[Openstack] RFC: Rewritten libvirt driver XML generation

2012-03-08 Thread Daniel P. Berrange
Back in January Joshua Harlow raised the question of whether we should replace the usage of Cheetah templates for generating XML in the libvirt driver: https://lists.launchpad.net/openstack/msg06481.html Since then I have had some time to work on this idea and now have a working branch availabl

Re: [Openstack] 答复: RFC: Rewritten libvirt driver XML generation

2012-03-09 Thread Daniel P. Berrange
On Fri, Mar 09, 2012 at 09:52:21AM +0800, wangsuyi640 wrote: > Hi all: > I tried kvm on my openstack on ubuntu11.10 with the libvirt.xml file as > follows: > Howerver, I want change the remote access method by spice, I simply changed > the libvirt.xml as follows: > [snip] > listen

Re: [Openstack] Libvirt Snapshots

2012-03-09 Thread Daniel P. Berrange
On Thu, Mar 08, 2012 at 06:02:54PM -0800, Vishvananda Ishaya wrote: > So I could use some specific feedback from kvm/libvirt folks on the following > questions: > > a) is it safe to use qemu-img to create/delete a snapshot in a disk file that > libvirt is writing to. > if not: > b) is it safe to

Re: [Openstack] Libvirt Snapshots

2012-03-09 Thread Daniel P. Berrange
On Fri, Mar 09, 2012 at 03:57:30PM +0100, Soren Hansen wrote: > 2012/3/9 Vishvananda Ishaya : > > OPTION B --> libvirt 9.5 snapshots > > > > This method uses the newer snapshot xml in libvirt 9.5 to snapshot only the > > root disk. > > > > Pros: > > plays nicely with libvirt, so the vm is only paus

Re: [Openstack] Libvirt Snapshots

2012-03-09 Thread Daniel P. Berrange
On Fri, Mar 09, 2012 at 08:13:06AM -0800, Justin Santa Barbara wrote: > Pedantry: It's QEMU/KVM, not libvirt, that holds the disks open.  The > pedantry does make a difference here I think... > > A more sustainable option than being on the bleeding edge of libvirt > may be to try to bypass libvirt

Re: [Openstack] Libvirt Snapshots

2012-03-09 Thread Daniel P. Berrange
On Fri, Mar 09, 2012 at 10:43:35AM -0600, rb...@hexagrid.com wrote: > Even though it's more of a libvirt question since the topic of snapshot > is being discussed, thought of asking it. Does libvirt 0.95 uses the > backing file concept? or is that the same thing that Vish mentioned > as option 1

Re: [Openstack] Libvirt Snapshots

2012-03-09 Thread Daniel P. Berrange
On Fri, Mar 09, 2012 at 09:21:59AM -0800, Justin Santa Barbara wrote: > Thanks for the background. My thoughts: > > * Telling a user to build from source isn't a great option for them - > it's painful, they don't get updates automatically etc. Are we going > to start distributing packages again?

Re: [Openstack] Random libvirt hangs

2012-03-12 Thread Daniel P. Berrange
On Mon, Mar 12, 2012 at 02:17:49PM -0400, David Kranz wrote: > In the spirit of Jay's message, we have a long-running cluster > (diablo/kvm) where about once every 3-4 weeks a user will complain > that she cannot connect to a vm. Examining the compute node shows > that libvirt-bin is hung. Sometime

Re: [Openstack] Random libvirt hangs

2012-03-13 Thread Daniel P. Berrange
On Mon, Mar 12, 2012 at 07:54:38PM -0700, Justin Santa Barbara wrote: > I just today was able to diagnose a libvirt hang. It appears to be > (similar to) a known bug in libvirt, likely fixed in the latest > Fedora, but it does not appear to be fixed in Ubuntu Oneirc; I think > the fix is in Precis

Re: [Openstack] Networking guru needed: problem with FlatManager ARP when guest and bridge MACs the same

2012-03-14 Thread Daniel P. Berrange
On Wed, Mar 14, 2012 at 10:50:28AM -0700, Justin Santa Barbara wrote: > We recently changed the MAC address assigned to guests so that they started > with 0xfe, in the hope of avoiding (theoretical?) issues with MAC addresses > changing on the bridge device as machines are shut down (because suppos

Re: [Openstack] [OSSA 2012-002] Extremely long passwords can crash Keystone (CVE-2012-1572)

2012-03-28 Thread Daniel P. Berrange
On Tue, Mar 27, 2012 at 02:56:42PM -0400, Russell Bryant wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > OpenStack Security Advisory: 2012-002 > CVE: CVE-2012-1572 > Date: March 27, 2012 > Title: Extremely long passwords can crash Keystone > Impact: High > Reporter: Dan Prince > Prod

Re: [Openstack] OVF vs. bare container formats for qcow2 images

2012-03-29 Thread Daniel P. Berrange
On Wed, Mar 28, 2012 at 04:41:28PM -0400, Lorin Hochstein wrote: > All: > > Given that I have a qcow2 image from somewhere (e.g., downloaded > it from a uec-images.ubuntu.com, created one from a raw image using > qemu-img) that i want to add to glance: > > 1. How can I tell whether it's an "ovf"

Re: [Openstack] raw or qcow2

2012-04-17 Thread Daniel P. Berrange
On Tue, Apr 17, 2012 at 04:23:04PM +0800, William Herry wrote: > Hi all > > we plan to use openstack on our production, > we are not sure which disk type will be the better choice > > I did a little test on qcow2 and it's performance looks good when I use > cache=writeback > > can some one give

Re: [Openstack] How does everyone build OpenStack disk images?

2012-04-26 Thread Daniel P. Berrange
On Wed, Apr 25, 2012 at 06:14:22PM -0700, Justin Santa Barbara wrote: > How does everyone build OpenStack disk images? The official documentation > describes a manual process (boot VM with ISO), which is sub-optimal in > terms of repeatability / automation / etc. I'm hoping we can do better! > >

Re: [Openstack] Encrypted virtual machines

2012-04-26 Thread Daniel P. Berrange
On Thu, Apr 26, 2012 at 09:05:41AM -0700, Matt Joyce wrote: > From a security stand point I am curious what you see the benefit as? Consider that you might have separate people in your data center managing the virtualization hosts, vs the storage hosts vs the network. As it standards today any of

Re: [Openstack] Encrypted virtual machines

2012-04-27 Thread Daniel P. Berrange
On Thu, Apr 26, 2012 at 01:44:53PM -0700, Matt Joyce wrote: > As far as storage is concerned, certainly a cloud storage environment > could be leveraged to store pre-encrypted data in such a way that > would make it difficult bordering on impossible to seize or access > without the consent of the o

Re: [Openstack] Mailing-list split

2012-04-27 Thread Daniel P. Berrange
On Fri, Apr 27, 2012 at 12:04:34PM +0200, Thierry Carrez wrote: > To avoid Launchpad list slowness, we would run the new openstack-dev > list off lists.openstack.org. Given the potential hassle of dealing with > spam and delivery issues on mission-critical MLs, we are looking into > the possibility

Re: [Openstack] Openstack Essex - Guide for Ubuntu 12.04

2012-04-30 Thread Daniel P. Berrange
On Mon, Apr 30, 2012 at 07:26:17AM -0500, Anne Gentle wrote: > Hi Emilien - > Ideally Martin's guide and your guide would be part of the OpenStack > documentation - your licensing would work within our framework for docs. > > Martin, how is progress going on submitting your Quick Start guide throu

Re: [Openstack] URL Scheme for deploying Openstack in HTTPD

2012-04-30 Thread Daniel P. Berrange
On Mon, Apr 30, 2012 at 01:58:24PM -0500, Dolph Mathews wrote: > I very much like the idea that we should have a well documented > recommendation on this topic. > > My only criticism is that the API/service names should be used in place of > project names, e.g. https://hostname/identity, https://h

Re: [Openstack] Improving Xen support in the libvirt driver

2012-05-10 Thread Daniel P. Berrange
On Wed, May 09, 2012 at 11:08:13PM -0600, Jim Fehlig wrote: > Hi, > > I've been tinkering with improving Xen support in the libvirt driver and > wanted to discuss a few issues before submitting patches. > > Even the latest upstream release of Xen (4.1.x) contains a rather old > qemu, version 0.10

Re: [Openstack] Improving Xen support in the libvirt driver

2012-05-10 Thread Daniel P. Berrange
On Thu, May 10, 2012 at 09:06:58AM +0100, Daniel P. Berrange wrote: > On Wed, May 09, 2012 at 11:08:13PM -0600, Jim Fehlig wrote: > > Hi, > > > > I've been tinkering with improving Xen support in the libvirt driver and > > wanted to discuss a few issues before s

Re: [Openstack] Improving Xen support in the libvirt driver

2012-05-10 Thread Daniel P. Berrange
On Thu, May 10, 2012 at 03:17:59PM +0200, Muriel wrote: > Il 10/05/2012 11:48, Alvaro Lopez ha scritto: > >On Thu 10 May 2012 (10:41), Muriel wrote: > >>If I remember correctly, the qcow images are not the only problem > >>with xen, but I'm far from the code for too long time. In the past > >>(diab

Re: [Openstack] libvirt.xml.template

2012-05-23 Thread Daniel P. Berrange
On Wed, May 23, 2012 at 03:18:44PM +0800, William Herry wrote: > Hi, > > I can't find this libvirt.xml.template file with git install, I change this > file to make my vm show real cpu rather than QEMU, now, I can't find that > file, some one know where it is? > > I use the recent git packages whi

Re: [Openstack] libvirt.xml.template

2012-05-23 Thread Daniel P. Berrange
On Wed, May 23, 2012 at 11:09:12AM +0100, Daniel P. Berrange wrote: > On Wed, May 23, 2012 at 03:18:44PM +0800, William Herry wrote: > > Hi, > > > > I can't find this libvirt.xml.template file with git install, I change this > > file to make my vm show real cpu rat

Re: [Openstack] New layout of the OpenStack mailing lists

2012-05-25 Thread Daniel P. Berrange
On Thu, May 24, 2012 at 05:02:25PM -0700, Stefano Maffulli wrote: > Hello folks, > > we're working on a new mailing list server to host our discussions. The > main factor behind the move was described in this message by ttx: > > http://openstack.markmail.org/thread/ybwazse63sgxozh2 > > > The cu

Re: [Openstack] Random libvirt hangs

2012-06-08 Thread Daniel P. Berrange
On Thu, May 31, 2012 at 08:19:47AM +0200, Christian Wittwer wrote: > Hi Daniel, > > > I'd file a bug against libvirt in Oneiric, requesting that they > > backport the 4 changesets mentioned in > > Do you know if that bug is now fixed in Oneiric? No idea I'm afraid, I only maintain libvirt upstre

Re: [Openstack] Errors running individual tests that call into the database

2012-06-11 Thread Daniel P. Berrange
On Mon, Jun 11, 2012 at 05:04:51PM +0100, John Garbutt wrote: > Hi, > > I am trying to run tests like "test_xenapi" and "test_libvirt" by > themselves do things like: >nosetests test_xenapi > But it does work, I get DB errors relating to missing tables. > However, I can successfully run all th

Re: [Openstack] Errors running individual tests that call into the database

2012-06-11 Thread Daniel P. Berrange
On Mon, Jun 11, 2012 at 05:51:44PM +0100, Daniel P. Berrange wrote: > On Mon, Jun 11, 2012 at 05:04:51PM +0100, John Garbutt wrote: > > Hi, > > > > I am trying to run tests like "test_xenapi" and "test_libvirt" by > > themselves do things like: >

[Openstack] List of glance image metadata tags used by nova ?

2012-06-13 Thread Daniel P. Berrange
I was recently pointed at this changeset which adds CPU arch filtering to the Nova schedular. https://review.openstack.org/#/c/8267/ IIUC, this relies on any disk images registered with glance having a 'architecture' metadata tag assigned. Some of the plans I have for improving the Libvirt dri

Re: [Openstack] List of glance image metadata tags used by nova ?

2012-06-14 Thread Daniel P. Berrange
about the v2 images API can I read up on. In the meantime, I'll just carry on with the current ad-hoc practice for parameters I need to add. > On Jun 13, 2012, at 2:34 AM, Daniel P. Berrange wrote: > > > I was recently pointed at this changeset which adds CPU arch filtering &g

Re: [Openstack] Thoughts on client library releasing

2012-06-20 Thread Daniel P. Berrange
On Tue, Jun 19, 2012 at 11:07:05AM -0700, Monty Taylor wrote: > I'm going to top-post, because there is a whole other thing which is not > a response to points below. Basically, this is yet-another-instance of > two competing and partially contradictory sets of use cases and usage > patterns that w

Re: [Openstack] [devstack] Easing maintenance of list of distro packages to install

2012-06-20 Thread Daniel P. Berrange
On Wed, Jun 20, 2012 at 12:06:46PM +0200, Vincent Untz wrote: > Hi, > > In devstack, we currently have two separate lists of packages to > install: one for Ubuntu (in files/apts/) and one for Fedora (in > files/rpms/). > > This has two issues: > > - this leads to incomplete updates for dependen

Re: [Openstack] [devstack] Easing maintenance of list of distro packages to install

2012-06-21 Thread Daniel P. Berrange
On Wed, Jun 20, 2012 at 11:02:23AM -0700, Joshua Harlow wrote: > Everyone should really check out... > > https://github.com/yahoo/Openstack-Anvil/tree/master/conf/distros > > It is nice to have a standard yaml format that isn't a new > micro-custom-format that we have to figure out how to parse.

Re: [Openstack] HVM + Xen Hypervisor via libvirt possible?

2012-06-21 Thread Daniel P. Berrange
On Fri, Jun 22, 2012 at 12:17:11AM +0800, Huang Zhiteng wrote: > Of course it is possible. What kind of issue did you run into? > > On Thu, Jun 21, 2012 at 5:52 PM, Wang Li wrote: > > hi,all > > > > I need to run virtual machines on Xen Hypervisor in HVM mode, > > is it possible when using libvi

Re: [Openstack] HVM + Xen Hypervisor via libvirt possible?

2012-06-22 Thread Daniel P. Berrange
On Fri, Jun 22, 2012 at 11:22:13AM +0800, Li Wang wrote: > Thanks all for replying. > > We want to stick on to the Xen Hypervisor for some reason. > > 1. Does the community plan to support this feature? I'd like to see it supported by Nova, because it would improve the libvirt driver in general,

Re: [Openstack] New mailing list server [status update]

2012-06-26 Thread Daniel P. Berrange
On Mon, Jun 25, 2012 at 04:39:58PM -0700, Stefano Maffulli wrote: > Hello folks, > > we're getting closer to being able to have a new mailing list manager. > Duncan and the infra team have a new machine running, with mailman > installed. We tested also the migration of the archives, successfully.

[Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-27 Thread Daniel P. Berrange
use config APIs The get_cpu_info method in the libvirt driver currently uses XPath queries to extract information from the capabilities XML document. Switch this over to use the new config class LibvirtConfigCaps. Also provide a test case to validate the data being returned

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-27 Thread Daniel P. Berrange
, which is > another argument for this :-) > > However, one comment: > > Le mercredi 27 juin 2012, à 11:52 +0100, Daniel P. Berrange a écrit : > > It might be mentioned that Gerrit's handling of patch series is not entirely > > perfect. This is a not a valid reason

Re: [Openstack] HVM + Xen Hypervisor via libvirt possible?

2012-06-28 Thread Daniel P. Berrange
On Wed, Jun 27, 2012 at 02:47:59PM -0600, Jim Fehlig wrote: > Daniel P. Berrange wrote: > > On Fri, Jun 22, 2012 at 12:17:11AM +0800, Huang Zhiteng wrote: > > > >> Of course it is possible. What kind of issue did you run into? > >> > >> On Th

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-28 Thread Daniel P. Berrange
On Thu, Jun 28, 2012 at 12:01:10PM +0200, Thierry Carrez wrote: > Daniel P. Berrange wrote: > > [...] > > In other words, when reviewing a change in Gerrit, do not simply look at > > the correctness of the code. Review the commit message itself and request > > improvemen

Re: [Openstack] LibVirt Error

2012-06-28 Thread Daniel P. Berrange
On Thu, Jun 28, 2012 at 04:26:15PM +0530, Trinath Somanchi wrote: > 2012-06-28 16:24:00 TRACE nova.compute.manager [instance: > 7741f67f-ad78-4777-a5a0-6636eb8b460e] libvirtError: Unable to read from > monitor: Connection reset by peer This looks like the interesting error messages from that huge

[Openstack] Jenkins vs SmokeStack tests & Gerrit merge blockers

2012-06-28 Thread Daniel P. Berrange
Today we face a situation where Nova GIT master fails to pass all the libvirt test cases. This regression was accidentally introduced by the following changeset https://review.openstack.org/#/c/8778/ If you look at the history of that, the first SmokeStack test run fails with some (presumably)

Re: [Openstack] Jenkins vs SmokeStack tests & Gerrit merge blockers

2012-06-28 Thread Daniel P. Berrange
On Thu, Jun 28, 2012 at 08:13:28AM -0700, Monty Taylor wrote: > On 06/28/2012 07:32 AM, Daniel P. Berrange wrote: > > This leaves me with the following questions... > > > > 1. Why was the recorded failure from SmokeStack not considered > > to be a blocker for

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-28 Thread Daniel P. Berrange
On Thu, Jun 28, 2012 at 09:21:20AM -0700, Johannes Erdfelt wrote: > First off, I wanted to say I think these are a great set of > recommendations. > > On Wed, Jun 27, 2012, Daniel P. Berrange wrote: > > Fixes: bug #1003373 > > Implements: blueprint libvirt-xml-cpu

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-06-29 Thread Daniel P. Berrange
On Fri, Jun 29, 2012 at 04:57:06AM +, Vaze, Mandar wrote: > > I particularly hate the single-line "Fixes bug 1234566"-type commit > > messages. > > I assume your concern was regarding commits where "Fixes bug 1234566" is the > first and ONLY line. > > "Fixes bug 1234566" comes from Wiki. >

Re: [Openstack] RFC: Thoughts on improving OpenStack GIT commit practice/history

2012-07-02 Thread Daniel P. Berrange
On Fri, Jun 29, 2012 at 03:27:25PM -0500, Andrew Bogott wrote: > On 6/27/12 8:40 AM, Daniel P. Berrange wrote: > >On Wed, Jun 27, 2012 at 03:24:21PM +0200, Vincent Untz wrote: > >>Hi, > >> > >> > >>It'd be really great if we could first improve G

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-02 Thread Daniel P. Berrange
On Sat, Jun 30, 2012 at 09:25:10PM -0400, Lars Kellogg-Stedman wrote: > > So, maybe setting any of this environment variables for nova-compute > > to desired value sholuld help. > > Yeah, I was expecting that. > > Given that this could easily take out a compute host I'd like to see > it get an ex

Re: [Openstack] Jenkins and transient failures

2012-07-02 Thread Daniel P. Berrange
On Sun, Jul 01, 2012 at 08:40:36AM -0700, James E. Blair wrote: [snip] > So with all that background, I think we should discuss the following at > the CI team meeting on Tuesday: [snip] > 3) Decide on a course of action to mitigate failures from transient > gerrit errors (but continue to work on

Re: [Openstack] [OpenStack][Nova] Issues with "run_tests.sh", no tests are run when "import libvirt is present"

2012-07-02 Thread Daniel P. Berrange
On Mon, Jul 02, 2012 at 01:43:31PM +0100, Leander Bessa Beernaert wrote: > So, if no system packages can be imported, how do you test the "connection" > class for the libvirt driver? > > How does that particular test case wrap around the fact that it requires > the libvirt module? The only thing i

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-02 Thread Daniel P. Berrange
On Mon, Jul 02, 2012 at 10:24:02AM -0700, Matt Joyce wrote: > I like the idea of making this a flagfile option. In the particular case of the qemu-img command described in earlier in this thread, I'm not convinced we need a new option. Instead of using /tmp when extracting a snapshot from an exist

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-02 Thread Daniel P. Berrange
On Mon, Jul 02, 2012 at 08:17:08AM -0700, Johannes Erdfelt wrote: > On Mon, Jul 02, 2012, Daniel P. Berrange wrote: > > In Fedora 18, /tmp is going to be a RAM filesystem, so we absolutely > > must not create any sizeable files on /tmp. > > > > In addition from a s

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-03 Thread Daniel P. Berrange
On Mon, Jul 02, 2012 at 12:09:55PM -0700, Johannes Erdfelt wrote: > On Mon, Jul 02, 2012, Daniel P. Berrange wrote: > > On Mon, Jul 02, 2012 at 08:17:08AM -0700, Johannes Erdfelt wrote: > > > Not using /tmp for large files is a good reason for practical reasons > > &g

Re: [Openstack] How do I stop image-create from using /tmp?

2012-07-03 Thread Daniel P. Berrange
On Tue, Jul 03, 2012 at 11:01:11AM +0100, John Garbutt wrote: > Sorry to go back in the tread, but just wanted to ask a possibly dumb > question. > > > Daniel P. Berrange wrote: > > In the particular case of the qemu-img command described in earlier in this > > thread

Re: [Openstack] [CI] Retriggering Jenkins from Gerrit

2012-07-04 Thread Daniel P. Berrange
On Tue, Jul 03, 2012 at 04:48:32PM -0700, James E. Blair wrote: > Hi, > > As mentioned in the thread "Jenkins and transient failures", we've had > an unusually high number of transient failures in Jenkins lately. We've > done several things in response to that: > > 1) Monty identified a problem

Re: [Openstack] OpenStack "G" naming poll

2012-07-04 Thread Daniel P. Berrange
On Wed, Jul 04, 2012 at 10:02:46AM +0200, Thierry Carrez wrote: > Brian Waldon wrote: > > On Jul 3, 2012, at 5:21 PM, Monty Taylor wrote: > >> At the g summit, we'd tell everyone where the next summit is: > >> At the g summit, we'd vote and announce the name of h > >> We wouldn't have to spend half

Re: [Openstack] [RFC] Add more host checks to the compute filter

2012-07-04 Thread Daniel P. Berrange
On Tue, Jul 03, 2012 at 04:07:36PM -0600, Jim Fehlig wrote: > Hi Daniel, > > Attached is a patch that implements filtering on (architecture, > hypervisor_type, vm_mode) tuple as was discussed in this previous patch > > https://review.openstack.org/#/c/9110/ > > CC'ing Chuck since he is the autho

Re: [Openstack] [OpenStack][Nova] Live Migration + NFSv4 - Permission issues

2012-07-04 Thread Daniel P. Berrange
On Tue, Jul 03, 2012 at 02:48:05PM +0100, Leander Bessa Beernaert wrote: > Hello all, > > I've been trying to get the live migration to work according to the guide > http://docs.openstack.org/trunk/openstack-compute/admin/content/configuring-live-migrations.html. > > So far i've setup 2 compute n

Re: [Openstack] [OpenStack][Nova] Live Migration + NFSv4 - Permission issues

2012-07-04 Thread Daniel P. Berrange
On Wed, Jul 04, 2012 at 04:24:42PM +0100, Leander Bessa Beernaert wrote: > Ok. so i have added the option you mentioned, restarted nfs and remounted > on the compute nodes. > > Now i get this error: http://paste.openstack.org/show/19260/ libvirtError: internal error Process exited while reading

Re: [Openstack] Time for a UK Openstack User Group meeting ?

2012-07-04 Thread Daniel P. Berrange
On Wed, Jul 04, 2012 at 04:38:28PM +0100, Day, Phil wrote: > Hi All, > > I'm thinking it's about time we had an OpenStack User Group meeting > in the UK , and would be interested in hearing from anyone interested > in attending, presenting, helping to organise, etc. I can do presentations about l

[Openstack] Libvirt LXC with volume-attach broken ?

2012-07-05 Thread Daniel P. Berrange
In the Libvirt driver there is special-case code for LXC to deal with the volume-attach functionality, since there is no "block device attach" functionality in libvirt for LXC. The code in question was added in commit e40b659d320b3c6894862b87adf1011e31cbf8fc Author: Chuck Short Date: Tue

Re: [Openstack] Libvirt LXC with volume-attach broken ?

2012-07-05 Thread Daniel P. Berrange
On Thu, Jul 05, 2012 at 03:00:26PM +0100, Daniel P. Berrange wrote: > Now, when using 'nova volume-attach': > > # nova volume-attach 05eb16df-03b8-451b-85c1-b838a8757736 > a5ad1d37-aed0-4bf6-8c6e-c28543cd38ac /dev/sdf > > nova will import an iSCSI LUN from the

Re: [Openstack] Libvirt LXC with volume-attach broken ?

2012-07-06 Thread Daniel P. Berrange
On Thu, Jul 05, 2012 at 06:49:06PM -0700, Eric W. Biederman wrote: > Serge Hallyn writes: > > > Quoting Daniel P. Berrange (berra...@redhat.com): > >> On Thu, Jul 05, 2012 at 03:00:26PM +0100, Daniel P. Berrange wrote: > >> > Now, when using 'nova volume-a

Re: [Openstack] Libvirt LXC with volume-attach broken ?

2012-07-06 Thread Daniel P. Berrange
On Fri, Jul 06, 2012 at 02:35:14AM -0700, Eric W. Biederman wrote: > "Daniel P. Berrange" writes: > > The part of the problem is that I have a /dev/sdf, or even a > > /dev/volgroup00/logvol3 in the host (with whatever major:minor > > number that implies), and I wa

Re: [Openstack] [OpenStack][Nova] Help with libvirt unit-test - get_diagnostics command

2012-07-06 Thread Daniel P. Berrange
On Fri, Jul 06, 2012 at 11:59:51AM +0100, Leander Bessa Beernaert wrote: > Hello, > > I've been working on implementing the "diagnostics" command for libvirt - > https://review.openstack.org/#/c/8839/ . Now i need to create the unit test > for this new operation. I've been looking at the code to t

Re: [Openstack] How to speed-up removal of a volume in Openstack Essex

2012-07-09 Thread Daniel P. Berrange
On Mon, Jul 09, 2012 at 11:17:13AM +0200, Heber Dijks wrote: > When terminating a volume, openstack default overwrites the complete volume > with zero’s for security reasons. This can take a long time, especially > with large volumes. > > If security isn’t an issue in your environment, you can spe

Re: [Openstack] Inaugurating the new Development list

2012-07-10 Thread Daniel P. Berrange
On Mon, Jul 09, 2012 at 01:56:25PM -0700, Stefano Maffulli wrote: > On Mon 09 Jul 2012 01:48:25 PM PDT, Atul Jha wrote: > > And what happens to openstack@lists.launchpad.net then? > > good question: at the moment nothing happens, this list will remain > active. According to the new mailing list l

Re: [Openstack] Default reply to behavior for mailing list

2012-07-31 Thread Daniel P. Berrange
On Tue, Jul 31, 2012 at 10:50:02AM -0700, Bhuvaneswaran A wrote: > Stefano, > > If a subscriber reply to a mailing list message, it's sent to the > author only. Each subscriber should use "Reply to All" every time, to > post a reply to mailing list. > > Can you please configure the mailing list a

Re: [Openstack] KVM live block migration: stability, future, docs

2012-08-08 Thread Daniel P. Berrange
On Wed, Aug 08, 2012 at 09:50:20AM +0800, Huang Zhiteng wrote: > > But to the contrary. I tested live-migrate (without block migrate) > > last night using a guest with 8GB RAM (almost fully committed) and > > lost any access/contact with the guest for over 4 minutes - it was > > paused for the dura

Re: [Openstack] KVM live block migration: stability, future, docs

2012-08-08 Thread Daniel P. Berrange
On Tue, Aug 07, 2012 at 04:13:22PM -0400, Jay Pipes wrote: > On 08/07/2012 08:57 AM, Blair Bethwaite wrote: > >> I also feel a little concern about this statement: > >> > >>> It don't work so well, it complicates migration code, and we are building > >>> a replacement that works. > >> > >> > >> I

Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-08 Thread Daniel P. Berrange
On Wed, Aug 08, 2012 at 12:33:57AM -0400, Eric Windisch wrote: > > > > > > What's the security vulnerability here? Its writing to something which > > might be a symlink to somewhere special, right? > > > > Mounting filesystems tends to be a source of vulnerabilities in and of > itself. There are u

Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-08 Thread Daniel P. Berrange
On Wed, Aug 08, 2012 at 02:17:30PM +0200, Thierry Carrez wrote: > Eric Windisch wrote: > > Unfortunately, this won't be the end of vulnerabilities coming from this > > "feature". > > Indeed. I would like to see evil file injection die, and be replaced by > cloud-init / config-drive. That's the sa

Re: [Openstack] KVM live block migration: stability, future, docs

2012-08-09 Thread Daniel P. Berrange
On Thu, Aug 09, 2012 at 07:10:17AM -0700, Vishvananda Ishaya wrote: > > On Aug 9, 2012, at 1:03 AM, Blair Bethwaite wrote: > > > Hi Daniel, > > > > Thanks for following this up! > > > > On 8 August 2012 19:53, Daniel P. Berrange wrote: > >>

Re: [Openstack] [nova] Call for Help -- OpenStack API XML Support

2012-08-10 Thread Daniel P. Berrange
On Thu, Aug 09, 2012 at 03:25:01PM -0700, Vishvananda Ishaya wrote: > Hello Everyone, > > We are in the unfortunate position of not knowing how good our OpenStack > API XML support is. All of our integration tests use json. Many of the > compute extensions don't even have XML deserializers. We als

Re: [Openstack] [OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)

2012-08-14 Thread Daniel P. Berrange
On Tue, Aug 14, 2012 at 11:30:29AM -0700, Matt Joyce wrote: > I have to ask. Wasn't FUSE designed to do alot of this stuff? It is > userspace and it doesn't do nasty stuff to file systems. Why aren't we > going that route? If you read earlier in this thread, you'll see that FUSE is what Nova al

Re: [Openstack] [nova] Disk attachment consistency

2012-08-15 Thread Daniel P. Berrange
On Wed, Aug 15, 2012 at 03:49:45PM +0100, John Garbutt wrote: > You can see what XenAPI exposes here: > http://docs.vmd.citrix.com/XenServer/6.0.0/1.0/en_gb/api/?c=VBD > > I think the only thing you can influence when plugging in the disk is the > “userdevice” > which is the disk position: 0,1,2

Re: [Openstack] openstack libvirt lxc

2012-08-21 Thread Daniel P. Berrange
On Tue, Aug 21, 2012 at 10:19:34AM +0800, 廖南海 wrote: > Who use the lxc virtual machine? > Please give me some advices? My advice would be not to use LXC since, as it exists today, it is not secure. ie root within the container can break out & compromise the entire host. This is not really the faul

Re: [Openstack] Scheduler issues in folsom

2012-10-31 Thread Daniel P. Berrange
On Wed, Oct 31, 2012 at 10:40:57AM +0800, Huang Zhiteng wrote: > On Wed, Oct 31, 2012 at 10:07 AM, Vishvananda Ishaya > wrote: > > > > On Oct 30, 2012, at 7:01 PM, Huang Zhiteng wrote: > > > >> I'd suggest the same ratio too. But besides memory overcommitment, I > >> suspect this issue is also r

Re: [Openstack] HPC with Openstack?

2011-12-06 Thread Daniel P. Berrange
On Mon, Dec 05, 2011 at 09:07:06PM -0500, Lorin Hochstein wrote: > > > On Dec 4, 2011, at 7:46 AM, Soren Hansen wrote: > > > 2011/12/4 Lorin Hochstein : > >> Some of the LXC-related issues we've run into: > >> > >> - The CPU affinity issue on LXC you mention. Running LXC with OpenStack, > >> y

Re: [Openstack] [DODCS] HPC with Openstack?

2011-12-06 Thread Daniel P. Berrange
On Tue, Dec 06, 2011 at 12:04:53PM -0800, Dong-In David Kang wrote: > > > - Original Message - > > On Mon, Dec 05, 2011 at 09:07:06PM -0500, Lorin Hochstein wrote: > > > > > > > > > On Dec 4, 2011, at 7:46 AM, Soren Hansen wrote: > > > > > > > 2011/12/4 Lorin Hochstein : > > > >> Some of

Re: [Openstack] Tempita usage?

2012-01-05 Thread Daniel P. Berrange
On Tue, Jan 03, 2012 at 11:17:45AM -0800, Joshua Harlow wrote: > I was wondering if there has been any thought or consideration of removing > tempita and replacing it with "just python". > Personally the current tempita usage (libvirt.xml.template) seems to be > heading down a hairy path and I wa

Re: [Openstack] Tempita usage?

2012-01-06 Thread Daniel P. Berrange
On Thu, Jan 05, 2012 at 10:33:00AM -0800, Joshua Harlow wrote: > Hmmm, so the RNG schemas aren't stable? Is that basically > the problem there (or part of it)? That seems not so good, > since I thought the whole point of publishing schemas was > for people to use them, darn :( Well there are two d

Re: [Openstack] Tempita usage?

2012-01-06 Thread Daniel P. Berrange
On Fri, Jan 06, 2012 at 10:36:58AM -0800, Joshua Harlow wrote: > Cool, > > Maybe I can get a branch out there that u can start hooking in by early feb. > > That would seem like a good use of time :-) Great, sounds like a good plan. Daniel -- |: http://berrange.com -o-http://www.flick

Re: [Openstack] Nova is considering Xen Domain-0 as instance

2012-01-12 Thread Daniel P. Berrange
On Thu, Jan 12, 2012 at 07:36:59PM -0200, Rogério Vinhal Nunes wrote: > I really need some help in getting this to work. This seems pretty simple, > just tell nova-compute to ignore any instance named Domain-0 (actually it > could ignore any instance not named 'instance-'). As there is a >

Re: [Openstack] Nova is considering Xen Domain-0 as instance

2012-01-16 Thread Daniel P. Berrange
On Mon, Jan 16, 2012 at 10:29:19AM -0200, Rogério Vinhal Nunes wrote: > As Daniel suggested, I just ignored the ID == 0 and it seems to work fine > now. The resulting code is even simpler than suggested by Vish: > > def list_instances(self): > return [self._conn.lookupByID(x).name() >

Re: [Openstack] [Nova] Essex dead wood cutting

2012-02-06 Thread Daniel P. Berrange
On Thu, Feb 02, 2012 at 11:52:17AM +, Armando Migliaccio wrote: > To the best of my knowledge, the ESXi support is up to date. There may be > bugs, but which virt driver is perfect ;)? > > Sateesh may know more, because he is the main contributor/maintainer from > Citrix. > > However, as Vi

Re: [Openstack] Wiki content imported into MediaWiki - please check

2012-12-19 Thread Daniel P. Berrange
On Mon, Dec 17, 2012 at 06:51:23PM -0800, Ryan Lane wrote: > I've just finished importing the content from the MoinMoin wiki into the > MediaWiki instance. Please check the content: > > https://wiki-staging.openstack.org/wiki/Main_Page > > We're using a self-signed certificate for now. We are ord

Re: [Openstack] Nova root wrapper understanding

2013-01-11 Thread Daniel P. Berrange
On Fri, Jan 11, 2013 at 11:32:08AM +0100, Thierry Carrez wrote: > Kun Huang wrote: > > In this wiki, http://wiki.openstack.org/Nova/Rootwrap, the part of > > "security model" results in "This chain ensures that the nova user > > itself is not in control of the configuration or modules used by the >

Re: [Openstack] Audio card for libvirt/kvm in folsom

2013-01-11 Thread Daniel P. Berrange
On Fri, Jan 11, 2013 at 12:29:35PM +0100, Davide Guerri wrote: > Hi all, > it's possible to add an audio card to the domain definition when using > libvirt/kvm? > If yes, how it can be done? > > I'm using the Folsom release. No, there isn't any support for audio devices in Nova / libvirt at thi

Re: [Openstack] Audio card for libvirt/kvm in folsom

2013-01-11 Thread Daniel P. Berrange
On Fri, Jan 11, 2013 at 02:56:23PM +0100, Davide Guerri wrote: > Daniel, > let me explain what I'm trying to do. > I'm trying to setup a simple virtual desktop infrastructure on the > top of OpenStack using both Windows (7 only atm) and Linux guests. > > On Linux the missing audio board wouldn't

Re: [Openstack] Audio card for libvirt/kvm in folsom

2013-01-11 Thread Daniel P. Berrange
On Fri, Jan 11, 2013 at 10:53:25PM +0800, 孙玉新 wrote: > Davide, > > If you use KVM, it's possible to enable audio. > Please refer http://libvirt.org/formatdomain.html#elementsSound > > Here is some infomation about how to enable it in nova: > http://www.gossamer-threads.com/lists/openstack/opera

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

2013-01-21 Thread Daniel P. Berrange
On Sun, Jan 20, 2013 at 01:46:58PM +0800, harryxiyou wrote: > Hi all, > > I read the source code of Openstack Nova branch source codes but i > can not find the standard libvirt library packages, which i think > Nova uses libvirt > interfaces they are from standard libvirt library to attach Sheepd

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

2013-01-21 Thread Daniel P. Berrange
On Tue, Jan 22, 2013 at 12:13:57AM +0800, harryxiyou wrote: > On Mon, Jan 21, 2013 at 8:14 PM, Daniel P. Berrange > wrote: > [...] > > The nova driver for talking to libvirt is in nova/virt/libvirt/ > > > Yup, i think so. Therefore, i also think nova driver in nova

Re: [Openstack] [Openstack-dev]Where is libvirt library packages in Openstack Nova branch

2013-01-21 Thread Daniel P. Berrange
On Tue, Jan 22, 2013 at 01:08:23AM +0800, harryxiyou wrote: > On Tue, Jan 22, 2013 at 12:20 AM, Daniel P. Berrange > wrote: > [...] > > Nova simply uses the standard "libvirt" python module, which is a thin > > python wrapper around the libvirt.so C library. >

Re: [Openstack] [nova] python-novaclient 2.11.0 release

2013-02-13 Thread Daniel P. Berrange
On Tue, Feb 12, 2013 at 09:41:11PM -0800, Vishvananda Ishaya wrote: > Hello Everyone, > > I just pushed version 2.11.0 of python-novaclient to Pypi. There are a lot of > fixes and features in this release. Here is a brief overview: > > Bug Fixes > - > > simplified keyring support Sigh,

Re: [Openstack] spice in devstack no working

2013-02-28 Thread Daniel P. Berrange
On Fri, Mar 01, 2013 at 02:33:32AM +0800, Shake Chen wrote: > Hi > > I try to enable spice in devstack, but when I create vm, would report > error. if not enable spice, it is work well. If you want help, you're going to have to tell us much more than just "would report error". What OS distro are

Re: [Openstack] [OpenStack] Guest OS shows just one CPU core instead of two

2013-03-05 Thread Daniel P. Berrange
On Tue, Mar 05, 2013 at 04:00:06PM +0530, Balamurugan V G wrote: > Hi, > > I am running Folsom 2.2 with a KVM compute node. When I launch a windows > instance with flavor that has 2 VCPUs and 2Gb RAM, the guest seems the RAM > fine but not the 2 CPUs. It reports only one Virtual processor. Whne I

Re: [Openstack] [OSSG] Security Note: Selecting LXC as Nova Virtualization Driver can lead to data compromise.

2013-03-15 Thread Daniel P. Berrange
On Fri, Mar 15, 2013 at 10:44:40AM +, Clark, Robert Graham wrote: > The following is the first of a series of OpenStack Security Notes that will > be issued by the OpenStack Security Group. Security notes are similar to > advisories; they address vulnerabilities in 3rd party tools typically u

Re: [Openstack] [OSSG] Security Note: Selecting LXC as Nova Virtualization Driver can lead to data compromise.

2013-03-15 Thread Daniel P. Berrange
On Fri, Mar 15, 2013 at 09:05:30AM -0700, Bryan D. Payne wrote: > >> The quality of container isolation in LXC heavily depends on > >> implementation. While > >> pure LXC is generally well-isolated through various mechanisms (for > >> example AppArmor > >> in Ubuntu), LXC through libvirt is not.

Re: [Openstack] [OSSG] Security Note: Selecting LXC as Nova Virtualization Driver can lead to data compromise.

2013-03-19 Thread Daniel P. Berrange
On Tue, Mar 19, 2013 at 01:38:42PM +, Clark, Robert Graham wrote: > Daniel, > > I agree with your modification and have made a note of it on the bug page. > I'll make sure to change it when we have a sensible place to publish all > of our OSSNs. > > Thanks for engaging on this issue, we now h

Re: [Openstack] CY13-Q1 Community Analysis — OpenStack vs OpenNebula vs Eucalyptus vs CloudStack

2013-04-03 Thread Daniel P. Berrange
On Wed, Apr 03, 2013 at 12:15:21PM +0200, Thierry Carrez wrote: > Qingye Jiang (John) wrote: > > I saw Jay's suggestion on removing review.openstack.org from the git domain > > analysis. Can you shed some light on how this system works? Is this system > > shadowing more real code contributors? >

  1   2   >