[openstack-dev] [designate] How sink works?

2014-04-01 Thread George Shuklin
Good day. Playing with designate (powerdns @ mysql). It works fine with CRUD operations with domains, but I stuck at sink configuration. Even with debug=True nothing happens when instances creating of float ip assigning. My configuration: (skip) rabbit_userid = guest rabbit_password = pass r

[openstack-dev] [neutron] Why neutron-openvswitch-agent use linux-bridge?

2013-11-27 Thread George Shuklin
Good day. I looking at the internals of bridge layout of openvswitch agent at http://docs.openstack.org/network-admin/admin/content/figures/2/figures/under-the-hood-scenario-1-ovs-compute.png and wondering, why this scheme is so complicated and why it use linux bridge and vethes with openvswitc

Re: [openstack-dev] [neutron] Why neutron-openvswitch-agent use linux-bridge?

2013-11-27 Thread George Shuklin
internal openvswitch flow rules? Those rules allows to filter packets on L2-L4 headers and operates very fast. Is some iptables-only features used in ovs-agent? Thanks. 27.11.2013 20:55 пользователь "Lorin Hochstein" написал: > Hi George: > > > > On Wed, Nov 27, 2013 a

[openstack-dev] [glance] Image properties for deleted images

2014-10-31 Thread George Shuklin
Hello. I found that glance do not provide any meta information for deleted images, but hide them somewhere inside. glance image-create -> #1 glance image-update #1 --property foo=bar #1 now has foo=bar nova start ... #1 <- instance use image with foo=bar glance image-delete #1 ... and now we h

Re: [openstack-dev] [neutron] Linux capabilities vs sudo/rootwrap?

2014-12-09 Thread George Shuklin
Is ovs-vsctl gonna be happy with CAP_NET_ADMIN? On 12/10/2014 02:43 AM, Angus Lees wrote: [I tried to find any previous discussion of this and failed - I'd appreciate a pointer to any email threads / specs where this has already been discussed.] Currently neutron is given the ability to do ju

[openstack-dev] Lack of quota - security bug or not?

2014-12-10 Thread George Shuklin
I have some small discussion in launchpad: is lack of a quota for unprivileged user counted as security bug (or at least as a bug)? If user can create 100500 objects in database via normal API and ops have no way to restrict this, is it OK for Openstack or not? ___

Re: [openstack-dev] Lack of quota - security bug or not?

2014-12-11 Thread George Shuklin
On 12/10/2014 10:34 PM, Jay Pipes wrote: On 12/10/2014 02:43 PM, George Shuklin wrote: I have some small discussion in launchpad: is lack of a quota for unprivileged user counted as security bug (or at least as a bug)? If user can create 100500 objects in database via normal API and ops have

Re: [openstack-dev] Lack of quota - security bug or not?

2014-12-11 Thread George Shuklin
On 12/11/2014 03:16 PM, Thierry Carrez wrote: George Shuklin wrote: On 12/10/2014 10:34 PM, Jay Pipes wrote: On 12/10/2014 02:43 PM, George Shuklin wrote: I have some small discussion in launchpad: is lack of a quota for unprivileged user counted as security bug (or at least as a bug)? If

[openstack-dev] [Nova] request for review for backport of bug 1240849 to havana

2014-05-19 Thread George Shuklin
Good day. Could someone, please, review backport of https://bugs.launchpad.net/nova/+bug/1240849 to stable/havana. I've checked it on my laboratory and it fixes problem with 'no network after soft reboot', but I've done some invasive changes to the logic, so if someone with good neutron inte

Re: [openstack-dev] The constraints from flavor and image metadata

2015-01-17 Thread George Shuklin
When I played with metadata, I had have constant feeling it had mess together few things: 1. H/W requirements for images. 2. Accounting requirements (good CPU for good price, HDD for cheap) 3. Licensing restrictions (run this one only on the hosts with licenses) 4. Administrative management (lik

[openstack-dev] How to add feature to diskimage-builder

2015-12-29 Thread George Shuklin
Hello. I'm trying add a small feature to one of the elements in diskimage-builder (https://github.com/openstack/diskimage-builder/pull/10/) I have experience with gerrit and openstack bugfix workflow, but I have no idea how to add small enhancements. Dev guide says I need to add blueprint (

Re: [openstack-dev] [Openstack-operators] [Neutron] Deprecating the use_namespaces option - Now's the time to speak up!

2015-03-29 Thread George Shuklin
On 03/24/2015 09:21 PM, Assaf Muller wrote: Note that https://review.openstack.org/#/c/166888/ has been merged. This means that the option has been deprecated for K and will be removed in L. Anyone using the non-default value of False will be looking at errors in his logs. Well, I have nothing

Re: [openstack-dev] [Openstack-operators] [Neutron] Deprecating the use_namespaces option - Now's the time to speak up!

2015-03-30 Thread George Shuklin
On 03/30/2015 11:18 AM, Kevin Benton wrote: What does fog do? Is it just a client to the Neutron HTTP API? If so, it should not have broken like that because the API has remained pretty stable. If it's a deployment tool, then I could see that because the configuration options to tend to suffe

Re: [openstack-dev] [Neutron] initial OVN testing

2015-03-31 Thread George Shuklin
If that thing will have worked, I'll owe you a beer. Every time I debug OVS-neutron issues I want to cry. All that constant 'exec ovs-vsctl' stuff driving me mad because of the underengineering and overall inefficiency. I will definitively try it on 'reallife lab installation' with few compu

[openstack-dev] [novaclient] novaclient and httpretty - unable to record

2017-04-04 Thread George Shuklin
Sorry for asking in dev maillist, but it really looks like dev issue. I'm writing application which relies on novaclient, glanceclient, etc. It's almost done, but I thought about adding end to end tests by recording and actual requests and replies to openstack. I used httpretty library for th

Re: [openstack-dev] [novaclient] novaclient and httpretty - unable to record

2017-04-04 Thread George Shuklin
Thank you very much for advise! On 04/04/2017 04:09 PM, Monty Taylor wrote: On 04/04/2017 04:43 AM, George Shuklin wrote: Sorry for asking in dev maillist, but it really looks like dev issue. I'm writing application which relies on novaclient, glanceclient, etc. It's almost d

[openstack-dev] Security bug in diskimage-builder

2017-05-17 Thread George Shuklin
There is a bug in diskimage-builder I reported it at 2017-03-10 as 'private security'. I think this bug is a medium severity. So far there was no reaction at all. I plan to change this bug to public security on next Monday. If someone is interested in bumping up CVE count for DIB, please look

Re: [openstack-dev] [nova] Live migration performance tests on 100 compute nodes

2016-12-28 Thread George Shuklin
Wow. Thanks. Great job. Basically, it says that it is impossible to use live migration in production environment with tunneled transport for libvirt. On 12/28/2016 03:11 PM, Koniszewski, Pawel wrote: Hello everyone, We made a research to see how live migration performance varies between di