Re: [Openstack] Share your localrc file for devstack

2013-07-29 Thread Remo Mattei
Hi Jake, 
what options did you use in your localrc?  If you have run the ./stack.sh you 
have to unstack it before you stack it again. In addition you have to check and 
see if your dnsmasq is running so there are a few things to check but overall 
devstack is pretty simple. Let me know if you have any questions..

Remo


On Jul 29, 2013, at 08:05 , Jake G.  wrote:

> After running stack.sh, logging into the dashboard, and launching an instance 
> I do not receive a ip from the dhcp service. 
> 
> Do I have to define the floating IP range and other networking info in the 
> localrc? Perhaps this is my issue.
> 
> Should I just run stack.sh without networking info?
> 
> 
> 
> On 2013/07/29, at 22:28, Roman Podolyaka  wrote:
> 
>> Hello Jake,
>> 
>> If you are going to use Neutron for networking, Devstack uses the following 
>> configuration by default:
>>   - OpenVSwitch Neutron plugin is used for tenant L2-networking (tenant 
>> network type is 'local' by default, so you can only connect VMs running on a 
>> single node)
>>   - two bridges are created: br-int (for connection of VMs running on this 
>> node) and br-ex (to provide access to the external network)
>> 
>> No additional configuration is needed to deploy Devstack with Neutron 
>> enabled. After that you should be able to run VMs, create tenant networks, 
>> Neutron routers, etc.
>> 
>> Could you please elaborate more on the problem that you have?
>> 
>> Thanks,
>> Roman
>> 
>> 
>> On Mon, Jul 29, 2013 at 3:48 PM, Jake G.  wrote:
>> I think I'm getting the basic networking configuration wrong. 
>> 
>> I have a single Ubuntu  host with 2 nics. 
>> One nic has a static IP 
>> And the other is up but no config.
>> 
>> What about flat networking and all that stuff that goes into the localrc 
>> file? 
>> 
>> 
>> 
>> On 2013/07/29, at 21:18, Roman Podolyaka  wrote:
>> 
>>> Hello Jake,
>>> 
>>> Do you want to deploy a single node Devstack installation that would use 
>>> Neutron instead of Nova for networking?
>>> 
>>> It should be as simple as putting these lines into your localrc file and 
>>> running stack.sh once again:
>>> 
>>> disable_service n-net
>>> enable_service q-svc
>>> enable_service q-agt
>>> enable_service q-dhcp
>>> enable_service q-l3
>>> enable_service q-meta
>>> enable_service quantum
>>> enable_service q-lbaas
>>> 
>>> Thanks,
>>> Roman
>>> 
>>> 
>>> On Mon, Jul 29, 2013 at 1:55 PM, Jake G.  wrote:
>>> Networking for quantum is still kicking my butt.
>>> 
>>> Would any devstack users be kind enough to post your localrc network 
>>> settings here?
>>> 
>>> I am using a allinone devstack node.
>>> 
>>> Thank you!
>>> 
>>> 
>>> ___
>>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> 
>>> 
>> 
> !DSPAM:2,51f6b919244381354520966!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,51f6b919244381354520966!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] swift with devstack options

2013-07-31 Thread Remo Mattei
Hello everyone, 
I wanted to test and extend a more option on swift with devstack. By default it 
comes with one replica an one drive (loop) is there anyone that has taken this 
to more drives? like 4 or 5 and the zone can be different since by default the 
zone is all in zone 1. 

Any suggestions are welcomed. 

Thanks, 

Remo 
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] devstack with neutron/quantum

2013-07-31 Thread Remo Mattei
Hi everyone, I wonder if anyone has seen this error where neutron does 
not start. here is the error I get with devstack. Any suggestions are 
welcomed.


Remo

remo@openstack-ub:~/devstack$ cd /opt/stack/neutron && python =
/usr/local/bin/neutron-l3-agent --config-file /etc/neutron/neutron.conf =
--config-file=3D/etc/neutron/l3_agent.ini || touch =
"/opt/stack/status/stack/q-l3.failure"
2013-07-31 13:05:07.698 18378 INFO neutron.common.config [-] Logging =
enabled!
2013-07-31 13:05:07.703 18378 ERROR neutron.common.legacy [-] Skipping =
unknown group key: firewall_driver
2013-07-31 13:05:07.703 18378 DEBUG neutron.common.utils [-] Reloading =
cached file /etc/neutron/policy.json read_cached_file =
/opt/stack/neutron/neutron/common/utils.py:55
2013-07-31 13:05:07.704 18378 DEBUG neutron.policy [-] loading policies =
from file: /etc/neutron/policy.json _set_rules =
/opt/stack/neutron/neutron/policy.py:88
2013-07-31 13:05:07.705 18378 CRITICAL neutron [-]
2013-07-31 13:05:07.705 18378 TRACE neutron Traceback (most recent call =
last):
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/usr/local/bin/neutron-l3-agent", line 10, in 
2013-07-31 13:05:07.705 18378 TRACE neutron sys.exit(main())
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/neutron/neutron/agent/l3_agent.py", line 833, in main
2013-07-31 13:05:07.705 18378 TRACE neutron =
manager=3D'neutron.agent.l3_agent.L3NATAgentWithStateReport')
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/neutron/neutron/service.py", line 204, in create
2013-07-31 13:05:07.705 18378 TRACE neutron =
periodic_fuzzy_delay=3Dperiodic_fuzzy_delay)
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/neutron/neutron/service.py", line 137, in __init__
2013-07-31 13:05:07.705 18378 TRACE neutron self.manager =3D =
manager_class(host=3Dhost, *args, **kwargs)
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/neutron/neutron/agent/l3_agent.py", line 756, in __init__
2013-07-31 13:05:07.705 18378 TRACE neutron =
super(L3NATAgentWithStateReport, self).__init__(host=3Dhost, conf=3Dconf)
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/neutron/neutron/agent/l3_agent.py", line 213, in __init__
2013-07-31 13:05:07.705 18378 TRACE neutron =
self._destroy_router_namespaces(self.conf.router_id)
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/neutron/neutron/agent/l3_agent.py", line 228, in =
_destroy_router_namespaces
2013-07-31 13:05:07.705 18378 TRACE neutron root_ip =3D =
ip_lib.IPWrapper(self.root_helper)
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/neutron/neutron/agent/linux/ip_lib.py", line 82, in __init__
2013-07-31 13:05:07.705 18378 TRACE neutron namespace=3Dnamespace)
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/neutron/neutron/agent/linux/ip_lib.py", line 39, in __init__
2013-07-31 13:05:07.705 18378 TRACE neutron self.force_root =3D =
cfg.CONF.ip_lib_force_root
2013-07-31 13:05:07.705 18378 TRACE neutron   File =
"/opt/stack/oslo.config/oslo/config/cfg.py", line 1626, in __getattr__
2013-07-31 13:05:07.705 18378 TRACE neutron raise AttributeError
2013-07-31 13:05:07.705 18378 TRACE neutron AttributeError
2013-07-31 13:05:07.705 18378 TRACE neutron=

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Does devstack installs swift?

2013-08-23 Thread Remo Mattei
Yes it does, here is my localrc info for Swift. 

Remo 


enable_service swift
SWIFT_HASH=stackme
SWIFT_REPLICAS=3



On Aug 23, 2013, at 06:33 , Swapnil Kulkarni  
wrote:

> Enabling swift in devstack is easy
> 
> Follow the localrc configuration in http://devstack.org/localrc.html section 
> Swift (Search with swift)
> 
> Keep single replica at start to verify your configuration works. Extend it as 
> per your convenience.
> 
> Also keep an eye on the glance, as it will select swift as default backend.
> 
> Best Regards,
> Swapnil Kulkarni
> swapnilkulkarni2...@gmail.com
> 
> 
> 
> On Fri, Aug 23, 2013 at 6:38 PM, Tong Li  wrote:
> By default, it does not install swift. You can add the following lines (or 
> uncomment) in your devstack localrc file, notice that the SERVICE_TOKEN needs 
> to be what you setup. With that, you run stack.sh again, then it will all 
> work with swift running.
> 
> enable_service swift
> 
> 
> SWIFT_HASH=66a3d6b56c1f479c8b4e70ab5c2000f5
> 
> 
> SWIFT_DATA_DIR=$DEST/data/swift
> SERVICE_TOKEN=
> SWIFT_LOOPBACK_DISK_SIZE=500
> 
> 
> Tong Li
> Emerging Technologies & Standards
> Building 501/B205
> liton...@us.ibm.com
> 
> Subramanian K ---08/23/2013 04:51:58 AM---Nope, devstack 
> includes swift. Check your stack.sh script used for installation. It will 
> clearly sta
> 
> From: Subramanian K 
> To:   Peeyush Gupta , 
> Cc:   openstack@lists.openstack.org
> Date: 08/23/2013 04:51 AM
> Subject:  Re: [Openstack] Does devstack installs swift?
> 
> 
> 
> Nope, devstack includes swift. Check your stack.sh script used for 
> installation. It will clearly states the components included in devstack
> On 23-Aug-2013 1:48 PM, "Peeyush Gupta"  wrote:
> 
> Hi,
> 
> I have installed openstack using devstack on Ubuntu 12.04 LTS.
> I tried to find swift in the installation, but couldn't. I mean, all other
> components are there like nova, cinder, horizon etc. but there is no
> swift. I couldn't find any process by the name of swift either. Is it the 
> case that devstack doesn't install swift? If yes, then how can I install
> it explicitly?
> 
> Thanks.
>  
> ~Peeyush Gupta
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,521766de162583841432614! 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,521766de162583841432614!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] Swift basic installation guide

2013-08-23 Thread Remo Mattei
Hello does anyone have a good basic guide to install swift into a single node. 

Thanks for sharing. 

Remo



___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] More Quantum

2013-08-29 Thread Remo Mattei
the logs are telling you that you have not auth. I would check if the services 
are running and then look at syslog (ubuntu) and go from there.

Remo


On Aug 29, 2013, at 11:44 , Joshua Skains  wrote:

> 2013-08-29 12:35:36.381 4670 TRACE nova.openstack.common.rpc.amqp 
> Unauthorized: {"error": {"message": "The request you have made requires 
> authentication.", "code": 401, "title": "Not Authorized"}}
> 2013-08-29 12:35:36.381 4670 TRACE nova.openstack.common.rpc.amqp 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] can swift create child container?

2013-08-30 Thread Remo Mattei
As far as I know you cannot have this container inside a container 

Inviato da iPad ()

Il giorno Aug 30, 2013, alle ore 18:41, pangj  ha scritto:

> I know for swift the sotrage url could be:
> http://swift.example.com:8080/AUTH_user/myfiles/myobject
> 
> But if I want a subdir under the container, for example,
> http://swift.example.com:8080/AUTH_user/myfiles/mydir/myobject
> 
> How will we do this?
> 
> Thanks.
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:2,52214c58111221987158058!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] R: Re: Openstack training

2013-09-02 Thread Remo Mattei
Migrants can set up something if you want check the training page

 Messaggio originale 
Da: Alfredo De Luca  
Data: 09/02/2013  16:22  (GMT-08:00) 
A: Michael Still  
Cc: openstack@lists.openstack.org 
Oggetto: Re: [Openstack] Openstack training 
 
Just sign up Michael. Thanks
I won't be here that time but for sure next one. Still interested in training 
if available.
Cheers
Alfredo



On Tue, Sep 3, 2013 at 9:18 AM, Michael Still  wrote:
On Tue, Sep 3, 2013 at 9:09 AM, Alfredo De Luca
 wrote:
> Hi Michael.
> I am looking for a training on the initial installation and more on admin
> stuff.
> Not sure if there is a group over here in Melbourne as I couldn't find any
> on the Openstack page. the only one was over there in Canberra!

This is the meetup group for Melbourne --
http://www.meetup.com/Australian-OpenStack-Users-Group/ -- their next
meeting is 30 September it seems.

Cheers,
Michael

--
Rackspace Australia



-- 
Alfredo

!DSPAM:2,52252221262364557319850!___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Keystone 'NoneType' object is unsubscriptable error

2013-09-04 Thread Remo Mattei
As far I know and have seen keystone is listing on port 5000 you may want to 
check that and see if that's your case

Remo

Inviato da iPad ()

Il giorno Sep 4, 2013, alle ore 20:39, "Goldstone, Robin J." 
 ha scritto:

> I am trying to install the RDO OpenStack distribution on a RHEL 6.4 system.  
> The install is failing during keystone configuration as follows:
> ^[[1;35merr: /Stage[main]/Cinder::Keystone::Auth/Keystone_service[cinder]: 
> Could not evaluate: Execution of '/usr/bin/keystone --endpoint 
> http://127.0.0.1:35357/v2.0/ service-list' returned 1: 'NoneType' object is 
> unsubscriptable
> 
> If I run the command interactively I get the same error:
> # brutus1 /etc/keystone > export 
> OS_SERVICE_TOKEN=49c056f8688540fcb933cf7335537676
> # brutus1 /etc/keystone > export 
> OS_SERVICE_ENDPOINT=http://127.0.0.1:35357/v2.0 
> # brutus1 /etc/keystone > keystone service-list
> 'NoneType' object is unsubscriptable
> 
> The keystone service appears to be running and connected to the mysql 
> database:
> # brutus1 /root > ps -ef|grep keystone
> keystone  8451 1  0 17:20 ?00:00:00 /usr/bin/python 
> /usr/bin/keystone-all --config-file /etc/keystone/keystone.conf
> # brutus1 /root > lsof -i|grep keystone
> keystone- 8451 keystone4u  IPv4  21614  0t0  TCP *:35357 (LISTEN)
> keystone- 8451 keystone6u  IPv4  21616  0t0  TCP *:commplex-main 
> (LISTEN)
> keystone- 8451 keystone8u  IPv4  21961  0t0  TCP 
> ebrutus1:54531->ebrutus1:mysql (ESTABLISHED)
> 
> The mysql database appears to have been properly initialized though hardly 
> any of the tables have anything in them.
> 
> mysql> use keystone;
> Reading table information for completion of table and column names
> You can turn off this feature to get a quicker startup with -A
> 
> Database changed
> mysql> show tables;
> ++
> | Tables_in_keystone |
> ++
> | credential |
> | domain |
> | ec2_credential |
> | endpoint   |
> | group  |
> | group_domain_metadata  |
> | group_project_metadata |
> | migrate_version|
> | policy |
> | project|
> | role   |
> | service|
> | token  |
> | trust  |
> | trust_role |
> | user   |
> | user_domain_metadata   |
> | user_group_membership  |
> | user_project_metadata  |
> ++
> 19 rows in set (0.00 sec)
> 
> mysql> select * from service;
> Empty set (0.00 sec)
> 
> I cranked up the debug level in the keystone log file and here is what I see:
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi]  
> REQUEST ENVIRON 
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SCRIPT_NAME = /v2.0
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] webob.adhoc_attrs = 
> {'response': }
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] REQUEST_METHOD = GET
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] PATH_INFO = 
> /OS-KSADM/services
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_PROTOCOL = HTTP/1.0
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_X_AUTH_TOKEN = 
> 49c056f8688540fcb933cf7335537676
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_USER_AGENT = 
> python-keystoneclient
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] eventlet.posthooks = []
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_NAME = 127.0.0.1
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] REMOTE_ADDR = 127.0.0.1
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] eventlet.input = 
> 
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.url_scheme = http
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] SERVER_PORT = 35357
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.input = 
> 
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_HOST = 
> 127.0.0.1:35357
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.multithread = True
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_ACCEPT = */*
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.version = (1, 0)
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] openstack.context = 
> {'token_id': '49c056f8688540fcb933cf7335537676', 'is_admin': True}
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] GATEWAY_INTERFACE = 
> CGI/1.1
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.run_once = False
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.errors =  '', mode 'w' at 0x2aae81e0>
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] wsgi.multiprocess = False
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] CONTENT_TYPE = text/plain
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi] HTTP_ACCEPT_ENCODING = 
> identity, deflate, compress, gzip
> 2013-09-04 17:37:48DEBUG [keystone.common.wsgi]
> 2013-09-04 17:37

[Openstack] R: Re: Root disks with Ceph

2013-09-11 Thread Remo Mattei
Hi everyone so there is a question to check since I have not done much with 
ceph if you have an option to delete it on the UK what will be the command cli 
equivalent be?

Thanks

 Messaggio originale 
Da: Greg Chavez  
Data: 09/11/2013  14:39  (GMT-05:00) 
A: Mike Dawson  
Cc: openstack@lists.openstack.org 
Oggetto: Re: [Openstack] Root disks with Ceph 
 
John: I'm talking about primary root disk storage.  Secondary storage would 
persist of course.

Mike: Right, I just want to establish that if I set the default Cinder plugin 
to RBD volumes, and I do nothing else, root volumes are ephemeral.  That seems 
to be the case anyway.

Seems like some of these parameters become meaningless depending on your 
backing store.  As another example, do you really need to specify a root disk 
parameter if you're booting from a volume?  I would think not.

Thanks for your responses.


On Wed, Sep 11, 2013 at 1:29 PM, Mike Dawson  wrote:
When you create an instance backed by an RBD Cinder volume, you can specify 
which behavior you want. There is a check box in Horizon to toggle the behavior.

Thanks,
Mike Dawson



On 9/11/2013 1:15 PM, Greg Chavez wrote:
So if I use RBD as my storage backend for Cinder, what happens to the
root disks of VMs that I terminate?

Do they still exist as RBD volumes in Ceph or are they
deleted/marked-as-free?

If the answer is that they get deleted, or at the very least OpenStack
no longer keeps track of them, then there isn't much difference between
the root and ephemeral disks in the flavors I am using. other than their
being distinct disk devices.  Or so it seems to me.



-- 
\*..+.-
--Greg Chavez
+//..;};
!DSPAM:2,5230bad2113106277119543!___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Translation Push - get the dashboard in your language by Sep 24 - Join Openstack Kannada Language Dashboard Group

2013-09-17 Thread Remo Mattei
Hello all I will be happy to support the Italian dashboard if needed. 
Remo

Inviato da iPad ()

Il giorno Sep 17, 2013, alle ore 0:14,  ha 
scritto:

>  
> Hi All,
>  
> Welcome Translators, Reviewers, Freelancers and Openstack enthusiasts to the 
> Kannada (IN) Language dashboard translation work.
> You can also CC us on the translation group mailing list
> kanndabal...@transifex.com
>  
> “Bandhugale Kannada Bashe Ulisi Belesalu ondu sadavakasha..” Banni Kannadakke 
> Jai.. yendu Kai Yathona Kalpavruksha vagisona”
>  
>  
> The link to join the Kannada Language team is provided below:
>  
> https://www.transifex.com/projects/p/kannada-dashboard-yallarigu/language/kn/
>  
> Regards,
> Raghavendra Lad
>  
> From: Ilya Alekseyev [mailto:ilyaalekse...@acm.org] 
> Sent: Thursday, September 12, 2013 6:37 PM
> To: Stas Maksimov
> Cc: openstack@lists.openstack.org
> Subject: Re: [Openstack] Translation Push - get the dashboard in your 
> language by Sep 24
>  
> Working for it in Russian.
>  
> Kind regards,
> Ilya Alekseyev
>  
> 2013/9/12 Stas Maksimov 
> In for Russian.
>  
> 
> On 12 September 2013 13:36, Marcelo Dieder  wrote:
> Hello Tom,
> 
> Translating to Brazilian Portuguese
> 
> Marcelo Dieder
>  
> 
> On 09/12/2013 05:16 AM, Tom Fifield wrote:
> Do you write Spanish, Italian, Russian, German or Dutch? 
> 
> How about Portuguese? Indonesian? Arabic? Hindi? 
> 
> Actually, if you can write in any language other than English, you have the 
> ability to help get the OpenStack Dashboard into your language. 
> 
> Find your language on: 
> 
>  https://www.transifex.com/projects/p/horizon/ 
> 
> and join the team. 
> 
> 
> It's actually a lot of fun, all done through an easy web interface. 
> 
> If we can get 100% completion in your language by September 24th, your text 
> will be included in the next release of OpenStack for thousands around the 
> world to see. 
> 
> So, why not get your friends together and make it happen? :) 
> 
> 
> Thanks, 
> 
> from your friendly Internationalisation Team 
> https://wiki.openstack.org/wiki/I18nTeam 
> 
> ___ 
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack 
> Post to : openstack@lists.openstack.org 
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>  
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
>  
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
>  
> 
> This message is for the designated recipient only and may contain privileged, 
> proprietary, or otherwise confidential information. If you have received it 
> in error, please notify the sender immediately and delete the original. Any 
> other use of the e-mail by you is prohibited.
> 
> Where allowed by local law, electronic communications with Accenture and its 
> affiliates, including e-mail and instant messaging (including content), may 
> be scanned by our systems for the purposes of information security and 
> assessment of internal compliance with Accenture policy.
> 
> __
> 
> www.accenture.com
> !DSPAM:2,523805ea118594987512804!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,523805ea118594987512804!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Translation Push - get the dashboard in your language by Sep 24 - Join Openstack Kannada Language Dashboard Group

2013-09-17 Thread Remo Mattei
Please contact me offline so I can get the info sources etc to help out

Ciao

Inviato da iPad ()

Il giorno Sep 17, 2013, alle ore 8:41,  ha 
scritto:

> Awesome.. 
> 
> Remo,  Thank you.  Italian language team now has another Translation member.
> 
> 
> Regards,
> Raghavendra Lad
>  
> -Original message-
> From: Remo Mattei
> Sent:  17/09/2013, 7:29  PM
> To: Lad, Raghavendra
> Cc: "" ; "" 
> ; "" ; 
> openstack@lists.openstack.org
> Subject: Re: [Openstack] Translation Push - get the dashboard in your 
> language by Sep 24 - Join Openstack Kannada Language Dashboard Gro
> Hello all I will be happy to support the Italian dashboard if needed. 
> Remo
> 
> Inviato da iPad ()
> 
> Il giorno Sep 17, 2013, alle ore 0:14,  ha 
> scritto:
> 
>>  
>> Hi All,
>>  
>> Welcome Translators, Reviewers, Freelancers and Openstack enthusiasts to the 
>> Kannada (IN) Language dashboard translation work.
>> You can also CC us on the translation group mailing list
>> kanndabal...@transifex.com
>>  
>> “Bandhugale Kannada Bashe Ulisi Belesalu ondu sadavakasha..” Banni 
>> Kannadakke Jai.. yendu Kai Yathona Kalpavruksha vagisona”
>>  
>>  
>> The link to join the Kannada Language team is provided below:
>>  
>> https://www.transifex.com/projects/p/kannada-dashboard-yallarigu/language/kn/
>>  
>> Regards,
>> Raghavendra Lad
>>  
>> From: Ilya Alekseyev [mailto:ilyaalekse...@acm.org] 
>> Sent: Thursday, September 12, 2013 6:37 PM
>> To: Stas Maksimov
>> Cc: openstack@lists.openstack.org
>> Subject: Re: [Openstack] Translation Push - get the dashboard in your 
>> language by Sep 24
>>  
>> Working for it in Russian.
>>  
>> Kind regards,
>> Ilya Alekseyev
>>  
>> 2013/9/12 Stas Maksimov 
>> In for Russian.
>>  
>> 
>> On 12 September 2013 13:36, Marcelo Dieder  wrote:
>> Hello Tom,
>> 
>> Translating to Brazilian Portuguese
>> 
>> Marcelo Dieder
>>  
>> 
>> On 09/12/2013 05:16 AM, Tom Fifield wrote:
>> Do you write Spanish, Italian, Russian, German or Dutch? 
>> 
>> How about Portuguese? Indonesian? Arabic? Hindi? 
>> 
>> Actually, if you can write in any language other than English, you have the 
>> ability to help get the OpenStack Dashboard into your language. 
>> 
>> Find your language on: 
>> 
>>  https://www.transifex.com/projects/p/horizon/ 
>> 
>> and join the team. 
>> 
>> 
>> It's actually a lot of fun, all done through an easy web interface. 
>> 
>> If we can get 100% completion in your language by September 24th, your text 
>> will be included in the next release of OpenStack for thousands around the 
>> world to see. 
>> 
>> So, why not get your friends together and make it happen? :) 
>> 
>> 
>> Thanks, 
>> 
>> from your friendly Internationalisation Team 
>> https://wiki.openstack.org/wiki/I18nTeam 
>> 
>> ___ 
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack 
>> Post to : openstack@lists.openstack.org 
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>  
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>>  
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>>  
>> 
>> This message is for the designated recipient only and may contain 
>> privileged, proprietary, or otherwise confidential information. If you have 
>> received it in error, please notify the sender immediately and delete the  
>> original. Any other use of the e-mail by you is prohibited.
>> 
>> Where allowed by local law, electronic communications with Accenture and its 
>> affiliates, including e-mail and instant messaging (including content), may 
>> be scanned by our systems for the purposes of information security and 
>> assessment of internal compliance with Accenture policy.
>> 
>> __
>> 
>> www.accenture.com
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>> 
>> !DSPAM:2,523805ea118594987512804!
> !DSPAM:2,52387917203192003330191!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] OVS bandwidth limiting

2013-09-30 Thread Remo Mattei
Hello everyone, 
I wonder if there is a way to do bandwidth limiting rate option with OVS. I 
would appreciate pointing me to the URL.

Thanks

Remo



___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] OVS bandwidth limiting

2013-09-30 Thread Remo Mattei
Thanks I will look into this

Remo

Inviato da iPhone

> Il giorno Sep 30, 2013, alle ore 15:20, Aaron Rosen  ha 
> scritto:
> 
> Hi, 
> 
> OVS can leverages QoS though linux's tc. Here's a tutorial that shows how to 
> use it: http://openvswitch.org/support/config-cookbooks/qos-rate-limiting/ . 
> Currently, only the nvp plugin exposes an extension to use this though. There 
> is some work going on to expose a QoS extension to  OVS/ML2 plugins which I 
> would expect to see sometime early on in Icehouse.
> 
> Aaron
> 
> 
>> On Mon, Sep 30, 2013 at 2:16 PM, Remo Mattei  wrote:
>> Hello everyone,
>> I wonder if there is a way to do bandwidth limiting rate option with OVS. I 
>> would appreciate pointing me to the URL.
>> 
>> Thanks
>> 
>> Remo
>> 
>> 
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:2,5249f9e977579507810681!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] dns problem for instances

2013-11-12 Thread Remo Mattei
RH does have firewall rules you may want to see if DNS is going out. I know you 
said that it goes outside but you can also check the order if in nsswitch.conf  
etc.. 

Have a good day, 

ciao 
-- 
Remo Mattei


November 12, 2013 at 14:32:52, Xin Zhao (xz...@bnl.gov) ha scritto:

Hello,  

I have a multi-host grizzly RHEL6 install, using OVS. From the instance,  
I can ping external ips, but DNS resolv doesn't work, it only works for  
other instances on the VM network.  
If I do subnet-update to add public DNS server ips to the vm network,  
DNS resolv works for external hosts, but stops working for other  
instances on the same VM network.  
Do I miss some configuration here?  

Thanks,  
Xin  

___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:2,5282ac94271465380316102!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Neutron][Iptables] port forwarding

2013-11-14 Thread Remo Mattei
Hi I did not see an option to do Port FW yet in the dashboard. You probably 
have to do it with iptables and make sure you backup them up as you do. 

Here is what I would do before you start messing with it.

iptables-save >myiptables
then make the changes 
if they do not work use iptables-restore http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,5284ffca163801186620736!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [neutron] provider router with private networks, can not ping private IP and floating IP

2013-11-17 Thread Remo Mattei
You could chk if your vm has the ip do not chk from the dashboard because you 
may see the ip but the vm may not have it. 

Let us know

Inviato da iPhone ()

> Il giorno Nov 17, 2013, alle ore 17:24, sylecn  ha scritto:
> 
> I have enabled namespace, but I did not use overlapping IP addresses so far.
> 
> Here is the result of the netns command:
> 
> root@172-17-6-68:/var/log/neutron# ip netns show
> qrouter-c5b513fa-6d6a-476f-bfc0-2114954a15aa
> qdhcp-a63f0950-cdea-4a6d-8312-1819113dc244
> root@172-17-6-68:/var/log/neutron# ip netns exec 
> qdhcp-a63f0950-cdea-4a6d-8312-1819113dc244 ping 10.0.1.3
> PING 10.0.1.3 (10.0.1.3) 56(84) bytes of data.
> From 10.0.1.2 icmp_seq=1 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=2 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=3 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=4 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=5 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=6 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=7 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=8 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=9 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=10 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=11 Destination Host Unreachable
> From 10.0.1.2 icmp_seq=12 Destination Host Unreachable
> ^C
> --- 10.0.1.3 ping statistics ---
> 13 packets transmitted, 0 received, +12 errors, 100% packet loss, time 12061ms
> pipe 3
> root@172-17-6-68:/var/log/neutron# 
> 
> Using ip netns exec qdhcp-* ping, I can ping 10.0.1.1 and 10.0.1.2. However, 
> ping 10.0.1.3 still fail.
> 
> 
> 
>> On Mon, Nov 18, 2013 at 12:59 AM, Kyle Mestery (kmestery) 
>>  wrote:
>> On Nov 17, 2013, at 2:45 AM, sylecn  wrote:
>> >
>> > Thanks for the information. Now I have configured a provider router based 
>> > network, with Open vSwitch GRE tunnels.
>> >
>> > Here is the network topology:
>> >
>> > external network: 172.17.0.0/16
>> > external network physical router: 172.17.0.1
>> > neutron node IP: 172.17.6.68
>> >
>> > virtual provider router: 172.17.6.70
>> >
>> > virtual subnet1: 10.0.1.0/24
>> >
>> > Now I can boot a vm instance and it got an IP from private IP pool 
>> > (10.0.1.3). I can also associate a floating IP to it (172.17.6.71). But I 
>> > can't ping the private ip nor the floating ip.
>> >
>> > From the neutron node, I can ping 172.17.6.70, but can't ping 10.0.1.1, 
>> > 10.0.1.3, 172.17.6.71.
>> > So I can't ssh into the vm. My guess is something is wrong with the 
>> > 10.0.1.0/24 network, but I don't know what.
>> >
>> Are you setup to use network namespaces with overlapping IP addresses? If 
>> so, each tenant network will have it's own network namespace on the node 
>> running the Neutron L3 agent. To see these, run this command:
>> 
>> ip netns show
>> 
>> From the qdhcp-* one, you can try to ping your tenant network address:
>> 
>> ip netns exec qdhcp-* ping 10.0.1.3
>> 
>> Let me know if that helps.
>> 
>> Thanks,
>> Kyle
>> 
>> > I used the NoopFirewallDriver in OVS plugin, so icmp and tcp:22 are not 
>> > blocked by security-group rules.
>> >
>> > Here is the current setup:
>> > (neutron) net-list
>> > +--+++
>> > | id   | name   | subnets  
>> >   |
>> > +--+++
>> > | a63f0950-cdea-4a6d-8312-1819113dc244 | net1   | 
>> > 708f2a58-bd85-4493-b91c-a6d42c0db5e7 10.0.1.0/24   |
>> > | ee318d0b-74e5-43c6-92bd-abb690df3334 | extnet | 
>> > 4c111c62-50f2-4332-b635-57846cf1980c 172.17.0.0/16 |
>> > +--+++
>> > (neutron) subnet-list
>> > +--+-+---++
>> > | id   | name| cidr  | 
>> > allocation_pools   |
>> > +--+-+---++
>> > | 4c111c62-50f2-4332-b635-57846cf1980c | extnet  | 172.17.0.0/16 | 
>> > {"start": "172.17.6.70", "end": "172.17.6.75"} |
>> > | 708f2a58-bd85-4493-b91c-a6d42c0db5e7 | subnet1 | 10.0.1.0/24   | 
>> > {"start": "10.0.1.2", "end": "10.0.1.254"} |
>> > +--+-+---++
>> > (neutron) port-list
>> > +--+--+---++
>> > | id   | name | mac_address   | 
>> > fixed_ips  
>> > |
>> > +-

Re: [Openstack] why neutron-l3-agent-OUTPUT and neutron-l3-agent-PREROUTING are the same

2013-11-21 Thread Remo Mattei
the pre route has noting to do with going out. Packets travel from PRE  to 
POST. So the OUTPUT are rules allowing the package to go out. POSTROUTING and 
PREROUTING are part of the nat module. Default rules in iptables are 
INPUT,FORWARD and OUTPUT. the nat (PREROUTING, POSTROUTING) hope this helps a 
little the iptables options. 

Ciao 
-- 
Remo Mattei


On November 21, 2013 at 20:33:39, Liu Wenmao (marvel...@gmail.com) wrote:

hi:

I notice that there are two chains, neutron-l3-agent-OUTPUT and 
neutron-l3-agent-PREROUTING, in neutron namespace iptables, both of which are 
the same except for the first redirect rule:

I wonder why we need DNATs in the neutron-l3-agent-OUTPUT chain, are not the 
rules in neutron-l3-agent-PREROUTING(called by PREROUTING ) sufficient when 
foreign hosts connect to inner VM?

Chain neutron-l3-agent-OUTPUT (1 references)
    pkts  bytes target prot opt in out source   
destination
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.133   to:100.0.0.14
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.134   to:100.0.0.11
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.135   to:100.0.0.12
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.136   to:100.0.0.15
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.137   to:100.0.0.16
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.141   to:100.0.0.13
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.138   to:100.0.0.19
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.139   to:100.0.0.18
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.140   to:100.0.0.17

Chain neutron-l3-agent-PREROUTING (1 references)
    pkts  bytes target prot opt in out source   
destination
   0    0 REDIRECT   tcp  --  *  *   0.0.0.0/0    
169.254.169.254  tcp dpt:80 redir ports 9697
   6  312 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.133   to:100.0.0.14
 362    18804 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.134   to:100.0.0.11
   7  356 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.135   to:100.0.0.12
   1   78 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.136   to:100.0.0.15
  24 1235 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.137   to:100.0.0.16
  14  812 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.141   to:100.0.0.13
 665    35774 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.138   to:100.0.0.19
 715    38158 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.139   to:100.0.0.18
 788    42206 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.140   to:100.0.0.17

Thanks

Liu Wenmao
!DSPAM:2,528edea311935482324020! 
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,528edea311935482324020!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] why neutron-l3-agent-OUTPUT and neutron-l3-agent-PREROUTING are the same

2013-11-21 Thread Remo Mattei
just one more thing to add, 

DNAT just says if a machine with an ip of 192. it will be recognized as 
100.0.0.14 seems like you have floating ip address associated with them. 
-- 
Remo Mattei


On November 21, 2013 at 20:33:39, Liu Wenmao (marvel...@gmail.com) wrote:

hi:

I notice that there are two chains, neutron-l3-agent-OUTPUT and 
neutron-l3-agent-PREROUTING, in neutron namespace iptables, both of which are 
the same except for the first redirect rule:

I wonder why we need DNATs in the neutron-l3-agent-OUTPUT chain, are not the 
rules in neutron-l3-agent-PREROUTING(called by PREROUTING ) sufficient when 
foreign hosts connect to inner VM?

Chain neutron-l3-agent-OUTPUT (1 references)
    pkts  bytes target prot opt in out source   
destination
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.133   to:100.0.0.14
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.134   to:100.0.0.11
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.135   to:100.0.0.12
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.136   to:100.0.0.15
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.137   to:100.0.0.16
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.141   to:100.0.0.13
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.138   to:100.0.0.19
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.139   to:100.0.0.18
   0    0 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.140   to:100.0.0.17

Chain neutron-l3-agent-PREROUTING (1 references)
    pkts  bytes target prot opt in out source   
destination
   0    0 REDIRECT   tcp  --  *  *   0.0.0.0/0    
169.254.169.254  tcp dpt:80 redir ports 9697
   6  312 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.133   to:100.0.0.14
 362    18804 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.134   to:100.0.0.11
   7  356 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.135   to:100.0.0.12
   1   78 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.136   to:100.0.0.15
  24 1235 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.137   to:100.0.0.16
  14  812 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.141   to:100.0.0.13
 665    35774 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.138   to:100.0.0.19
 715    38158 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.139   to:100.0.0.18
 788    42206 DNAT   all  --  *  *   0.0.0.0/0    
192.168.19.140   to:100.0.0.17

Thanks

Liu Wenmao
!DSPAM:2,528edea311935482324020! 
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,528edea311935482324020!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] the definistion of X-aaS in neutron

2013-11-25 Thread Remo Mattei
the FWaaS is different than Security Groups. It acts on the router port whereas 
Security Groups handles the provider network layer.


-- 
Remo Mattei


November 25, 2013 at 7:42:57, Liu Wenmao (marvel...@gmail.com) ha scritto:

Hi all:

I notice that there are two security ACL approaches in neutron: security group 
and FWaaS, both have standard CUPD operations.  why is FWaaS *service*, bug 
security group is not?

I wonder what the definition a service is. thanks

Liu Wenmao
!DSPAM:2,52935d1a296201044898170! 
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,52935d1a296201044898170!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error launching instances

2013-11-26 Thread Remo Mattei
Hi John, 
did the nova boot gave you any errors? it maybe that nova show is not working 
you may want to make sure you have permissions. Did you load the variables? 

Ciao
-- 
Remo Mattei


November 26, 2013 at 8:07:48, John Smith (lbalba...@gmail.com) ha scritto:

Hi,  


Im running devstack and am experiencing some trouble when attempting  
to launch an instance. I must admit that im a total newbee, so it  
might just be that i am just missing something obvious.  

I try to launch an instance as follows from the command line :  


$ wget https://launchpadlibrarian.net/83303699/cirros-0.3.0-i386-disk.img  
$ glance image-create --name=cirros-0.3.0-i386 --is-public=true  
--container-format=bare --disk-format=qcow2 <  
cirros-0.3.0-i386-disk.img  
$ nova boot --flavor m1.nano --image cirros-0.3.0-i386 myvm  
$ nova show myvm  

But that just gives me an error: "ProcessExecutionError Unexpected  
error while running command." (see attachment for full output of 'nova  
show myvm, etc.)  

Any ideas on what im doing wrong here is appreciated.  



Regards,  


John Smith.  


!DSPAM:2,5294c822248711542169933!  
- nova-show.txt, 43 KB
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,5294c822248711542169933!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error launching instances

2013-11-26 Thread Remo Mattei
Devstack will probably have those info into the screen session and not in the 
log. Unless your localrc does have a line saying you want the logs to a file. 

Ciao
-- 
Remo Mattei


November 26, 2013 at 8:22:02, dheeru (dheerendra.madhusudh...@gmail.com) ha 
scritto:

HI John
 
Instance creation may be failing for different reason. Can you check the erros 
in /var/log/nova-api.log nova-compute.log and nova-scheduler.log ?
Also do you see any errors in /var/log/libvirt/libvird.log ?
 
-Dheerendra


On Tue, Nov 26, 2013 at 9:09 PM, John Smith  wrote:
Hi,


Im running devstack and am experiencing some trouble when attempting
to launch an instance. I must admit that im a total newbee, so it
might just be that i am just missing something obvious.

I try to launch an instance as follows from the command line :


$ wget https://launchpadlibrarian.net/83303699/cirros-0.3.0-i386-disk.img
$ glance image-create --name=cirros-0.3.0-i386 --is-public=true
--container-format=bare --disk-format=qcow2 <
cirros-0.3.0-i386-disk.img
$ nova boot --flavor m1.nano --image cirros-0.3.0-i386 myvm
$ nova show myvm

But that just gives me an error: "ProcessExecutionError Unexpected
error while running command." (see attachment for full output of 'nova
show myvm, etc.)

Any ideas on what im doing wrong here is appreciated.



Regards,


John Smith.

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


!DSPAM:2,5294cbbf264301145218805! 
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,5294cbbf264301145218805!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error launching instances

2013-11-26 Thread Remo Mattei
can you share your localrc file? What version is it? Havana? this is hard to 
troubleshoot if you leave too many variable out. 


-- 
Remo Mattei


November 26, 2013 at 9:01:56, John Smith (lbalba...@gmail.com) ha scritto:

On Tue, Nov 26, 2013 at 5:08 PM, Remo Mattei  wrote:  
> Hi John,  
> did the nova boot gave you any errors? it maybe that nova show is not  
> working you may want to make sure you have permissions. Did you load the  
> variables?  
>  
> Ciao  
> --  
> Remo Mattei  
>  
>  

Hi,  


The nova boot cmd did not give any output. I exported all the required  
variables on the command line. For what its worth: I more or less get  
the same error when using the horizon dashboard instead of the  
commandline.  



Regards,  


John Smith  

!DSPAM:2,5294d4ad305642126917264!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error launching instances

2013-11-26 Thread Remo Mattei
you have two tenant and one password. can you try this from the command line

source /whereyourdevstackisinstalled/openrc admin 

then do nova show
-- 
Remo Mattei


November 26, 2013 at 9:17:20, John Smith (lbalba...@gmail.com) ha scritto:

On Tue, Nov 26, 2013 at 6:02 PM, Remo Mattei  wrote:  
> can you share your localrc file? What version is it? Havana? this is hard to  
> troubleshoot if you leave too many variable out.  
>  
>  
> --  
> Remo Mattei  
>  

Hi,  


This is my localrc:  


ADMIN_PASSWORD=password  
MYSQL_PASSWORD=password  
RABBIT_PASSWORD=password  
SERVICE_PASSWORD=password  
SERVICE_TOKEN=tokentoken  
LOGFILE=$DEST/logs/stack.sh.log  
SCREEN_LOGDIR=$DEST/logs/screen  


And I exported these variables on the commandline:  
export OS_USERNAME=admin  
export OS_PASSWORD=password  
export OS_TENANT_NAME=admin  
export OS_AUTH_URL=http://192.168.126.142:5000/v2.0/  
export OS_TENANT_NAME=demo  


I did a 'git clone https://github.com/openstack-dev/devstack.git', so  
I guess that means its the latest git head/master.  
I basically followed this guide:  
http://devstack.org/guides/single-vm.html  


I attached my logs from /opt/stack/logs/*  



Regards,  


John Smith  


!DSPAM:2,5294d84b32039131576!  
- devstack.logs.tar.gz, 508 KB___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error launching instances

2013-11-26 Thread Remo Mattei
I look through the logs and I would suggest to add neutron and not to use nova 
network. 

so here is the one I use. 

add this below your PASSWORD and TOKEN options

disable_service n-net
enable_service q-svc
enable_service q-agt
enable_service q-dhcp
enable_service q-lbaas
enable_service q-l3
enable_service q-meta
enable_service neutron
# Optional, to enable tempest configuration as part of devstack
enable_service tempest
enable_service s-proxy s-object s-container s-account
enable_service heat h-api h-api-cfn h-api-cw h-eng
#enable_service n-cell
SCREEN_LOGDIR=$DEST/logs/screen


let me know


-- 
Remo Mattei


November 26, 2013 at 10:06:28, John Smith (lbalba...@gmail.com) ha scritto:

Hi  


For what its worth: Ive attached my logfiles from '/opt/stack/logs/*'  
and '/opt/stack/logs/screen/*'.  



Regards,  


John Smith.  


!DSPAM:2,5294e2a929568048018736!  
- devstack.logs.tar.bz2, 354 KB
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,5294e2a929568048018736!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error launching instances

2013-11-26 Thread Remo Mattei
you may want to google about nova-network and neutron. BIG BIG difference. 
Swift is just an object store. you have br100 which will not work on neutron. 
Did you do a clean / unstack before you run the new stack.sh?


-- 
Remo Mattei


November 26, 2013 at 10:51:19, John Smith (lbalba...@gmail.com) ha scritto:

Hi,  


So assuming you think the problem is the network, may I ask what  
logfile and logentry you noticed to make you suspect that ?  

I modified my localrc with your suggestions. When running stack.sh, I  
was asked for a swift password, and provided 'password'. (Do I need to  
set this elsewhere as well ?)  

Just curious: whats the difference between 'neutron' and 'nova network' ?  


After making your modifications, glance image creation fails :  

$ glance image-create --name=cirros-0.3.0-i386 --is-public=true  
--container-format=bare --disk-format=qcow2 <  
cirros-0.3.0-i386-disk.img  
Request returned failure status.  
400 Bad Request  
Client disconnected before sending all data to backend  
(HTTP 400)  


And just in case its relevant, here's the output of 'ifconfig -a'  

$ ifconfig -a  
br100: flags=4163 mtu 1500  
inet6 fe80::6cf3:5bff:fe8d:5525 prefixlen 64 scopeid 0x20  
ether 6e:f3:5b:8d:55:25 txqueuelen 0 (Ethernet)  
RX packets 0 bytes 0 (0.0 B)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 6 bytes 468 (468.0 B)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

br-ex: flags=67 mtu 1500  
inet 172.24.4.225 netmask 255.255.255.240 broadcast 0.0.0.0  
ether 4e:01:47:ef:50:4e txqueuelen 0 (Ethernet)  
RX packets 10 bytes 776 (776.0 B)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 1 bytes 90 (90.0 B)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

br-int: flags=67 mtu 1500  
inet6 fe80::4c4:27ff:feef:a08d prefixlen 64 scopeid 0x20  
ether 9e:6c:79:69:44:44 txqueuelen 0 (Ethernet)  
RX packets 21 bytes 1622 (1.5 KiB)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 6 bytes 468 (468.0 B)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

lo: flags=73 mtu 65536  
inet 127.0.0.1 netmask 255.0.0.0  
inet6 ::1 prefixlen 128 scopeid 0x10  
loop txqueuelen 0 (Local Loopback)  
RX packets 231252 bytes 210037500 (200.3 MiB)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 231252 bytes 210037500 (200.3 MiB)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

ovs-system: flags=4098 mtu 1500  
ether 82:71:ba:06:cf:46 txqueuelen 0 (Ethernet)  
RX packets 0 bytes 0 (0.0 B)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 0 bytes 0 (0.0 B)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

p3p1: flags=4163 mtu 1500  
inet 192.168.126.142 netmask 255.255.255.0 broadcast 192.168.126.255  
inet6 fe80::20c:29ff:fe6e:32be prefixlen 64 scopeid 0x20  
ether 00:0c:29:6e:32:be txqueuelen 1000 (Ethernet)  
RX packets 88561 bytes 61914618 (59.0 MiB)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 103321 bytes 15179500 (14.4 MiB)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  
device interrupt 19 base 0x2000  

virbr0: flags=4099 mtu 1500  
inet 192.168.122.1 netmask 255.255.255.0 broadcast 192.168.122.255  
ether 06:09:53:bb:c9:28 txqueuelen 0 (Ethernet)  
RX packets 0 bytes 0 (0.0 B)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 0 bytes 0 (0.0 B)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  




Regards,  


John Smith.  

On Tue, Nov 26, 2013 at 7:08 PM, Remo Mattei  wrote:  
> I look through the logs and I would suggest to add neutron and not to use  
> nova network.  
>  
> so here is the one I use.  
>  
> add this below your PASSWORD and TOKEN options  
>  
> disable_service n-net  
> enable_service q-svc  
> enable_service q-agt  
> enable_service q-dhcp  
> enable_service q-lbaas  
> enable_service q-l3  
> enable_service q-meta  
> enable_service neutron  
> # Optional, to enable tempest configuration as part of devstack  
> enable_service tempest  
> enable_service s-proxy s-object s-container s-account  
> enable_service heat h-api h-api-cfn h-api-cw h-eng  
> #enable_service n-cell  
> SCREEN_LOGDIR=$DEST/logs/screen  
>  
>  
> let me know  
>  
>  
> --  
> Remo Mattei  
>  
>  

___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:2,5294ee6b70891476013080!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error launching instances

2013-11-26 Thread Remo Mattei
I would blow up that machine and run it again fresh with the localrc I gave 
you, just add this additional two lines

SWIFT_HASH=stack
SWIFT_REPLICAS=1

Try that it should be good to go. Good luck. 
-- 
Remo Mattei


November 26, 2013 at 11:38:18, John Smith (lbalba...@gmail.com) ha scritto:

On Tue, Nov 26, 2013 at 8:33 PM, Remo Mattei  wrote:  
> are you running this on a virtual machine?  
>  
Yes, I am running this in a VMware (Workstation) virtual machine.  


Regards,  


John Smith.  

!DSPAM:2,5294f9b4106581871510568!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error launching instances

2013-11-26 Thread Remo Mattei
are you running this on a virtual machine? what env are you using? as far as 
neutron by default on devstack is going to happen on the next released. For now 
nova-network is the default. 

just my 2 cents
-- 
Remo Mattei


November 26, 2013 at 11:32:27, John Smith (lbalba...@gmail.com) ha scritto:

On Tue, Nov 26, 2013 at 7:52 PM, Remo Mattei  wrote:  
>  
> you may want to google about nova-network and neutron. BIG BIG difference.  
>  
Yeah, I just thought that 'neutron' was the 'way-to-go' these days, so  
I was just wondering why devstack doesnt use that by default ?  


>  
> you have br100 which will not work on  
> neutron. Did you do a clean / unstack before you run the new stack.sh?  
>  
Yes, I ran ./unstack.sh and ./clean.sh. I cant remember what 'br100'  
is doing there.  
:(  
So I removed it.  


But im still getting the errors (during the 'stack.sh' run, as well)  
with glance:  
$ glance image-create --name=cirros-0.3.0-i386 --is-public=true  
--container-format=bare --disk-format=qcow2 <  
cirros-0.3.0-i386-disk.img  
Request returned failure status.  
400 Bad Request  
Client disconnected before sending all data to backend  
(HTTP 400)  



And 'ifconfig -a' now looks like this:  

$ ifconfig -a  
br-ex: flags=67 mtu 1500  
inet 172.24.4.225 netmask 255.255.255.240 broadcast 0.0.0.0  
ether aa:29:cd:d7:db:4b txqueuelen 0 (Ethernet)  
RX packets 9 bytes 706 (706.0 B)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 2 bytes 180 (180.0 B)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

br-int: flags=67 mtu 1500  
inet6 fe80::d4b8:59ff:fefe:44e5 prefixlen 64 scopeid 0x20  
ether 9a:75:78:12:63:43 txqueuelen 0 (Ethernet)  
RX packets 21 bytes 1622 (1.5 KiB)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 6 bytes 468 (468.0 B)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

lo: flags=73 mtu 65536  
inet 127.0.0.1 netmask 255.0.0.0  
inet6 ::1 prefixlen 128 scopeid 0x10  
loop txqueuelen 0 (Local Loopback)  
RX packets 48903 bytes 17201288 (16.4 MiB)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 48903 bytes 17201288 (16.4 MiB)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

ovs-system: flags=4098 mtu 1500  
ether 0e:5c:a4:ea:3c:59 txqueuelen 0 (Ethernet)  
RX packets 0 bytes 0 (0.0 B)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 0 bytes 0 (0.0 B)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  

p3p1: flags=4163 mtu 1500  
inet 192.168.126.142 netmask 255.255.255.0 broadcast 192.168.126.255  
inet6 fe80::20c:29ff:fe6e:32be prefixlen 64 scopeid 0x20  
ether 00:0c:29:6e:32:be txqueuelen 1000 (Ethernet)  
RX packets 29977 bytes 14944914 (14.2 MiB)  
RX errors 0 dropped 0 overruns 0 frame 0  
TX packets 42458 bytes 5994218 (5.7 MiB)  
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0  
device interrupt 19 base 0x2000  




Regards,  


John Smith.  

___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:2,5294f84b103002907213373!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Glance registry is not starting

2013-12-03 Thread Remo Mattei
Looks like keystone user is not getting auth. What do you use? Is this dev 
stack or production etc? Cannot just say this is not working when important 
things are missing. 

Inviato da iPhone ()

> Il giorno Dec 3, 2013, alle ore 1:09, Shivaji D Bhosale  
> ha scritto:
> 
> Registry issue is resolve now I am having another issue when I try to
> create glance image and get below error
> 
> I am getting error when I try to add image
> 
> [root@rstmgr01 images]# glance --os-username=admin --os-password=password
> --os-tenant-name=demo
> --os-auth-url=http://rstmgr01.rchland.ibm.com:5000/v2.0 image-create
> --name="Fedora1" --disk-format=qcow2 --container-format bare <
> Fedora-x86_64-19-20130627-sda.qcow2
> Unable to communicate with identity service: {"error": {"message": "Invalid
> project", "code": 401, "title": "Not Authorized"}}. (HTTP 401)
> 
> [root@rstmgr01 images]# glance image-list
> Unable to communicate with identity service: {"error": {"message": "Invalid
> project", "code": 401, "title": "Not Authorized"}}. (HTTP 401)
> 
> [root@rstmgr01 images]# ls
> Fedora-x86_64-19-20130627-sda.qcow2  isd  lost+found  openstack  sce31
> sce_x  vmcontrol
> 
> [root@rstmgr01 images]# glance image-create --is-public true --disk-format
> qcow2 --container-format bare --name "Fedora" <
> Fedora-x86_64-19-20130627-sda.qcow2
> Unable to communicate with identity service: {"error": {"message": "Inva
> 
> Any idea what could be the reason
> 
> 
> Best  Regards
> 
> Shivaji D Bhosale
> ISTL, IBM India  Rajiv Gandhi Infotech Pk Phase 2 Plot No Pl-3 Midc,
> Building: ETB1 | Floor: 4F | Office: B178
> Hinjewadi, Village Limit Of Marunji Pune, MH 411057 India
> Mobile : 9960605856
> Office : +91-20-42026578(Direct)
> sbhos...@in.ibm.com
> 
> 
> 
> 
> 
> dheeru
>  sudh...@gmail.com  To 
>>Shivaji D Bhosale/India/IBM@IBMIN,  
>cc 
> 11/27/2013 06:21  "openstack@lists.openstack.org" 
> PM 
>   Subject 
>   Re: [Openstack] Glance registry is  
>   not starting
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> Did you put the wrong configuration in glance-api-paste.ini ? Following
> configuration is supposed to be in glance-registry-paste.in.
> 
> Refer the following link for configs
> https://github.com/openstack/glance/blob/master/etc/
> 
> Got: LookupError("No section 'glance-registry-keystone' (prefixed by
> 'app'
>> or 'application' or 'composite' or 'composit' or 'pipeline' or
>> 'filter-app') found in config /etc/glance/glance-api-paste.ini",)
> 
> -dheeru
> @Community Service
> 
> 
> On Wed, Nov 27, 2013 at 2:41 PM, Shivaji D Bhosale 
> wrote:
> 
>> When I try to start the glance register service getting below error.
>  Please
>> let me know if any one knows the solution for below problem.
>> 
>> [root@rstmgr01 ~]# service openstack-glance-registry status
>> openstack-glance-registry dead but pid file exists
>> [root@rstmgr01 ~]# cd /var/log/glance/
>> [root@rstmgr01 glance]# ls -ltr
>> total 8
>> -rwxr-xr-x. 1 glance glance  145 Nov 17 16:46 api.log
>> -rw-r--r--. 1 glance glance 1815 Nov 25 00:01 registry.log
>> [root@rstmgr01 glance]# cat registry.log
>> 2013-11-17 17:14:04.785 10197 ERROR glance.common.config [-] Unable to
>  load
>> glance-registry-keystone from configuration
>> file /etc/glance/glance-api-paste.ini.
>> Got: LookupError("No section 'glance-registry-keystone' (prefixed by
>  'app'
>> or 'application' or 'composite' or 'composit' or 'pipeline' or
>> 'filter-app') found in config /etc/glance/glance-api-paste.ini",)
>> 2013-11-17 17:28:08.678 11130 ERROR glance.common.config [-] Unable to
>  load
>> glance-registry-keystone from configuration
>> file /etc/glance/glance-api-paste.ini.
>> Got: LookupError("No section 'glance-registry-keystone' (prefixed by
>  'app'
>> or 'application' or 'composite' or 'composit' or 'pipeline' or
>> 'filter-app') found in config /etc/glance/glance-api-paste.ini",)
>> 2013-11-24 23:45:41.690 18534 ERROR glance.common.config [-] Unable to
>  load
>> glance-registry-keystone from configuration
>> file /etc/glance/glance-api-paste.ini.
>> Got: LookupError("No section 'glance-registry-keystone' (prefixed by
>  'app'
>> or 'application' or 'composite' or 'composit' or 'pipeline' or
>> 'filter-app') found in config /etc/glance/glance-api-paste.ini",)
>> 2013-11-24 23:55:39.046 19179 ERROR glance.common.config [-] Unable to
>  load
>> glance-registry-keystone from configuration
>> file /etc/glance/glance-api-paste.ini.
>> Got: LookupError("No section 'glance-registry-keystone' (prefixed by
>  'app'
>> or 'application' or 'composite' or 'composit' or '

Re: [Openstack] Ceilometer "Authentication required" Error

2013-12-06 Thread Remo Mattei
you do not have to change the file just do 

source openrc admin
or
. openrc admin 

Ciao
-- 
Remo Mattei


December 6, 2013 at 10:28:08, Mark Vlcek (mavlcek) (mavl...@cisco.com) ha 
scritto:

For the record, I was able to just change the OS_USERNAME from "demo" to  
"admin" in the openrc file provided in the DevStack root directory then  
source the openrc file again and that worked. I assume the first command  
you provided would simply unset the OS_TENANT_NAME and OS_USERNAME  
variables then running the second command would set both of them to admin  
which is essentially the "automated" way of doing it.  


Unfortunately I'm still getting the "Authentication required" message when  
I try to hit http://[my_vm_hostname]:8777/. Is there something else I need  
to do?  

Thanks,  
Mark  

On 12/6/13 12:50 AM, "Eoghan Glynn"  wrote:  

>  
>  
>- Original Message -  
>> Hi All,  
>>  
>> I'm trying to get Ceilometer working on OpenStack Havana (installed via  
>> DevStack ) but running into issues with the APIs. I believe Ceilometer  
>>is  
>> installed and enabled but when I hit http://[my_vm_hostname]:8777/ just  
>>like  
>> that or with any parameters I just get "Authentication required" back.  
>>  
>> I thought maybe this was an issue with my Keystone configuration so I  
>>tried  
>> following the instructions found here but whenever I try making a  
>>keystone  
>> call I just get "You are not authorized to perform the requested action,  
>> admin_required. (HTTP 403)."  
>>  
>> When I ran keystone token-get it looks like the user_id it's returning  
>>is  
>> implying that I'm running as the "demo" user but I don't know how to  
>>switch  
>> to the "admin" user.  
>  
>To switch to the admin user:  
>  
> unset $(env | awk -F= '/^OS_/ {print $1}')  
> . openrc admin admin  
>  
>> Looks like the openrc file from DevStack already set  
>> all the necessary environment variables as far as I can tell and I've  
>> sourced that so should be all good there.  
>>  
>> I tried following the instructions here to create an admin user but, no  
>> surprise, I get the not authorized error again.  
>>  
>> Any help in this matter would be greatly appreciated, really looking  
>>forward  
>> to using Ceilometer!  
>>  
>> Thanks,  
>> Mark  
>>  
>> ___  
>> Mailing list:  
>>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
>> Post to : openstack@lists.openstack.org  
>> Unsubscribe :  
>>http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
>>  


___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:2,52a21738163971459711977!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] vm instances could not get ip address from dhcp agent

2013-12-18 Thread Remo Mattei
That command does not work on yum 
You may have to compile it. 

Remo

Inviato da iPhone ()

> Il giorno Dec 18, 2013, alle ore 12:07,  ha scritto:
> 
> Hi Pranav,
>  
> Thanks for the reply. Actually I’m using Redhat. Do you think we can execute 
> the same command to recompile the Kernal?
>  
> Also, another behavior that really concerned me was that ‘brctl show’ does 
> not list anything when we create the VM instances. Does this indicate that 
> integration bridge is not functioning?
>  
> Thanks,
>  
> YuLing
>  
> From: Pranav Salunke [mailto:pra...@aptira.com] 
> Sent: Wednesday, December 18, 2013 7:04 AM
> To: C, Yuling
> Cc: openstack@lists.openstack.org
> Subject: Re: [Openstack] vm instances could not get ip address from dhcp agent
>  
> Hi Yuling,
> 
> I am getting similar issues with Havana, but in my case I saw that OVS 1.10 
> shows build error while compiling its packages. Can you do
> 
> # dpkg-reconfigure openvswitch-datapath-dmks
> (assuming you are using ubuntu/debian)
> or something similar and check the output, esp. when its recompiling the 
> kernel.
> 
> Regards,
> Pranav
> 
> --
> 
> Pranav Salunke
> Cloud Engineer
>  
> +91 97129 29850
> +612 8030 2333
> 1800 APTIRA
> aptira.com
> Follow @aptira
>  
> 
> On 18 December 2013 13:11,  wrote:
> Actually, I found that the tcpdump –i ‘tapf9884dcb-e5’ got dhcp reply. 
> However, tcpdump –i br-int only has dhcp request.
>  
> Also, when I tried to get ip address on the dhcp agent, I was not able to see 
> ‘tapf9884dcb-e5’
>  
> ip netns exec qdhcp-7e73481a-d100-46d4-8dd1-9b3bb7949333
> No cmd specified
> [root@blade04 quantum]# ip netns exec 
> qdhcp-7e73481a-d100-46d4-8dd1-9b3bb7949333 ip address
> 15: lo:  mtu 16436 qdisc noqueue state UNKNOWN
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> inet 127.0.0.1/8 scope host lo
> inet6 ::1/128 scope host
>valid_lft forever preferred_lft forever
> 18: ns-f9884dcb-e5:  mtu 1500 qdisc 
> pfifo_fast state UP qlen 1000
> link/ether fa:16:3e:a1:d5:e2 brd ff:ff:ff:ff:ff:ff
> inet 30.0.0.3/24 brd 30.0.0.255 scope global ns-f9884dcb-e5
> inet6 fe80::f816:3eff:fea1:d5e2/64 scope link
>valid_lft forever preferred_lft forever
>  
> Would this be an issue?
>  
> Thanks,
>  
> YuLing
> From: C, Yuling 
> Sent: Tuesday, December 17, 2013 9:37 PM
> To: 'openstack@lists.openstack.org'
> Subject: RE: vm instances could not get ip address from dhcp agent
>  
> B.T.W, I just noticed that ‘brctl show’ command does not show any attached 
> interface on this test bed. Could this be the root cause?
> # brctl show
> bridge name bridge id   STP enabled interfaces
> virbr0  8000.525400046ff3   yes virbr0-nic
>  
> Also, I saw error message as ‘2013-12-17 21:33:47.586 32628 ERROR 
> nova.virt.libvirt.driver [-] Getting disk size of foreman: [Errno 2] No such 
> file or directory: '/var/lib/libvirt/images/foreman.img'’.
>  
> Any clue?
>  
> Thanks,
>  
> YuLing
> From: C, Yuling 
> Sent: Tuesday, December 17, 2013 6:47 PM
> To: openstack@lists.openstack.org
> Subject: vm instances could not get ip address from dhcp agent
>  
> Hi All,
>  
> I have an openstack installation environment of two nodes. One node contains 
> Controller, Network, Nova, Glance, Keystone, Client, and Cinder. The other 
> node is just a nova_compute node.   Everything worked very well before. 
> Suddenly we hit the issue that vm instances could not get ip addresses from 
> dhcp agent.  I looked into dhcp-agent.log, but didn’t find much useful 
> information. Just wondering if someone could shed some light on this issue.
>  
> The behavior is that even the VMs created on node1, which contains 
> Controller, Network, Nova, Glance, keystone, Client and Cinder could not get 
> the IP from dhcp agent. When I use tcpdump –i br-ehter1, or tcpdump –i < 
> physical Ethernet port id>, I was able to see the DHCP requests, but no reply 
> from dhcp agent.
>  
> Any idea?
>  
> Thanks,
>  
> YuLing
>  
> 
>  
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
>  
> !DSPAM:2,52b20461325531044020254!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,52b20461325531044020254!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Need help with network config on a basic setup

2013-12-22 Thread Remo Mattei
Are you sure that no other instances have that ip?

Inviato da iPhone ()

> Il giorno Dec 22, 2013, alle ore 9:58, nishant kumar  ha 
> scritto:
> 
> The eth1 IP on compute node (192.168.0.11) seems to have disappeared but I 
> can still ping this IP from controller. Is this behavior normal?
>  
> Thanks,
> Nishant
> 
> 
> On Friday, December 20, 2013 6:01 AM, nishant kumar  
> wrote:
> Hi Dan,
> Just before launching the instance using 'nova boot', I had run these 
> commands on controller (ran only on controller):
> # nova secgroup-add-rule default tcp 22 22 0.0.0.0/0
> # nova secgroup-add-rule default icmp -1 -1 0.0.0.0/
> I assumed that they will configure firewall correctly. Please let me know if 
> I missed something.
> Thanks,
> Nishant
> Sent from Yahoo! Mail on Android
> 
> From: Daniel Ellison ; 
> To: nishant kumar ; 
> Cc: OpenStack List ; 
> Subject: Re: [Openstack] Need help with network config on a basic setup 
> Sent: Thu, Dec 19, 2013 6:11:09 PM 
> 
> It may be simpler than that. Did you set up firewall rules to allow ICMP and 
> SSH access to your instance? "Access & Security" then "Security Groups".
> 
> +Dan
> 
> On Dec 19, 2013 12:42 PM, nishant kumar  wrote:
> >
> > Hi All,
> >
> > I need some help on bringing up my openstack setup. I am using the havana 
> > release.
> >
> > Note: Please excuse me writing a very long email. The intention is to 
> > provide as much detail as possible so that its easier for the community 
> > members to suggest a solution.
> >
> > I was able to create and bring up a guest instance on compute node. But,
> >
> > The issue is:
> > I am not able to SSH (from either controller on compute1) to the guest and 
> > I am not able to ping to guest IP (192.168.0.2). What am I missing or doing 
> > wrong?
> >
> >
> > Setup details are:
> >
> > - I am using two servers each having 2 NIC ports:
> > 1) controller (SL6.3)   - em1(10.192.206.247); 
> > em2(192.168.0.10)
> > 2) compute1 (RHEL 6.4 x64)  - eth0(10.192.207.152); 
> > eth1(192.168.0.11)
> >
> > - em1 and eth0 are connected via a switch. This is the management network 
> > (hosts file has these IPs against controller/compute1 hostnames)
> >
> > - em2 and eth1 are connected directly by a cable. For my experimental 
> > setup, I want this to be the data network (I guess its also called the 
> > public interface)
> >
> >
> > Config Details are:
> >
> > 'nova list' output on controller node:
> >
> > +--++++-+---+
> > | ID   | Name   | Status | Task State | 
> > Power State | Networks  |
> > +--++++-+---+
> > | fffd4391-968a-41ff-b292-f2f56ce87abd | cirrOS | ACTIVE | None   | 
> > Running | vmnet=192.168.0.2 |
> > +--++++-+---+
> >
> > ifcfg-eth0:
> > DEVICE=eth0
> > HWADDR=2C:44:FD:7F:04:B0
> > TYPE=Ethernet
> > UUID=9739295d-d4f7-4a1d-abd7-11397af8818a
> > ONBOOT=yes
> > NM_CONTROLLED="no"
> > BOOTPROTO=dhcp
> >
> > ifcfg-eth1:
> > DEVICE=eth1
> > HWADDR=2C:44:FD:7F:04:B1
> > TYPE=Ethernet
> > UUID=4d11464b-1304-43e6-abcc-e28f6c56894f
> > IPADDR=192.168.0.11
> > NETMASK=255.255.255.0
> > DEFROUTE=yes
> > ONBOOT=yes
> > NM_CONTROLLED="no"
> > BOOTPROTO=static
> >
> > nova.conf on compute1:
> > -- truncated --
> > flat_interface = eth1
> > flat_network_bridge = br100
> > public_interface = eth1
> > -- truncated --
> >
> > network-create command used:
> > nova network-create vmnet --fixed-range-v4=192.168.0.0/24 
> > --bridge-interface=br100 --multi-host=T
> >
> > ifcfg -a output on compute1:
> > br100 Link encap:Ethernet  HWaddr 2C:44:FD:7F:04:B1
> >   inet addr:192.168.0.1  Bcast:192.168.0.255  Mask:255.255.255.0
> >   inet6 addr: fe80::542d:5dff:fe0c:f3d4/64 Scope:Link
> >   UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
> > -- truncated --
> >
> > eth0  Link encap:Ethernet  HWaddr 2C:44:FD:7F:04:B0
> >   inet addr:10.192.207.152  Bcast:10.192.207.255  Mask:255.255.240.0
> >   inet6 addr: fe80::2e44:fdff:fe7f:4b0/64 Scope:Link
> >   UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
> > -- truncated --
> >
> > eth1  Link encap:Ethernet  HWaddr 2C:44:FD:7F:04:B1
> >   inet6 addr: fe80::2e44:fdff:fe7f:4b1/64 Scope:Link
> >   UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
> > -- truncated --
> >  
> >  
> > Thanks,
> > Nishant
> 
> 
> !DSPAM:2,52b729f2311877236118410!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,52b729f2311877236118410!
__

Re: [Openstack] A bug on OpenStack

2013-12-22 Thread Remo Mattei
Hi 
I assume you are using nova network? Why not neutron ? I had it running on my 
test env with no problems 

Remo

Inviato da iPad ()

> Il giorno Dec 22, 2013, alle ore 6:14, 武田 剛征 
>  ha scritto:
> 
> Hi OpenStack experts,
>  
> Could you please, help me out on this? I need your experts advice.
> I am trying to build VlanManager environment with OpenStack grizzly on Cent 
> OS 6.4, but it doesn't work.
> I am using all-in-one architecture (single-host). FlatDHCPManager 
> successfully worked.
>  
> So, I am assuming that there is any bug/defect that VlanManager can't work 
> with single-host architecture.
> Does anyone know if there is such a bug related to VlanManager on single-host 
> architecture?
>  
> Any pointer or letting me know anyone who is familiar with this would be 
> highly appreciated.
> Thank you so much in advance,
>  
>  
> Bird Kafka
>  
> !DSPAM:2,52b6f771184359628411343!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,52b6f771184359628411343!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] A bug on OpenStack

2013-12-22 Thread Remo Mattei
Hi BridKafka, 
keep in mind that the next release the default network will be neutron. So 
because of the limitation of nova network everyone starting with a new cluster 
is not using nova network but just directly using neutron, which allows lots 
more options and flexibilities. 

Good luck on the VlanManager solution. 

Remo 


On Dec 22, 2013, at 8:48 PM, 武田 剛征  wrote:

> Hi Remo,
>  
> Thank you very much for your reply. I am going to try Neutron in the near 
> future.
> However, I want to try nova-network VlanManager at first.
>  
> Have you seen the same issue with nova-network VlanManager on single-host 
> OpenStack?
>  
>  
> Kind Regards,
> BirdKafka
>  
>  
> From: Remo Mattei [mailto:r...@mattei.org] 
> Sent: Monday, December 23, 2013 7:20 AM
> To: 武田 剛征
> Cc: 
> Subject: Re: [Openstack] A bug on OpenStack
>  
> Hi 
> I assume you are using nova network? Why not neutron ? I had it running on my 
> test env with no problems 
>  
> Remo
> 
> Inviato da iPad ()
> 
> Il giorno Dec 22, 2013, alle ore 6:14, 武田 剛征 
>  ha scritto:
> 
> Hi OpenStack experts,
>  
> Could you please, help me out on this? I need your experts advice.
> I am trying to build VlanManager environment with OpenStack grizzly on Cent 
> OS 6.4, but it doesn't work.
> I am using all-in-one architecture (single-host). FlatDHCPManager 
> successfully worked.
>  
> So, I am assuming that there is any bug/defect that VlanManager can't work 
> with single-host architecture.
> Does anyone know if there is such a bug related to VlanManager on single-host 
> architecture?
>  
> Any pointer or letting me know anyone who is familiar with this would be 
> highly appreciated.
> Thank you so much in advance,
>  
>  
> Bird Kafka
>  
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,52b6f771184359628411343!
> !DSPAM:2,52b7c12e12981112711783!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] neutron install guide wording question

2013-12-23 Thread Remo Mattei
I have done in two modes controller and compute and works fine with no problems 

I have not chk the link yet bit you should have no problem with this mode. 

Inviato da iPhone ()

> Il giorno Dec 23, 2013, alle ore 16:42, Matt Kassawara  
> ha scritto:
> 
> You don't need a three-node architecture (controller, network, and compute) 
> to deploy the Networking/Neutron service, but it seems to work best with the 
> installation guide and also simplifies debugging.
> 
> 
>> On Mon, Dec 23, 2013 at 5:07 PM, August Simonelli 
>>  wrote:
>> Hi all,
>> 
>> I’m currently going through the havana install guide for a yum-based distro 
>> and planning my required hardware. I was hoping to only use two hosts and 
>> needed some clarification around neutron:
>> 
>> Do i need a dedicated network node (exclusive of controller and compute) if 
>> i want to use neutron as per the guide? The install guide 
>> (http://docs.openstack.org/havana/install-guide/install/yum/content/neutron-install-network-node.html)
>>  lists 3 scenarios, one each for dedicated network/compute/controller but 
>> the wording is confusing me:
>> 
>> Install Networking services on a dedicated network node
>> Install networking support on a dedicated compute node
>> Install networking support on a dedicated controller node
>> 
>> I first thought these were mutually exclusive, If i wanted to run networking 
>> on it’s own node, use the first, if i wanted networking on compute use the 
>> second etc.
>> 
>> But i noticed the wording uses “services” for network node and “support” for 
>> the others. Is it correct to assume this example is NOT mutually exclusive 
>> and rather each step must be taken on individual respective nodes (one 
>> network, one compute and one controller) in a single cloud (i.e. therefor a 
>> minimum of 3 nodes)?
>> 
>> Thanks in advance,
>> 
>> August
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:2,52b8dc57278161812946874!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,52b8dc57278161812946874!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Havana]Fail to launch instance

2013-12-24 Thread Remo Mattei
Looks like it is used by other daemon on port 53 use netstat to see what is 
running kill it go to screen and rerun dhcp again which should fix your 
problem. 
Ciao

Inviato da iPhone ()

> Il giorno Dec 24, 2013, alle ore 5:55, Giuseppe Galeota 
>  ha scritto:
> 
> Dear all,
> I just finished to install Devstack as is, without any editing to the localrc 
> file.
> 
> If I try to create an instance (admin or demo user ) using the cirros_0.3.1 
> image, I receive the following error:
> 
> Error: Failed to launch instance "Istance_Name": Please try again later 
> [Error: Remote error: ProcessExecutionError Unexpected error while running 
> command. 
> Command: 
> sudo nova-rootwrap /etc/nova/rootwrap.conf env 
> CONFIG_FILE=["/etc/nova/nova.conf"] NETWORK_ID=1 dnsmasq --strict-order 
> --bind-interfaces --conf-file= --pid-file=/opt/stac
> ].
> 
> So, I have tried to run the command:
> sudo nova-rootwrap /etc/nova/rootwrap.conf env 
> CONFIG_FILE=["/etc/nova/nova.conf"] NETWORK_ID=1 dnsmasq --strict-order 
> --bind-interfaces --conf-file= --pid-file=/opt/stac
> 
> directly in the terminal, receiveing the followinf error:
> 
> dnsmasq failed to create listening socket for 127.0.0.1 address already in use
> 
> How can I resolv this problem?
> 
> Thank you!
> !DSPAM:2,52b997b2142788201237864!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,52b997b2142788201237864!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] VlanManager on single-host OpenStack can NOT work

2013-12-29 Thread Remo Mattei
Any reasons why nova network ? Everyone is going to neutron. Just wonder.

Remo

Inviato da iPad ()

> Il giorno Dec 29, 2013, alle ore 19:50, "starlight" 
>  ha scritto:
> 
> Hi Experts,
> 
> I need your help on this. VlanManager on single-host OpenStack can NOT work.
> The test bed I use is as below.
> 
> OpenStack release: grizzly
> OS: Cent OS 6.4
> Type of network: VlanManager (nova-network)
> Host condition: single-host (NOT multi-host)
> 
> I am trying to build VlanManager environment with OpenStack grizzly on Cent 
> OS 6.4, but it doesn't work. VM creation failed.
> I am using all-in-one architecture (single-host). FlatDHCPManager 
> successfully worked on the host.
> 
> I am assuming that I came across a bug/defect that VlanManager can't work 
> with single-host environment.
> I'd like OpenStack team to examine and determine if there is such a bug 
> related to VlanManger on single-host environment.
> 
> Thank you very much in advance,
> Bird Kafka
> 
>  
>  
> !DSPAM:2,52c0ef48130967167514872!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,52c0ef48130967167514872!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] New to OpenStack

2013-12-30 Thread Remo Mattei
You should look at devstack and packstack 
Openstack.rdo.com has a nice install guide. 

Remo

Inviato da iPhone ()

> Il giorno Dec 30, 2013, alle ore 13:14, Kaushal Shriyan 
>  ha scritto:
> 
> typo error
> 
> It is trystack.org 
> 
> 
>> On Mon, Dec 30, 2013 at 2:14 PM, Kaushal Shriyan  
>> wrote:
>>> On Mon, Dec 30, 2013 at 2:11 PM, Razique Mahroua 
>>>  wrote:
>>> Hi ! 
>>> You will need everything you need here:
>>> http://docs.openstack.org/
>>> 
>>> and if you have any questions:
>>> http://ask.openstack.org
>> 
>> I have requested on Trystacl.org 
>> (https://www.facebook.com/groups/269238013145112/). Can someone please 
>> authorise me to try out openstack platform.
>> 
>> Thanks and Regards,
>> 
>> Kaushal
> 
> !DSPAM:2,52c1e72a199313621218032!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:2,52c1e72a199313621218032!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] New to OpenStack

2013-12-30 Thread Remo Mattei
I would not use fuel yet I would suggest to check rdo and devstack then when 
you have an understanding you could use fuel

Remo

Inviato da iPhone ()

> Il giorno Dec 30, 2013, alle ore 14:20, Hao Wang  ha 
> scritto:
> 
> I agree with Martinx even though I have not tried 4.0 but the previous
> version impressed me a lot comparing RDO and manual processes.
> 
> Regards,
> Howard
> 
> On Mon, Dec 30, 2013 at 5:05 PM, Martinx - ジェームズ
>  wrote:
>> I tried Mirantis Fuel 4.0 yesterday! Seems to be very great!!
>> 
>> 
>>> On 30 December 2013 19:42, Kaushal Shriyan  wrote:
>>> 
>>> 
>>> 
>>> 
>>>> On Mon, Dec 30, 2013 at 2:37 PM, Remo Mattei  wrote:
>>>> 
>>>> You should look at devstack and packstack
>>>> Openstack.rdo.com has a nice install guide.
>>>> 
>>>> Remo
>>> 
>>> 
>>> Hi Remo,
>>> 
>>> Are you referring to the below URL's
>>> 
>>> http://devstack.org/
>>> https://wiki.openstack.org/wiki/Packstack
>>> http://openstack.redhat.com/Main_Page
>>> 
>>> Please correct me if i am on the wrong URL's?
>>> 
>>> Regards,
>>> 
>>> Kaushal
>>> 
>>> ___
>>> Mailing list:
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe :
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:2,52c1f570239242792379246!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] New to OpenStack

2013-12-31 Thread Remo Mattei
Check below
-- 
Remo Mattei


December 30, 2013 at 19:37:14, tudor (tu...@tudorholton.com) ha scritto:

Could you elaborate on your thinking here, Remo?   I've had the opposite 
experience.  I found Devstack frustrating because it presumes a single-node 
installation, and I'd lose all my settings every time I reran the script, and 
there's still a high degree of knowledge of the components if you want to go 
further.  As the name suggests, it's really aimed at the developers of 
OpenStack and not a "trial-run" or "test" installation.

Devstack is indeed for developers as well as packstack but at least you will 
have to know how the components will interact together before you add a second 
layer that cover what’s behind the scene like fuel. I did work with Mirantis so 
I know the nice options offered with Fuel. 


RDO doesn't offer things like High Availability and won't run on 
non-RedHat/CentOS/Fedora nodes.  (I don't know about Ceph offerings.)

RDO will have this options soon as far as I know. 


After months of trying and retrying I stumbled upon Mirantis and had it running 
inside VirtualBox in minutes with Ubuntu nodes!   I then did a bare-metal 
installation and I was more easily able to distinguish what was my own 
hardware/network issues, and what were gaps in my OpenStack knowledge.  Fuel 
gave me an 'Ahah!' moment with Neutron and networking which was previously 
hidden in installation detail.  "Choices" that aren't very clear in the OS 
documentation as to their benefits or hindrances became simple radio buttons 
and check boxes which I could play with and try out.  I can also have Fuel 
verify and recheck my settings (something which I'd started writing my own 
scripts for, but was glad to scrap as they were becoming complex and 
cumbersome.)

I can't speak highly enough of Mirantis (and currently have a 4.0 installation 
running as of this morning).  My only complaint is that they require 
registration for download, which is a little strange for an "open" product.   
(But then a number of companies are trying different things to monetise their 
development, and that's a whole different discussion.)

Yes the new fuel will have Neutron and Ceph and allows you to select what you 
would like in your Openstack infrastructure, still does not mean you know what 
you are doing. Learn first then use the tools to make your life easer otherwise 
troubleshooting is going to be a nightmare. 



Just my 2 cents.


I'm interested to hear your thinking.

Cheers,
Tudor. 

 

On 2013-12-31 11:08, Remo Mattei wrote:

I would not use fuel yet I would suggest to check rdo and devstack then when 
you have an understanding you could use fuel

Remo

Inviato da iPhone ()
Il giorno Dec 30, 2013, alle ore 14:20, Hao Wang  ha 
scritto: I agree with Martinx even though I have not tried 4.0 but the previous 
version impressed me a lot comparing RDO and manual processes. Regards, Howard 
On Mon, Dec 30, 2013 at 5:05 PM, Martinx - ジェームズ  
wrote:
I tried Mirantis Fuel 4.0 yesterday! Seems to be very great!!
On 30 December 2013 19:42, Kaushal Shriyan  wrote:
On Mon, Dec 30, 2013 at 2:37 PM, Remo Mattei  wrote: You 
should look at devstack and packstack Openstack.rdo.com has a nice install 
guide. Remo
Hi Remo, Are you referring to the below URL's http://devstack.org/ 
https://wiki.openstack.org/wiki/Packstack http://openstack.redhat.com/Main_Page 
Please correct me if i am on the wrong URL's? Regards, Kaushal 
___ Mailing list: 
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : 
openstack@lists.openstack.org Unsubscribe : 
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___ Mailing list: 
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : 
openstack@lists.openstack.org Unsubscribe : 
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___ Mailing list: 
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : 
openstack@lists.openstack.org Unsubscribe : 
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
 

 
!DSPAM:2,52c23be995627242210149! 
___ 
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack 
Post to : openstack@lists.openstack.org 
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack 


!DSPAM:2,52c23be995627242210149! 
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] VlanManager on single-host OpenStack can NOT work

2013-12-31 Thread Remo Mattei
Neutron does support multi host now.
-- 
Remo Mattei


December 30, 2013 at 2:32:53, Dnsbed Ops (o...@dnsbed.com) ha scritto:

On 2013-12-30 12:17, Remo Mattei wrote:  
> Any reasons why nova network ? Everyone is going to neutron. Just wonder.  
>  

Maybe nova-network supports multi-hosts while neutron doesn't?  

Thanks.  

___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:2,52c14bd57175692517181!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Designate DNSaaS installation issue

2013-12-31 Thread Remo Mattei
I also believe that MySQL is the first choice here since it’s still an early 
stage and I am not sure Postgres has been added to the mix yet. 


-- 
Remo Mattei


December 31, 2013 at 8:14:41, Simon McCartney (si...@mccartney.ie) ha scritto:

Hi Nick, 

I don't think we've tested against Postgres recently, let me see if we can get 
a Postgres test environment setup & tweak the SQLA to keep Postgres happy.

(fwiw, we're using Percona/Galera MySQL clusters in production with Designate)

Simon.

On Tuesday, December 31, 2013, Nick Maslov wrote:
Hi,

I`m installing Designate as per this doc.

When I try to use this command:
 designate-manage database-sync
It fails with following:

2013-12-31 12:20:39    DEBUG [migrate.versioning.util] Disposing SQLAlchemy 
engine Engine(postgres://designate:pa%24w0rd@pg01-001/designate)
2013-12-31 12:20:39    ERROR [cliff.app] Postgresql ENUM type requires a name.
ERROR: Postgresql ENUM type requires a name.

I`m using PostgreSQL as backend for Designate. Can someone point me in the 
right direction, and maybe point to Designate developers?

Thanks,
NM


-- 
Nick Maslov
Sent with Airmail


--
Simon McCartney
E: si...@mccartney.ie
M: +44 7710 836 915

!DSPAM:2,52c2ed71163741943879220! 
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,52c2ed71163741943879220!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Happy new year all

2013-12-31 Thread Remo Mattei
you have a good year David, 

Ciao
-- 
Remo Mattei


December 31, 2013 at 21:10:21, David Easter (deas...@mirantis.com) ha scritto:

It's midnight somewhere!  (Past midnight in most places.  :-)

Happy New Year!

-David J. Easter
Product Line Manager, Mirantis

On Tuesday, December 31, 2013, Dnsbed Ops wrote:
happy new year all~


Happy new year opensthackers :)




___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
!DSPAM:2,52c3a33d308721368617628! 
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:2,52c3a33d308721368617628!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] can't get IP when I working with ml2 + GRE

2014-01-02 Thread Remo Mattei
Are you sure your iptables is not blocking anything? 

Inviato da iPhone ()

> Il giorno Jan 2, 2014, alle ore 17:07, "Li, Chen"  ha 
> scritto:
> 
> 
> 2.6.32-358.111.1.openstack.el6.x86_64
> 
> Thanks.
> -chen
> 
> -Original Message-
> From: Mārtiņš Jakubovičs [mailto:mart...@hostnet.lv] 
> Sent: Thursday, January 02, 2014 5:35 PM
> To: openstack@lists.openstack.org
> Subject: Re: [Openstack] can't get IP when I working with ml2 + GRE
> 
> Hello Li,
> 
> I have similar issue, unfortunately I use Ubuntu system on my network node. 
> When I manualy setup IP in instance, network works, but when I setup to use 
> DHCP, it fails to assign IP. Which kernel you got before?
> 
>> On 2014.01.02. 7:03, Li, Chen wrote:
>> After upgrade network node's kernel to 
>> 2.6.32-358.123.2.openstack.el6.x86_64, the issue looks gone.
>> 
>> Thanks.
>> -chen
>> 
>> -Original Message-
>> From: Li, Chen [mailto:chen...@intel.com]
>> Sent: Thursday, January 02, 2014 9:12 AM
>> To: Dnsbed Ops; openstack@lists.openstack.org
>> Subject: Re: [Openstack] can't get IP when I working with ml2 + GRE
>> 
>> Yes, DHCP is enabled, and I can see IP is already in 
>> /var/lib/neutron/dhcp/${net_id}/ host
>> 
>> Thanks.
>> -chen
>> 
>> -Original Message-
>> From: Dnsbed Ops [mailto:o...@dnsbed.com]
>> Sent: Monday, December 30, 2013 6:21 PM
>> To: openstack@lists.openstack.org
>> Subject: Re: [Openstack] can't get IP when I working with ml2 + GRE
>> 
>>> On 2013-12-30 14:50, Li, Chen wrote:
>>> I created a gre network and booted a instance successfully.
>>> No error can be found in log.
>>> But, my instance can't get IP from dhcp agent.
>>> 
>>> Anyone know why this happen ??
>> We run GRE + OVS + Neutron, the dhcp works well.
>> Are you sure dhcp is enabled?
>> for neutron it is:
>> 
>> $ neutron port-list -c id -c device_owner
>> 
>> And we see a line like:
>> 
>> | e422bb05-3f51-45f1-b688-a1d9c20f197c | network:dhcp
>> 
>> This means at least dhcp has been running there.
>> 
>> Regards.
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : 
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : 
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : 
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:52c60ed3147241694511171!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] dhcp agent issue when working with ovs vxlan

2014-01-02 Thread Remo Mattei
You do not need the last two lines in your instances did you log in and try 
manual settings does it work?

Inviato da iPhone ()

> Il giorno Jan 2, 2014, alle ore 17:28, "Li, Chen"  ha 
> scritto:
> 
> Under the network namespace, I can get:
> ip netns exec qdhcp-d250b6d9-0077-41ae-88e1-8736dfd0e165 ip addr
> 16: lo:  mtu 16436 qdisc noqueue state UNKNOWN
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> inet 127.0.0.1/8 scope host lo
> inet6 ::1/128 scope host
>valid_lft forever preferred_lft forever
> 17: ns-8d8fdae7-1f:  mtu 1500 qdisc noop state DOWN qlen 
> 1000
> link/ether a6:5d:85:93:8d:62 brd ff:ff:ff:ff:ff:ff
> inet 30.1.100.3/24 brd 30.1.100.255 scope global ns-8d8fdae7-1f
>  
>  
> But, a normal work network should looks like:
> ip netns exec qdhcp-1314f7bb-9b52-4db8-a677-a751e52aad0e ip addr
> 21: lo:  mtu 16436 qdisc noqueue state UNKNOWN
> link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
> inet 127.0.0.1/8 scope host lo
> inet6 ::1/128 scope host
>valid_lft forever preferred_lft forever
> 22: ns-45bfc42b-93:  mtu 1500 qdisc 
> pfifo_fast state UP qlen 1000
> link/ether fa:16:3e:b0:33:b6 brd ff:ff:ff:ff:ff:ff
> inet 20.1.100.3/24 brd 20.1.100.255 scope global ns-45bfc42b-93
> inet6 fe80::f816:3eff:feb0:33b6/64 scope link
>valid_lft forever preferred_lft forever
>  
>  
> I don’t know why the last two line is missing…….
> Why the interface is not recognized ???
>  
>  
> Thanks.
> -chen
>  
> From: Li, Chen [mailto:chen...@intel.com] 
> Sent: Friday, January 03, 2014 9:13 AM
> To: Remo Mattei; openstack@lists.openstack.org
> Subject: Re: [Openstack] dhcp agent issue when working with ovs vxlan
>  
> Can you explain more ???
> I don’t understand.
>  
> Thanks.
> -chen
>  
>  
> From: Remo Mattei [mailto:r...@mattei.co] 
> Sent: Thursday, January 02, 2014 11:23 PM
> To: openstack@lists.openstack.org; Li, Chen
> Subject: Re: [Openstack] dhcp agent issue when working with ovs vxlan
>  
> Hi Chen, 
>  
> looks like your interface is not recognized, I would check and make sure you 
> can set a static ip and ping out to start troubleshooting. 
>  
> -- 
> Remo Mattei
> Da: Li, Chen Li, Chen
> Rispondi: Li, Chen chen...@intel.com
> Data: January 1, 2014 at 23:18:49
> A: openstack@lists.openstack.org openstack@lists.openstack.org
> Oggetto:  [Openstack] dhcp agent issue when working with ovs vxlan
> 'RTNETLINK answers: No such 
> !DSPAM:52c61308148711690590980!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:52c61308148711690590980!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] Hello everyone--GlusterFS performance vs CEPH

2014-01-08 Thread Remo Mattei
Hello everyone, 
while back some people were saying that the performance of GlusterFS was not 
acceptable in OpenStack. I have found this article and I wonder if anyone has 
had the opportunity to see if this has really improved. 

OpenStack Havana: GlusterFS, and what “improved support” really means

http://www.mirantis.com/blog/openstack-havana-glusterfs-and-what-improved-support-really-means/

I will be happy to see what everyone has to say.

Thanks

Remo ___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] neutron/ with linux-bridge error

2014-01-08 Thread Remo Mattei
Hi Arindam, 

Looks like the driver you are using is depreciated. So I would suggest to try 
to use the new one as stated in the statement below. 

Ciao 
Remo

On Jan 8, 2014, at 6:47 PM, Bhattacharjee, Arindam (Arindam) 
 wrote:

> # Nova/nova-compute log
> WARNING nova.virt.libvirt.vif [req-3b9dae5d-3582-4aa2-8637-4b0b465d106e 
> b81925c907554451a9be9ef91f69ac0d eb8bd4aa2a5043ca9f61fd868da0cec3] 
> Deprecated: The NeutronLinuxBridgeVIFDriver VIF driver is now deprecated and 
> will be removed in the next release. Please use the LibvirtGenericVIFDriver 
> VIF driver, together with a network plugin that reports the 'vif_type' 
> attribute

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Very Simple step-by-step Openstack Havana/Neutron/Openvswitch Installation guide

2014-01-09 Thread Remo Mattei
Ciao Marco, 
I will try to get this converted to CentOS as soon as I have a little time. 

Good job. 

Remo 

On Jan 9, 2014, at 5:55 AM, Marco Fornaro  wrote:

> Hi Dimitrakis,
> 
> Thanks
> 
> I planned to:
> ->Write point 10 of the guide (" 10. Adding a Compute Node ") explaining how 
> to easily add a compute nodeand I guess I could end by next Monday
> ->Write a guide poposing a full multi-node installation (honestly I already 
> did that and tested, but there are some minor aspects I would like to check 
> furter)
> 
> Please feel free to post any suggested modify on this mailing list and/or on 
> github
> 
> BR
> 
> Marco
> 
> 
> -Original Message-
> From: Georgios Dimitrakakis [mailto:gior...@acmac.uoc.gr] 
> Sent: den 9 januari 2014 11:15
> To: openstack@lists.openstack.org; openstack-d...@lists.openstack.org
> Subject: Re: [Openstack] Very Simple step-by-step Openstack 
> Havana/Neutron/Openvswitch Installation guide
> 
> Hi Marco!
> 
> It looks very interesting! Do you think that you will be able to point 
> out the differences if someone would like to use two nodes (controller + 
> compute) in order to setup openstack?
> 
> All the best,
> 
> G.
> 
> On Thu, 9 Jan 2014 10:03:05 +, Marco Fornaro wrote:
>> Hi All,
>> 
>> I wrote an unofficial as-easy-as-possible and step-by-step
>> Installation guide for Openstack Havana+Neutron+Openvswitch:
>> 
>> 
>> https://github.com/fornyx/OpenStack-Havana-Install-Guide/blob/master/OpenStack-Havana-Install-Guide.rst
>> [1]
>> 
>> Please let me know what you think about and if it can be useful to
>> anyone
>> 
>> My Idea is to first check this guide "easily" published on github 
>> with
>> users, and then propose a similar guide structure for some part of 
>> the
>> official documentation (for instance as an example of complete
>> installation)
>> 
>> Best Regards
>> 
>> Marco
>> 
>> 
>> 
>> Links:
>> --
>> [1]
>> 
>> https://github.com/fornyx/OpenStack-Havana-Install-Guide/blob/master/OpenStack-Havana-Install-Guide.rst
> 
> -- 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:52ce8244159546196115364!
> 


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Update from DefCore (aka Board's OpenStack Core Definition Committee)

2014-01-09 Thread Remo Mattei
Nice job Rob

Remo

Inviato da iPhone ()

> Il giorno Jan 9, 2014, alle ore 10:48,  ha scritto:
> 
> Stackers,
>  
> I posted this first on my blog (which is mirrored to Planet OpenStack) and 
> want to make sure that we reach a broad audience with the information.  The 
> Board heard very clearly that this was an important issues and we’re acting 
> quickly to resolve it in transparent and community focused way.
>  
> OpenStack Core Definition (DefCore) Progress in 6 key areas
>  
> I’m excited to report about the OpenStack Board progress on defining 
> OpenStack core.  At the Hong Kong summit, Joshua McKenty and I were asked to 
> chair a new standing committee, now known as DefCore, to define “OpenStack 
> Core” based on the core principles that we determined over the last 6 months 
> (aka “the spider”).
> Joshua and I took on the challenge with gusto and I’m proud to say that we’ve 
> already made significant progress against an aggressive timeline to have the 
> pilot must-pass tests for Havana defined before the Juno Summit in April 
> 2014.  It’s important to remember that we’re moving from a project based 
> definition of core to test-driven capabilities because this best addresses 
> our interoperability objectives.
>  
> In the 8 weeks since the summit, we’ve had seven very productive meetings 
> (etherpads for Prep, DefCore.1, DefCore.2, DefCore.3, Criteria 1 and 2) with 
> detailed notes and recorded content. Here’s my summary of our results so far:
> 1.  An Aggressive Timeline for having pilot Havana must-pass tests 
> approved by the Juno summit in May 2014.  That drives the schedule backward 
> toward a preliminary list in March.  Once we have a pilot list for Havana, we 
> expect to have Ice House done +90 days and Juno done at the Paris summit.
> 2.  Test Selection Criteria a preliminary set of 14 criteria (needs a 
> stand alone post) that will be used to quantitatively score the current 700+ 
> tests.  We also agreed to use a max 100 point weighting system for the 
> criteria.  The weights and score requirement iteratively once we have done a 
> first scoring pass.  Our objective is to make must-pass test selection as 
> objective and transparent as possible (post with details).
> 3.  Distinction between Capability & Test is important because we 
> recognize that individual tests may validate multiple capabilities and 
> individual capabilities may have multiple tests.  Our hope is to present the 
> results in terms of capabilities not individual tests.
> 4.  Holding Off on Bylaws Changes needed to clarify how OpenStack manage 
> core definition.  It was widely expected that the DefCore committee would 
> have to make changes to the OpenStack bylaws; however, we believe we can 
> proceed without rushing changes.  We have an active subcommittee preparing 
> changes in advance of the next DefCore cycle.
> 5.  Program vs. Project Definition efforts are needed to help take 
> pressure off requests to have “projects promoted to core status” and how the 
> OpenStack trademark is used for projects.  We are trying to clarify OpenStack 
> Programs (e.g.: OpenStack™ Compute) carry to the trademark while OpenStack 
> Projects (e.g.: Nova and Glace) are members of those programs and do not 
> carry the OpenStack trademark directly.  Consequently, we’d expect people to 
> say “OpenStack Compute Project Nova” instead of “OpenStack Nova.”  This 
> approach addresses several issues that impact DefCore Board activities around 
> trademark, core and brand.
> 6.  RefStack Development and Use Cases provide the framework for 
> community reporting of test results.  We consider this infrastructure 
> critical to getting community input about must-pass tests and also sharing 
> interoperability information.  This effort is just beginning and needs help 
> from the community.
> For all this progress, we are only starting!  We’ve cleared the blocks 
> preventing implementation and that will expose a new set issues to discuss.  
> Look for us to start applying the criteria to tests in the next months.  That 
> will quickly expose the strengths and weaknesses of our criteria set.  We’ve 
> also got to make progress on Program vs. Project and start RefStack coding.
> 
> We want community participation!  Please let us know what you think
> 
> Rob
> __
> Rob Hirschfeld
> OpenStack Foundation Board Member, Sr. Distinguished Cloud Solution Architect
> Dell | Cloud Edge, Data Center Solutions
> blog robhirschfeld.com, twitter @zehicle
> Please note, I am based in the CENTRAL (-6) time zone
>  
> !DSPAM:52cef0b6244798768918194!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:52cef0b6244798768918194!
___
Mailing

Re: [Openstack] neutron/ with linux-bridge error

2014-01-09 Thread Remo Mattei
I am traveling, but you need to make sure you restart all services after you 
have made the changes. 


— 
Ciao
Remo Mattei
Da: Bhattacharjee, Arindam (Arindam) Bhattacharjee, Arindam (Arindam)
Rispondi: Bhattacharjee, Arindam (Arindam) 
arindam.bhattachar...@alcatel-lucent.com
Data: January 9, 2014 at 14:51:37
A: Remo Mattei r...@mattei.org
Oggetto:  RE: [Openstack] neutron/ with linux-bridge error  
Took care of this nova warning: Deprecated: The NeutronLinuxBridgeVIFDriver VIF 
driver…

Looked at libvirt/vif.py script and then changed

#libvirt_vif_driver=nova.virt.libvirt.vif.NeutronLinuxBridgeVIFDriver

libvirt_vif_driver=nova.virt.libvirt.vif.LibvirtGenericVIFDriver

 

But still that Attribute Error is there in Neutron server and linxbridge-agent.

2014-01-09 13:03:57.305 2158 ERROR neutron.openstack.common.rpc.common [-] 
['Traceback (most recent call last):\n', '  File 
"/usr/lib/python2.7/dist-packages/neutron/openstack/common/rpc/amqp.py", line 
438, in _process_data\n    **args)\n', '  File 
"/usr/lib/python2.7/dist-packages/neutron/common/rpc.py", line 44, in 
dispatch\n    neutron_ctxt, version, method, namespace, **kwargs)\n', '  File 
"/usr/lib/python2.7/dist-packages/neutron/openstack/common/rpc/dispatcher.py", 
line 172, in dispatch\n    result = getattr(proxyobj, method)(ctxt, 
**kwargs)\n', '  File 
"/usr/lib/python2.7/dist-packages/neutron/plugins/linuxbridge/lb_neutron_plugin.py",
 line 147, in update_device_up\n    port = 
self.get_port_from_device.get_port(device)\n', "AttributeError: 'function' 
object has no attribute 'get_port'\n"]

 

!DSPAM:52cefdc8248881361874172!___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] neutron/ with linux-bridge error

2014-01-09 Thread Remo Mattei
I have not tried this on Havana yet. I need to look what could be the problem. 


On Jan 9, 2014, at 1:40 PM, Bhattacharjee, Arindam (Arindam) 
 wrote:

> Thanks a lot Remo for the reply.
> Yes I did restart all services.
> This similar config worked fine with Linux-bridge with quantum linux bridge 
> with Grizzly. I’m now trying with Havana/neutron/linuxbridge and see this 
> issue.
> It seems some how neutron cannot setup more than one  port.vlan with the 
> bridge. The one which is setup also cannot have network connectivity. I shut 
> off all firewall but did not help
>  
>  
> Does this ring any bell ?
>  
>  
> I saw in mysql neutron database
> mysql> select * from ports;
> +--+--+--+--+---+++--+--+
> | tenant_id| id   | 
> name | network_id   | mac_address   | 
> admin_state_up | status | device_id| device_owner 
> |
> +--+--+--+--+---+++--+--+
> | eb8bd4aa2a5043ca9f61fd868da0cec3 | 10281d66-2481-43d8-94c7-67eb94767fa5 |   
>| fa036e3b-7ea7-48e9-9416-fa9345964d96 | fa:16:3e:27:6e:1f |  
> 1 | ACTIVE | 07b4fa53-cafb-41a3-8682-b95f6e1b9e41 | compute:nova |
> | eb8bd4aa2a5043ca9f61fd868da0cec3 | 2b98bb69-ac2d-4044-8790-2b27df9b5769 |   
>| 2e425ce1-9276-44ca-aa83-41a2b74a78aa | fa:16:3e:07:1f:d0 |  
> 1 | DOWN   | 9c118017-aab0-41b3-96c2-1596480060d8 | compute:nova |
> | eb8bd4aa2a5043ca9f61fd868da0cec3 | 41418a8c-5aed-4cf4-938f-a5daf3d9c4aa |   
>| fed08b5b-baa7-4ac5-8a94-6f21cc239c43 | fa:16:3e:bc:cd:58 |  
> 1 | DOWN   | 07b4fa53-cafb-41a3-8682-b95f6e1b9e41 | compute:nova |
> +--+--+--+--+---+++--+--+
> 3 rows in set (0.00 sec)
>  
>  
> # By the way I changed in /etc/nova.conf file to take care of the warning.
> #libvirt_vif_driver=nova.virt.libvirt.vif.NeutronLinuxBridgeVIFDriver
> libvirt_vif_driver=nova.virt.libvirt.vif.LibvirtGenericVIFDriver
>  
> !DSPAM:52cf175d256144786639909!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] CentOS Network Create problem

2014-01-12 Thread Remo Mattei
Do you have a network node? 
This is important not sure since I did not read all the emails so sorry if this 
has been already asked. 

Remo

Inviato da iPhone ()

> Il giorno Jan 12, 2014, alle ore 14:54, Georgios Dimitrakakis 
>  ha scritto:
> 
> 
> Thank you all for your suggestions!
> 
> I was (and still am) confused since the manual says that the nova-network 
> create command should be run on the controller node. That is obviously 
> failing because no br100 is defined. So do I have to put br100 on the 
> controller as well or should I just create the network on the compute node?
> What are the differences in these setups?
> 
> Best,
> 
> G.
> 
>> On Thu, 09 Jan 2014 10:05:54 -0600, Dimitri Maziuk wrote:
>>> On 1/9/2014 4:11 AM, Georgios Dimitrakakis wrote:
>>> Hello again!
>>> 
>>> No the br100 was not created automatically unfortunately! There is also
>>> this bug report: https://bugs.launchpad.net/openstack-manuals/+bug/1241331
>> 
>> I'm not 100% sure but I think in my case it did get created
>> automatically when I tried to fire up the cirros instance the 2nd time
>> around... However, I may have created the bridge manually at some
>> point while fighting with it, I forget.
>> 
>> https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Linux/5/html/Virtualization/sect-Virtualization-Network_Configuration-Bridged_networking_with_libvirt.html
>> 
>> (from "disable network manager" down to "restart networking or reboot")
>> 
>> Also check that vhost_net module is loaded (lsmod).
>> 
>>> Since it wasn't created automatically I am asking if it has to be on
>>> both nodes (controller + compute) in order for the network to work
>>> correctly? Furthermore, I would like to know how should it be bridged in
>>> order to achieve floating (public) IPs?
>> 
>> Compute only: this is the interface VMs use to talk to the world.
>> Floating IPs are a separate story really -- but if I uderstand the
>> question correctly, your br100 should be bridged to the subnet where
>> your floating IPs are.
>> 
>> I.e. if your eth0 is on 1.2.3.0/24 and your eth1 is on 10.0.0.0/24,
>> and you want floating IPs in 1.2.3.0/24 range, then you want to bridge
>> br100 to eth0.
>> 
>> Dima
>> 
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> -- 
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:52d31f75283622082615255!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] CentOS Network Create problem

2014-01-15 Thread Remo Mattei
What network (ip address) are you using to ssh into the cirrors box?

Just to make sure since you may not have a route to it. 

Remo 

On Jan 15, 2014, at 10:29 AM, Dimitri Maziuk  wrote:

> On 01/15/2014 08:23 AM, Georgios Dimitrakakis wrote:
>> Hi again...Long day with OpenStack today...
>> 
>> It seems that the problem with the br100 interface has been solved
>> partially since I can launch an instance but I am not able to ssh nor
>> ping the machine (although I have configured the security group rules).
> 
> Here's what I have on a working node with 2 instances running. Ignore
> virbr0, it's created by libvirt, vnet0 & 1 are the openstack instances:
> 
> # brctl show
> bridge name bridge id   STP enabled interfaces
> br100   8000.003048c53032   no  eth0
>vnet0
>vnet1
> virbr0  8000.52540025455f   yes virbr0-nic
> 
> # ip a
> 1: lo:  mtu 16436 qdisc noqueue state UNKNOWN
>link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>inet 127.0.0.1/8 scope host lo
>inet6 ::1/128 scope host
>   valid_lft forever preferred_lft forever
> 2: eth0:  mtu 1500 qdisc pfifo_fast
> state UNKNOWN qlen 1000
>link/ether 00:30:48:c5:30:32 brd ff:ff:ff:ff:ff:ff
>inet6 fe80::230:48ff:fec5:3032/64 scope link
>   valid_lft forever preferred_lft forever
> 3: eth1:  mtu 1500 qdisc noop state DOWN qlen 1000
>link/ether 00:30:48:c5:30:33 brd ff:ff:ff:ff:ff:ff
> 4: br100:  mtu 1500 qdisc noqueue state
> UNKNOWN
>link/ether 00:30:48:c5:30:32 brd ff:ff:ff:ff:ff:ff
>inet X.X.X.X/25 brd X.X.X.X scope global br100
>inet6 fe80::230:48ff:fec5:3032/64 scope link
>   valid_lft forever preferred_lft forever
> 5: virbr0:  mtu 1500 qdisc noqueue
> state UNKNOWN
>link/ether 52:54:00:25:45:5f brd ff:ff:ff:ff:ff:ff
>inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
> 6: virbr0-nic:  mtu 1500 qdisc noop state DOWN qlen 500
>link/ether 52:54:00:25:45:5f brd ff:ff:ff:ff:ff:ff
> 10: vnet0:  mtu 1500 qdisc pfifo_fast
> state UNKNOWN qlen 500
>link/ether fe:16:3e:48:30:5c brd ff:ff:ff:ff:ff:ff
>inet6 fe80::fc16:3eff:fe48:305c/64 scope link
>   valid_lft forever preferred_lft forever
> 38: vnet1:  mtu 1500 qdisc pfifo_fast
> state UNKNOWN qlen 500
>link/ether fe:16:3e:16:b3:55 brd ff:ff:ff:ff:ff:ff
>inet6 fe80::fc16:3eff:fe16:b355/64 scope link
>   valid_lft forever preferred_lft forever
> 
> # lsmod | grep _net
> vhost_net  30520  2
> macvtap 9980  1 vhost_net
> tun17095  6 vhost_net
> 
> ("modprobe vhost_net" if you don't have it.)
> 
> # route -n
> Kernel IP routing table
> Destination   Gateway  Genmask Flags Metric Ref  Use Iface
> X.X.X.X   0.0.0.0  255.255.255.128 U 0  00   br100
> 192.168.122.0 0.0.0.0  255.255.255.0   U 0  00   virbr0
> 169.254.0.0   0.0.0.0  255.255.0.0 U 1004   00   br100
> 0.0.0.0   X.X.X.X  0.0.0.0 UG0  00   br100
> 
> You should have a route to your nova network in there (I use flat
> network so my nova net is X.X.X.X, same as my "real" subnet).
> 
> With all that in place try disabling iptables in the instance and
> pinging the host. On the host, run tcpdump on vnet0 and br100 to see if
> you get any traffic. I didn't initially, I think modprobe vhost_net was
> what fixed it. (I was poking at & restarting several things at once, so
> I'm not 100% sure exactly which of them did it.)
> 
> -- 
> Dimitri Maziuk
> Programmer/sysadmin
> BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52d6d70217101936618038!


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] CentOS Network Create problem

2014-01-15 Thread Remo Mattei
Hi just a quick not make sure you safe your iptables rules before you do 
iptables -F. 

Remo 

On Jan 15, 2014, at 10:58 AM, Bhattacharjee, Arindam (Arindam) 
 wrote:

> 1. Check brctl showmacs br100
> If you see the mac address of the vnic of VM by lggiing into VM - do ifconfig 
> to compare the mac address.
> 
> 2. Then check Firwall configs in both Host and VM. Check stopping FW service 
> and doing iptables -F.
> 
> 3. Do tcpdump -i -e vnet0  while sening ping to the GW from VM.
> 
> Those would give you some clue to what's going on.
> 
> -Arindam
> 
> 
> -Original Message-
> From: Dimitri Maziuk [mailto:dmaz...@bmrb.wisc.edu] 
> Sent: Wednesday, January 15, 2014 1:30 PM
> To: openstack@lists.openstack.org
> Subject: Re: [Openstack] CentOS Network Create problem
> 
> On 01/15/2014 08:23 AM, Georgios Dimitrakakis wrote:
>> Hi again...Long day with OpenStack today...
>> 
>> It seems that the problem with the br100 interface has been solved 
>> partially since I can launch an instance but I am not able to ssh nor 
>> ping the machine (although I have configured the security group rules).
> 
> Here's what I have on a working node with 2 instances running. Ignore virbr0, 
> it's created by libvirt, vnet0 & 1 are the openstack instances:
> 
> # brctl show
> bridge name bridge id   STP enabled interfaces
> br100   8000.003048c53032   no  eth0
>vnet0
>vnet1
> virbr0  8000.52540025455f   yes virbr0-nic
> 
> # ip a
> 1: lo:  mtu 16436 qdisc noqueue state UNKNOWN
>link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
>inet 127.0.0.1/8 scope host lo
>inet6 ::1/128 scope host
>   valid_lft forever preferred_lft forever
> 2: eth0:  mtu 1500 qdisc pfifo_fast state 
> UNKNOWN qlen 1000
>link/ether 00:30:48:c5:30:32 brd ff:ff:ff:ff:ff:ff
>inet6 fe80::230:48ff:fec5:3032/64 scope link
>   valid_lft forever preferred_lft forever
> 3: eth1:  mtu 1500 qdisc noop state DOWN qlen 1000
>link/ether 00:30:48:c5:30:33 brd ff:ff:ff:ff:ff:ff
> 4: br100:  mtu 1500 qdisc noqueue state 
> UNKNOWN
>link/ether 00:30:48:c5:30:32 brd ff:ff:ff:ff:ff:ff
>inet X.X.X.X/25 brd X.X.X.X scope global br100
>inet6 fe80::230:48ff:fec5:3032/64 scope link
>   valid_lft forever preferred_lft forever
> 5: virbr0:  mtu 1500 qdisc noqueue state 
> UNKNOWN
>link/ether 52:54:00:25:45:5f brd ff:ff:ff:ff:ff:ff
>inet 192.168.122.1/24 brd 192.168.122.255 scope global virbr0
> 6: virbr0-nic:  mtu 1500 qdisc noop state DOWN qlen 500
>link/ether 52:54:00:25:45:5f brd ff:ff:ff:ff:ff:ff
> 10: vnet0:  mtu 1500 qdisc pfifo_fast state 
> UNKNOWN qlen 500
>link/ether fe:16:3e:48:30:5c brd ff:ff:ff:ff:ff:ff
>inet6 fe80::fc16:3eff:fe48:305c/64 scope link
>   valid_lft forever preferred_lft forever
> 38: vnet1:  mtu 1500 qdisc pfifo_fast state 
> UNKNOWN qlen 500
>link/ether fe:16:3e:16:b3:55 brd ff:ff:ff:ff:ff:ff
>inet6 fe80::fc16:3eff:fe16:b355/64 scope link
>   valid_lft forever preferred_lft forever
> 
> # lsmod | grep _net
> vhost_net  30520  2
> macvtap 9980  1 vhost_net
> tun17095  6 vhost_net
> 
> ("modprobe vhost_net" if you don't have it.)
> 
> # route -n
> Kernel IP routing table
> Destination   Gateway  Genmask Flags Metric Ref  Use Iface
> X.X.X.X   0.0.0.0  255.255.255.128 U 0  00   br100
> 192.168.122.0 0.0.0.0  255.255.255.0   U 0  00   virbr0
> 169.254.0.0   0.0.0.0  255.255.0.0 U 1004   00   br100
> 0.0.0.0   X.X.X.X  0.0.0.0 UG0  00   br100
> 
> You should have a route to your nova network in there (I use flat network so 
> my nova net is X.X.X.X, same as my "real" subnet).
> 
> With all that in place try disabling iptables in the instance and pinging the 
> host. On the host, run tcpdump on vnet0 and br100 to see if you get any 
> traffic. I didn't initially, I think modprobe vhost_net was what fixed it. (I 
> was poking at & restarting several things at once, so I'm not 100% sure 
> exactly which of them did it.)
> 
> --
> Dimitri Maziuk
> Programmer/sysadmin
> BioMagResBank, UW-Madison -- http://www.bmrb.wisc.edu
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,52d6dcc731501266467328!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Private images are not displayed in Horizon

2014-01-16 Thread Remo Mattei
Just a quick note here. By default images are only visible to the account / 
tenant that creates them. In addition there will be tree tab in Horizon you 
need to check them, one is public, the other is projects so make sure to see 
the image/s there. If you share it just links the same image to the public tab. 

Ciao
-- 
Remo Mattei

Da: Andriy Yurchuk Andriy Yurchuk
Rispondi: Andriy Yurchuk ayurc...@minuteware.net
Data: January 16, 2014 at 7:53:18
A: Narayanan, Krishnaprasad naray...@uni-mainz.de
Oggetto:  Re: [Openstack] Private images are not displayed in Horizon  
Hi,  

I'm facing the same problem. If you don't check the "Public" checkbox when 
creating an image then no one can see it in Horizon (neither the user who 
created it nor admin). The only way to fix this is to go and change the 
is_public field in database.  

---  
Regards,  
Andriy Yurchuk  


On Jan 16, 2014, at 3:59 PM, "Narayanan, Krishnaprasad"  
wrote:  

> Hi,  
>  
> The problem that I am facing is as the user who uploaded the image, I am 
> unable to see it in the users account.  
>  
> Thanks,  
> Krishnaprasad  
>  
> -Original Message-  
> From: Li Ma [mailto:skywalker.n...@gmail.com]  
> Sent: Donnerstag, 16. Januar 2014 14:22  
> To: Narayanan, Krishnaprasad  
> Cc: openstack@lists.openstack.org  
> Subject: Re: [Openstack] Private images are not displayed in Horizon  
>  
> You cannot see it unless you log in as the account who performed "uploading 
> that image" action.  
>  
> Li Ma (Nick)  
> Email: skywalker.n...@gmail.com  
>  
>  
> 2014/1/16 Narayanan, Krishnaprasad :  
>> Hallo all,  
>>  
>>  
>>  
>> I uploaded an image in our Havana cloud using the option  
>> is-public=False and I am unable to see it in the Horizon GUI.  
>>  
>>  
>>  
>> Can somebody help me to get rid of this issue?  
>>  
>>  
>>  
>> Thanks,  
>>  
>> Krishnaprasad  
>>  
>>  
>> ___  
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
>> Post to : openstack@lists.openstack.org  
>> Unsubscribe :  
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
>>  
> ___  
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
> Post to : openstack@lists.openstack.org  
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:1,52d8006e313897479221172!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2014-01-16 Thread Remo Mattei
Just a quick note, is this user / tenant an admin?

Ciao
-- 
Remo Mattei

Da: gustavo panizzo gustavo panizzo  
Rispondi: gustavo panizzo g...@zumbi.com.ar
Data: January 16, 2014 at 9:19:47
A: Martinx - ジェームズ thiagocmarti...@gmail.com
Oggetto:  Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles 
of Tenant B!  
it's happening to us too

did you fill a bug? can you share the bug number?

thanks

On 12/23/2013 07:18 PM, Martinx - ジェームズ wrote:
Okay guys, no problem, I can fill a BUG as I did lots of times before using 
Launchpad but, I am unable to reproduce this problem in a fresh installation, 
so, how to proceed now?!

I can give full access to my cloud for the experts but, I don't know if this is 
desired or not.

Tks!
Thiago


On 23 December 2013 19:54, Jay Pipes  wrote:
On 12/23/2013 04:32 PM, Jeffrey Walton wrote:
 > This security breach is happening right now here and I
 > don't know what can I do to fix it, or what should I type
 > on a BUG at Launchpad...
Ubuntu has made it all but impossible to file bug reports. Their
circular redirects are worse than a telephone menu system that takes you
down a bunch of dead-end paths. Unless you have the URL jotted down in a
notebook

It's only impossible if you don't read any directions.

https://bugs.launchpad.net/nova/+filebug

-jay


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack



___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


--  
1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333
!DSPAM:1,52d814b3107501772068915! 
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:1,52d814b3107501772068915!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] About Openstack Installation

2014-01-18 Thread Remo Mattei
Hi 
I could share my stack.sh if you want to install neutron and lbaas for example 
let me know 
Remo 

Inviato da iPhone ()

> Il giorno Jan 18, 2014, alle ore 4:51, jeffty  ha 
> scritto:
> 
> Hi Mayur,
> 
> The network service is Nova network by default. Other service can be
> found in http://devstack.org/overview.html as below:
> 
> Services
> The default services configured by DevStack are Identity (Keystone),
> Object Storage (Swift), Image Storage (Glance), Block Storage (Cinder),
> Compute (Nova), Network (Nova), Dashboard (Horizon)
> 
> Additional services not included directly in DevStack can be tied in to
> stack.sh using the plugin mechanism to call scripts that perform the
> configuration and startup of the service.
> 
> 
>> On 1/18/2014 7:33 PM, Mayur Patil wrote:
>> Thanks Jeffy for reply. I have only query left 
>> 
>> Would Devstack install all 9 components of Openstack?
>> 
>> It will clear my path to installation.
>> 
>> Seeking for guidance,
>> 
>> Thanks !!
>> *--*
>> *Cheers,*
>> *Mayur*
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,52da7b4d183348773412602!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] About Openstack Installation

2014-01-18 Thread Remo Mattei
I will send it later today. I am away from my main computer. 

Ciao
Remo

On Jan 18, 2014, at 8:03 AM, jeffty  wrote:

> Hi Remo,
> 
> That will be very helpful!
> 
> Thanks.
> 
> On 1/18/2014 11:55 PM, Remo Mattei wrote:
>> Hi 
>> I could share my stack.sh if you want to install neutron and lbaas for 
>> example let me know 
>> Remo 
>> 
>> Inviato da iPhone ()
>> 
>>> Il giorno Jan 18, 2014, alle ore 4:51, jeffty  ha 
>>> scritto:
>>> 
>>> Hi Mayur,
>>> 
>>> The network service is Nova network by default. Other service can be
>>> found in http://devstack.org/overview.html as below:
>>> 
>>> Services
>>> The default services configured by DevStack are Identity (Keystone),
>>> Object Storage (Swift), Image Storage (Glance), Block Storage (Cinder),
>>> Compute (Nova), Network (Nova), Dashboard (Horizon)
>>> 
>>> Additional services not included directly in DevStack can be tied in to
>>> stack.sh using the plugin mechanism to call scripts that perform the
>>> configuration and startup of the service.
>>> 
>>> 
>>>> On 1/18/2014 7:33 PM, Mayur Patil wrote:
>>>> Thanks Jeffy for reply. I have only query left 
>>>> 
>>>> Would Devstack install all 9 components of Openstack?
>>>> 
>>>> It will clear my path to installation.
>>>> 
>>>> Seeking for guidance,
>>>> 
>>>> Thanks !!
>>>> *--*
>>>> *Cheers,*
>>>> *Mayur*
>>> 
>>> 
>>> ___
>>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> 
>>> 
>>> 
> 
> 
> !DSPAM:1,52daa769263195374217462!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] About Openstack Installation

2014-01-18 Thread Remo Mattei
Just a quick note do you want to install ubunto or centos/rhel? 

Maybe this was already asked and sorry if I did not ready all the emails. 

Ciao 

Inviato da iPhone ()

> Il giorno Jan 18, 2014, alle ore 16:47, jeffty  ha 
> scritto:
> 
> Hi Clint,
> 
> Thanks for your explanation:)
> 
>> On 1/19/2014 4:28 AM, Clint Byrum wrote:
>> Excerpts from jeffty's message of 2014-01-18 03:25:07 -0800:
>>> Hi Mayur,
>>> 
>>> 4G is ok. Maybe you can try devstack, which will automatically install
>>> openstack in on node for you. Although it use nova network with
>>> FlatDHCPManager by default.
>> 
>> Mayur did not state the final purpose of the cloud to build, but it is
>> important to note, devstack is _not_ for production usage.
>> 
>>> Here is the link:
>>> 
>>> http://www.devstack.org
>>> 
>>> You only need to:
>>> 
>>> 1. Install a minimal Ubuntu (e.g. 12.04 LTS with only SSH service).
>>> 2. Configure network to gain IP.
>>> 3. Install git. e.g. apt-get -y install git
>>> 4. Clone devstack. e.g. git clone
>>> git://github.com/cloudbuilders/devstack.git
>> 
>> The official home for devstack is
>> http://git.openstack.org/cgit/openstack-dev/devstack/
>> 
>>> 5. Modify devstack's configuration file to define ip, password etc.
>>> 6. Run devstack's installation script to install.
>>> 
>>> Above can also be found in devstack's website.
>>> 
 On 1/18/2014 6:15 PM, Mayur Patil wrote:
 Hi All, 
 
 I am newbie to Openstack. Prior to this I am having experience of
 using Eucalyptus.
 
 So, my query is  
 
 Recommended hardware is 16GB & 32GB RAM with two machines having at
 least dual
 
 core processor.
 
 But I am having Pentium Processor(VT enabled) & with 3 or 4 GB RAM  
 
 (RAM can increase upto 8GB that I can afford) on each machine. 
 
 Then would these machines are feasible for Openstack installation?
 
 Seeking for guidance,
 
 Thanks !!
 -- 
 *Cheers,
 Mayur*.
 
 
 
 
 
 ___
 Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
 Post to : openstack@lists.openstack.org
 Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,52db236c135721138415338!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] localrc for devstack

2014-01-20 Thread Remo Mattei
Hello someone a few days ago was trying to install devstack with neutron and 
other options like LBaaS, here is my localrc file on havana. 

Ciao


 
DATABASE_PASSWORD=stack
RABBIT_PASSWORD=stack
SERVICE_TOKEN=stack
SERVICE_PASSWORD=stack
ADMIN_PASSWORD=stack

disable_service n-net
enable_service q-svc
enable_service q-agt
enable_service q-dhcp
enable_service q-lbaas
enable_service q-l3
enable_service q-meta
enable_service neutron
# Optional, to enable tempest configuration as part of devstack
enable_service tempest
enable_service s-proxy s-object s-container s-account
enable_service heat h-api h-api-cfn h-api-cw h-eng
#enable_service n-cell
SCREEN_LOGDIR=$DEST/logs/screen

SWIFT_HASH=stack
SWIFT_REPLICAS=3


-- 
Remo Mattei

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] localrc for devstack

2014-01-20 Thread Remo Mattei
There are no problems they were trying to install devstack and could not make 
it so I offered mine to them which works

Ciao 
Remo 

Inviato da iPhone ()

> Il giorno Jan 20, 2014, alle ore 12:02, Sayali Lunkad 
>  ha scritto:
> 
> Hey,
> 
> The localrc seems fine. What is the problem exactly?
> 
>> On Jan 21, 2014 1:28 AM, "Remo Mattei"  wrote:
>> Hello someone a few days ago was trying to install devstack with neutron and 
>> other options like LBaaS, here is my localrc file on havana. 
>> 
>> Ciao
>> 
>> 
>>  
>> DATABASE_PASSWORD=stack
>> RABBIT_PASSWORD=stack
>> SERVICE_TOKEN=stack
>> SERVICE_PASSWORD=stack
>> ADMIN_PASSWORD=stack
>> 
>> disable_service n-net
>> enable_service q-svc
>> enable_service q-agt
>> enable_service q-dhcp
>> enable_service q-lbaas
>> enable_service q-l3
>> enable_service q-meta
>> enable_service neutron
>> # Optional, to enable tempest configuration as part of devstack
>> enable_service tempest
>> enable_service s-proxy s-object s-container s-account
>> enable_service heat h-api h-api-cfn h-api-cw h-eng
>> #enable_service n-cell
>> SCREEN_LOGDIR=$DEST/logs/screen
>> 
>> SWIFT_HASH=stack
>> SWIFT_REPLICAS=3
>> 
>> 
>> -- 
>> Remo Mattei
>> 
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> !DSPAM:1,52dd824457952066915449!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Keystone External Authentication clarification

2014-01-21 Thread Remo Mattei
Keystone has the opportunity to work as an SSO there was a project on that and 
does have a plugin for LDAP not sure if this is something you are looking for. 
Also not sure if the SSO is on hold or still under dev. 

Remo

Inviato da iPhone ()

> Il giorno Jan 21, 2014, alle ore 5:58, Joe Topjian  ha 
> scritto:
> 
> Hello,
> 
> One of the new features advertised in the Havana release of Keystone was 
> external authentication via REMOTE_USER. I'm beginning to assume that I 
> should take that at face value: Keystone has external auth, but that's it. 
> OpenStack as a whole cannot currently utilize it.
> 
> Is this an incorrect assumption?
> 
> For example, I set up Keystone behind Apache just like the developer docs 
> say. Everything worked.
> 
> Now I wanted to test external authentication. Just for practice, I tried http 
> basic auth. I was successful in obtaining a token:
> 
> curl --user joe:foobar -d '{"auth":{}}' -H "Content-type: application/json" 
> http://localhost:5000/v2.0/tokens
> 
> But I don't think it's possible to use the command line tools (nova, glance 
> et al) to work with a single token. I also don't see how Horizon can utilize 
> an http-auth protected Keystone without modification.
> 
> Am I wrong? If so, can someone point me to, at least, a proof of concept if 
> not a production example?
> 
> Is it correct to say that if I want Keystone to authenticate users against an 
> unsupported/custom database while still retaining compatibility with all 
> other OpenStack components, then I should write a custom backend such as 
> described here:
> 
> https://thestaticvoid.com/post/2013/06/04/customizing-the-openstack-keystone-authentication-backend/
> 
> 
> Thanks,
> Joe
> !DSPAM:1,52de8124286791426485421!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52de8124286791426485421!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] multiple network nodes

2014-01-21 Thread Remo Mattei
Yes now with ml2 you can have multiple plugins which was not possible before. 

Remo 

Inviato da iPhone ()

> Il giorno Jan 21, 2014, alle ore 6:15, Mike Spreitzer  
> ha scritto:
> 
> > From: Jeff Cai  
> > To: "openstack@lists.openstack.org" , 
> > Date: 01/21/2014 02:42 AM 
> > Subject: [Openstack] multiple network nodes 
> > 
> > Hi, 
> >   
> > Does openstack support multiple network nodes deployment? Which 
> > services should be running on each of the network nodes? 
> 
> Yes, OpenStack definitely supports a multi-node deployment.  OpenStack has a 
> lot of flexibility in what you deploy and how.  Which services you run on 
> which node depends on what services you deploy in your system and what you 
> want to do about high availability for the logical singletons.  You can start 
> to get some clues in 
> http://docs.openstack.org/havana/install-guide/install/apt/content/ch_overview.html
>  --- but that does not attempt to be comprehensive.  For example, it does not 
> show deployment of Cinder in the later pictures; Cinder is discussed in 
> http://docs.openstack.org/havana/install-guide/install/apt/content/ch_cinder.html
>  
> 
> Regards, 
> Mike !DSPAM:1,52de857f299471995810054!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52de857f299471995810054!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] How to get the MAC Address in Openstack

2014-01-21 Thread Remo Mattei
One more thing to add if you are planning to use your own MAC address prefix 
you can modify the neutron.conf and look for that. Now by default it is using 
the OpenStack bits. 

Ciao 
-- 
Remo Mattei

Da: Jonathan Proulx j...@jonproulx.com
Rispondi: Jonathan Proulx j...@jonproulx.com
Data: January 21, 2014 at 9:00:08
A: Gary Kotton gkot...@vmware.com
Oggetto:  Re: [Openstack] How to get the MAC Address in Openstack  
Hi Varun,  

As Garry said you can pre create ports with specific mac addresses and  
then assign them to instances if you are using neutron for networking.  
The Horizon dash board does not provide an interface to either of  
these actions but the command line tools do.  

the 'port-create' sub command of 'neutron' takes options for  
--mac-address and --fixed-ip among many others run `neutron help  
port-create` for more details  

once you have created the ports you can pass the port IDs in to 'nova  
boot --nic port-id- '  

I use this to provide a fixed MAC address for my node locked flexlm  
server that identifies it's authorized node by mac address. Note you  
can specify whatever you want here but it is up to you to avoid  
conflicts on the same network segment if you start statically  
assigning MAC addrs. Neutron won't create conflicts but I don't know  
if it will prevent you from doing so.  

-Jon  


On Tue, Jan 21, 2014 at 4:29 AM, Gary Kotton  wrote:  
> Hi,  
> If you are using neutron then you can create pass the MAC address as part of  
> the create port call. Please see  
> https://wiki.openstack.org/wiki/Neutron/APIv2-specification#Port  
> Thanks  
> Gary  
>  
> From: varun bhatnagar   
> Date: Tuesday, January 21, 2014 8:35 AM  
> To: "openstack@lists.openstack.org"   
> Subject: [Openstack] How to get the MAC Address in Openstack  
>  
> Hi,  
>  
> How can I get the MAC Address of the network interface which I have created  
> on Openstack?  
>  
> Also, is there any way where in I can define the MAC Address while creating  
> any network?  
>  
> I tried digging in the code and I found out that the MAC Address assigned by  
> Openstack starts with "fa:16:3e:". I want to assign fa:16:3e:00:00:01 first  
> network interface, fa:16:3e:00:00:02 to second and fa:16:3e:00:00:03 to  
> third network interface of my VM.  
> Is this possible?  
>  
> Regards,  
> Varun  
>  
> ___  
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
> Post to : openstack@lists.openstack.org  
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
>  

___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:1,52dea798112471080013133!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] multiple network nodes

2014-01-21 Thread Remo Mattei
I have not seen it personally but that does not mean it’s not there :) 


Ciao 
-- 
Remo Mattei

Da: Jeff Cai jeff_...@symantec.com
Rispondi: Jeff Cai jeff_...@symantec.com
Data: January 21, 2014 at 19:52:36
A: Remo Mattei r...@italy1.com, Mike Spreitzer mspre...@us.ibm.com
Oggetto:  RE: [Openstack] multiple network nodes  
Mike and Remo,

 

Thanks for your reply.

I am wondering how to balance the network load in openstack deployment. Which 
services can I distribute among several network nodes? Is there a document to 
describe something like this?

 

Jeff

 

From: Remo Mattei [mailto:r...@italy1.com]
Sent: Tuesday, January 21, 2014 11:34 PM
To: Mike Spreitzer
Cc: Jeff Cai; openstack@lists.openstack.org
Subject: Re: [Openstack] multiple network nodes

 

Yes now with ml2 you can have multiple plugins which was not possible before. 

 

Remo 

Inviato da iPhone ()


Il giorno Jan 21, 2014, alle ore 6:15, Mike Spreitzer  ha 
scritto:

> From: Jeff Cai 
> To: "openstack@lists.openstack.org" ,
> Date: 01/21/2014 02:42 AM
> Subject: [Openstack] multiple network nodes
>  
> Hi,
>  
> Does openstack support multiple network nodes deployment? Which  
> services should be running on each of the network nodes?

Yes, OpenStack definitely supports a multi-node deployment.  OpenStack has a 
lot of flexibility in what you deploy and how.  Which services you run on which 
node depends on what services you deploy in your system and what you want to do 
about high availability for the logical singletons.  You can start to get some 
clues in 
http://docs.openstack.org/havana/install-guide/install/apt/content/ch_overview.html
 --- but that does not attempt to be comprehensive.  For example, it does not 
show deployment of Cinder in the later pictures; Cinder is discussed in 
http://docs.openstack.org/havana/install-guide/install/apt/content/ch_cinder.html

Regards,
Mike

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


!DSPAM:1,52de857f299471995810054!

!DSPAM:1,52df4084187161359531833!___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Keysone] TTL and token

2014-01-22 Thread Remo Mattei
Hi Thorfinn, 
you can change the TTL of your token but not on each login. 

Bye,  
-- 
Remo Mattei

Da: thorfinn thorf...@poivron.org
Rispondi: thorfinn thorf...@poivron.org
Data: January 22, 2014 at 7:18:41
A: openstack@lists.openstack.org Openstack openstack@lists.openstack.org
Oggetto:  [Openstack] [Keysone] TTL and token  
Hello,  

Is it possible to choose the time to leave when generating a token for  
each login?  


Thank you  
Thorfinn  

___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:1,52dfe15123388343832680!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [openstack][devstack] authorization failed unable to establish connection

2014-01-22 Thread Remo Mattei
Hi there, 
if you get that error unfortunately the fastest way is to run ./unstack.sh make 
sure it’s all clean  here is the link for extra option of unstack 
http://devstack.org/unstack.sh.html

Ciao 
 
-- 
Remo Mattei

Da: Mayur Patil ram.nath241...@gmail.com
Rispondi: Mayur Patil ram.nath241...@gmail.com
Data: January 22, 2014 at 8:28:31
A: Swapnil Kulkarni swapnilkulkarni2...@gmail.com, florenlla...@gmail.com 
florenlla...@gmail.com
Oggetto:  Re: [Openstack] [openstack][devstack] authorization failed unable to 
establish connection  
Hi All,

     I have used ./rejoin-stack.sh as suggested by floren & alfredo. But 
debugging has stucked at the

     cinder.volume.manager: unable to instantiate the volume. 

     I found then one blog:  
http://fosshelp.blogspot.in/2013/11/openstack-devstack-httpconnectionpool.html

      During unstack & stack,  machine gets hanged. So I shutdown it.

      After that, I have rebooted and start stack.sh again. And this time I am 
getting

      keystone service die

      stack.sh:311 keystone did not start

      Where should I look for troubleshooting the problem?

      Seeking for guidance,

      Thanks !!
--
Cheers,
Mayur
!DSPAM:1,52dff1af84061497811003! 
___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  


!DSPAM:1,52dff1af84061497811003!  
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Neutron] Some namespaces no longer working...

2014-01-22 Thread Remo Mattei
I would guess it is the kernel try to boot with the older version and see if it 
works

Inviato da iPhone ()

> Il giorno Jan 22, 2014, alle ore 9:16, Jonathan Proulx  
> ha scritto:
> 
> Hi All,
> 
> noticed some (most but not all) of my network namespaces are no longer 
> working:
> 
> # ip netns exec qdhcp-0a1d0a27-cffa-4de3-92c5-9d3fd3f2e74d ip addr
> seting the network namespace failed: Invalid argument
> 
> strace gives only slightly more info that I can't parse and probably
> adds no new information:
> 
> open("/var/run/netns/qdhcp-0a1d0a27-cffa-4de3-92c5-9d3fd3f2e74d", O_RDONLY) = 
> 4
> syscall_308(0x4, 0x4000, 0x7fff9edc3799, 0x7fff9edc34e0, 0x430af0,
> 0x392d336564342d61, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0,
> 0, 0, 0, 0, 0, 0, 0, 0, 0) = -1 (errno 22)
> write(2, "seting the network namespace fai"..., 54seting the network
> namespace failed: Invalid argument
> ) = 54
> 
> short of rebooting the controller how can I recover these?  Any
> guesses why they failed, this namespace particularly is our main
> client network and I was tcpdumping within it to debug issues earlier
> this week (it's existed since August and through our grizzly to havana
> update earlier this month)
> 
> -Jon
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,52dfff55131631468167803!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Neutron] Some namespaces no longer working...

2014-01-22 Thread Remo Mattei
I thought you had rebooted after the updated. Please next time I would suggest 
to give as much info as possible. Just my 2 cents. 

Inviato da iPhone ()

> Il giorno Jan 22, 2014, alle ore 11:52, Jonathan Proulx  
> ha scritto:
> 
>> On Wed, Jan 22, 2014 at 2:32 PM, Remo Mattei  wrote:
>> I would guess it is the kernel try to boot with the older version and see if 
>> it works
> 
> Older version of what? System has 160 day uptime and the problem is
> hours old.  I'm probably going to need to reboot, I don't like to do
> on my production controller node, but right now dchp on my main tenant
> network is down so if I don't come up with something better real soon
> that's where I'm going...
> 
> If I remove the name spaces will restarting the agents that uses them
> recreate them?
> 
> -Jon
> 
> !DSPAM:1,52e022f5243184424518871!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Neutron] Some namespaces no longer working...

2014-01-22 Thread Remo Mattei
As I said this is based on kernel issue. Let us know after the reboot how 
things go. 

Bye

Inviato da iPhone ()

> Il giorno Jan 22, 2014, alle ore 15:43, Jonathan Proulx  
> ha scritto:
> 
> On Wed, Jan 22, 2014 at 05:23:07PM -0600, David Wittman wrote:
> :Jon,
> :
> :What distro/kernel are you on? I've seen this issue pop up after a Grizzly
> :-> Havana upgrade in the past few weeks. I know this isn't the answer you
> :were looking for, but it was resolved for me with a kernel upgrade and
> :subsequent reboot.
> 
> That's what I ended up doing. The kernel upgrade being incidental to
> the reboot.
> 
> Using Ubuntu 12.04 with cloud archive packages.
> 
> kernel was 3.2.0-51 now 3.2.0-58 so not a big change but a change.
> I'd expect the reboot was more instrumental than the kernel change but
> who's to say.
> 
> Thanks
> -Jon
> 
> :
> :Dave
> :
> :
> :On Wed, Jan 22, 2014 at 2:09 PM, Jonathan Proulx  wrote:
> :
> :> On Wed, Jan 22, 2014 at 3:07 PM, gustavo panizzo  
> :> wrote:
> :> > On 01/22/2014 04:52 PM, Jonathan Proulx wrote:
> :> >> If I remove the name spaces will restarting the agents that uses them
> :> >> recreate them?
> :> > yes, it should. l3-agent creates the namespace(s)
> :> > if you cant go into it i doubt you can delete it, try it.  it won't hurt
> :> > anyway
> :>
> :> Well unfortunately your right about that... I'd found one of my test
> :> networks that was in the 'broken' state and sure enough can't delete
> :> it because it's in use.  Guess I'm going to need the big hammer...
> :>
> :> -Jon
> :>
> :> ___
> :> Mailing list:
> :> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> :> Post to : openstack@lists.openstack.org
> :> Unsubscribe :
> :> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> :>
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,52e05b7d61704441661766!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Freenode.net down?

2014-01-23 Thread Remo Mattei
it works for me as well. 
-- 
Remo Mattei

Da: Michael Still mi...@stillhq.com
Rispondi: Michael Still mi...@stillhq.com
Data: January 23, 2014 at 14:11:17
A: Brad Knowles bknow...@momentumsi.com
Oggetto:  Re: [Openstack] Freenode.net down?  
I am actively chatting in freenode now. I think it might be time to  
disconnect and reconnect?  

Michael  

On Fri, Jan 24, 2014 at 8:21 AM, Brad Knowles  wrote:  
> On Jan 23, 2014, at 2:37 PM, Mike Spreitzer   
> wrote:  
>  
>> I haven't gotten any chat content from Freenode.net since about 15:20 EST 
>> today. Is it only me?  
>  
> The last thing I saw in any freenode irc channels was at 3:12:07 PM CST.  
>  
> --  
> Brad Knowles   
> Senior Consultant  
>  
>  
> ___  
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
> Post to : openstack@lists.openstack.org  
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  



--  
Rackspace Australia  

___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:1,52e19385106761713551776!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [glance] problem with glance registry

2014-01-27 Thread Remo Mattei
What os are you running? Maybe they cannot reach each other i would check that 

Inviato da IPad ()

> Il giorno Jan 27, 2014, alle ore 13:28, "gustavo panizzo " 
>  ha scritto:
> 
> Hello
>since today our glance install is not working, we are not able to boot
> new machines
> 
> 
> the only thing i see in logs is
> 
> 2014-01-27 16:10:43.364 9237 INFO glance.registry.client.v1.client
> [29e031a9-cb1c-4b20-8a7f-100ed10f3785 184136c2674746b5a4b27d3b13ca91f8
> af41371701004068b2532695ed57f16f] Registry client request GET
> /images/detail raised ServerError
> 
> on glance-registry log there is nothing like an error
> 
> 2014-01-27 16:10:43.333 8771 INFO glance.registry.api.v1.images
> [7c168813-dc04-4b65-ad00-0cc171afb10a 184136c2674746b5a4b27d3b13ca91f8
> af41371701004068b2532695ed57f16f] Returning detailed image list
> 
> 
> glance index fails. but it always failed for us with more than 10
> images, is it expected?
> 
> # glance --debug index
> 
> [ snip snip ]
> 
> size": 3280732160}, {"status": "active", "name": "Win7x86", "deleted":
> false, "container_format": "ovf", "created_at":
> "2014-01-13T21:32:39.412830", "disk_format": "qcow2", "updated_at":
> "2014-01-14T14:38:09.932192", "min_disk": 40, "protected": true, "id":
> "d0d3b1f4-3e9e-430e-a60a-42de277291da", "min_ram": 2048, "checksum":
> "f44b61df38f3d1de775a989eccc1798f", "owner":
> "af41371701004068b2532695ed57f16f", "is_public": true, "deleted_at":
> null, "properties": {"protected": null}, "size": 3374317568}]}
> 
> f31c2938-89b4-4fed-b78c-0d5a633313de debian-wheezy-amd64_2014-01-17
> qcow2ovf   996999168
> 16ec85ff-6451-4d36-8908-c5c3b57c862b wheezy-cristian-snap   ami
> ami  1067450368
> 7fbd62fd-72e6-4f18-ba26-3df9f8295f60 couchdb-snapshot   ami
> ami  1150812160
> 6051f420-c590-43f3-a3b1-2802a74d6dc4 vmlinuz-3.2.0-4-amd64  aki
> aki 2827712
> 680680ef-0207-44fe-ad9f-6e01a4e0147a initrd-3.2.0-4-amd64   ari
> ari10486978
> 11339ff2-9240-4c44-ad8b-091192e0301b wheezy_postgresql
> qcow2bare 1071448064
> 44d691b8-57e3-44df-9d29-14a6c1f4a431 Win2012-sql
> qcow2ovf 13241942016
> 784e7546-d101-4cb0-92e0-26faf7f6dfaf Win2012
> qcow2ovf  4284743680
> 25e38d31-cf2b-4a13-b1bd-90936d90eab4 Win2008r2
> qcow2ovf  3280732160
> d0d3b1f4-3e9e-430e-a60a-42de277291da Win7x86
> qcow2ovf  3374317568
> curl -i -X GET -H 'X-Auth-Token: c88edf81cae841f4a5638f7267074160' -H
> 'Content-Type: application/json' -H 'User-Agent: python-glanceclient'
> http://10.17.10.34:9292/v1/images/detail?marker=d0d3b1f4-3e9e-430e-a60a-42de277291da&limit=10
> 
> HTTP/1.1 500 Internal Server Error
> date: Mon, 27 Jan 2014 19:14:28 GMT
> content-length: 0
> content-type: text/plain
> connection: close
> 
> Request returned failure status.
> HTTPInternalServerError (HTTP 500)
> 
> 
> we use rbd as backend storage and pgsql as db
> our install runs havana 2013.2.1-2
> keystone uses memcached backend and uuid, we have tried restarting
> glance-api and registry, keystone and memcached, but nothing.
> db looks exactly the same as friday
> 
> no changes were made during the weekend. friday we were running smoothly
> 
> 
> PS: i can send logs, config files, whatever, but they are pretty default
> 
> thanks!
> 
> 
> -- 
> 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,52e6b60e31611208556276!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Barbican] Keystone PKI token too much long

2014-01-31 Thread Remo Mattei
Hi Rafael
Do you have the info on how that has been implemented. 

Thanks
Remo

Inviato da iPhone ()

> Il giorno Jan 31, 2014, alle ore 8:27, "Ferreira, Rafael"  ha 
> scritto:
> 
> By the way, you can achieve the same benefits of uuid tokens (shorter tokens) 
> with PKI by simply using a md5 hash of the PKI token for your X-Auth headers. 
> This is poorly documented but it seems to work just fine. 
> 
> From: Adam Young 
> Date: Tuesday, January 28, 2014 at 1:41 PM
> To: "openstack@lists.openstack.org" 
> Subject: Re: [Openstack] [Barbican] Keystone PKI token too much long
> 
>> On 01/22/2014 12:21 PM, John Wood wrote:
>> (Adding another member of our team Douglas)
>> 
>> Hello Giuseppe,
>> 
>> For questions about news or patches for Keystone's PKI vs UUID modes, you 
>> might reach out to the openstack-...@lists.openstack.org mailing list, with 
>> the subject line prefixed with [openstack-dev] [keystone] 
>> 
>> Our observation has been that the PKI mode can generate large text blocks 
>> for tokens (esp. for large service catalogs) that cause http header errors. 
>> 
>> Regarding the specific barbican scripts you are running, we haven't run 
>> those in a while, so I'll investigate as we might need to update them. 
>> Please email back your /etc/barbican/barbican-api-paste.ini paste config 
>> file when you have a chance as well.  
>> 
>> Thanks,
>> John
>> 
>> 
>> From: Giuseppe Galeota [giuseppegale...@gmail.com]
>> Sent: Wednesday, January 22, 2014 7:36 AM
>> To: openstack@lists.openstack.org
>> Cc: John Wood
>> Subject: [Openstack] [Barbican] Keystone PKI token too much long
>> 
>> Dear all,
>> I have configured Keystone for Barbican using this guide.
>> 
>> Is there any news or patch about the need to use a shorter token? I would 
>> not use a modified token.
> Its a known problem.  You can request a token without the service catalog 
> using an extension.
> 
> One possible future enhancement is to compress the key.
> 
> 
>> 
>> Following you can find an extract of the linked guide:
>> (Optional) Typical keystone setup creates PKI tokens that are long, do not 
>> fit easily into curl requests  without splitting into components. For 
>> testing purposes suggest updating the keystone database with a shorter 
>> token-id. (An alternative is to set up keystone to generate uuid tokens.) 
>> From the above output grad the token expiry value, referred to as "x-y-z"
>> mysql -u rootuse keystone;update token set id="foo" where expires="x-y-z" ;
>> 
>> Thank you,
>> Giuseppe
>> 
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> The communication contained in this e-mail is confidential and is intended 
> only for the named recipient(s) and may contain information that is 
> privileged, proprietary, attorney work product or exempt from disclosure 
> under applicable law. If you have received this message in error, or are not 
> the named recipient(s), please note that any form of distribution, copying or 
> use of this communication or the information in it is strictly prohibited and 
> may be unlawful. Please immediately notify the sender of the error, and 
> delete this communication including any attached files from your system. 
> Thank you for your cooperation. !DSPAM:1,52eba57b226891577754402!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52eba57b226891577754402!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Barbican] Keystone PKI token too much long

2014-01-31 Thread Remo Mattei
Thanks Mark,
I am aware of the bug, the info that Rafael was saying is that he has it 
working and I wonder how. Hopefully he can spark his infrastructure 
configuration and all of us can take a peak to that. 

Ciao

On Jan 31, 2014, at 11:24, Miller, Mark M (EB SW Cloud - R&D - Corvallis) 
 wrote:

> Hello,
>  
> We ran into a problem when using Apache2 and WSGi as the web front end for 
> Keystone. Keystone v2.0 returns the token in the response body but v3 returns 
> the token in the response header. Apache has an internal limit of 8190 bytes 
> for the response header which means that you will get an error when you 
> request a token with includes an endpoint catalog that has more than about 12 
> endpoints in it. We had to turn the catalog off.
>  
> Mark
>  
> From: Remo Mattei [mailto:r...@italy1.com] 
> Sent: Friday, January 31, 2014 5:41 AM
> To: Ferreira, Rafael
> Cc: openstack@lists.openstack.org
> Subject: Re: [Openstack] [Barbican] Keystone PKI token too much long
>  
> Hi Rafael
> Do you have the info on how that has been implemented. 
>  
> Thanks
> Remo
> 
> Inviato da iPhone ()
> 
> Il giorno Jan 31, 2014, alle ore 8:27, "Ferreira, Rafael"  ha 
> scritto:
> 
> By the way, you can achieve the same benefits of uuid tokens (shorter tokens) 
> with PKI by simply using a md5 hash of the PKI token for your X-Auth headers. 
> This is poorly documented but it seems to work just fine. 
>  
> From: Adam Young 
> Date: Tuesday, January 28, 2014 at 1:41 PM
> To: "openstack@lists.openstack.org" 
> Subject: Re: [Openstack] [Barbican] Keystone PKI token too much long
>  
> On 01/22/2014 12:21 PM, John Wood wrote:
> (Adding another member of our team Douglas)
>  
> Hello Giuseppe,
>  
> For questions about news or patches for Keystone's PKI vs UUID modes, you 
> might reach out to theopenstack-...@lists.openstack.org mailing list, with 
> the subject line prefixed with [openstack-dev] [keystone] 
>  
> Our observation has been that the PKI mode can generate large text blocks for 
> tokens (esp. for large service catalogs) that cause http header errors. 
>  
> Regarding the specific barbican scripts you are running, we haven't run those 
> in a while, so I'll investigate as we might need to update them. Please email 
> back your /etc/barbican/barbican-api-paste.ini paste config file when you 
> have a chance as well.  
>  
> Thanks,
> John
>  
>  
> From: Giuseppe Galeota [giuseppegale...@gmail.com]
> Sent: Wednesday, January 22, 2014 7:36 AM
> To: openstack@lists.openstack.org
> Cc: John Wood
> Subject: [Openstack] [Barbican] Keystone PKI token too much long
> 
> Dear all,
> I have configured Keystone for Barbican using this guide.
>  
> Is there any news or patch about the need to use a shorter token? I would not 
> use a modified token.
> Its a known problem.  You can request a token without the service catalog 
> using an extension.
> 
> One possible future enhancement is to compress the key.
> 
> 
> 
>  
> Following you can find an extract of the linked guide:
> (Optional) Typical keystone setup creates PKI tokens that are long, do not 
> fit easily into curl requests without splitting into components. For testing 
> purposes suggest updating the keystone database with a shorter token-id. (An 
> alternative is to set up keystone to generate uuid tokens.) From the above 
> output grad the token expiry value, referred to as "x-y-z"
> mysql -u rootuse keystone;update token set id="foo" where expires="x-y-z" ;
>  
> Thank you,
> Giuseppe
> 
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>  
> The communication contained in this e-mail is confidential and is intended 
> only for the named recipient(s) and may contain information that is 
> privileged, proprietary, attorney work product or exempt from disclosure 
> under applicable law. If you have received this message in error, or are not 
> the named recipient(s), please note that any form of distribution, copying or 
> use of this communication or the information in it is strictly prohibited and 
> may be unlawful. Please immediately notify the sender of the error, and 
> delete this communication including any attached files from your system. 
> Thank you for your cooperation.
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52eba57b226891577754402!
> !DSPAM:1,52ebcfed22133708519044!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Fwd: nova unique name generator middleware

2014-02-01 Thread Remo Mattei
My understanding of the gen name is that it will be unique across your 
openstack 

Remo

Inviato da iPhone ()

Il giorno Feb 1, 2014, alle ore 17:32, Aryeh Friedman 
 ha scritto:

>> 
>> Aryeh, to your point, OpenStack effectively _is_, the provisioning system. 
>> Our current use case is providing engineers with a self service portal for 
>> spinning up VMs on which they can do development work. So, the workflow is 
>> user -> UI -> nova API. But when a VM is spun up, we still want to integrate 
>> with existing systems such as Active Directory (via PBIS/Likewise). Long 
>> term, we have grander plans for making OpenStack the provisioning system for 
>> our integration and production environments and we'll probably need to build 
>> more ellaborate smarts into it.
> 
> One solution might (I have not verified if instance UUID's are guarnteed to 
> be globally unique) is base the name on the UUID (depending on how much of a 
> "gibberish" name your users would tolerate)
> 
> -- 
> Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
> !DSPAM:1,52eda1de26511123565!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52eda1de26511123565!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] openstack swift storage provisioning

2014-02-03 Thread Remo Mattei
swift middleware will allow you to know all the info about the account. You 
however need to find a way to loop it to all the accounts using swift.  
-- 
Remo Mattei


February 3, 2014 at 11:26:41, Samuel Merritt (s...@swiftstack.com) ha scritto:

On 2/3/14 12:16 AM, Heiko Krämer wrote:  
> Hi Pragya,  
>  
> you can set account and container quotas with a ResellerAdmin user.  
> http://docs.openstack.org/developer/swift/middleware.html?highlight=quota#module-swift.common.middleware.account_quotas
>   
>  
>  
> to find out how much a user have in use you need ceilometer.  

You don't need ceilometer for that; a simple account HEAD request will  
do. The response will contain a header X-Account-Bytes-Used, and its  
value will be the sum of the sizes of all objects in the account  
(subject to eventual consistency, of course).  



___  
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  
Post to : openstack@lists.openstack.org  
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack  

!DSPAM:1,52efed71143754656934457!  

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] nova unique name generator middleware

2014-02-03 Thread Remo Mattei
Hi all, 
there is a project for DNS already DNSaaS (DNS as a service)

https://wiki.openstack.org/wiki/Designate

 
On Feb 3, 2014, at 4:35 PM, Joshua Harlow  wrote:

> Do most systems have access to a dns system that can be used to check? Maybe 
> that could be one of these plugins.
> 
> From: Craig J 
> Date: Monday, February 3, 2014 at 1:58 PM
> To: Joel Cooklin 
> Cc: "openstack@lists.openstack.org" 
> Subject: Re: [Openstack] nova unique name generator middleware
> 
>> There's currently a check in nova for max length. It's hard coded to 255. 
>> Easy low-hanging fruit would be to make that number configurable and add a 
>> configurable regex check on the server name.
>> 
>> The uniqueness check could be trickier: checking the nova db wouldn't be 
>> sufficient in many cases as most people need to check some external 
>> system(s). Maybe we could put together something pluggable with a nova-db 
>> check as an example. Is a wsgi filter the most appropriate place for such a 
>> pluggable validator or should it be deeper, at the same place where the 
>> other server name validation occurs?
>> 
>> 
>> 
>> On Mon, Feb 3, 2014 at 6:46 AM, Joel Cooklin  wrote:
>>> >>Shouldn't "nova list" and some shell script magic do most of this?
>>> 
>>> For our use case this won't work as well since several business units
>>> (tenants) make direct use of the APIs.  It's hard to enforce that they
>>> use our wrappers and the like.  It would be much more convenient in
>>> our case if we could enforce business logic via a plugin for all
>>> requests regardless of the client being used to access the API.
>>> 
>>> On Sun, Feb 2, 2014 at 11:48 PM, Aryeh Friedman
>>>  wrote:
>>> > Shouldn't "nova list" and some shell script magic do most of this?  The 
>>> > only
>>> > problem would be to make sure that two people didn't ask for a name at the
>>> > same time
>>> >
>>> >
>>> > On Mon, Feb 3, 2014 at 1:19 AM, Tim Bell  wrote:
>>> >>
>>> >> > -Original Message-
>>> >> > From: John Griffith [mailto:john.griff...@solidfire.com]
>>> >> > Sent: 03 February 2014 03:47
>>> >> > To: Joel Cooklin
>>> >> > Cc: openstack@lists.openstack.org
>>> >> > Subject: Re: [Openstack] nova unique name generator middleware
>>> >> >
>>> >> > On Sun, Feb 2, 2014 at 7:26 PM, Joel Cooklin 
>>> >> > wrote:
>>> >> > > +1 intel use cases.  It would be nice to avoid our current custom
>>> >> > > patches.
>>> >> > >
>>> >> > >
>>> >> > > On Sunday, February 2, 2014, Joshua Harlow 
>>> >> > > wrote:
>>> >> > >>
>>> >> > >> +1 yahoo use case(s) would also benefit from not having to patch the
>>> >> > >> +code
>>> >> > >> to achieve similar results.
>>> >> > >>
>>> >> > >> Sent from my really tiny device...
>>> >> > >>
>>> >> > >> > On Feb 2, 2014, at 12:12 AM, "Tim Bell"  wrote:
>>> >> > >> >
>>> >> > >> > It would be interesting to have a formal exit inside OpenStack 
>>> >> > >> > nova
>>> >> > >> > at VM creation for this sort of check rather than having to patch
>>> >> > >> > the code.
>>> >> > >> >
>>> >> > >> > Other scenarios that I've seen is where there is a need to enforce
>>> >> > >> > limits as the server name is used for other purposes. Examples are
>>> >> > >> > characters in the server name or maximum length.
>>> >> > >> >
>>> >> > >> > Tim
>>> >> > >> >
>>> >> ...
>>> >> > >
>>> >> > Maybe just an auto-naming option added to nova's existing boot call; 
>>> >> > use
>>> >> > a prefix and the UUID of the instance would satisfy the
>>> >> > cases people are talking about here and not impact existing users?
>>> >> >
>>> >>
>>> >> We have a set of other use cases which are around the use of the server
>>> >> name to get a Kerberos/X.509 identity which imposes other restrictions on
>>> >> the name being chosen (such as maximum length and limited set of
>>> >> characters). The unique name is one scenario but there are others.
>>> >>
>>> >> Thus, we could start adding new options such as "max server name length"
>>> >> and "server name character set" or we find a way to do a plugin.
>>> >>
>>> >> Tim
>>> >>
>>> >> ___
>>> >> Mailing list:
>>> >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> >> Post to : openstack@lists.openstack.org
>>> >> Unsubscribe :
>>> >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> >
>>> >
>>> >
>>> >
>>> > --
>>> > Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
>>> 
>>> ___
>>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
> !DSPAM:1,52f02aa2292318724815022!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:

Re: [Openstack] [glance] Multiple instances of glance

2014-02-04 Thread Remo Mattei
Looks like IceHouse it the target for the multiple glance backend options nice 
to see it. 

Ciao

On Feb 4, 2014, at 13:32, Muralidhar Balcha  wrote:

> Excellent. 
> https://blueprints.launchpad.net/glance/+spec/image-location-selection-strategy
>  is what I am looking for.  I will follow the feature.
> 
> Thanks,
> Murali Balcha
> 
> 
> On Tue, Feb 4, 2014 at 12:32 PM, Ritesh Nanda  wrote:
> Hello ,
> 
> For Regions approach , then you need to have all openstack services expect 
> keystone defined in one region and all in another region.
> 
> Have a look at the blueprint might it solve your question 
> 
> https://blueprints.launchpad.net/glance/+spec/image-location-status
> https://blueprints.launchpad.net/glance/+spec/image-location-selection-strategy
> 
> Regards,
> Ritesh
> 
> 
> On Tue, Feb 4, 2014 at 10:34 PM, Muralidhar Balcha  
> wrote:
> Hi Dheeru,
> I am not looking for a HA solution. Our use case requires us to expose 
> certain number of images using our own glance service so second option is 
> interesting. I haven't seen any option in nova cli to specify a glance end 
> point. Can you specify a glance end point from different region during nova 
> create?
> 
> Thanks,
> Murali Balcha
> 
> 
> On Mon, Feb 3, 2014 at 11:12 PM, dheeru  
> wrote:
> You have two options. You can have multiple installations.
> 
> 1. You can install the OpenStack in HA mode. In this case you may not be able 
> to specify the URL.
> 2. Create end points in keystone with different regions for glance. During 
> any request you can specify the regionName. I have not tried this. It should 
> work.
> 
> -Dheeru
> @Community Service
> 
> On Sat, Feb 1, 2014 at 5:20 AM, Muralidhar Balcha  
> wrote:
> Hi,
> Can an openstack installation have multiple glance instances? If so can it be 
> possible to specify image url from a specific glance service during nova 
> create operation?
> 
> -- 
> Murali Balcha
> 508 494 5007
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> 
> 
> -- 
> -dheeru
> @Community Service
> 
> 
> 
> -- 
> Muralidhar Balcha
> 508 494 5007
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> 
> 
> -- 
>  With Regards  
>  Ritesh Nanda
> 
> 
> 
> 
> 
> 
> -- 
> Muralidhar Balcha
> 508 494 5007
> !DSPAM:1,52f137a4112861813830391! 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52f137a4112861813830391!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error while booting VM

2014-02-06 Thread Remo Mattei
sounds like it maybe corrupted. I would try to download a test image from this 
location:
http://docs.openstack.org/image-guide/content/ch_obtaining_images.html

if you want to use some tools to build your images I would look at
http://docs.openstack.org/image-guide/content/ch_creating_images_automatically.html

Oz
VMBuilder
BoxGrinder
VeeWee
imagefactory
SUSE Studio

Hope this helps. 

Ciao


On Feb 6, 2014, at 9:19, Bhattacharjee, Arindam (Arindam) 
 wrote:

> Probably you need to create qcow2 image out of iso image and then use that 
> qcow2 to create VMs from Openstack.
> Follow the instructions similar to this:
> http://docs.openstack.org/image-guide/content/ubuntu-image.html
>  
>  
> From: Narayanan, Krishnaprasad [mailto:naray...@uni-mainz.de] 
> Sent: Thursday, February 06, 2014 7:19 AM
> To: openstack@lists.openstack.org
> Subject: [Openstack] Error while booting VM
>  
> Hallo all,
>  
> Can I seek help for the problem described below?
>  
> I have a VM running Ubuntu 12.04 in my OpenStack cloud and when it boots, I 
> get an error message that says “Error: invalid magic number, error: You need 
> to load the kernel first. Press any key to continue”.
>  
> Can I know how to make the VM boot?
>  
> Thanks,
> Krishnaprasad
>  
>  
> !DSPAM:1,52f39fd99031488914618! 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52f39fd99031488914618!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Odd Keystone Behaviour

2014-02-06 Thread Remo Mattei
Seems a permissions issue did you try a different user? 

Remo

On Feb 6, 2014, at 10:09, Daniel Ellison  wrote:

> Hey all,
> 
> I've run into an issue with a Havana Keystone install on CentOS 6.3. When I 
> issue a command such as:
> 
>keystone user-list
> 
> I get in response:
> 
>Unable to authorize user
> 
> This happens with service-list, endpoint-list, role-list, etc. Oddly, it does 
> NOT happen with tenant-list; I get a proper list of tenants in response.
> 
> Running the commands with "--debug", the response body to a "/tokens" request 
> for all was identical aside from the token itself and timestamps. The 
> difference came after that, where most of the *-list commands returned 
> "Unable to authorize user" except for tenant-list, which returned the list of 
> tenants.
> 
> There is one reference to this issue at 
> http://docs.openstack.org/havana/install-guide/install/yum/content/keystone-verify.html#comment-1143923155
>  so I know I'm not the only one having this issue. The key is that ONE of the 
> commands works while all the rest don't.
> 
> Any ideas?
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,52f3a79a32901637212605!
> 


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error while booting VM

2014-02-06 Thread Remo Mattei
Yes but raw data keeps the entire space so if you have a 40gb drive and only 
use 1gb you are stuck with 40gb. Whereas, qcow2 does not. 

Ciao
Remo

On Feb 6, 2014, at 9:50, Aryeh Friedman  wrote:

> qcow2 is almost certainly the worst choice here because if the hypervisor for 
> some reason becomes unusable then the data is unreadable by some 
> hypervisors... raw is much more portabls
> 
> 
> On Thu, Feb 6, 2014 at 9:19 AM, Bhattacharjee, Arindam (Arindam) 
>  wrote:
> Probably you need to create qcow2 image out of iso image and then use that 
> qcow2 to create VMs from Openstack.
> 
> Follow the instructions similar to this:
> 
> http://docs.openstack.org/image-guide/content/ubuntu-image.html
> 
>  
> 
>  
> 
> From: Narayanan, Krishnaprasad [mailto:naray...@uni-mainz.de] 
> Sent: Thursday, February 06, 2014 7:19 AM
> To: openstack@lists.openstack.org
> Subject: [Openstack] Error while booting VM
> 
>  
> 
> Hallo all,
> 
>  
> 
> Can I seek help for the problem described below?
> 
>  
> 
> I have a VM running Ubuntu 12.04 in my OpenStack cloud and when it boots, I 
> get an error message that says “Error: invalid magic number, error: You need 
> to load the kernel first. Press any key to continue”.
> 
>  
> 
> Can I know how to make the VM boot?
> 
>  
> 
> Thanks,
> 
> Krishnaprasad
> 
>  
> 
>  
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> 
> 
> -- 
> Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
> !DSPAM:1,52f3aa0339243727140205! 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52f3aa0339243727140205!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Error while booting VM

2014-02-06 Thread Remo Mattei
I am not disagreeing here I am just point an option out. 

Ciao
Remo 

On Feb 6, 2014, at 10:41, Aryeh Friedman  wrote:

> Depends on your needs... if your only need is to save space then your right 
> use qcow2 but if you have any need for stability or robustness use raw (qcow2 
> for example is much susceptible to the kinds of results like the one the 
> original poster reported and later confirmed in the event of a unscheduled 
> host reboot... if the default cache mode was "none" instead "writeback" this 
> would be OK but writeback is known to [by qemu's own documentation and other 
> sources] to be unsafe in a power failure see 
> http://pic.dhe.ibm.com/infocenter/lnxinfo/v3r0m0/index.jsp?topic=%2Fliaat%2Fliaatbpkvmguestcache.htm...
>  the only problem with "none" is it gives beyond awful performence)
> 
> 
> On Thu, Feb 6, 2014 at 10:29 AM, Remo Mattei  wrote:
> Yes but raw data keeps the entire space so if you have a 40gb drive and only 
> use 1gb you are stuck with 40gb. Whereas, qcow2 does not. 
> 
> Ciao
> Remo
> 
> On Feb 6, 2014, at 9:50, Aryeh Friedman  wrote:
> 
>> qcow2 is almost certainly the worst choice here because if the hypervisor 
>> for some reason becomes unusable then the data is unreadable by some 
>> hypervisors... raw is much more portabls
>> 
>> 
>> On Thu, Feb 6, 2014 at 9:19 AM, Bhattacharjee, Arindam (Arindam) 
>> wrote:
>> Probably you need to create qcow2 image out of iso image and then use that 
>> qcow2 to create VMs from Openstack.
>> 
>> Follow the instructions similar to this:
>> 
>> http://docs.openstack.org/image-guide/content/ubuntu-image.html
>> 
>>  
>> 
>>  
>> 
>> From: Narayanan, Krishnaprasad [mailto:naray...@uni-mainz.de] 
>> Sent: Thursday, February 06, 2014 7:19 AM
>> To: openstack@lists.openstack.org
>> Subject: [Openstack] Error while booting VM
>> 
>>  
>> 
>> Hallo all,
>> 
>>  
>> 
>> Can I seek help for the problem described below?
>> 
>>  
>> 
>> I have a VM running Ubuntu 12.04 in my OpenStack cloud and when it boots, I 
>> get an error message that says “Error: invalid magic number, error: You need 
>> to load the kernel first. Press any key to continue”.
>> 
>>  
>> 
>> Can I know how to make the VM boot?
>> 
>>  
>> 
>> Thanks,
>> 
>> Krishnaprasad
>> 
>>  
>> 
>>  
>> 
>> 
>> ___
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>> 
>> 
>> 
>> -- 
>> Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
>> ___
>> 
>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> 
>> 
>> !DSPAM:1,52f3aa0339243727140205!
> 
> 
> 
> 
> -- 
> Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
> !DSPAM:1,52f3af1856541323311281!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Odd Keystone Behaviour

2014-02-06 Thread Remo Mattei
Can you try to execute it as an admin from the CLI using the following variable:

#Paste the following:
export OS_TENANT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=admin
export OS_AUTH_URL="http://192.168.100.254:5000/v2.0/";
using your ip here 

Bye
Remo

On Feb 6, 2014, at 10:53, Daniel Ellison  wrote:

> On Feb 6, 2014, at 10:19 AM, Remo Mattei  wrote:
>> Seems a permissions issue did you try a different user?
> 
> I just defined a new user with OS_SERVICE_TOKEN and OS_SERVICE_ENDPOINT set 
> (because that DOES work) and when I tried to get a user list as that new user 
> it gave me the same error.
> 
> +Dan
> !DSPAM:1,52f3b21568201426413080!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Odd Keystone Behaviour

2014-02-06 Thread Remo Mattei
I agree that’s why I was saying to try a different user. If you add a user it 
will not be part of the admin anyhow, by default.

Remo 

On Feb 6, 2014, at 11:09, Craig Jellick  wrote:

> If you're using the default policy.json file, this seems to be the
> expected behavior.
> The "list_user_projects" method has an access rule of "admin_or_owner".
> All the other calls you mentioned have a rule of "admin_required".
> 
> So, I'd say that most likely the user you are using does not have the role
> "admin".
> 
> 
> /Craig J
> 
> 
> 
> 
> On 2/6/14 8:19 AM, "Remo Mattei"  wrote:
> 
>> Seems a permissions issue did you try a different user?
>> 
>> Remo
>> 
>> On Feb 6, 2014, at 10:09, Daniel Ellison  wrote:
>> 
>>> Hey all,
>>> 
>>> I've run into an issue with a Havana Keystone install on CentOS 6.3.
>>> When I issue a command such as:
>>> 
>>>   keystone user-list
>>> 
>>> I get in response:
>>> 
>>>   Unable to authorize user
>>> 
>>> This happens with service-list, endpoint-list, role-list, etc. Oddly,
>>> it does NOT happen with tenant-list; I get a proper list of tenants in
>>> response.
>>> 
>>> Running the commands with "--debug", the response body to a "/tokens"
>>> request for all was identical aside from the token itself and
>>> timestamps. The difference came after that, where most of the *-list
>>> commands returned "Unable to authorize user" except for tenant-list,
>>> which returned the list of tenants.
>>> 
>>> There is one reference to this issue at
>>> http://docs.openstack.org/havana/install-guide/install/yum/content/keysto
>>> ne-verify.html#comment-1143923155 so I know I'm not the only one having
>>> this issue. The key is that ONE of the commands works while all the rest
>>> don't.
>>> 
>>> Any ideas?
>>> ___
>>> Mailing list: 
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe : 
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> 
>>> 
>>> 
>> 
>> 
>> ___
>> Mailing list: 
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>> Post to : openstack@lists.openstack.org
>> Unsubscribe : 
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52f3b3e674461390257870!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Odd Keystone Behaviour

2014-02-06 Thread Remo Mattei
Is this a production a dev devstack packstack that me help a little as well

Thanks

Inviato da iPhone ()

> Il giorno Feb 6, 2014, alle ore 8:53, Daniel Ellison  ha 
> scritto:
> 
>> On Feb 6, 2014, at 11:31 AM, Daniel Ellison  wrote:
>> Also, these are the variables which are set on login:
>> 
>>   export OS_USERNAME=admin
>>   export OS_TENANT_NAME=admin
>>   export OS_PASSWORD=
>>   export OS_AUTH_URL=http://:5000/v2.0/
> 
> I just reset admin's password to that which is in the environment variable:
> 
>keystone user-password-update --pass  admin
> 
> just in case the person who set up the database made a typo when entering 
> admin's password. I get the same results as previously.
> 
> And no, the password isn't  :)
> 
> +Dan
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,52f3c240122282072034795!
> 

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] Trunk pass over OVS

2014-02-11 Thread Remo Mattei
Hello everyone, 
I wonder if anyone knows if there is a way to pass a full trunk over ovs? Is 
there a max number I could use to how many vlan I can pass? I thought I could 
bind that in the config file to a single nic  to a senario where I can pass 
30-40 vlans. Does anyone have any ins on this?

Thanks 
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] howto setup a custom AggregateRamFilter for openstack

2014-02-12 Thread Remo Mattei
Hello does anyone have a custom filter steps on how to do it for a custom 
filters like 
AggregateRamFilter


Thanks for the feedback, 

Remo ___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] Dnsmasq process not running

2014-02-13 Thread Remo Mattei
Did you install it from devstack? Packstack ? Os? You are missing a lot of info 
very hard to get help. 

Inviato da iPhone ()

> Il giorno Feb 13, 2014, alle ore 6:18, Vikash Kumar 
>  ha scritto:
> 
> Hi all,
> 
> I have installed openstack grizzly. My VM's were not getting IP. I 
> checked my netork node and found that dnsmasq process is not running. Tried 
> restarting quantum-dhcp-agent but none of the time dnsmasq process came up.
> 
> 
> How can I solve this problem ?
> 
> 
> Thanks
> !DSPAM:1,52fcd7f0306121429015326!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52fcd7f0306121429015326!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Swift] Question regarding global scaling

2014-02-14 Thread Remo Mattei
Just adding a question, 
what config options have you used to make the multi-region? I have done a few 
swift but none with multi. 

Thanks
On Feb 14, 2014, at 15:59, Richard Raseley  wrote:

> On Tue, Feb 11, 2014 at 3:38 PM, Adam Lawson  wrote:
> Hola peoples.
> 
> I'm working on a general purpose Swift deployment that needs to scale 
> globally. For example, nodes in West Coast, East Coast, EU and APAC. We have 
> a Swift PoC cluster that spans West Coast and EU and it works fine, 
> replicating using zones for now.
> 
> For those who are scaling to that degree, are you building multiple unique 
> clusters and replicating between them somehow or using regions and 
> replicating within essentially one giant cluster and using affinity rules 
> like read_affinity and write_affinity*?
> 
> Utilizing the region capability of Swift is a good option depending on your 
> use case (I've used a region-based configuration in one production 
> deployment). Can you talk more about your data structure / access patterns in 
> order to help myself (and others) give better advice?
>  
> 
> Adam Lawson
> AQORN, Inc.
> 427 North Tatnall Street
> Ste. 58461
> Wilmington, Delaware 19801-2230
> Toll-free: (888) 406-7620
> 
> 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52feb08f274501761617984! 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52feb08f274501761617984!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] best single node install tutorial

2014-02-14 Thread Remo Mattei
Are you looking for red hat / centos or ubunto ? 

Packstack does I nice job rh/centos
Devstack on Debian / ubunto 

Just my 2 cents. 

Inviato da iPhone ()

> Il giorno Feb 14, 2014, alle ore 18:28, Yonghua Peng  ha 
> scritto:
> 
> I suggest take a look at this one, it's well organized:
> 
> https://github.com/fornyx/OpenStack-Havana-Install-Guide/blob/master/OpenStack-Havana-Install-Guide.rst
> 
> 
> 
> Пятница, 14 февраля 2014, 14:12 -05:00 от Aryeh Friedman 
> :
> I am writing a set of tutorials on how to install open stack on VM's, which 
> due to cloud foundation layer we are using can run on real hardware after the 
> tutorial is complete (devstack, single node, multi-node and small deployed 
> clouds).   Since I am not the best at writing instructional guides I wonder 
> if someone can point me to a good single node tutorial (for installing 
> OpenStack -- not just DevStack -- on a single physical machine) so I can get 
> some ideas on how to word stuff clearly.
> 
> -- 
> Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> 
> -- 
> 
> !DSPAM:1,52fed3713761323432944!
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,52fed3713761323432944!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] best single node install tutorial

2014-02-14 Thread Remo Mattei
Well them forget devstack since without the stack.sh you will not install it. 

Bye. 

Inviato da iPhone ()

> Il giorno Feb 14, 2014, alle ore 19:08, Aryeh Friedman 
>  ha scritto:
> 
> 
> 
> 
>> On Fri, Feb 14, 2014 at 10:05 PM, Remo Mattei  wrote:
>> Are you looking for red hat / centos or ubunto ? 
> 
> Doesn't matter we plan to make versions of the tutorial for each OS
>  
>> 
>> Packstack does I nice job rh/centos
>> Devstack on Debian / ubunto 
> 
> We *SPECIFICALLY* do not want a crippled install process (crippled in the 
> sense that it is only a wrapper around someone else's precanned scripts)
>  
>> 
>> Just my 2 cents. 
>> 
>> Inviato da iPhone ()
>> 
>>> Il giorno Feb 14, 2014, alle ore 18:28, Yonghua Peng  
>>> ha scritto:
>>> 
>>> I suggest take a look at this one, it's well organized:
>>> 
>>> https://github.com/fornyx/OpenStack-Havana-Install-Guide/blob/master/OpenStack-Havana-Install-Guide.rst
>>> 
>>> 
>>> 
>>> Пятница, 14 февраля 2014, 14:12 -05:00 от Aryeh Friedman 
>>> :
>>> I am writing a set of tutorials on how to install open stack on VM's, which 
>>> due to cloud foundation layer we are using can run on real hardware after 
>>> the tutorial is complete (devstack, single node, multi-node and small 
>>> deployed clouds).   Since I am not the best at writing instructional guides 
>>> I wonder if someone can point me to a good single node tutorial (for 
>>> installing OpenStack -- not just DevStack -- on a single physical machine) 
>>> so I can get some ideas on how to word stuff clearly.
>>> 
>>> -- 
>>> Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
>>> ___
>>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> 
>>> 
>>> 
>>> -- 
>>> 
>>> ___
>>> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> Post to : openstack@lists.openstack.org
>>> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>>> 
>>> 
>>> !DSPAM:1,52fed3713761323432944!
> 
> 
> 
> -- 
> Aryeh M. Friedman, Lead Developer, http://www.PetiteCloud.org
> !DSPAM:1,52feda1f13661590017327!
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] shared provider + floating

2014-02-20 Thread Remo Mattei
Hello all, 
I have 1 controller 2 compute and 1 neutron

I have a provider network where I would like to boot up some instances but 
right now it does not allow me to even ping anything. I have a network which I 
have a router which is attached to the provider network and I assigned floating 
IP and that works just fine. Any suggestions on what I should check?

Thanks
Remo


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [Swift] Question regarding global scaling

2014-02-22 Thread Remo Mattei
Did that work well for you I want to check it out. 

Thanks for sharing

Inviato da iPhone ()

> Il giorno Feb 21, 2014, alle ore 15:00, Adam Lawson  ha 
> scritto:
> 
> When deploying Swift globally, this thread helped:
> 
> Unique as possible replicates in this order:
> Regions > Zones > Servers > Devices > Device with fewest replicas
> 
> http://lists.openstack.org/pipermail/openstack-dev/2013-March/006802.html
> 
> The above config helped. Here's what I'm thinking:
> 
> Logical setup:
> 
>> Region 1
>>  Zone 10
>>  10.1.10.100
>>  sdb1
>>  sdc1
>>  sdd1
>>  sde1
>>  sdf1
>>  Zone 11
>>  10.1.11.100
>>  sdb1
>>  sdc1
>>  sdd1
>>  sde1
>>  sdf1
>> Region 2
>>  Zone 20
>>  10.2.20.100
>>  sdb1
>>  sdc1
>>  sdd1
>>  sde1
>>  sdf1
>>  Zone 21
>>  10.2.21.100
>>  sdb1
>>  sdc1
>>  sdd1
>>  sde1
>>  sdf1
>> # Create ring
>> swift-ring-builder account.builder create 10 3 1
>> swift-ring-builder account.builder add r1z10-10.1.10.100:6002/sdb1 100
>> swift-ring-builder account.builder add r1z10-10.1.10.100:6002/sdc1 100
>> swift-ring-builder account.builder add r1z10-10.1.10.100:6002/sdd1 100
>> swift-ring-builder account.builder add r1z10-10.1.10.100:6002/sde1 100
>> swift-ring-builder account.builder add r1z10-10.1.10.100:6002/sdf1 100
>> swift-ring-builder account.builder add r1z11-10.1.20.100:6002/sdb1 100
>> swift-ring-builder account.builder add r1z11-10.1.20.100:6002/sdc1 100
>> swift-ring-builder account.builder add r1z11-10.1.20.100:6002/sdd1 100
>> swift-ring-builder account.builder add r1z11-10.1.20.100:6002/sde1 100
>> swift-ring-builder account.builder add r1z11-10.1.20.100:6002/sdf1 100
>> swift-ring-builder account.builder add r2z20-10.2.20.100:6002/sdb1 100
>> swift-ring-builder account.builder add r2z20-10.2.20.100:6002/sdc1 100
>> swift-ring-builder account.builder add r2z20-10.2.20.100:6002/sdd1 100
>> swift-ring-builder account.builder add r2z20-10.2.20.100:6002/sde1 100
>> swift-ring-builder account.builder add r2z20-10.2.20.100:6002/sdf1 100
>> swift-ring-builder account.builder add r2z21-10.2.21.100:6002/sdb1 100
>> swift-ring-builder account.builder add r2z21-10.2.21.100:6002/sdc1 100
>> swift-ring-builder account.builder add r2z21-10.2.21.100:6002/sdd1 100
>> swift-ring-builder account.builder add r2z21-10.2.21.100:6002/sde1 100
>> swift-ring-builder account.builder add r2z21-10.2.21.100:6002/sdf1 100
>>  
>> # Rebalance
>> swift-ring-builder account.builder rebalance
> 
> 
> Haven't run this yet but pretty sure the ring builder will work fine. 
> 
> 
> 
> 
> Adam Lawson
> AQORN, Inc.
> 427 North Tatnall Street
> Ste. 58461
> Wilmington, Delaware 19801-2230
> Toll-free: (888) 406-7620
> 
> 
> 
>> On Fri, Feb 21, 2014 at 2:20 PM, Luis de Bethencourt 
>>  wrote:
>>> On 21 February 2014 16:50, Adam Lawson  wrote:
>>> This is a first for me as well so I'm learning as I go here. But I'm 
>>> planning to build the rings with r1z100, r2z200 etc with each device. I 
>>> found help over at Swiftstack with their articles if that helps. More than 
>>> willing to share any/all successes we see along the way.
>>> 
>> 
>> Hi Adam,
>> 
>> Could you specify which articles in particular helped?
>> 
>> Thanks,
>> Luis
>>  
>>> 
>>> Adam Lawson
>>> AQORN, Inc.
>>> 427 North Tatnall Street
>>> Ste. 58461
>>> Wilmington, Delaware 19801-2230
>>> Toll-free: (888) 406-7620
>>> 
>>> 
>>> 
>>>> On Fri, Feb 14, 2014 at 4:18 PM, Remo Mattei  wrote:
>>>> Just adding a question, 
>>>> what config options have you used to make the multi-region? I have done a 
>>>> few swift but none with multi. 
>>>> 
>>>> Thanks
>>>>> On Feb 14, 2014, at 15:59, Richard Raseley  wrote:
>>>>> 
>>>>>> On Tue, Feb 11, 2014 at 3:38 PM, Adam Lawson  wrote:
>>>>>> Hola peoples.
>>>>&g

[Openstack] swift keystone auth

2014-02-24 Thread Remo Mattei
Hello all, 
I have a question I want to get clear my mind with. Swift in openstack uses 
keystone for auth, which we  have the proxy checking account info, so how does 
that translate to meaning do we have a double checking of an account privileges?

Thanks
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] swift cluster with more than one server

2014-02-24 Thread Remo Mattei
Hello I wonder what is the right process on configuring swift with more than 1 
server, let’s see I have 20 HP / Dell servers with 10 HD in them. What are the 
command to make this the cluster. I know swift-ring-builder partition power 
replicas min_number_hours

so in one that’s not a problem I can make the server but how will I add the 
others into the cluster?

Thanks
___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] swift formula

2014-02-24 Thread Remo Mattei
Hi again, 
I have read about this formula can someone enhance with some additional details 
about how many objects can be in a swift cluster?


§To find out how many items a partition will hold use the following formula
§For example, if the
§partition num is 2^18,
§replica_num is 3,
§disk_num is 50,
§item_num ~= 2^18 * 3 * 4097 / 50 ~= 64440238.

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] swift cluster with more than one server

2014-02-24 Thread Remo Mattei
Thanks

On Feb 24, 2014, at 20:27, Kuo Hugo  wrote:

> 1. Deploy Swift into new nodes
> 2. Sync the /etc/swift.conf on all nodes. 
> 3. Format and mount all drives on new nodes
> 4. Setting Rsync on new nodes
> 5. Adding new devices to the ring 
> 6. Rebalancing the ring on existing node, and then distribute rings to all 
> nodes. *Rings* must be consistency on all nodes within this cluster.
> 7. Start Swift daemons on new nodes. 
> 8. Done , Replicators will do the rest of jobs for you. 
> 
> 
> Perfect~
> 
> Hugo
> 
> 
> 
> 2014-02-25 11:53 GMT+08:00 Remo Mattei :
> Hello I wonder what is the right process on configuring swift with more than 
> 1 server, let’s see I have 20 HP / Dell servers with 10 HD in them. What are 
> the command to make this the cluster. I know swift-ring-builder partition 
> power replicas min_number_hours
> 
> so in one that’s not a problem I can make the server but how will I add the 
> others into the cluster?
> 
> Thanks
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> !DSPAM:1,530c1bae253157244516389!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


[Openstack] FWaaS vs Security Group

2014-02-26 Thread Remo Mattei
Hello guys, 
I want to double check and make sure I am correct on this one. 

1) FWaaS is a firewall which allows tenant to apply internal security 
measurement. 
2) Security Group does not apply to the SND router but to neutron port. 
I am missing anything on a global overview of the two?

Thanks


___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [keystone] can't not use file-based backend for catalog

2014-03-05 Thread Remo Mattei
Try to add —debug and see what it says..

Ciao

On Mar 5, 2014, at 6:08 PM, Li, Chen  wrote:

> Hi list,
>  
> I’m working under CentOS 6.4 + Havana.
>  
> I want to use the file based backend for keystone catalog.
> But, after I configured that, when I run command “keystone service list” and 
> “keystone endpoint-list”, I get nothing.
>  
> Anyone know why this happened ???
>  
> I used to be successfully to this on Grizzly.
>  
>  
> Thanks.
> -chen
>  
> Here is my /etc/keystone/keystone.conf:
> [DEFAULT]
>  [sql]
> connection = mysql://keystone:keystone@host-db/keystone
>  
>  [identity]
>  
>  [credential]
>  
>  [trust]
>  
>  [os_inherit]
>  
>  [catalog]
> driver = keystone.catalog.backends.templated.TemplatedCatalog
> template_file = /etc/keystone/default_catalog.templates
>  
>  [endpoint_filter]
>  
>  [token]
> driver = keystone.token.backends.memcache.Token
>  
>  [cache]
>  [policy]
>  [ec2]
>  [assignment]
>  [oauth1]
>  [ssl]
>  [signing]
> token_format = UUID
>  
>  [ldap]
>  
>  [auth]
> methods = external,password,token,oauth1
> password = keystone.auth.plugins.password.Password
> token = keystone.auth.plugins.token.Token
> oauth1 = keystone.auth.plugins.oauth1.OAuth
>  
>  [paste_deploy]
>  
>  
>  
> Here is my /etc/keystone/default_catalog.templates:
> catalog.RegionOne.identity.publicURL = 
> http://host-keystone:$(public_port)s/v2.0
> catalog.RegionOne.identity.adminURL = http://host-keystone:$(admin_port)s/v2.0
> catalog.RegionOne.identity.internalURL = 
> http://host-keystone:$(public_port)s/v2.0
> catalog.RegionOne.identity.name = Identity Service
>  
> catalog.RegionOne.compute.publicURL = 
> http://host-nova:$(compute_port)s/v1.1/$(tenant_id)s
> catalog.RegionOne.compute.adminURL = 
> http://host-nova:$(compute_port)s/v1.1/$(tenant_id)s
> catalog.RegionOne.compute.internalURL = 
> http://host-nova:$(compute_port)s/v1.1/$(tenant_id)s
> catalog.RegionOne.compute.name = Compute Service
>  
> catalog.RegionOne.volume.publicURL = http://host-cinder:8776/v1/$(tenant_id)s
> catalog.RegionOne.volume.adminURL = http://host-cinder:8776/v1/$(tenant_id)s
> catalog.RegionOne.volume.internalURL = 
> http://host-cinder:8776/v1/$(tenant_id)s
> catalog.RegionOne.volume.name = Volume Service
>  
>  
> catalog.RegionOne.image.publicURL = http://host-glance:9292/v1
> catalog.RegionOne.image.adminURL = http://host-glance:9292/v1
> catalog.RegionOne.image.internalURL = http://host-glance:9292/v1
> catalog.RegionOne.image.name = Image Service
>  
> catalog.RegionOne.network.publicURL = http://host-neutron:9696/
> catalog.RegionOne.network.adminURL = http://host-neutron:9696/
> catalog.RegionOne.network.internalURL = http://host-neutron:9696/
> catalog.RegionOne.network.name = Network Service
>  
> !DSPAM:1,5317d969231126667580840! 
> ___
> Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack@lists.openstack.org
> Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> 
> 
> !DSPAM:1,5317d969231126667580840!

___
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack


Re: [Openstack] [keystone] can't not use file-based backend for catalog

2014-03-05 Thread Remo Mattei
Well looks like it does send the endpoints back to you from keystone. but looks 
like it’s using a token. 
can you try a different user? Not sure if that user had access to the 
endpoints. Just a suggestions. 

Remo
On Mar 5, 2014, at 6:15 PM, Li, Chen  wrote:

>  
> keystone --debug endpoint-list
>  
> REQ: curl -i -X POST http://host-keystone:5000/v2.0/tokens -H "Content-Type: 
> application/json" -H "User-Agent: python-keystoneclient"
> REQ BODY: {"auth": {"tenantName": "test", "passwordCredentials": {"username": 
> "lichen", "password": "lichen"}}}
>  
> RESP: [200] {'date': 'Thu, 06 Mar 2014 02:14:28 GMT', 'content-type': 
> 'application/json', 'content-length': '1897', 'vary': 'X-Auth-Token'}
> RESP BODY: {"access": {"token": {"issued_at": "2014-03-06T02:14:28.417502", 
> "expires": "2014-03-07T02:14:28Z", "id": "1a4f03fbec6a41ddbff76afe9d238f83", 
> "tenant": {"description": null, "enabled": true, "id": 
> "1e57be810f854bcdb73901567140ac48", "name": "test"}}, "serviceCatalog": 
> [{"endpoints": [{"adminURL": 
> "http://host-cinder:8776/v1/1e57be810f854bcdb73901567140ac48";, "region": 
> "RegionOne", "publicURL": 
> "http://host-cinder:8776/v1/1e57be810f854bcdb73901567140ac48";, "internalURL": 
> "http://host-cinder:8776/v1/1e57be810f854bcdb73901567140ac48"}], 
> "endpoints_links": [], "type": "volume", "name": "Volume Service"}, 
> {"endpoints": [{"adminURL": "http://host-glance:9292/v1";, "region": 
> "RegionOne", "publicURL": "http://host-glance:9292/v1";, "internalURL": 
> "http://host-glance:9292/v1"}], "endpoints_links": [], "type": "image", 
> "name": "Image Service"}, {"endpoints": [{"adminURL": 
> "http://host-nova:8774/v1.1/1e57be810f854bcdb73901567140ac48";, "region": 
> "RegionOne", "publicURL": 
> "http://host-nova:8774/v1.1/1e57be810f854bcdb73901567140ac48";, "internalURL": 
> "http://host-nova:8774/v1.1/1e57be810f854bcdb73901567140ac48"}], 
> "endpoints_links": [], "type": "compute", "name": "Compute Service"}, 
> {"endpoints": [{"adminURL": "http://host-neutron:9696/";, "region": 
> "RegionOne", "publicURL": "http://host-neutron:9696/";, "internalURL": 
> "http://host-neutron:9696/"}], "endpoints_links": [], "type": "network", 
> "name": "Network Service"}, {"endpoints": [{"adminURL": 
> "http://host-keystone:35357/v2.0";, "region": "RegionOne", "publicURL": 
> "http://host-keystone:5000/v2.0";, "internalURL": 
> "http://host-keystone:5000/v2.0"}], "endpoints_links": [], "type": 
> "identity", "name": "Identity Service"}], "user": {"username": "lichen", 
> "roles_links": [], "id": "dad121e464174060a4eb46c5fed019bf", "roles": 
> [{"name": "admin"}], "name": "lichen"}, "metadata": {"is_admin": 0, "roles": 
> ["1c3535acf43345acaa23b6b0c6955dfd"]}}}
>  
> REQ: curl -i -X GET http://host-keystone:35357/v2.0/endpoints -H "User-Agent: 
> python-keystoneclient" -H "X-Auth-Token: 1a4f03fbec6a41ddbff76afe9d238f83"
> RESP: [200] {'date': 'Thu, 06 Mar 2014 02:14:28 GMT', 'content-type': 
> 'application/json', 'content-length': '17', 'vary': 'X-Auth-Token'}
> RESP BODY: {"endpoints": []}
>  
>  
>  
> From: Remo Mattei [mailto:r...@italy1.com] 
> Sent: Thursday, March 06, 2014 10:13 AM
> To: Li, Chen
> Cc: openstack@lists.openstack.org
> Subject: Re: [Openstack] [keystone] can't not use file-based backend for 
> catalog
>  
> Try to add —debug and see what it says..
>  
> Ciao
>  
> On Mar 5, 2014, at 6:08 PM, Li, Chen  wrote:
> 
> 
> Hi list,
>  
> I’m working under CentOS 6.4 + Havana.
>  
> I want to use the 

  1   2   3   4   5   >