[Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Vikas Parashar
Hi, IaaS is all about elastic computing. I can stretch resources as per my need - increasing/decreasing the number of cores, RAM allocated etc.. My question is - how does openStack achieve this elasticity for both computation and RAM. If I create an image with 2 cores and 4 GB RAM (and one day I

Re: [Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Cristian Falcas
Yes, the instance when running can only use the available resources from the compute host. On Mon, Dec 23, 2013 at 1:35 PM, Vikas Parashar wrote: > Thanks Cristian, > > Will elasticity be limited to 4 Cores/4GB (The max capacity of a physical > host) ? > > > On Mon, Dec 23, 2013 at 5:00 PM, Cri

Re: [Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Cristian Falcas
Hi, >From what I know you can resize a machine, but this involves rebuilding the instance: openstack will create a snapshot of the machine an recreate the instance with the new snapshot and a new flavor. This is not very fast from my experience, so you will have a considerable downtime doing this,

Re: [Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Vikas Parashar
Thanks Cristian, Will elasticity be limited to 4 Cores/4GB (The max capacity of a physical host) ? On Mon, Dec 23, 2013 at 5:00 PM, Cristian Falcas wrote: > Hi, > > From what I know you can resize a machine, but this involves > rebuilding the instance: openstack will create a snapshot of the

Re: [Openstack] Bringing focus to the Operators and Users at the next summit

2013-12-23 Thread Sean Dague
On 12/22/2013 12:49 PM, rob_hirschf...@dell.com wrote: > I’d like to repeat a suggestion at the Design Summit wrap up – it’s a > bit different, so patience… > > > > My suggestion was to insert a day “break” into the four day Design > Summit for users/operations. Effectively, we’d have a four d

Re: [Openstack] Bringing focus to the Operators and Users at the next summit

2013-12-23 Thread Jay Pipes
On 12/23/2013 07:28 AM, Sean Dague wrote: That interaction needs to come 3+ weeks before Design Summit to be effective on that cycle. Because if it's later than that, it's just too much to digest at a point where the plates are already overflowing. +1. I think if there is someone in the opera

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Jay Pipes
On 12/22/2013 12:37 PM, Martinx - ジェームズ wrote: Stackers! I need a bit help here... My OpenStack Havana (Ubuntu 12.04.3) was working smoothly and, I don't know what had happened here but, now, I'm seeing some weird problems. Right now, the "Tenant A" is seeing the VNC Consoles of "Tenant B" !!!

Re: [Openstack] Bringing focus to the Operators and Users at the next summit

2013-12-23 Thread Mark Collier
Thanks Sean. You and Thierry have made great points on this thread that I think give people more insight into the process and timing required to really impact the releases. I've fallen into the trap many times of thinking we can solve any problem in the world during the 10 days a year we are all t

Re: [Openstack] Bringing focus to the Operators and Users at the next summit

2013-12-23 Thread Matt Van Winkle
Good points Mark. And to several of the other comments made this weekend, I think that mid-cycle is indeed better. Not only does it avoid the cram-packed design summit, it allows those of us with access to Core/key developers in our own organizations to help push change after the user/operator

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Gary Kotton
Hi, Which driver are you using? For the Vmware driver we found an edge case where this may happen - please see https://bugs.launchpad.net/nova/+bug/1255609 and the fix for this is (https://review.openstack.org/#/c/58994/). Thanks Gary On 12/23/13 3:16 PM, "Jay Pipes" wrote: >On 12/22/2013 12:37

Re: [Openstack] Need help with network config on a basic setup

2013-12-23 Thread nishant kumar
Got the solution! To all who are not able to ping their VM instance, you need to run following on compute node: #> iptables -A POSTROUTING -t mangle -p udp --dport 68 -j CHECKSUM --checksum-fill I struggled with this issue for 5 days before stumbling on this link that has the correct solution:

Re: [Openstack] [Neutron] Additional default security group rules

2013-12-23 Thread Craig J
Just as a follow up: you're right Amir, that was the wrong layer at which to solve the problem. I was thrown off by the fact that Horizon silently creates the default security group when you hit that page for the first time. In fact, I wasn't sure when/how it was getting created. Now that I know t

Re: [Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Joshua Harlow
Nope, u can over provision on most all of the resources (CPU, ram, disk) u described there. Ram is the tricky one as the Linux oom killer may start to get involved when u push the ram limits to high. But there is nothing stopping u from running 8 or more vms on a box, depending on the over provi

[Openstack] Object storage only - Swift or Ceph ?

2013-12-23 Thread Cedric Lemarchand
Hello, I am evaluating an object storage solution based on OpenStack (only object storage, no needs for Nova/Cinder). The common way would be the use of Swift (which I have already played a bit with, the concept of the "ring" is simply awesome ...). The other way is Ceph, it seams to be the "ne

Re: [Openstack] Object storage only - Swift or Ceph ?

2013-12-23 Thread John Dickinson
You should try both and choose the one that best meets your needs. Chmouel at eNovance wrote a great summary of the two systems at http://techs.enovance.com/6427/ceph-and-swift-why-we-are-not-fighting. --John On Dec 23, 2013, at 9:24 AM, Cedric Lemarchand wrote: > Hello, > > I am evaluatin

Re: [Openstack] Object storage only - Swift or Ceph ?

2013-12-23 Thread Kuo Hugo
Hi Cedric, As John said, you should try both to find which is the best choice for you. I'm not gonna to tell you which is the best choice for you. It depends on your use cases. I think the following evaluation items is a good beginning. * How many concurrency users ? * Do you have existing authen

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread gustavo panizzo
is the user member of the two tenants? "Martinx - ジェームズ" wrote: >Stackers! > >I need a bit help here... > >My OpenStack Havana (Ubuntu 12.04.3) was working smoothly and, I don't >know >what had happened here but, now, I'm seeing some weird problems. > >Right now, the "Tenant A" is seeing the VNC

Re: [Openstack] Object storage only - Swift or Ceph ?

2013-12-23 Thread Jeffrey Walton
On Mon, Dec 23, 2013 at 1:19 PM, Kuo Hugo wrote: > Hi Cedric, > > As John said, you should try both to find which is the best choice for you. > I'm not gonna to tell you which is the best choice for you. It depends on > your use cases. I think the following evaluation items is a good beginning. >

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Martinx - ジェームズ
I'm using Havana + Ubuntu 12.04.3 + KVM. On 23 December 2013 12:51, Gary Kotton wrote: > Hi, > Which driver are you using? For the Vmware driver we found an edge case > where this may happen - please see > https://bugs.launchpad.net/nova/+bug/1255609 and the fix for this is > (https://review.op

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Martinx - ジェームズ
Hi! On 23 December 2013 16:53, gustavo panizzo wrote: > is the user member of the two tenants? > No. "Tenant B" have only, and only one user. I never created a user that belongs to more than 1 tenant, my cloud is very simple and small. And "Tenant A" user is a member of its own Project, not t

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Martinx - ジェームズ
Okay! But, I don't know how to reproduce this. Mostly because this situation appeared "out of nothing" and I have no knowledge to go deep inside OpenStack to see the problem in details. Nevertheless, I can open my system for debug. Also, I'll try to get more details about what's going on here...

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Martinx - ジェームズ
Okay, I got it... "Tenant B / Project B", have only 1 member, and it is NOT the user from "Tenant A". But, as I said, the user from "Tenant A", is seeing the VNC consoles of Tenant B VMs anyway, I'm sure this is a security breach. Cheers! Thiago On 23 December 2013 17:56, Martinx - ジェームズ wrote:

[Openstack] [SWIFT] 404 error during uploads

2013-12-23 Thread Stephen Wood
I've run into a very annoying problem with my swift cluster and I'm hoping somebody can help me out. During any given 100 uploads, I'll usually see between 1 to 4% of the calls give a 404. The swift client writes the following: Object PUT failed: http://swift:8080/v1/AUTH_swift/test1/042 404 Not F

Re: [Openstack] [SWIFT] 404 error during uploads

2013-12-23 Thread Stephen Wood
I'm also seeing this in the object-server logs: 12OperationalError: database is locked#012 (txn: tx37d4e1807957447cac403-0052b89cbb) Dec 23 20:27:39 store01 container-server ERROR __call__ error with PUT /slot-3/11126/AUTH_swift/test1 : #012Traceback (most recent call last):#012 File "/usr/lib/py

Re: [Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Cristian Falcas
There is no point in using 8 virtual cores in compute node with 2 cores. The same is valid for using swap as memory to reach the desired 12gb. Of course, if you don't plan on using that machine for any real work, you can do it. On Mon, Dec 23, 2013 at 6:39 PM, Joshua Harlow wrote: > Nope, u ca

Re: [Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Joshua Harlow
It depends on the use-case, there is a point when most of the time the VMs on the compute node are idle. A use-case yahoo! is doing is letting developers have many VMs, in this case those VMs are mostly idle. Given a hypervisor with 12 cores, we can place say 12x2 core VMs on there, this is a tot

Re: [Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Joshua Harlow
There are much bigger differences for why u should not over-provision memory vs over-provision cpu. But agreed in general you shouldn't use swap either. There are many threads around how the OOM killer will get involved and why you should avoid this... - http://marc.info/?l=kvm&m=127375381631230

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Martinx - ジェームズ
Hi Diego! I did not reinstall OpenStack components or Compute Node... It was a fresh install, that I started using into production. I already did this before, I mean, reinstall things without formatting the server but, I always remove all the remaining instances, with virt-manager, before startin

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Jeffrey Walton
> This security breach is happening right now here and I > don't know what can I do to fix it, or what should I type > on a BUG at Launchpad... Ubuntu has made it all but impossible to file bug reports. Their circular redirects are worse than a telephone menu system that takes you down a bunch of d

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Jay Pipes
On 12/23/2013 04:32 PM, Jeffrey Walton wrote: > This security breach is happening right now here and I > don't know what can I do to fix it, or what should I type > on a BUG at Launchpad... Ubuntu has made it all but impossible to file bug reports. Their circular redirects are worse than a tel

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Jeffrey Walton
On Mon, Dec 23, 2013 at 4:54 PM, Jay Pipes wrote: > On 12/23/2013 04:32 PM, Jeffrey Walton wrote: >> >> > This security breach is happening right now here and I >> > don't know what can I do to fix it, or what should I type >> > on a BUG at Launchpad... >> Ubuntu has made it all but impossible

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Martinx - ジェームズ
Okay guys, no problem, I can fill a BUG as I did lots of times before using Launchpad but, I am unable to reproduce this problem in a fresh installation, so, how to proceed now?! I can give full access to my cloud for the experts but, I don't know if this is desired or not. Tks! Thiago On 23 De

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Jay Pipes
On 12/23/2013 05:18 PM, Martinx - ジェームズ wrote: Okay guys, no problem, I can fill a BUG as I did lots of times before using Launchpad but, I am unable to reproduce this problem in a fresh installation, so, how to proceed now?! I wasn't yelling at you (or Jeffrey)... was just being a wise-crack.

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Jay Pipes
On 12/23/2013 05:06 PM, Jeffrey Walton wrote: On Mon, Dec 23, 2013 at 4:54 PM, Jay Pipes wrote: On 12/23/2013 04:32 PM, Jeffrey Walton wrote: > This security breach is happening right now here and I > don't know what can I do to fix it, or what should I type > on a BUG at Launchpad... U

[Openstack] User Personas Google Spreadsheet

2013-12-23 Thread Sriram Subramanian
Dear All, Few weeks ago, there was an email on a google spreadsheet tracking different kind of OpenStack User Personas (IT Admin, University researcher etc). Could someone point to that please? Who is leading that effort? thanks, -Sriram ___ Mailing li

[Openstack] Login to Openstack dashboard using a Post Request

2013-12-23 Thread Akshat Sharma
Hello Guys, I am new to Openstack, python and django framework. I am trying to login into Opensatck dahboard using dashboard request. Since i am sending a request from a host, other than, where user is created. I had to get csrf exempt. I have been able to get pass the csrf problem. I am testing m

Re: [Openstack] Security Breach! Tenant A is seeing the VNC Consoles of Tenant B!

2013-12-23 Thread Martinx - ジェームズ
Okay! I'll fill a BUG for "nova", and I'll let my system untouched, so, the experts will be able to see the problem alive. I can share passwords, my screen using Google Remote Desktop (Teamviewer or something), tmux ssh consoles, no problem...=) Hey man! There is nothing to forgive my friend.

[Openstack] neutron install guide wording question

2013-12-23 Thread August Simonelli
Hi all, I’m currently going through the havana install guide for a yum-based distro and planning my required hardware. I was hoping to only use two hosts and needed some clarification around neutron: Do i need a dedicated network node (exclusive of controller and compute) if i want to use neut

Re: [Openstack] neutron install guide wording question

2013-12-23 Thread Matt Kassawara
You don't need a three-node architecture (controller, network, and compute) to deploy the Networking/Neutron service, but it seems to work best with the installation guide and also simplifies debugging. On Mon, Dec 23, 2013 at 5:07 PM, August Simonelli wrote: > Hi all, > > I’m currently going t

Re: [Openstack] User Personas Google Spreadsheet

2013-12-23 Thread Stefano Maffulli
On 12/23/2013 02:36 PM, Sriram Subramanian wrote: > Few weeks ago, there was an email on a google spreadsheet tracking > different kind of OpenStack User Personas (IT Admin, University > researcher etc). Could someone point to that please? I think you're referring to this one: https://docs.google

Re: [Openstack] neutron install guide wording question

2013-12-23 Thread Remo Mattei
I have done in two modes controller and compute and works fine with no problems I have not chk the link yet bit you should have no problem with this mode. Inviato da iPhone () > Il giorno Dec 23, 2013, alle ore 16:42, Matt Kassawara > ha scritto: > > You don't need a three-node architectur

Re: [Openstack] Openstack achieve the elasticity for computation

2013-12-23 Thread Vikas Parashar
Thanks everyone for your valuable point. Kindly allow me to put my Question in different way. Shall any VM use distributed(for eg. RAM from the different host) resources at the same time? or Shall any VM use two cores(that lies on different hosts) at the same time?, in the distributed fashion.

Re: [Openstack] [SWIFT] 404 error during uploads

2013-12-23 Thread Kuo Hugo
DB locked stack trace is a known issue. How fast did you push 100 objects and what's your HW spec there ? You can check for the existence of 404 container by swift-get-node. In case of : Dec 23 08:49:11 storage1 container-server 10.xx.xx.xxx - - [23/Dec/2013:08:49:11 +] "HEAD /slot-8/11126

[Openstack] OpenStack user personas [WAS: Re: User Personas Google Spreadsheet]

2013-12-23 Thread Sriram Subramanian
Thanks Stef. Dave, I see some discussion on having regular meetings to discuss personas on the spreadsheet. Any slots confirmed for this? Thanks, -Sriram On Mon, Dec 23, 2013 at 5:00 PM, Stefano Maffulli wrote: > On 12/23/2013 02:36 PM, Sriram Subramanian wrote: > > Few weeks ago, there was a