Re: [Openstack] periodic packet loss in openvswitch

2014-10-14 Thread Michael Gale
Hello, Do you know the L2 switch model you are using in the blade center and how much traffic you are pushing through? If you have netflow or some other type of traffic analysis I would look for changes and sudden increases around this time: - difference in packets per second - difference in

Re: [Openstack] periodic packet loss in openvswitch

2014-10-14 Thread Don Waterloo
On 14 October 2014 22:45, Don Waterloo wrote: > I have a system w/ 6 blades interconnected on L2. 1 controller, 5 > compute/network nodes. > they are using icehouse, neutron, ovs, with vxlan on ubuntu 14.04. > > Once in a while, one of the compute blades will declare a bunch of lines > like this

Re: [Openstack] [DevStack] Keystone not restarting

2014-10-14 Thread Dean Troyer
On Tue, Oct 14, 2014 at 9:02 PM, Борис Бобров wrote: > Have a look at /etc/apache2/sites-available. For some reason > keystone's .conf files is not linked to /etc/apache2/sites-enabled, so it > doesn't go up when apache is restarted. Try creating symlink manually. > DevStack manages that symlink

[Openstack] periodic packet loss in openvswitch

2014-10-14 Thread Don Waterloo
I have a system w/ 6 blades interconnected on L2. 1 controller, 5 compute/network nodes. they are using icehouse, neutron, ovs, with vxlan on ubuntu 14.04. Once in a while, one of the compute blades will declare a bunch of lines like this: 129749.691102] qbrfc96cb3f-f3: received packet on qvbfc9

Re: [Openstack] [DevStack] Keystone not restarting

2014-10-14 Thread Борис Бобров
В сообщении от Tuesday 14 of October 2014 21:14:52 Paul написал: > Hi > > I'm using devstack and doing 'unstack.sh' to stop devstack then making > code/config changes and doing 'rejoin_stack.sh' to restart it but it is > not starting apache or keystone processes. I've tried restarting > apache my

Re: [Openstack] [DevStack] Keystone not restarting

2014-10-14 Thread Preston L. Bannister
As a relatively new DevStack / OpenStack developer ... how would we guess usual workflow? :) (I did figure out the local.conf => nova.conf push. The Devstack unstack / rejoin / clean is still slightly foggy.) On Tue, Oct 14, 2014 at 6:31 PM, Dean Troyer wrote: > On Tue, Oct 14, 2014 at 12:14

Re: [Openstack] [DevStack] Keystone not restarting

2014-10-14 Thread Dean Troyer
On Tue, Oct 14, 2014 at 12:14 PM, Paul Carlton wrote: > I'm using devstack and doing 'unstack.sh' to stop devstack then making > code/config changes and doing 'rejoin_stack.sh' to restart it but it is not > starting apache or keystone processes. I've tried restarting apache myself > before and a

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Aaron Knister
Thanks Chris, Noel for your helpful replies! The fixes to all 3 of these issues seem to be patches to the rabbit driver for oslo. Are the other drivers (e.g. qpid) any more robust or are they just not heavily used so more bugs may be lurking there? I'd really like to use zeromq but the lack of any

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Noel Burton-Krahn
Hi Aaron, Unfortunately, durable queues don't fix the case where rabbit dies and restarts on a new host (and loses its durable queue store) There's a fix here, but it's been waiting a while for a merge https://review.openstack.org/#/c/109373/ -- Noel On Tue, Oct 14, 2014 at 1:51 PM, Aaron K

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Chris Friesen
On 10/14/2014 09:39 AM, Sandy Walsh wrote: Sort of. Openstack RPC-over-AMQP (oslo.messaging) automatically ack()'s all messages that are received. So, it becomes the responsibility of the sender to retry. For example, the scheduler in Nova does this. However, if the client fails before getting t

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Aaron Knister
(Tested in icehouse) On Tue, Oct 14, 2014 at 4:50 PM, Aaron Knister wrote: > For those of you following alone at home-- I just discovered that durable > queues are particularly nice for nova scheduler. Without them an outage of > either the MQ daemon (qpid in my case) or the scheduler itself ca

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Aaron Knister
For those of you following alone at home-- I just discovered that durable queues are particularly nice for nova scheduler. Without them an outage of either the MQ daemon (qpid in my case) or the scheduler itself can cause the scheduling requests to get dropped on the floor. With durability the ins

[Openstack] [Neutron] Juno RC3 available

2014-10-14 Thread Thierry Carrez
Hello everyone, Due to two issues discovered in testing of the published Neutron 2014.2 RC2, we generated a new Juno release candidate. You can find the list of bugfixes in this RC and a link to a source tarball at: https://launchpad.net/neutron/juno/juno-rc3 At this point, only show-stoppers wo

Re: [Openstack] Name Resolution problem (ICEHOUSE)

2014-10-14 Thread Amit Anand
Also forgot to specify my VM external address is 10.7.7.105. The external network CIDR is 10.7.0.0/16 gateway is 10.7.0.1. On Tuesday, October 14, 2014 3:40 PM, Amit Anand wrote: Hi James, Thanks for the response! Yeah Ive tried that no luck. My resolv.conf on a VM (192.168.1.5) is as

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Gordon Sim
On 10/14/2014 07:36 PM, Aaron Knister wrote: With RabbitMQ if a message is silently dropped by the broker will a timeout still occur/exception be raised because no reply/ack was received? With the QPID driver the automatic ack()'s Sandy mentioned don't occur? Will the sender eventually become aw

Re: [Openstack] Name Resolution problem (ICEHOUSE)

2014-10-14 Thread James Denton
Hi Amit, Have you tried specifying a name server with dig? Ie. dig domain.com @8.8.8.8 <—google DNS Have you confirmed your instances have a resolver configured in /etc/resolv.conf? This usually occurs via DHCP. James From: Amit Anand mailto:mr_amitan...@yahoo.com>> Reply-To: Amit Anand mailt

Re: [Openstack] [Openstack-operators] vxlan network and windows on guests

2014-10-14 Thread Sławek Kapłoński
Hello, I was trying with newest driver downloaded from http://alt.fedoraproject.org/pub/alt/virtio-win/latest/images/ and also on older version. I did small test with two instances on one host. Then all traffic is going only via br-int bridge in ovs (no any vxlan tunnel) and problem was the sam

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Aaron Knister
Thanks Gordon, and Sandy. With RabbitMQ if a message is silently dropped by the broker will a timeout still occur/exception be raised because no reply/ack was received? With the QPID driver the automatic ack()'s Sandy mentioned don't occur? Will the sender eventually become aware that a message w

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Gordon Sim
I agree that greater clarity on expectations around reliability are needed. The drivers all differ in this regard. As it stands today, the impl_rabbit driver only retries an RPC request if an exception occurs while sending it. However messages are sent unconfirmed[1]. This means a message can

[Openstack] [DevStack] Keystone not restarting

2014-10-14 Thread Paul Carlton
Hi I'm using devstack and doing 'unstack.sh' to stop devstack then making code/config changes and doing 'rejoin_stack.sh' to restart it but it is not starting apache or keystone processes. I've tried restarting apache myself before and after rejoin but no joy. I can fix this by doing 'stack

Re: [Openstack] python keystone v3 api coding question

2014-10-14 Thread Michael Hearn
Thanks for the info. Looks like I need to update my current version of the keystone v3 api so I can use role_assignments On Mon, Oct 13, 2014 at 11:04 PM, Dean Troyer wrote: > On Mon, Oct 13, 2014 at 3:28 PM, Priti Desai > wrote: > >> I don’t know about Keystone Client V3 API but OpenStack cli

[Openstack] Name Resolution problem (ICEHOUSE)

2014-10-14 Thread Amit Anand
Hi all, So I have a DNS (or at least it seems to be only DNS) problem with the VM's I have created. I cannot resolve anything from within the VM's. I can ping outside by IP (ie, I can ping google,etc but only by IP) but cannot do a dig, curl, nslookup, etc by name. I have no clue why this is ha

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Sandy Walsh
Sort of. Openstack RPC-over-AMQP (oslo.messaging) automatically ack()'s all messages that are received. So, it becomes the responsibility of the sender to retry. For example, the scheduler in Nova does this. However, if the client fails before getting the message, AMQP will automatically requeu

[Openstack] Travels tips for the Paris summit

2014-10-14 Thread Adrien Cunin
Hi everyone, Inspired by the travels tips published for the HK summit, the French OpenStack user group wrote a similar wiki page for Paris: https://wiki.openstack.org/wiki/Summit/Kilo/Travel_Tips Also note that if you want some local informations or want to talk about user groups during

[Openstack] [Ceilometer] Juno RC3 available

2014-10-14 Thread Thierry Carrez
Hello everyone, Due to two last-minute issues discovered in testing the published Ceilometer 2014.2 RC2, we generated a new Juno release candidate. You can find the list of bugfixes in this RC and a link to a source tarball at: https://launchpad.net/ceilometer/juno/juno-rc3 At this point, only s

[Openstack] ml2 vlan provider network help

2014-10-14 Thread Brandon Sawyers
Hello everyone: I believe that I have a correct config for using vlan provider networks in place (Thanks Thiago!), but my instances fail to ping other systems on the vlan. A quick description of what I'm trying to accomplish: My team does not control the network, so we wish to use the in place vla

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Aaron Knister
Thanks Raghu. I think I might not be asking the right questions. Part of my ignorance here comes from not understanding AMQP. I think really what I'm trying to figure out is whether openstack expects durable queues. It sounds like the answer is no but confirmation of this would be great. Even if

[Openstack] [OSSA 2014-035] Nova VMware driver may connect VNC to another tenant's console (CVE-2014-8750)

2014-10-14 Thread Jeremy Stanley
OpenStack Security Advisory: 2014-035 CVE: CVE-2014-8750 Date: October 14, 2014 Title: Nova VMware driver may connect VNC to another tenant's console Reporter: Marcio Roberto Starke Products: Nova Versions: up to 2014.1.3 Description: Marcio Roberto Starke reported a vulnerability in the Nova VMwa

Re: [Openstack] portability and cloudbursting

2014-10-14 Thread tho...@redhat.com
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/10/2014 01:51 PM, Cyrill Häfeli wrote: > Dear Community > > 1. Is there a possibility to port images from a private > openstack cloud to public cloud vendors or in the other direction? > > I’m interested in the portability of images from

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Raghu Vadapalli
— Raghu On Tuesday, Oct 14, 2014 at 7:49 AM, Aaron Knister , wrote: Thanks Remo, could you elaborate a little? Which is part of RabbitMQ? The HA layer or the message retransmission? I'm currently using qpid. Also, just so I'm clear, is it the openstack code or the low-level messaging drivers

Re: [Openstack] Centos 7 root pasword

2014-10-14 Thread Fabrizio Soppelsa
On 10/14/2014 11:41 AM, Mridhul Pax wrote: I have downloaded a centos 7 image from the following site and created a glance image. Im able to provison a server via that image and the server booted up fine. Any one know how to login to the server ? It's reccomended to login to the instance throu

Re: [Openstack] Centos 7 root pasword

2014-10-14 Thread Diego Parrilla Santamaría
Have you tried this? https://stackops.zendesk.com/hc/en-us/articles/201923327-Centos-6-4-and-6-5-default-username-and-password Regards Diego -- Diego Parrilla *CEO* *www.stackops.com | * diego.parri...@stackops.com | +34 91 005-2164 | skype:d

Re: [Openstack] Centos 7 root pasword

2014-10-14 Thread Lars Kellogg-Stedman
On Tue, Oct 14, 2014 at 01:24:16PM +0530, Mridhul Pax wrote: > Is there a way I can pass an SSH-KEY via the webVNC ? At this point > of time, that is the only login option available for me as the > servers are not picking any IP address. It sounds as if there are either problems with your metada

Re: [Openstack] Messaging reliability/durability expectations

2014-10-14 Thread Aaron Knister
Thanks Remo, could you elaborate a little? Which is part of RabbitMQ? The HA layer or the message retransmission? I'm currently using qpid. Also, just so I'm clear, is it the openstack code or the low-level messaging drivers (rabbit, zmq, qpid) that retransmit on message delivery failure? Thank

[Openstack] [disk-image-builder]How to build a centos Overcloud-image in ubuntu using disk-image-builder

2014-10-14 Thread 严超
Hi, Everyone: I'm trying to use an Undercloud to setup an Overcloud bare metal. But I want my Overcloud to be centOS system. How can I build or get a centos Overcloud-image using disk-image-builder , which should be a qcow centOS image ? *Best Regards!* *Chao Yan--**My twitt

Re: [Openstack] Energy/Kwapi metering using ceilometer in OpenStack Icehouse

2014-10-14 Thread Sylvain Bauza
Le 14/10/2014 08:31, Vivek Varghese Cherian a écrit : On Fri, Oct 10, 2014 at 6:38 PM, Sylvain Bauza > wrote: Le 10/10/2014 14:49, Vivek Varghese Cherian a écrit : The answer is quite simple : the Kwapi version of pbr is really old and Kwapi is not

Re: [Openstack] Centos 7 root pasword

2014-10-14 Thread Mridhul Pax
Is there a way I can pass an SSH-KEY via the webVNC ? At this point of time, that is the only login option available for me as the servers are not picking any IP address. > From: hgue...@fedoraproject.org > Date: Tue, 14 Oct 2014 09:50:43 +0200 > Subject: Re: [Openstack] Centos 7 root pasword

Re: [Openstack] Centos 7 root pasword

2014-10-14 Thread Haïkel
2014-10-14 9:41 GMT+02:00 Mridhul Pax : > Hi Friends, > > I have downloaded a centos 7 image from the following site and created a > glance image. Im able to provison a server via that image and the server > booted up fine. Any one know how to login to the server ? > > I tried combinations like roo

[Openstack] Centos 7 root pasword

2014-10-14 Thread Mridhul Pax
Hi Friends, I have downloaded a centos 7 image from the following site and created a glance image. Im able to provison a server via that image and the server booted up fine. Any one know how to login to the server ? I tried combinations like root/centos , centos/centos but no luck I downloaded th