[Openstack] [Fuel]

2015-09-17 Thread Dvork, ZdenekX
Hello, Sorry for disturbing you. I joined team focusing on fuel/open stack and I need advice from more experienced developer. I would like to ask question related to open stack/Fuel installation. My target is to have open sack with Centos 7. Is there currently support of Centos7(as open stack ba

[Openstack] Setting resource limits for a VM

2015-09-17 Thread Narayanan, Krishnaprasad
Hello all, In our testbed, we use an OpenStack setup based on Havana. Using Horizon or Nova CLI, is it possible to define resource limits during the creation of a VM? The resource limits refer to CPU usage, CPU time, disk I/O bytes, disk IOPS and network bandwidth. If yes, may I know the proce

Re: [Openstack] Setting resource limits for a VM

2015-09-17 Thread Narayanan, Krishnaprasad
Hi, Thanks for the reply. This page provides information about setting the CPU quota / period in micro seconds. Is there a possibility to define the CPU share in % ? Regards, Krishnaprasad -Original Message- From: Stéphane Locatelli [mailto:s.locate...@hexanet.fr] Sent: Donnerstag, 17

[Openstack] Please help!!!!Openvswitch attacked by ICMP!!!!!!!

2015-09-17 Thread applyhhj
Hi, I followed The Guidance and tried to configure openvswitch(OVS) service. I first created a bridge br-ex and then added eth2 to the bridge. After that I set the IP of eth2 to 0.0.0.0 and then reboot the system. However br-ex was not up when system launched. So I turned on br-ex manually and t

Re: [Openstack] Setting resource limits for a VM

2015-09-17 Thread Stéphane Locatelli
Extract from the doc: cpu_shares The optional shares element specifies the proportional weighted share for the domain. If this is omitted, it defaults to the OS provided defaults. NB, There is no unit for the value, it's a relative measure based on the setting of other VM, e.g. A VM configured wi

Re: [Openstack] Setting resource limits for a VM

2015-09-17 Thread Gary Kotton
Hi, Which driver are you using? Each driver has a different way of doing this. For example the vmware driver offers configuring the following for instances: limits, reservations and shares. That is for cpu, memory, disk iops and network bw. Thanks Gary On 9/17/15, 5:38 PM, "Narayanan, Krishnaprasa

Re: [Openstack] Please help!!!!Openvswitch attacked by ICMP!!!!!!!

2015-09-17 Thread Erdősi Péter
Hy! 2015.09.17. 16:53 keltezéssel, applyhhj írta: After that I set the IP of eth2 to 0.0.0.0 and then reboot the system. However br-ex was not up when system launched. So I turned on br-ex manually and then restart the network, What distro do you use? Can you send the configuration of eth2? (

Re: [Openstack] Please help!!!!Openvswitch attacked by ICMP!!!!!!!

2015-09-17 Thread applyhhj
I am using ubuntu 15.04 and I am following Guidance for ubuntu 14.04. Configuration for eth2 is: # external network interface auto eth2 iface eth2 inet manual up ip link set dev $IFACE up down ip link set dev $IFACE down By the way ther is no ip in eth2 after bridging it to br-ex

[Openstack] Imaages

2015-09-17 Thread venkatesh kotipalli
Hi All, Openstack can support images format is qcwo2,iso,raw,.etc Supoose i have windows2012R2 iso. These iso uploaded to openstack and spin the VM with windows2012R2 iso. Console is not appear. I am searching some blogs. What i am understanding some Image converted commands,drivers but thi

Re: [Openstack] Please help!!!!Openvswitch attacked by ICMP!!!!!!!

2015-09-17 Thread Erdősi Péter
2015.09.17. 17:55 keltezéssel, applyhhj írta: I am using ubuntu 15.04 and I am following Guidance for ubuntu 14.04. Configuration for eth2 is: # external network interface auto eth2 iface eth2 inet manual up ip link set dev $IFACE up down ip link set dev $IFACE down By the way th

[Openstack] [OSSN 0052] Python-swiftclient exposes raw token values in debug logs

2015-09-17 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Python-swiftclient exposes raw token values in debug logs - --- ### Summary ### The password and authentication token configuration options for the python-swiftclient are not marked as secret. The values of these options will be logged to the standa

[Openstack] [OSSN 0055] Service accounts may have cloud admin privileges

2015-09-17 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Service accounts may have cloud admin privileges - --- ### Summary ### OpenStack services (for example Nova and Glance) typically use a service account in Keystone to perform actions. In some cases this service account has full admin privileges, ma

Re: [Openstack] [Fuel]

2015-09-17 Thread Dmitry Borodaenko
Zdenek, Fuel 7.0 doesn't yet support CentOS 7. Adding it is a multi-faceted effort, we're still figuring out how much of it we can get done in Fuel 8.0. One of the first steps is to decouple Fuel specific packages from packages that we had to upgrade from CentOS 6, but can be reused from CentOS 7

[Openstack] [OSSN 0054] Potential Denial of Service in Horizon login

2015-09-17 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Potential Denial of Service in Horizon login - --- ### Summary ### Horizon uses the Python based Django web framework. Older versions of this framework allow an unauthorized user to fill up the session store database causing a Horizon denial of serv

[Openstack] [OSSN 0058] Cinder LVMISCIDriver allows possible unauthenticated mounting of volumes

2015-09-17 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cinder LVMISCIDriver allows possible unauthenticated mounting of volumes - --- ### Summary ### When using the LVMISCSIDriver with Cinder, the credentials for CHAP authentication are not formatted correctly in the tgtadm configuration file. This lead

Re: [Openstack] Please help!!!!Openvswitch attacked by ICMP!!!!!!!

2015-09-17 Thread applyhhj
Thank you for your reply. One more thing, I actually use "dhclient br-ex" to get ip from dhcp server of our campus network. Is it ok to do so? Because some people think I should not assign IP to the br-ex bridge. But in this case, the whole openstack network is not able to access to the outside

[Openstack] [OSSN 0056] Cached keystone tokens may be accepted after revocation

2015-09-17 Thread Nathan Kinder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Cached keystone tokens may be accepted after revocation - --- ### Summary ### Keystone auth_token middleware token and revocation list caching is used to reduce the load on the keystone service. The default token cache time is set to 300 seconds and

Re: [Openstack] Ironic in the same install with virtualization?

2015-09-17 Thread Jeff Peeler
On Wed, Sep 16, 2015 at 5:03 PM, Clint Byrum wrote: > Excerpts from Andrew Bogott's message of 2015-09-16 10:03:48 -0700: > > My users are mostly happy with VMs, but I get occasional requests for > > physical hardware in order to host databases, run performance tests, > > etc. I'd love to rack a

Re: [Openstack] Please help!!!!Openvswitch attacked by ICMP!!!!!!!

2015-09-17 Thread Sam Stoelinga
You should not use dhcp on br-ex. OpenStack will setup the ip for you when you create the neutron provider network and neutron router. I am in the same campus as you and can share you how to setup the network later face to face if you want. Following document will be helpful to understand this sce

Re: [Openstack] Ironic in the same install with virtualization?

2015-09-17 Thread Clint Byrum
Excerpts from Jeff Peeler's message of 2015-09-17 20:07:00 -0700: > On Wed, Sep 16, 2015 at 5:03 PM, Clint Byrum wrote: > > > Excerpts from Andrew Bogott's message of 2015-09-16 10:03:48 -0700: > > > My users are mostly happy with VMs, but I get occasional requests for > > > physical hardware in