Re: [Openstack-operators] Small openstack

2015-01-09 Thread Kris G. Lindgren
George, >From past experience you can not have both nova and neutron security groups enabled at the same time. If you use nova security groups - then I believe they have the appropriate stuff in place to prevent the arp spoofing and other associated stuff. However - if you want the ability to app

[Openstack-operators] [addendum to] OpenStack Community Weekly Newsletter (Week 1, 2015)

2015-01-09 Thread Stefano Maffulli
[one important paragraph was left out. I apologize for the double post.] "First App" Tutorial for OpenStack OpenStack needs something like the tutorial "Writing your first Django app". We're looking for volunteers to flesh out ideas on what this tutorial would look like for OpenStack and how it wo

[Openstack-operators] OpenStack Community Weekly Newsletter (Week 1, 2015)

2015-01-09 Thread Stefano Maffulli
Happy 2015! OpenStack Gold Director Selector Election Results for 2015 * Aptira – Tristan Goode * Cisco – Lew Tucker * Dreamhost – Simon Anderson * EMC – Sean Roberts * Mirantis – Boris Renski * Nebula – Chris Kemp * (new) Ne

Re: [Openstack-operators] Small openstack

2015-01-09 Thread George Shuklin
On 01/09/2015 09:25 PM, Kris G. Lindgren wrote: > Also, If you are running this configuration you should be aware of the > following bug: > > https://bugs.launchpad.net/neutron/+bug/1274034 > > And the corresponding fix: https://review.openstack.org/#/c/141130/ > > Basically - Neutron security grou

Re: [Openstack-operators] Mar 9-10, 2015, Philadelphia, USA - Next Ops Meetup

2015-01-09 Thread Michael Dorman
Tom updated the etherpad saying there would be a registration link soon. I assume he’ll post here when it’s available. From: , Carol L mailto:carol.l.barr...@intel.com>> Date: Friday, January 9, 2015 at 3:48 PM To: Stuart Fox mailto:stu...@demonware.net>>, Ignace Mouzannar mailto:ign...@enova

Re: [Openstack-operators] Mar 9-10, 2015, Philadelphia, USA - Next Ops Meetup

2015-01-09 Thread Barrett, Carol L
Make that 3… From: Stuart Fox [mailto:stu...@demonware.net] Sent: Friday, January 09, 2015 2:08 PM To: Ignace Mouzannar Cc: OpenStack Operators Subject: Re: [Openstack-operators] Mar 9-10, 2015, Philadelphia, USA - Next Ops Meetup Just pinging out to see if I missed a registration page? There ar

Re: [Openstack-operators] Mar 9-10, 2015, Philadelphia, USA - Next Ops Meetup

2015-01-09 Thread Matt Joyce
Curious as well. On Jan 9, 2015 5:08 PM, Stuart Fox wrote: > > Just pinging out to see if I missed a registration page? > There are 2 of us wanting to come > > BR, > Stuart > > On Wed, Jan 7, 2015 at 7:18 AM, Ignace Mouzannar wrote: >> >> Hey Tom, >> >> Thanks for organizing this. We're really l

Re: [Openstack-operators] Mar 9-10, 2015, Philadelphia, USA - Next Ops Meetup

2015-01-09 Thread Stuart Fox
Just pinging out to see if I missed a registration page? There are 2 of us wanting to come BR, Stuart On Wed, Jan 7, 2015 at 7:18 AM, Ignace Mouzannar wrote: > Hey Tom, > > Thanks for organizing this. We're really looking forward to this event. > > On 29/12/14 02:53 AM, Tom Fifield wrote: > > R

Re: [Openstack-operators] [openstack-dev] Vancouver Design Summit format changes

2015-01-09 Thread Michael Dorman
(X-posted to -operators.) Any thoughts on how the ops track spaces would be requested, since there is not a real ‘operators project’, PTL, etc.? I assume this would come from the operators group as a whole, so probably something we should put on the agenda at the ops meet up in March. (I’ve a

Re: [Openstack-operators] Small openstack

2015-01-09 Thread Kris G. Lindgren
Also, If you are running this configuration you should be aware of the following bug: https://bugs.launchpad.net/neutron/+bug/1274034 And the corresponding fix: https://review.openstack.org/#/c/141130/ Basically - Neutron security group rules do nothing to protect against arp spoofing/poisoning

Re: [Openstack-operators] glance directory traversal bug and havana

2015-01-09 Thread George Shuklin
Seems I was wrong. Thanks, I'll look at it again. On 01/08/2015 07:37 PM, Jesse Keating wrote: On 1/7/15 8:47 PM, George Shuklin wrote: I spend few hours trying to backport to Havana, but than I found, that Havana seems be immune to the bug. I'm not 100% sure, so someone else advised to look

Re: [Openstack-operators] Instances stuck in 'Build'

2015-01-09 Thread Alex Leonhardt
Found that our controller also ran nova and got a couple instances running, which will probably cause some performance issues ... this has stopped happening for now, but we'll see soon. FWIW, I just created a set of 9 hosts across 6 HVs and not one of them failed to change its state/tasks. Re gla

Re: [Openstack-operators] Instances stuck in 'Build'

2015-01-09 Thread Kris G. Lindgren
>From my past xp with a very similar issue, a stuck image download/conversion >will never transition to error, and will hold up all other vm's trying to be >deployed to the compute nodes using the same image. Kris Lindgren Senior Linux Systems Enginee

Re: [Openstack-operators] Instances stuck in 'Build'

2015-01-09 Thread Kris G. Lindgren
Are you running glance over ssl? We had an fairly random but consistent issue with vm's being stuck building. Usually building means (at least what I found) the compute node did not have the backing image for the vm and needs to download it from glance , convert it from what ever backing file

Re: [Openstack-operators] Instances stuck in 'Build'

2015-01-09 Thread Erik McCormick
I think you can get into this state if a download from Glance stalls. Also maybe if you run out of disk space on the compute node while it's downloading. There are probably others as well. Eventually though, all of these situations should result in an ERROR state. How long it takes just depends on

Re: [Openstack-operators] Instances stuck in 'Build'

2015-01-09 Thread Alex Leonhardt
Thanks, I'll try and find out next time this happens. To be precise though, the state is BUILD and the Task stays at "Build" (as if some API call timed out??)... Alex On Fri Jan 09 2015 at 13:20:20 Erik McCormick wrote: > > On Jan 9, 2015 4:43 AM, "Alex Leonhardt" wrote: > > > > Hi, > > > >

Re: [Openstack-operators] How to remove a Zone from openstack

2015-01-09 Thread Alex Leonhardt
Hi, So I tried this - but doesn't seem to work - I still get the "unable to find host" for the instance :| when specifying a flavour to use a specific zone.. so I create a new aggregate and zone : nova aggregate-create C3 C3 ++--+---+---+-+ | I

Re: [Openstack-operators] Instances stuck in 'Build'

2015-01-09 Thread Erik McCormick
On Jan 9, 2015 4:43 AM, "Alex Leonhardt" wrote: > > Hi, > > recently I started having problems when creating instances - "every now and then" they seem to get stuck in a 'Build' state. After I terminate that instance and try again, it mostly goes through fine. This is happening across multiple pro

Re: [Openstack-operators] Instances stuck in 'Build'

2015-01-09 Thread Juan José Pavlik Salles
Check nova logs (/var/log/nova/nova*log), you will probably find something interesting there. What's your OS version? 2015-01-09 6:42 GMT-03:00 Alex Leonhardt : > Hi, > > recently I started having problems when creating instances - "every now > and then" they seem to get stuck in a 'Build' state.

Re: [Openstack-operators] vnc proxy not working

2015-01-09 Thread Alex Leonhardt
found it - seemed to be a stuck process / daemon - killed and started and works. yay! any good docs on how to get spice working though ? alex On Fri Jan 09 2015 at 11:54:08 Alex Leonhardt wrote: > Hi, > > I used to have the vnc proxy working, but it currently seems to keep dying > right after

[Openstack-operators] vnc proxy not working

2015-01-09 Thread Alex Leonhardt
Hi, I used to have the vnc proxy working, but it currently seems to keep dying right after starting the service. Not much to go on in the logs - where can/would I enable the debugging ? Thanks! Alex ___ OpenStack-operators mailing list OpenStack-operato

Re: [Openstack-operators] How to remove a Zone from openstack

2015-01-09 Thread Alex Leonhardt
Hi Belmiro, Thanks that helps - where is that config option to be set ? We do have 2 new aggregates which are zoneA and zoneB, both with 4-6 hypervisors at the moment. But somehow the default "nova" zone still exists with a host that I want to keep "private" (or unused for now). Any ideas ? Than

Re: [Openstack-operators] How to remove a Zone from openstack

2015-01-09 Thread Alex Leonhardt
Ah, the link helped - I was trying to get the extra spec filter to work the other day but messed it up - i think i forgot a nova config option : scheduler_default_filters=AggregateInstanceExtraSpecsFilter,AvailabilityZoneFilter,RamFilter,ComputeFilter So I'll try that now that should help me preve

Re: [Openstack-operators] How to remove a Zone from openstack

2015-01-09 Thread Belmiro Moreira
Hi Alex, you need to create "host aggregates" to define other availability zones. For more info see: http://docs.openstack.org/havana/config-reference/content/host-aggregates.html The default availability zone can be changed with the configuration option: default_availability_zone Belmiro On Fri

[Openstack-operators] Instances stuck in 'Build'

2015-01-09 Thread Alex Leonhardt
Hi, recently I started having problems when creating instances - "every now and then" they seem to get stuck in a 'Build' state. After I terminate that instance and try again, it mostly goes through fine. This is happening across multiple projects/tenants and seems to affect all users. Does anyon

[Openstack-operators] How to remove a Zone from openstack

2015-01-09 Thread Alex Leonhardt
Hi, we seem to get a default "nova" zone which is available to all users to create VMs on - that by itself is fine - but I want the users limited to use other zones only, and not the default nova zone. Is it possible to do that ? If so, where do I do that and how ? Any links / docs would be much