Re: [Openstack] [Keystone] What is credential-keys? Do we need to rotate them?

2017-01-20 Thread Alexandr Porunov
Thank you very much for the link! Best regards, Alexandr On Fri, Jan 20, 2017 at 11:01 PM, Boris Bobrov wrote: > Hi, > > Yes, you need to setup them and rotate if necessary: > http://docs.openstack.org/developer/keystone/configuration.html?highlight= > credential_migrate#credential-encryption >

Re: [Openstack] [Keystone] What is credential-keys? Do we need to rotate them?

2017-01-20 Thread Boris Bobrov
Hi, Yes, you need to setup them and rotate if necessary: http://docs.openstack.org/developer/keystone/configuration.html?highlight=credential_migrate#credential-encryption On 01/20/2017 07:49 PM, Alexandr Porunov wrote: > Hello, > > I found not only fernet_keys but also credential-keys in /etc/k

Re: [Openstack] nova backup - instances unreachable

2017-01-20 Thread John Petrini
Hi All, Following up after making this change. Adding write permissions to the images pool in Ceph did the trick and RBD snapshots now work. However the instance is still paused for the duration of the snapshot. Is it possible to do a live snapshot without pausing the instance? Thanks, John On

Re: [Openstack] [Swift] : Proxy Node in PUT Command

2017-01-20 Thread Clay Gerrard
No, it's not store and forward - the proxy is write-through - proxy takes a chunk off the network from client and immediately sends the chunk out to the backend storage nodes. -Clay On Fri, Jan 20, 2017 at 7:09 AM, Sameer Kulkarni wrote: > Hi All, > > When a PUT operation is issued by Client, I

Re: [Openstack] Help with non booting images (problem with root file system)

2017-01-20 Thread Jorge Luiz Correa
Hi George, thank you for helping. Now, it is working. Bellow the answers for the questions. I do not know what happened to fix the problem. I uploaded a new image in the VMDK format. So, that image worked. When I tried to boot the qcow2 again, it got work again. Very strange. Makes no sense. When

[Openstack] [Keystone] What is credential-keys? Do we need to rotate them?

2017-01-20 Thread Alexandr Porunov
Hello, I found not only fernet_keys but also credential-keys in /etc/keystone/ What is it? Do we need to rotate them? Sincerely, Alexandr ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Post to : openstack@lists.open

Re: [Openstack] Help with non booting images (problem with root file system)

2017-01-20 Thread Jorge Luiz Correa
Yes, I've tried with 0 (without define a minimum size) and with large sizes. Same error. Two things that I've noted: 1) When I create a volume based on the image, I can boot the system normally. But, when I try to launch the instance as ephemeral disk (without volume on storage), I get the error.

[Openstack] [Swift] : Proxy Node in PUT Command

2017-01-20 Thread Sameer Kulkarni
Hi All, When a PUT operation is issued by Client, I have read that it goes to proxy and then Ring algorithm decides the 3(Replica Count) Nodes, to which it is transferred simultaneously. I just wanted to clarify If the proxy Node, actually stores (copies) the object from the client(local copy) an

Re: [Openstack] Help with non booting images (problem with root file system)

2017-01-20 Thread George Mihaiescu
Check if the flavour you chose has a large enough root disk. > On Jan 20, 2017, at 08:25, Jorge Luiz Correa wrote: > > Hi, I need some help with images that I can't boot. I've here some images > like Cirros, Ubuntu, Fedora, CentOS etc. All downloaded as indicated here: > > http://docs.openstac

[Openstack] Help with non booting images (problem with root file system)

2017-01-20 Thread Jorge Luiz Correa
Hi, I need some help with images that I can't boot. I've here some images like Cirros, Ubuntu, Fedora, CentOS etc. All downloaded as indicated here: http://docs.openstack.org/image-guide/obtain-images.html Some weeks ago they were working fine. But now, I can boot only Cirros image. Ubuntu, Fedor

Re: [Openstack] [devstack] Default devstack guest does not respond to ping/ssh

2017-01-20 Thread Vikash Kumar
On Tue, Jan 17, 2017 at 2:17 AM, Adam Kimball wrote: > Greetings, > > I've been attempting to get a working devstack configuration for a few > days no, and have been running into issues with networking. Specifically, > after creating a local server, I've been unable to connect to it using a > pub

Re: [Openstack] How to troubleshoot Security Group rules

2017-01-20 Thread Vikash Kumar
Checkout on the bridge connected to tap ports. On Thu, Jan 19, 2017 at 7:02 PM, Vimal Kumar wrote: > Hi, > > Is the rules implemented in the iptables of the node (I am running > all-in-one, LinuxBridge setup), or is it implemented in the iptables of a > separate network namespace? > > On Thu, Ja