Re: [Openstack] Cut over from lvm_type=XXX to volume_clear=XXX

2014-05-24 Thread Jeffrey Walton
On Sat, May 24, 2014 at 8:24 PM, John Griffith wrote: > On Fri, May 23, 2014 at 10:16 PM, Jeffrey Walton wrote: >> ... >> Previous versions of OpenStack used 'lvm_type=default' to signify a >> wipe. Current versions use 'volume_clear=zero' or >> &

[Openstack] Cut over from lvm_type=XXX to volume_clear=XXX

2014-05-23 Thread Jeffrey Walton
Hi All, This is a follow up to the recent question on wiping. Previous versions of OpenStack used 'lvm_type=default' to signify a wipe. Current versions use 'volume_clear=zero' or 'volume_clear=shred'. For current versions, 'zero' is a single pass and writes 0's; while 'shred' uses three passes

[Openstack] Installation Guide, Basic Architecture, and Minimum Controller Components

2013-12-27 Thread Jeffrey Walton
I'm setting up another test installation. I'm working on Ubuntu with Havana using http://docs.openstack.org/havana/install-guide/install/apt/content/. According to the OpenStack Installation Guide, the example uses a Controller with Keystone, Glance and Nova. Freat job on those documents, btw. (S

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Jeffrey Walton
On Mon, Dec 23, 2013 at 4:54 PM, Jay Pipes wrote: > On 12/23/2013 04:32 PM, Jeffrey Walton wrote: >> >> > This security breach is happening right now here and I >> > don't know what can I do to fix it, or what should I type >> > on a BUG at Launchpad...

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Jeffrey Walton
> This security breach is happening right now here and I > don't know what can I do to fix it, or what should I type > on a BUG at Launchpad... Ubuntu has made it all but impossible to file bug reports. Their circular redirects are worse than a telephone menu system that takes you down a bunch of d

Re: [Openstack] Object storage only - Swift or Ceph ?

2013-12-23 Thread Jeffrey Walton
On Mon, Dec 23, 2013 at 1:19 PM, Kuo Hugo wrote: > Hi Cedric, > > As John said, you should try both to find which is the best choice for you. > I'm not gonna to tell you which is the best choice for you. It depends on > your use cases. I think the following evaluation items is a good beginning. >

Re: [Openstack] Operation offload to the SAN. RE: Wiping of old cinder volumes

2013-11-04 Thread Jeffrey Walton
On Mon, Nov 4, 2013 at 9:12 AM, Chris Friesen wrote: > On 11/03/2013 08:39 PM, Qixiaozhen wrote: > >> In my opinion, we should rethink the way of wiping the data in the >> volumes. Filling in the device with /dev/zero with “dd” command was the >> most primitive method. The standard scsi command “

Re: [Openstack] Wiping of old cinder volumes

2013-11-01 Thread Jeffrey Walton
-management-revealed-part-two.aspx [2] B ́edrune and Sigwald, http://esec-lab.sogeti.com/dotclear/public/publications/11-hitbamsterdam-iphonedataprotection.pdf [3] Wei, Grupp, Spada, Swanson, https://www.usenix.org/legacy/event/fast11/tech/full_papers/Wei.pdf > -Original Message- &g

Re: [Openstack] Wiping of old cinder volumes

2013-11-01 Thread Jeffrey Walton
On Fri, Nov 1, 2013 at 8:33 PM, David Hill wrote: > Hello John, > > Well, if it has an impact on the other volumes that are still being > used by > some other VMs, this is worse in my opinion as it will degrade the service > level > of the other VMs that need to get some work done. If t

Re: [Openstack] OpenStack Milestone PPA for Ubuntu 12.04?

2013-10-24 Thread Jeffrey Walton
rizzly on 12.04, but for new install you should > go with the new release Havana > > -Jon > > On Wed, Oct 23, 2013 at 2:07 PM, Jeffrey Walton wrote: >> I'm working from Jackson's OpenStack Cloud Computing book. I 'm >> setting up a test installation, but I&#

[Openstack] OpenStack Milestone PPA for Ubuntu 12.04?

2013-10-23 Thread Jeffrey Walton
I'm working from Jackson's OpenStack Cloud Computing book. I 'm setting up a test installation, but I'm failing at (page 12): add-apt-repository ppa:openstack-ppa/milestone The error is (with a long URL, that I won't type correctly): Cannot access PPA () to get PPA information, please che

[Openstack] How to checkout all source code?

2013-10-20 Thread Jeffrey Walton
Hi All, I'm looking at https://github.com/openstack. How does one checkout all the common source code? Or do we have to cherry pick one item at a time? For example, I would consider the "common" sttuff to include the base installation, anything to manage vms, and anything needed to support comput

[Openstack] Fwd: [Full-disclosure] [Django] Cookie-based session storage session invalidation issue

2013-10-02 Thread Jeffrey Walton
Not sure if this made anyone's radar -- Forwarded message -- From: G. S. McNamara Date: Tue, Oct 1, 2013 at 4:20 PM Subject: [Full-disclosure] [Django] Cookie-based session storage session invalidation issue To: full-disclos...@lists.grok.org.uk FD, I’m back! Django version

Re: [Openstack] Linux Distribution Recommendations for Testing?

2013-09-30 Thread Jeffrey Walton
Thanks Clint, Stuart, and Adam. On Mon, Sep 30, 2013 at 8:44 PM, Adam Young wrote: > On 09/30/2013 08:11 PM, Stuart Longland wrote: >> >> On 30/09/13 14:52, Clint Dilks wrote: >>> >>> I think if you understand the components you can get things working of >>> any of the distributions. The problem

[Openstack] Linux Distribution Recommendations for Testing?

2013-09-29 Thread Jeffrey Walton
I want to install OpenStack in a test lab. Nearly all the major distros offer OpenStack in some form or another. Are there any Linux distributions that are more amicable to OpenStack software? I'm interested in both up-to-date OpenStack gear, and ease-of-use from the value added stuff provided by

Re: [Openstack] Swift not detect Keystone and Authtoken

2013-09-26 Thread Jeffrey Walton
On Thu, Sep 26, 2013 at 2:18 AM, Mahardhika Gilang < mahardika.gil...@andalabs.com> wrote: > When i put https on it, error come up > Authorization Failure. Authorization Failed: [Errno 1] _ssl.c:504: > error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol > SSL/TLS is not enabled on

Re: [Openstack] Keystoner as Certificate Authority

2013-09-05 Thread Jeffrey Walton
u want a free SSL/TLS certificate trusted by many (most?) browsers for external users, then check out Eddy Nigg's StartCom. (Most of the cost is in revocation, so that's where StartCom charges for its services. Brilliant!). Jeff > -Original Message- > From: Jeffrey Walto

Re: [Openstack] Keystoner as Certificate Authority

2013-09-04 Thread Jeffrey Walton
On Thu, Sep 5, 2013 at 12:40 AM, Somanchi Trinath-B39208 wrote: > > Can we use Keystone as Certificate Authority. Kindly help me in I can't answer if it can be used to issue certs, but I can tell you it should not be. That portion of the infrastructure needs to be segregated with a well defined se

[Openstack] View Presentations from April Summit?

2013-08-29 Thread Jeffrey Walton
Hi All, Forgive my ignorance here... I'm interested in wathcing " Samsung Case Study: Using Openstack to support a massive mobile ecosystem". Its page is at http://openstacksummitapril2013.sched.org/event/53d7397197a93f5ce87ba79a971d3a45#.Uh_1LLw3bXs. When I click on the title link (green backgr

[Openstack] Workstation/Device Provisioning and Compression Policy?

2013-08-17 Thread Jeffrey Walton
to a mobile device should always use maximum compression (and never send uncompressed data)? In this use case, I don't care about clients that can't be compliant (they can just die). Thanks in advance (and my apologies if this should be sent to dev).