Re: [Openstack] Cannot access metadata host(169.254.169.254) in folsom

2013-03-04 Thread Shake Chen
how to solve it ? On Tue, Mar 5, 2013 at 3:33 PM, livemoon wrote: > thanks, I have solved this problem. > > > On Tue, Mar 5, 2013 at 10:09 AM, livemoon wrote: > >> I followed this installation guide: >> http://docs.openstack.org/folsom/basic-install/content/basic-install_intro.html >> it is dif

Re: [Openstack] Cannot access metadata host(169.254.169.254) in folsom

2013-03-04 Thread livemoon
thanks, I have solved this problem. On Tue, Mar 5, 2013 at 10:09 AM, livemoon wrote: > I followed this installation guide: > http://docs.openstack.org/folsom/basic-install/content/basic-install_intro.html > it is different network configuration between you mention. > > mt controller only run no

Re: [Openstack] [quantum] LBaas work with nova-network

2013-03-04 Thread gtt116
Aaron, Thanks very much! best regards, gtt 于 2013年03月05日 14:17, Aaron Rosen 写道: > No, you'll need to switch over to quantum to use this. Quantum, > implements the same use case as nova-network FlatDHCP via the provider > extension. > > Aaron > > On Mon, Mar 4, 2013 at 10:09 PM, gtt116 wrote: >> H

Re: [Openstack] [quantum] LBaas work with nova-network

2013-03-04 Thread Aaron Rosen
No, you'll need to switch over to quantum to use this. Quantum, implements the same use case as nova-network FlatDHCP via the provider extension. Aaron On Mon, Mar 4, 2013 at 10:09 PM, gtt116 wrote: > Hi all, > > I want to play LBaas from quantum, but I was used nova-network FlatDHCP > to setup

[Openstack] [quantum] LBaas work with nova-network

2013-03-04 Thread gtt116
Hi all, I want to play LBaas from quantum, but I was used nova-network FlatDHCP to setup network. So can I continue to use nova-network, and setup an LBaas? -- best regards, gtt ___ Mailing list: https://launchpad.net/~openstack Post to : opens

Re: [Openstack] How to create a Image which can extend the partition automatically.

2013-03-04 Thread Wangpan
+1 I have the same question! 2013-03-05 Wangpan 发件人:Lei Zhang 发送时间:2013-03-05 13:01 主题:[Openstack] How to create a Image which can extend the partition automatically. 收件人:"openstack@lists.launchpad.net" 抄送: Hi all, I am making the RHEL Image for the Openstack. But what type of partition l

Re: [Openstack] Authorization Question

2013-03-04 Thread Nathanael Burton
Dolph, In our deployments we often want to restrict projects to particular endpoints or regions. We've currently hacked that in to our Folsom systems by adding a 'regions' list to the 'extra' column of the tenant table. With only a few minor tweaks to keystone to return the filtered service cata

[Openstack] How to create a Image which can extend the partition automatically.

2013-03-04 Thread Lei Zhang
Hi all, I am making the RHEL Image for the Openstack. But what type of partition layout is preferred? The question is that when resize the image, the FS can be aware of the expansion and enlarge automatically. I found the ubuntu image from the http://cloud-images.ubuntu.com/precise/ have this feat

Re: [Openstack] horizon customization_module example???

2013-03-04 Thread Kieran Spear
On 5 March 2013 12:24, Wyllys Ingersoll wrote: > > Thanks! > > Any hints on how to remove some of the default Nova panels from the dashboard > using the customization_module? Something like: import horizon nova = horizon.get_dashboard('nova') nova.unregister(nova.get_panel('instances').__class

Re: [Openstack] [Swift] Define storage size for specified tenant/user

2013-03-04 Thread jeffty
Cool! Thanks a lot Chomouel & Gareth, I'll try it. On 3/5/2013 1:43 AM, Christian Schwede wrote: > Storage limit for container is already merged into swift, I just merged > swquota into swift for review (I'm the author of swquota ;-)). > > I think it's a good feature ;-) > > Christian > > > A

Re: [Openstack] Cannot access metadata host(169.254.169.254) in folsom

2013-03-04 Thread livemoon
I followed this installation guide: http://docs.openstack.org/folsom/basic-install/content/basic-install_intro.html it is different network configuration between you mention. mt controller only run nova-api and host run nova-api-metadata *controller:* # management ip auto eth0 iface eth0 inet sta

Re: [Openstack] horizon customization_module example???

2013-03-04 Thread Wyllys Ingersoll
Thanks! Any hints on how to remove some of the default Nova panels from the dashboard using the customization_module? On Mar 4, 2013, at 6:52 PM, Kieran Spear wrote: > Hi Wyllys, > > On 5 March 2013 08:59, Wyllys Ingersoll wrote: >> Questions: >> - If I name the customization_module as "

[Openstack] Anyone want to present to Las Vegas Developers?

2013-03-04 Thread Steve Wainstead
I apologize this is such short notice, and for shotgunning the list, but: I run a Meetup for software developers in Las Vegas. If anyone from OpenStack (who is in Vegas right now for Pulse) would like to give a technical presentation this Wednesday evening (March 6th) I think I can arrange a space

Re: [Openstack] horizon customization_module example???

2013-03-04 Thread Kieran Spear
Hi Wyllys, On 5 March 2013 08:59, Wyllys Ingersoll wrote: > Questions: > - If I name the customization_module as "my_dashboard.overrides" - where does > the "overrides" file need to be created (i.e. what directory - full path) ? my_dashboard.overrides needs to be importable by the process runni

Re: [Openstack] Help with keystone LDAP backend

2013-03-04 Thread Dolph Mathews
On that note, I very much like how docs.python.org does it, where not only is the current page's version prominently specified at the top of the page, but it also serves as an easy way to switch to another version of the docs, e.g.: http://docs.python.org/2/tutorial/ -Dolph On Mon, Mar 4, 2013

Re: [Openstack] Authorization Question

2013-03-04 Thread Miller, Mark M (EB SW Cloud - R&D - Corvallis)
Dolph, At this point in time I am still gaining a grasp of the Keystone V3 changes and how domains and groups can be used. I noticed that the service catalog is returned in the GET token response and also in the PKI token when a user obtains a scoped token. The catalog data could be a large amo

Re: [Openstack] orchestration engine wrt to openstack api

2013-03-04 Thread Steven Dake
On 03/04/2013 08:02 AM, Nirlay Kundu wrote: Which tool would you use for configuration management geared towards Openstack api : Chef, Puppet, Saltstack ? If anybody has experience with Saltstack, please let me know the advantages , shortcomings. Nirlay, You might download heat from here: h

Re: [Openstack] Help with keystone LDAP backend

2013-03-04 Thread Steven Presser
Anne, Yes that would. What I think might be a better revision is putting the version somewhere prominently on the page (say, the upper right hand corner, above ""). Steve On 03/04/2013 05:26 PM, Anne Gentle wrote: I've been wondering whether we should have docs.openstack.org/master/

Re: [Openstack] Help with keystone LDAP backend

2013-03-04 Thread Anne Gentle
I've been wondering whether we should have docs.openstack.org/master/ to match expectations, would that have helped in your case? Thanks for clarifying. Anne On Mon, Mar 4, 2013 at 4:22 PM, Steven Presser wrote: > Apparently the trunk docs. I could have sworn that wasn't what I > bookmarked.

Re: [Openstack] Help with keystone LDAP backend

2013-03-04 Thread Steven Presser
Apparently the trunk docs. I could have sworn that wasn't what I bookmarked. In any case, maybe explicitly marking trunk docs as newer-than-latest would help? ( http://docs.openstack.org/trunk/openstack-compute/admin/content/reference-for-ldap-config-options.html) On 03/04/2013 05:09 PM, D

Re: [Openstack] Help with keystone LDAP backend

2013-03-04 Thread Dolph Mathews
Yes, this feature just landed during grizzly-m3. Which docs are you referring to? The variable wasn't included in folsom's etc/keystone.conf.sample, for example. -Dolph On Mon, Mar 4, 2013 at 3:35 PM, Steven Presser wrote: > The answer would appear to be that this flag doesn't do anything i

Re: [Openstack] Authorization Question

2013-03-04 Thread Dolph Mathews
That's correct. Right now, all endpoints registered in keystone are returned to all users, regardless of whether they actually have any sort of authorization on those endpoints. I suspect we'll be having a planning session at the design summit on this topic -- I'd be helpful to better understand y

[Openstack] horizon customization_module example???

2013-03-04 Thread Wyllys Ingersoll
Can someone elaborate on how to use the "customization_module" setting in local_settings.py? Im running openstack-dashboard Version: 2012.2.1-0ubuntu1~cloud0 on Ubuntu 12.04 LTS. I read the documentation here - http://docs.openstack.org/developer/horizon/topics/customizing.html but several th

Re: [Openstack] Help with keystone LDAP backend

2013-03-04 Thread Steven Presser
The answer would appear to be that this flag doesn't do anything in the Folsom release. Apprently this was fixed by: https://bugs.launchpad.net/keystone/+bug/1122181 Unless I'm misreading something. Could we perhaps update the docs to reflect the fact that this isn't available in releases yet

Re: [Openstack] Help with keystone LDAP backend

2013-03-04 Thread Steven Presser
This is what came out of my logs. I've bolded what looks relevant to me: LDAP init: url=ldap://typhon.acm.jhu.edu 2013-03-04 16:06:01DEBUG [keystone.common.ldap.core] LDAP bind: dn=cn=admin,ou=OpenStack,dc=acm,dc=jhu,dc=edu 2013-03-04 16:06:01DEBUG [keystone.common.ldap.core] LDAP searc

[Openstack] Authorization Question

2013-03-04 Thread Miller, Mark M (EB SW Cloud - R&D - Corvallis)
Hello, I have been looking over the Keystone v3 API documentation as well as the database table columns. My question concerns endpoint access restrictions. I don't see any noticeable way to associate endpoints with domains which means that any user can access any endpoint of any domain. Is this

Re: [Openstack] Poor guest disk IO after disk usage.

2013-03-04 Thread Pádraig Brady
On 03/04/2013 07:19 PM, Samuel Winchenbach wrote: > Hi All, > > I have a cluster of three nodes set up. Live migration is accomplished via > an NFS mount over 10GigE shared by all three nodes. > > I have noticed that when a VM is brand new I am getting close to 60MB/s disk > write when using "

Re: [Openstack] VM guest can't access outside world.

2013-03-04 Thread Barrow Kwan
Hi, Thanks Jeff. this is what I got from tcpdump. The target (10.38.1.2 ) didn't seem to reply. might be the target ( 10.38.1.2 ) didn't know how to route the packet to 192.168.151.3? could that be SNAT issue? or like you said it needs IP masquerading rule. might be a bug in Quantum? Ba

Re: [Openstack] VM guest can't access outside world.

2013-03-04 Thread Barrow Kwan
Hi, Thanks Jeff. this is what I got from tcpdump. The target (10.38.1.2 ) didn't seem to reply. might be the target ( 10.38.1.2 ) didn't know how to route the packet to 192.168.151.3? could that be SNAT issue? or like you said it needs IP masquerading rule. might be a bug in Quantum? Bar

[Openstack] Poor guest disk IO after disk usage.

2013-03-04 Thread Samuel Winchenbach
Hi All, I have a cluster of three nodes set up. Live migration is accomplished via an NFS mount over 10GigE shared by all three nodes. I have noticed that when a VM is brand new I am getting close to 60MB/s disk write when using "dd if=/dev/zero of=file bs=1M count=1k conv=fdatasync". after doin

Re: [Openstack] Doubt quantum script

2013-03-04 Thread Dan Wendlandt
yup On Mon, Mar 4, 2013 at 11:05 AM, Guilherme Russi wrote: > I make my configs manually, so I need to set auto br-ex and declare the > iface br-ex inet static inserting the IP? > > Thanks again. > > > > 2013/3/4 Dan Wendlandt > >> if manually, you can just use ifconfing. If you use system too

Re: [Openstack] Doubt quantum script

2013-03-04 Thread Guilherme Russi
I make my configs manually, so I need to set auto br-ex and declare the iface br-ex inet static inserting the IP? Thanks again. 2013/3/4 Dan Wendlandt > if manually, you can just use ifconfing. If you use system tools for > configuring the IP address, make sure those tools set the IP on br-ex

Re: [Openstack] Doubt quantum script

2013-03-04 Thread Dan Wendlandt
if manually, you can just use ifconfing. If you use system tools for configuring the IP address, make sure those tools set the IP on br-ex, not eth2. dan On Mon, Mar 4, 2013 at 10:55 AM, Guilherme Russi wrote: > How do I move it? > > Thanks. > > > 2013/3/4 Dan Wendlandt > >> >> >> On Mon, Mar

Re: [Openstack] Doubt quantum script

2013-03-04 Thread Guilherme Russi
How do I move it? Thanks. 2013/3/4 Dan Wendlandt > > > On Mon, Mar 4, 2013 at 7:49 AM, Gary Kotton wrote: > >> On 03/04/2013 05:45 PM, Guilherme Russi wrote: >> >> Found the problem, when I did the step: ovs-vsctl add-port br-ex eth2, it >> stopped my lan communication. >> >> >> The l3 agent

Re: [Openstack] Cannot access metadata host(169.254.169.254) in folsom

2013-03-04 Thread Dan Wendlandt
On Mon, Mar 4, 2013 at 6:44 AM, Sylvain Bauza wrote: > Could you please issue 'route -n' on your VM and check if 169.254.0.0/16does > have its own route ? > If yes, delete it. > > Another classic error is to forget to add a static route from the > controller node (if hosting metadata service) to

Re: [Openstack] Doubt quantum script

2013-03-04 Thread Dan Wendlandt
On Mon, Mar 4, 2013 at 7:49 AM, Gary Kotton wrote: > On 03/04/2013 05:45 PM, Guilherme Russi wrote: > > Found the problem, when I did the step: ovs-vsctl add-port br-ex eth2, it > stopped my lan communication. > > > The l3 agent makes changes to the routing table. This may cause a conflict > wit

Re: [Openstack] [Swift] Define storage size for specified tenant/user

2013-03-04 Thread Christian Schwede
Storage limit for container is already merged into swift, I just merged swquota into swift for review (I'm the author of swquota ;-)). I think it's a good feature ;-) Christian Am 04.03.13 18:37, schrieb Gareth: > HI, Chomouel > > Do you think storage limit (for account or for container) is go

Re: [Openstack] [Swift] Define storage size for specified tenant/user

2013-03-04 Thread Gareth
HI, Chomouel Do you think storage limit (for account or for container) is good feature in swift? On Tue, Mar 5, 2013 at 1:27 AM, Gareth wrote: > You have many choices, > 1. Chmouel's answer (middleware is a good implementation) > 2. ACL helps you allow or abandon usage of some user, but cannot

Re: [Openstack] [Swift] Define storage size for specified tenant/user

2013-03-04 Thread Gareth
sorry... it's Chmouel On Tue, Mar 5, 2013 at 1:37 AM, Gareth wrote: > HI, Chomouel > > Do you think storage limit (for account or for container) is good feature > in swift? > > > On Tue, Mar 5, 2013 at 1:27 AM, Gareth wrote: > >> You have many choices, >> 1. Chmouel's answer (middleware is a g

Re: [Openstack] [Swift] Define storage size for specified tenant/user

2013-03-04 Thread Gareth
You have many choices, 1. Chmouel's answer (middleware is a good implementation) 2. ACL helps you allow or abandon usage of some user, but cannot give a specified storage limit 3. If you're developer, you could add this feature and merge it into swift. (It's not difficult I think) On Mon, Mar 4,

Re: [Openstack] Doubt quantum script

2013-03-04 Thread Guilherme Russi
Thanks for answering, now I need to realise why my instances aren't being created. 2013/3/4 Gary Kotton > On 03/04/2013 05:45 PM, Guilherme Russi wrote: > > Found the problem, when I did the step: ovs-vsctl add-port br-ex eth2, it > stopped my lan communication. > > > The l3 agent makes change

Re: [Openstack] orchestration engine wrt to openstack api

2013-03-04 Thread Monty Taylor
On 03/04/2013 10:02 AM, Nirlay Kundu wrote: > Which tool would you use for configuration management geared towards > Openstack api : Chef, Puppet, Saltstack ? If anybody has experience with > Saltstack, please let me know the advantages , shortcomings. I would use Heat to orchestrate thing WRT th

Re: [Openstack] Doubt quantum script

2013-03-04 Thread Gary Kotton
On 03/04/2013 05:45 PM, Guilherme Russi wrote: Found the problem, when I did the step: ovs-vsctl add-port br-ex eth2, it stopped my lan communication. The l3 agent makes changes to the routing table. This may cause a conflict with the default gateway. I would suggest having a static route for

Re: [Openstack] Doubt quantum script

2013-03-04 Thread Guilherme Russi
Found the problem, when I did the step: ovs-vsctl add-port br-ex eth2, it stopped my lan communication. Any idea? 2013/3/4 Guilherme Russi > Hello guys, > > I'm installing the openstack folsom again, but now I have a controller > node in a proper physical machine and the network node in anot

Re: [Openstack] VM guest can't access outside world.

2013-03-04 Thread Jeff Peeler
On Wed, Feb 27, 2013 at 12:38:45PM -0800, Barrow Kwan wrote: > [root@optst01 quantum]# service iptables status > Table: nat > Chain PREROUTING (policy ACCEPT) > num target prot opt source destination > 1nova-compute-PREROUTING all -- 0.0.0.0/00.0.0.0/0

Re: [Openstack] Help with keystone LDAP backend

2013-03-04 Thread Dolph Mathews
I'd suggest enabling debug=True in keystone.conf and comparing the LDAP queries being issued (shown in logs) against what you're expecting. I believe that [ldap] query_scope=sub does in fact expand queries to apply to subtrees, beyond just a single level (as the default value is query_scope=one).

[Openstack] orchestration engine wrt to openstack api

2013-03-04 Thread Nirlay Kundu
Which tool would you use for configuration management geared towards Openstack api : Chef, Puppet, Saltstack ? If anybody has experience with Saltstack, please let me know the advantages , shortcomings. Thanks Nirlay

Re: [Openstack] [Swift] Define storage size for specified tenant/user

2013-03-04 Thread Chmouel Boudjnah
Maybe this is what you are looking for : https://github.com/cschwede/swquota Chmouel. On Mon, Mar 4, 2013 at 3:17 PM, jeffty wrote: > Thanks Gareth, > > But how to set the storage limit? The swift is installed in a single > node, and all the authorized user can use the upload. > > The total amo

Re: [Openstack] Cannot access metadata host(169.254.169.254) in folsom

2013-03-04 Thread Sylvain Bauza
Could you please issue 'route -n' on your VM and check if 169.254.0.0/16 does have its own route ? If yes, delete it. Another classic error is to forget to add a static route from the controller node (if hosting metadata service) to the external router IP of the VM (see http://docs.openstack.

Re: [Openstack] Cannot access metadata host(169.254.169.254) in folsom

2013-03-04 Thread vvdbzhi
别用英语了,在lo网卡绑个169.254.169.254就可以了 在 2013-3-4,下午10:29,livemoon 写道: > Hi, I am follow http://docs.openstack.org/folsom/basic-install/content/ and > set up three nodes folsom. > Now I have found my vm cannot get 169.254.169.254 to get cloud-init data. So > I check the network node(quantum), using "

[Openstack] Cannot access metadata host(169.254.169.254) in folsom

2013-03-04 Thread livemoon
Hi, I am follow http://docs.openstack.org/folsom/basic-install/content/ and set up three nodes folsom. Now I have found my vm cannot get 169.254.169.254 to get cloud-init data. So I check the network node(quantum), using "iptables -L -t nat", I have found: Chain quantum-l3-agent-PREROUTING (1 re

Re: [Openstack] Rebooted, now can't ping my guest

2013-03-04 Thread The King in Yellow
On Mon, Mar 4, 2013 at 3:18 AM, Sylvain Bauza wrote: > Is the network node also acting as a Compute node ? > No, I am running three separate nodes-- network, compute and controller. > The issue you were mentioning was related to the tap virtual device (for > DHCP leases) : if the network node

[Openstack] Doubt quantum script

2013-03-04 Thread Guilherme Russi
Hello guys, I'm installing the openstack folsom again, but now I have a controller node in a proper physical machine and the network node in another one, but which of them I execute the quantum-networking script? I'm following this manual http://docs.openstack.org/folsom/basic-install/content/bas

Re: [Openstack] Grizzly-3 development milestone available (Keystone, Glance, Nova, Horizon, Quantum, Cinder)

2013-03-04 Thread Thierry Carrez
David Kranz wrote: > Now that we are at feature freeze, is there a description of > incompatible configuration or api changes that happened since Folsom? > That is, a description of how deploying grizzly differs from deploying > folsom. This is work in progress and lives at: https://wiki.openstac

Re: [Openstack] [Swift] Define storage size for specified tenant/user

2013-03-04 Thread jeffty
Thanks Gareth, But how to set the storage limit? The swift is installed in a single node, and all the authorized user can use the upload. The total amount of storage can be configured and new hard disc can be added into the ring, but I don't know how to divide individual space for a user. I try t

Re: [Openstack] Can not create snapshot

2013-03-04 Thread Wolfgang Hennerbichler
For anybody running into the same troubles: HTTPOverlimit basically meant that glance didn't have enough free space on it's drive (could have thought about that, but I didn't realice that glance was meant). And: http://docs.openstack.org/folsom/openstack-compute/install/apt/content/configure-glan

Re: [Openstack] [OpenStack][Swift] Cifrado 0.1 Swift CLI available

2013-03-04 Thread Martinx - ジェームズ
Damn, lots of people doing the same thing...:-P On 4 March 2013 05:41, Diego Parrilla Santamaría < diego.parrilla.santama...@gmail.com> wrote: > > > * Asymmetric/Symmetric transparent encryption/decryption of files when > > uploading/downloading using GnuPG. > > KimDotCom must be really scar

Re: [Openstack] [OpenStack][Swift] Cifrado 0.1 Swift CLI available

2013-03-04 Thread Diego Parrilla Santamaría
> * Asymmetric/Symmetric transparent encryption/decryption of files when > uploading/downloading using GnuPG. KimDotCom must be really scared! Are you going to build an alternative to MEGA.co.nz based on Swift ? ;-) Nice stuff man! Diego -- Diego Parrilla *CEO* *www.

Re: [Openstack] Rebooted, now can't ping my guest

2013-03-04 Thread Sylvain Bauza
Is the network node also acting as a Compute node ? The issue you were mentioning was related to the tap virtual device (for DHCP leases) : if the network node goes down, then the DHCP lease is expiring on the vm without being reack, and then your instance is loosing its IP address. By recreati