Re: [Openstack] [keystone] could not find keystone.conf

2013-11-25 Thread Antonio Messina
I think you didn't install the keystone package. I have (ubuntu 12.04): Desired=Unknown/Install/Remove/Purge/Hold | Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend |/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad) ||/ Name VersionDescription

[Openstack] Introducing Warm, a tool to setup environment from Yaml

2013-11-25 Thread Sahid Ferdjaoui
Hello all, It's my first message on the ML so maybe I have to introduce myself. My name is Sahid Ferdjaoui, I'm working at Cloudwatt and I'm really happy to be part of this great community. I wanted share with you a tool to setup environments from templates. It exposes APIs on Yaml and I hope

Re: [Openstack] multipath - EMC vs NetApp

2013-11-25 Thread Takashi Natsume
Hello Xing and all, We tried to set up iSCSI multipath with EMC VNX5300. However, we had some problems with setting the iSCSI multipath with EMC VNX5300. So, we analyzed the logs and source codes, and found out that nova-compute (cinder-volume also same) is using a single iSCSI target(IQN) for log

Re: [Openstack] [Nova] Proposed removal of the PowerVM driver

2013-11-25 Thread Thierry Carrez
Chuck Short wrote: > On Fri, Nov 22, 2013 at 4:45 PM, Michael Still > wrote: > >> So, a few questions... >> >> - If there are no users shall we remove it from Havana and Grizzly as >> well, or does that violate our stability principles too much? > > > Spe

[Openstack] the definistion of X-aaS in neutron

2013-11-25 Thread Liu Wenmao
Hi all: I notice that there are two security ACL approaches in neutron: security group and FWaaS, both have standard CUPD operations. why is FWaaS *service*, bug security group is not? I wonder what the definition a service is. thanks Liu Wenmao ___ M

[Openstack] [OSSA 2013-031] Ceilometer DB2/MongoDB backend password leak (CVE-2013-6384)

2013-11-25 Thread Thierry Carrez
OpenStack Security Advisory: 2013-031 CVE: CVE-2013-6384 Date: November 25, 2013 Title: Ceilometer DB2/MongoDB backend password leak Reporter: Eric Brown (IBM) Products: Ceilometer Affects: All supported versions Description: Eric Brown from IBM reported an information leak in Ceilometer logs. The

Re: [Openstack] [Nova] Proposed removal of the PowerVM driver

2013-11-25 Thread Russell Bryant
On 11/25/2013 06:10 AM, Thierry Carrez wrote: >>> - If we don't remove the code from stable, what about removing all >>> references from the stable docs and putting in a warning saying that >>> powervm is a dead end instead? I want to minimise confusion on the >>> part of people de

Re: [Openstack] multipath - EMC vs NetApp

2013-11-25 Thread yang, xing
Hi Takashi, What OpenStack release are you running? iSCSI multipath support was added very late in Grizzly release and there were patches regarding multipath added even after the Grizzly release. EMC VNX5300 should work with iSCSI multipath with Grizzly and beyond. Thanks, Xing -Origi

Re: [Openstack] the definistion of X-aaS in neutron

2013-11-25 Thread Remo Mattei
the FWaaS is different than Security Groups. It acts on the router port whereas Security Groups handles the provider network layer. --  Remo Mattei November 25, 2013 at 7:42:57, Liu Wenmao (marvel...@gmail.com) ha scritto: Hi all: I notice that there are two security ACL approaches in neutro

Re: [Openstack] [Nova] Proposed removal of the PowerVM driver

2013-11-25 Thread Anne Gentle
On Mon, Nov 25, 2013 at 5:10 AM, Thierry Carrez wrote: > Chuck Short wrote: > > On Fri, Nov 22, 2013 at 4:45 PM, Michael Still > > wrote: > > > >> So, a few questions... > >> > >> - If there are no users shall we remove it from Havana and Grizzly > as > >> w

Re: [Openstack] Swift deployment in production

2013-11-25 Thread Pete Zaitcev
On Mon, 25 Nov 2013 10:26:51 +0530 Pravar Jawalekar wrote: > How object/container/auth servers made communicate to actual underlying > storage infrastructure? There's NO "underlying storage architecture", typically. Although you could configure Swift that way, nobody sane does it for production.

Re: [Openstack] [Nova] Proposed removal of the PowerVM driver

2013-11-25 Thread Matt Riedemann
On Monday, November 25, 2013 10:14:00 AM, Anne Gentle wrote: On Mon, Nov 25, 2013 at 5:10 AM, Thierry Carrez mailto:thie...@openstack.org>> wrote: Chuck Short wrote: > On Fri, Nov 22, 2013 at 4:45 PM, Michael Still mailto:mi...@stillhq.com> >

Re: [Openstack] devstack q-dhcp screen: error

2013-11-25 Thread Otávio Augusto
This is what I get from the first 'yum' command: Examining /var/tmp/yum-root-oKG9l4/rdo-release-havana-6.noarch.rpm: rdo-release-havana-6.noarch /var/tmp/yum-root-oKG9l4/rdo-release-havana-6.noarch.rpm: does not update installed package. Error: Nothing to do And, from the second one: Package ipr

[Openstack] intended mode of operation on server evacuation due to compute service failure

2013-11-25 Thread Chris Friesen
Hi, I'm trying to figure out how things are supposed to be done. Suppose I'm running compute nodes using shared instance storage (via NFS, for example). Now suppose I have a network issue which isolates a compute node. I evacuate the instances that were on that node, which causes them to

[Openstack] LbaaS VIP is not accessible from outside

2013-11-25 Thread Nick Maslov
Hi, I created LB in Havana install, and it`s up and running. However, VIP is not accessible from outside of that network, and only from within: root@ctrl01-001:/var/log/ceilometer# curl http://vip This is the default web page for first server. root@ctrl01-001:/var/log/ceilometer# curl http://vi

Re: [Openstack] the definistion of X-aaS in neutron

2013-11-25 Thread Lorin Hochstein
On Mon, Nov 25, 2013 at 10:43 AM, Remo Mattei wrote: > the FWaaS is different than Security Groups. It acts on the router port > whereas Security Groups handles the provider network layer. > > > What's the difference from the point of view of the end-user? In particular, when should they use secu

Re: [Openstack] LbaaS VIP is not accessible from outside

2013-11-25 Thread Eugene Nikanorov
Hi Nick, What you are describing is the by-design behavior: HAProxy provider creates VIP on the tenant network and by default it is accessible only from within. Assigning floating IP to VIP's port is a manual step needed in order to provide external visibility. Thanks, Eugene. On Mon, Nov 25, 2

Re: [Openstack] the definistion of X-aaS in neutron

2013-11-25 Thread Salvatore Orlando
Hi Lorin, I think yours is a very good question; I am afraid I am not able to provide a straight answer regarding in which cases one service should be preferred to the other. Technically the difference would be that a firewall rule is enforced only at the edge of your network, and is therefore not

[Openstack] openstack-nova-api dead but pid file exists

2013-11-25 Thread Mridhul Pax
Hi All, We have restarted our controller node and we are now getting the following error and openstack infrastructure is down openstack-nova-api dead but pid file exists Any idea ? RegardsMridhul___ Mailing list: http