Re: [Openstack] Network setup with floating IP

2013-08-06 Thread Cristian Falcas
external gateway is supposed to be down, I think: I have floating IP working and the external network is down. Cristi Falcas On Tue, Aug 6, 2013 at 9:03 AM, Batsayan Das wrote: > > Hello, > > I am trying to deploy devstack in Dell R910 with Ubuntu 12.04 as host OS. I > installed devstack in the

Re: [Openstack] Adding Ubuntu Images to Xenserver Powered Devstack

2013-08-06 Thread Bob Ball
The qcow2 images provided by Ubuntu aren't set up correctly for the Xen console - this means that the output during the boot process doesn't go to the screen. If you leave the image it should eventually (after perhaps 5 minutes on first boot) reach the login prompt. If you have injected credent

Re: [Openstack] Network setup with floating IP

2013-08-06 Thread Batsayan Das
How does the VM's connect outside if the external network is down? Sorry, I am not so good in networking, it may be stupid question. Can you share your localrc file? Regards, Batsayan Das Tata Consultancy Services Mailto: batsayan@tcs.com Website: http://www.tcs.com ___

[Openstack] Deprecating Nova images API in the V3 API

2013-08-06 Thread Christopher Yeoh
Hi, There is currently an ongoing discussion on the development list about deprecating the Nova images api for V3 API on the development mailing list: http://lists.openstack.org/pipermail/openstack-dev/2013-August/012958.html This would mean that if you were using the Nova V3 API instead of maki

Re: [Openstack] Network setup with floating IP

2013-08-06 Thread Cristian Falcas
I'm using openstack in oracle-linux. The external connection is done with snat. The external ip is forwarded to the internal ip. You can see the rules with: iptables -S -t nat You can read some info here (How floating IPs work): http://www.mirantis.com/blog/configuring-floating-ip-addresses-net

Re: [Openstack] Instance cannot access internet

2013-08-06 Thread Jake G.
Yeah I saw that mistake so i change my subnet to192.168.100.0/24 which should be able to communicate now. But I still have the same problem. Could it be a problem with br-ex or br-int? On the network topology view the gateway for the public network still does not display properly. Like it is

Re: [Openstack] nova block migration fail - ImageNotFound

2013-08-06 Thread james
Hi, Yes that is installed on on both machines ~# qemu-img qemu-img version 1.0, Copyright (c) 2004-2008 Fabrice Bellard usage: qemu-img command [command options] QEMU disk image utility ~# qemu-img qemu-img version 1.0, Copyright (c) 2004-2008 Fabrice Bellard usage: qemu-img command [command opt

Re: [Openstack] [SWIFT] PUTs and GETs getting slower

2013-08-06 Thread Klaus Schürmann
The network traffic seems to be ok: proxy-server1 external net: http://www.schuermann.net/temp/proxy1-external.png proxy-server1 internal net: http://www.schuermann.net/temp/proxy1-internal.png storagenode1: http://www.schuermann.net/temp/storage1.png klaus Von: Hu

[Openstack] DB access not allowed for libvirt driver?

2013-08-06 Thread Peeyush Gupta
Hi all, I am trying to access nova.db from nova.virt.libvirt.driver for some experiment purposes. When I tried that, I got an error saying "DB not allowed: nova compute". Why am I getting this? Is libvirt driver not allowed to talk to db? Thanks.   ~Peeyush Gupta_

Re: [Openstack] DB access not allowed for libvirt driver?

2013-08-06 Thread Robert Collins
Thats correct, it needs to go via the conductor now. At least, thats my understanding. -Rob On 6 August 2013 23:39, Peeyush Gupta wrote: > Hi all, > > I am trying to access nova.db from nova.virt.libvirt.driver for some > experiment purposes. When I tried that, I got an error saying "DB > not a

[Openstack] Cinder basic questions

2013-08-06 Thread Bryan Solie
I am running OpenStack grizzly on Ubuntu 12.04 with XenServer. I have tried configuring Cinder with a few different backends, but am not able to get the end-to-end attachment process working. I have tried LVM/iscsi driver: The volumes can be created. I attach them, and it returns successful

Re: [Openstack] Cinder basic questions

2013-08-06 Thread Bob Ball
Hi Bryan, The volumes should appear in the guest under /dev/xvd when they are added. As long as the guest has PV drivers it should work - so HVM guests (such as Windows or if you have installed Linux as HVM) with PV drivers will also see these volumes added (although clearly with Windows they d

Re: [Openstack] Cinder basic questions

2013-08-06 Thread Bryan Solie
Thanks Bob. I will monkey with the iscsi a little more to understand how the xenserver relationship works. Thanks for the leads. But one followup question: So all I need is xentools installed on the guest for it to be considered paravirtualized? Bryan On Aug 6, 2013, at 8:47 AM, Bob Ball

Re: [Openstack] Openstack login via SimpleSamlPHP (LDAP, OAuth, OpenID, etc..)

2013-08-06 Thread Adam Young
On 08/06/2013 08:37 AM, Rok Kralj wrote: As far as I know, the ability to log in to OpenStack via arbitrary Identity Provider (IdP) is a widely desired feature. Therefore, we have decided to integrate Keystone & Horizon with *Simple Saml PHP*, Why PHP? THis is a very interesting approach, but

Re: [Openstack] Cinder basic questions

2013-08-06 Thread Bob Ball
The xentools (which can be more restrictively referred to as the guest agent) are usually independent of the PV drivers. Most modern linux kernels include PV drivers - see http://wiki.xen.org/wiki/Xen_Linux_PV_on_HVM_drivers, so if you boot them in HVM mode they will negotiate up to use the PV

[Openstack] python-novaclient 2.14.0 released

2013-08-06 Thread Russell Bryant
Greetings, I just pushed out a new release of python-novaclient - 2.14.0. This release contains a number of features and bug fixes from the last 4 months. Here is a list of changes in this release: Feature commits include: 0d45408 Support programmatic use of disk config extension 8b5dcee Add u

Re: [Openstack] Adding Ubuntu Images to Xenserver Powered Devstack

2013-08-06 Thread Qin Jia
Thank you Bob! However, it doesn't help to wait for 5 minutes or inject credentials to the instance. It still got automatically *shut-off *at first, and then after I * restarted* it at the xenserver command or xencenter, it got stuck at that that message and never changed states for hours. Do you

Re: [Openstack] DB access not allowed for libvirt driver?

2013-08-06 Thread Russell Bryant
On 08/06/2013 07:54 AM, Robert Collins wrote: > Thats correct, it needs to go via the conductor now. > > At least, thats my understanding. That is correct. If you run conductor in local mode, it will let you. In nova.conf: [conductor] use_local=True However, just be aware of the secur

Re: [Openstack] [SWIFT] PUTs and GETs getting slower

2013-08-06 Thread Robert van Leeuwen
Could you check your disk IO on the container /object nodes? We have quite a lot of files in swift and for comparison purposes I played a bit with COSbench to see where we hit the limits. We currently max out at about 200 - 300 put request/second and the bottleneck is the disk IO on the object n

[Openstack] [OSSA 2013-020] Denial of Service in Nova network source security groups (CVE-2013-4185)

2013-08-06 Thread Jeremy Stanley
OpenStack Security Advisory: 2013-020 CVE: CVE-2013-4185 Date: August 6, 2013 Title: Denial of Service in Nova network source security groups Reporter: Vishvananda Ishaya (Nebula) Products: Nova Affects: All versions Description: Vishvananda Ishaya from Nebula reported a denial of service vulnerab

[Openstack] [OSSA 2013-019] Resource limit circumvention in Nova private flavors (CVE-2013-2256)

2013-08-06 Thread Jeremy Stanley
OpenStack Security Advisory: 2013-019 CVE: CVE-2013-2256 Date: August 6, 2013 Title: Resource limit circumvention in Nova private flavors Reporter: hzrandd (NetEase) Products: Nova Affects: All versions Description: hzrandd from NetEase reported a resource limit circumvention vulnerability in Nova

Re: [Openstack] RPC timeout in nova-compute

2013-08-06 Thread Jiaan Zeng
I use a single node setup. The /var/log/rabbitmq- log does show some warnings e.g., "exception on TCP connection <0.13967.0> from 192.168.100.1:57097 connection_closed_abruptly". Below is the log file. What does that exception mean? =INFO REPORT 4-Aug-2013::16:39:00 === closing TCP connection

Re: [Openstack] Adding Ubuntu Images to Xenserver Powered Devstack

2013-08-06 Thread Bob Ball
Hi Qin, (Moved openstack@lists.openstack.org to BCC while we track down the problem - I hope to post the resolution when it is identified) I see - it shouldn't get shut off, that's strange - sorry for not spotting that in your original email. If you could

Re: [Openstack] Openstack login via SimpleSamlPHP (LDAP, OAuth, OpenID, etc..)

2013-08-06 Thread Miller, Mark M (EB SW Cloud - R&D - Corvallis)
How is this different than the new H-2 split backend functionality? From: Rok Kralj [mailto:o...@rok-kralj.net] Sent: Tuesday, August 06, 2013 5:38 AM To: openstack@lists.openstack.org Subject: [Openstack] Openstack login via SimpleSamlPHP (LDAP, OAuth, OpenID, etc..) As far as I know, the abili

[Openstack] [Ceilometer] filter event samples

2013-08-06 Thread Alessandro Barabesi
Hi everybody, is there a way to avoid event samples from list of samples and statistics? I use statistics to measure the time a group of resources has existed. For example, in order to measure how many instances of a given flavor existed in a day I use the following query http://10.10.10.10:87

Re: [Openstack] RPC timeout in nova-compute

2013-08-06 Thread Ritesh Nanda
Hello jiaan, Can you paste your nova and quantum(l3-agent,dhcp) conf , even logs for quantum. Regards, Ritesh Sent from my Windows Phone From: Jiaan Zeng Sent: 06-08-2013 09:12 PM To: Ritesh Nanda; openstack@lists.openstack.org Subject: Re: [Openstack] RPC timeout in nova-compute I use a single

Re: [Openstack] RPC timeout in nova-compute

2013-08-06 Thread Jiaan Zeng
OK. Attached please find all the configuration files. I did not edit l3_agent.ini and dhcp_agent.ini though. Where are the quantum log files? I checked /var/log/quantum. All files under that folder are several days old. But I can see all quantum-* service are in running status. Thanks for taking

[Openstack] Webinar: Making the most of your Windows desktop on OpenStack

2013-08-06 Thread David Scannell
Hi All, At the last design summit in Portland, Tim Smith gave a talk about running Windows on Openstack[1]. In case any of you missed the talk or have some follow up questions, Tim will be hosting a webinar next Wednesday, August 14th, 2013 at 1:00PM EDT. During the webinar Tim will touch upon

Re: [Openstack] Openstack login via SimpleSamlPHP (LDAP, OAuth, OpenID, etc..)

2013-08-06 Thread Tim Bell
I would be very interested in a native SAML for single sign on implementation with Horizon login. This would mean Python rather than PHP along with potentially (I think) creating a situation where a user can use the Web GUI through single sign on but not able to use CLI. Depending on the u

Re: [Openstack] Openstack login via SimpleSamlPHP (LDAP, OAuth, OpenID, etc..)

2013-08-06 Thread Joe Savak
If we allow Keystone to handle the identity federation (both with an incoming SAML to token exchange and an outgoing token to SAML exchange), then wouldn’t both GUI and CLI SSO be possible? See here for more information: https://blueprints.launchpad.net/keystone/+spec/virtual-idp And a pretty pi

[Openstack] Quantum agent-list not present in Debian Grizzly packages

2013-08-06 Thread guilla...@cheramy.name
Hello, I try too install Openstack Grizzly on Debian Wheezy serveurs with http://archive.gplhost.com/debian repos. My installation is a 3 node with OVS plugins like this : https://github.com/mseknibilel/OpenStack-Grizzly-Install-Guide/blob/OVS_MultiNode/OpenStack_Grizzly_Install_Guide.rst

Re: [Openstack] Quantum agent-list not present in Debian Grizzly packages

2013-08-06 Thread Thomas Goirand
Hi, please submit this as a bug to the Debian BTS, so I wont forget to fix it. Thomas On Tue Aug  6 2013 10:20:21 PM CEST, guilla...@cheramy.name wrote: > Hello, > >     I try too install Openstack Grizzly on Debian Wheezy serveurs with > http://archive.gplhost.com/debian repos. My installa

[Openstack] [OpenStack] python-cinderclient 1.0.5 release

2013-08-06 Thread John Griffith
Below is a list of the major items that were added in this release. There are a number of other lower priority fixes as well as refactoring and imports from oslo that aren't listed here. 1.0.5 - * Add CLI man page * Add Availability Zone list command * Add support for scheduler-hints * Add sup

Re: [Openstack] Change reseller_prefix?

2013-08-06 Thread Morten Møller Riis
OK. Thanks guys. I was worried that the AUTH_ part was part of the placement. We're using swauth. I'm thinking that setting up another auth might be the way to go if we can't live with the AUTH_ prefix. Mvh / Best regards Morten Møller Riis Gigahost ApS m...@gigahost.dk On Aug 7, 2013, a

Re: [Openstack] Quantum agent-list not present in Debian Grizzly packages

2013-08-06 Thread Jake G.
Try -> neutron agent-list On 2013/08/07, at 5:20, "guilla...@cheramy.name" wrote: > Hello, > >I try too install Openstack Grizzly on Debian Wheezy serveurs with > http://archive.gplhost.com/debian repos. My installation is a 3 node > with OVS plugins like this : > https://github.com/m

[Openstack] How do I define my own hints?

2013-08-06 Thread Peeyush Gupta
Hi, I have been trying to use some hints at the boot time. Now, there are some predefined hints to be used with nova boot command. I  understand that if I give any undefined hint then it will be silently ignored. So, how can I define my own hint, so that  I can use it with nova boot command? Tha