Re: [Openstack] OpenStack Identity: Keystone API Proposal

2011-07-12 Thread Ziad Sawalha
Here's a possible use case we can implement to address this: 1. A service 'registers' itself with Keystone and reserves a name (Ex. Swift, or nova). Keystone will guarantee uniqueness. 2. Registered services can then create roles for the service (Ex. swift:admin or nova:netadmin) or tuples

Re: [Openstack] Keystone tenants vs. Nova projects

2011-07-12 Thread Ziad Sawalha
Our goal is to support Nova use cases right now. You can provide access to multiple tenants using a role assignment (assigning a user a role on a specific tenant effectively binds them to that tenant). However, this raises the issue of what the 'implied' role of a user is when they are bound to

Re: [Openstack] Default ports for services

2011-07-12 Thread Ziad Sawalha
Excellent points (including the PS – right now, the only scale we offer is the ability to use MySQL instead of sqlite which gives you decent scale as a reference implementation. Memcache, LDAP, and other goodness to come….). We've put Keystone on 5000/5001 for now (that's an OpenStack-only solut

Re: [Openstack] Cross-zone instance identifiers in EC2 API - Is it worth the effort?

2011-07-12 Thread Lorin Hochstein
On Jul 11, 2011, at 6:19 PM, Ewan Mellor wrote: >> [Snip summary] >> >> The only question that needs to be considered is where do we move >> from here? Do we accept the limitation that the EC2 API and any tool >> which relies upon that will be only available for single-zone >> deployments,

Re: [Openstack] can't access my running instance through ssh

2011-07-12 Thread Lorin Hochstein
Are you able to view the console output with euca-get-console-output? If so, are there any indications that something went wrong during bootup that might prevent the SSH server from starting inside the instance? Lorin -- Lorin Hochstein, Computer Scientist USC Information Sciences Institute 703.

[Openstack] can't access my running instance through ssh

2011-07-12 Thread fujiang zhou
I've installed all nova services and components successfully, and the instance is running but I can't access it through ssh. I've followed the docs carefully, and published the sample image and ran the instance, and the nova-compute logs shows that the key is injected into the instance. I also ma

Re: [Openstack] [Swift] How to mark a container as publicly accessible (no auth required)

2011-07-12 Thread Jeff Kramer
Michael, You want something like this: swift -A https://swift.auth.url/auth/v1.0 -U -K post -r .r:* Then you can access the files using your AUTH id, for example: https://swift.auth.url/v1/AUTH_511636fe-30f6-411c-974d-caf3760b4bc4// On Tue, Jul 12, 2011 at 5:14 PM, Michael Szilagyi wrote:

[Openstack] [Swift] How to mark a container as publicly accessible (no auth required)

2011-07-12 Thread Michael Szilagyi
Does anyone know how one would go about setting a Swift container as public (as in no auth required to snag objects stored within it). Based on some of the documentation I've read it seems like maybe one would have to set the X-Container-Read ACLs to some sort of wildcard and then use a custom aut

Re: [Openstack] Hardware failure - "nova reboot / rescue"

2011-07-12 Thread Vishvananda Ishaya
Reboot should really allow you to reboot a non-running vm as well. This has worked at various times, so if it doesn't currently it should be filed as a bug. As a workaround, you may be able to update the state in of the vm to shutdown manually in the db and execute a reboot command. You can al

[Openstack] [Keystone] XSD question

2011-07-12 Thread Nguyen, Liem Manh
Hi, I am looking through the XSD's under https://github.com/rackspace/keystone/tree/master/doc/guide/src/docbkx/xsd, and I noticed that there are some duplicate element definitions (like token.xsd redefining the user and endpoint) and also this "##other" namespace. Is this a place-holder for

[Openstack] Hardware failure - "nova reboot / rescue"

2011-07-12 Thread Leandro Reox
Hi all, In case of hardware failure, is there a way to restart the instances that have died on the crashed node on another node, without scripting (manual or automatic), any native function in nova cactus ? nova-reboot only restart domains in "shutdown" mode, on the same node after a reboot. And m

Re: [Openstack] nova-manage network modifications feedback request

2011-07-12 Thread Dan Wendlandt
Thanks Jason, we're definitely on the same page. A few comments in line. Dan On Tue, Jul 12, 2011 at 8:52 AM, Jason Kölker wrote: > On Mon, 2011-07-11 at 19:33 -0700, Dan Wendlandt wrote: > > Given that we're reworking the commands (and potentially breaking > peoples' > > scripts), it might mak

Re: [Openstack] nova-manage network modifications feedback request

2011-07-12 Thread Jason Kölker
On Mon, 2011-07-11 at 19:33 -0700, Dan Wendlandt wrote: > Given that we're reworking the commands (and potentially breaking peoples' > scripts), it might make sense to add a "type" field to the "network create" > command to provide future flexibility to introducing different types of > networks tha

[Openstack] Xen Summit, Santa Clara, August 2-3

2011-07-12 Thread Ewan Mellor
Hi all, Xen Summit is open for registration. This year it's in Santa Clara, CA, August 2-3. This will be a great opportunity to meet some of the hypervisor and kernel engineers, as well as to see what's happening on the cloud side. Yours truly is talking (on OpenStack, of course). Other top

[Openstack] The Best Sounding Cloud

2011-07-12 Thread Pierre FREUND
Hi, I'm looking for people who want to work on OpenStack theme/jingle. I did several jingle trys. You can find it in this entry's comments : OpenStack – The Best Sounding Cloud (http://www.openstack.org/blog/2011/07/openstack-the-best-sounding-cloud/) If you have any idea of a theme I can work o

Re: [Openstack] XEN non-VT based compute workers

2011-07-12 Thread Soren Hansen
2011/7/12 Zeeshan Ali Shah : > Hi, > From requirements of nova-compute it seems that it cannot be run on non-VT > based processors. Where are you seeing this? -- Soren Hansen        | http://linux2go.dk/ Ubuntu Developer    | http://www.ubuntu.com/ OpenStack Developer | http://www.openstack.org/

[Openstack] XEN non-VT based compute workers

2011-07-12 Thread Zeeshan Ali Shah
Hi, >From requirements of nova-compute it seems that it cannot be run on non-VT based processors. Why it is like that ? In case of Opennebula i am running it on old non-VT processors with XEN . IMHO Nova-Compute should not care about underlying HW of Virtual manager .. all it needs some interface