Tuesday, 2013-03-26

*** treeder has joined #openstack-meeting-alt00:16
*** treeder_ has joined #openstack-meeting-alt00:36
*** treeder has quit IRC00:39
*** yidclare has quit IRC00:46
*** treeder_ has quit IRC00:49
*** rmohan has quit IRC00:52
*** rmohan has joined #openstack-meeting-alt00:52
*** bdpayne has quit IRC00:53
*** asalkeld has joined #openstack-meeting-alt01:04
*** rmohan has quit IRC01:07
*** rmohan has joined #openstack-meeting-alt01:07
*** rmohan has quit IRC01:10
*** rmohan has joined #openstack-meeting-alt01:10
*** asalkeld has left #openstack-meeting-alt02:04
*** amyt has joined #openstack-meeting-alt03:00
*** amyt has quit IRC04:44
*** bdpayne has joined #openstack-meeting-alt05:18
*** vipul is now known as vipul|away05:21
*** bdpayne has quit IRC06:19
*** vipul|away is now known as vipul06:25
*** vipul is now known as vipul|away06:44
*** vipul|away is now known as vipul06:51
*** bdpayne has joined #openstack-meeting-alt07:59
*** johnthetubaguy has joined #openstack-meeting-alt08:24
*** cp16net_ has joined #openstack-meeting-alt09:00
*** steveleon_ has joined #openstack-meeting-alt09:05
*** juice- has joined #openstack-meeting-alt09:05
*** steveleon has quit IRC09:06
*** juice has quit IRC09:06
*** cp16net has quit IRC09:06
*** steveleon_ is now known as steveleon09:06
*** juice- is now known as juice09:06
*** cp16net_ is now known as cp16net09:06
*** bdpayne has quit IRC10:21
*** asalkeld has joined #openstack-meeting-alt10:40
*** amyt has joined #openstack-meeting-alt12:35
*** amyt has quit IRC12:41
*** amyt has joined #openstack-meeting-alt12:42
*** rnirmal has joined #openstack-meeting-alt12:50
*** dkehn has joined #openstack-meeting-alt13:40
*** dhellmann has joined #openstack-meeting-alt13:40
*** cloudchimp has joined #openstack-meeting-alt13:52
*** jcru has joined #openstack-meeting-alt13:57
*** djohnstone has joined #openstack-meeting-alt14:14
*** amyt has quit IRC14:24
*** cloudchimp has quit IRC14:25
*** jcru has quit IRC14:29
*** jcru has joined #openstack-meeting-alt14:31
*** jcru is now known as jcru|away14:47
*** jcru|away is now known as jcru14:48
*** dhellmann is now known as dhellmann-afk14:50
*** cp16net is now known as cp16net|away15:29
*** yidclare has joined #openstack-meeting-alt15:30
*** cp16net|away is now known as cp16net15:34
*** djohnstone1 has joined #openstack-meeting-alt16:00
*** djohnstone has quit IRC16:02
*** yidclare has quit IRC16:04
*** cp16net is now known as cp16net|away16:37
*** cp16net|away is now known as cp16net16:41
*** bdpayne has joined #openstack-meeting-alt16:44
*** djohnstone has joined #openstack-meeting-alt16:47
*** djohnstone1 has quit IRC16:49
*** esp1 has joined #openstack-meeting-alt16:58
*** esp1 has left #openstack-meeting-alt16:58
*** cp16net is now known as cp16net|away17:57
*** johnthetubaguy has quit IRC18:01
*** imsplitbit has joined #openstack-meeting-alt18:10
*** sacharya has joined #openstack-meeting-alt18:14
*** cp16net|away is now known as cp16net18:15
*** rmohan has quit IRC18:23
*** rmohan has joined #openstack-meeting-alt18:24
*** rmohan has quit IRC18:31
*** rmohan has joined #openstack-meeting-alt18:31
*** rmohan has quit IRC18:36
*** rmohan has joined #openstack-meeting-alt18:36
*** jrodom has joined #openstack-meeting-alt18:39
*** rnirmal has quit IRC18:48
*** rnirmal has joined #openstack-meeting-alt18:49
*** rmohan has quit IRC18:49
*** rmohan has joined #openstack-meeting-alt18:49
*** amyt has joined #openstack-meeting-alt19:54
*** esp1 has joined #openstack-meeting-alt19:54
*** djohnstone1 has joined #openstack-meeting-alt19:55
*** esp1 has left #openstack-meeting-alt19:55
*** rnirmal has quit IRC19:57
*** rnirmal has joined #openstack-meeting-alt19:57
*** djohnstone1 has quit IRC19:57
*** djohnstone1 has joined #openstack-meeting-alt19:57
*** djohnstone has quit IRC19:59
*** cloudchimp has joined #openstack-meeting-alt20:05
*** jcru has quit IRC20:05
*** amyt_ has joined #openstack-meeting-alt20:08
*** amyt has quit IRC20:08
*** amyt_ is now known as amyt20:08
*** johnthetubaguy has joined #openstack-meeting-alt20:11
*** rnirmal has quit IRC20:13
*** yidclare has joined #openstack-meeting-alt20:19
*** jrodom has quit IRC20:30
*** jcru has joined #openstack-meeting-alt20:39
*** cloudchimp has quit IRC20:45
*** jrodom has joined #openstack-meeting-alt20:47
*** robertmyers has joined #openstack-meeting-alt20:50
*** datsun180b has joined #openstack-meeting-alt20:56
*** hub_cap has joined #openstack-meeting-alt20:58
hub_caphai all20:59
hub_cap#startmeeting reddwarf20:59
openstackMeeting started Tue Mar 26 20:59:23 2013 UTC.  The chair is hub_cap. Information about MeetBot at http://wiki.debian.org/MeetBot.20:59
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.20:59
*** openstack changes topic to " (Meeting topic: reddwarf)"20:59
openstackThe meeting name has been set to 'reddwarf'20:59
robertmyershello20:59
datsun180bhello hello20:59
* hub_cap waits 2 min for stragglers21:00
datsun180bwe're still in a retro21:00
hub_cap>>> time.sleep(120)21:00
djohnstone1Hi21:01
vipulhey21:01
*** SlickNik has joined #openstack-meeting-alt21:02
*** esp1 has joined #openstack-meeting-alt21:02
hub_cap#link https://wiki.openstack.org/wiki/Meetings/RedDwarfMeeting21:02
SlickNikhey guys21:02
hub_captime to start!21:02
esp1yo21:02
hub_cap#link http://eavesdrop.openstack.org/meetings/reddwarf/2013/reddwarf.2013-03-19-21.02.html21:02
*** djohnstone has joined #openstack-meeting-alt21:02
hub_cap#topic Action Items21:02
*** openstack changes topic to "Action Items (Meeting topic: reddwarf)"21:02
juiceHowdy21:03
hub_capvipul: yer up (thought u were in a meeting)21:03
SlickNikVipul just getting back from a meeting.21:03
hub_capahhhh getting back21:03
SlickNikSkip him to the end of action items...21:03
hub_capkk21:04
hub_capim asking grapex about reddwarf lint integration21:04
hub_caphes on the phone w/ me21:04
hub_caphe has not done that yet21:04
hub_cap#action grapex to patch reddwarf with xml lint integration21:04
SlickNikSounds good.21:05
hub_capnext is me21:05
*** rmohan has quit IRC21:05
hub_cap#action hub_cap to talk to everyone about the actions stuff at the summit21:05
SlickNikyes, instance_actions.21:05
hub_capwe need to brainstorm on it, since its not fleshed out21:05
hub_capno longer instance_actions21:05
SlickNikI'm looking forward to that one.21:05
*** djohnstone1 has quit IRC21:05
hub_capDEFFFFFFF21:05
SlickNikah, name change gotcha.21:05
vipulbakc21:06
vipulback sorry21:06
hub_capvipul: you have a few action items21:06
SlickNikwb, just going through action items.21:06
*** rmohan has joined #openstack-meeting-alt21:06
SlickNikMine are:21:06
hub_capSlickNik: go head w/ yours now, the regex one21:06
hub_capSlickNik to update the release wiki page with regexps for release/pre-release21:06
SlickNikI updated the python-reddwarfclient release wiki page with the reg-exps.21:07
hub_capSWEET21:07
datsun180bnice21:07
SlickNikAlso, got the redstack refactoring patch checked in (thanks for the reviews all).21:07
hub_capwoot!21:07
hub_capvipul and robertmyers: action items about the notifications blueprint21:08
vipulOk so i updated the Backups spec to call everything Backups instaead of snapshots21:08
vipulso #1 is done21:08
vipul#2, I still need to submit a patch to database-api21:08
SlickNiknice21:08
vipul#action vipul to submit patch for Backups API to database-api21:08
vipulhub_cap: the notifications one.. I have not filed the blueprint21:08
hub_capokey, want me to file vipul?21:08
vipulyes, please or get me a dummy21:09
SlickNikthis is for usage/billing notifications?21:09
hub_capya dummy only21:09
robertmyersSlickNik: yes21:09
hub_capvipul: https://blueprints.launchpad.net/reddwarf/+spec/dummydummy21:09
vipul(heart)21:09
vipuldamn that didn't work!21:09
hub_caphhaahah <321:09
hub_cap< 321:09
SlickNik<321:09
vipulcool, i'll file the BP21:10
vipulwill need robertmeyers input21:10
hub_capokey. lets go on21:10
robertmyerssure21:10
*** jesusaurus has joined #openstack-meeting-alt21:10
hub_capi htink the first actual item is notifications21:10
hub_cap#topic Reddwarf Notifications21:11
*** openstack changes topic to "Reddwarf Notifications (Meeting topic: reddwarf)"21:11
vipulSo i left that in the meeting agenda since we didnt make progress21:11
hub_capso we have a blueprint now, but its not really filed21:11
hub_capok vipul, lets make sure robertmyers gives u templates21:11
vipulI'd like to get clarity on the this one this week21:11
hub_cap;)21:11
hub_capvipul: def!21:11
vipulso let's file the bp and fill out details21:11
vipulcool21:11
hub_capjust ping robertmyers on irc21:11
vipulwill do21:11
vipulthanks!21:11
hub_capso movign on?21:12
imsplitbityep21:12
vipulYes, lets21:12
hub_cap#topic Backups Discussion21:12
*** openstack changes topic to "Backups Discussion (Meeting topic: reddwarf)"21:12
SlickNikSounds like it. More discussion on that to come later.21:12
hub_caplets start w/ restore API decision21:12
vipuldo we have a decision :)21:12
juicedrum roll21:12
hub_capgive me context...?21:13
hub_capim a bit out of the loop21:13
vipulrestorePoint: { instanceID | backupID }21:13
hub_capAHHHHHH21:13
vipulOR21:13
juicewell you and mr simps where going to work it out21:13
SlickNiktype or no type, I think...21:13
vipulright21:13
SlickNikthat is the question21:13
hub_capwe will _not_ be using instanceID for teh initial iteration21:13
hub_capwe had a long convo about it21:13
*** sdake_ has quit IRC21:13
*** rmohan has quit IRC21:14
hub_capit will _only_ be restorePoint {backupUUID, and eventually a Date}21:14
vipulso the use case where the backupUUID is really old and the date is really new21:14
vipuland there are other backups in between21:14
vipulhow will that be implemented21:14
*** rmohan has joined #openstack-meeting-alt21:15
hub_capwell.... seems like that would be a failure case21:15
hub_capwe arent going to roll w/ a date from the first iteration21:15
hub_capi think weve decided to go w/ the manual backup case first21:15
SlickNikfair enough.21:15
vipulah ok21:15
hub_capand our impl will _not_ have a date21:15
SlickNikVery similar to what we are planning then.21:15
hub_capand we will let you guys solve the xtra+binlogs+date thing ;)21:15
vipulso the first iteration of this thing is similar to ours.. you restore to the backup and not point in time21:15
hub_capcorrect21:16
hub_capya we will put both impls (xtra/mysqldump) in the public for reddwarf installations to decide21:16
juicethanks for the vote of confidence hub_cap :)21:16
hub_capso we will need that stratregy pattern21:16
hub_capjuice: :D21:16
vipulwe liked your approach in hindsight :(21:16
vipulbut i guess we roll with this first21:16
hub_capvipul: haha ya i know...21:17
SlickNikI was looking at stevedore actually.21:17
hub_capi did too ;)21:17
juicerobertmeyers is still working on the stream to swift approach though21:17
hub_capbut hey, simple is better21:17
SlickNikThey have a good driver model that we can use for the strategy/plugin approach.21:17
hub_capSlickNik: ya? hmmm that might be a good use for it21:17
hub_capassuming u can config it21:17
*** johnthetubaguy has quit IRC21:17
hub_capand that its not something thats compiled into the python egg21:17
robertmyersstevedore is good21:18
vipulok so how about21:18
*** sdake_ has joined #openstack-meeting-alt21:18
hub_capbackup unique name constraints?21:18
vipulrestorePoint: { backupRef: http://dddd/backups/backupID }21:18
hub_capim ok w/ that, i dont think it matters too much21:19
vipulwe have a precedense (if that's how you spell it) for refs21:19
hub_capas long as u can just do { backupRef: backupID } shorthand21:19
juiceprecedence I think21:19
vipulyea we can write the parsing logic to accept either21:19
hub_capw/ the flavor/image calls u can just pass the ids21:19
hub_capwell let me ask this21:19
vipulthanks juice!21:19
hub_capdo we _need_ the ref?21:19
hub_capwhat is the reason for it21:19
robertmyerswell, we want to eventually add the date21:20
hub_caprobertmyers: i dont think that affects the imageref21:20
hub_capi mean ref vs uuid21:20
vipulconsistency21:20
hub_caprefs are for things that could be non local21:20
vipulflavorRef21:20
hub_capsure i get that21:21
juiceprecedents actually21:21
hub_capbut those are from a legacy system21:21
hub_caplol juice21:21
hub_capand technically flavorRef is just a uuid now21:21
hub_capand imageRef _is_ a url21:21
hub_capcuz it comes from a different system21:21
vipulah ok21:21
hub_capif backups were their own system (like glance) then id see the need for urls21:22
hub_capexample http://docs.openstack.org/api/openstack-compute/2/content/CreateServers.html21:22
hub_capsorry for multi post21:22
hub_cap"name" : "new-server-test",21:22
hub_cap        "imageRef" : "http://servers.api.openstack.org/1234/images/52415800-8b69-11e0-9b19-734f6f006e54",21:22
hub_cap        "flavorRef" : "52415800-8b69-11e0-9b19-734f1195ff37",21:22
vipulk cool, let's go with ID then21:22
vipuldo we want to name it Ref but accept UUID?21:22
SlickNikThere's some value in being agnostic of which system resources came from and using a ref across the board, though.21:22
vipulor just name it 'backupID'21:22
*** asalkeld has left #openstack-meeting-alt21:23
hub_caphmmmmmmmmm21:23
hub_caplet me touch base w/ our resident rest guru21:23
vipulok i'm going with BackupRef and allow the value to be either URI or UUID21:23
vipuland fi that doesn't fly with him we can change easily21:24
hub_capvipul: fine by me for now21:24
*** DandyPandy has joined #openstack-meeting-alt21:24
SlickNikYeah, this is not clearcut…fine by me for now as well.21:24
vipuli'll update the wiki21:24
hub_cap#action hub_cap to bring findings for backupRef vs backupUUID21:24
hub_capso robertmyers whats the latest on streaming backups / failure handling21:24
robertmyersI got it mostly working... just trying to deal with large files21:25
robertmyersover 5GB need to be split up21:25
*** rmohan has quit IRC21:25
vipuldo you keep a counter as you go?21:26
hub_capoh ya swift file size limitations21:26
robertmyersso it is a little tricky to do that while you are streaming21:26
SlickNik@robertmyers: eagerly awaiting your initial patch set upload. :)21:26
robertmyers:)21:26
hub_caphttp://docs.openstack.org/developer/swift/overview_large_objects.html21:26
*** rmohan has joined #openstack-meeting-alt21:26
robertmyerswell, I think the first I'll put a gist up for all to see21:26
SlickNikYes, would love to see what the integration points are. Patch set upload can come later.21:26
hub_caprobertmyers: perfect tahtd be great21:27
hub_capill also find imsplitbit's original code21:27
juicethanks for sharing and the effort robertmyers21:27
SlickNikThat would be awesome!  Thx robertmyers and hub_cap.21:27
robertmyersyou welcome21:27
robertmyersyour welcome21:27
vipulthe download use case.. is that something we're also doing directly?21:27
robertmyers :)21:27
vipulor is that something we should consider swiftclient for21:27
robertmyersyou're21:28
hub_caphttps://github.com/imsplitbit/cf_stream_uploader imsplitbit ?21:28
imsplitbithttps://github.com/imsplitbit/cf_stream_uploader21:28
imsplitbityep21:28
hub_capdamn im good21:28
imsplitbitDEF poc code21:28
hub_caprobertmyers: have a look-see at this too https://github.com/imsplitbit/cf_stream_uploader/blob/master/cfstream.py21:28
imsplitbitbut should give you an idea21:28
hub_capthatd be like 3 lines in ruby imsplitbit21:28
robertmyersnice21:29
SlickNiknice, thanks!21:29
datsun180boh don't start that fight21:29
hub_capok on to "backup unique name constraints"21:29
SlickNik#link https://github.com/imsplitbit/cf_stream_uploader21:29
hub_cap#link https://github.com/imsplitbit/cf_stream_uploader/blob/master/cfstream.py21:29
hub_capLOL21:29
vipulno answer :(21:29
imsplitbitdatsun180b, it would...21:29
imsplitbit:-)21:29
hub_capso annashen and i talked about the name stuff, and she has changed the code to be driven by uuid21:29
vipulrobermeyers: are you addressing the download use case as well?21:29
hub_capim not sure we have a answer on the uniequeness tho right vipul?21:29
hub_capvipul: thats a restore, totally different beast ;)21:30
robertmyersvipul: download is handled by the swift manifest file21:30
vipulok, so swiftclient would work for that21:31
vipulassuming that we'll write the manifest21:31
robertmyersprobably21:31
hub_capstream download shoudl be HELLA easy21:31
robertmyersyes21:31
vipulcool21:31
hub_capso do we have any reason for constraining the name of a backup?21:31
hub_capwe dont currently constrain a instance name21:31
robertmyersyes21:31
hub_capwhy robertmyers?21:31
* hub_cap is curious21:31
robertmyersif we use if for the swift name21:32
hub_capthis is the user supplied name robertmyers21:32
vipulactually why don't we constrain the instance name21:32
datsun180bshelling out to do md5sums, for shame21:32
*** jrodom has quit IRC21:32
hub_capvipul: cuz nova doesnt21:32
vipulhmm i thought it did21:32
hub_capdatsun180b: POC21:32
hub_capnope cuz all my instances are name foo ;)21:32
SlickNikYou can have 2 instances with the same name in nova.21:32
datsun180byes of course, i'm only ribbing him because it's required21:32
vipulmaybe that's nova client behavior21:32
imsplitbitlol21:32
vipulactaully it's a good point.. what shoudl the object be named in swift21:33
SlickNikperhaps, vipul, I think there _is_ a client check...21:33
hub_capvipul:  its display_name21:33
hub_capvipul: likely something date based21:33
imsplitbitdatsun180b, there was actually a reason for that.  the code had to run in minimal memory space and for some reason it was hitting a ceiling for memory so I shelled out and that solved that21:33
hub_capsince when u start a snap, i assume we will be in a "backup" state21:33
vipulso why have a name at all21:33
hub_capvipul: context21:34
hub_capsame reason why give a name at all for instances21:34
hub_capa uuid is ugly21:34
hub_capgives a human something readable21:34
hub_capbut by no means should we name them off that21:34
datsun180bi figure md5 is probably compiled and being purpose-build for that is going to blow four lines of python out of the water21:34
datsun180bi don't mean to distract21:34
vipulswift object name = date + backup name? something like that?21:35
vipulwhen they are browsing swift, is it iimportant to give the same context i guess21:35
SlickNikYes, I agree..21:35
hub_capwhy not backup uuid????21:35
hub_capsince a uuid is uu21:35
robertmyerssure, that would be easy to restore too21:35
hub_caplast ting i want to see tho is naming it something like this, 祈票禁神祝-backup21:36
robertmyersha21:36
vipullol21:36
SlickNiklol21:36
hub_caplolly pop21:36
vipulfair nuff - the name should be optional then21:36
hub_capwelllllll.....21:36
hub_capname is not optional21:36
vipulif we are doing automated backups...21:36
hub_capits just not unieque21:36
vipulwho cares what the anme is if it's date based21:36
SlickNiknot optional but unique.21:36
hub_caplol SlickNik 1/2 right21:37
hub_capnot optional, not unieuq21:37
hub_capman i cant type21:37
hub_capit will be _exactly_ the same as the way our /instances name works21:37
SlickNikyeah, that's what I meant.. typed it out wrong :P21:37
hub_caphehe21:37
robertmyerswhat if we want to add the ability to do a single table backup or single database21:37
vipulwhat are we going to name the snapshots when we make it automated then21:37
hub_capvipul: we can figure that out when we go automated21:37
hub_capblahdb-backupdate? or something liek that?21:37
SlickNikI still like putting the name in the backup file though (instead of the UUID)21:38
vipulagree with SlickNik21:38
vipulif we're using it for context in Reddwarf.. why not the same context in swift21:38
SlickNikbecause these are exposed to the user.21:38
robertmyerswell, could that be part of the backup extention?21:38
hub_capwell lets not assume that a user should be having context wrt that21:38
hub_capwe have not defined that a user can/shoudl remove them21:39
hub_capso why make it easy for them to ;)21:39
SlickNikbecause even 祈票禁神祝:01/29/2013:00:00:00 has some meaning to the user, whereas a UUID does not.21:39
robertmyersseems easy enough to factor out21:39
vipulwell they'll see it anyway.. (assuming you're putting it in public swift)21:39
hub_capsure we are21:39
*** vipul has left #openstack-meeting-alt21:39
hub_capbye vipul :P21:39
*** vipul has joined #openstack-meeting-alt21:39
hub_caphe mustve hit the wrong key combo21:39
vipuldon't hit command + delete21:40
hub_capcmd-Q'ing us vipul?21:40
vipullol21:40
juiceThe name is swift must be unique21:40
hub_capyup juice21:40
juiceAnd unless its some meta data the name is mostly what they'll see in swift21:40
robertmyerswell, mostly true, you just over write the existing file21:40
vipulok we need a 'naming_strategy.py' :)21:40
hub_capjuice: thats a good idea actually21:40
hub_capput the name / description in the metadata21:40
hub_caplol vipul21:41
SlickNikheh21:41
annashenactually, you got a second shot for the name that appearing in swift container for an object21:41
hub_capwhat do yall htink of that? uuid for the filename, and name/desc in the metadata for the file21:41
juiceSounds good21:42
annasheni will just sit and watch for the finals21:42
vipulhmm not too thrilled but i can live with it21:42
SlickNikI'm okay with that as long as the metadata is readily available/apparent in the UI.21:42
hub_capThe only restriction on object names is that they must be less than 1024 bytes in length after URL encoding. For example, an object name of C++final(v2).txt should be URL encoded as C%2B%2Bfinal%28v2%29.txt and therefore be 24 bytes in length rather than the expected 16.21:43
*** dhellmann-afk is now known as dhellmann-away21:43
hub_capdo we really want to ahve to take swift naming considerations into account?21:43
annashenno..21:43
hub_cap:D21:43
vipulwe can make that a configurable thing.. we're not using a private swift.. it's going into their public cloud swift..21:43
vipulso it's visible.. which is why i bring it up21:44
hub_capsure, neither are we...21:44
vipulso if it is visible and they will see it.. the context argument should apply to swift object name as well me thinks21:44
hub_capid rather make it less understandable for now21:44
vipulwhich may mean they're more likely to delete it :(21:44
hub_capi dont want to deal w/ constancy between the systems21:44
hub_capok crap a user named it incorrectly in our system, so they go rename it cuz they dont like the missspell in swift21:45
vipulwell yea i guess that could happen as well21:45
vipullet's go with UUID.. and if we need to.. we can make that a configurable/pluggable thing21:46
hub_capsimplicity = uuid / metadata for things that dont matter and arent unique (names...)21:46
hub_capfor sure vipul21:46
vipulat the end of the day the name doesn't matter to reddwarf.. but it may to the user21:46
juice#agreed21:46
hub_capya its all code, we can figure it out21:46
SlickNikI can live with UUID and name/desc in the metadata for now.21:46
SlickNiksounds good.21:46
SlickNik#agreed even21:46
vipulok the failure handling thing21:46
vipuli put that in the agenda.. to see how we want to handle the case where streamed upload fails21:47
hub_capall for siliently failing and sayign nothing to customers?21:47
robertmyerssure21:47
hub_cap:P21:47
vipuldo we want to retry? or just fail21:47
hub_capretry for sure21:47
SlickNikaye :P21:47
hub_capwe shoudl ahve retry logic for X (configurable) retries21:47
hub_caphonestly each chunk is gonna potentially fail21:47
hub_capso we need to add retry there21:48
robertmyersideally we'll do MD5 checksuming durging the backup too21:48
vipuldoes swift give you a md5 for every segment?21:48
SlickNikWhere do we store the checksum(s)?21:49
hub_capmd5 at the end i think21:49
vipulwe can calcualte md5 on the stream .. for every segment.. and comapre?21:49
robertmyersI think so21:49
hub_capalso u can give swift the md5 and itll compare it to make sure its clean21:49
vipulSlickNik: just in memory calculate on th efly21:49
vipulthe fly21:49
robertmyersthe api takes an etag21:49
SlickNikno, I mean, we want to verify on restore right?21:50
robertmyersyeah the download process coudl do that21:50
hub_capdef on restore too21:50
vipulprobably another case we should consider.. swift probably has the md5 for that object as metadata or something?21:51
hub_capwe will cross that bridge when we do restores :D21:51
robertmyersvipul:  it is the ETAG header21:51
vipulwe're working on that portion as well hub_cap21:51
hub_capoh nice as one shabang vipul?21:51
vipulrobermeyers: ok so it's going to be there for us21:52
vipulhub_cap: yea in parallel i suppose21:52
hub_capSWEET21:52
SlickNikgotcha robermyers.21:53
hub_capok so do we feel comfortable w/ backup/restore now? should we move on?21:53
vipulrobermeyers: so there may be one use case.. where the user could potentially replace the segments21:53
vipuland the md5 would be changed21:53
hub_capi think they would have to change the manifest too right robertmyers?21:53
robertmyerswell then that is their fault :)21:53
SlickNikWell, we need to figure what are we using the md5 for.21:53
vipuldo we even want to consider that?  i guess the option would be to manually store the md5 of the entire thing somewhere21:54
robertmyersyes, you can upload a new manifest21:54
SlickNikIf it's 1. to check data integrity, then it's fine to use the ETAG header.21:54
SlickNik2. If we're worried about security where someone can swap out the backup and change the MD5 if they have access to Swift. Then:21:54
SlickNika. We need to not use MD5 and use something more cryptographically secure21:55
SlickNikb. We need to have a place to persist said hash21:55
vipulSlickNik: Yea was just thinking in our db table21:55
vipulbut maybe that's an enhancement21:56
hub_capor throw up hands for now :)21:56
imsplitbityah the poc code used md5 just because it was cheap and there.  def need to use something better21:56
hub_capvipul: +1 to enhancement21:56
SlickNikI like this guy ^^^ <321:56
juiceLets make it work then we can make it better then21:56
SlickNikI'm all for staying simple now and enhancing later.21:56
hub_caplets make it more secure when a user actually goes and does that21:56
vipulyup21:56
robertmyerswell in order to do anything more fancy, i don't think you can stream it21:56
vipulyou could encrypt as you stream so it is still an option21:57
hub_capyup21:57
hub_capwe good? moving on?21:57
vipulye21:57
vipuls21:57
robertmyersyes21:57
imsplitbityep21:57
hub_cap#topic Unmanaged mode (enable root) security considerations21:57
SlickNiksounds good to me.21:57
*** openstack changes topic to "Unmanaged mode (enable root) security considerations (Meeting topic: reddwarf)"21:57
hub_capnot sure what this one is all about21:57
vipulok this one is when we enable root21:57
vipuldo we want to consider making this thing truly unmanaged21:57
vipulso delete guest-agent.conf21:58
vipulthe thinking is.. as root they could potentially do destructive things21:58
vipuland if they got a hold of the conf file21:58
hub_cap_could_21:58
vipulthen they could get to DB, and whatever else21:58
vipulso wanted to throw that out ther21:58
hub_capget a hold of the conf file?21:58
hub_caplike using read infile?21:58
vipulthat21:58
vipulwhich we could disable i guess21:59
hub_capor just make the user diff for that conf file21:59
hub_capthey cant really get access to the shell unless mysql is compromised21:59
vipulyea.. that's an option as well21:59
vipulwhich i hear is easy to do from some of hte folks here..21:59
vipulbut besides that..21:59
hub_capto root mysql?21:59
vipulwe're not truly unmanged22:00
hub_capwell they sux for not telling mysql ;)22:00
hub_capwe dont want to be unmanaged22:00
vipulsince we can still support api operations22:00
hub_capwe allow users to get root mysql today22:00
hub_capexactly22:00
hub_capif shit fails, we have no SLA22:00
hub_capbut we will still give it the old college try22:00
hub_capsoudn good vipul and co?22:01
vipulright.. this probably needs more thought.. wanted to run it by you guys first22:01
vipulit's fine as it is for now.. i'll confirm with our security guys22:02
hub_capim fine w/ more thought for sure22:02
hub_capya def22:02
hub_capif they have insight id love to hear it22:02
SlickNikso is the option then to lock down the mysql access account in the guest agent conf file?22:02
hub_capwe effectively dont allow mysql to read the guest file22:02
vipulyea that would probably work for now22:02
hub_capby using a different username22:02
vipulor what managed / unamanaged means in general22:02
hub_captill my.cnf edits come out possibley vipul :P22:02
hub_caperr a diff set of perms, not diff username (same diff...)22:03
SlickNikAh, okay.22:03
vipuli gotta hard stop.. i'll discuss this later22:03
vipulsorry gotta go to another meeting22:03
hub_capl8r vipul22:03
SlickNiklater vipul22:04
hub_capok so if no more Qs we can go to freeforall discuss22:04
SlickNikWe've covered most of the agenda any way.22:04
hub_capyup22:04
SlickNikI'm good.22:04
hub_cap#topic Open Discussion22:04
*** openstack changes topic to "Open Discussion (Meeting topic: reddwarf)"22:04
hub_capanyone have anythign to add?22:04
SlickNikSince we almost started a ruby vs python flame war...22:04
SlickNikI'd like to draw your attention to this:22:05
juiceI'm good22:05
SlickNikhttp://www.rackspace.com/blog/text-editor-madness-bracket-vote-for-your-favorite/22:05
juiceTtyl22:05
SlickNikBut that's all I had. :)22:05
hub_capLOL SlickNik22:05
datsun180bEveryone is entitled to their own opinion about the best text editor22:05
SlickNiklol, I'm not saying anything.22:06
datsun180bBut that's the great thing about facts, you don't have to believe a fact for it to be true22:06
SlickNiktrue that datsun180b22:06
hub_capokey w/ that ill end this, cuz datsun180b is likely standing and screaming22:06
hub_cap#endmeeting22:06
*** openstack changes topic to "OpenStack meetings (alternate) || Development in #openstack-dev || Help in #openstack"22:06
openstackMeeting ended Tue Mar 26 22:06:40 2013 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)22:06
openstackMinutes:        http://eavesdrop.openstack.org/meetings/reddwarf/2013/reddwarf.2013-03-26-20.59.html22:06
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/reddwarf/2013/reddwarf.2013-03-26-20.59.txt22:06
datsun180bI'm really not22:06
openstackLog:            http://eavesdrop.openstack.org/meetings/reddwarf/2013/reddwarf.2013-03-26-20.59.log.html22:06
hub_cap:P just messing datsun180b22:06
SlickNikit's okay, I don' t believe hub_cap on that one :P22:07
SlickNiklater guys.22:07
datsun180bPlease, my methods are much more of the slow methodical all-fronts refute that takes way too long to compile22:07
datsun180bBut when I have an answer, oh boy do I have an answer22:07
*** SlickNik has left #openstack-meeting-alt22:08
*** datsun180b has left #openstack-meeting-alt22:09
*** esp1 has left #openstack-meeting-alt22:09
*** robertmyers has left #openstack-meeting-alt22:11
*** djohnstone has quit IRC22:12
*** DandyPandy has left #openstack-meeting-alt22:12
*** sacharya has quit IRC22:23
*** jrodom has joined #openstack-meeting-alt22:23
*** jcru has quit IRC22:35
*** vipul has left #openstack-meeting-alt22:37
*** amyt has quit IRC23:10
*** jrodom has quit IRC23:24
*** sdake_ has quit IRC23:30
*** sdake_ has joined #openstack-meeting-alt23:31

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!