Re: [Openstack] [Swift] PUT requests sensitive to latency?

2014-06-25 Thread Hua ZZ Zhang
Shrinand, I have done some tracing work here and you maybe interested to try. This new patch can help you to record timing of each hop of request if you enable it in log options. This might give you more insights and help you to diagnose network latency problem. https://review.openstack.org/#/c/93

Re: [Openstack] [Swift] PUT requests sensitive to latency?

2014-06-25 Thread Shrinand Javadekar
Hey Edward, Thanks for the explanation. I had a discussion regarding this on the openstack-swift irc channel yesterday. Sam Merrit mentioned pretty much the points that you mention here. To confirm this, I actually bumped up the client_chunk_size and object_chunk_size in the proxy-server.conf as

[Openstack] [Neutron] ipavailabilityranges is narrowing down

2014-06-25 Thread Li, Chen
Hi list, I'm working under CentOS + icehouse. I have created a private network with a subnet: neutron net-list +--+--+-+ | id | name | subnets

Re: [Openstack] How can I enable operation for non-admin user

2014-06-25 Thread Scott Devoid
Hi Chen, > I’m not an experienced developer, so , could you explain more about > “Perhaps the live_migrate task is passing the incorrect context in for > this database query?” ? > Sorry, I should have clarified that that question was for the developers *out there*. (cc's the dev list now). I'm n

Re: [Openstack] Why doesn't suspend release vCPUs/memory?

2014-06-25 Thread Wangpan
Oh, sorry, I misunderstood your idea, Ok, then the last problem is how to release the vcpus/mem resources of suspended instances on the compute nodes? 2014-06-26 11:57 (UTC+8) Wangpan - Original Message - > From: Ricky Saltzer > To: "Wangpan" > Sent: 2014-06-25 03:58 > Subject: Re: Re:

Re: [Openstack] [Horizon] Can I do live-migration using Dashboard ?

2014-06-25 Thread Li, Chen
Hi Liu, Thanks for the reply. I found it now. ☺ But, still one question. I noticed that the operation “migrate Instances” has the same situation as “live-migration”. Couldn’t find it for non-admin users, but appears under admin user. But, When I working under CLI, I can edit /etc/nova/policy.j

Re: [Openstack] How can I enable operation for non-admin user

2014-06-25 Thread Li, Chen
Hi Scott, Thanks for the reply. I’m not an experienced developer, so , could you explain more about “Perhaps the live_migrate task is passing the incorrect context in for this database query?” ? Here is what I understand. The issue is basically caused by @require_admin_context for db.servic

Re: [Openstack] [Horizon] Can I do live-migration using Dashboard ?

2014-06-25 Thread Li, Chen
Hi Matthias, Thanks for the reply. I think what you said is about doing "live-migrate". I can do "live-migrate" using CLI. But, my question is, how can I do it using Dashboard? Any ideas about this ? Thanks. -chen -Original Message- From: Matthias Runge [mailto:mru...@redhat.com] Sent:

Re: [Openstack] Openstack Ironic Installation in CentOS

2014-06-25 Thread 엄재철
Hi, Hassan. This is my repolist. Loaded plugins: fastestmirror, priorities, refresh-packagekit, security Loading mirror speeds from cached hostfile * base: ftp.daum.net * epel: mirror.premi.st * extras: ftp.daum.net * rpmforge: ftp.neowiz.com * updates: ftp.daum.net

Re: [Openstack] nova error migrating with floating ips: 'FixedIP' object has no attribute '_sa_instance_state'

2014-06-25 Thread Nathanael Burton
Noel, it was an inline comment to the db/sqlalchemy/api.py file for the referenced review. This is the way I suggested in the floating_ip_update() method, but it's not really much better: if 'fixed_ip' in values: values['fixed_ip'] = _fixed_ip_get_by_address(context, values['fixed_ip'

[Openstack] Issue with Security Groups

2014-06-25 Thread Muralidhar Balcha
Hi, I am using Openstack havana and I am using default security group with my own set of new rules added to the security group to enable ssh into instances. I am noticing that occasionally nova drops those corresponding rules from the IP tables. Also when nova api service is restarted, it resets th

Re: [Openstack] How can I enable operation for non-admin user

2014-06-25 Thread Scott Devoid
Hi Li, The problem here is that db.service_get_by_compute_host() requires admin context. [1] The live_migrate command needs to check that both hosts have a running nova-compute service before it begins migration. Perhaps the live_migrate task is passing the incorrect context in for this database q

Re: [Openstack] nova error migrating with floating ips: 'FixedIP' object has no attribute '_sa_instance_state'

2014-06-25 Thread Noel Burton-Krahn
Thanks, Nate. I couldn't find your detailed comments in the code review. Is there a better way to do a recursive update of SA objects? This fix worked for me, but it seems ugly to have a special case for a field by name. Is there a less hard-coded way to do this? def save(self, context):

Re: [Openstack] nova error migrating with floating ips: 'FixedIP' object has no attribute '_sa_instance_state'

2014-06-25 Thread Nathanael Burton
Noel, Roman, I made some comments on the proposed review with some minor changes that fixed the "AssertionError: A conflicting state is already present in the identity map" that Noel and I were both having. Please take a look and let me know if that looks ok. Thanks, Nate On Wed, Jun 25, 2014

Re: [Openstack] nova error migrating with floating ips: 'FixedIP' object has no attribute '_sa_instance_state'

2014-06-25 Thread Nathanael Burton
I've recreated the same issue as Noel with the proposed code under review ( https://review.openstack.org/#/c/102514). Nate On Wed, Jun 25, 2014 at 1:45 PM, Noel Burton-Krahn wrote: > Thanks, Roman. That fix did get past the sa_instance_state problem, but > I bumped into something new. It lo

Re: [Openstack] ML2 Plugin and vif_type=binding_failed

2014-06-25 Thread Chris Hoge
I'm curious, are you able to build out the networks but not attach anything to them? I was running into a similar issue. Although my private network were tagged as 'shared', I was not able to use it outside of the owner tenant. The error I was getting was 'vif_type=binding_failed'. Once I created

Re: [Openstack] ML2 Plugin and vif_type=binding_failed

2014-06-25 Thread Dmitry S. Makovey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/25/2014 12:45 PM, Raphael Ribeiro wrote: > Hi Heiko, I already have done this too, unfortunately the error > persists. I faced very similar (quite likely the same) problem, and after some wall-banging and help from this list got things going: h

[Openstack] [OSSA 2014-021] User token leak to message queue in pyCADF notifier middleware (CVE-2014-4615)

2014-06-25 Thread Tristan Cacqueray
OpenStack Security Advisory: 2014-021 CVE: CVE-2014-4615 Date: June 25, 2014 Title: User token leak to message queue in pyCADF notifier middleware Reporter: Zhi Kun Liu (IBM) Products: Neutron(2014.1 versions up to 2014.1.1) Ceilometer (2013.2 versions up to 2013.2.3,

Re: [Openstack] nova error migrating with floating ips: 'FixedIP' object has no attribute '_sa_instance_state'

2014-06-25 Thread Noel Burton-Krahn
Thanks, Roman. That fix did get past the sa_instance_state problem, but I bumped into something new. It looks like floating_ip_update() doesn't like the SA fixed ip that's fetched here: +updates['fixed_ip'] = db.fixed_ip_get(context, id_) I'm not sure what "A conflicting state is a

Re: [Openstack] icehouse cinder on multiple nodes problem

2014-06-25 Thread Dmitry S. Makovey
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 last time I've set up something like that those were the parameters in cinder.conf (on all nodes) that were vital to cinder's normal operation: - - my_ip - - iscsi_ip_prefix - - iscsi_ip_address - - glance_api_servers and the [keystone_authtoken] se

[Openstack] icehouse cinder on multiple nodes problem

2014-06-25 Thread Anatoly Oreshkin
Hello, I have openstack icehouse running on 2 nodes under Centos 6.5 . One node is controller/network node, other node - compute node. Cinder is installed and running on both nodes. Controller/network node has hostname labosctrl (10.76.254.220), compute node has hostname labos02 (10.76.254.22

Re: [Openstack] [Nova] Admin pass injection in launch libvirt/kvm instance

2014-06-25 Thread Thang Pham
I found the following documentation on it: http://docs.openstack.org/admin-guide-cloud/content/admin-password-injection.html . I initially thought it was not implemented because the set_admin_password method was not implemented in the libvirt driver. Now I see there is another way to do it, which

[Openstack] [OSSG][OSSN] Nova Network configuration allows guest VMs to connect to host services

2014-06-25 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nova Network configuration allows guest VMs to connect to host services - --- ### Summary ### When using Nova Network to manage networking for compute instances, instances are able to reach network services running on the host system. This may be a se

Re: [Openstack] Glance performance v1 vs v2

2014-06-25 Thread stuart . mclaren
Hi Sam, We're just starting to look at v2. We did see some really slow listing behaviour, backporting Ie7458044edbe1ef64871bcf5ef4996ed3cc0f957 helped a lot -- but you'll probably have that change already if you're using more recent code. Even with that it does seem slower in some cases, eg dev

Re: [Openstack] nova error migrating with floating ips: 'FixedIP' object has no attribute '_sa_instance_state'

2014-06-25 Thread Roman Podoliaka
Hi all, I believe this should be fixed by https://review.openstack.org/#/c/102514 Thanks, Roman On Wed, Jun 25, 2014 at 9:39 AM, Noel Burton-Krahn wrote: > Thanks a lot for the quick reply, Dan. It's good to know that _context is > expected to be a RequestContext. We do have some changes to n

Re: [Openstack] [Horizon] Can I do live-migration using Dashboard ?

2014-06-25 Thread LIU Yulong
Hi, The live-migration action is only for admin user.‍ You can find it in the admin dashboard/instance. The url is look like http://your-dashboard/admin/instances/‍. Regards, LIU -- Original -- From: "Li, Chen";; Date: Wed, Jun 25, 2014 01:19 PM To: "wal

[Openstack] Glance performance v1 vs v2

2014-06-25 Thread Sam Morrison
We’ve recently enabled glance v2 API on our glance servers. We’ve noticed it is considerably slower than v1 to do things like glance image-list. (~4 seconds compared to ~1) Has anyone else experienced this or run any benchmarks comparing the two APIs? I should note we’re using glance registry f

[Openstack] [Ironic] Problems with booting node

2014-06-25 Thread Heiko Krämer
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey guys, i'm trying to install and configure Ironic manually. In this context i'll try to write a doc for others because the existing one is really incomplete. In this case i've some problems and questions OpenStack ENV: Icehouse + Ubuntu 14.04 1

Re: [Openstack] Renewing keystone signing certs

2014-06-25 Thread Sam Morrison
On 25 Jun 2014, at 9:05 am, Adam Young wrote: > On 06/23/2014 07:37 PM, Sam Morrison wrote: >> Hi Adam, >> >> Thanks for the advice, I’ve tested it out and it is possible to switch over >> pretty seamlessly. >> >> Here is what I did (spelt out in full for others reading): >> >> 1. Generate a

Re: [Openstack] VM failed to start

2014-06-25 Thread Nagaraj Mandya
Hi Abhijeet, I can install that package, but the problem is that this error does not occur always. 9 out of 10 times the image will start correctly and will fail to start with this error once. That is what baffles me. -- Regards, Nagaraj On Wed, Jun 25, 2014 at 2:29 PM, Abhijeet Rastogi wrote

[Openstack] [nova] How can I obtain compute_node_id in nova

2014-06-25 Thread afe.yo...@gmail.com
I found a bug recently and reported it here https://bugs.launchpad.net/nova/+bug/1333498 The function requires compute_node_id as its parameter. I'm trying to fix this bug. However I fail to find any way to obtain the compute_node_id. Any help will be greatly appreciated! __

Re: [Openstack] VM failed to start

2014-06-25 Thread Abhijeet Rastogi
>2014-06-25 02:09:58.612 13884 ERROR stevedore.extension [-] Could not load >'file': websockify>=0.5.1,<0.6 It's clearly complaining of a missing package/file related to websockify. Do you have required package of websockify installed? On Wed, Jun 25, 2014 at 12:03 PM, Nagaraj Mandya wrote: > H

Re: [Openstack] [Horizon] Can I do live-migration using Dashboard ?

2014-06-25 Thread Matthias Runge
On 25/06/14 07:19, Li, Chen wrote: Why ?? Is this a missing feature for horizon? Would this be added in the future ?? Thanks. It's implemented in Icehouse. You need a shared storage, a capable hypervisor, and of course more than one compute node. Matthias __

[Openstack] add remotefx option to nova instance

2014-06-25 Thread Ahmad Ben Maallem
hi, I have a OpenStack platform with hyper-v. I want to instantiate a virtual machine with RemoteFX option. is that possible with the OpenStack API? Note that I try to create an image with RemoteFX property and the instance does not support this option. thanks. _

Re: [Openstack] [Nova] Admin pass injection in launch libvirt/kvm instance

2014-06-25 Thread Wangpan
Thanks Juerg! when I use a debian7 image without cloudinit, I login the instance successfully! it's because cloudinit locks password. 2014-06-25 16:14 (UTC+8) Wangpan - Original Message - > From: Juerg Haefliger > To: "Wangpan" > Sent: 2014-06-25 15:50 > Subject: Re: [Openstack] [Nova] A

Re: [Openstack] [Nova] Admin pass injection in launch libvirt/kvm instance

2014-06-25 Thread Juerg Haefliger
On Wed, Jun 25, 2014 at 9:07 AM, Wangpan wrote: > > Hi all, > > I debug the process of libvirt admin password injection, I found everything is OK before the instance is booting up, > the /etc/shadow is modified normally, such as: > Wangpan@10-120-120-7:/tmp/openstack-vfs-localfsX_J5ke/etc$ sudo ca

[Openstack] Openstack Ironic Installation in CentOS

2014-06-25 Thread 엄재철
Hello. I'm trying to install Ironic in CentOS 6.5 and IceHouse, and I'm following the guide 'http://docs.openstack.org/developer/ironic/deploy/install-guide.html'. According to the guide and the others, the way for installation is only refered for Ubuntu by using 'apt-get'. Do you have any idea

Re: [Openstack] [Nova] Admin pass injection in launch libvirt/kvm instance

2014-06-25 Thread Wangpan
Hi all, I debug the process of libvirt admin password injection, I found everything is OK before the instance is booting up, the /etc/shadow is modified normally, such as: Wangpan@10-120-120-7:/tmp/openstack-vfs-localfsX_J5ke/etc$ sudo cat shadow root:$1$n1j7WavS$FYuXUja3LSUvwOT8yqyt2/:15822:0:99