Re: [Openstack] DHCP release

2013-03-23 Thread Nathanael Burton
On Mar 23, 2013 4:02 AM, David Hill david.h...@ubisoft.com wrote: From: Robert Collins [robe...@robertcollins.net] Sent: March 23, 2013 02:21 To: David Hill Cc: Kevin Stevens; openstack@lists.launchpad.net Subject: Re: [Openstack] DHCP release On

Re: [Openstack] Project quotas on multi-region

2013-03-23 Thread Nathanael Burton
On Mar 23, 2013 7:59 PM, Aguiar, Glaucimar (Brazil RD-ECL) glaucimar.agu...@hp.com wrote: Hi, In a deployment scenario where one keystone has several regions registered, how the project quota are managed by, as an example, two nova services in two different regions? I am wondering if is it

Re: [Openstack] DHCP lease not accepted when libvirt_use_virtio_for_bridges=true

2013-03-20 Thread Nathanael Burton
On Wed, Mar 20, 2013 at 3:51 PM, Lorin Hochstein lo...@nimbisservices.comwrote: I'm doing a Folsom deployment with FlatDHCP (not multihost). When I try to boot a quantal image, the instance doesn't pick up the DHCP lease. I've confirmed that dnsmasq is sending out the DHCPOFFER, and I can

Re: [Openstack] nova-compute and querying keystone for glance endpoint

2013-03-19 Thread Nathanael Burton
On Tue, Mar 19, 2013 at 11:39 PM, Lorin Hochstein lo...@nimbisservices.comwrote: Hi All: I was doing a Folsom deployment from scratch, and when I tried to launch an instance my compute host failed to connect to the glance server to download the image, instead it tried to connect to itself.

Re: [Openstack] nova-compute and querying keystone for glance endpoint

2013-03-19 Thread Nathanael Burton
On Mar 19, 2013 11:56 PM, Lorin Hochstein lo...@nimbisservices.com wrote: OK, so I'm not crazy, that means that I really do need to do something like: glance_api_servers=192.168.206.130:9292 or (since the default port is used) glance_host=192.168.206.130 Lorin Kinda, if using

Re: [Openstack] git review failure

2013-03-17 Thread Nathanael Burton
Ensure you have the ssh key(s) you are using registered here: https://review.openstack.org/#/settings/ssh-keys What error do you get when you run ssh with the verbose flags -vvv? You might need to pass the path to your private ssh key, with -i. When it works you should get this:

Re: [Openstack] Authorization Question

2013-03-04 Thread Nathanael Burton
Dolph, In our deployments we often want to restrict projects to particular endpoints or regions. We've currently hacked that in to our Folsom systems by adding a 'regions' list to the 'extra' column of the tenant table. With only a few minor tweaks to keystone to return the filtered service

Re: [Openstack] cannot restart the instance

2013-01-06 Thread Nathanael Burton
How did you shut off your instance? Are you sure you didn't terminate it? Does nova list or euca-describe-instances still show information about this instance? Nate On Jan 6, 2013 12:46 PM, 小盆儿 zhaopeng1...@gmail.com wrote: no one knows how to fix this? help me please 2012/12/31 小盆儿

Re: [Openstack] Openstack Version (Essex or Folsom)

2013-01-06 Thread Nathanael Burton
By default, this requires the admin role to launch instances on specific hosts. Nate On Jan 6, 2013 1:24 PM, Umar Draz unix...@gmail.com wrote: Hi 1) How I can check which Release of Openstack I am using. 2) I want to boot instance on specific compute-node using this command nova boot

Re: [Openstack] Openstack Version (Essex or Folsom)

2013-01-06 Thread Nathanael Burton
On Jan 6, 2013 1:43 PM, Umar Draz unix...@gmail.com wrote: I am Admin and I used this command on Controller node as root, then what else admin? Best Regards, Umar Umar, The OpenStack user account that you are using to launch instances needs to have the admin role in keystone for the

Re: [Openstack] Openstack Version (Essex or Folsom)

2013-01-06 Thread Nathanael Burton
Ah! It looks like you've changed the default availability zone for your two nodes. Host compute1 is in AZ compute1, host compute2 is in AZ compute2. What does nova-manage service list show? How about trying the following to boot an instance on compute2 (basically the format of the value for the

Re: [Openstack] floating ip takes a long time to be accessible

2012-12-17 Thread Nathanael Burton
On Dec 17, 2012 2:05 PM, Xin Zhao xz...@bnl.gov wrote: Hello, I allocate 2 public ips to instances, the first one becomes accessible almost immediately, but the second one always take a long time to be pingable. It doesn't matter which specific IP is assigned first or second, it's always the

Re: [Openstack] Quantum bridge mapping dhcp default route (optsfile tag:tag0 setting?)

2012-11-30 Thread Nathanael Burton
Usually the line in dnsmasq.conf looks like this (below). Haven't used Quantum yet so don't know if the 'dhcp-option=' part being missing is the problem or not. dhcp-option=tag:'unicorns',option:router,172.16.100.1 Nate On Nov 30, 2012 12:10 PM, Robert van Leeuwen

Re: [Openstack] A point in my mind which may be already implemented

2012-11-04 Thread Nathanael Burton
On Nov 4, 2012 9:36 AM, Nah, Zhongyue zhongyue@intel.com wrote: I use the log files beneath /var/log/project name to do what you've described manually. If you want a web interface, you should implement a custom notifier class(for Nova) to gather the logs into a specific channel and

Re: [Openstack] Fwd: [openstack-dev] [keystone] Tokens representing authorization to projects/tenants in the Keystone V3 API

2012-10-21 Thread Nathanael Burton
On Oct 21, 2012 12:11 PM, Joe Savak joe.sa...@rackspace.com wrote: +1. ;) So the issue is that the v2 API contract allows a token to be scoped to multiple tenants. For v3, I'd like to have the same flexibility. I don't see security issues, as if a token were to be sniffed you can change the

Re: [Openstack] dnsmasq stops talking to instances?

2012-10-19 Thread Nathanael Burton
I've noticed similar behavior where dnsmasq stops working if nova-network is restarted without first killing all the dnsmasq processes. On Oct 19, 2012 10:24 AM, Lars Kellogg-Stedman l...@seas.harvard.edu wrote: On Thu, Oct 18, 2012 at 06:16:07PM +0100, Ronivon Costa wrote: I have noticed a

Re: [Openstack] Error while installing Nova (OpenStack-Essex)

2012-10-16 Thread Nathanael Burton
Pavan, The message is not an error but a warning that a particular python call (Pool.add_listener) is deprecated and will be removed in a future version of the module. Thanks, Nate On Oct 16, 2012 11:20 AM, Pavan Kulkarni pavan.babu...@gmail.com wrote: Hi, I am trying to install Openstack

Re: [Openstack] Error while installing Nova (OpenStack-Essex)

2012-10-16 Thread Nathanael Burton
://forums.openstack.org/viewtopic.php?f=16t=611 But am not sure if I can go ahead and use the same steps in RHEL. Anyone has any idea how to resolve this issue ? Any help is appreciated. Thanks On Tue, Oct 16, 2012 at 11:25 AM, Nathanael Burton nathanael.i.bur...@gmail.com wrote: Pavan

Re: [Openstack] When will the distro (specifically Ubuntu) have package for Folsom release

2012-10-01 Thread Nathanael Burton
From the release notes: http://wiki.openstack.org/ReleaseNotes/Folsom#Ubuntu_12.04_.2BAC8_Ubuntu_12.10 On Oct 1, 2012 1:17 PM, Matt Joyce matt.jo...@cloudscaling.com wrote: I am not sure indecently was the word you were looking for there. But I gather you are asking if Ubuntu is packaging

Re: [Openstack] [openstack-dev] [nova] Disk attachment consistency

2012-08-13 Thread Nathanael Burton
On Aug 13, 2012 11:37 PM, Vishvananda Ishaya vishvana...@gmail.com wrote: The second proposal I have is to use a feature of kvm attach and set the device serial number. We can set it to the same value as the device parameter. This means that a device attached to /dev/vdb may not always be at

Re: [Openstack] Setting Expectations

2012-08-10 Thread Nathanael Burton
I personally equate OpenStack to the Linux Kernel. It's the foundation and core components that, in OpenStack's case, make up an Infrastructure as as Service (IaaS) system, a cloud kernel. We should expect the core components and APIs to be stable with sane deprecation policies, but OpenStack

Re: [Openstack] keystone and ssl ?

2012-08-03 Thread Nathanael Burton
Pierre, In Diablo and Essex it is a common deployment pattern to serve Keystone via SSL proxy or run Keystone as a mod_wsgi application directly. Running like this provides connection security between the clients and the Keystone server. Adam Young provided a good example of doing this via

Re: [Openstack] Keystone: 'PKI Signed Tokens' lack support for revocation

2012-08-02 Thread Nathanael Burton
Adam, I haven't yet had a chance to review how the new PKI signed tokens is implemented, but what you're describing sounds quite similar to online certificate status protocol (OCSP) but for tokens. Nate On Aug 2, 2012 10:24 PM, Adam Young ayo...@redhat.com wrote: On 08/01/2012 11:05 PM, Maru

Re: [Openstack] [Nova] proposal to provide project specific instance type

2012-07-28 Thread Nathanael Burton
unicell, I've also wanted the same functionality. I think it's an important feature for private cloud deployments. Thanks, Nate On Jul 28, 2012 1:15 AM, unicell unic...@gmail.com wrote: Hi, In our use case, there is a need to provide project-specific instance type. Meaning that this

Re: [Openstack] Weird nova-network bridging problem with precise/essex

2012-07-16 Thread Nathanael Burton
Narayan, Are you doing bonding in conjunction with your bridging + vlans? Or is it just a single interface backing the vlan_interface? Nate On Jul 16, 2012 9:55 PM, Narayan Desai narayan.de...@gmail.com wrote: We're running into what looks like a linux bridging bug, which causes both

Re: [Openstack] Routing ReST API Calls by URL

2012-07-13 Thread Nathanael Burton
Dan, Adam Young was advocating for something like this. I don't know if a consensus was ever reached, but I thought it was a good idea. https://lists.launchpad.net/openstack/msg10864.html Nate On Jul 13, 2012 5:31 PM, Dan Sneddon d...@cloudscaling.com wrote: I am attempting to find a

Re: [Openstack] Nova Cells

2012-07-12 Thread Nathanael Burton
That's a good question. I'm also interested in an update on cells. How is progress on cells going? Is there a blueprint for it? Is it targeted to a folsom milestone? Thanks, Nate On Thu, Jul 12, 2012 at 1:39 PM, Michael J Fork mjf...@us.ibm.com wrote: Outside of the Etherpad

Re: [Openstack] nova-network can't start

2012-07-05 Thread Nathanael Burton
William, Are you running on RHEL or CentOS by chance? See this: https://lists.launchpad.net/openstack/msg02565.html Thanks, Nate On Jul 5, 2012 9:47 AM, William Herry william.herry.ch...@gmail.com wrote: the error log is here: File

Re: [Openstack] Managing projects roles and quotas (Dashboard -vs- nova-manage)

2012-07-05 Thread Nathanael Burton
Jon, When manipulating quotas via 'nova-manage project quota' ensure that you are using the tenant_id and not the name. nova-manage will silently accept the project/tenant name instead of the tenant_id. Thanks, Nate On Jul 5, 2012 10:48 PM, Jonathan Proulx j...@jonproulx.com wrote: Hi All,

Re: [Openstack] OpenStack G naming poll

2012-07-03 Thread Nathanael Burton
+1 for Grizzly On Jul 3, 2012 8:02 PM, Brian Waldon brian.wal...@rackspace.com wrote: TL;DR - Screw the rules, let's call the next release 'Grizzly' As California is rather lacking in the 'municipality names starting with a G that we should use for an OpenStack release' department, I have had

Re: [Openstack] multi_host not working

2012-07-02 Thread Nathanael Burton
This is actually what multi_host should be doing when enabled. What node is that original gateway address from? Is that a different compute node? Nate On Mon, Jul 2, 2012 at 8:41 AM, Marnus van Niekerk m...@mjvn.net wrote: I have managed to get this working by changing the default gateway on

Re: [Openstack] multi_host not working

2012-07-02 Thread Nathanael Burton
Are the nova.conf files identical across all the nodes? On Jul 2, 2012 10:47 AM, Marnus van Niekerk m...@mjvn.net wrote: On 02/07/2012 16:14, Nathanael Burton wrote: This is actually what multi_host should be doing when enabled. What node is that original gateway address from

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-02 Thread Nathanael Burton
I agree with Daniel for the qemu-img commands. For other temp file usage, I know on Fedora/RHEL there's already /var/lib/nova/tmp which is used for lock files, etc. Nate On Jul 2, 2012 4:29 PM, Daniel P. Berrange berra...@redhat.com wrote: On Mon, Jul 02, 2012 at 10:24:02AM -0700, Matt Joyce

Re: [Openstack] When are hostnames okay and when are ip addresses required?

2012-06-28 Thread Nathanael Burton
While at a minimum this is a doc bug, I would suggest we do one of the following: 1. Rename existing parameters that require the value to be an ip address such as 'metadata_host' to 'metadata_host_ip' so that it is more obvious. Make this a standard for all config parameters. 2. I agree with

Re: [Openstack] HVM + Xen Hypervisor via libvirt possible?

2012-06-21 Thread Nathanael Burton
Seems like an attribute that could be added to instance types / flavors that could be passed on to the scheduler and virt layers. Nate On Jun 21, 2012 2:12 PM, Daniel P. Berrange berra...@redhat.com wrote: On Fri, Jun 22, 2012 at 12:17:11AM +0800, Huang Zhiteng wrote: Of course it is

Re: [Openstack] glance_api_servers vs. glance_host vs. keystone?

2012-06-18 Thread Nathanael Burton
What's the point of a service catalog (list of endpoints) if we don't want to use it?! Looking up endpoints should be a cacheable request and in the grand scheme of things -- low impact. Nate On Jun 18, 2012 10:13 AM, Kevin L. Mitchell kevin.mitch...@rackspace.com wrote: On Fri, 2012-06-15 at

Re: [Openstack] instances loosing IP address while running, due to No DHCPOFFER

2012-06-14 Thread Nathanael Burton
Has nova-network been restarted? There was an issue where nova-network was signalling dnsmasq which would cause dnsmasq to stop responding to requests yet appear to be running fine. You can see if killing dnsmasq, restarting nova-network, and rebooting an instance allows it to get a dhcp address

Re: [Openstack] instances loosing IP address while running, due to No DHCPOFFER

2012-06-14 Thread Nathanael Burton
server (dnsmasq) almost right after it got a lease on instance boot. So long, Christian. On Thu, Jun 14, 2012 at 10:55 PM, Nathanael Burton nathanael.i.bur...@gmail.com wrote: Has nova-network been restarted? There was an issue where nova-network was signalling dnsmasq which would cause

Re: [Openstack] instances loosing IP address while running, due to No DHCPOFFER

2012-06-14 Thread Nathanael Burton
FWIW I haven't run across the dnsmasq bug in our environment using EPEL packages. Nate On Jun 14, 2012 7:20 PM, Vishvananda Ishaya vishvana...@gmail.com wrote: Are you running in VLAN mode? If so, you probably need to update to a new version of dnsmasq. See this message for reference:

Re: [Openstack] how to set individual gateway for each VLAN or Tenant network?

2012-06-12 Thread Nathanael Burton
, at 2:17 PM, Nathanael Burton wrote: dnsmasq supports setting parameters such as the gateway IP and other settings based on tag. I have run a patched version of nova-network in the Diablo time that used the network DB label field as the network tag in dnsmasq. This then allows you to set custom

Re: [Openstack] how to set individual gateway for each VLAN or Tenant network?

2012-06-12 Thread Nathanael Burton
this into the docs. Take care, Lorin -- Lorin Hochstein Lead Architect - Cloud Services Nimbis Services, Inc. www.nimbisservices.com On Jun 12, 2012, at 11:10 AM, Nathanael Burton wrote: Lorin, Diego, I wrote up a pastebin of setting up an example dnsmasq.conf file, setting

Re: [Openstack] how to set individual gateway for each VLAN or Tenant network?

2012-06-11 Thread Nathanael Burton
dnsmasq supports setting parameters such as the gateway IP and other settings based on tag. I have run a patched version of nova-network in the Diablo time that used the network DB label field as the network tag in dnsmasq. This then allows you to set custom configs by modifying the dnsmasq.conf

Re: [Openstack] nova-api error on centos (devstack installation)

2012-05-22 Thread Nathanael Burton
Verify the permissions on all the files in /etc/nova including api-paste.ini. I've seen errors like that when nova can't read the conf file due to permissions. Nate On May 22, 2012 5:42 AM, Mauch, Viktor (SCC) ma...@kit.edu wrote: Hello together, In the last days a played with multi-node

Re: [Openstack] nova-manage network create does not create the bridges/vlans immediately

2012-05-16 Thread Nathanael Burton
On May 16, 2012 9:47 PM, Omar Lara o...@scasoftware.net wrote: Hi, i am trying to deploy a VlanManager networking model in Essex, i am not using Quantum, and my problem is when i try to do: nova-manage network create --label vlan1 --fixed_range_v4 10.0.1.0/24--num_networks 1 --network_size

Re: [Openstack] db notification support for API extension?

2012-04-25 Thread Nathanael Burton
On Thu, Mar 8, 2012 at 11:53 AM, Andrew Bogott abog...@wikimedia.org wrote:    I'm working on an API and implementation to support the creation of filesystems that are shared among Nova instances. http://wiki.openstack.org/SharedFS    My hope is to keep this API isolated from core Nova code,

Re: [Openstack] db notification support for API extension?

2012-04-25 Thread Nathanael Burton
On Wed, Apr 25, 2012 at 6:04 PM, Andrew Bogott abog...@wikimedia.org wrote: Nate -- The short answer is:  I'm sure that it's straightforward to create a 'private' table which doesn't collide with existing nova tables, but I have yet to do so. The longer answer is:  Everything about that

Re: [Openstack] nova-network service stuck

2012-04-14 Thread Nathanael Burton
Check in Nova's lock dir, on my system it's /var/lib/nova/tmp. Remove any files in there and restart the services. Nate On Apr 14, 2012 8:56 PM, Salman Malik salma...@live.com wrote: Hi All, I am having problem with getting nova-service to work. The last line that is shown on the screen is:

Re: [Openstack] nova-network service stuck

2012-04-14 Thread Nathanael Burton
Salman, The location for the locks is determined by the --lock_path setting in nova.conf. This is apparently set to the base path where the nova python code lives ($pybasedir) in devstack: 2012-04-14 21:35:42 DEBUG nova.service [-] lock_path : /opt/stack/nova from (pid=3700) wait

Re: [Openstack] Agreeing a common set of Image Properties

2012-04-07 Thread Nathanael Burton
Better yet why not add support in Glance for automatically determining those things (distro, versions, etc)[1]. That way you don't have to rely on people doing the right thing. Nate References: [1] - http://libguestfs.org/virt-inspector.1.html#getting_inspection_data_from_the_libguestfs_api On

Re: [Openstack] Agreeing a common set of Image Properties

2012-04-07 Thread Nathanael Burton
Looks like Pádraig and I were thinking alike. On Apr 7, 2012 8:49 PM, Pádraig Brady p...@draigbrady.com wrote: On 04/07/2012 11:13 PM, Justin Santa Barbara wrote: Is there a (de-facto) standard for image metadata/properties? I'd like to be able to able to launch e.g. the Debian Squeeze image

Re: [Openstack] Agreeing a common set of Image Properties

2012-04-07 Thread Nathanael Burton
On Apr 7, 2012 9:25 PM, Justin Santa Barbara jus...@fathomdb.com wrote: Thanks Padraig Nathanael - virt-inspector is a great source of inspiration. Can we put the virt-inspector output into a glance property? Would all the clouds agree to do that? I still would also like simpler metadata,

Re: [Openstack] Instance fails to spawn when instance_path is nfs mounted

2012-04-03 Thread Nathanael Burton
I had a problem like this when the umask was locked down. Setting the umask to 022 in the init script for nova-compute solved my problem. On Tue, Apr 3, 2012 at 1:56 PM, Diego Parrilla Santamaría diego.parrilla.santama...@gmail.com wrote: We use nfs backed instances a lot, and this problem

Re: [Openstack] Keystone should to Apache HTTPD.

2012-03-01 Thread Nathanael Burton
I like the recommendation. Particularly with regards to using PKI authentication. On Thu, Mar 1, 2012 at 2:05 PM, Adam Young ayo...@redhat.com wrote: I wrote up why I think that, at least for Keystone, we should move the front end over to Apache HTTPD.

Re: [Openstack] RHEL / CentOS - interfaces.template

2012-02-14 Thread Nathanael Burton
The Fedora / EPEL packaging does this. http://fedoraproject.org/wiki/OpenStack http://koji.fedoraproject.org/koji/packageinfo?packageID=12510 Thanks, Nate On Tue, Feb 14, 2012 at 1:23 PM, Leandro Reox leandro.r...@gmail.com wrote: Hi guys, Anyone already implemented networking injection to

Re: [Openstack] Keystone: Redux (Dubstep Remix)

2012-02-14 Thread Nathanael Burton
Are keystone light and keystone redux the same thing? Or is one just a light beer? ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help :

[Openstack] multi_host networking, but not on all nodes?

2012-02-07 Thread Nathanael Burton
With the default networking there's a single nova-network service. With the --multi_host option, 'set_network_host' sets every instance to use their host as the nova-network node, effectively requiring nova-network to run on every nova-compute. The multi_host mode greatly helps HA and

Re: [Openstack] [Nova] Essex dead wood cutting

2012-02-06 Thread Nathanael Burton
+1!! On Feb 6, 2012 5:38 AM, Daniel P. Berrange berra...@redhat.com wrote: On Thu, Feb 02, 2012 at 11:52:17AM +, Armando Migliaccio wrote: To the best of my knowledge, the ESXi support is up to date. There may be bugs, but which virt driver is perfect ;)? Sateesh may know more,

Re: [Openstack] Remove Zones code - FFE

2012-02-01 Thread Nathanael Burton
+1 On Feb 1, 2012 4:13 PM, Vishvananda Ishaya vishvana...@gmail.com wrote: I would prefer that if it can be done super-super fast. :) Vish On Feb 1, 2012, at 1:04 PM, Chris Behrens wrote: I wonder if we can use some of the architecture of the new code and move the current implementation

Re: [Openstack] Error whence starting nova-network - iptables-restore

2011-10-07 Thread Nathanael Burton
You've probably got a bad security group rule applied (there isn't good input validation), which causes iptables-restore to fail on the bad rule. On Oct 7, 2011 9:11 AM, Jorge Luiz Correa corre...@gmail.com wrote: Hi! I would like some help with nova-network. Yestarday it was working and now

Re: [Openstack] some newbie questions

2011-08-03 Thread Nathanael Burton
Actually the VNC display number varies based on how many instances may be running on the node. Login to the box and run virsh list to list the instances and get the domain id of the one in question. Then run virsh vncdisplay id and it will output the VNC display number. :0 means 5900, :1 means