[Openstack] [swift] make swift.common.utils.streq_const_time more efficient

def streq_const_time(s1, s2): if len(s1) != len(s2): return False result = 0 for (a, b) in zip(s1, s2): result |= ord(a) ^ ord(b) return result == 0 + If s1 and s2 are of the same length, then the function will compare ever

[Openstack] [openstack][swift]make swift.common.utils.streq_const_time more efficient

def streq_const_time(s1, s2): if len(s1) != len(s2): return False result = 0 for (a, b) in zip(s1, s2): result |= ord(a) ^ ord(b) return result == 0 + If s1 and s2 are of the same length, then the function will compare ever

Re: [Openstack] Future of Launchpad OpenStack mailing list (this list)

Russell Bryant wrote: > On 09/12/2012 08:56 PM, Syd (Sydney) Logan wrote: >> Guess the only advantage would be to minimize the chance of someone >> missing the security related messages in the noise of a heavy traffic >> mailing list. >> >> Even if there were a specialized list, I’d think you’d wan

Re: [Openstack] make swift.common.utils.streq_const_time more efficient

That function's purpose is to compare strings without short-circuiting, to foil timing attacks against token comparisons or similar. On Thu, Sep 13, 2012 at 1:28 AM, Mike Green wrote: > def streq_const_time(s1, s2): > > if len(s1) != len(s2): > return False > result = 0 > for

[Openstack] OpenStack Object Storage ("Swift") 1.7.0 released

Hi everyone, The latest release of OpenStack Object Storage, also known as Swift, is now available at: https://launchpad.net/swift/folsom/1.7.0 Unless some critical issue is uncovered, this should be the last release of Swift in the Folsom series, and that version shall be included in the common

Re: [Openstack] Future of Launchpad OpenStack mailing list (this list)

It may be worth trying to write a short sentence describing the purpose of each list. The kind of sentence new users will see when deciding which lists to subscribe to. Personally - I think it's going to be difficult to come up with a clear distinction between the general and operators lists, and

Re: [Openstack] Last day to join the Foundation to participate in TC vote !

Final reminder: Today is the last day for technical contributors to join the OpenStack Foundation as Individual Members and be able to vote (or be elected) in the upcoming Technical Committee election: Thierry Carrez wrote: > Being a representation of the technical contributors in the project, th

Re: [Openstack] Future of Launchpad OpenStack mailing list (this list)

I like option B because this is more clear view of the project as we did in many opensource projects before. Obviously the cross-posting is inevitable. the goal should limit the number of cross-postings. Cheers, Dan Option B: openstack-u...@lists.openstack.org openstack-annou...@lists.openstack.o

[Openstack] Writing Methods for Nova API

Hi- I'm trying to understand the NOVA api request process flow. Using my custom script, testing.py, I have created a server with some metadata. It was successful. But I have modified to script this way. I have written a definition, metadetailserver(self,detailed=True,search_opts=sMetadata) in a

Re: [Openstack] nova-translation-* jobs in Jenkins

Ying Chun Guo wrote: > I'd like to understand if there are any jobs in Jenkins running to > upload and download translations from Transifex. I see some > nova-translation-* jobs active, but I cannot figure out which website > they are connecting with, Lauchpad or Transifex. Can somebody tell me? A

[Openstack] Understanding NOVA api

Hi- With respect to Essex Release, I'm trying you understand the nova api. How to the client sent URIs are mapped to controller methods? Like, I prepared the URI as /server/details/ is mapped to get_details in the server class of Nova API. How is this logical mapping done? Please help me un

Re: [Openstack] [ceilometer] Bare metal and Metering

Reading through the post from Mirantis on bare metal support on OpenStack (http://www.mirantis.com/blog/bare-metal-provisioning-with-openstack-cloud/) , I was wondering how this would interact with the metering work in ceilometer. Any ideas? Tim smime.p7s Description: S/MIME crypto

Re: [Openstack] paas in openstack and forked cloudfoindry

frans, The cloud foundry community has a number of vendors that have leveraged the CloudFoundry core in commercial offerings including ActiveState's Stackato and Vmware' cloudfoundry.com The CloudFoundry PaaS project is a great example of an OpenPaaS - and, in all it's variations, cloudfoundr

Re: [Openstack] [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3540)

Has a fix for this been backported to essex/stable branch? On Thu, Aug 30, 2012 at 11:35 AM, Russell Bryant wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > This advisory included the wrong CVE. It was CVE-2012-3540. Sorry > about that. > > On 08/30/2012 11:10 AM, Russell Bryant wr

Re: [Openstack] paas in openstack and forked cloudfoindry

yes, that why i found OpenPaaS (openpaas.or.id), in conjuction with openstack-id inside openpaas we create cloudfoundry-id. and now try to learn and research the effect of cloudfoundry, and value proposition on openstack yes, we tested OpenStack + Stackato here, and tomorrow the cloud roadshow f

Re: [Openstack] [ceilometer] Bare metal and Metering

On 09/13/2012 04:33 PM, Tim Bell wrote: > > > Reading through the post from Mirantis on bare metal support on > OpenStack > (http://www.mirantis.com/blog/bare-metal-provisioning-with-openstack-cloud/), > I was wondering how this would interact with the metering work in > ceilometer. So far, onl

Re: [Openstack] [OSSA 2012-012] Horizon, Open redirect through 'next' parameter (CVE-2012-3540)

According to Russell's message - this bug only affects the essex/stable branch.. No backport is necessary I guess.. Also - https://github.com/openstack/horizon/tree/stable/essex shows the most recent commit is the commit/fix he linked to.. Thanks, Kiall On Thu, Sep 13, 2012 at 4:17 PM, andi abe

Re: [Openstack] [swift] make swift.common.utils.streq_const_time more efficient

The intended purpose of this string comparison is to explicitly compare every character. Doing it this way guards against timing attacks (http://en.wikipedia.org/wiki/Timing_attack). --John On Sep 13, 2012, at 12:06 AM, Mike Green wrote: > def streq_const_time(s1, s2): > > if len(s1) !=

[Openstack] strange problem when reboot nova-compute node: domain not found: no domain with matching name

Hi, I've installed essex and when I reboot one of the nova-compute node and next when I start nova-compute service again,the system promote: Libvirt: QEMU error: Domain not found: no domain with matching name 'instance-000a' Then I found: #ls /var/lib/nova/instances _base instance-

[Openstack] [Q] What is MaaS?

hi all can help me to understand MaaS, the bare metal cloud how OpenStack can run in a MaaS, and what is MaaS thx in advanced F ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launc

Re: [Openstack] paas in openstack and forked cloudfoindry

and this is appfog. http://blog.cloudfoundry.org/2012/09/13/how-we-built-appfog-using-cloud-foundry/ -- Frans Thamura (曽志胜) Shadow Master and Lead Investor Meruvian. Integrated Hypermedia Java Solution Provider. Mobile: +628557888699 Blog: http://blogs.mervpolis.com/roller/flatburger (id) FB:

Re: [Openstack] paas in openstack and forked cloudfoindry

and this is appfog. http://blog.cloudfoundry.org/2012/09/13/how-we-built-appfog-using-cloud-foundry/ -- Frans Thamura (曽志胜) Shadow Master and Lead Investor Meruvian. Integrated Hypermedia Java Solution Provider. Mobile: +628557888699 Blog: http://blogs.mervpolis.com/roller/flatburger (id) FB:

[Openstack] Open Stack and (HSM) Hardware security modules

My name is Mark Yakabuski, from SFNT, we are an HSM vendor (I want to be transparent on that). We are looking at integrating our HSM API's into Open Stack. This email is not intended to market HSMs - it is intended to identify what the Open Stack community might find valuable in an HSM integr

Re: [Openstack] [Q] What is MaaS?

Hi Frans, There's a wealth of info over at the MAAS website https://wiki.ubuntu.com/ServerTeam/MAAS/. It is Canonical's method for PXE booting and installing an OS so that a further service, called Juju, can be used to assign the functions/roles to a server that previously had nothing installed (b

Re: [Openstack] strange problem when reboot nova-compute node: domain not found: no domain with matching name

Hello romi, Image got into a stuck state , only solution is to hack your database for this particular instance and mark it as deleted, den restart nova-* service, it would start working. On Thu, Sep 13, 2012 at 9:45 PM, romi zhang wrote: > Hi, > > ** ** > > I’ve installed essex and when

Re: [Openstack] [Q] What is MaaS?

Hi Frans, If you're interested in bare-metal cloud, not MaaS specifically, we(USC/ISI and NTT docomo) want to introduce our bare-metal stuff also. :) http://wiki.openstack.org/GeneralBareMetalProvisioningFramework https://blueprints.launchpad.net/nova/+spec/general-bare-metal-provisioning-framewo

Re: [Openstack] strange problem when reboot nova-compute node: domain not found: no domain with matching name

Hi Romi, what $ virsh list --all gives you ? Nuage & Co - Razique Mahroua razique.mahr...@gmail.com Le 13 sept. 2012 à 21:11, Ritesh Nanda a écrit :Hello romi,    Image got into a stuck state , only solution is to hack your database for this particular instance and mark i

Re: [Openstack] [Q] What is MaaS?

hi kevin and mikyung i must learn all :) to educate the member which i try to develop it (openstack-id). and now try to link openstack to education, start with our PaaS initiative under JENI (JAva Education). the basic idea of baremetal is to boot using PXE, any idea recommended hardware to sta

Re: [Openstack] [Q] What is MaaS?

Frans, We've tested bare-metal provisioning on "Ubuntu 12.04 x86_64" for PXE case. Any x86_64 machine works fine. https://github.com/NTTdocomo-openstack/nova/blob/multinode/nova/virt/baremetal/doc/pxe-bm-installation.rst Also we have a test plan using ARM boards soon, maybe in October. Thanks,

Re: [Openstack] [Q] What is MaaS?

thx mikyung will dig more deeply, esp test in machine F On 9/14/12, Mikyung Kang wrote: > Frans, > > We've tested bare-metal provisioning on "Ubuntu 12.04 x86_64" for PXE case. > Any x86_64 machine works fine. > > https://github.com/NTTdocomo-openstack/nova/blob/multinode/nova/virt/baremetal/do

Re: [Openstack] Future of Launchpad OpenStack mailing list (this list)

On 09/13/2012 01:45 AM, Thierry Carrez wrote: > That would be option B2 ("single user/general list, named openstack"): > openst...@lists.openstack.org > openstack-annou...@lists.openstack.org > openstack-...@lists.openstack.org > > I think it's the clearest to avoid cross-posting... > > Reminder:

Re: [Openstack] Future of Launchpad OpenStack mailing list (this list)

On Thu, Sep 13, 2012 at 5:40 PM, Stefano Maffulli wrote: > On 09/13/2012 01:45 AM, Thierry Carrez wrote: > > That would be option B2 ("single user/general list, named openstack"): > > openst...@lists.openstack.org > > openstack-annou...@lists.openstack.org > > openstack-...@lists.openstack.org > >

Re: [Openstack] Future of Launchpad OpenStack mailing list (this list)

On 09/13/2012 09:04 PM, Duncan McGreggor wrote: > > On Thu, Sep 13, 2012 at 5:40 PM, Stefano Maffulli Option C (dev, announce and operators as user/general list --no renames, > no moving stuff around, just a new description) > openstack-operat...@lists.openstack.org >

Re: [Openstack] Cells Status

Hi Stackers, We didnt find any information related to CELLS [which is planned to replace ZONES] in the latest Folsom pre-release. Can any body give us information on this. -Balaji On Thu, Aug 2, 2012 at 1:19 PM, Chris Behrens wrote: > > I found time to update the branch with the latest code t

[Openstack] Tempest for Integration testing of Openstack

Hi, I am trying to do Integration testing of Openstack environmment (Devstack) using Tempest. I am new to Tempest and wants to have hand on this. Currently I am running tests in the directory " tempest/tests ". I want to understand the provided test scripts and then to write my own. For that I wa