Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-08 Thread Christoph Hellwig
On Tue, 2012-08-07 at 17:38 -0400, Eric Windisch wrote: > > Pádraig Brady from Red Hat discovered that the fix implemented for > > CVE-2012-3361 (OSSA-2012-008) was not covering all attack scenarios. By > > crafting a malicious image with root-readable-only symlinks and > > requesting a server base

Re: [Openstack] [glance] legacy client removal and python-glanceclient

2012-07-31 Thread Christoph Hellwig
On Tue, 2012-07-31 at 15:17 -0700, Brian Waldon wrote: > On Jul 31, 2012, at 2:37 PM, Christoph Hellwig wrote: > > > On Tue, 2012-07-31 at 11:41 -0700, Brian Waldon wrote: > >> released python-glanceclient v0.2.0 and would love to gather some > >> feedback.

Re: [Openstack] [glance] legacy client removal and python-glanceclient

2012-07-31 Thread Christoph Hellwig
On Tue, 2012-07-31 at 11:41 -0700, Brian Waldon wrote: > released python-glanceclient v0.2.0 and would love to gather some > feedback. Please file bugs on the python-glanceclient project in > launchpad if you find anything to be missing. What is the plan to deal with the fact that the user interfa

Re: [Openstack] [OpenStack][Swift] Some questions about the performance of swift .

2012-07-26 Thread Christoph Hellwig
On Wed, 2012-07-25 at 07:05 +, Robert van Leeuwen wrote: > One of the theory's we have is that the inode tree of the filesystem no > longer fits in memory which could result in lots of extra io's to the disks. > Also, the object-replicator will walk through all the files effectively > busting

Re: [Openstack] [OpenStack][Swift] Some questions about the performance of swift .

2012-07-26 Thread Christoph Hellwig
On Wed, 2012-07-25 at 10:35 -0300, Paulo Ricardo Motta Gomes wrote: > I've been running into similar problems too, in a setup with lots of small > files. Does anyone knows how big is the XFS inode and directory caches? The are only limited by memory size. You can tune /proc/sys/vm/vfs_cache_press

Re: [Openstack] Support for snapshot of LVM backend image

2012-07-16 Thread Christoph Hellwig
On Mon, 2012-07-16 at 15:20 +0400, Boris Filippov wrote: > Current snapshot implementation for libvirt driver doesn't support > snapshotting for everything except qcow2 (as i remember, because > virDomainManagedSave > will fail on everything except qcow2). Sheepdog also supports the save_vmstate/l

Re: [Openstack] OpenStack support: KVM vs. QEMU

2012-05-11 Thread Christoph Hellwig
On Tue, 2012-05-08 at 16:08 -0400, Lorin Hochstein wrote: > Are there any Nova features that work with KVM but don't work with > QEMU? Either way, I'd like to capture this in the documentation > > I know that KVM is faster than QEMU because of hardware support, but I > don't know if there's additi