[Openstack] Upgrade from Icehouse to Juno on Centos 6.5

2014-12-17 Thread Chris
Hello We have an relatively big OpenStack setup (> 150 Compute Nodes) based on CentOS 6.5 with the RDO Icehouse release. We now considering an upgrade to Juno, is there a best practice out there how to do it and how is it with the depending CentOS upgrade to 6.6 or even 7.0? Any help is a

[Openstack] Failure to start instance due to network

2014-12-17 Thread Howard Luckenbaugh
I have an Openstack ENV using Nova. I tried to create an instance and in /var/log/nova/compute and network.log it is failing with 2014-12-12 18:42:49.490 3008 WARNING nova.compute.manager [-] [instance: 0f3ebd88-e7b8-4447-b2f5-6e1375b47e72] Instance failed network setup (attempt 7 of 11) I ha

[Openstack] squid-deb-proxy crashes while commisioning

2014-12-17 Thread Ameet Gandhare
Hello All, I am trying to bring up the nodes of my MAAS cluster one by one for installing OpenStack cloud When I power on the first node, the mode gets into the "Declared" state as per MAAS web-gui. When I start the node after it powered of it self and start "Commissioning", the node goes into "Fa

Re: [Openstack] (Juno) Multiple rings Swift

2014-12-17 Thread Jonathan Lu
Hi, It seems that John has helped a lot. I just share 2 blogs that I think is related with your issue. https://swiftstack.com/blog/2012/04/09/swift-capacity-management/ https://swiftstack.com/blog/2013/12/20/upgrade-openstack-swift-no-downtime/ -- Jonathan Lu On 2014/12/17 4:06, Amit Anan

Re: [Openstack] How to use jsp project in openstack

2014-12-17 Thread Igor Milovanovic
Hi, To be able to provide any usable answer, I would need more context around what are you trying to achieve with your Web app and OpenStack. Please try answering to yourself primarily questions like the following ones: Why are you considering OpenStack? What do you expect to get from using OpenSt

[Openstack] [OSSN 0042] Keystone token scoping provides no security benefit

2014-12-17 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Keystone token scoping provides no security benefit - --- ### Summary ### Keystone provides "scoped" tokens that are constrained to use by a single project. A user may expect that their scoped token can only be used to perform operations for the proje

Re: [Openstack] Failure to start instance due to network

2014-12-17 Thread Howard Luckenbaugh
I have fixed this issue. This was not really openstac but more of IBM ICO 2.4 issues. The issue is when adding a compute node it creates a bad entry for the current networks. So I had to remove the networks and readd them. Howard Luckenbaugh Special Events Infrastructure/IBM.com Infrastru

Re: [Openstack] [OSSN 0042] Keystone token scoping provides no security benefit

2014-12-17 Thread Preston L. Bannister
I take issue with choice of words, in your note. The key here is around this statement: Essentially, this means that any token for a particular user can indirectly > be used to perform any action that user is allowed to perform. As we are talking about actions the "user is allowed to perform", t

Re: [Openstack] [OSSN 0042] Keystone token scoping provides no security benefit

2014-12-17 Thread Nathan Kinder
On 12/17/2014 10:16 AM, Preston L. Bannister wrote: > I take issue with choice of words, in your note. The key here is around > this statement: > > Essentially, this means that any token for a particular user can > indirectly be used to perform any action that user is allowed to > pe

Re: [Openstack] [OSSN 0042] Keystone token scoping provides no security benefit

2014-12-17 Thread Morgan Fainberg
> On Dec 17, 2014, at 1:16 PM, Preston L. Bannister > wrote: > > I take issue with choice of words, in your note. The key here is around this > statement: > > Essentially, this means that any token for a particular user can indirectly > be used to perform any action that user is allowed to p

Re: [Openstack] [OSSN 0042] Keystone token scoping provides no security benefit

2014-12-17 Thread Preston L. Bannister
Fair enough. I would suggest you re-order your presentation. The proposal is to enhance control over the rights/privileges/permissions/capabilities (as defined) associated with a Keystone token. Changing the scope of a token is a specific instance. This could include disabling/enabling bits, or dis

Re: [Openstack] Host Stable OS for Controller and Compute

2014-12-17 Thread Preston L. Bannister
My current choice is to use Redhat's "packstack" on Centos 7 (not earlier). Seems to work rather well, and reflects the larger production environments I have seen (so far). Clearly there is no one answer to this question. :) On Wed, Dec 10, 2014 at 10:44 PM, somshekar kadam wrote: > > I was t

Re: [Openstack] [Openstack-operators] Migrating instances according to load on host

2014-12-17 Thread Jesse Pretorius
The closest thing I've seen to that has been the IBM Resource Scheduler (closed source) and this: https://github.com/BMDan/OpenStack-Hypervisor-Balance I've not tried it myself. There have been discussions around doing this, but I've not seen code submissions yet. On Tue, 16 Dec 2014 at 20:19 Sł

Re: [Openstack] How to download Cinder volume to Host OS

2014-12-17 Thread Dmitry Makovey
On 12/16/2014 09:21 AM, varun bhatnagar wrote: > Hi, > > I have created a cinder volume of 50GB. I want to download this volume to > my host machine (may be by using scp). Can anyone please tell me how can I > do that. are you trying to get to the contents of cinder volume from hypervisor? -- D

Re: [Openstack] How to download Cinder volume to Host OS

2014-12-17 Thread George Mihaiescu
You could just attach that volume to an instance and scp the data from there. On 16 Dec 2014 11:35, "varun bhatnagar" wrote: > Hi, > > I have created a cinder volume of 50GB. I want to download this volume to > my host machine (may be by using scp). Can anyone please tell me how can I > do that.

[Openstack] Basic Network Configuration

2014-12-17 Thread Georgios Dimitrakakis
Hi all, Can someone help me with a very basic network configuration for the ethernet cards on the compute nodes? Each of my nodes has two physical network interfaces (eth0 & eth1). For the moment one (eth0) is configured with external IP (153.*) that is used to directly access the node fro

Re: [Openstack] How to download Cinder volume to Host OS

2014-12-17 Thread Shake Chen
whether can try cinder backup feature? On Thu, Dec 18, 2014 at 6:06 AM, George Mihaiescu wrote: > > You could just attach that volume to an instance and scp the data from > there. > On 16 Dec 2014 11:35, "varun bhatnagar" wrote: > >> Hi, >> >> I have created a cinder volume of 50GB. I want to do

Re: [Openstack] [openstack] HTTPS for spice console

2014-12-17 Thread Michael Dorman
(This is probably more appropriate for the openstack@lists.openstack.org list, so moving there for others’ visibility.) For the most part, the config is fairly straightforward. The settings I add are: DEFAULT/ssl_only DEFAULT/cert DEFAULT/key You’ll also need the spice-html5 package (that is

[Openstack] [OSSN 0038] Suds client subject to cache poisoning by local attacker

2014-12-17 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Suds client subject to cache poisoning by local attacker - --- ### Summary ### Suds is a Python SOAP client for consuming Web Services. Its default cache implementation stores pickled objects to a predictable path in /tmp. This can be used by a local

[Openstack] Only Storage Cloud

2014-12-17 Thread kyawthu win
Hi, I want to build only private storage cloud using openstack swift. So, does i need to install nova compute engine. I have been installed and setup swift components. Thanks! ___ Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

[Openstack] Query regarding OVS

2014-12-17 Thread ppnaik
Dear All, I am doing a openstack icehouse setup following the guide : http://docs.openstack.org/icehouse/in... I have one server (OS is ubuntu desktop 14.04) with controller+neutron with controller using eth0 and neutron management using eth1. I have given a IP to eth1:1 in the same subnet as

[Openstack] [OpenStack Day in Korea] Gathering Ideas for Automation Grand Challenge.

2014-12-17 Thread Jaesuk Ahn
OpenStack Korea User Group is planning “OpenStack Automation Grand Challenge” as a part of OpenStack Day in Korea event.  This is our Mission Statement.  Automate Everything! One of the most used catch phrases in the OpenStack World. OpenStack has a lot of various libraries, projects, configur