat Problem

[Abdurrahim ÖZEL]

Hi

I have a question about networking on openstack. I try to create 2 network
segment using vm ubuntu. It has 2 networking cards 192.168.1.0/24 and
192.168.2.0/24. I configured nat rules using iptables but it doesnt work as
i expected. When i try to ping from 192.168.2.0/24 to 192.168.1.0/24 network,
ubuntu server gets packet but cannot forward the other site ?
I googled but cannot find any solution. So how can i configure nat properly
on ubuntu vm ? I configured the sysctl for ip_forwarding and iptables
rules.

I can verify that  ping packet from Machine2   reaches the Machine1 but
Machine2 ping reply doesn't come to Machine1. The reply packet come to
Ubuntu's interface 192.168.1.5 but the nat rule does not work.

Below is the rules i did. eth0 external network, eth1 internal network.

echo 1 > /proc/sys/net/ipv4/ip_forward

iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
iptables -A FORWARD -i eth0 -o eth1 -m state --state RELATED,ESTABLISHED -j
ACCEPT
iptables -A FORWARD -i eth1 -o eth0 -j ACCEPT

Best regards

[image: Satır içi resim 2]
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] SWIFT - Write Quorum

[John Dickinson]

I'm not sure what the question is.

If you are looking to have a successful response after it's written twice in a 
cluster with 4 replicas, no. Swift's quorum calculation is (replicas DIV 2 + 
1). This means that for 4 replicas, you have a quorum size of 3. What I would 
suggest you look in to is the write_affinity setting so that you can do a 
full-quorum (at least) write to the local region and then asynchronously 
replicate to the other region. See 
http://docs.openstack.org/developer/swift/admin_guide.html#geographically-distributed-clusters
 and 
https://swiftstack.com/blog/2012/09/16/globally-distributed-openstack-swift-cluster/.

If you are looking to ensure that there is at least one replica in each region, 
then yes. The quorum size of three (see above) will ensure that, without any 
write_affinity settings, you'll have at least one replica in each region and 
two in another before the client gets a 2xx success response code to the PUT 
request.

--John



On Sep 9, 2014, at 6:59 AM, Brent Troge  wrote:

> 
> 
> If I configure Swift to use 4 replicas across two regions(two replicas per 
> region), is it possible to only list a newly ingested object if it has 
> written at least twice? The goal is to only list a new object only if it has 
> a presence in each region.
> 
> west coast
> region 1 - zone 1
> region 1 - zone 2
> 
> east coast
> region 2  - zone 1( 3?)
> region 2 -  zone 2( 4?) 
> 
> Thanks!
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack



signature.asc
Description: Message signed with OpenPGP using GPGMail
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Keystone problem

[Louis-Philippe Reid]

Found it, it was the cumulative errors on adminurl (wrong port, and typo).
  It's ok now.

Thank you for your time!

# keystone user-list
+--+---+-+-+
|id|  name | enabled |  email
   |
+--+---+-+-+
| a1c8728d58584e7db2e4087e74a02abd | admin |   True  | xx
   |
| a843d2e9e431483086091165851c6a2c |  demo |   True  | xx
   |
+--+---+-+-+



On Tue, Sep 9, 2014 at 10:47 AM, Louis-Philippe Reid <
louis.philippe.r...@gmail.com> wrote:

> Ok, I think I just found a typo resulting from the correction I did for
> adminurl.  I have http:///lecloud100 (note the triple /).  Let me check
> that again and retest.
>
> On Tue, Sep 9, 2014 at 10:35 AM, Louis-Philippe Reid <
> louis.philippe.r...@gmail.com> wrote:
>
>>
>>
>> I'm not sure I understand you correctly.  keystone is not associated
>> properly with the role? Let met trace association and you will be able to
>> tell me where the link is not good:
>>
>> user 4e51cf42393e478ba630233a1984e5ab admin associated to tenant admin 
>> bc8c91c4c321480a99c1d5c01f9ee2ee
>>
>>
>> # keystone user-role-list --user admin --tenant admin
>> WARNING: Bypassing authentication using a token & endpoint (authentication 
>> credentials are being ignored).
>> +--+--+--+--+
>> |id|   name   | user_id  
>> |tenant_id |
>> +--+--+--+--+
>> | 9fe2ff9ee4384b1894a90878d3e92bab | _member_ | 
>> 4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |
>> | e51a667a851f4768b3ee3fb7c4de711d |  admin   | 
>> 4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |
>> +--+--+--+--+
>>
>>
>> user_id is mapping to the correct user:
>>
>> # keystone user-list
>> WARNING: Bypassing authentication using a token & endpoint (authentication 
>> credentials are being ignored).
>> +--+---+-+-+
>> |id|  name | enabled |  email
>>   |
>> +--+---+-+-+
>> | 4e51cf42393e478ba630233a1984e5ab | admin |   True  | 
>> xxx |
>> | 38ee12f0c8364218a7ffab0c39fbce5f |  demo |   True  | 
>> xxx |
>> +--+---+-+-+
>>
>> also associated to the right tenant:
>>
>> # keystone tenant-list
>> WARNING: Bypassing authentication using a token & endpoint (authentication 
>> credentials are being ignored).
>> +--+-+-+
>> |id|   name  | enabled |
>> +--+-+-+
>> | bc8c91c4c321480a99c1d5c01f9ee2ee |  admin  |   True  |
>> | 9bddf495845e4138b6c05305917518b9 |   demo  |   True  |
>> | 2ba53d8ccf82496eb4c0ed91db73df41 | service |   True  |
>> +--+-+-+
>>
>>
>>
>> service keystone is associated correctly to endpoint:
>>
>>
>> keystone cad84013496a4d33a132fd99026d1322 associated with endpoint  
>> 9c5aa10925014e7c939ad392d8384b22
>>
>>
>> # keystone service-list
>> WARNING: Bypassing authentication using a token & endpoint (authentication 
>> credentials are being ignored).
>> +--+--+--++
>> |id|   name   |   type   |description
>>  |
>> +--+--+--++
>> | cad84013496a4d33a132fd99026d1322 | keystone | identity | OpenStack 
>> Identity |
>> +--+--+--++
>>
>> # keystone endpoint-list
>> WARNING: Bypassing authentication using a token & endpoint (authentication 
>> credentials are being ignored).
>> +--+---++-+---+--+
>> |id|   region  | 
>> publicurl  | internalurl |   
>>  adminurl   |service_id|
>> +--+---+-

Re: [Openstack] KVM shows several processes for a single VM on the host

[Narayanan, Krishnaprasad]

Hi Chris,



They appear to be processes when I see it in htop. I have attached the 
screenshot of a VM named "instance-01bf" that has 4 virtual cores. In 
total, I can see 6 processes for the above referred VM.



[cid:image001.png@01CFCC50.9FCAED00]



Can I know is there a way to differentiate between  processes and threads?



Best regards,

Krishnaprasad



-Original Message-
From: Chris Friesen [mailto:chris.frie...@windriver.com]
Sent: Dienstag, 9. September 2014 16:31
To: openstack@lists.openstack.org
Subject: Re: [Openstack] KVM shows several processes for a single VM on the host



On 09/09/2014 07:58 AM, Narayanan, Krishnaprasad wrote:

> Hallo all,

>

> I have an OpenStack setup based on Havana with several compute nodes.

> When I instantiate a virtual machine with 1 or more virtual cores, in

> the process list of the compute node, I am able to see more than 1

> process associated to the same VM. The process list that I refer is

> the process which can be seen by running either top or htop.

>

> Can I know the significance of other processes which are associated to

> the same VM? Are these child processes?



Are they separate processes or separate threads?  Separate threads would be 
expected, but separate processes would not be.



Chris





___

Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Post to : 
openstack@lists.openstack.org

Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] KVM shows several processes for a single VM on the host

[Chris Friesen]

On 09/09/2014 07:58 AM, Narayanan, Krishnaprasad wrote:

Hallo all,

I have an OpenStack setup based on Havana with several compute nodes.
When I instantiate a virtual machine with 1 or more virtual cores, in
the process list of the compute node, I am able to see more than 1
process associated to the same VM. The process list that I refer is the
process which can be seen by running either top or htop.

Can I know the significance of other processes which are associated to
the same VM? Are these child processes?


Are they separate processes or separate threads?  Separate threads would 
be expected, but separate processes would not be.


Chris


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] [nova] [policy] hypervisor list

[Jay Pipes]

On 09/09/2014 05:41 AM, Abbass MAROUNI wrote:

Hi guys,

Do you know if it is possible to give normal users the right to list
hypervisors ?
Apparently setting hypervisor policies in /etc/nova/policy.json is not
enough the right to do so is buried within the Database or API code.

Any workaround ? even if it means that we need to comment some code in
API or Database ?


I cannot think of any reason why a normal user should see the output of 
the os-hypervisors extension. Could you please explain the use case 
around this?


Best,
-jay

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Keystone problem

[Louis-Philippe Reid]

Ok, I think I just found a typo resulting from the correction I did for
adminurl.  I have http:///lecloud100 (note the triple /).  Let me check
that again and retest.

On Tue, Sep 9, 2014 at 10:35 AM, Louis-Philippe Reid <
louis.philippe.r...@gmail.com> wrote:

>
>
> I'm not sure I understand you correctly.  keystone is not associated
> properly with the role? Let met trace association and you will be able to
> tell me where the link is not good:
>
> user 4e51cf42393e478ba630233a1984e5ab admin associated to tenant admin 
> bc8c91c4c321480a99c1d5c01f9ee2ee
>
>
> # keystone user-role-list --user admin --tenant admin
> WARNING: Bypassing authentication using a token & endpoint (authentication 
> credentials are being ignored).
> +--+--+--+--+
> |id|   name   | user_id   
>|tenant_id |
> +--+--+--+--+
> | 9fe2ff9ee4384b1894a90878d3e92bab | _member_ | 
> 4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |
> | e51a667a851f4768b3ee3fb7c4de711d |  admin   | 
> 4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |
> +--+--+--+--+
>
>
> user_id is mapping to the correct user:
>
> # keystone user-list
> WARNING: Bypassing authentication using a token & endpoint (authentication 
> credentials are being ignored).
> +--+---+-+-+
> |id|  name | enabled |  email 
>  |
> +--+---+-+-+
> | 4e51cf42393e478ba630233a1984e5ab | admin |   True  | 
> xxx |
> | 38ee12f0c8364218a7ffab0c39fbce5f |  demo |   True  | 
> xxx |
> +--+---+-+-+
>
> also associated to the right tenant:
>
> # keystone tenant-list
> WARNING: Bypassing authentication using a token & endpoint (authentication 
> credentials are being ignored).
> +--+-+-+
> |id|   name  | enabled |
> +--+-+-+
> | bc8c91c4c321480a99c1d5c01f9ee2ee |  admin  |   True  |
> | 9bddf495845e4138b6c05305917518b9 |   demo  |   True  |
> | 2ba53d8ccf82496eb4c0ed91db73df41 | service |   True  |
> +--+-+-+
>
>
>
> service keystone is associated correctly to endpoint:
>
>
> keystone cad84013496a4d33a132fd99026d1322 associated with endpoint  
> 9c5aa10925014e7c939ad392d8384b22
>
>
> # keystone service-list
> WARNING: Bypassing authentication using a token & endpoint (authentication 
> credentials are being ignored).
> +--+--+--++
> |id|   name   |   type   |description 
> |
> +--+--+--++
> | cad84013496a4d33a132fd99026d1322 | keystone | identity | OpenStack Identity 
> |
> +--+--+--++
>
> # keystone endpoint-list
> WARNING: Bypassing authentication using a token & endpoint (authentication 
> credentials are being ignored).
> +--+---++-+---+--+
> |id|   region  | 
> publicurl  | internalurl |
> adminurl   |service_id|
> +--+---++-+---+--+
> | 9c5aa10925014e7c939ad392d8384b22 | regionOne | 
> http://cloud-pp-public-10-15-109-200..com:5000/v2.0| 
> http://lecloud100:5000/v2.0 | http:///lecloud100:35357/v2.0 | 
> cad84013496a4d33a132fd99026d1322 |
> +--+---++-+---+--+
>
>
> Looking back at the documentation I don't see any missing links.  What am I 
> missing?
>
> Thanks,
>
>
>
> On Tue, Sep 9, 2014 at 10:06 AM,  wrote:
>
>>  Hi,
>>
>>
>>  I did check the attached doc. I find that the keystone is not
>> associated properly with the role.

Re: [Openstack] Keystone problem

[Louis-Philippe Reid]

I'm not sure I understand you correctly.  keystone is not associated
properly with the role? Let met trace association and you will be able to
tell me where the link is not good:

user 4e51cf42393e478ba630233a1984e5ab admin associated to tenant admin
bc8c91c4c321480a99c1d5c01f9ee2ee


# keystone user-role-list --user admin --tenant admin
WARNING: Bypassing authentication using a token & endpoint
(authentication credentials are being ignored).
+--+--+--+--+
|id|   name   | user_id
  |tenant_id |
+--+--+--+--+
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |
| e51a667a851f4768b3ee3fb7c4de711d |  admin   |
4e51cf42393e478ba630233a1984e5ab | bc8c91c4c321480a99c1d5c01f9ee2ee |
+--+--+--+--+


user_id is mapping to the correct user:

# keystone user-list
WARNING: Bypassing authentication using a token & endpoint
(authentication credentials are being ignored).
+--+---+-+-+
|id|  name | enabled |
email  |
+--+---+-+-+
| 4e51cf42393e478ba630233a1984e5ab | admin |   True  |
xxx |
| 38ee12f0c8364218a7ffab0c39fbce5f |  demo |   True  |
xxx |
+--+---+-+-+

also associated to the right tenant:

# keystone tenant-list
WARNING: Bypassing authentication using a token & endpoint
(authentication credentials are being ignored).
+--+-+-+
|id|   name  | enabled |
+--+-+-+
| bc8c91c4c321480a99c1d5c01f9ee2ee |  admin  |   True  |
| 9bddf495845e4138b6c05305917518b9 |   demo  |   True  |
| 2ba53d8ccf82496eb4c0ed91db73df41 | service |   True  |
+--+-+-+



service keystone is associated correctly to endpoint:


keystone cad84013496a4d33a132fd99026d1322 associated with endpoint
9c5aa10925014e7c939ad392d8384b22


# keystone service-list
WARNING: Bypassing authentication using a token & endpoint
(authentication credentials are being ignored).
+--+--+--++
|id|   name   |   type   |description |
+--+--+--++
| cad84013496a4d33a132fd99026d1322 | keystone | identity | OpenStack Identity |
+--+--+--++

# keystone endpoint-list
WARNING: Bypassing authentication using a token & endpoint
(authentication credentials are being ignored).
+--+---++-+---+--+
|id|   region  |
  publicurl  | internalurl |
 adminurl   |service_id|
+--+---++-+---+--+
| 9c5aa10925014e7c939ad392d8384b22 | regionOne |
http://cloud-pp-public-10-15-109-200..com:5000/v2.0|
http://lecloud100:5000/v2.0 | http:///lecloud100:35357/v2.0 |
cad84013496a4d33a132fd99026d1322 |
+--+---++-+---+--+


Looking back at the documentation I don't see any missing links.  What
am I missing?

Thanks,



On Tue, Sep 9, 2014 at 10:06 AM,  wrote:

>  Hi,
>
>
>  I did check the attached doc. I find that the keystone is not associated
> properly with the role.
>
>
>  You can try to unset and then keystone token-get, after which try
> executing the keystone commands by sourcing from the file.
>
>
>  Let me know if that helps.
>
>
>  Regards,
>
> Raghavendra Lad
>
>
>  --
> *From:* Louis-Philippe Reid 
> *Sent:* Tuesday, September 9, 2014 7:25 PM
> *To:* Lad, Raghavendra
> *Cc:* openstack@lists.openstack.org
> *Subject:* Re: [Openstack] Keystone problem
>
>  Thanks for your quick reply,  I found an error in my installation

[Openstack] Fwd: database and dashboard out of sync

[Srinivasreddy R]

hi julie,

thanks alot for your response .
yes database doesn't maintain any database .

the tenant on the command-line and dashboard are not same .so , i am not
able to see in dash-board .

thanks,
srinivas.


On 08/09/14 23:15, Srinivasreddy R wrote:
> hi,
> i have generated key pair and it is visible by the command
> nova keypair-list
>
> but it is not visible in the dashboard .. because of this i am getting
> error while launching instance  giving error message like
> ERROR (Not Found ) :  The resource could not be found . (HTTP 404
> )(Request-Id  )
> pls help me ..

Hi Srinivas,

The dashboard doesn't keep its own database, it only talks to the other
services using their APIs so it shouldn't be able to get out of sync.

Perhaps double-check that you're using the same tenant on the
command-line (from your rc file, probably the OS_TENANT_NAME environment
variable) and when on the dashboard (the name should be indicated in the
top bar)?

Where do you see the error 404, what's the traceback? You shouldn't be
able to select a key pair you don't have access to at all from the
dashboard, so it shouldn't even show you a 404 and simply launch the
instance with no key pair...

Julie

>
> thanks,
> srinivas.
>
>
>
> ___
> Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe :
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] 3 processes for a VM which has 1 VCPU

[Narayanan, Krishnaprasad]

Hallo all,

Let me make my earlier email more precise. For a VM that has 1 virtual core, I 
am able to see 3 processes in total, probably 1 process per virtual core. Can I 
kindly know the purpose of other two processes?

Regards,
Krishnaprasad
From: Narayanan, Krishnaprasad
Sent: Dienstag, 9. September 2014 15:58
To: 'openstack@lists.openstack.org'
Subject: KVM shows several processes for a single VM on the host

Hallo all,

I have an OpenStack setup based on Havana with several compute nodes.  When I 
instantiate a virtual machine with 1 or more virtual cores, in the process list 
of the compute node, I am able to see more than 1 process associated to the 
same VM. The process list that I refer is the process which can be seen by 
running either top or htop.

Can I know the significance of other processes which are associated to the same 
VM? Are these child processes?

Regards,
Krishnaprasad
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] [nova] Live migration problem

[Шакиров Айнур]

Good day, everything_

I use OpenStack Icehouse 2014.1.2, QEMU (for tests) and cinder with LIO as 
iscsi target system in the Alt Linux (Russian Linux distr), Openstack packages 
from Fedora.

I have a problem with live migration.

Steps to reproduce:
1. Create VM with boot from disk in one node (c3).
2. Migrate this VM to another node (c2). Live migration is OK.
3. Again migrate this VM to c3 host and receive error "No portal found".

In second migration Nova not executes logout iscsi-session in source host c2 
and tries to connect iscsi-target to dest host c3.

Nova compute logs (sorry for a lot of keystone PKI tokens in the logs):
с3.success.migrate -> http://pastebin.archlinux.fr/581017
c2.success.migrate -> http://pastebin.archlinux.fr/581027
c2.fail.migrate -> http://pastebin.archlinux.fr/581029
c3.fail.migrate -> http://pastebin.archlinux.fr/581040

Version of software (both of compute nodes):
python-module-novaclient-2.17.0-alt1
python-module-nova-2014.1.2-alt2
openstack-nova-common-2014.1.2-alt2
openstack-nova-compute-2014.1.2-alt2
libvirt-1.0.4-alt2

Help me, please.

WBR.
Ainur Shakirov.___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Keystone problem

[Louis-Philippe Reid]

Thanks for your quick reply,  I found an error in my installation when I
defined the endpoint.  I used port 5000 for the adminurl.  I restarted from
scratch, once again just to be sure it was clean and made sure ton unset
the token and service endpoint has you suggested.  I did use the --os
commands.   I did create admin and associate everything.  Also, the error I
get since I corrected the adminurl is now different.

[root@lecloud100 ~]# env | grep OS_
OS_PASSWORD=xx
OS_AUTH_URL=http://lecloud100:35357/v2.0
OS_USERNAME=admin
OS_TENANT_NAME=admin

# keystone user-list
'NoneType' object has no attribute 'encode'


Here is all the information used to create the config, line by line and
debug outputs:

http://pastebin.com/6XWVqBqb

Thanks,



On Tue, Sep 9, 2014 at 8:07 AM,  wrote:

>  Hi,
>
>
>
> You have to unset the service service token and service endpoint.
>
> Use the keystone  - -os  command to authenticate admin. Create admin
> associate this user, role and service.
>
> Let me know if  you encounter any issues.
>
>
>
> Regards,
>
> Raghavendra Lad
>
>
>
> *From:* Louis-Philippe Reid [mailto:louis.philippe.r...@gmail.com]
> *Sent:* Tuesday, September 09, 2014 5:28 PM
> *To:* openstack@lists.openstack.org
> *Subject:* [Openstack] Keystone problem
>
>
>
> Hi Everyone,
>
>
>
> This is my second OpenStack installation.  My first installation has been
> really easy but this time I'm getting a hard time right at the start with
> Keystone, hope you can shed some light on this issue.  I must be doing
> something wrong as I did the previous installation only a week ago.
>
>
>
> Basically i'm stuck at "verify the identity service installation", where
> i'm testing the admin user.
>
>
>
> I get a 404 from running keystone user-list with the admin user.  It's
> running fine using OS_SERVICE_TOKEN and OS_SERVICE_ENDPOINT.
>
>
>
> I get a "Auth token not in the request header." when running keystone in
> debug mode when i run the keystone command.
>
>
>
> I can run "keystone token-get" and get the normal output (id, tenant_id,
> user_id, ...).  I get the "Auth token not in the request header." in the
> log though.
>
>
>
> I have dropped the keystone database and I have repeated the keystone
> installation 2 times with no luck.
>
>
>
> # rpm -qa | grep keystone
>
> python-keystone-2014.1.1-1.el6.noarch
>
> openstack-keystone-2014.1.1-1.el6.noarch
>
> python-keystoneclient-0.9.0-1.el6.noarch
>
>
>
> Here is a log of relevant information:
>
>
>
> http://pastebin.com/GcgyPUbd
>
>
>
> Thanks for you help.
>
>
>
>
>
>
>
> --
>
> This message is for the designated recipient only and may contain
> privileged, proprietary, or otherwise confidential information. If you have
> received it in error, please notify the sender immediately and delete the
> original. Any other use of the e-mail by you is prohibited. Where allowed
> by local law, electronic communications with Accenture and its affiliates,
> including e-mail and instant messaging (including content), may be scanned
> by our systems for the purposes of information security and assessment of
> internal compliance with Accenture policy.
>
> __
>
> www.accenture.com
>
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] SWIFT - Write Quorum

[Brent Troge]

If I configure Swift to use 4 replicas across two regions(two replicas per
region), is it possible to only list a newly ingested object if it has
written at least twice? The goal is to only list a new object only if it
has a presence in each region.

west coast
region 1 - zone 1
region 1 - zone 2

east coast
region 2  - zone 1( 3?)
region 2 -  zone 2( 4?)

Thanks!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Keystone problem

[raghavendra.lad]

Hi,


I did check the attached doc. I find that the keystone is not associated 
properly with the role.


You can try to unset and then keystone token-get, after which try executing the 
keystone commands by sourcing from the file.


Let me know if that helps.


Regards,

Raghavendra Lad



From: Louis-Philippe Reid 
Sent: Tuesday, September 9, 2014 7:25 PM
To: Lad, Raghavendra
Cc: openstack@lists.openstack.org
Subject: Re: [Openstack] Keystone problem

Thanks for your quick reply,  I found an error in my installation when I 
defined the endpoint.  I used port 5000 for the adminurl.  I restarted from 
scratch, once again just to be sure it was clean and made sure ton unset the 
token and service endpoint has you suggested.  I did use the --os commands.   I 
did create admin and associate everything.  Also, the error I get since I 
corrected the adminurl is now different.

[root@lecloud100 ~]# env | grep OS_
OS_PASSWORD=xx
OS_AUTH_URL=http://lecloud100:35357/v2.0
OS_USERNAME=admin
OS_TENANT_NAME=admin

# keystone user-list
'NoneType' object has no attribute 'encode'


Here is all the information used to create the config, line by line and debug 
outputs:

http://pastebin.com/6XWVqBqb

Thanks,



On Tue, Sep 9, 2014 at 8:07 AM, 
mailto:raghavendra@accenture.com>> wrote:
Hi,

You have to unset the service service token and service endpoint.
Use the keystone  - -os  command to authenticate admin. Create admin associate 
this user, role and service.
Let me know if  you encounter any issues.

Regards,
Raghavendra Lad

From: Louis-Philippe Reid 
[mailto:louis.philippe.r...@gmail.com]
Sent: Tuesday, September 09, 2014 5:28 PM
To: openstack@lists.openstack.org
Subject: [Openstack] Keystone problem

Hi Everyone,

This is my second OpenStack installation.  My first installation has been 
really easy but this time I'm getting a hard time right at the start with 
Keystone, hope you can shed some light on this issue.  I must be doing 
something wrong as I did the previous installation only a week ago.

Basically i'm stuck at "verify the identity service installation", where i'm 
testing the admin user.

I get a 404 from running keystone user-list with the admin user.  It's running 
fine using OS_SERVICE_TOKEN and OS_SERVICE_ENDPOINT.

I get a "Auth token not in the request header." when running keystone in debug 
mode when i run the keystone command.

I can run "keystone token-get" and get the normal output (id, tenant_id, 
user_id, ...).  I get the "Auth token not in the request header." in the log 
though.

I have dropped the keystone database and I have repeated the keystone 
installation 2 times with no luck.

# rpm -qa | grep keystone
python-keystone-2014.1.1-1.el6.noarch
openstack-keystone-2014.1.1-1.el6.noarch
python-keystoneclient-0.9.0-1.el6.noarch

Here is a log of relevant information:

http://pastebin.com/GcgyPUbd

Thanks for you help.






This message is for the designated recipient only and may contain privileged, 
proprietary, or otherwise confidential information. If you have received it in 
error, please notify the sender immediately and delete the original. Any other 
use of the e-mail by you is prohibited. Where allowed by local law, electronic 
communications with Accenture and its affiliates, including e-mail and instant 
messaging (including content), may be scanned by our systems for the purposes 
of information security and assessment of internal compliance with Accenture 
policy.
__

www.accenture.com

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] KVM shows several processes for a single VM on the host

[Narayanan, Krishnaprasad]

Hallo all,

I have an OpenStack setup based on Havana with several compute nodes.  When I 
instantiate a virtual machine with 1 or more virtual cores, in the process list 
of the compute node, I am able to see more than 1 process associated to the 
same VM. The process list that I refer is the process which can be seen by 
running either top or htop.

Can I know the significance of other processes which are associated to the same 
VM? Are these child processes?

Regards,
Krishnaprasad
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] unable to retrieve back the networks table in nova database after truncation

[Srinivasreddy R]

hi,
i am trying to setup three node setup unfortunately we have truncated
networks table in nova database from mysql .
and because of that we are facing one more error in launching instance  .
please help us to restore the networks tables for nova database .

we have tried uninstalling all the nova packages for controller node  and
reinstalled .
even though still the networks tables for nova database is empty ..
because of this we are not able to launch the instance .

user@user-ThinkCentre-M73:~$ source admin-openrc.sh
user@user-ThinkCentre-M73:~$ neutron net-create ext-net --shared
--router:external=True
Created a new network:
+---+--+
| Field | Value|
+---+--+
| admin_state_up| True |
| id| 5ab6836d-b04a-4d45-88ca-4ca7c3e15db5 |
| name  | ext-net  |
| provider:network_type | gre  |
| provider:physical_network |  |
| provider:segmentation_id  | 1|
| router:external   | True |
| shared| True |
| status| ACTIVE   |
| subnets   |  |
| tenant_id | 92ae5ba7cdcf41a7ac82d3c25dd209e6 |
+---+--+
user@user-ThinkCentre-M73:~$ neutron subnet-create ext-net --name
ext-subnet --allocation-pool start=203.0.113.101,end=203.0.113.200
--disable-dhcp --gateway 203.0.113.1 203.0.113.0/24
Created a new subnet:
+--++
| Field| Value  |
+--++
| allocation_pools | {"start": "203.0.113.101", "end": "203.0.113.200"} |
| cidr | 203.0.113.0/24 |
| dns_nameservers  ||
| enable_dhcp  | False  |
| gateway_ip   | 203.0.113.1|
| host_routes  ||
| id   | 3c2d650e-51ae-4924-989d-d881e2ebfe1b   |
| ip_version   | 4  |
| name | ext-subnet |
| network_id   | 5ab6836d-b04a-4d45-88ca-4ca7c3e15db5   |
| tenant_id| 92ae5ba7cdcf41a7ac82d3c25dd209e6   |
+--++
user@user-ThinkCentre-M73:~$ neutron net-list
+--+--+-+
| id   | name |
subnets |
+--+--+-+
| 5ab6836d-b04a-4d45-88ca-4ca7c3e15db5 | ext-net  |
3c2d650e-51ae-4924-989d-d881e2ebfe1b 203.0.113.0/24 |
| a78571fd-e9fc-40ea-a488-e460b20e267a | demo-net |
0c66fbc3-edb3-4c46-b725-76443de8e570 192.168.1.0/24 |
+--+--+-+
user@user-ThinkCentre-M73:~$ nova net-list
++---+--+
| ID | Label | CIDR |
++---+--+
++---+--+

user@user-ThinkCentre-M73:~$ source demo-openrc.sh
user@user-ThinkCentre-M73:~$ nova net-list
++---+--+
| ID | Label | CIDR |
++---+--+
++---+--+
[DEFAULT]
# Print more verbose output (set logging level to INFO instead of default 
WARNING level).
# verbose = False

vif_plugging_is_fatal: false
vif_plugging_timeout: 0

auth_strategy = keystone
rpc_backend = neutron.openstack.common.rpc.impl_kombu
rabbit_host = controller
rabbit_password = rabbit123
#Configure Networking to notify Compute about network topology changes:
notify_nova_on_port_status_changes = True
notify_nova_on_port_data_changes = True
nova_url = http://controller:8774/v2
nova_admin_username = nova
nova_admin_tenant_id = 62c563f3f8084ed0be8e14b8aafda67f
nova_admin_password = nova123
nova_admin_auth_url = http://controller:35357/v2.0
#Configure Networking to use the Modular Layer 2 (ML2) plug-in and associated 
services:
core_plugin = ml2
service_plugins = router
allow_overlapping_ips = True
verbose = True
# Print debugging output (set logging level to DEBUG instead of default WARNING 
level).
# debug = False

# Where to store Neutron state files.  This directory must be writable 

[Openstack] [neutron] Missing openflow rules in br-tun

[Sławek Kapłoński]

Hello,

I'm using openstack with neutron (Havana release) and ML2 plugin with 
l2population and openvswitch agent on hosts. I have tenant networks with 
vxlan tunnels made and generally everything works well but I have small 
issue few times. On host there was missing openflow rule for traffic 
incoming from different host. After restart ovs_agent it configure all 
openflow rules fine and network in instances was ok.
Do You notice same problem? Maybe there is some patch or solution fir 
such problem? Thanks in advance for any help.


--
Pozdrawiam
Sławek Kapłoński
sla...@kaplonski.pl

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] Keystone problem

[Louis-Philippe Reid]

Hi Everyone,

This is my second OpenStack installation.  My first installation has been
really easy but this time I'm getting a hard time right at the start with
Keystone, hope you can shed some light on this issue.  I must be doing
something wrong as I did the previous installation only a week ago.

Basically i'm stuck at "verify the identity service installation", where
i'm testing the admin user.

I get a 404 from running keystone user-list with the admin user.  It's
running fine using OS_SERVICE_TOKEN and OS_SERVICE_ENDPOINT.

I get a "Auth token not in the request header." when running keystone in
debug mode when i run the keystone command.

I can run "keystone token-get" and get the normal output (id, tenant_id,
user_id, ...).  I get the "Auth token not in the request header." in the
log though.

I have dropped the keystone database and I have repeated the keystone
installation 2 times with no luck.

# rpm -qa | grep keystone
python-keystone-2014.1.1-1.el6.noarch
openstack-keystone-2014.1.1-1.el6.noarch
python-keystoneclient-0.9.0-1.el6.noarch

Here is a log of relevant information:

http://pastebin.com/GcgyPUbd

Thanks for you help.
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Keystone problem

[raghavendra.lad]

Hi,

You have to unset the service service token and service endpoint.
Use the keystone  - -os  command to authenticate admin. Create admin associate 
this user, role and service.
Let me know if  you encounter any issues.

Regards,
Raghavendra Lad

From: Louis-Philippe Reid [mailto:louis.philippe.r...@gmail.com]
Sent: Tuesday, September 09, 2014 5:28 PM
To: openstack@lists.openstack.org
Subject: [Openstack] Keystone problem

Hi Everyone,

This is my second OpenStack installation.  My first installation has been 
really easy but this time I'm getting a hard time right at the start with 
Keystone, hope you can shed some light on this issue.  I must be doing 
something wrong as I did the previous installation only a week ago.

Basically i'm stuck at "verify the identity service installation", where i'm 
testing the admin user.

I get a 404 from running keystone user-list with the admin user.  It's running 
fine using OS_SERVICE_TOKEN and OS_SERVICE_ENDPOINT.

I get a "Auth token not in the request header." when running keystone in debug 
mode when i run the keystone command.

I can run "keystone token-get" and get the normal output (id, tenant_id, 
user_id, ...).  I get the "Auth token not in the request header." in the log 
though.

I have dropped the keystone database and I have repeated the keystone 
installation 2 times with no luck.

# rpm -qa | grep keystone
python-keystone-2014.1.1-1.el6.noarch
openstack-keystone-2014.1.1-1.el6.noarch
python-keystoneclient-0.9.0-1.el6.noarch

Here is a log of relevant information:

http://pastebin.com/GcgyPUbd

Thanks for you help.






This message is for the designated recipient only and may contain privileged, 
proprietary, or otherwise confidential information. If you have received it in 
error, please notify the sender immediately and delete the original. Any other 
use of the e-mail by you is prohibited. Where allowed by local law, electronic 
communications with Accenture and its affiliates, including e-mail and instant 
messaging (including content), may be scanned by our systems for the purposes 
of information security and assessment of internal compliance with Accenture 
policy.
__

www.accenture.com
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] is anyone using zeromq for RPC?

[Li Ma]

On 2014/9/8 23:11, Doug Hellmann wrote:
It’s great to know you were able to get a version working for your 
needs. I really thought it was fairly broken — did you have to patch 
the driver at all? 


Actually it was not that broken. Patches our team provided are merged 
before.

https://review.openstack.org/#/c/84310/
https://review.openstack.org/#/c/84618/

And here's another abandoned patch:
https://review.openstack.org/#/c/84938/
I'll explain it in the bug list later and rework on it.

With these patch, ZeroMQ will be OK.

(1) Provide tuning parameters for ZeroMQ context and sockets in order to 
fine-tune ZeroMQ for different deployment scenario.

(2) Provide comprehensive test cases for ZeroMQ.

(3) Support Devstack.

(4) Provide installation tutorial in OpenStack docs.

(5) Provide suggestions on real deployment architecture in OpenStack docs.

We also need to add functional testing for the driver in the CI environment.
Yes, almost forgot that CI is the most important for ZeroMQ driver, and 
the documentation as well. As I listed above, we need a plan for how to 
build the whole ZeroMQ support environment step by step, especially the 
priority that I'm not very clear. Anyway, I think it seems not realistic 
to land everything for Juno.


cheers,
Li Ma

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] Unsuccessful block live-migration with assigned floating ip using nova-network

[retinara]

Hello,



I am facing to following issue:





I am not able to successfuly migrate (block live migration) VM with assigned
floating IP, there is no problem with migration of VM with no floating IP 
assigned. We are using nova-network for networking . Migration is iniciated 
but it gets stuck in "migrating status" and never ends. Only option is 
terminate the instance during its migration which leads to inconsistency 
between VM listed by "nova list" and "virsh list" commands. (Terminated 
instance appears as running machine under virsh list).

nova-all.log at source host seems to be fine, but nova-all.log at 
destination host records following error during the migration:

  File 
"/usr/lib64/python2.6/site-packages/sqlalchemy/orm/unitofwork.py", line 63, 
in set_newvalue_state = attributes.instance_state(newvalue)

AttributeError: 
'FixedIP' object 
has no attribute '_sa_instance_state'

System configuration is as follows:

   * Mirantis Openstack 5.0
   * Openstack Icehouse release
   * Nova 2.18.1
   * QEMU 1.2.1
   * Libvirt 0.10.2
   * nova-network
   

Is there any way how to setup block live migration of floating IP assigned 
VM with nova-network network configuration in Icehouse release? 

Thank you for your help


BR,

Vojtech

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] [heat] identity:create_domain failed (403)

[Steven Hardy]

On Mon, Sep 08, 2014 at 11:07:57PM +, David Hill wrote:
>Hi guys,
> 
> 
> 
>I have 2 environments that are almost identical but one of
>them gives me this:
> 
> 
> 
>keystoneclient.openstack.common.apiclient.exceptions.Forbidden: You are
>not authorized to perform the requested action, identity:create_domain.
>(HTTP 403)
> 
> 
> 
>When I try to run:
> 
> 
> 
>heat-keystone-setup-domain --stack-domain-admin stack_admin
>--stack-domain-admin-password $password --stack-user-domain-name heat
> 
> 
> 
>The problem is that I'm using the same policy everywhere and one works but
>the other doesn't. I'm out of ideas!

I think heat-keystone-setup-domain is just the messenger here, and that
either the credentials used lack sufficient roles to create the domain, or
you have issues with the keystone configuration.

I'd suggest installing python-openstackclient and testing creating a domain
with that:

openstack --os-token atoken --os-url=http://127.0.0.1:5000/v3 \
--os-identity-api-version=3 domain create test123

You can actually use python-openstackclient to do all the domain
configuration, heat-keystone-setup-domain is just a convenience script for
some folks who didn't have it in their environments, instructions here:

http://hardysteven.blogspot.co.uk/2014/04/heat-auth-model-updates-part-2-stack.html

Steve

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Architecture Compute Beginner Question

[Tom Fifield]

On 09/09/14 17:38, Christos Grivas wrote:
> Hello all,
> 
> I have a fundamental question which, hopefully, someone here can answer.
> I will ask by presenting a probably non-realistic example.
> 
> Lets say I have 10 compute nodes as separate physical machines  with 1
> core each. Without taking into account the ability to overload each core
> (the famous 16:1) I would like to know:
> 
> *Can i use all the 10 cores to create a single instance that takes
> advantage of the all the core pool?* Or the fact that each compute node
> has its own hypervisor limits the core usage of each instance to one?
> Are the whole resources abstracted and seen as one or not?
> 
> Thank you in advance.

Hi Chris,

Thanks for looking into OpenStack! Your question has been asked and
answered previously at:

https://ask.openstack.org/en/question/1230/are-cpu-memory-pooled/

https://ask.openstack.org/en/question/32877/multiple-compute-for-one-instance-is-it-possible/

https://ask.openstack.org/en/question/7925/can-vms-use-paralleled-cpus/

https://ask.openstack.org/en/question/6932/cores-from-multiple-physical-hosts-in-vm/

However, there has been some work going on recently around NUMA  - that
might be worth looking into if you have such a requirement.


Regards,


Tom



___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] Implement "swift service-list" in python-swiftclient

[Ashish Chandra]

Hi,

In Horizon dashboard, under Admin-> System Info we have service lists for
Compute and Block Storage. I have filed a blueprint to populate the Swift
services there.
But while going through the implementation details of Compute Services and
Block Storage Services i got to know that the details there is populated
through api calls to python-novaclient and python-cinderclient respectively
which in turn uses "nova service-list" and "cinder service-list" to return
the details.

Whereas no such method is implemented in python-swiftclient to get the list
of services.

So my question is,

1) Do we have plans to include "swift service-list" in swiftclient ?
If yes then I would be filing a blueprint in python-swiftclient to
implement the same coz I require it to populate under the Admin -> System
Info -> Object Storage Services.

2) Is there any other way through which I can get the details of the swift
services (s-proxy, s-account, s-container, s-object) .

As a side note I can also see it has also not been implemented in some
other services like glance and heat. Is it a design decision or the feature
has not been simply impemented.

-- 

.-  -..--.  ,---.  .-=<>=-.
   /_-\'''/-_\  / / '' \ \ |,-.| /____\
  |/  o) (o  \|| | ')(' | |   /,'-'.\   |/ (')(') \|
   \   ._.   /  \ \/ /   {_/(') (')\_}   \   __   /
   ,>-_,,,_-<.   >'=jf='< `.   _   .','--__--'.
 /  .  \/\ /'-___-'\/:|\
(_) . (_)  /  \   / \  (_)   :|   (_)
 \_-'--/  (_)(_) (_)___(_)   |___:||
  \___/ || \___/ |_|


Thanks and Regards

Ashish Chandra
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] (no subject)

[Ashish Chandra]

Hi,

In Horizon dashboard, under Admin-> System Info we have service lists for
Compute and Block Storage. I have filed a blueprint to populate the Swift
services there.
But while going through the implementation details of Compute Services and
Block Storage Services i got to know that the details there is populated
through api calls to python-novaclient and python-cinderclient respectively
which in turn uses "nova service-list" and "cinder service-list" to return
the details.

Whereas no such method is implemented in python-swiftclient to get the list
of services.

So my question is,

1) Do we have plans to include "swift service-list" in swiftclient ?
If yes then I would be filing a blueprint in python-swiftclient to
implement the same coz I require it to populate under the Admin -> System
Info -> Object Storage Services.

2) Is there any other way through which I can get the details of the swift
services (s-proxy, s-account, s-container, s-object) .

As a side note I can also see it has also not been implemented in some
other services like glance and heat. Is it a design decision or the feature
has not been simply impemented.

-- 

.-  -..--.  ,---.  .-=<>=-.
   /_-\'''/-_\  / / '' \ \ |,-.| /____\
  |/  o) (o  \|| | ')(' | |   /,'-'.\   |/ (')(') \|
   \   ._.   /  \ \/ /   {_/(') (')\_}   \   __   /
   ,>-_,,,_-<.   >'=jf='< `.   _   .','--__--'.
 /  .  \/\ /'-___-'\/:|\
(_) . (_)  /  \   / \  (_)   :|   (_)
 \_-'--/  (_)(_) (_)___(_)   |___:||
  \___/ || \___/ |_|


Thanks and Regards

Ashish Chandra
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [Openstack] Architecture Compute Beginner Question

[Bhandaru, Malini K]

No sharing of cores across physical compute nodes. Limited to what the 
hypervisor can see, in this case one core.
Regards
Malini

From: Christos Grivas [mailto:chgriv...@gmail.com]
Sent: Tuesday, September 09, 2014 2:38 AM
To: openstack@lists.openstack.org
Subject: [Openstack] Architecture Compute Beginner Question

Hello all,
I have a fundamental question which, hopefully, someone here can answer.
I will ask by presenting a probably non-realistic example.

Lets say I have 10 compute nodes as separate physical machines  with 1 core 
each. Without taking into account the ability to overload each core (the famous 
16:1) I would like to know:

Can i use all the 10 cores to create a single instance that takes advantage of 
the all the core pool? Or the fact that each compute node has its own 
hypervisor limits the core usage of each instance to one? Are the whole 
resources abstracted and seen as one or not?
Thank you in advance.
B/R

Chris
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] [nova] [policy] hypervisor list

[Abbass MAROUNI]

Hi guys,

Do you know if it is possible to give normal users the right to list 
hypervisors ?
Apparently setting hypervisor policies in /etc/nova/policy.json is not 
enough the right to do so is buried within the Database or API code.


Any workaround ? even if it means that we need to comment some code in 
API or Database ?


Kind regards,

--
--
Abbass MAROUNI
VirtualScale


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] Architecture Compute Beginner Question

[Christos Grivas]

Hello all,

I have a fundamental question which, hopefully, someone here can answer.
I will ask by presenting a probably non-realistic example.

Lets say I have 10 compute nodes as separate physical machines  with 1 core
each. Without taking into account the ability to overload each core (the
famous 16:1) I would like to know:

*Can i use all the 10 cores to create a single instance that takes
advantage of the all the core pool?* Or the fact that each compute node has
its own hypervisor limits the core usage of each instance to one? Are the
whole resources abstracted and seen as one or not?

Thank you in advance.

B/R


Chris
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack