[Openstack] [OSSA 2013-012] Nova fails to verify image virtual size (CVE-2013-2096)

2013-05-16 Thread Michael Still
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 OpenStack Security Advisory: 2013-012 CVE: CVE-2013-2096 Date: May 16, 2013 Title: Nova fails to verify image virtual size Reporter: Loganathan Parthipan Products: Nova Affects: All versions Description: Loganathan Parthipan publicly reported a vulner

Re: [Openstack] [Grizzly] NoneType object unsubscriptable while setting up keystone

2013-05-16 Thread Daniel
I've found a similar error in the bug database, but it's not keystone-related. The only environment variables I have are : - OS_SERVICE_ENDPOINT=http://10.101.149.22:35357/v2.0 - OS_SERVICE_TOKEN=e004f43a48034a11 I initially thought it might be related to the kickstart template I am using,

Re: [Openstack] [OPENSTACK] VMs don't start on host machine reboot (Grizzly over Ubuntu 13.04)

2013-05-16 Thread Nikhil Mittal
An update: I used the glance image-create command to add the image to the glance DB. If I use this image for creating VM, then the problem of VM not booting on host machine node is gone away. I am still puzzled as to what is the difference there it is vs. the original instance xml file. are there a

Re: [Openstack] Vmware running images

2013-05-16 Thread Marcos Antônio Cavenaghi
You have to pick up the .vmdk file and add it using glance. The syntax here depends on the version (essex, folsom, ...) you are using. glance add name="My VMware Image" is_public=true container_format=bare disk_format=vmdk < My_VMware_Image.vmdk If you have more than one vmdk file (the image is s

[Openstack] Metrics from Ceilometer

2013-05-16 Thread Rima Grati
Hello, Please i need to know which kind of metric Ceilometer can extract (it can extract the bandwith, the uptime of a system.) Thank you ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : ht

Re: [Openstack] Vmware running images

2013-05-16 Thread Shawn Hartsock
So, a couple of points: * when OpenStack manages a VM it does so, cradle to grave * it sounds like you want to manage existing vSphere inventory and that's not a supported use case remember: cradle-to-grave in one stack or the other. * at the moment sharing part of your v

Re: [Openstack] Vmware running images

2013-05-16 Thread Anne Gentle
On Thu, May 16, 2013 at 9:02 AM, Shawn Hartsock wrote: > So, a couple of points: > >- when OpenStack manages a VM it does so, cradle to grave > - it sounds like you want to manage existing vSphere inventory and > that's not a supported use case remember: cradle-to-grave in one stac

Re: [Openstack] [Grizzly] NoneType object unsubscriptable while setting up keystone

2013-05-16 Thread Daniel
Here's a little update. I've installed an Ubuntu 13.04, and just set up keystone with the exact same procedure : it works just fine. I'm suspecting a bug in the currently available keystone version on RedHat's Openstack repo. Regards, Daniel Le 16.05.2013 13:46, Daniel a écrit : I've f

Re: [Openstack] Metrics from Ceilometer

2013-05-16 Thread Fei Long Wang
Hi Rima, Please refer this link: http://docs.openstack.org/developer/ceilometer/measurements.html Thanks & Best regards, Fei Long Wang (王飞龙) -- Scrum Master, Cloud Solutions and OpenStack Development Tel: 8610-82450513 | T/L: 905-0513 Email: flw...@

[Openstack] [OpenStack] [Glance] Reuse the image id when recreate an image in Glance which had been deleted

2013-05-16 Thread Fei Long Wang
Hi stackers, Now I'm running into an issue about reusing image id in Glance. Based on current design, the image id can be specified during create image by end user. But now there is a problem, which is tracked by defect https://bugs.launchpad.net/glance/+bug/1176978. In summary, if user want to p

[Openstack] Folsom - Quantum - Tenant networks have no isolation feature with OpenvSwitch Plugin in GRE mode or VLAN mode

2013-05-16 Thread 李建樺
Hello, I have a problem using Quantum OpenvSwitch plugin. I can't figure out why the tenant networks have no isolation feature with GRE mode or VLAN mode. I can ping from VMs in tenant network A to VMs in tenant network B (there are no virtual router connection). There is my environment settin

Re: [Openstack] [OpenStack] [Glance] Reuse the image id when recreate an image in Glance which had been deleted

2013-05-16 Thread Richard Goodwin
The option to "really delete", delete with malice, etc. is something that we've seen use for in many scenarios (to free up the UUID specifically). I don't have +1 capability, but high five :) Richard Goodwin Product Manager – Cloud Servers & Cloud Images Ideation | Intellection | Activator | Rel

[Openstack] How add an iScsi Storage with devstack

2013-05-16 Thread Alexandre De Carvalho
Hi ! I would like to know how to add an iscsi storage for my instances. I used devstack to install openstack. I think i need to modify my localrc in my controller node but what ! i don't know. Can you help me, please ? If you have some documents or a localrc conf it would be nice. Thanks ! --

[Openstack] network issues within the machines

2013-05-16 Thread Remo Mattei
Hello everyone, I have checked on Mr. Google but the only thing I found was to add "allow_same_net_traffic "True" and now I can ping between the two hosts, however if I try to ping from the router I get not response from the machine. example: sudo ip netns exec qrouter-c998da7a-d22f-4b8a-992e

Re: [Openstack] How add an iScsi Storage with devstack

2013-05-16 Thread John Griffith
On Thu, May 16, 2013 at 9:12 AM, Alexandre De Carvalho < alexandre7.decarva...@gmail.com> wrote: > Hi ! > > I would like to know how to add an iscsi storage for my instances. I used > devstack to install openstack. > I think i need to modify my localrc in my controller node but what ! i > don't kn

Re: [Openstack] AuthN/AuthZ

2013-05-16 Thread Aaron Knister
Thanks Adam. I was able to get that far after a *lot* of headache. AD's typical schema doesn't map to what OpenStack is expecting, particularly as far as the domain_id attribute is concerned. When running Keystone under Apache HTTPD how does one use horizon? On Wed, May 15, 2013 at 3:57 PM, Ada

Re: [Openstack] [metering] Ceilometer plugin for VM provisioning metrics

2013-05-16 Thread Ruslan Kiianchuk
Thank you for the help! There were issues with versioning (I have to run Ceilometer with Folsom OpenStack version) so few lines of code had to be changed for successful porting. Now everything works. Yet, another question arose, weather I can ignore some events from the RPC bus in process_notific

[Openstack] [Nova] nova resize-confirm - error 400

2013-05-16 Thread Bruno Oliveira
Hello guys, Has anyone ever had issues while doing a nova resize, confirm ? I noticed I'm being able to do the resize, the hypervisor (hyper-v) is indeed upgrading the cpu, ram and disk setting according to the flavor I'm setting in "nova resize". but then, it gets stuck in the VERIFY_RESIZE stat

[Openstack] Project wrap-up videos from Portland

2013-05-16 Thread Eric Windisch
Forwarded message: > From: Russell Bryant > As for those that would normally lurk in the back of the room, if they > can be there, great. If not, it's not the end of the world. There > should not be anything that is *exclusively* discussed and decided at > the design summit. Things should be docum

Re: [Openstack] Project wrap-up videos from Portland

2013-05-16 Thread Fei Long Wang
Hi Eric, Are you looking for this? https://www.openstack.org/summit/portland-2013/session-videos/ Thanks & Best regards, Fei Long Wang (王飞龙) -- Scrum Master, Cloud Solutions and OpenStack Development Tel: 8610-82450513 | T/L: 905-0513 Email: flw...@

[Openstack] Use IOMMU even when not doing device pass-through?

2013-05-16 Thread Blair Bethwaite
Hi all, We're running a KVM based OpenStack cloud. I recently realised we don't have the IOMMU turned on in our hypervisors. All indications I know about and can find suggest it's only really useful if you want guests accessing host devices directly, e.g., PCI pass-through. But I wonder if there a

Re: [Openstack] Use IOMMU even when not doing device pass-through?

2013-05-16 Thread Matthew Thode
On 05/16/13 22:43, Blair Bethwaite wrote: > Hi all, > > We're running a KVM based OpenStack cloud. I recently realised we don't > have the IOMMU turned on in our hypervisors. All indications I know about > and can find suggest it's only really useful if you want guests accessing > host devices dir

[Openstack] [Nova] Review Request - Metadata transfer between image, volume and instance

2013-05-16 Thread Macdonald-Wallace, Matthew
Hi all, I've submitted https://review.openstack.org/#/c/28969/ to fix https://bugs.launchpad.net/nova/+bug/1175571 that deals with the issue of metadata that has been passed from glance to cinder not being passed on to Nova when booting from a volume. Kevin L. Mitchell has kindly taken a look

Re: [Openstack] Use IOMMU even when not doing device pass-through?

2013-05-16 Thread Sam Stoelinga
Libvirt usb passthrough also doesn't need this. On Fri, May 17, 2013 at 1:29 PM, Matthew Thode wrote: > On 05/16/13 22:43, Blair Bethwaite wrote: > > Hi all, > > > > We're running a KVM based OpenStack cloud. I recently realised we don't > > have the IOMMU turned on in our hypervisors. All indic