| *** DubLo7 has quit IRC | 00:00 | |
| *** gaveen has joined #openstack | 00:00 | |
| pvo | alekibango: you're having an internet conference now : ) | 00:00 |
|---|---|---|
| pvo | 247/365 | 00:01 |
| alekibango | ? | 00:01 |
| alekibango | aha :)hehe | 00:01 |
| pvo | a little less focused, I'll give you that. | 00:01 |
| *** dysinger has joined #openstack | 00:02 | |
| zaitcev | Guys, how am I supposed to create containers in Swift? | 00:04 |
| zaitcev | The CF programmer guide says PUT /<api version>/<account>/<container> | 00:04 |
| *** devx has quit IRC | 00:05 | |
| zaitcev | Should I replace this with PUT to http://lembas.zaitcev.lan:8080/v1/AUTH_6b5b14fcdf75449a855dafdc62cdbfcf/test/newcont ? | 00:05 |
| Orman_ | alekiango: What conference? | 00:05 |
| alekibango | the one you are in | 00:05 |
| alekibango | :) | 00:05 |
| Orman_ | Oh haha ok. | 00:05 |
| Orman_ | I am going to add more tonight to the notes | 00:07 |
| *** Cybodog has joined #openstack | 00:07 | |
| *** joearnold has quit IRC | 00:10 | |
| *** elasticdog has joined #openstack | 00:12 | |
| zaitcev | The iwhd seems to be doing http://lembas.zaitcev.lan:8080/v1/AUTH_6b5b14fcdf75449a855dafdc62cdbfcf/newcont, e.g. it assumes that account is encoded into base URL. | 00:13 |
| mdiver | while uploading bundle, I'm getting a permission denied, EC2_* all set.. | 00:14 |
| mdiver | any idea ? | 00:14 |
| Orman_ | Hmmm permission error | 00:15 |
| Orman_ | Code please. ;) | 00:15 |
| *** jc_smith has quit IRC | 00:16 | |
| *** grizzletooth has joined #openstack | 00:16 | |
| mdiver | <!-- ERR_CONNECT_FAIL --> | 00:16 |
| *** cole has joined #openstack | 00:25 | |
| cole | yo | 00:26 |
| cole | need someone on ubuntu 10.10 (physical box) to test out a script for me | 00:27 |
| *** dragondm has quit IRC | 00:31 | |
| *** mmalgeri has quit IRC | 00:35 | |
| *** khussein has quit IRC | 00:38 | |
| *** gaveen has quit IRC | 00:43 | |
| *** iammartian has quit IRC | 00:47 | |
| *** mdomsch has joined #openstack | 00:49 | |
| mdiver | I'm getting error : Couldn't get IP, using 127.0.0.1 | 00:49 |
| mdiver | I'm starting each process by hand. | 00:49 |
| mdiver | do I have to set any variable to set IP Address ? | 00:50 |
| vishy | mdiver: there is a patch in for that, utils.get_my_ip() is failing | 01:00 |
| vishy | you can modify the method to just always use 127.0.0.1 | 01:00 |
| vishy | it needs an active internet connection to work under the current implementation | 01:01 |
| mdiver | vishy: I c. | 01:01 |
| mdiver | I'm in a intranet | 01:01 |
| mdiver | not internet access. | 01:01 |
| mdiver | I've setup a http_proxy | 01:01 |
| vishy | mdiver: but if you are patient it will timeout and give you the message, but i don't have the patience | 01:01 |
| mdiver | vishy: I see. | 01:01 |
| mdiver | vishy: I'm able to create project, however not able to publish it.. | 01:02 |
| vishy | https://code.launchpad.net/~zulcss/nova/nova-lp-668229 | 01:02 |
| vishy | that is a fix | 01:02 |
| vishy | what do you mean publish? | 01:03 |
| mdiver | vishy: euca-upload-budle | 01:04 |
| mdiver | ..bundle.. | 01:04 |
| mdiver | euca-upload-bundle -m /tmp/kernel.manifest.xml -b mybucket | 01:04 |
| vishy | do you have nova-objectstore running? | 01:05 |
| mdiver | vishy: It complains saying that "permission denied." | 01:05 |
| vishy | and do you have S3_* set properly? | 01:05 |
| mdiver | it is running and listening on *:3333 | 01:05 |
| mdiver | S3_URL=http://127.0.0.1:3333 | 01:06 |
| mdiver | vishy: just S3_URL | 01:06 |
| mdiver | vishy: I've sourced the novarc , I've got EC2_* | 01:07 |
| vishy | and where do you get permission denied? | 01:07 |
| vishy | in the objectstore log? | 01:07 |
| mdiver | I've got on the stdout running euca-upload | 01:08 |
| creiht | zaitcev: That part should be the same | 01:08 |
| *** schisamo has quit IRC | 01:08 | |
| creiht | where the account is the account hash you had above and then the container name | 01:08 |
| mdiver | vishy: let me check... | 01:08 |
| vishy | ok, see if you can find the log for objectstore | 01:08 |
| vishy | perhaps buckets path is set to a directory with the wrong perms? | 01:08 |
| mdiver | http://127.0.0.1:3333 | 01:09 |
| mdiver | Connection to 127.0.0.1 failed | 01:09 |
| mdiver | vishy: however.. the port is on listening, ran a telnet 3333 and it is connecting.. | 01:10 |
| mdiver | vishy: maybe that http_proxy ? | 01:10 |
| vishy | whacky | 01:10 |
| mdiver | vishy: disable iptables | 01:10 |
| vishy | good idea | 01:11 |
| cole | mdiver, what version of ubuntu are you running? | 01:11 |
| vishy | you could also try using the ip of the machine instead of lo | 01:11 |
| mdiver | cole: I'm running Centos5.5 | 01:11 |
| mdiver | vishy: how can I set that ? on the nova-manage.conf ? | 01:11 |
| vishy | awesome that so many people are getting it running on centos | 01:11 |
| vishy | no just change S3_URL env variable | 01:11 |
| mdiver | got it. | 01:12 |
| vishy | or pass it on the command line to euca-upload | 01:12 |
| vishy | -U <url> | 01:12 |
| cole | i've written an installer for Ubuntu 10.10 that makes things super simple..maybe i'll do the same for Centos | 01:13 |
| vishy | cole: nice, is it a script like novascript? | 01:14 |
| vishy | http://github.com/vishvananda/novascript | 01:14 |
| alekibango | cole: can u share it? | 01:14 |
| alekibango | i would like to look | 01:14 |
| cole | vishy, no, more complete I think...basically takes soren's install instructions on the wiki and automates all of them | 01:14 |
| mdiver | vishy: r you the one who wrote nova.sh ? | 01:15 |
| vishy | ah, ok. Not sure how up to date those instructions are | 01:15 |
| alekibango | mdiver: he is | 01:15 |
| vishy | mdiver: yes | 01:15 |
| cole | i should say | 01:15 |
| mdiver | vishy: congrats on that. | 01:15 |
| alekibango | yes it helpes mych vishy | 01:15 |
| vishy | yw guys | 01:15 |
| cole | more complete for 10.10...doesn't work for other releases so novascript has some advantages | 01:15 |
| alekibango | heh my fingers are drunk prolly | 01:15 |
| vishy | did it for myself, glad it is useful | 01:16 |
| alekibango | vishy: u bet it is | 01:16 |
| vishy | ok guys I'm out | 01:16 |
| alekibango | but you should make USE_VENV working again :) | 01:16 |
| vishy | gl mdiver | 01:16 |
| Orman_ | Everyone is welcomed to help us out at | 01:16 |
| mdiver | vishy: tks, have a good one. | 01:16 |
| vishy | alekibango: yeah i removed it since you need ppa for libvirt anyway, figured might as well use the packages for everything | 01:16 |
| Orman_ | http://etherpad.openstack.org/NovaSecurityNotes\ | 01:16 |
| alekibango | vishy, orman: i talked about some arch picture diagram, i will try to complete it now and give you for comments, ok? | 01:17 |
| alekibango | then i will try another views :) | 01:17 |
| alekibango | vishy: it worked for me on debian | 01:17 |
| alekibango | i just had to install few more packages iirc | 01:17 |
| alekibango | ebtables etc | 01:17 |
| alekibango | on debian i dont use ppa, i used src | 01:17 |
| cole | rebooting vm | 01:18 |
| *** cole has quit IRC | 01:19 | |
| *** mdiver has left #openstack | 01:20 | |
| Orman_ | alekibango: Ok man sounds great and I can't wait to see it. | 01:20 |
| Orman_ | * Orman crosses his fingers. ;P | 01:21 |
| *** ArdRigh has joined #openstack | 01:31 | |
| *** dysinger has quit IRC | 01:33 | |
| *** metcalfc has quit IRC | 01:46 | |
| *** DubLo7 has joined #openstack | 01:58 | |
| *** rds__ has quit IRC | 02:00 | |
| *** mdomsch has quit IRC | 02:01 | |
| *** metoikos has joined #openstack | 02:07 | |
| *** kevnfx has joined #openstack | 02:10 | |
| *** jdarcy has joined #openstack | 02:13 | |
| *** neogenix has joined #openstack | 02:15 | |
| *** jdarcy has quit IRC | 02:15 | |
| *** kevnfx has quit IRC | 02:21 | |
| Orman_ | alekibango: Did you read the Virtual guest | 02:28 |
| alekibango | not today :) sorry i lag a lot | 02:28 |
| Orman_ | +pbot added some new stuff yesterday to it in purple. | 02:28 |
| Orman_ | +pvot | 02:28 |
| creiht | pvo | 02:29 |
| Orman_ | Thank you | 02:29 |
| pvo | yeppo | 02:29 |
| creiht | you don't have to include the + :) | 02:29 |
| Orman_ | Ok | 02:29 |
| *** DubLo7 has quit IRC | 02:33 | |
| *** hazmat has quit IRC | 02:33 | |
| *** mmalgeri has joined #openstack | 02:35 | |
| *** miclorb_ has quit IRC | 02:40 | |
| *** pvo has quit IRC | 02:41 | |
| *** metcalfc has joined #openstack | 02:45 | |
| alekibango | Orman_: edited few things | 02:47 |
| alekibango | striken == candidate for deletion | 02:47 |
| *** ddumitriu has quit IRC | 02:50 | |
| Orman_ | alekibango: Ok I will look. | 02:54 |
| *** miclorb_ has joined #openstack | 02:58 | |
| Orman_ | alekibango:So instead of making policies you want us to develop more design diagrams right? | 03:00 |
| Orman_ | alekivango: Am I following you correctly? :D | 03:00 |
| alekibango | Orman_: i would say so :) | 03:08 |
| alekibango | maybe not even design diagrams | 03:08 |
| alekibango | but identify goals | 03:09 |
| alekibango | real, goals | 03:09 |
| alekibango | we all know that we want to be sure to have data safe. we want guest users to not worry about data | 03:09 |
| Orman_ | Yes,but I still think design diagrams would help out devs. | 03:09 |
| alekibango | Orman_: yes | 03:09 |
| alekibango | but we cant move forward without identifying goals | 03:10 |
| Orman_ | Yes, data protection should work behind the scenes if it can afford to. | 03:10 |
| alekibango | it would be very good to express them all before starting with policies and technical tools | 03:10 |
| Orman_ | Right | 03:10 |
| alekibango | otherwise we will bake in some unneeded or crazy stuff, like war on terror | 03:11 |
| alekibango | (which creates terror rather then solves the problem) | 03:11 |
| alekibango | uh my english teacher would commit ritual suicide after reading my nightly chats | 03:11 |
| alekibango | :D | 03:12 |
| Orman_ | Your english is good. | 03:13 |
| Orman_ | alekibango: Don't doubt yourself. | 03:13 |
| Orman_ | ;) | 03:13 |
| alekibango | it would be good to express our security goals in simple to understand terms | 03:13 |
| alekibango | like i did - give users reasons to not worry about theirs data stored in cloud... | 03:14 |
| alekibango | :) | 03:14 |
| alekibango | and make this list short and clear | 03:14 |
| alekibango | <20 items | 03:14 |
| Orman_ | Right, paradon my policies I just am a designer at heart. :) | 03:14 |
| alekibango | like design tenets | 03:14 |
| Orman_ | Right | 03:14 |
| alekibango | Orman_: i see why you are tempted to go there | 03:14 |
| Orman_ | alekibango: I am just a designer,but not a dev. | 03:15 |
| Orman_ | Security designer or doc | 03:15 |
| Orman_ | writer | 03:15 |
| alekibango | Orman_: noone can do all | 03:15 |
| Orman_ | alekibango: You are so right. | 03:16 |
| *** dysinger has joined #openstack | 03:16 | |
| Orman_ | I had a professor really make a Intro To Software class hard for me. | 03:16 |
| alekibango | The skillful employer of men will employ the wise man, the brave man, the covetous man, and the stupid man. For the wise man delights in establishing his merit, the brave man likes to show his courage in action, the covetous man is quick at seizing advantages, and the stupid man has no fear of death. | 03:17 |
| alekibango | i love the last part :) | 03:17 |
| Orman_ | alekibango: Me too. | 03:17 |
| alekibango | you can gues which book i am quoting | 03:17 |
| alekibango | :)) | 03:17 |
| Orman_ | alekibango: Had there been a blueprint filled that lets data protection run in the background? | 03:18 |
| alekibango | not sure, try searching in blueprints | 03:18 |
| Orman_ | Ok | 03:18 |
| Orman_ | It just popped into m mind. ;)) | 03:18 |
| alekibango | security means protection from all kinds of PROBLEMS :) | 03:19 |
| Orman_ | alekibango: Let me guess hmmm.......The Art Of War? | 03:19 |
| alekibango | Orman_: yes, the commented version | 03:19 |
| Orman_ | Cool | 03:19 |
| Orman_ | You love your war history don' you? | 03:20 |
| Orman_ | ;P | 03:20 |
| alekibango | Orman_: i am as much into current art of war | 03:20 |
| Orman_ | *don't | 03:20 |
| Orman_ | Ok | 03:20 |
| Orman_ | Have you seen the Last Samuri? | 03:20 |
| *** kashyapc has joined #openstack | 03:20 | |
| alekibango | not sure, prolly yes | 03:20 |
| Orman_ | With Tom Cruise and some other dude. ; | 03:20 |
| Orman_ | ;) | 03:21 |
| alekibango | ah, seen it | 03:21 |
| Orman_ | I love that movie. It one of my all time favorites. | 03:21 |
| Orman_ | Anyways I am going to search for that blueprint | 03:21 |
| alekibango | one of my favs are brazil (the uncut version) | 03:21 |
| Orman_ | Hmm have not seen that one. | 03:22 |
| alekibango | robert de niro plays hacker there | 03:22 |
| alekibango | reall hacker with real hardware | 03:22 |
| alekibango | (tubes) | 03:22 |
| Orman_ | * Orman gets excited when he starts to search. ;P | 03:22 |
| alekibango | i have been reading also screenplay, its really treasure | 03:22 |
| Orman_ | Cool | 03:22 |
| Orman_ | Ah cool. | 03:23 |
| alekibango | or 'wag the dog' | 03:23 |
| Orman_ | My bother wants to be a film director. | 03:23 |
| *** Cybodog has quit IRC | 03:23 | |
| alekibango | hm we should not talk OT that much here :D | 03:23 |
| Orman_ | Haha | 03:24 |
| Orman_ | I know | 03:24 |
| Orman_ | Back to topic. | 03:24 |
| *** metcalfc has quit IRC | 03:24 | |
| alekibango | http://www.imdb.com/title/tt0088846/ -brazil, but the uncut version is maybe 1983, not sure now | 03:24 |
| Orman_ | https://blueprints.launchpad.net/openstack?searchtext=data+protection+in+the+backgroud | 03:25 |
| Orman_ | alekibango: This is my second favorite movie: http://www.imdb.com/title/tt1375666/ | 03:26 |
| alekibango | did you see surrogates? | 03:27 |
| Orman_ | No | 03:27 |
| Orman_ | Good? | 03:27 |
| alekibango | well, i found most movies to be propaganda | 03:28 |
| alekibango | and this one also is | 03:28 |
| alekibango | but really interesting one | 03:28 |
| alekibango | talks about dangers of robotics :) | 03:28 |
| Orman_ | Like iRobot. | 03:29 |
| alekibango | similar quality, right | 03:29 |
| Orman_ | Did you see that link I sent you | 03:29 |
| Orman_ | https://blueprints.launchpad.net/openstack?searchtext=data+protection+in+the+backgroud | 03:29 |
| alekibango | you are searching too much | 03:29 |
| alekibango | keywords | 03:29 |
| alekibango | https://blueprints.launchpad.net/nova/+spec/request-objectstores-validation-inside-ec2-group | 03:30 |
| Orman_ | That's my old one which isn't good. | 03:30 |
| alekibango | how do you imagine the new one | 03:30 |
| alekibango | to work | 03:31 |
| Orman_ | The data protection one I proposed a few minutes ago? | 03:31 |
| alekibango | how do you 'protect' data? | 03:31 |
| Orman_ | Still finalizing all of it. | 03:32 |
| Orman_ | What I meant is protecting the data in the background so the user does not see it. | 03:32 |
| Orman_ | Your opinion? | 03:32 |
| alekibango | how 'protecting'? with guns, tanks, chopters? | 03:33 |
| alekibango | :D | 03:33 |
| alekibango | http://www.youtube.com/watch?v=RqtUI4XfhMM&feature=fvst | 03:34 |
| Orman_ | Haha no just by running different security features in the background | 03:34 |
| alekibango | like what? | 03:34 |
| *** grizzletooth has quit IRC | 03:34 | |
| alekibango | i just cant imagine such feature | 03:35 |
| Orman_ | I don;t know if that's my kind of movie. | 03:35 |
| alekibango | heh, its surely different one | 03:35 |
| Orman_ | In opinion it's strange. | 03:36 |
| alekibango | yes! | 03:36 |
| alekibango | its crazy | 03:36 |
| alekibango | :D | 03:36 |
| alekibango | i have seen it 5 times already and i still have unanswered questions, even after reading screenplay | 03:37 |
| Orman_ | Do you agree with that movie? | 03:37 |
| alekibango | no | 03:37 |
| Orman_ | Ok good because I don't either. | 03:37 |
| alekibango | i rarely agree with ideas | 03:37 |
| alekibango | i mean 100% | 03:37 |
| Orman_ | I meant just the acts that I saw in the trailer | 03:38 |
| alekibango | Orman_: those are just bits... which cannot explain depths of it | 03:38 |
| Orman_ | Anyways | 03:38 |
| alekibango | its really deep movie | 03:38 |
| Orman_ | I bet. | 03:39 |
| alekibango | many layers... | 03:39 |
| alekibango | and creepy posters! | 03:39 |
| Orman_ | Ok | 03:39 |
| Orman_ | Yep definitely not my type of movie | 03:40 |
| Orman_ | haha | 03:40 |
| alekibango | but it tells you something about the society | 03:40 |
| Orman_ | Yeah | 03:40 |
| alekibango | about how crazy it gets | 03:40 |
| alekibango | even if the crazy one in the movie is the hero | 03:40 |
| Orman_ | We better get back on topic | 03:40 |
| alekibango | like "Suspiction breeds confidence" | 03:43 |
| alekibango | oh no, mistake | 03:43 |
| alekibango | right, its here http://www.architecture.uwaterloo.ca/faculty_projects/terri/madness/McCallum/Brazil_2.html | 03:44 |
| alekibango | thats example of crazy security measures | 03:44 |
| *** miclorb_ has quit IRC | 03:44 | |
| alekibango | and the movie is full of such | 03:44 |
| Orman_ | Do you like the movie? | 03:44 |
| alekibango | Be Safe: Be Suspcious. | 03:44 |
| alekibango | Don’t Suspect a Friend, Report Him. | 03:45 |
| alekibango | :) | 03:45 |
| alekibango | Orman_: it could serve to you as example of what security taken from wrong end might do | 03:46 |
| Orman_ | Right | 03:46 |
| alekibango | mistake in printing leads to arrest of wrong man, who is tortured (pays for his own inprisonment and torture), dies.... | 03:47 |
| alekibango | Orman_: if you have read 1984, this is very close theme | 03:47 |
| alekibango | but having different view on the source of the problem | 03:47 |
| Orman_ | I don't like movie, do you/ | 03:48 |
| alekibango | this is full movie 1984 http://video.google.com/videoplay?docid=-5464625623984168940# | 03:48 |
| Orman_ | I get what your saying though. | 03:48 |
| alekibango | also animal farm is great http://video.google.com/videoplay?docid=-5464625623984168940#docid=-9153412213802919416 | 03:49 |
| *** khussein has joined #openstack | 03:49 | |
| alekibango | also talkign about security | 03:49 |
| alekibango | see those, it might help you get things straight :) | 03:49 |
| alekibango | Orman_: i cant really say i love some movie totally... | 03:50 |
| alekibango | but they sometimes give important testimony | 03:50 |
| alekibango | like 1984 does | 03:50 |
| alekibango | but reading book is much, much better in this case | 03:52 |
| Orman_ | Ok | 03:52 |
| Orman_ | So back on topic. | 03:53 |
| Orman_ | highlight goals first and then go from there | 03:53 |
| alekibango | goals + architecture, policies, tools+realisation | 03:53 |
| *** metcalfc has joined #openstack | 03:54 | |
| Orman_ | Ok | 04:01 |
| Orman_ | alekibango: Do you think we have enough goals yet? | 04:02 |
| Orman_ | alekibango: Diagram close to being finished? | 04:06 |
| Orman_ | alekibango: Diagram close to being finished?:D | 04:06 |
| Orman_ | two times | 04:06 |
| alekibango | Orman_: no we imho do not have all goals | 04:07 |
| alekibango | maybe half | 04:07 |
| alekibango | and we need to edit them to make short reading | 04:07 |
| alekibango | not long | 04:07 |
| Orman_ | Ok | 04:08 |
| *** jakedahn has joined #openstack | 04:08 | |
| *** AimanA is now known as HouseAway | 04:08 | |
| Orman_ | alekibango: I can | 04:09 |
| Orman_ | alekibango: I can't wait to see the diagram. | 04:09 |
| Orman_ | :) | 04:09 |
| *** jc_smith has joined #openstack | 04:09 | |
| Orman_ | Hoping for tonight,but I will understand if not. :D | 04:09 |
| alekibango | Orman_: oh man :) | 04:09 |
| *** mmalgeri has quit IRC | 04:09 | |
| *** krish has joined #openstack | 04:10 | |
| *** jc_smith has quit IRC | 04:10 | |
| *** jc_smith has joined #openstack | 04:12 | |
| Orman_ | I do think that new data protection fetaures should be in place as well as storage | 04:14 |
| *** miclorb_ has joined #openstack | 04:14 | |
| *** kevnfx has joined #openstack | 04:17 | |
| *** ArdRigh has quit IRC | 04:19 | |
| Orman_ | alekibango: I'd say it;s been a very sucessful week so far for our Nova Security Notes. ;D | 04:21 |
| Orman_ | A lot of contributions,but there is still more work to be done. | 04:22 |
| *** pvo has joined #openstack | 04:25 | |
| *** ChanServ sets mode: +v pvo | 04:25 | |
| *** omidhdl1 has joined #openstack | 04:45 | |
| *** metcalfc has quit IRC | 05:00 | |
| *** ranjib has joined #openstack | 05:00 | |
| ranjib | hello everyone | 05:01 |
| *** ioso_ has quit IRC | 05:09 | |
| *** ioso has joined #openstack | 05:09 | |
| Orman_ | Hey renjib | 05:11 |
| Orman_ | Are you a dev? | 05:11 |
| *** BK_man has quit IRC | 05:13 | |
| *** eldarnugaev has joined #openstack | 05:15 | |
| ranjib | orman: yes, im from ThoughtWorks | 05:25 |
| Orman_ | Ok | 05:25 |
| Orman_ | I am one of the security doc writers on here. :) | 05:25 |
| Orman_ | Nice to meat you. | 05:25 |
| khussein | Orman_: Do the security doc include anything about authentication? | 05:26 |
| ranjib | meet u mean ? :-D | 05:26 |
| Orman_ | khussein: We are just outlining the goals right now for security. | 05:27 |
| khussein | s/do/does | 05:27 |
| Orman_ | http://etherpad.openstack.org/NovaSecurityNotes | 05:27 |
| Orman_ | ranjib: I just mean that I am glad to talk to you, | 05:28 |
| Orman_ | :) | 05:28 |
| ranjib | :- | 05:28 |
| ranjib | Orman : im pleased to meet u too .. | 05:28 |
| Orman_ | :) | 05:28 |
| Orman_ | khussein: Feel free to edit anything or add your thoughts to the notes. | 05:29 |
| Orman_ | We are looking for more developers to help us out with writing the goals. | 05:30 |
| khussein | Orman_: I am trying to understand the scope of that document first. | 05:30 |
| Orman_ | Ok | 05:30 |
| Orman_ | We're just writing the goals right now. | 05:30 |
| khussein | The reason I bring this up is because I have submitted this blueprint a few days ago https://blueprints.launchpad.net/nova/+spec/openstack-authn | 05:30 |
| khussein | And when you mentioned security doc, I wanted to make sure that I am not missing anything. | 05:31 |
| Orman_ | We are taking authentication into the mix as well. | 05:32 |
| Orman_ | khussein: Your authentication idea is very interesting. | 05:34 |
| khussein | In my mind, there is no one GREAT authentication protocol. Developers and/or businesses will have different authentication needs to their systems. | 05:35 |
| khussein | Some may use standards, some may not, others may use full Identity Management Systems to handle authentication. | 05:35 |
| Orman_ | Righgt | 05:36 |
| Orman_ | Like OpenId | 05:36 |
| khussein | The blueprint proposes a way to allow openstack services to be easily pluggable and configurable to work with ANY of these authentication mechanisms. | 05:36 |
| Orman_ | Feel free to add it to the goals at the top. :D | 05:36 |
| *** pvo has quit IRC | 05:37 | |
| khussein | I am proposing a protocol between a "auth component" and openstack service. The auth component can go and talk to any "embedded" or external IdM system. After it does its own thing, and the user is authenticated, it passes through the request down to the openstack service using the protocol proposed. | 05:37 |
| *** miclorb_ has quit IRC | 05:38 | |
| Orman_ | Ah ok do you have something in place to help protect against abusive actions in the authentication blueprint? | 05:38 |
| *** zaitcev has quit IRC | 05:39 | |
| Orman_ | Khussein: Do you have design diagrams or just plain diagrams to help explain your proposal? | 05:40 |
| khussein | So, the blueprint spec defines multiple ways of deploying the auth component. In non of them a user can talk directly to the service without being authenticated. | 05:40 |
| khussein | The service will always redirect that request back to the auth component if the user isn't authenticated. If he is, the auth component passes that request through, or it doesn't even need to be in the way at all. | 05:41 |
| khussein | Yes, the diagrams are in the specs of the blueprint. | 05:41 |
| khussein | It is all currently in a pdf file in http://wiki.openstack.org/openstack-authn | 05:41 |
| khussein | I have also attached a reference implementation to the protocol to kinda demo the idea. | 05:41 |
| Orman_ | What I mean is if a user trys to request authentication several times then it they get redirected back to the authentication component right? | 05:42 |
| khussein | Yes. All authentication requests have to go through the authentication component. | 05:42 |
| khussein | Handling abusive behavior is entirely up to the implementation of the auth component. I chose to make this out of scope at this point. | 05:43 |
| khussein | But we can definitely reassess if we think is necessary. | 05:43 |
| Orman_ | Ok, so really and truly a kind of abusive attack like that would be protected in your authentication idea? | 05:43 |
| ranjib | khussein: agree,even we use RSA backed CAS as an SSO . redirection is something will definitely need ...f | 05:44 |
| Orman_ | Ok | 05:44 |
| khussein | Yeah absolutely. I am planning on attending the summit and willing to discuss this as far as we need to :). I believe it is a very crucial component and it is almost the first component to get re-invented every single time devs start a new service. | 05:45 |
| khussein | And I am also against standardizing on one authentication protocol. Ideally, we should leave that design choice to the service operators. The service should be generic enough to accept any of them. | 05:46 |
| khussein | But yeah, pls take a look at the pdf at http://wiki.openstack.org/openstack-authn and let me know if you have any early feedback that we can accommodate before the sumit. | 05:47 |
| Orman_ | Ok | 05:47 |
| ranjib | ok | 05:47 |
| Orman_ | I have a few blueprints I need to do still. | 05:47 |
| khussein | Thanks guys, you are awesome :). | 05:47 |
| Orman_ | khussein: Well thanks for contributing to the project. | 05:49 |
| Orman_ | I'd like you to add your idea to the notes. | 05:49 |
| khussein | Orman_: I have added it to the goals. Let me know if it needs a bit more clarification or if I need to put the links too. | 05:49 |
| Orman_ | khussein: Ok I will look | 05:50 |
| *** Avant has joined #openstack | 05:50 | |
| Orman_ | khussein: That's very good and straight to the point. I like it. ;D | 05:51 |
| khussein | Orman_: That's how we do it ;) .. haha .. thanks man. | 05:52 |
| Orman_ | Np | 05:52 |
| Orman_ | khussein: Not to be weird here,but where are you located? | 05:52 |
| khussein | I work at Rackspace, in Austin, TX. | 05:53 |
| Orman_ | Ah nice1 | 05:53 |
| Orman_ | !!! | 05:53 |
| Orman_ | ;) | 05:53 |
| openstack | Orman_: Error: "!!" is not a valid command. | 05:53 |
| Orman_ | haha | 05:54 |
| khussein | How about you? | 05:54 |
| Orman_ | I hope to work at Rackspace one day or Nasa. | 05:54 |
| Orman_ | I live around the Tampa Bay area in Florida. | 05:54 |
| khussein | Oh OK, cool. I have visited a few times. It is good "meeting" you :). | 05:56 |
| Orman_ | You too man | 05:56 |
| Orman_ | Your going to the summit so be sure to spread your idea and possibly if you could please spread out Nova Security Note efforts. | 05:56 |
| Orman_ | Or even just spread the security. | 05:57 |
| khussein | Yeah, sure. I just recently started joining the project and the IRC channel. So, I am still getting to used to everything. But definitely there is a big push and consensus from the industry on the need to address some of these security related topics. | 05:58 |
| Orman_ | Exactly | 05:59 |
| khussein | I am sure it won't be a problem spreading the word throughout the sumit. | 05:59 |
| Orman_ | Yeah | 05:59 |
| Orman_ | I am new here too. | 06:00 |
| Orman_ | I am in college right now and working to make mark on the Cloud Computing industry via security. ;) | 06:00 |
| khussein | That's great! I wish you best of luck my friend. | 06:02 |
| Orman_ | :) | 06:02 |
| Orman_ | khussein: Thank you my dear friend. | 06:02 |
| Orman_ | Will you be on here tomorrow? | 06:02 |
| khussein | Yes sir. | 06:02 |
| Avant | hi guys, anyone tried installing nova on multiple nodes yet? | 06:02 |
| Orman_ | Avnt: Hey | 06:03 |
| Orman_ | Avant: No, I think other have been thinking about it. | 06:03 |
| Orman_ | I don't think anyone's done it yet. | 06:04 |
| Avant | Orman: thanks for the info. | 06:04 |
| vishy | Avant: sure people have | 06:04 |
| Orman_ | Avant: I am one of the security doc writers and security blueprint guys. ;) | 06:05 |
| Orman_ | Ok | 06:05 |
| Orman_ | Well then they have | 06:05 |
| Orman_ | Thanks vishy. ;) | 06:05 |
| Orman_ | I wasn't sure since I am new here. ;) | 06:05 |
| vishy | Avant: http://wiki.openstack.org/NovaInstall/MultipleServer | 06:05 |
| vishy | there are some instructions that were made by people trying it out | 06:06 |
| vishy | piken's company has a 30+ node install using centos | 06:06 |
| Avant | vishy: glad to hear that.. I'm getting stuck at a point where the instance boots up ok, but isnt visible to the outside world.. I know of atleast one other stacker who has got the same issue.. i read his comments on this channel | 06:06 |
| vishy | nasa has a large deployment using ubuntu | 06:06 |
| vishy | avant: define outside world... | 06:07 |
| vishy | if you are using VlanNetworkManager (the default), then your switch has to support host-managed vlans | 06:08 |
| Avant | vishy: I cant ping the launched instance from the host, or from any other box on the same subnet | 06:08 |
| Avant | vishy: I m using Flat network manager | 06:08 |
| vishy | ah interesting | 06:08 |
| vishy | with injected ips? | 06:08 |
| *** f4m8_ is now known as f4m8 | 06:08 | |
| vishy | what ips are you giving to the instances? | 06:09 |
| Avant | yes. | 06:09 |
| vishy | in the private range? | 06:09 |
| *** rdw has quit IRC | 06:09 | |
| vishy | have you set up security groups to allow access? | 06:09 |
| *** Xenith has quit IRC | 06:10 | |
| *** Xenith has joined #openstack | 06:10 | |
| *** rdw has joined #openstack | 06:10 | |
| Avant | so, our controller and node are on : 10.12.1.187, and 10.12.1.188. we give 10.12.1.400 ** to our instances.. all of these, ofccourse are our internal network ip's | 06:10 |
| *** Ryan_Lane has joined #openstack | 06:11 | |
| Avant | vishy: we havent setup any security groups.. any pointers on what needs to be done to set those up? | 06:12 |
| vishy | ah sure | 06:12 |
| vishy | euca-authorize -P tcp -p 22 default | 06:12 |
| vishy | eyca-authorize -P icmp -t -1:-1 default | 06:13 |
| vishy | will allow ssh and ping | 06:13 |
| Avant | ah ok. and this needs to happen on the controller or on the compute node? | 06:13 |
| vishy | it is through the api | 06:13 |
| vishy | s/eyca/euca | 06:13 |
| vishy | instances start in the default sec group if unspecified | 06:14 |
| vishy | and you can authorize after the fact | 06:14 |
| Avant | ok. thanks. will try that | 06:15 |
| vishy | but this should also be necessary on a single node install | 06:15 |
| vishy | iirc | 06:15 |
| vishy | maybe there is something to do with the gateway being on the same host as the vms that bypasses the firewall rules... | 06:16 |
| Avant | perhaps. I didnt need to do this for the single node install | 06:16 |
| *** Xenith has quit IRC | 06:18 | |
| *** Xenith has joined #openstack | 06:18 | |
| *** schisamo has joined #openstack | 06:19 | |
| ranjib | vishy: we haven't executed the euca-authorize on our single node setup , still it worked smoothly. we were able to ping n ssh into the instanses | 06:19 |
| ranjib | vishy: when we separated the controller and copute node.. we were able to execute the euca-run-instanes .. but we were not able to ping /ssh into those instances | 06:20 |
| ranjib | vishy: we tried both vlan as well as flatmanager , but nothing worked. the vnet interfaces in the compute node were not getting any ip (4 or 6). | 06:21 |
| vishy | ah | 06:22 |
| Avant | ranjib: <vishy>:if you are using VlanNetworkManager (the default), then your switch has to support host-managed vlans | 06:22 |
| vishy | ranjib, i bet the problem is DHCP_IP | 06:22 |
| ranjib | vishy: we are wondering if we need to configure our main switches ... it seems the vlan interfaces are not speaking to each other | 06:22 |
| ranjib | hmm.. | 06:23 |
| vishy | ranjib: yes for Vlan mode you have to enable host-managed vlans | 06:23 |
| vishy | on the switch | 06:23 |
| vishy | (not all switches support this) | 06:23 |
| ranjib | we have juniper l2 and extreme l3 , i know we can fix it there ... | 06:24 |
| vishy | there is also an assumption in the firewall rules that the dhcp server is the same as the gateway | 06:25 |
| vishy | 468 # Assume that the gateway also acts as the dhcp server. | 06:25 |
| vishy | 469 dhcp_server = network['gateway'] | 06:25 |
| vishy | if you don't have the dhcp server on that ip, you will not get ips | 06:25 |
| vishy | for your instances | 06:26 |
| ranjib | in the compute node, the gate way should be the ip of the controller right? which runs dnsmasq, hence canact as dhcp too ? | 06:26 |
| ranjib | and what about the flat network manager? that should work smoothly.. right. we have network of 10.12..0.0/16 subnet.. so i setup the compute network with 10.12.70.0/24, | 06:26 |
| ranjib | vishy: by the way me and avant are in the same group :-) | 06:34 |
| *** jc_smith has quit IRC | 06:36 | |
| eday | vishy: hey! nice seeing you.. for a sec there :) | 06:37 |
| vishy | eday: yeah, i didn't know you were around | 06:37 |
| vishy | rumors of maybe coworking on thursday? | 06:37 |
| vishy | ranjib: in flatdhcp that should be the case | 06:38 |
| *** metoikos has quit IRC | 06:38 | |
| vishy | but i have to say i don't know if anyone has actually tested it multinode | 06:38 |
| *** kashyapc has quit IRC | 06:39 | |
| eday | vishy: yeah, I'm hanging out down in SC for a month or so (minus the summit next week). I used to live in SC so am visitng friends | 06:39 |
| vishy | if you are using flat dhcp or vlan you should get lease messages in the nova-network log | 06:39 |
| vishy | eday: awesome | 06:39 |
| Orman_ | Does anyone know if sandboxing is built into Nova? | 06:40 |
| eday | vishy: I just jesse is going to se me up with a pass to get into nasa on Thu to work with you guys | 06:40 |
| vishy | ranjib: as well as messages from dnsmasq in syslog somewhere | 06:40 |
| eday | vishy: so, yeah, after the summit we can hang out and work too (probably needed with the distributed data work) | 06:40 |
| vishy | eday: sounds like an excellent idea | 06:40 |
| vishy | Orman_: define sandboxing | 06:41 |
| Orman_ | Well like making virtual guests contained so a user can't attack or access another users virtual guest. | 06:42 |
| Orman_ | Containing | 06:43 |
| vishy | in vlan mode they are isolated | 06:44 |
| vishy | by project | 06:44 |
| Orman_ | Only in vlan mode,but not all the other modes? | 06:45 |
| vishy | flat mode there is no isolation per project, but everything is isolated by security groups at the host level | 06:45 |
| vishy | so only explicitly opened ports can be accessed | 06:46 |
| Orman_ | So my idea of a new sandboxing feature would not work because the host isolates it. | 06:46 |
| *** guigui has joined #openstack | 06:47 | |
| Orman_ | vishy: So my idea of sandboxing probably wouldn't work? | 06:49 |
| vishy | i don't know exactly what more sandboxing you want? | 06:49 |
| Orman_ | I just really first wanted to know if sandboxing existed already,but I really would like to have a universal sandboxing feature that could sandbox every mode. | 06:50 |
| *** khussein has left #openstack | 06:51 | |
| Orman_ | vishy: Vlan's and etc | 06:51 |
| vishy | yeah, the issue is that you have to allow access from somewhere | 06:51 |
| vishy | or the instance is useless | 06:51 |
| vishy | so security groups allow you to be as specific as you want, you could only allow access from one specific ip for example. | 06:52 |
| Orman_ | vishy: Just so I understand you I would have to allow an instance or access from one specific location in order for my sandboxing proposal to even be considered? | 06:53 |
| Orman_ | vishy: Becuase you need something open for the users to access. | 06:54 |
| Orman_ | * because | 06:54 |
| vishy | no. I'm saying i don't see what additions sandboxing would have over what already is implemented in security groups | 06:54 |
| vishy | by default everything is blocked | 06:54 |
| Orman_ | Ok | 06:54 |
| Orman_ | Then the problem in fixed then and no need for my idea. | 06:55 |
| vishy | i think so. | 06:55 |
| Orman_ | Ok I just wanted to make sure. | 06:55 |
| Orman_ | Ok thanks. | 06:55 |
| Orman_ | I wanted to check before I go about and waste time writing up a blueprint tomorrow. | 06:56 |
| Orman_ | vishy: do you know if there is something in place that protects the data while running in the background of Nova? | 06:58 |
| vishy | what do you mean by data? | 07:00 |
| vishy | and protection of it? | 07:00 |
| Orman_ | I mean like protecting the user's data without the user being a aware of it. | 07:01 |
| vishy | protecting = snapshotting or backing it up? | 07:01 |
| Orman_ | Sort of like a background process to help protect data without | 07:01 |
| vishy | or encryption? or? | 07:01 |
| Orman_ | backing it up. | 07:02 |
| vishy | no there is nothing automatic like that. One of the blueprints in is for instance snapshotting | 07:03 |
| vishy | and automatic snapshotting should be a feature in nova | 07:03 |
| Orman_ | Do you think it would be worth it to add a blueprint for background data backup in Nova? | 07:04 |
| Orman_ | vishy: I wonder if my idea I am proposing is similar to automatic snapshotting | 07:07 |
| *** ibarrera has joined #openstack | 07:07 | |
| vishy | Orman_: sounds like it | 07:09 |
| Orman_ | Ok thank you | 07:10 |
| Orman_ | I didn't want to take credit of your automatic snapshotting idea if mine was similar to it. | 07:11 |
| Orman_ | :P | 07:11 |
| *** allsystemsarego has joined #openstack | 07:13 | |
| Avant | vishy: one problem tht i ve started seeing with security groups is, when I create an instance, using euca-run.. the instance isnt associated with the default security group.. select * from security_group_instance_association returns an empty set | 07:16 |
| Orman_ | vishy: well thank you for all your answers to my questions and I will add the blueprint about the background data backup idea very soon. | 07:18 |
| vishy | Avant: woah, strange | 07:18 |
| vishy | Orman_: cool, np | 07:18 |
| Orman_ | If it's alright with you I might rename it to automatic snapshotting. | 07:19 |
| vishy | sure | 07:19 |
| Orman_ | Ok thanks | 07:19 |
| Orman_ | :) | 07:19 |
| Avant | so, although the rule is created properly, it probably has no effect because of the missing instance . I m now trying to explicitly specify group using -g | 07:19 |
| Orman_ | One more question before I go vishy. | 07:19 |
| vishy | if you do eucz-describe-groups does it show the default? | 07:19 |
| vishy | s/eucz/euca | 07:20 |
| Orman_ | vishy: Does Swift have automatic snapshotting or a similar idea to what I;m proposing for data? | 07:20 |
| Avant | nope, even after explicitly specifying a security group, i dont see it in euca-describe either.. | 07:20 |
| vishy | Orman_: not exactly, but it is replicated to 3 separate locations, so it should be automatically protecting data | 07:20 |
| vishy | Avant: so something funky is going on with sec groups | 07:21 |
| Avant | vishy: maybe thats what the problem is :) | 07:21 |
| Avant | umm. ok. is it worth trying flat + dhcp.. or does that leave only the vlan option | 07:21 |
| Orman_ | Okay so nova is the only one that doesn't have it developed into it's architecture? | 07:21 |
| vishy | yeah | 07:21 |
| Orman_ | Ok thanks | 07:22 |
| Orman_ | vishy | 07:22 |
| Orman_ | I am out | 07:22 |
| Orman_ | guys. | 07:22 |
| Orman_ | God bless you all and have a great rest of the night. ;) | 07:22 |
| vishy | Avant: so somehow ensure_default_group is failing i guess? | 07:22 |
| vishy | Avant: I'm not quite sure how that is possible | 07:22 |
| vishy | you are using libvirt/kvm? | 07:23 |
| Avant | yes | 07:23 |
| vishy | if you select * from security_groups do you get the default group? | 07:24 |
| Orman_ | bye guys and god bless you all | 07:24 |
| Orman_ | :) | 07:24 |
| *** Orman_ has quit IRC | 07:24 | |
| Avant | vishy: yes the default is listed | 07:25 |
| Avant | 2010-10-27 06:20:12 | NULL | NULL | 0 | 1 | default | default | admin | admin | +---------------------+------------+------------+---------+----+ | 07:25 |
| vishy | and you are doing euca-run-instance as admin | 07:25 |
| vishy | i don't really see how that oculd be failing... | 07:26 |
| vishy | hmmm | 07:26 |
| vishy | wait, are you using current trunk? | 07:26 |
| Avant | INSTANCE i-qldnjy ami-l71y6iit 10.12.70.2 10.12.70.2 launching mykey (admin, osnova04) 0 m1.small 2010-11-03 07:18:38 | 07:27 |
| Avant | we're just installing on ubuntu using the package installer | 07:28 |
| Avant | apt-get install nova-* | 07:28 |
| vishy | hmm | 07:30 |
| vishy | i see the problem if this is using current trunk | 07:31 |
| vishy | not sure when the last packeges were installed | 07:31 |
| vishy | s/installed/created | 07:31 |
| *** kashyapc has joined #openstack | 07:32 | |
| Avant | we can, conceivably, get the austin tar and try this config on that.. | 07:32 |
| vishy | can you check nova/compute/manager.py and see if there is a method called create_instance | 07:32 |
| Avant | ok | 07:32 |
| vishy | starts on line 72 | 07:32 |
| Avant | yea the method's here | 07:34 |
| *** stewart has quit IRC | 07:37 | |
| vishy | ok | 07:41 |
| vishy | so line 90 is your prob | 07:41 |
| vishy | where it tries to get sec_groups from kwargs | 07:41 |
| vishy | it is already explicitly a kwarg | 07:41 |
| vishy | sorry, line 91 that is | 07:43 |
| vishy | if you remove line 91 and restart nova-api sec groups should start working | 07:44 |
| vishy | if that does work, we need to file a bug and submit a patch | 07:44 |
| vishy | it would be awesome if you would be willing to do so | 07:44 |
| vishy | if not, i will go ahead and do it myself in the morning | 07:44 |
| vishy | right now it is bed time though | 07:45 |
| *** Ryan_Lane has quit IRC | 07:45 | |
| vishy | it appears that bug was introduced in one of the last couple of patches | 07:49 |
| *** ramkrsna has joined #openstack | 08:06 | |
| *** ramkrsna has joined #openstack | 08:06 | |
| ranjib | mdiver_: u thetre? | 08:07 |
| *** metoikos has joined #openstack | 08:09 | |
| *** ar1 has joined #openstack | 08:17 | |
| *** dysinger has quit IRC | 08:18 | |
| *** ar1 has quit IRC | 08:21 | |
| *** stewart has joined #openstack | 08:27 | |
| *** miclorb_ has joined #openstack | 08:28 | |
| *** stewart has quit IRC | 08:35 | |
| *** stewart has joined #openstack | 08:44 | |
| *** eldarnugaev has left #openstack | 08:48 | |
| *** almaisan-away is now known as al-maisan | 08:49 | |
| *** kashyapc has quit IRC | 08:52 | |
| *** kashyapc has joined #openstack | 08:53 | |
| *** ptremblett has quit IRC | 08:57 | |
| Avant | vishy: thanks for your help. sec groups started working after removing that line. I've also filed a bug under nova for this : Bug #670278 | 09:03 |
| uvirtbot | Launchpad bug 670278 in nova "new instance isnt associated with a security group by default" [Undecided,New] https://launchpad.net/bugs/670278 | 09:03 |
| ttx | soren: about the release process spec | 09:10 |
| soren | ttx: Yeah. I'd like to hear about that two-freeze thing you mentioned. | 09:10 |
| uvirtbot | New bug: #670278 in nova "new instance isnt associated with a security group by default" [Undecided,New] https://launchpad.net/bugs/670278 | 09:11 |
| ttx | I think we need a branch merge proposal freeze before feature freeze, to give time to review those | 09:11 |
| ttx | feature freeze should be the time when branches are merged, not proposed. | 09:12 |
| ttx | soren: but that's just a proposal | 09:12 |
| soren | Yeah. It wasn't entirely clear to me if filing the merge proposal before ff was ok or if it had to be actually merged before ff. | 09:12 |
| ttx | that would clarify it | 09:12 |
| ttx | obviously getting a branch merge proposal freeze exception shouldn't be that hard before FF | 09:12 |
| soren | Right. | 09:13 |
| ttx | soren: but having and BMPF like one week before gives time for review and fixes before merging | 09:13 |
| ttx | s/and/a | 09:13 |
| soren | Do you have a draft release schedule? that would help me get the overview. | 09:13 |
| ttx | so there is a release schedule BP as well, to discuss length of cycles and dates | 09:14 |
| ttx | soren: my understanding was that we had to discuss and decide on it during the summit | 09:14 |
| soren | Sure. | 09:15 |
| ttx | soren: but I can draft a few options, obviously | 09:15 |
| ttx | will do this this week | 09:15 |
| soren | It would just help me understand your proposal if there was a full release schedule included in it with the various freezes and whatnot. | 09:15 |
| ttx | right | 09:15 |
| soren | Right, great. | 09:15 |
| soren | ttx: Is the technical process of making the release going to be part of that spec, too? | 09:25 |
| ttx | soren: yes | 09:25 |
| soren | Great. | 09:25 |
| ttx | I need to learn a lot in that area ;) | 09:25 |
| soren | Everyone does. | 09:25 |
| * soren included | 09:26 | |
| ttx | it's a bit different from releasing a distribution. | 09:26 |
| soren | Yeah. Luckily, it's supposed to be simpler, I think. | 09:26 |
| *** miclorb_ has quit IRC | 09:40 | |
| *** Avant has quit IRC | 09:40 | |
| *** ptremblett has joined #openstack | 09:57 | |
| *** schisamo has quit IRC | 10:03 | |
| *** burris has quit IRC | 10:12 | |
| *** burris has joined #openstack | 10:17 | |
| *** stewart has quit IRC | 10:25 | |
| *** arthurc has quit IRC | 10:26 | |
| *** arthurc has joined #openstack | 10:29 | |
| *** gustavomzw has joined #openstack | 10:39 | |
| *** ambo has left #openstack | 10:46 | |
| *** omidhdl1 has left #openstack | 10:47 | |
| *** krish has quit IRC | 10:48 | |
| *** ddumitriu has joined #openstack | 11:17 | |
| *** dizz has joined #openstack | 11:22 | |
| *** ramkrsna has quit IRC | 11:26 | |
| *** BK_man has joined #openstack | 11:29 | |
| *** krish has joined #openstack | 11:34 | |
| *** ctennis has quit IRC | 11:41 | |
| *** ddumitriu has quit IRC | 11:55 | |
| *** guynaor has quit IRC | 11:55 | |
| *** stewart has joined #openstack | 11:56 | |
| *** guynaor has joined #openstack | 11:58 | |
| *** kashyapc has quit IRC | 11:59 | |
| *** ctennis has joined #openstack | 12:02 | |
| *** ctennis has joined #openstack | 12:02 | |
| *** ddumitriu has joined #openstack | 12:05 | |
| *** metoikos has quit IRC | 12:08 | |
| *** metoikos has joined #openstack | 12:09 | |
| *** westmaas has joined #openstack | 12:23 | |
| *** kashyapc has joined #openstack | 12:30 | |
| *** mmalgeri has joined #openstack | 12:31 | |
| *** Podilarius has left #openstack | 12:38 | |
| *** ttx has quit IRC | 12:43 | |
| *** ttx has joined #openstack | 12:44 | |
| *** ttx has joined #openstack | 12:44 | |
| ranjib | has anybody faced any issue while installing m2crypto for python 2.6 on centos? | 12:44 |
| ranjib | i ended up in tampering the opensslconf header file.. wondering if theres a cleaner solution | 12:45 |
| *** mmalgeri has quit IRC | 12:50 | |
| zul | Daviey: i was thinking of using ip addr show or something | 12:51 |
| Daviey | zul: I wonder if http://pypi.python.org/pypi/netifaces/ is the best idea... would provide cross platform support, but equally an extra depends | 12:52 |
| Daviey | zul: The current proposed method seems to rely on having the entry in /etc/hosts | 12:53 |
| zul | Daviey: right | 12:53 |
| zul | oh goody there is a ubuntu package for it | 12:55 |
| dendrobates | welcome ttx | 12:57 |
| *** allsystemsarego has quit IRC | 12:58 | |
| ttx | dendrobates: hey! | 12:59 |
| *** pvo has joined #openstack | 12:59 | |
| *** ChanServ sets mode: +v pvo | 12:59 | |
| *** pvo has quit IRC | 13:03 | |
| *** hazmat has joined #openstack | 13:03 | |
| *** jdarcy has joined #openstack | 13:04 | |
| *** krish has quit IRC | 13:10 | |
| piken | morning all | 13:14 |
| *** westmaas has quit IRC | 13:20 | |
| *** krish has joined #openstack | 13:22 | |
| dendrobates | piken: good morning: and I assume you are in North America, where it is morning. | 13:23 |
| dendrobates | or south america | 13:23 |
| soren | Daviey: I had a patch that used: | 13:25 |
| soren | ip route get 8.8.8.8 | 13:25 |
| *** kashyapc has quit IRC | 13:25 | |
| soren | ...and then grabbed the "src x.y.z.m" bit. | 13:25 |
| *** kashyapc has joined #openstack | 13:26 | |
| *** burris has quit IRC | 13:27 | |
| *** krish has quit IRC | 13:27 | |
| zul | soren: yeah but thats not portable is it? | 13:28 |
| soren | zul: It doesn't run on Windows, no. | 13:29 |
| soren | zul: But hardly anything does. | 13:29 |
| zul | soren: i was thinking more like freebsd | 13:29 |
| soren | No clue. | 13:29 |
| zul | or even the crazy people who run osx ;) | 13:30 |
| zul | soren: http://alastairs-place.net/netifaces/ | 13:30 |
| soren | How do we know which interfaces is the "public" one? | 13:32 |
| *** burris has joined #openstack | 13:32 | |
| zul | soren: good question | 13:32 |
| *** westmaas has joined #openstack | 13:33 | |
| *** mdiver has joined #openstack | 13:36 | |
| *** mdiver_ has joined #openstack | 13:36 | |
| *** mdiver has quit IRC | 13:40 | |
| *** mdiver_ is now known as mdiver | 13:40 | |
| *** ikk has left #openstack | 13:44 | |
| *** littleidea has joined #openstack | 13:51 | |
| piken | dendrobates: no, south florida where it is too humid already to be night. lol | 13:52 |
| *** pvo has joined #openstack | 13:54 | |
| *** ChanServ sets mode: +v pvo | 13:54 | |
| * soren headdesks | 13:59 | |
| *** iammartian has joined #openstack | 14:00 | |
| soren | zul, Daviey: Uh, guys... I worked out how to solve the socket thing.. | 14:00 |
| dendrobates | jaypipes: can you change maintainer to openstack-common to ~openstack-administrators | 14:01 |
| *** pvo_ has joined #openstack | 14:01 | |
| *** ChanServ sets mode: +v pvo_ | 14:01 | |
| *** dizz is now known as dizz|away | 14:10 | |
| *** pvo_ has quit IRC | 14:12 | |
| *** iammartian has quit IRC | 14:12 | |
| *** pvo has quit IRC | 14:12 | |
| *** hazmat has quit IRC | 14:12 | |
| *** gustavomzw has quit IRC | 14:12 | |
| *** neogenix has quit IRC | 14:12 | |
| *** hggdh has quit IRC | 14:12 | |
| *** tomo_bot has quit IRC | 14:12 | |
| *** ChrisAM has quit IRC | 14:12 | |
| *** HouseAway has quit IRC | 14:12 | |
| *** cory_ has quit IRC | 14:12 | |
| *** Robi_ has quit IRC | 14:12 | |
| *** cclien has quit IRC | 14:12 | |
| *** redbo has quit IRC | 14:12 | |
| *** pquerna has quit IRC | 14:12 | |
| *** jk0 has quit IRC | 14:12 | |
| *** spy has quit IRC | 14:12 | |
| *** ddumitriu has quit IRC | 14:12 | |
| *** aimon has quit IRC | 14:12 | |
| *** jaypipes has quit IRC | 14:12 | |
| *** ivan has quit IRC | 14:12 | |
| *** exlt has quit IRC | 14:12 | |
| *** terje has quit IRC | 14:12 | |
| *** seats has quit IRC | 14:12 | |
| *** czajkowski has quit IRC | 14:12 | |
| *** burris has quit IRC | 14:12 | |
| *** that1dude has quit IRC | 14:12 | |
| *** wreese has quit IRC | 14:12 | |
| *** metoikos has quit IRC | 14:12 | |
| *** guigui has quit IRC | 14:12 | |
| *** morfeas has quit IRC | 14:12 | |
| *** comstud has quit IRC | 14:12 | |
| *** dubs has quit IRC | 14:12 | |
| *** PiotrSikora has quit IRC | 14:12 | |
| *** clayg has quit IRC | 14:12 | |
| *** fitzdsl has quit IRC | 14:12 | |
| *** dwight has quit IRC | 14:12 | |
| *** littleidea has quit IRC | 14:12 | |
| *** kashyapc has quit IRC | 14:12 | |
| *** guynaor has quit IRC | 14:12 | |
| *** spike has quit IRC | 14:12 | |
| *** openfly has quit IRC | 14:12 | |
| *** jfluhmann has quit IRC | 14:12 | |
| *** Phacops has quit IRC | 14:12 | |
| *** taihen has quit IRC | 14:12 | |
| *** notmyname has quit IRC | 14:12 | |
| *** karmabot has quit IRC | 14:12 | |
| *** _cerberus_ has quit IRC | 14:12 | |
| *** [ack]_ has quit IRC | 14:12 | |
| *** nevele has quit IRC | 14:12 | |
| *** ctennis has quit IRC | 14:12 | |
| *** zykes- has quit IRC | 14:12 | |
| *** infernix has quit IRC | 14:12 | |
| *** zul has quit IRC | 14:12 | |
| *** deshantm has quit IRC | 14:12 | |
| *** jtimberman has quit IRC | 14:12 | |
| *** Kdecherf has quit IRC | 14:12 | |
| *** btorch_ has quit IRC | 14:12 | |
| *** pandemicsyn has quit IRC | 14:12 | |
| *** ranjib has quit IRC | 14:12 | |
| *** ttx has quit IRC | 14:12 | |
| *** ioso has quit IRC | 14:12 | |
| *** perestrelka has quit IRC | 14:12 | |
| *** anotherjesse has quit IRC | 14:12 | |
| *** dagger has quit IRC | 14:12 | |
| *** kirkland has quit IRC | 14:12 | |
| *** bburhans has quit IRC | 14:12 | |
| *** mtaylor has quit IRC | 14:12 | |
| *** gholt has quit IRC | 14:12 | |
| *** annegentle has quit IRC | 14:12 | |
| *** soren has quit IRC | 14:12 | |
| *** Kami_ has quit IRC | 14:12 | |
| *** cruciform has quit IRC | 14:12 | |
| *** loglaunch has quit IRC | 14:12 | |
| *** tmarble has quit IRC | 14:12 | |
| *** Mr_T has quit IRC | 14:12 | |
| *** davidX- has quit IRC | 14:12 | |
| *** keekz has quit IRC | 14:12 | |
| *** ibarrera has quit IRC | 14:12 | |
| *** kevnfx has quit IRC | 14:12 | |
| *** Dweezahr has quit IRC | 14:12 | |
| *** dfg_ has quit IRC | 14:12 | |
| *** brainproxy has quit IRC | 14:12 | |
| *** cloud0 has quit IRC | 14:12 | |
| *** creiht has quit IRC | 14:12 | |
| *** letterj has quit IRC | 14:12 | |
| *** stuart_ has quit IRC | 14:12 | |
| *** screen-x has quit IRC | 14:12 | |
| *** deshantm_cosi has quit IRC | 14:12 | |
| *** sagi_ has quit IRC | 14:12 | |
| *** mattt has quit IRC | 14:12 | |
| *** lool has quit IRC | 14:12 | |
| *** anticw has quit IRC | 14:12 | |
| *** mdiver has quit IRC | 14:12 | |
| *** vishy has quit IRC | 14:12 | |
| *** devcamcar has quit IRC | 14:12 | |
| *** EdwinGrubbs has quit IRC | 14:12 | |
| *** londo has quit IRC | 14:12 | |
| *** chmouel has quit IRC | 14:12 | |
| *** dendrobates has quit IRC | 14:12 | |
| *** glange_ has quit IRC | 14:12 | |
| *** al-maisan has quit IRC | 14:12 | |
| *** FeliXdk has quit IRC | 14:12 | |
| *** dfg has quit IRC | 14:12 | |
| *** ianweller has quit IRC | 14:12 | |
| *** joschi has quit IRC | 14:12 | |
| *** eday has quit IRC | 14:12 | |
| *** tr3buchet has quit IRC | 14:12 | |
| *** jbarratt_ has quit IRC | 14:12 | |
| *** jdarcy has quit IRC | 14:12 | |
| *** arthurc has quit IRC | 14:12 | |
| *** ptremblett has quit IRC | 14:12 | |
| *** xtoddx has quit IRC | 14:12 | |
| *** sleepsonthefloor has quit IRC | 14:12 | |
| *** h1nch has quit IRC | 14:12 | |
| *** rbergeron has quit IRC | 14:12 | |
| *** DesiJat has quit IRC | 14:12 | |
| *** polvi has quit IRC | 14:12 | |
| *** cw has quit IRC | 14:12 | |
| *** alekibango has quit IRC | 14:12 | |
| *** termie has quit IRC | 14:12 | |
| *** arcane has quit IRC | 14:12 | |
| *** Daviey has quit IRC | 14:12 | |
| *** tsharju has quit IRC | 14:12 | |
| *** larissa has quit IRC | 14:12 | |
| *** jarrod has quit IRC | 14:12 | |
| *** jed has quit IRC | 14:12 | |
| *** michaeldreamhost has quit IRC | 14:12 | |
| *** uvirtbot has quit IRC | 14:12 | |
| *** klumpie has quit IRC | 14:12 | |
| *** rdw has quit IRC | 14:12 | |
| *** ohkus has quit IRC | 14:12 | |
| *** chromakode has quit IRC | 14:12 | |
| *** crazed has quit IRC | 14:12 | |
| *** holoway has quit IRC | 14:12 | |
| *** jeevan_ullas has quit IRC | 14:12 | |
| *** soosfarm has quit IRC | 14:12 | |
| *** elasticdog has quit IRC | 14:12 | |
| *** piken has quit IRC | 14:12 | |
| *** irahgel has quit IRC | 14:12 | |
| *** CodeBlock[s] has quit IRC | 14:12 | |
| *** f4m8 has quit IRC | 14:12 | |
| *** herki has quit IRC | 14:12 | |
| *** syah has quit IRC | 14:12 | |
| *** mjmac has quit IRC | 14:12 | |
| *** gdusbabek has quit IRC | 14:12 | |
| *** ChanServ has quit IRC | 14:12 | |
| *** rackerhacker has quit IRC | 14:20 | |
| *** rackerhacker has joined #openstack | 14:33 | |
| *** notmyname has joined #openstack | 14:33 | |
| *** arthurc has joined #openstack | 14:33 | |
| *** gondoi has joined #openstack | 14:33 | |
| *** pvo has joined #openstack | 14:33 | |
| *** iammartian has joined #openstack | 14:33 | |
| *** mdiver has joined #openstack | 14:33 | |
| *** burris has joined #openstack | 14:33 | |
| *** kashyapc has joined #openstack | 14:33 | |
| *** jdarcy has joined #openstack | 14:33 | |
| *** hazmat has joined #openstack | 14:33 | |
| *** ttx has joined #openstack | 14:33 | |
| *** metoikos has joined #openstack | 14:33 | |
| *** ddumitriu has joined #openstack | 14:33 | |
| *** ctennis has joined #openstack | 14:33 | |
| *** guynaor has joined #openstack | 14:33 | |
| *** ptremblett has joined #openstack | 14:33 | |
| *** ibarrera has joined #openstack | 14:33 | |
| *** rdw has joined #openstack | 14:33 | |
| *** ioso has joined #openstack | 14:33 | |
| *** ranjib has joined #openstack | 14:33 | |
| *** neogenix has joined #openstack | 14:33 | |
| *** elasticdog has joined #openstack | 14:33 | |
| *** perestrelka has joined #openstack | 14:33 | |
| *** hggdh has joined #openstack | 14:33 | |
| *** cruciform has joined #openstack | 14:33 | |
| *** xtoddx has joined #openstack | 14:33 | |
| *** vishy has joined #openstack | 14:33 | |
| *** sleepsonthefloor has joined #openstack | 14:33 | |
| *** devcamcar has joined #openstack | 14:33 | |
| *** anotherjesse has joined #openstack | 14:33 | |
| *** jed has joined #openstack | 14:33 | |
| *** Dweezahr has joined #openstack | 14:33 | |
| *** zykes- has joined #openstack | 14:33 | |
| *** spike has joined #openstack | 14:33 | |
| *** infernix has joined #openstack | 14:33 | |
| *** morfeas has joined #openstack | 14:33 | |
| *** comstud has joined #openstack | 14:33 | |
| *** openfly has joined #openstack | 14:33 | |
| *** aimon has joined #openstack | 14:33 | |
| *** alekibango has joined #openstack | 14:33 | |
| *** termie has joined #openstack | 14:33 | |
| *** al-maisan has joined #openstack | 14:33 | |
| *** jfluhmann has joined #openstack | 14:33 | |
| *** dfg_ has joined #openstack | 14:33 | |
| *** jaypipes has joined #openstack | 14:33 | |
| *** verne.freenode.net sets mode: +vvv notmyname pvo comstud | 14:33 | |
| *** zul has joined #openstack | 14:33 | |
| *** dagger has joined #openstack | 14:33 | |
| *** ivan has joined #openstack | 14:33 | |
| *** EdwinGrubbs has joined #openstack | 14:33 | |
| *** ohkus has joined #openstack | 14:33 | |
| *** exlt has joined #openstack | 14:33 | |
| *** czajkowski has joined #openstack | 14:33 | |
| *** arcane has joined #openstack | 14:33 | |
| *** tomo_bot has joined #openstack | 14:33 | |
| *** kirkland has joined #openstack | 14:33 | |
| *** ChrisAM has joined #openstack | 14:33 | |
| *** bburhans has joined #openstack | 14:33 | |
| *** londo has joined #openstack | 14:33 | |
| *** Phacops has joined #openstack | 14:33 | |
| *** brainproxy has joined #openstack | 14:33 | |
| *** mtaylor has joined #openstack | 14:33 | |
| *** that1dude has joined #openstack | 14:33 | |
| *** piken has joined #openstack | 14:33 | |
| *** Daviey has joined #openstack | 14:33 | |
| *** screen-x has joined #openstack | 14:33 | |
| *** gholt has joined #openstack | 14:33 | |
| *** eday has joined #openstack | 14:33 | |
| *** h1nch has joined #openstack | 14:33 | |
| *** dubs has joined #openstack | 14:33 | |
| *** DesiJat has joined #openstack | 14:33 | |
| *** cloud0 has joined #openstack | 14:33 | |
| *** spy has joined #openstack | 14:33 | |
| *** verne.freenode.net sets mode: +vvvo exlt mtaylor eday spy | 14:33 | |
| *** pquerna has joined #openstack | 14:33 | |
| *** redbo has joined #openstack | 14:33 | |
| *** Robi_ has joined #openstack | 14:33 | |
| *** cclien has joined #openstack | 14:33 | |
| *** cory_ has joined #openstack | 14:33 | |
| *** jk0 has joined #openstack | 14:33 | |
| *** HouseAway has joined #openstack | 14:33 | |
| *** chmouel has joined #openstack | 14:33 | |
| *** deshantm has joined #openstack | 14:33 | |
| *** irahgel has joined #openstack | 14:33 | |
| *** chromakode has joined #openstack | 14:33 | |
| *** PiotrSikora has joined #openstack | 14:33 | |
| *** tr3buchet has joined #openstack | 14:33 | |
| *** jtimberman has joined #openstack | 14:33 | |
| *** stuart_ has joined #openstack | 14:33 | |
| *** fitzdsl has joined #openstack | 14:33 | |
| *** rbergeron has joined #openstack | 14:33 | |
| *** creiht has joined #openstack | 14:33 | |
| *** verne.freenode.net sets mode: +vvvv spy redbo jk0 creiht | 14:33 | |
| *** wreese has joined #openstack | 14:33 | |
| *** annegentle has joined #openstack | 14:33 | |
| *** terje has joined #openstack | 14:33 | |
| *** davidX- has joined #openstack | 14:33 | |
| *** tsharju has joined #openstack | 14:33 | |
| *** clayg has joined #openstack | 14:33 | |
| *** letterj has joined #openstack | 14:33 | |
| *** soren has joined #openstack | 14:33 | |
| *** dendrobates has joined #openstack | 14:33 | |
| *** larissa has joined #openstack | 14:33 | |
| *** seats has joined #openstack | 14:33 | |
| *** glange_ has joined #openstack | 14:33 | |
| *** CodeBlock[s] has joined #openstack | 14:33 | |
| *** jarrod has joined #openstack | 14:33 | |
| *** taihen has joined #openstack | 14:33 | |
| *** loglaunch has joined #openstack | 14:33 | |
| *** michaeldreamhost has joined #openstack | 14:33 | |
| *** dwight has joined #openstack | 14:33 | |
| *** deshantm_cosi has joined #openstack | 14:33 | |
| *** uvirtbot has joined #openstack | 14:33 | |
| *** Kami_ has joined #openstack | 14:33 | |
| *** sagi_ has joined #openstack | 14:33 | |
| *** nevele has joined #openstack | 14:33 | |
| *** [ack]_ has joined #openstack | 14:33 | |
| *** _cerberus_ has joined #openstack | 14:33 | |
| *** karmabot has joined #openstack | 14:33 | |
| *** f4m8 has joined #openstack | 14:33 | |
| *** herki has joined #openstack | 14:33 | |
| *** pandemicsyn has joined #openstack | 14:33 | |
| *** verne.freenode.net sets mode: +vvvv soren dendrobates _cerberus_ pandemicsyn | 14:33 | |
| *** btorch_ has joined #openstack | 14:33 | |
| *** Kdecherf has joined #openstack | 14:33 | |
| *** FeliXdk has joined #openstack | 14:33 | |
| *** ianweller has joined #openstack | 14:33 | |
| *** klumpie has joined #openstack | 14:33 | |
| *** mattt has joined #openstack | 14:33 | |
| *** crazed has joined #openstack | 14:33 | |
| *** lool has joined #openstack | 14:33 | |
| *** anticw has joined #openstack | 14:33 | |
| *** jbarratt_ has joined #openstack | 14:33 | |
| *** dfg has joined #openstack | 14:33 | |
| *** polvi has joined #openstack | 14:33 | |
| *** tmarble has joined #openstack | 14:33 | |
| *** joschi has joined #openstack | 14:33 | |
| *** Mr_T has joined #openstack | 14:33 | |
| *** keekz has joined #openstack | 14:33 | |
| *** cw has joined #openstack | 14:33 | |
| *** holoway has joined #openstack | 14:33 | |
| *** syah has joined #openstack | 14:33 | |
| *** mjmac has joined #openstack | 14:33 | |
| *** gdusbabek has joined #openstack | 14:33 | |
| *** soosfarm has joined #openstack | 14:33 | |
| *** jeevan_ullas has joined #openstack | 14:33 | |
| *** ChanServ has joined #openstack | 14:33 | |
| *** verne.freenode.net sets mode: +o ChanServ | 14:33 | |
| *** mtaylor has quit IRC | 14:35 | |
| *** mtaylor has joined #openstack | 14:35 | |
| *** mtaylor has joined #openstack | 14:35 | |
| *** ChanServ sets mode: +v mtaylor | 14:35 | |
| *** Podilarius has joined #openstack | 14:35 | |
| *** caleb_ has joined #openstack | 14:37 | |
| notmyname | nasa peoples: you need to have a chat with those JPL guys http://www.networkworld.com/community/blog/nasa-takes-cloud-computing-mars | 14:41 |
| notmyname | tell them to use openstack, not amazon ;-) | 14:41 |
| soren | Do we care at all about shipping stuff as eggs? | 14:41 |
| soren | Personally, I don't. | 14:41 |
| neogenix | *makes note for sorenstargetaudience* | 14:43 |
| ranjib | i dont know.. but this seems to be popular way in python world | 14:45 |
| soren | *g* | 14:45 |
| ohkus | why...wouldn't they want to use amazon? | 14:46 |
| soren | ohkus: You do know which channel this is? | 14:46 |
| ranjib | because you should eat your own dogfood | 14:46 |
| ohkus | yes of course...but one thing does not fit all | 14:47 |
| notmyname | but...the cloud!! ;-) | 14:48 |
| jaypipes | dendrobates: yup | 14:48 |
| ohkus | if you want to go after someone go after netflix | 14:49 |
| neogenix | soren: would eggs not give us cross distribution package deployment if we didn't package for a specific distribution package manager | 14:50 |
| neogenix | ohkus: they may have requirements for network, or infrastructure layout, even possibly instance sizing, that may not fit with what amazon offers. | 14:50 |
| *** ddumitriu has quit IRC | 14:50 | |
| neogenix | ohkus: if you have specific requirements, a lot of the time you build it :D | 14:51 |
| ohkus | neogenix: possibly but I'm guessing they chose Amazon based on their requirements so it must be a good fit for them | 14:52 |
| ohkus | %90 solution with little engineering can be the best solution | 14:52 |
| *** abecc has joined #openstack | 14:52 | |
| *** blakeyeager has joined #openstack | 14:52 | |
| notmyname | perhaps, but it's also kinda like some department inside of cannonical using windows instead of ubuntu | 14:52 |
| neogenix | ohkus: certainly, sorry, I was thinking NASA, which is where I got confused :P | 14:52 |
| * notmyname is thinking of nasa too | 14:53 | |
| neogenix | ohkus: you're right, if it's a fit for their model, then it's certainly something they should use. | 14:53 |
| ohkus | notmyname: so.....there are people in Microsoft using iphones. You use the best tool for your application. | 14:53 |
| neogenix | ohkus: in addition, today no one sells an openstack based service :) (compute, at least) | 14:53 |
| *** abecc has joined #openstack | 14:53 | |
| soren | neogenix: That's the /theory/. | 14:54 |
| neogenix | soren: back to eggs :P | 14:54 |
| ohkus | openstack isn't proven.....Amazon is | 14:54 |
| soren | neogenix: Uh, yeah, I was referring to your Egg comment :) | 14:55 |
| neogenix | soren: oh, yes, well I think we should consider it | 14:55 |
| neogenix | soren: I think that's a job for ttx | 14:55 |
| neogenix | soren: :P | 14:55 |
| soren | Ok, so why do we care about eggs? | 14:56 |
| neogenix | soren: are we going to create packages for *every possible distribution*? | 14:56 |
| soren | No. | 14:56 |
| soren | Every possible distrubtion is. | 14:56 |
| soren | *distribution | 14:57 |
| soren | It's not our job. | 14:57 |
| neogenix | soren: will eggs be more user friendly than source? | 14:57 |
| soren | So why would we create an egg that noone is going to use (because the distros provide packages)? | 14:57 |
| *** rnirmal has joined #openstack | 14:57 | |
| piken | soren: eggs would make it easy so others can build packages for multiple distros that install the egg and use the systems resources to install dependencies | 14:57 |
| jed | virtualenv, non-distro usages | 14:57 |
| jed | I can think of dozens of reasons to create eggs | 14:57 |
| soren | piken: what? | 14:57 |
| neogenix | soren: ah, what piken said before i could type it. | 14:57 |
| soren | jed: Plz to enumerate. | 14:58 |
| ttx | soren: how costly is it to create eggs ? | 14:58 |
| jed | I'd be hesitant to call eggs the 'perfect' system, but being able to sidestep distro python is extremely important to a python developer | 14:58 |
| neogenix | jed: certainly. | 14:58 |
| soren | ttx: It adds a lot of complexity to how we deal with "resources" (like templates and other data files). | 14:58 |
| *** khussein has joined #openstack | 14:58 | |
| piken | soren: eggs are easy to create with setuptools allowing setuptools to be used to create an rpm, dep, etc that installs the egg. This would make it easier to get the project into things like the ubuntu repo or the centos repo as it makes the process of packaging much easier on the project. | 14:59 |
| jed | yes - distros will appreciate an egg-generated package | 14:59 |
| * soren cannot bring himself to be a catalyst for sidestepping distro packaging | 14:59 | |
| soren | piken: It doesn't! | 14:59 |
| soren | piken: Distros don't use eggs. | 14:59 |
| soren | jed: No. they. won't. | 14:59 |
| jed | eggs produce rpms and debs | 14:59 |
| jed | verye asily. | 14:59 |
| soren | No. | 14:59 |
| piken | soren:, they don't but setuptools has built in functions to turn the egg into an rpm or deb. | 15:00 |
| soren | You build debs and rpms from the same source as eggs. | 15:00 |
| *** Cybodog has joined #openstack | 15:00 | |
| soren | Distros don't build packages based on eggs. They build them based on source. | 15:00 |
| neogenix | soren: maybe this is something that we should leave to a supply and demand? | 15:00 |
| piken | setuptools wont build the rpm if it doesn't have an egg config. it is a flaw in it, but it is there. | 15:00 |
| jed | that's what I meant to say, really. you're already writing setup.py to make RPM/debs, why not make the egg? | 15:00 |
| jed | sorry I made that unclear | 15:00 |
| *** ppetraki has joined #openstack | 15:01 | |
| neogenix | soren: certainly, if there's a demand for eggs, we'd help have them built, right? | 15:01 |
| soren | Becuase it brings lots of pain and suffering, extra dependencies and headaches. | 15:01 |
| jed | more than RPMs and debs? | 15:01 |
| soren | Yes. | 15:01 |
| soren | Supporting running out of a zipfile is a hassle. | 15:01 |
| neogenix | soren: lol. | 15:01 |
| soren | ? | 15:01 |
| ttx | soren: if you asked me, I'd say "no", but I'm biased and would like to hear more from the other side | 15:02 |
| alekibango | i dont think eggs are much more friendly over sources | 15:02 |
| neogenix | soren: the running out of a zipfile comment. | 15:02 |
| ttx | soren: i'll add it as a topic in the bexar-release-process session | 15:03 |
| alekibango | the only thing egg can be nice is when we will upgrade live services by spreading eggs | 15:03 |
| ttx | i.e. deliverables | 15:03 |
| neogenix | soren: got a picture of someone double clicking on a windows machine, and trying to run it in there. | 15:03 |
| neogenix | ttx: good idea. | 15:03 |
| * ttx adds a note to the blueprint whiteboard | 15:03 | |
| soren | neogenix: Sorry, why is that funny? | 15:04 |
| *** pvo has quit IRC | 15:04 | |
| neogenix | soren: never mind, i'd have to explain a bit more on whom I saw clicking on it trying to run it from the zip file. | 15:04 |
| *** pvo has joined #openstack | 15:04 | |
| *** ChanServ sets mode: +v pvo | 15:04 | |
| *** jed has left #openstack | 15:05 | |
| *** aliguori has joined #openstack | 15:05 | |
| *** littleidea has joined #openstack | 15:05 | |
| *** aliguori has quit IRC | 15:06 | |
| ttx | neogenix: done @ https://blueprints.launchpad.net/openstack-devel/+spec/bexar-release-process | 15:06 |
| *** dragondm has joined #openstack | 15:07 | |
| neogenix | ttx: I think it'd go hand in hand with the documentation, and a few other release deliverables, so that's the perfect place for it :) | 15:08 |
| ranjib | if we have rpms/debs in place .. chances are less one would use the eggs .. | 15:10 |
| *** neogenix has quit IRC | 15:14 | |
| mdiver | ranjib: Yes, I've removed lockfile 0.9.* and installed 0.8.0 , works fine now. Thanks. | 15:14 |
| *** Cybodog has quit IRC | 15:14 | |
| *** ptremblett_ has joined #openstack | 15:15 | |
| ranjib | mdiver: libvirt-python is working too? | 15:16 |
| *** ptremblett has quit IRC | 15:17 | |
| *** ptremblett_ is now known as ptremblett | 15:17 | |
| *** ptremblett_ has joined #openstack | 15:21 | |
| *** ptremblett has quit IRC | 15:23 | |
| *** ptremblett_ is now known as ptremblett | 15:23 | |
| *** dendrobates is now known as dendro-afk | 15:32 | |
| * soren pauses for dinner | 15:32 | |
| *** Podilarius has quit IRC | 15:33 | |
| *** Cybodog has joined #openstack | 15:33 | |
| *** metcalfc has joined #openstack | 15:34 | |
| creiht | fyi (for yall's information) If any of you are going to be in SA early for the conference, there is an airshow Saturday and Sunday at Lackland AFB | 15:35 |
| creiht | http://www.lackland.af.mil/airshow/ | 15:35 |
| *** metcalfc has joined #openstack | 15:35 | |
| *** dendro-afk is now known as dendrobates | 15:38 | |
| piken | That is funny. There is one at Homestead AFB not far from me that I am taking my 7 month old son and wife to Saturday. lol | 15:39 |
| creiht | :) | 15:39 |
| annegentle | 'tis the season for flying upside down? :) | 15:39 |
| creiht | And watching for vapor :) | 15:40 |
| creiht | http://www.flickr.com/photos/thethiers/4087873367/ | 15:40 |
| piken | lol. I have my batteries for my D90 and D300 charges along with 24GB of open high speed SD cards. So my flicker account will be riddled with pics late sunday night. lol | 15:40 |
| annegentle | woah cool | 15:41 |
| creiht | hehe... I look forward to this weekend every year :) | 15:41 |
| piken | I will have to post them for you guys to see. Weird thing is the head liners at the show on the AFB are the Navy's Blue Angels. lll | 15:41 |
| dendrobates | jaypipes: I can't schedule any blueprints filed against openstack-common, until you change the maintainer. | 15:41 |
| piken | s/lll/lol/ | 15:41 |
| creiht | I have an oly E3 with my 50-200mm, and plenty of batteries ready :) | 15:41 |
| creiht | piken: I actually go on Saturday by myself to take pics, then I go the next day with my wife and kids to just enjoy it :) | 15:42 |
| piken | I wish I had the time too. lol | 15:42 |
| piken | I get to test out my new 10-20 sigma wide angle though, so should be nice. | 15:43 |
| creiht | nice | 15:43 |
| creiht | I'll also have my oly pen with 20mm prime on the side for the static displays | 15:43 |
| mdiver | While euca-upload-bundle , I'm getting nova.exception.NotAuthorized, I've double checked that I'm passing -s , -a and the certificates, where can I check for user info , nova-manage user export user_name ? | 15:47 |
| *** caleb_ has quit IRC | 15:50 | |
| mdiver | ./objectstore/handler.py is launching the exception | 15:54 |
| *** khussein_ has joined #openstack | 15:55 | |
| mdiver | Is there a way of checking the HTTP Headers on the objectstore ? | 15:55 |
| ttx | dendrobates: refreshed http://wiki.openstack.org/Summit with an ODS process explanation | 15:56 |
| ttx | dendrobates: waiting on email to point everyone to it | 15:56 |
| *** khussein has quit IRC | 15:58 | |
| *** khussein_ is now known as khussein | 15:58 | |
| *** Cybodog has quit IRC | 15:59 | |
| *** kevnfx has joined #openstack | 16:01 | |
| rackerhacker | dendrobates: you around? | 16:06 |
| *** dendrobates is now known as dendro-afk | 16:10 | |
| *** dendro-afk is now known as dendrobates | 16:11 | |
| *** grizzletooth has joined #openstack | 16:11 | |
| jaypipes | dendrobates: done. | 16:17 |
| jaypipes | dendrobates: sorry about that | 16:17 |
| * jaypipes still trying to wrap his head around the US electorate... | 16:17 | |
| dendrobates | jaypipes: we're all teabaggers now. | 16:18 |
| jaypipes | dendrobates: heh, don't get me started... | 16:19 |
| dendrobates | jaypipes: we took our twins to vote with us. I asked Gabby who to vote for. Her choice "Chocolate!" | 16:20 |
| jaypipes | dendrobates: :) | 16:20 |
| ttx | dendrobates: can you spare 2min of your precious time to review http://wiki.openstack.org/Summit and let me know if anything is missing | 16:21 |
| *** pvo_ has joined #openstack | 16:22 | |
| *** ChanServ sets mode: +v pvo_ | 16:22 | |
| *** pvo has quit IRC | 16:24 | |
| *** pvo_ is now known as pvo | 16:24 | |
| *** ppetraki has quit IRC | 16:26 | |
| dendrobates | unfortunately, Chocolate was not a teaparty backed candidate so 4 years of Vanilla. :) | 16:26 |
| dendrobates | ttx: I'm on it. | 16:26 |
| *** jc_smith has joined #openstack | 16:30 | |
| *** ibarrera has quit IRC | 16:31 | |
| *** metoikos has quit IRC | 16:31 | |
| jaypipes | ttx: welcome aboard, btw! :) | 16:34 |
| ttx | jaypipes: thanks ! | 16:34 |
| eday | ttx: yes, welcome! are you going to make it to the summit? | 16:37 |
| *** cole has joined #openstack | 16:38 | |
| ranjib | any chance the summit can be webcasted ? | 16:38 |
| ttx | eday: yep | 16:38 |
| cole | i'll break out Qik on the evo :P | 16:39 |
| cole | is anyone on a clean ubuntu 10.10 box that does not yet have openstack on it? | 16:39 |
| *** ranjib has quit IRC | 16:40 | |
| ttx | cole: I wouldn't call my box "clean", but it doesn't have openstack on it. What is your question ? | 16:40 |
| cole | ttx: I wrote an install.sh for 10.10 to do a one step install..I'm on a VM and that wont work for obvious reasons. | 16:41 |
| cole | looking for someone willing to help test it | 16:41 |
| ttx | cole: I could spend a few cycles tomorrow morning on that | 16:42 |
| dendrobates | cole: Nova will run in a vm if you use uml. | 16:43 |
| ttx | cole: shoot me an email if you can't get it tested by someone else before your end of day (see pm for email) | 16:43 |
| *** kashyapc has quit IRC | 16:43 | |
| *** joearnold has joined #openstack | 16:43 | |
| cole | ttx: thx! | 16:43 |
| dendrobates | ttx: the page looks good | 16:44 |
| cole | den: I actually don't want to use it in a VM. It's meant to replace the wiki's 100 steps with "Download and run" | 16:44 |
| cole | i guess maybe i could modify to do either | 16:44 |
| ttx | dendrobates: ok, will send | 16:45 |
| *** khussein has quit IRC | 16:48 | |
| *** Cybodog has joined #openstack | 16:48 | |
| *** khussein has joined #openstack | 16:48 | |
| *** infernix has quit IRC | 16:54 | |
| *** kashyapc has joined #openstack | 16:55 | |
| *** 36DAARAVK has joined #openstack | 17:02 | |
| *** infernix has joined #openstack | 17:04 | |
| *** pvo has quit IRC | 17:05 | |
| *** screen-x has quit IRC | 17:05 | |
| *** metcalfc has quit IRC | 17:07 | |
| *** metcalfc has joined #openstack | 17:09 | |
| *** kevnfx has quit IRC | 17:10 | |
| *** screen-x has joined #openstack | 17:10 | |
| Daviey | cole: Fancy pushing it somewhere? | 17:12 |
| *** 36DAARAVK has quit IRC | 17:13 | |
| Daviey | cole: I started editing vishy's nova.sh script to use Ubuntu packages... but it's not finished... sounds like you are further along. | 17:13 |
| *** Cybodog has quit IRC | 17:17 | |
| *** Orman has joined #openstack | 17:19 | |
| Orman | Hey guys. ;) | 17:20 |
| *** electroniceagle has joined #openstack | 17:23 | |
| jc_smith | Is the reason we use the euca2ools and not ec2-api-tools because the ec2-api-tools require a EC2 SOAP interface? | 17:23 |
| jc_smith | and euca uses the REST one? | 17:24 |
| *** schisamo has joined #openstack | 17:24 | |
| *** ppetraki has joined #openstack | 17:27 | |
| *** ppetraki has quit IRC | 17:28 | |
| *** silassewell has joined #openstack | 17:29 | |
| *** kashyapc has quit IRC | 17:29 | |
| *** westmaas has quit IRC | 17:33 | |
| *** allsystemsarego has joined #openstack | 17:33 | |
| Orman | alekibango: Hey man | 17:34 |
| *** kw1 has joined #openstack | 17:36 | |
| *** dendrobates is now known as dendro-afk | 17:36 | |
| al-maisan | jc_smith: I believe it is due to a licensing issue .. | 17:38 |
| jc_smith | I think I read though that the ec2 tools require a SOAP endpoint | 17:38 |
| jc_smith | which I assume excludes it from working against nova? because nova just has the REST endpoint? | 17:39 |
| *** littleidea has quit IRC | 17:39 | |
| vishy | soren: there is another patch that works even if you don't have public internet | 17:43 |
| *** kashyapc has joined #openstack | 17:44 | |
| vishy | Daviey: nova.sh uses ubuntu packages through the ppa. Do you mean downloading the packages directly and using dpkg? | 17:47 |
| *** dendro-afk is now known as dendrobates | 17:48 | |
| vishy | soren: alternative solution that doesn't require specifying an ip? | 17:48 |
| Daviey | vishy: Hmm... unless i'm basing from an old version, it seemed yours heavily used easy_install or pip for satisfying depends? | 17:49 |
| vishy | soren: here http://bazaar.launchpad.net/~zulcss/nova/nova-lp-668229/revision/390 | 17:49 |
| vishy | Daviey: yes that is an older version | 17:49 |
| Daviey | vishy: That solution is skewed in some situations, particularly if /etc/hosts is somewhat confused. | 17:50 |
| vishy | Daviey: i switched to all packages with last version, since we started requiring the ppa for the new version of libvirt anyway | 17:50 |
| Daviey | dammit :) | 17:50 |
| Daviey | vishy: Where do you store it now? | 17:50 |
| vishy | same place | 17:51 |
| vishy | http://github.com/vishvananda/novascript | 17:51 |
| Daviey | great, thanks | 17:51 |
| Daviey | cole: Does yours do the same thing as vishy's? | 17:51 |
| vishy | Daviey: look at my name | 17:52 |
| vishy | Daviey: oh that is directed at cole...nm | 17:53 |
| *** electroniceagle has quit IRC | 17:53 | |
| *** electroniceagle has joined #openstack | 17:54 | |
| Daviey | vishy: I'm wondering if that script would benefit from being in lp:nova under contrib/ or something? Meaning others can also contribute, and perhaps improving discoverability? | 17:54 |
| vishy | Daviey: seems reasonable | 17:54 |
| *** joearnold has quit IRC | 17:55 | |
| vishy | the thing is the script pulls from trunk to get the most recent code | 17:55 |
| *** electroniceagle1 has joined #openstack | 17:55 | |
| *** pvo has joined #openstack | 17:56 | |
| *** ChanServ sets mode: +v pvo | 17:56 | |
| *** electroniceagle has quit IRC | 17:57 | |
| *** kw1 has left #openstack | 17:57 | |
| *** joearnold has joined #openstack | 17:58 | |
| Daviey | vishy: yeah, so one fix for that is: bzr --no-plugins cat http://bazaar.launchpad.net/~hudson-openstack/nova/trunk/contrib/nova-dev-env.sh > nova.sh ; chmod +x nova.sh | 17:59 |
| Daviey | or similar | 17:59 |
| vishy | makes sense. I'll put in a merge proposal when i get a chance | 17:59 |
| Daviey | vishy: rocking! | 18:00 |
| *** msinhore has joined #openstack | 18:00 | |
| Orman | I am putting together the automatic snapshotting blueprint for nova. ;) | 18:02 |
| *** khussein has joined #openstack | 18:03 | |
| *** ctennis has quit IRC | 18:04 | |
| *** dragondm has quit IRC | 18:04 | |
| *** terje has quit IRC | 18:13 | |
| *** littleidea has joined #openstack | 18:13 | |
| *** al-maisan is now known as almaisan-away | 18:18 | |
| Orman | Are there any docs out there for snapshotting? | 18:24 |
| Orman | I am trying to find some. | 18:24 |
| *** daleolds has joined #openstack | 18:24 | |
| vishy | guys: fix and test in for security group issue here https://code.launchpad.net/~vishvananda/nova/lp670278/+merge/39998 | 18:24 |
| *** cole has quit IRC | 18:25 | |
| vishy | Orman: https://blueprints.launchpad.net/nova/+spec/snapshot-instance | 18:25 |
| vishy | Orman: http://wiki.openstack.org/SnapshottingInstanceVolume | 18:25 |
| Orman | vishy: I am making the blueprint for the automatic snapshotting. | 18:25 |
| *** westmaas has joined #openstack | 18:27 | |
| *** kw1 has joined #openstack | 18:29 | |
| *** kashyapc has quit IRC | 18:37 | |
| *** ptremblett has quit IRC | 18:41 | |
| Orman | vishy: Tell me if this is to confusing | 18:47 |
| Orman | https://blueprints.launchpad.net/nova/+spec/automatic-snapshotting-in-nova | 18:47 |
| mdiver | vishy: hope you're doing well. I've installed nova running the Centos version | 18:49 |
| *** kashyapc has joined #openstack | 18:49 | |
| mdiver | vishy: now I can see lots of Screen sockets, but for some reason there is no nova-* process running... | 18:50 |
| dendrobates | Orman: do you just mean a scheduled non-interactive snapshot? | 18:50 |
| dendrobates | or backup as they like to call it | 18:51 |
| Orman | Yes one that runs in the background. | 18:51 |
| Orman | Backup | 18:51 |
| Orman | dendrobates: Yes, I hope my idea of such a feature is the first. | 18:53 |
| mdiver | Can I start nova-* process manually and put them on bg ? | 18:53 |
| Orman | dendrobates: should I call it something else. | 18:53 |
| dendrobates | Orman: rackspace already has that concept. check with pvo, to see if their is a duplicate blueprint | 18:53 |
| Orman | :( | 18:54 |
| Orman | Ok | 18:54 |
| Orman | I was either talking to vishy or someone else about automatic snapshotting last night and I believe someone said there wasn't a automatic snapshotting in nova. | 18:56 |
| Orman | I could have this wrong though. | 18:56 |
| pvo | Orman: not yet. Thats what we're going to build | 18:56 |
| Orman | So there is another blueprint you're saying? | 18:56 |
| dendrobates | Orman: not yet, but to deploy nova at rackspace we will need to implement it. | 18:56 |
| *** littleidea has quit IRC | 18:56 | |
| Orman | Ok..... | 18:57 |
| pvo | Orman: there is another blueprint for snapshots | 18:57 |
| Orman | Ok no worries I'll delete mine | 18:57 |
| *** dragondm has joined #openstack | 18:57 | |
| Orman | My blueprint would be for automatic snapshots. | 18:59 |
| Orman | However I see your point. | 19:00 |
| pvo | automatic == scheduled ? | 19:00 |
| pvo | https://blueprints.launchpad.net/nova/+spec/xs-snapshots | 19:00 |
| Orman | Yes | 19:00 |
| Orman | Okay thanks guys I guess there is feature already for this. | 19:01 |
| *** mdomsch has joined #openstack | 19:01 | |
| *** grizzletooth has left #openstack | 19:01 | |
| Orman | I delete mine now to help prevent any duplicates. | 19:01 |
| *** westmaas has quit IRC | 19:03 | |
| *** joearnold has quit IRC | 19:04 | |
| *** littleidea has joined #openstack | 19:05 | |
| *** westmaas has joined #openstack | 19:14 | |
| Orman | dendrobates: http://etherpad.openstack.org/NovaSecurityNotes | 19:14 |
| Orman | We have added more to it. | 19:14 |
| vishy | mdiver: you can run them manually, yes. I prefer to have mine in different screens | 19:15 |
| dendrobates | Orman: looking | 19:17 |
| *** electroniceagle1 has quit IRC | 19:17 | |
| Orman | Ok | 19:18 |
| *** electroniceagle has joined #openstack | 19:18 | |
| Orman | dendrobates: some stuff will have to be scratched off,but we're trying to identify the goals first then implement the architecture. ;) | 19:19 |
| Orman | dendrobates: Feel free to add anything. | 19:19 |
| *** westmaas has quit IRC | 19:23 | |
| *** HouseAway is now known as AimanA | 19:29 | |
| *** zaitcev has joined #openstack | 19:31 | |
| *** electroniceagle has quit IRC | 19:32 | |
| soren | vishy: My patch doesn't require public internet? | 19:33 |
| vishy | soren: yeah i figured that out after i posted | 19:33 |
| soren | vishy: ...and doesn't require anything in particular from /etc/hosts (unlike the patch you referenced). | 19:33 |
| vishy | soren: ok | 19:33 |
| *** jakedahn has joined #openstack | 19:34 | |
| *** jakedahn has joined #openstack | 19:34 | |
| soren | vishy: I also wasn't sure if the order in which gethostbyname_ex returned those IP's was guaranteed to be a particular way. | 19:34 |
| vishy | soren: I thought maybe you hadn't seen it | 19:34 |
| soren | vishy: Hm... Although, I'm not sure what happens if you have no default gw (i.e. no route to 8.8.8.8). | 19:34 |
| vishy | soren: sounds like you have though :) | 19:34 |
| *** westmaas has joined #openstack | 19:35 | |
| vishy | soren: well it has to be better than what is in there now | 19:35 |
| Orman | dendrobates: We're are still in the process of adding new things to the notes. | 19:37 |
| soren | vishy: It fails with ENETUNREACH. That's probably fine. | 19:37 |
| soren | I honestly forget why we even need the public IP? | 19:37 |
| vishy | does it fail immediately? | 19:37 |
| soren | vishy: Yes. | 19:37 |
| vishy | yeah that is fine then | 19:37 |
| vishy | the delay is painful | 19:37 |
| soren | Yeah. | 19:38 |
| soren | Oh, it's for VPN. | 19:38 |
| soren | Heh. So most of us never needed it :) | 19:38 |
| *** pvo has quit IRC | 19:39 | |
| vishy | :) | 19:39 |
| vishy | I have a bunch of vpn fixes that i will be proposing soon | 19:39 |
| soren | vishy: anotherjesse mentioned you guys have puppet recipes.. Can you share them? | 19:39 |
| *** littleidea has quit IRC | 19:40 | |
| *** electroniceagle has joined #openstack | 19:40 | |
| vishy | soren: we're trying to figure out where the following items go: novatools, novascript, puppet recipes | 19:41 |
| vishy | directory? branch? new project under openstack? | 19:42 |
| soren | I'd say branch under nova. For now, at least. | 19:42 |
| soren | Moving them later on is simple. | 19:42 |
| soren | Er... What is novascript? | 19:42 |
| vishy | soren: ok, should we create a subdirectory called puppet? | 19:43 |
| soren | I guess novatools is a fork euca2ools? | 19:43 |
| vishy | novascript is my install script | 19:43 |
| soren | Oh, that. | 19:43 |
| vishy | no novatools are scripts for hardware staging and a curses based nova-top | 19:43 |
| vishy | basically just management helper tools | 19:43 |
| soren | vishy: Yeah, just stick 'em in ~anso/nova/puppet or whatnot. | 19:43 |
| soren | vishy: We should probably have a contrib/ sort of thing in nova proper for stuff like nova-top. | 19:44 |
| vishy | perhaps we rename tools to contrib? | 19:44 |
| alekibango | i like tools more | 19:44 |
| soren | This is getting philosophical :) | 19:45 |
| soren | I was really just interested in getting my hand on those puppet recipes :) | 19:45 |
| vishy | i've written a couple of helpers like nova-mimic and nova-sshbin that are useful little tools as well | 19:45 |
| vishy | soren: ok we'll get them out before summit | 19:45 |
| vishy | s/nova-sshbin/nova-sshvpn | 19:48 |
| dendrobates | vishy: Daviey and the rest of the ubuntu devs are interested in the puppet recipes too | 19:48 |
| *** ptremblett has joined #openstack | 19:55 | |
| Daviey | oh, we very much are vishy... we have a couple of Ubuntu specifications for it... making it an optional core part of ubuntu server | 19:57 |
| Daviey | One of the main steakholder stacks is openstack for it... | 19:58 |
| Daviey | another one is hadoop. | 19:58 |
| vishy | Daviey: settled on puppet over chef? | 19:58 |
| soren | vishy: We did that a while ago. | 19:59 |
| Daviey | vishy: I think we are going to focus more on puppet this cycle | 19:59 |
| * dendrobates stays out of this one | 19:59 | |
| jc_smith | are there any other ec2 command line tools that work with nova well other than euca2ool that people can recommend? | 19:59 |
| Daviey | alekibango: fwiw, tools sounds like something essential... where contrib, to me at least, is optional extras.. dainty little scripts etc. | 20:00 |
| vishy | Daviey: we like chef, but we can't really use opscode platform and I understand scaling chef server poroperly is not trivial | 20:00 |
| soren | Man, this sucks. I had a really, really good idea while I was doing the dishes. Then my daughter did something funny and I lost my train of thought. Now I can't remember what this awesome idea was. | 20:00 |
| dendrobates | ha | 20:00 |
| vishy | soren: sharks with lazers? | 20:00 |
| Daviey | vishy: TBH, our team is more familiar with puppet... not that it should be the main reason, but we are more familar with it for a reason | 20:01 |
| soren | vishy: No, this was a new idea. :) | 20:01 |
| Daviey | :) | 20:01 |
| dendrobates | soren: dirty up some more dishes and then wash them. | 20:01 |
| soren | dendrobates: I tried. | 20:01 |
| soren | srsly | 20:01 |
| dendrobates | Daviey: there was a contentious UDS session in Barcelona titled puppet v. chef | 20:01 |
| Daviey | soren: If it helps, i have a stack of washing up that needs doing? | 20:01 |
| *** electroniceagle has left #openstack | 20:01 | |
| soren | Daviey: Ship it over, test your luck. | 20:02 |
| *** neogenix has joined #openstack | 20:02 | |
| Daviey | dendrobates: Sadly, my emacs vs vim blueprint was rejected for Dallas | 20:02 |
| dendrobates | Daviey: as was my Christianity vs Atheism spec | 20:03 |
| dendrobates | Daviey: AHHH, why does the summit software make me enter times in UTC, when it knows the timezone. | 20:04 |
| *** pvo has joined #openstack | 20:04 | |
| *** ChanServ sets mode: +v pvo | 20:04 | |
| soren | And my "How much wood would a woodchuck chuck if a woodchuck could chuck wood" spec. | 20:04 |
| Daviey | dendrobates: For creating slots, or setting the agenda? | 20:05 |
| dendrobates | slots | 20:06 |
| Daviey | dendrobates: there is a handy tool to help fix that..... :) | 20:06 |
| dendrobates | Daviey: really? | 20:06 |
| Daviey | just create it in $whatever, and run ./manage.py fixtimeoffset=+1 iirc to add one hour | 20:07 |
| dendrobates | is there a tool to duplicate days, so you don;t have to reenter all the info | 20:07 |
| Daviey | no... TBH - with Ubuntu it's normally done with injecting raw SQL :( | 20:07 |
| dendrobates | Daviey: I need to look into the manage.py functions | 20:07 |
| Daviey | However, one of the work items for this cycle is to create a script for generating days | 20:08 |
| Daviey | it's probably about 10 lines of code to have a script for duplicating days btw | 20:08 |
| dendrobates | so... I'm going to push the summit to 6pm like UDS does, any objections? I would rather have longer days than more concurrent sessions | 20:09 |
| neogenix | dendrobates: no arguments here ;) | 20:10 |
| *** ctennis has joined #openstack | 20:10 | |
| *** ctennis has joined #openstack | 20:10 | |
| dendrobates | maybe we can get some beer brought up and start happy hour early :) | 20:10 |
| soren | dendrobates: I alrady created all the slots? | 20:10 |
| soren | dendrobates: I wrote a (fugly) script that did it. | 20:11 |
| dendrobates | soren: I am changing them, to align with lunch and other known distractions | 20:11 |
| soren | dendrobates: Oh, changing existing ones? | 20:11 |
| dendrobates | soren: I deleted most of them | 20:11 |
| soren | dendrobates: I see. | 20:12 |
| jk0 | did someone say beer? | 20:12 |
| msinhore | hello all | 20:12 |
| dendrobates | hello | 20:13 |
| msinhore | I'm investigating the openstack to use in a private cloud product. The XCP (Xen Cloud Platform) and XenServer is already supported? | 20:13 |
| *** littleidea has joined #openstack | 20:14 | |
| *** jc_smith has quit IRC | 20:14 | |
| msinhore | If you need some help with that I've a good xenapi knowledge | 20:14 |
| msinhore | hi dendrobates | 20:15 |
| *** Orman has quit IRC | 20:15 | |
| dendrobates | msinhore: citrix is involved and has written xenapi support for openstaxk | 20:15 |
| Daviey | soren: Your script, was it a management command? | 20:15 |
| soren | Daviey: Nope. | 20:16 |
| dendrobates | I bet he just shoved it into sqlite | 20:16 |
| Daviey | soren: wow, you are brave...... | 20:16 |
| soren | I used Django's ORM. | 20:16 |
| soren | Just a couple of nested loops. | 20:16 |
| dendrobates | Daviey: are these Managment commands documented somewhere? | 20:16 |
| Daviey | dendrobates: docs aren't great... but you can get an idea from ./manage.py help | 20:17 |
| soren | Something like this: http://paste.openstack.org/show/92/ | 20:17 |
| soren | Not the exact thing I ran, but close. | 20:18 |
| *** kevnfx has joined #openstack | 20:18 | |
| Daviey | soren: that is largely what i had in mind for the management command | 20:18 |
| soren | Daviey: It should use the start/end properties instead, though. | 20:19 |
| Daviey | soren: Have a look in summit/schedule/management/commands/ - if you are keen to create a decent createslots command | 20:19 |
| soren | I'm not. | 20:23 |
| soren | :) | 20:23 |
| soren | It seems you are, though. Go on. You know you want to. | 20:23 |
| msinhore | are you think in some integration with load-balancers like F5/big-ip, netscalers, etc… or it's to be out of the openstack source? | 20:24 |
| soren | There should be a law preventing people from not mentioning that name of a the file within the file. I spent forever grepping all over the place for lpupdate trying to find out where the heck it was defined until I realised there was a file named lpupdate.py. | 20:24 |
| *** joearnold has joined #openstack | 20:25 | |
| *** littleidea has quit IRC | 20:25 | |
| *** littleidea has joined #openstack | 20:25 | |
| *** arthurc has quit IRC | 20:25 | |
| vishy | soren: lol | 20:26 |
| soren | Daviey: ..but I guess that's a remnant from when Scott was working on it. Hahah! Get it? Remnant? | 20:26 |
| Daviey | soren: hah | 20:26 |
| Daviey | soren: You should never have got involved with software development, clearly your expertise is being a comedian. :) | 20:27 |
| *** littleidea has quit IRC | 20:30 | |
| dendrobates | msinhore: I would expect us to do load balancing as a service at some point in the future, but with open source components | 20:32 |
| msinhore | dendrobates: It will be nice! But I could write a third part software like a plugin to openstack for support proprietaries load balancer, right? | 20:41 |
| neogenix | msinhore: my blueprint hopefully creates the foundation for that sort of connection. | 20:47 |
| soren | Daviey: Nah, I wouldn't enjoy all the traveling. | 20:52 |
| soren | Daviey: Oh, wait. | 20:52 |
| soren | :( | 20:52 |
| dendrobates | msinhore: of course | 20:53 |
| *** jc_smith has joined #openstack | 20:54 | |
| mdiver | trying to access http://localhost:8773 it gives me a 404, any Idea ??? | 20:56 |
| mdiver | Looks like something is missing on the webserver | 20:56 |
| mdiver | anybody can help? | 20:56 |
| dendrobates | if it gives you a 404 a webserver is running | 20:58 |
| mdiver | that's correct. | 20:59 |
| dendrobates | sorry, I misread, I'm trying to do 3 things at once | 20:59 |
| mdiver | dendrobates: it is running, however, I don't know if that nova-api is setup correctly | 21:00 |
| pvo | mdiver: what do the api logs say? | 21:00 |
| * soren takes a break | 21:00 | |
| pvo | are you running in the foreground? | 21:00 |
| mdiver | pvo: bg | 21:01 |
| mdiver | pvo: put it on nohup | 21:01 |
| mdiver | pvo: I cant find nova-api.log , however I can see the nohup.out , which is given me 404 msgs | 21:02 |
| *** Orman has joined #openstack | 21:03 | |
| mdiver | pvo: It outputs => " GET /services/Cloud/? [all the parameters...] HTTP/1.1" 404 | 21:05 |
| mdiver | pvo: I've checked the URL using a browser and that ./services/Cloud does not exists.. | 21:05 |
| pvo | which api endpoint? openstack or aws? | 21:06 |
| mdiver | pvo: how do I check that ? | 21:06 |
| pvo | hang on. I'm in a meeting right now.. : ) | 21:07 |
| mdiver | pvo: Ok. | 21:07 |
| mdiver | pvo: I've got it. | 21:07 |
| mdiver | pvo: I was starting the api instance wrongly... I had to pass the .conf file which had the --FAKE_subdomain=ec2 | 21:08 |
| *** westmaas has quit IRC | 21:09 | |
| *** msinhore has quit IRC | 21:11 | |
| *** pvo has quit IRC | 21:11 | |
| Orman | Back :d | 21:12 |
| mdiver | pvo: Thanks anyway. | 21:12 |
| Orman | ::D | 21:12 |
| creiht | when are te election results supposed to be posted? | 21:15 |
| *** littleidea has joined #openstack | 21:21 | |
| dendrobates | creiht: I have no idea | 21:22 |
| *** spectorclan has joined #openstack | 21:24 | |
| mdiver | all: issuing euca-upload-bundle <params..> after a while I get => 'module' object had no attribute 'provider' , any idea ? | 21:25 |
| spectorclan | Developers - looking to sponsor conferences in 2011 from open source projects we use in OpenStack; any groups you want me to speak with? | 21:25 |
| creiht | spectorclan: pycon | 21:26 |
| vishy | mdiver: wrong version of boto | 21:26 |
| spectorclan | creiht: Thanks | 21:26 |
| vishy | you need 1.9b | 21:26 |
| alekibango | Daviey, vishy: puppet or chef, please be so kind to put your ideas into nova deployment, chapter configuration management... we need your input | 21:26 |
| eday | mdiver: just FYI, that option was just removed in latest trunk and now it's there by default | 21:26 |
| alekibango | http://wiki.openstack.org/NovaDeploymentManual | 21:27 |
| mdiver | I'm running boto2.0b , removing it.. | 21:28 |
| alekibango | mdiver: yes, common mistake :) | 21:28 |
| Orman | alekibango: Diagram | 21:32 |
| Orman | :) | 21:32 |
| Orman | I need to make one | 21:32 |
| Orman | my self. | 21:32 |
| *** gaveen has joined #openstack | 21:35 | |
| *** gaveen has joined #openstack | 21:35 | |
| *** miclorb_ has joined #openstack | 21:36 | |
| *** sagi_ has quit IRC | 21:40 | |
| mdiver | Issuing euca-run-instances , I'm getting ValueError: No JSON object could be decoded | 21:40 |
| mdiver | any idea ? | 21:44 |
| uvirtbot | New bug: #670648 in swift "Replicator bug in hash_suffix" [Undecided,New] https://launchpad.net/bugs/670648 | 21:46 |
| *** kevnfx has quit IRC | 21:48 | |
| *** dendrobates is now known as dendro-afk | 21:51 | |
| *** pothos_ has joined #openstack | 21:53 | |
| *** pothos has quit IRC | 21:54 | |
| *** pothos_ has quit IRC | 21:55 | |
| *** khussein has quit IRC | 21:55 | |
| *** pothos has joined #openstack | 21:55 | |
| *** spectorclan has quit IRC | 22:08 | |
| *** dysinger has joined #openstack | 22:08 | |
| *** abecc has quit IRC | 22:09 | |
| *** littleidea has quit IRC | 22:09 | |
| Orman | Object stores validation | 22:11 |
| *** rlucio has joined #openstack | 22:11 | |
| uvirtbot | New bug: #670654 in nova "unittests hang on python 2.6.1" [Low,Fix committed] https://launchpad.net/bugs/670654 | 22:12 |
| mdiver | Issuing euca-run-instances , I'm getting ValueError: No JSON object could be decoded, I can see a 400 HTTP code on the logs.. Any idea ? | 22:12 |
| dysinger | I'm rEAdy! | 22:13 |
| Orman | https://blueprints.launchpad.net/nova/+spec/request-objectstores-validation-inside-ec2-group | 22:14 |
| dysinger | FYI hotwire has the crowne plaza in San Antonio for $119/night | 22:14 |
| dysinger | (next door to the conf) | 22:14 |
| Orman | I am wondering if that's already a feature | 22:14 |
| *** littleidea has joined #openstack | 22:14 | |
| *** littleidea has quit IRC | 22:15 | |
| *** ddumitriu has joined #openstack | 22:15 | |
| *** Cybodog has joined #openstack | 22:20 | |
| *** pvo has joined #openstack | 22:20 | |
| *** ChanServ sets mode: +v pvo | 22:20 | |
| Orman | Anyone know if this such a feature exists https://blueprints.launchpad.net/nova/+spec/request-objectstores-validation-inside-ec2-group | 22:20 |
| Orman | Probably does | 22:21 |
| *** allsystemsarego has quit IRC | 22:21 | |
| soren | What sort of validation? | 22:22 |
| Orman | Security | 22:23 |
| Orman | You prpbably alreayd have such a feature | 22:23 |
| Orman | never mind | 22:23 |
| soren | I doubt it. | 22:23 |
| soren | I still don't understand. What sort of validation? What would you scan for? | 22:23 |
| Orman | Well, I was sort thinking of security threats to the data | 22:24 |
| *** pvo has quit IRC | 22:24 | |
| soren | I can only repeat my question. | 22:25 |
| *** ArdRigh has joined #openstack | 22:26 | |
| *** gaveen has joined #openstack | 22:31 | |
| *** dendro-afk is now known as dendrobates | 22:31 | |
| Orman | I should start the Swift security Notes | 22:31 |
| Orman | We already have the nova notes | 22:31 |
| soren | What sort of stuff would you /specifically/ scan for? Examples? | 22:32 |
| Orman | soren: Have you seen out Nova security Notes? | 22:33 |
| soren | I may have. | 22:34 |
| Orman | Or the docs | 22:34 |
| Orman | http://etherpad.openstack.org/NovaSecurityNotes | 22:34 |
| Orman | It's still in progress | 22:34 |
| Orman | We could always use more developers helping us on the ighlevel goals. | 22:36 |
| *** mdiver has quit IRC | 22:37 | |
| *** littleidea has joined #openstack | 22:37 | |
| Orman | vishy: Thanks for the note at the top. | 22:43 |
| Orman | I think we have to many goals. | 22:44 |
| *** littleidea has quit IRC | 22:44 | |
| Orman | We have to think logically here. | 22:44 |
| *** Cybodog has quit IRC | 22:47 | |
| Orman | We have to many goals | 22:49 |
| Orman | Have to think realistically. | 22:49 |
| Orman | Thans guys for helping | 22:49 |
| Orman | Thanks | 22:49 |
| *** silassewell has quit IRC | 22:50 | |
| Orman | alekibango: We need to shorten the goal list. | 22:50 |
| *** gondoi has quit IRC | 22:51 | |
| *** neogenix has quit IRC | 22:52 | |
| Orman | vishy: Thanks for the feedback ;) | 22:55 |
| *** dragondm has quit IRC | 22:55 | |
| vishy | Orman: np, i think the info about those topics is good, just that they should be in their own notes pages or the scope of the doc will be unmanageable | 22:56 |
| *** dendrobates is now known as dendro-afk | 23:01 | |
| *** ddumitriu has quit IRC | 23:02 | |
| Orman | vishy: so you're saying to just have each goal in there own notes pages? | 23:07 |
| Orman | That's a not a bad idea and plus I am still curious about the sanboxing idea I had. | 23:07 |
| *** vivk has joined #openstack | 23:07 | |
| Orman | However I know that idea is probably to similar to others. | 23:08 |
| Orman | vishy, alekibango is the other contributor of the notes besides myself. | 23:08 |
| creiht | annegentle: I think I am mostly done with the swift multi-server install docs changes | 23:10 |
| creiht | I'm going to run through it tomrrow and make a couple of formatting changes | 23:10 |
| creiht | but after that we should be good | 23:10 |
| creiht | I also want to add more to it, but I think it is good enough for a first rev | 23:11 |
| vishy | Orman: I'm saying that you should limit the SecurityNotes to things specifically about preventing and recovering from malicious users | 23:11 |
| vishy | s/users/attacks | 23:12 |
| Orman | Rihgt | 23:17 |
| termie | nice, sawzall got released open source | 23:17 |
| termie | http://code.google.com/p/szl/ | 23:17 |
| termie | good times in logville | 23:17 |
| alekibango | i am not big contributor, i more like posted some questions :) but vishy i do think that some effort should be put into those notes. But it should be written by developers, not by orman | 23:17 |
| Orman | Well, I still would like to help out with the notes. | 23:18 |
| alekibango | he can try but he really is missing different kind of knowledge you need to make it right. -- the kind most core devels knows... | 23:18 |
| alekibango | but still i think his attempts might give value... especially if people will contribute | 23:19 |
| kw1 | sawzall looks crazy | 23:19 |
| alekibango | we need to start dialogs about security and we need to make some result of them | 23:20 |
| alekibango | something that will help users/admins and that will set policies and guides to developers | 23:20 |
| Orman | alekibango: I have knowledge,but just certain parts I need help from others on. | 23:21 |
| alekibango | Orman: i know you have some, but noone is enough in nova, even dendro sometimes doesnt have clue | 23:21 |
| alekibango | :) | 23:21 |
| alekibango | thats why we have to document it | 23:21 |
| Orman | Right | 23:22 |
| alekibango | even if it looks not so nice right now | 23:22 |
| alekibango | this needs to be reborn into better thing, sure... but it can be a start | 23:22 |
| alekibango | vishy: do you mean also preventing ddos attacks? | 23:23 |
| alekibango | Orman: note: put that somewhere plz | 23:23 |
| Orman | alekibango: I just wants us to be able to manage all of the goals. | 23:23 |
| alekibango | :) | 23:23 |
| *** rnirmal has quit IRC | 23:23 | |
| *** blakeyeager_ has joined #openstack | 23:23 | |
| *** littleidea has joined #openstack | 23:24 | |
| *** blakeyeager_ has quit IRC | 23:24 | |
| alekibango | i am not sure how, but preventing dos atacks might be fun | 23:24 |
| alekibango | :D | 23:24 |
| vishy | alekibango: that isn't really useful in our particular use case, but ddos prevention against public api would be great. I think it is up to users to manage their own vms | 23:24 |
| alekibango | vishy: i agree about vms | 23:24 |
| alekibango | yes | 23:24 |
| alekibango | Orman: user should have privacy and authority above his instances | 23:25 |
| Orman | Lets add that one. | 23:25 |
| alekibango | he hasall responsibility | 23:25 |
| Orman | alekiabngo: To an extent I agree. | 23:25 |
| alekibango | Orman: you cant do his job, really. | 23:25 |
| alekibango | that would create crazy police state like environment | 23:25 |
| alekibango | Orman: thats why brazil might be inspiring movie... (yes its done in a way that you will not like some of that movie, like the torture...) | 23:26 |
| Orman | Right | 23:26 |
| alekibango | but thats the point | 23:26 |
| alekibango | whole point of virtualization is giving him freedom and responsibility | 23:26 |
| *** blakeyeager has quit IRC | 23:27 | |
| Orman | Right | 23:27 |
| *** pvo has joined #openstack | 23:27 | |
| *** pvo has joined #openstack | 23:27 | |
| *** ChanServ sets mode: +v pvo | 23:27 | |
| alekibango | (while protecting resources like cpu, disk, network bandwidth) | 23:27 |
| alekibango | ha, there is new security objective - protect resources against abuse :) | 23:27 |
| *** mischer has joined #openstack | 23:28 | |
| alekibango | limiting, throttling, linux security containers, etc | 23:28 |
| Orman | That's what I have been trying to say. | 23:28 |
| alekibango | i c | 23:28 |
| Orman | I am security doc wirter,but also a designer. | 23:29 |
| alekibango | Orman: limiting, throttling, LXC == tools. forget them for now :) | 23:29 |
| alekibango | rather think more about goals | 23:29 |
| alekibango | 1) we want all users to feel safe | 23:29 |
| Orman | Sure | 23:29 |
| alekibango | 2) in case hardware note goes down, we want to be able to continue operation | 23:30 |
| alekibango | having backup... | 23:30 |
| alekibango | etc | 23:30 |
| Orman | 2) protect them at all costs. | 23:30 |
| alekibango | think that means we need to integrate sheepdog or some other way to make reliable storage | 23:30 |
| alekibango | and we need instant, live migration | 23:30 |
| alekibango | but that is not security goals, thats ways, tools | 23:31 |
| Orman | security tools will come | 23:31 |
| alekibango | yes, but they should come only when we know we need them | 23:31 |
| Orman | Yes | 23:31 |
| alekibango | because they reduce KISS and sanity sometimes | 23:31 |
| alekibango | vishy: i hope you agree with me :) | 23:32 |
| alekibango | Orman: ask this question: what is user afraid of? | 23:33 |
| alekibango | ( imean the admin of instance) | 23:33 |
| Orman | data theft | 23:33 |
| alekibango | breach | 23:33 |
| alekibango | crashed instance, unable to recover data | 23:33 |
| alekibango | .... | 23:34 |
| Orman | They both fall undet those same categories | 23:34 |
| alekibango | please make list | 23:34 |
| Orman | Which is why the snapshotting would work great in nova | 23:34 |
| alekibango | if we address all fears, we have not only nice technical docs, but also marketing feature | 23:34 |
| alekibango | (killer one) | 23:34 |
| alekibango | Orman: i for example fear of silent data corruption | 23:35 |
| Orman | Right I mean with my object stores validation one that protection from malicious ones | 23:35 |
| *** kevnfx has joined #openstack | 23:35 | |
| alekibango | and i fear the cluster in cloud might burn down and then my data are lost | 23:35 |
| Orman | making sure data is safe is the number one goal | 23:36 |
| alekibango | (whole building hit by napalm) | 23:36 |
| Orman | validating incoming data as well | 23:36 |
| alekibango | that means we need some distributed backup solution | 23:36 |
| alekibango | Orman: how on earth you want validate data? | 23:36 |
| Orman | I tried to propose that,but they are already working on one | 23:36 |
| alekibango | the virtualization protects the infrastructure from bad incoming data | 23:37 |
| alekibango | ... should | 23:37 |
| Orman | It was just a though. | 23:37 |
| alekibango | i dont know, maybe someone can break through xen or somthing | 23:37 |
| alekibango | Orman: imho thats on user. you only should protect resources and reliability and operability | 23:38 |
| alekibango | data integrity and privacy | 23:38 |
| alekibango | you can detect someone having open mail relay or sending mass spam, but thats another story | 23:39 |
| Orman | lol | 23:39 |
| alekibango | and its imho out of scope of infrastructure provider | 23:39 |
| alekibango | maybe | 23:39 |
| alekibango | well at least cloud provider... | 23:40 |
| Orman | The operability securty | 23:40 |
| alekibango | 'social stability' hehe, read (or see) brave new world :) | 23:42 |
| alekibango | Orman: also note that brave new world nor 1984 were work of fiction. they both came from first hand knowledge | 23:43 |
| Orman | New iedas are coming to mined | 23:48 |
| Orman | mind | 23:48 |
| pvo | mtaylor: you around? | 23:53 |
| Orman | alekibango: I just want to make sure all holes are filled. | 23:56 |
| *** dendro-afk is now known as dendrobates | 23:57 | |
| *** matiu__ has joined #openstack | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!