[Openstack] Summit conference session?

2013-03-14 Thread andi abes
Is there a listing of the summint conference (not the design part at [1]) available somewhere? (there used to be the vote for speakers list, but that now is gone). [1] http://summit.openstack.org/ ___ Mailing list: https://launchpad.net/~openstack Post

Re: [Openstack] Comparing OpenStack to OpenNebula

2013-02-25 Thread andi abes
On Mon, Feb 25, 2013 at 5:46 PM, Shawn Starr shawn.st...@rogers.com wrote: On Monday, February 25, 2013 10:34:11 PM Jeremy Stanley wrote: On 2013-02-25 06:20 -0500 (-0500), Shawn Starr wrote: [...] I see no options on how to control what nova-compute nodes can be 'provisioned' into

Re: [Openstack] Distributed configuration database

2012-11-03 Thread andi abes
On Sat, Nov 3, 2012 at 9:30 AM, Aniruddha Khadkikar askhadki...@gmail.com wrote: @Rob - excellent points. It would be good to know in real life deployments how often are configurations changed so the question of network interruptions are handled in a befitting way. It is my impression that

Re: [Openstack] Expanding Storage - Rebalance Extreeemely Slow (or Stalled?)

2012-10-23 Thread andi abes
On Tue, Oct 23, 2012 at 12:16 PM, Emre Sokullu e...@groups-inc.com wrote: Folks, This is the 3rd day and I see no or very little (kb.s) change with the new disks. Could it be normal, is there a long computation process that takes time first before actually filling newly added disks? Or

Re: [Openstack] [OSSA 2012-016] Token authorization for a user in a disabled tenant is allowed (CVE-2012-4457)

2012-09-28 Thread andi abes
is the plan going forward to announce these on friday afternoons? On Fri, Sep 28, 2012 at 4:50 PM, Russell Bryant rbry...@redhat.com wrote: OpenStack Security Advisory: 2012-016 CVE: CVE-2012-4457 Date: September 28, 2012 Title: Token authorization for a user in a disabled tenant is allowed

Re: [Openstack] [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3540)

2012-09-13 Thread andi abes
Has a fix for this been backported to essex/stable branch? On Thu, Aug 30, 2012 at 11:35 AM, Russell Bryant rbry...@redhat.com wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 This advisory included the wrong CVE. It was CVE-2012-3540. Sorry about that. On 08/30/2012 11:10 AM,

Re: [Openstack] Quantum vs. Nova-network in Folsom

2012-09-05 Thread andi abes
late to the party... but I'll dabble. On Mon, Aug 27, 2012 at 12:21 PM, Chris Wright chr...@sous-sol.org wrote: * rob_hirschf...@dell.com (rob_hirschf...@dell.com) wrote: We've been discussing using Open vSwitch as the basis for non-Quantum Nova Networking deployments in Folsom. While not

Re: [Openstack] DHCP and kernel 3.2

2012-09-05 Thread andi abes
I've heard of folks having issues with UDP checksum not being generated correctly, and having success by running the command below on the nova compute nodes. iptables -A POSTROUTING -t mangle -p udp --dport 68 -j CHECKSUM --checksum-fill I'm not sure if this affects the versions you're working

Re: [Openstack] Quantum vs. Nova-network in Folsom

2012-09-05 Thread andi abes
On Wed, Sep 5, 2012 at 1:01 PM, Dan Wendlandt d...@nicira.com wrote: On Wed, Sep 5, 2012 at 5:23 AM, andi abes andi.a...@gmail.com wrote: late to the party... but I'll dabble. On Mon, Aug 27, 2012 at 12:21 PM, Chris Wright chr...@sous-sol.org wrote: * rob_hirschf...@dell.com (rob_hirschf

[Openstack] Fwd: nova-compute on VirtualBox with qemu

2012-08-27 Thread andi abes
-- Forwarded message -- From: andi abes andi.a...@gmail.com Date: Mon, Aug 27, 2012 at 1:54 PM Subject: nova-compute on VirtualBox with qemu To: openstack-operat...@lists.openstack.org I'm using Essex on virtual box, and am having some issues getting nova-compute to not hate me

Re: [Openstack] Swift performance for very small objects

2012-05-22 Thread andi abes
Remember that when an object is written to swift, it's not written just to the object server, the container and account servers are updated as well... the container for object listings (and timestmaps) and the account for overall statistics. Also, the proxy ensures a quorum for the newly written

[Openstack] Boston UG

2012-05-15 Thread andi abes
Quick note about our next meetup, morrow 5/16, @ Harvard University. If you happen to be in Boston area, come eat some pizza, get to know some cool folks and have some Openstack shop-talk (if you're commuting, fear not the parking. There are instructions on getting cheap parking at Harvard

Re: [Openstack] swift indexation

2012-04-30 Thread andi abes
swift updates the account and container listings as containers and objects are created. So, if what you're looking for is a list of objects or containers... your can just query the proxy: A GET on the tenant url would return the list of containers, a GET on a container will return the list of

Re: [Openstack] Code contribution

2012-04-27 Thread andi abes
the full setup is described here: http://wiki.openstack.org/GerritJenkinsGithub On Fri, Apr 27, 2012 at 2:42 PM, John Postlethwait john.postlethw...@nebula.com wrote: If you are asking how it becomes approved the answer is that two core-contributors of the specific project need to manually

Re: [Openstack] raw or qcow2

2012-04-25 Thread andi abes
So the ability to create a snapshot, rollback to a snapshot and to create a new snapshot that references a snapshot as its base are strong candidates for abilities to design for volume drivers. Any device that did not support this capability would simply state so. Snapshotting would then

Re: [Openstack] raw or qcow2

2012-04-25 Thread andi abes
On Wed, Apr 25, 2012 at 3:39 PM, Caitlin Bestler caitlin.best...@nexenta.com wrote: andi.abes asked: Would this also be applicable to the ephemeral instance storage? An ephemeral instance is essentially a non-persistent clone of a snapshot image. that's an interesting perspective. But

[Openstack] [quantum] summit slides for clearpath service insertion

2012-04-23 Thread andi abes
During the summit, there was an API proposal for service insertion, present by folks from Clear path. Does anyone have links? a. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe :

Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread andi abes
Caitlin, I'm curious what were the use cases and concerns in DCB? If my memory serves me right (from rate limiting at L2 level) the main issues are guaranteeing QoS, effective bandwidth usage, fair allocation of memory buffer space. All of those goals damaged pretty badly if congestion occurs and

Re: [Openstack] Question on wsgi rate limiting

2012-03-30 Thread andi abes
than the traditional bandwidth only rate limits. On Fri, Mar 30, 2012 at 2:40 PM, Caitlin Bestler caitlin.best...@nexenta.com wrote: Caitlin Replies inline /Caitlin -Original Message- From: andi abes [mailto:andi.a...@gmail.com] Sent: Friday, March 30, 2012 11:32 AM To: Jay Pipes

Re: [Openstack] Crowbar problem (using Rob's ISO)

2012-03-26 Thread andi abes
Hi Salman, a) it might be more appropriate to post Crowbar specific questions on the crowbar mailing list... crow...@lists.us.dell.com b) The errors you're seeing seem to be cause the node failing to communicate with the admin node (it did for a while, then something changed...). That code is

Re: [Openstack] OpenStack Installation Woes - Need re-assurance and help.

2012-03-13 Thread andi abes
bugs as I'm not getting anywhere fast with what I currently *think* are the correct steps. Cheers, Kev On 13 March 2012 11:27, andi abes andi.a...@gmail.com wrote: Hi Kevin, sorry for the hard time you're having. However, most of the methods you described, are NOT meant for production

Re: [Openstack] Enabling data deduplication on Swift

2012-03-11 Thread andi abes
On Sun, Mar 11, 2012 at 3:49 PM, Caitlin Bestler caitlin.best...@nexenta.com wrote: Restricting fingerprinting to blocks would make block level compares possible, but as I noted on an earlier reply it would *always* require that the blocks be transferred to perform the calculation. It is a

Re: [Openstack] [CHEF] How to structure upstream OpenStack cookbooks?

2012-03-10 Thread andi abes
I like where this discussion is going. So I'd like to throw a couple more sticks into the fire, around test/SAIO vs production deployments.. * Swift cookbooks (and in general) should not assume control of system side resources, but rather use the appropriate cookbook (or better yet definition if

Re: [Openstack] Enabling data deduplication on Swift

2012-03-10 Thread andi abes
Maybe a happy path exists, between efficiency and correctness ;) I think the Rsync is probably a good comparison to the use case at hand (it identifies identical blocks between the source and target, and only sends deltas of the wire). It combines a quick has to identify candidates that might be

Re: [Openstack] [Netstack] Interaction between nova and melange : ip fixed not found

2012-02-29 Thread andi abes
2012/2/29 Dan Wendlandt d...@nicira.com: 2012/2/29 Jérôme Gallard jeronimo...@gmail.com Hi Jason, Thank you very much for your answer. The problem about the wrong ip address is solved now! Perhaps this octect should be excluded automatically by nova at the network creation time? I

Re: [Openstack] [CHEF] Aligning Cookbook Efforts

2012-02-28 Thread andi abes
On Tue, Feb 28, 2012 at 2:44 PM, Jay Pipes jaypi...@gmail.com wrote: cc'ing list, since it's a great question and good follow-up conversation to have... On 02/28/2012 02:32 PM, andi abes wrote: Interesting. Would you mind doing a code review on Mary Newby's Swift All in One cookbook

[Openstack] Essex-4 Installfest March 8, 2012

2012-02-22 Thread andi abes
Essex-4 is almost here, and once it comes out, you’d probably want to install it. A bunch of folks from across the country and across Dell, Rackspace, OpsCode, Niciria, Nokia and more, will be getting together on an IRC/Skype (and in person) to hash out deployment issues to get the major

Re: [Openstack] Remove Zones code - FFE

2012-02-20 Thread andi abes
On Sun, Feb 19, 2012 at 8:57 PM, Ed Leafe ed.le...@rackspace.com wrote: On Feb 19, 2012, at 12:53 PM, Mark Washenberger wrote: For this reason, whatever name we choose I would hope we prefix it with compute- (i.e. compute-zone or compute-cell) so that we aren't letting language trick us out

Re: [Openstack] Object Storage Swift on rhel6.0

2012-02-20 Thread andi abes
You can find details on configuring swift here: http://swift.openstack.org/deployment_guide.html To get packages for RHEL, it seems that the fedora project packages, http://rpmfind.net/linux/rpm2html/search.php?query=openstack-swiftsubmit=Search+...system=arch= hth, a On Sun, Feb 19, 2012 at

Re: [Openstack] [CHEF] Aligning Cookbook Efforts

2012-02-16 Thread andi abes
On Wed, Feb 8, 2012 at 11:42 AM, Jay Pipes jaypi...@gmail.com wrote: On 02/08/2012 01:40 AM, Monty Taylor wrote: On 02/07/2012 08:32 PM, Jay Pipes wrote: Well, in my original email I proposed using the NTT PF Lab branch point for the stable/diablo branch of the upstream chef repos. If we

Re: [Openstack] Keystone Swift: swiftauth tenant namespace collisions?

2012-02-10 Thread andi abes
To summarize the intent: - we add a string UID to the database schema - For deployments with the integer ID, we copy that into the UID field - For deployments where the ID is a string (cactus and pre-Diablo) we copy that into the UID field - We use the UID field in the

Re: [Openstack] mailing list etiquette

2012-02-08 Thread andi abes
On Wed, Feb 8, 2012 at 7:59 AM, Chmouel Boudjnah chmo...@openstack.orgwrote: Mark McLoughlin mar...@redhat.com writes: I wrote this some time ago: https://fedorahosted.org/rhevm-api/wiki/Email_Guidelines If it's helpful, I'm happy to move it across to the OpenStack wiki +1 +1 to

Re: [Openstack] [CHEF] Aligning Cookbook Efforts

2012-02-07 Thread andi abes
apologies for possible duplicates - some replies last night were from the wrong email account (and didn't make it to the list) On Mon, Feb 6, 2012 at 9:37 PM, Jesse Andrews anotherje...@gmail.comwrote: I know that the RCB deploy team works with the Crowbar team on chef recipes for that

[Openstack] mailing list etiquette

2012-02-07 Thread andi abes
I've seen a few folks apologizing for top-posts and a few pokes in some threads about folks with less than intelligent email clients. Which leads me to ask: are there any pointers to best practices on the mailing list? (replying to the right message in a thread, ideally inline with the context -

Re: [Openstack] mailing list etiquette

2012-02-07 Thread andi abes
On Tue, Feb 7, 2012 at 1:33 PM, Jay Pipes jaypi...@gmail.com wrote: On 02/07/2012 01:08 PM, andi abes wrote: I've seen a few folks apologizing for top-posts and a few pokes in some threads about folks with less than intelligent email clients. Which leads me to ask: are there any pointers

Re: [Openstack] Swift Consistency Guarantees?

2012-01-20 Thread andi abes
I'm finding this thread a bit confusing. You're comparing offered SERVICES to Software. While some of the details of the software will dictate what's possible, some are heavily dependent on how you deploy the swift software, and what kind of deployment decisions you (or your service provider)

Re: [Openstack] Swift Consistency Guarantees?

2012-01-20 Thread andi abes
nice reply ;) On Fri, Jan 20, 2012 at 6:35 PM, Pete Zaitcev zait...@redhat.com wrote: On Fri, 20 Jan 2012 15:17:32 -0500 Nikolaus Rath nikol...@rath.org wrote: Thanks! So there is no way to reliably get the most-recent version of an object under all conditions. If you bend the

Re: [Openstack] Swift Consistency Guarantees?

2012-01-20 Thread andi abes
You would need to have the following occur, to make your scenario plausible: * you write the object, which places it on a majority of the replica nodes (i.e. 2 out of 3) * replication is slowly churning away, but doesn't quite catch up * both the nodes that have the updated data fail

Re: [Openstack] Using Swift S3 API with Keystone

2012-01-03 Thread andi abes
See http://wiki.openstack.org/GerritWorkflow On Jan 3, 2012, at 8:11, Akira Yoshiyama akirayoshiy...@gmail.com wrote: Hi, I hope to merge my patches to upstream. What should I do? Thank you, Akira Yoshiyama 2012/01/03 21:32 adrian_f_sm...@dell.com: Is it possible to use Swift’s S3 API if

[Openstack] swift enforcing ssl?

2011-12-27 Thread andi abes
Does the swift proxy enforce SSL connections if it's configured with a cert/key file? Or is it assumed that there's an external entity performing that? ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net

Re: [Openstack] [OpenStack] Default User name and Password for Horizon i.e., Openstack-dashboard that i have been installed using [DevStack] script

2011-12-15 Thread andi abes
reading the script.. you either have it in localrc file as *ADMIN_PASSWORD, *or you were prompted during install to type it in. * * On Thu, Dec 15, 2011 at 1:38 PM, sn alaya...@gmail.com wrote: and also the default username of openstack that has been installed using devstack script... On

[Openstack] swfit / keystone auth

2011-12-13 Thread andi abes
I'm getting really funny ( :( ) results trying to get swift to work w/ keystone. A few questions (about keystone 2012.1) a) does the swift middleware work with v1.0 or 2.0 auth? b) are folks using swift-keystone2 or the middleware bundled with keystone (auth_token + swift_auth). c) when trying

Re: [Openstack] Swift - set preferred proxy/datanodes (cross datacenter schema)

2011-12-06 Thread andi abes
You could try to use the container sync added in 1.4.4. The scheme would be to setup 2 separate clusters in each data center. Obviously requests will be satisfied locally. You will also setup your containers identically, and configure them to sync, to make sure data is available in both DC's.

Re: [Openstack] Swift - set preferred proxy/datanodes (cross datacenter schema)

2011-12-06 Thread andi abes
sorry, should have included the link: http://swift.openstack.org/overview_container_sync.html On Tue, Dec 6, 2011 at 2:49 PM, andi abes andi.a...@gmail.com wrote: You could try to use the container sync added in 1.4.4. The scheme would be to setup 2 separate clusters in each data center

Re: [Openstack] how to list all account and get disk usage info?

2011-11-30 Thread andi abes
take a look at this: https://github.com/notmyname/slogging It collects usage information for swift, including storage usage and traffic statistics. (it has pretty good documentation - just build from source in doc/) On Wed, Nov 30, 2011 at 6:45 PM, pf shineyear shin...@gmail.com wrote: my

[Openstack] Boston openstack user group meetup

2011-11-16 Thread andi abes
Just a quick shout out to folks in the Boston and NE area - we're putting the final touch on a meetup on 11/29 in Lexington MA at 6pm. checkout the meetup page, and throw in topics for the unconference discussion here (or just write them on the board that evening):

[Openstack] Most current diablo swift pkgs?

2011-10-24 Thread andi abes
I'm a bit confused with the state of affairs for swift diablo. I've seen notes and checkins for backports to nova from essex, and found https://launchpad.net/~openstack-release/+archive/2011.3 which seems to be the repo for the patched packages... Is that right? Is this the location that will be

Re: [Openstack] dashaboard+keystone+nova+glance work well?

2011-09-28 Thread andi abes
is this just to avoid the need for the long lived token, or are there other issues in dash/keystone integration? 2011/9/28 Devin Carlen devin.car...@gmail.com We should have a drop of Keystone by the end of the week that fully support Diablo. This will fix the Dashboard issues as well.

Re: [Openstack] Is Openstack suitable to my problem?

2011-08-15 Thread andi abes
I think John pointed you to some info on how to achieve the the hierarchical structure requirement The other requirement was around syncing remote clusters: Swift Diablo (1.4) can probably be suited for the scenario you're describing: See the spec for Multi cluster sync for swift [1] and the

Re: [Openstack] Chef Deployment System for Swift - a proposed design - feedback?

2011-08-01 Thread andi abes
can take crowbar for a spin in a virutal environment or on bare metal hw. take it for a spin, drop us a note. (p.s. it subsumes (by a lot) the previous swift-only recipes from this thread, and includes some bug fixes) On Mon, May 23, 2011 at 1:41 PM, andi abes andi.a...@gmail.com wrote

Re: [Openstack] Thinking about Backups/Snapshots in Nova Volume

2011-07-21 Thread andi abes
hmm - they definitely muddy the waters, but provide a really cool feature set: Amazon EBS Snapshots Amazon EBS provides the ability to back up point-in-time snapshots of your data to Amazon S3 for durable recovery. Amazon EBS snapshots are incremental backups, meaning that only the blocks on the

Re: [Openstack] Keystone tenants vs. Nova projects

2011-07-15 Thread andi abes
Yuriy, a use-case scenario for keystone would be a service provider servicing large customers with their own authentication infrastructure (e.g. LDAP/ AD etc). Obviously, different tenants have different instances. To authenticate a user, the correct authentication back end must be selected.

Re: [Openstack] Keystone tenants vs. Nova projects

2011-07-15 Thread andi abes
is one single central repository, DB, LDAP or may be some billing system. If we have two isolated systems, we should consider using two separate auth services. Kind regards, Yuriy. On Fri, Jul 15, 2011 at 21:40, andi abes andi.a...@gmail.com wrote: Yuriy, a use-case scenario for keystone

Re: [Openstack] Keystone tenants vs. Nova projects

2011-07-15 Thread andi abes
, at 15:07, andi abes andi.a...@gmail.com wrote: I guess sfdc disagrees with you - they allow e.g Dell to use a single sign on to authenticate to their services - as a @dell user, you can login with the same email/password to internal resources as well as sfdc ones. ( in case it's not obvious - you

Re: [Openstack] OpenStack Identity: Keystone API Proposal

2011-07-13 Thread andi abes
as shareable among different implementations (Ex: compute:admin) Thoughts? And comments inline ZNS From: Rouault, Jason (Cloud Services) jason.roua...@hp.com Date: Thu, 16 Jun 2011 19:54:22 + To: andi abes andi.a...@gmail.com Cc: Ziad Sawalha ziad.sawa...@rackspace.com, openstack

Re: [Openstack] Need to store the Data using open stack storage

2011-06-29 Thread andi abes
I'm assuming you've the following: - you installed cactus (the 1.3 release) - you're playing both the provider role (administrating users and such) and the end user (creating files and containers). I that is the case, then you should also look into swauth. This section of the guide could help:

Re: [Openstack] Opensource Public Cloud Solution .. !!

2011-06-23 Thread andi abes
not to beat my own drum here... but also check out dell.com/openstack (I happen to be working on that) On Thu, Jun 23, 2011 at 12:15 PM, Stephen Spector stephen.spec...@openstack.org wrote: Fahad: Thank you for your interest in OpenStack and considering this technology as the Public Cloud

Re: [Openstack] OpenStack Identity: Keystone API Proposal

2011-06-15 Thread andi abes
I would expect that the API of each service would have to interpret the role assigned to a user in the context of that service - roles for swift nova glance quantum etc would probably carry very different semantics. So, to my understanding, key stone provides authentication and user information -

Re: [Openstack] OpenStack Identity: Keystone API Proposal

2011-06-15 Thread andi abes
to know to check with an authorization subsystem whether the incoming request is allowed based on the who is making the request and the 3-tuple mentioned previously. Jason *From:* andi abes [mailto:andi.a...@gmail.com] *Sent:* Wednesday, June 15, 2011 9:18 AM *To:* Rouault, Jason (Cloud

[Openstack] Fwd: Chef Deployment System for Swift - a proposed design - feedback?

2011-05-23 Thread andi abes
-compute. and the swift cluster is built (because of async nature of multi-node deployments, it might require a few chef-client runs while the ring files are generated and pushed around. have a spin. eager to hear comments. On Mon, May 2, 2011 at 11:36 AM, andi abes andi.a...@gmail.com wrote

Re: [Openstack] Moving code hosting to GitHub

2011-05-03 Thread andi abes
I'm not sure who wins in git vs. bzr ease of use... guess it depends on how quickly I get over this error: $ bzr pull lp:swift/1.3 bzr: ERROR: Cannot lock LockDir( http://bazaar.launchpad.net/~swift/swift/omega-1.3.0-7/.bzr/branch/lock): Transport oper ation not possible: http does not support

Re: [Openstack] Chef Deployment System for Swift - a proposed design - feedback?

2011-05-01 Thread andi abes
, but I'm dedicating Sunday to this. So if you have time Sunday, that would be best to catch up via IRC, IM or voice. Having a node classifier of some sort is critical. -Judd Judd Maltin +1 917 882 1270 Happiness is a straight line and a goal. -fn On Apr 28, 2011, at 11:59, andi abes andi.a

Re: [Openstack] Chef Deployment System for Swift - a proposed design - feedback?

2011-04-28 Thread andi abes
Judd, this is a great idea... actually so great, that some folks @Dell and OpsCode, me included, have been working on it. Have a peek on : https://github.com/opscode/openstack-cookbooks/tree/master/cookbooks This effort is also being included into Crowbar (take a peek here:

Re: [Openstack] Chef Deployment System for Swift - a proposed design - feedback?

2011-04-28 Thread andi abes
at 11:35 AM, Judd Maltin j...@newgoliath.com wrote: Hi Andi, Indeed, the swift recipes hadn't been updated since mid 2010, so I pushed forward with my own. Thanks! -judd On Thu, Apr 28, 2011 at 10:03 AM, andi abes andi.a...@gmail.com wrote: Judd, this is a great idea... actually so

[Openstack] Swift and logging requests

2011-04-28 Thread andi abes
I was trying to better understand Swift, and to that end I thought it would be interesting to log the requests coming in and out of the different servers. Alas, I'm new to Paste (and very rusty on the little python I knew) - hence I've having problems achieving this. I found the following: