Thursday, 2011-01-13

openstackhudsonProject nova-tarmac build #51,906: STILL FAILING in 36 sec: http://hudson.openstack.org/job/nova-tarmac/51906/00:02
*** zul has quit IRC00:05
openstackhudsonProject nova-tarmac build #51,907: STILL FAILING in 4.1 sec: http://hudson.openstack.org/job/nova-tarmac/51907/00:07
nati+soren: Thank you for your review for IPv6. We fixed bug. We will push code ASAP when launchpad recover.00:09
*** DubLo7 has quit IRC00:09
*** rnirmal has joined #openstack00:10
openstackhudsonProject nova-tarmac build #51,908: STILL FAILING in 3.4 sec: http://hudson.openstack.org/job/nova-tarmac/51908/00:12
openstackhudsonProject nova-tarmac build #51,909: STILL FAILING in 3.3 sec: http://hudson.openstack.org/job/nova-tarmac/51909/00:17
*** kashyapc has quit IRC00:20
*** kashyapc has joined #openstack00:21
openstackhudsonYippie, build fixed!00:23
openstackhudsonProject nova-tarmac build #51,910: FIXED in 1 min 6 sec: http://hudson.openstack.org/job/nova-tarmac/51910/00:23
*** jbaker_ has quit IRC00:30
*** gustavomzw has joined #openstack00:33
*** kashyapc has quit IRC00:34
*** ccustine has quit IRC00:35
*** pvo is now known as pvo_away00:36
*** allsystemsarego has quit IRC00:37
uvirtbotNew bug: #702164 in nova "error when generating novarc in  get_environment_rc()" [Undecided,New] https://launchpad.net/bugs/70216400:37
natisoren: we fixed bug with IPv6. Would you please check it?00:46
*** rossi_j has joined #openstack00:50
*** gustavomzw has quit IRC00:50
*** kashyapc has joined #openstack00:50
*** rossij has quit IRC00:51
*** irahgel has left #openstack01:01
*** guynaor has joined #openstack01:08
*** guynaor has left #openstack01:09
*** Jordandev has joined #openstack01:12
*** rlucio has quit IRC01:13
*** Ryan_Lane is now known as Ryan_Lane|food01:15
*** Jordandev has quit IRC01:21
*** mray has quit IRC01:23
uvirtbotNew bug: #702200 in nova "ec2 api create_volume raises an exception" [High,In progress] https://launchpad.net/bugs/70220001:26
*** Hisaharu has joined #openstack01:35
*** dragondm has quit IRC01:36
*** kpepple has joined #openstack01:37
*** DubLo7 has joined #openstack01:41
*** joearnold has quit IRC01:52
*** nati_ has joined #openstack01:53
*** sophiap has joined #openstack01:55
*** nati has quit IRC01:56
*** adiantum has joined #openstack02:01
*** rlucio has joined #openstack02:03
*** pvo_away is now known as pvo02:03
openstackhudsonProject nova build #397: SUCCESS in 1 min 26 sec: http://hudson.openstack.org/job/nova/397/02:03
openstackhudsonTarmac: Fixes a typo in the name of a variable.02:03
*** rlucio has quit IRC02:07
*** rnirmal has quit IRC02:07
*** adiantum has quit IRC02:09
*** johnpur has quit IRC02:10
*** irahgel has joined #openstack02:10
*** irahgel has left #openstack02:10
*** adiantum has joined #openstack02:14
*** ChumbyJay has quit IRC02:16
*** drico has quit IRC02:18
*** Ryan_Lane|food is now known as Ryan_Lane02:18
*** hadrian_ has joined #openstack02:25
*** Dweezahr has quit IRC02:25
*** hadrian has quit IRC02:28
*** hadrian_ is now known as hadrian02:28
*** adiantum has quit IRC02:42
*** pvo is now known as pvo_away02:42
*** pvo_away is now known as pvo02:42
*** adiantum has joined #openstack02:47
*** kpepple has left #openstack02:51
*** nelson__ has quit IRC03:00
*** nelson__ has joined #openstack03:01
*** ehazlett has joined #openstack03:05
*** maplebed has quit IRC03:07
*** hadrian has quit IRC03:08
*** adiantum has quit IRC03:12
*** adiantum has joined #openstack03:17
*** skrusty has quit IRC03:21
*** rlucio has joined #openstack03:21
*** rlucio has quit IRC03:24
*** pvo is now known as pvo_away03:32
*** jdurgin has quit IRC03:33
*** skrusty has joined #openstack03:35
dirakxHi all althoug i have what it seems a fully configured nova im hitting now an eucalyptus bug https://bugs.launchpad.net/ubuntu/+source/eucalyptus/+bug/470355 any hints on how to solve it.. ?03:37
uvirtbotLaunchpad bug 470355 in eucalyptus "ec2-bundle-vol and ec2-upload-bundle result in non accepted manifest" [Low,Fix released]03:37
*** adiantum has quit IRC03:42
*** gondoi has joined #openstack03:44
*** dfg_ has quit IRC03:46
*** kashyapc has quit IRC03:51
*** adiantum has joined #openstack03:54
termiethere is a test somewhere that leaks an instance in the db04:01
termieand it is screwing up other tests04:01
termiemy next spare-time patch is going to wipe the frickin database properly04:01
termiebrute force test permutation shell script now in operation04:09
*** dirakx has quit IRC04:13
*** sophiap has quit IRC04:30
*** mdomsch has joined #openstack04:35
*** kashyapc has joined #openstack04:37
*** gondoi has quit IRC04:42
*** omidhdl has joined #openstack04:44
*** phymata has quit IRC04:55
*** paultag has left #openstack05:03
uvirtbotNew bug: #702237 in nova "FLAGS.allow_project_net_traffic is not implemented in IptablesFirewallDriver" [Undecided,New] https://launchpad.net/bugs/70223705:36
ehazletti get invalid cert failed to upload kernel when trying to use an Ubuntu UEC image with the latest nova05:36
ehazlett(installed using the nova quickstart nova.sh script)05:37
*** aimon has quit IRC05:48
*** aimon has joined #openstack05:48
*** elasticdog has quit IRC05:49
*** adiantum has quit IRC05:57
*** f4m8_ is now known as f4m805:58
*** ramkrsna has joined #openstack06:01
*** adiantum has joined #openstack06:02
*** elasticdog has joined #openstack06:02
*** fcarsten has quit IRC06:04
*** adiantum has quit IRC06:13
*** omidhdl has left #openstack06:17
*** adiantum has joined #openstack06:18
*** arcane has quit IRC06:29
*** Ryan_Lane is now known as Ryan_Lane|away06:31
*** sparkycollier has quit IRC06:33
*** ehazlett has quit IRC06:36
*** adiantum has quit IRC06:43
*** adiantum has joined #openstack06:47
*** arcane has joined #openstack06:49
*** guigui has joined #openstack06:59
*** adiantum has quit IRC07:13
*** Ryan_Lane|away has quit IRC07:14
*** adiantum has joined #openstack07:25
*** miclorb_ has quit IRC07:26
ttxdevcamcar: cool, I look forward to testing this.07:28
*** skrusty has quit IRC07:31
nati_Hi, Is anyone knows how to change authors which has already commited in bzr.07:32
ttxnati_: hmm, not really... could you explain why you'd need to do that ?07:35
*** nati_ has quit IRC07:39
*** mjmac has quit IRC07:43
*** mjmac_ has joined #openstack07:43
*** befreax has joined #openstack07:44
*** skrusty has joined #openstack07:45
*** MarkAtwood has quit IRC07:49
*** brd_from_italy has joined #openstack07:56
*** adiantum has quit IRC08:07
*** gaveen has joined #openstack08:14
*** miclorb has joined #openstack08:19
*** calavera has joined #openstack08:20
*** rcc has joined #openstack08:27
*** reldan has quit IRC08:28
*** BK_man has quit IRC08:30
*** BK_man has joined #openstack08:35
*** opengeard has joined #openstack08:43
*** ibarrera has joined #openstack08:53
*** BK_man has quit IRC09:07
*** reldan has joined #openstack09:10
*** jt_zg has quit IRC09:13
*** Ryan_Lane has joined #openstack09:18
*** daleolds1 has quit IRC09:19
*** jt_zg has joined #openstack09:22
*** drico has joined #openstack09:27
*** pcoca_ has joined #openstack09:48
*** reldan has quit IRC09:58
*** fabiand_ has joined #openstack09:58
*** reldan has joined #openstack09:58
*** dizz has joined #openstack10:03
*** reldan has joined #openstack10:05
*** miclorb has quit IRC10:12
*** trin_cz has quit IRC10:18
*** dizz is now known as dizz|away10:18
*** dizz|away is now known as dizz10:20
*** rcc_ has joined #openstack10:35
*** rcc has quit IRC10:35
*** irahgel has joined #openstack10:35
*** ramkrsna has quit IRC10:43
*** ramkrsna has joined #openstack10:56
*** rcc_ has quit IRC11:01
*** drico has quit IRC11:12
*** trin_cz has joined #openstack11:15
*** dizz is now known as dizz|away11:17
*** allsystemsarego has joined #openstack11:17
*** reldan has quit IRC11:31
*** omidhdl has joined #openstack11:33
*** reldan has joined #openstack11:36
*** nati has joined #openstack11:38
*** reldan has quit IRC11:44
* soren heads lunchwards11:45
*** reldan has joined #openstack11:46
natittx: I found the author was not correctly set in my previous branch. So I would like to fix that.11:49
*** hky has quit IRC11:54
*** adiantum has joined #openstack11:57
*** hazmat has quit IRC12:08
*** adiantum has quit IRC12:12
*** omidhdl has left #openstack12:18
*** ctennis has quit IRC12:22
*** DubLo7 has quit IRC12:25
*** arthurc has joined #openstack12:27
*** kashyapc has quit IRC12:30
*** soeren has joined #openstack12:31
*** soeren has quit IRC12:32
*** soeren has joined #openstack12:33
*** DigitalFlux has joined #openstack12:34
*** DubLo7 has joined #openstack12:35
*** ctennis has joined #openstack12:36
*** ctennis has joined #openstack12:36
*** DubLo7 has quit IRC12:39
ttxnati: maybe soren knows a trick for that12:39
sorenhm?12:39
sorenfor what?12:39
*** nati has quit IRC12:44
*** pvo_away is now known as pvo12:48
sandywalsho/12:58
*** ramkrsna has quit IRC13:00
sorensandywalsh: \o13:00
*** WonTu has joined #openstack13:06
*** WonTu has left #openstack13:07
*** reldan has quit IRC13:09
ttxsoren: <nati_> Hi, Is anyone knows how to change authors which has already commited in bzr.13:12
*** DubLo7 has joined #openstack13:15
*** reldan has joined #openstack13:15
sorenCan't be done.13:18
*** Jordandev has joined #openstack13:18
sorenChocolate. Why have I no chocolate?13:20
fraggelnsoren: The store does ;)13:20
sorenBut I'm here. The store is there.13:20
*** DubLo7 has quit IRC13:20
*** DubLo7 has joined #openstack13:20
sorenI may even have some in a cupboard. But the cupboard is there. I'm here.13:21
sandywalshhttp://mail.python.org/pipermail/web-sig/2011-January/004979.html13:22
fraggelnsoren: shame on you...13:23
fraggelnstockpiling chocolate like a girl.. :D13:23
*** reldan has quit IRC13:24
*** stewart has quit IRC13:28
*** stewart has joined #openstack13:28
*** adiantum has joined #openstack13:30
ttxDaviey: see https://code.launchpad.net/~termie/nova/db_migration/+merge/4607313:31
*** omidhdl has joined #openstack13:33
*** westmaas has joined #openstack13:33
*** hadrian has joined #openstack13:34
*** pvo is now known as pvo_away13:38
*** rnirmal has joined #openstack13:42
*** omidhdl has quit IRC13:52
*** ppetraki has joined #openstack13:56
*** mdomsch has quit IRC13:58
*** mdomsch has joined #openstack13:58
*** whaley has quit IRC14:00
*** troytoman has joined #openstack14:01
*** Jordandev has quit IRC14:01
*** reldan has joined #openstack14:02
*** whaley has joined #openstack14:03
openstackhudsonProject nova build #398: SUCCESS in 1 min 23 sec: http://hudson.openstack.org/job/nova/398/14:13
openstackhudsonTarmac: Fixes bug #701055.  Moves code for instance termination inline so that the manager doesn't prematurely mark an instance as deleted.  Prematurely doing so causes find calls to fail, prevents instance data from being deleted, and also causes some other issues.14:13
uvirtbotLaunchpad bug 701055 in nova ""No instance for id X" error terminating instances" [High,In progress] https://launchpad.net/bugs/70105514:13
jaypipesFYI, Nova being translated into 7 languages already :) https://translations.launchpad.net/nova/trunk/+pots/nova14:16
uvirtbotNew bug: #702370 in nova "IptablesFirewallDriver prevents instance startup once one has been terminated" [High,Triaged] https://launchpad.net/bugs/70237014:16
ttxjaypipes: I plan on doing french. Soon.14:18
jaypipesttx: waiting! ;P14:18
jaypipesttx: slacker.14:19
*** dizz|away has quit IRC14:24
*** dizz has joined #openstack14:26
*** dendrobates is now known as dendro-afk14:26
*** dendro-afk is now known as dendrobates14:27
*** gaveen has quit IRC14:30
*** burris has quit IRC14:31
ttxjaypipes: you, get https://code.launchpad.net/~chris-slicehost/glance/add-s3-backend_updated/+merge/45217 in :P14:33
jaypipesttx: will do once I get _0x44 to fix up from review ;)14:35
ttxjaypipes: I thought he did...14:35
ttx"Fixes suggested by JayPipes review"14:35
jaypipesttx: well poop. I just haven't gotten through my emails yet this morning. :P14:36
ttxjaypipes: a-ha! who is the slacker *now* ?14:36
*** burris has joined #openstack14:37
jaypipesttx: me. /me *shrugs sheepishly*14:37
ttxheh14:38
_0x44jaypipes: I already did?14:41
_0x44jaypipes: I mentioned it yesterday14:41
_0x44jaypipes: http://bazaar.launchpad.net/~chris-slicehost/glance/add-s3-backend_updated/revision/2914:41
*** dizz has left #openstack14:41
jaypipes_0x44: yeah, my bad bro :)14:42
_0x44jaypipes: No worries :) I had to check the merge-prop to see if you'd added stuff.14:42
_0x44jaypipes: Is boto installed on the hudson machine?14:42
jaypipes_0x44: ya, should be.14:42
_0x44Awesome, thanks14:43
jaypipes_0x44: no, thank YOU. :)14:43
_0x44jaypipes: No. Thank _you_ >:O14:43
_0x44;)14:43
* jaypipes channels Half Baked.14:44
ttxLooks like we broke the 1k commits barrier over the last month for nova... "There were 1083 commits by 58 people in the last month"14:45
jaypipesheh, nice :)14:45
jaypipesttx: with 950 in the past 4 days ;)14:45
ttxnah... :)14:45
*** adiantum has quit IRC14:46
ttxnow what does it take to get featured in the https://launchpad.net/ project list14:46
jaypipesttx: bribery.14:46
ttxyes, I know, the list if hand-picked14:46
ttxhow much did it cost you to get Drizzle in there ?14:46
*** reldan has quit IRC14:47
*** reldan has joined #openstack14:49
*** DubLo7 has quit IRC14:52
_0x44ttx: jaypipes had to go on a date with Mark Shuttleworth14:52
*** DubLo7 has joined #openstack14:52
jaypipes_0x44: shhh..don't tell.14:54
*** sophiap has joined #openstack14:54
*** gondoi has joined #openstack14:57
_0x44jaypipes: We're hiring a guy from Canonical to work on the OpenQuake project and he said the pictures are still up in the lobby of the head office. ;)14:57
*** f4m8 is now known as f4m8_14:58
jaypipes_0x44: lol14:58
openstackhudsonProject nova build #399: SUCCESS in 1 min 26 sec: http://hudson.openstack.org/job/nova/399/14:58
openstackhudsonTarmac: Fixes broken call to __generate_rc in auth manager.14:58
*** adiantum has joined #openstack14:58
*** pvo_away is now known as pvo15:00
ttxjaypipes: ooh, *that* picture !15:00
*** adiantum has quit IRC15:05
*** reldan has quit IRC15:06
*** reldan has joined #openstack15:17
*** pvo is now known as pvo_away15:18
sorenIt would be really awesome if someone who actually know something at all about ipv6 could review https://code.launchpad.net/~ntt-pf-lab/nova/ipv6-support/+merge/4610315:20
sorenAll I know is that it's the thing that's going to save the Internet. Other than that, I'm blank.15:20
*** adiantum has joined #openstack15:23
*** hazmat has joined #openstack15:24
colinnichswift - anyone know of any reason why my proxy logs aren't going to /var/log/swift? I've followed the log processing guide, and I'm sure everything's the same as last time I did it... Anything changed?15:25
*** Facefoxdotcom has joined #openstack15:25
colinnichI have log_facility = LOG_LOCAL1 in my proxy-server.conf and think I have set up syslog-ng correctly15:25
notmynamecolinnich: you are using the instructions in the "running the stats system with saio"?15:26
colinnichnotmyname: yeah15:27
*** fabiand_ has left #openstack15:27
notmynamecolinnich: for fun, change log_facility = LOG_LOCAL0 and also make the relevant changes to syslog-ngc.conf15:28
*** pvo_away is now known as pvo15:28
sorendabo: I'd like to repeat my offer of sharing the code I have that uses M2Crypto that can succesfully exchange keys with your SimpleDH.15:29
notmynameI may have run in to that issue recently, but I was in the middle of other stuff and just needed it to get working. I changed it to log facility 0 and things worked. I'm not sure why it has issues with log facility 115:29
dabosoren: please!!15:29
*** hggdh has joined #openstack15:29
sorendabo: Hang on.15:29
*** pvo is now known as pvo_away15:29
sorendabo: http://pastebin.com/itX90g3W15:31
sorendabo: I'm sure there's a prettier way to implement bin_to_dec.15:31
colinnichnotmyname: working now, thanks as always :-)15:31
dabosoren: thanks. Looking at it now15:31
notmynamecolinnich: good. I need to take some time to figure out what's wrong in the docs15:33
colinnichnotmyname: I have another system running stock 1.1 which is fine with level 1, strange15:34
notmynamehmm15:34
colinnichnotmyname: this one is running latest15:34
*** jeffdarcy has joined #openstack15:34
*** zul has joined #openstack15:35
*** Ryan_Lane is now known as Ryan_Lane|away15:38
*** rnirmal has quit IRC15:39
*** rnirmal has joined #openstack15:40
*** dabo has quit IRC15:40
*** jeffdarcy has quit IRC15:44
*** dabo has joined #openstack15:44
*** hggdh has quit IRC15:46
*** hggdh has joined #openstack15:47
*** opengeard has quit IRC15:47
*** troytoman has quit IRC15:50
*** dragondm has joined #openstack15:53
*** allsystemsarego has quit IRC15:55
*** westmaas has quit IRC15:57
*** dubsquared1 has joined #openstack16:02
*** jimbaker has joined #openstack16:06
sorenttx: Patch for  https://bugs.launchpad.net/nova/+bug/702370 up.16:11
uvirtbotLaunchpad bug 702370 in nova "IptablesFirewallDriver prevents instance startup once one has been terminated" [High,Triaged]16:11
* ttx tests16:12
*** pvo_away is now known as pvo16:14
*** calavera has quit IRC16:15
sandywalshreview anyone?16:18
sandywalshtaking easy-api16:19
*** pvo is now known as pvo_away16:19
ttxsandywalsh: ipv6 and live-migration could use some extra love16:23
sandywalshttx, ok, I'll do live-migration right after easy-api (I've been meaning to look at easy-api anyway).16:23
ttxsoren: your patch apparently fixes the bug alright. Reviewing branch now16:24
ttxsandywalsh: your choice ;)16:24
*** phymata has joined #openstack16:24
*** reldan has quit IRC16:26
*** pvo_away is now known as pvo16:29
*** matclayton has joined #openstack16:30
trin_czanyone: how do I run an instance without a ramdisk? euca-run-instances cannot find ari-11111 ... which I assume is a default value for the ramdisk id16:30
*** reldan has joined #openstack16:34
sorentrin_cz: You just have to run a newer version of Nova.16:35
*** reldan has quit IRC16:36
*** reldan has joined #openstack16:37
colinnichanother swift question - what is the sensible maximum number of objects in a container?16:38
*** dfg_ has joined #openstack16:38
*** trin_cz has quit IRC16:38
*** brd_from_italy has quit IRC16:42
*** DigitalFlux has quit IRC16:49
*** ccustine has joined #openstack16:54
creihtcolinnich: depends on how you define sensible :)16:56
creihtalso depends on how you are using the container16:56
creihtthe container is a sqlite db, so as you add more and more objects, the db gets larger16:56
creihtand requests that require hits to the container get a little slower16:56
colinnichcreiht: in the context of a backup client - so storing potentially millions of file parts16:57
creihtSo listings will get a bit slower16:57
sorenttx: Thanks for catching the version.py stuff on that branch. Fixed now.16:57
ttxre-reviewing16:58
creihtobject PUTs can get a little slower, and the consistency window gets a little longer16:58
*** mdomsch has quit IRC16:58
creihtThe problem gets worse if you are doing a lot of PUTs concurrently to the same container16:58
creihtOur testing has indicated that it becomes noticeable on the order of millions of objects in a container16:59
*** DubLo7 has quit IRC17:00
colinnichcreiht: ok, thanks17:00
dabosoren: your DH code has been implemented and pushed.17:01
soren\o/17:01
creihtcolinnich: does the backup client upload the data with any concurrency?17:02
*** troytoman has joined #openstack17:03
*** rnirmal has quit IRC17:03
colinnichcreiht: not sure, it doesn't exist yet - was talking to someone earlier who had an idea and was considering swift as a back end17:03
creihtahh17:04
colinnichcreiht: his only question I couldn't answer :-)17:04
creihtcolinnich: we also have some ideas on how to distribute the containers accross the cluster17:04
creihtwhich would make containers unlimited17:05
creihtcolinnich: also, as a side note, if he can work the backup client to distribute the data among several containers, then those problems go away17:05
* ttx breaks for dinner, bbl17:06
creihtas swift doesn't limit the containers like s3 does17:06
colinnichcreiht: ok, I'll pass that on, thanks17:06
*** timrc has quit IRC17:07
*** larstobi has joined #openstack17:07
*** guigui has quit IRC17:11
* soren goes to dinner17:12
*** Ryan_Lane|away is now known as Ryan_Lane17:13
*** timrc has joined #openstack17:16
*** westmaas has joined #openstack17:19
*** pvo is now known as pvo_away17:20
*** omidhdl has joined #openstack17:27
*** rlucio has joined #openstack17:33
*** mjmac_ is now known as mjmac17:38
*** rlucio has quit IRC17:38
*** ibarrera has quit IRC17:44
*** joearnold has joined #openstack17:46
*** MarkAtwood has joined #openstack17:50
*** maplebed has joined #openstack17:55
*** jdurgin has joined #openstack17:58
*** pvo_away is now known as pvo18:05
anticwwhat is the main branch/location on launchpad for swift (where releases come from)?18:05
creihtanticw: lp:swift18:05
creihthttps://launchpad.net/swift/trunk18:06
anticwthanks, that's what i was after ... some loads lead to .../~swift/ which has no active branches, and there is swift-core as well ... which has some other work18:07
creihtanything prefixed ~ is a group in lp18:07
creihtand yeah it can get a bit confusing18:07
creihtcompounded with the large number of groups that we have18:08
*** piken_ has quit IRC18:18
openstackhudsonProject nova build #400: SUCCESS in 1 min 23 sec: http://hudson.openstack.org/job/nova/400/18:23
openstackhudsonTarmac: Fixes related to how EC2 ids are displayed and dealt with.18:23
openstackhudsonAdditionally adds two flags that define a template string that is used for the internal naming of things (like the volume name of a logical volume on disk), default being similar to the EC2 format, so that the ids are easy to match while testing when you may need to manually delete or check something.18:23
*** DubLo7 has joined #openstack18:23
*** irahgel has left #openstack18:24
*** johnpur has joined #openstack18:24
*** ChanServ sets mode: +v johnpur18:24
*** kpepple has joined #openstack18:27
*** Cybo has joined #openstack18:29
*** aliguori has quit IRC18:30
*** aimon_ has joined #openstack18:32
*** reldan has quit IRC18:33
*** dirakx has joined #openstack18:34
*** adiantum has quit IRC18:34
jeremybcreiht: ~ can also mean user (not group) right?18:36
*** aimon has quit IRC18:36
*** aimon_ is now known as aimon18:36
jaypipescreiht, wreese: lemme know if you guys want/need any help automating i18n stuff for Swift.18:37
*** opengeard has joined #openstack18:41
sandywalshtermie around?18:43
*** ccustine has quit IRC18:44
*** omidhdl has quit IRC18:45
*** ugarit has joined #openstack18:48
*** ccustine has joined #openstack18:48
*** ccustine has quit IRC18:54
*** pvo is now known as pvo_away18:55
mtaylorsoren: your patch has been merged into hudson trunk - but I have taken credit for it18:59
*** hggdh has quit IRC19:00
*** aliguori has joined #openstack19:05
openstackhudsonProject nova build #401: SUCCESS in 1 min 27 sec: http://hudson.openstack.org/job/nova/401/19:08
openstackhudsonTarmac: Add a new method to firewall drivers to tell them to stop filtering a particular instance. Call it when an instance has been destroyed.19:08
openstackhudsonUse dict()s (keyed off id's) instead of set()s for keeping track of instances and security groups in the iptables firewall driver. __eq__ for objects from sqlalchemy fetched in different sessions doesn't work as expected, so I needed to explicitly filter on ID.19:08
ugaritis if one installs openstack will one have an identical platform as http://nebula.nasa.gov19:09
ugaritlet me try one more time :-)  if one installs openstack will one have an identical platform to http://nebula.nasa.gov?19:11
uvirtbotNew bug: #702549 in nova "OS API looking up wrong instance ID for 'show'" [Undecided,New] https://launchpad.net/bugs/70254919:11
kpeppleugarit: you should ask some of the anso labs guys about this — maybe vishy ?19:12
vishyugarit: no19:12
kpeppleugarit: AFAIK, no openstack != nebula19:12
vishyugarit: you will have a comparable backend19:12
ugaritvishy : so what wud be different?19:13
vishyugarit: no web interface for one19:13
ugaritah19:13
ugaritso web interface is not open source?19:14
vishyugarit: you need this too https://launchpad.net/openstack-dashboard19:14
vishy:)19:14
vishyand you will probably need to do some customization19:14
ugaritis the dashboard a web interface?19:14
vishynebula is based on openstack19:14
vishyyes19:14
ugaritthanks vishy19:15
ugaritcan openstack instanciate MS Windows VMs?19:15
ugaritso nebula's web interface is not https://launchpad.net/openstack-dashboard ?19:16
vishyugarit: bexar can, but it will require a customized interface19:16
vishyugarit: nebula is based on openstack + openstack-dashboard19:16
vishys/interface/windows instance/19:16
*** reldan has joined #openstack19:17
ugaritwhat's bexar?19:17
edaybexar is the name for the current release we're working on19:18
ugaritwhy did NASA call it nebula? People tend to now confuse it with http://opennebula.org19:19
*** Ryan_Lane is now known as Ryan_Lane|away19:21
*** arthurc has quit IRC19:22
*** befreax has quit IRC19:23
ugaritvishy what kind of customization would one have to perform on openstack+openstack-dashboard ?19:23
vishyugarit: don't ask me about the naming19:25
ugarit:-)19:25
vishyugarit: if you get them both running together you will have an approximation of nebula19:25
*** allsystemsarego has joined #openstack19:25
ugaritcool19:25
vishyugarit: gl19:25
ugarit?19:26
ugaritis openstack OCCI compliant ?19:26
*** daleolds has joined #openstack19:26
kpeppleugarit: are you asking if nova implements the OCCI api ?19:31
ugarityes19:32
kpeppleugarit: in progress. see here - http://occi-wg.org/2010/12/14/occi-in-openstack/19:32
ugaritgreat. thanks kpepple19:33
*** dendrobates is now known as dendro-afk19:35
*** dendro-afk is now known as dendrobates19:35
*** sophiap has quit IRC19:39
*** ccustine has joined #openstack19:47
*** fabiand_ has joined #openstack19:47
*** Tushar has joined #openstack19:52
*** pvo_away is now known as pvo19:52
*** pvo is now known as pvo_away19:52
*** pvo_away is now known as pvo19:52
*** masumotok has joined #openstack19:55
*** skrusty has quit IRC19:56
sandywalshdamn, I wish you could edit merge-prop comments after submission.19:57
masumotokHi, does anyone know that how to write down more than 2 reviewers when I submit merge proposal?19:58
masumotokat the last IRC meeting, I think ttx said that  adding him as a reviewer, but other people already gave me review, so as for me, I need to write down 2 reviewers to next merge-proposal20:00
*** fabiand_ has quit IRC20:01
sandywalshxtoddx, when you push your changes please let me know. But, as I mentioned, even when I fixed it locally I still got the other exception: 'module' object has no attribute 'API'20:01
ugaritwhen is the next openstack summit?20:04
*** adiantum has joined #openstack20:04
sandywalshlast was in Nov and it's every 6 months20:05
*** brd_from_italy has joined #openstack20:06
ugaritdo I need to use PXE boot with Openstack ?20:06
ugaritnvm. not a good question20:07
*** fabiand_ has joined #openstack20:07
creihtjeremyb: ahh true20:07
*** kpepple has left #openstack20:07
creihtjaypipes: I think redbo has most of the stuff we need in swift for the i18n logging, so I would get with him to figure out the next steps20:07
creihtand thanks :)20:08
glencugarit: openstack summit is april 26-29 in santa clara, ca20:09
ugaritnice location :-)20:09
ugaritis there a link for that info?20:09
*** skrusty has joined #openstack20:10
Xenithugarit: http://wiki.openstack.org/Summit/Spring201120:10
ugaritXenith thanks20:11
jeremybany examples of people that have hit a wall with swift write or read throughput?20:13
* jeremyb was chatting elsewhere about how to expose swift to other services (not openstack) and the outside world20:14
*** matclayton has left #openstack20:14
jeremyb08 05:06:45 <+redbo> I wouldn't expose it directly to public traffic20:14
*** trin_cz has joined #openstack20:15
TusharToday is a featurefreeze day, can someone please review ipv6 branch?20:15
Tusharhttps://code.launchpad.net/~ntt-pf-lab/nova/ipv6-support/+merge/46103?20:15
jeremybdoes that mean simple load balancing isn't enough?20:15
dragondmTushar: I've been looking at the ip6 code, I can put in a review20:15
creihtjeremyb: in the end, the throughput is going to be determined by how many proxies and storage nodes you have20:16
jeremybcreiht: sure20:16
jeremybcreiht: but if you're at 20% capacity for storage then adding storage nodes may not be the best solution20:17
creihtahh20:17
Tushardragondm: thanks.20:17
jeremyball speculation20:17
creihtjeremyb: so as a reference point20:17
creihtwe currently have a layer of proxy servers that are public facing20:17
creihtand a layer of storage nodes that are on the private network20:18
jeremybi know, and you can't tell me anything about them20:18
creihtlol20:18
creihtwhat I can tell you is...20:18
creiht:)20:18
creihtFor PUT throughput, given enough bandwidth, our proxies max out at 1500-2000 PUTs/s20:18
creihtso each proxy we add gives us the capability to handle another 1500-2000 PUTs/s20:19
creihtat that rate for PUTs, a single proxy can saturate around 4 storage nodes20:19
jeremybany rough idea how many proxies there are?20:19
creihtthat's the part I can't talk about right now :/20:20
*** fabiand_ has quit IRC20:20
jeremybyou can't say 10 vs. 10k ? :/20:20
creihtGETs are a lot faster20:20
creihtlol20:20
jeremyb(all of this is per DC?)20:20
creihtyes20:21
creihtjeremyb: perhaps it might be easier to talk about a config you are looking at, or what type of performance you are looking for, and we can work from that?20:21
jeremybcreiht: well i was mainly not asking for myself, asked nelson__'s partner to /j a few mins ago20:22
jeremybcreiht: they're currently attempting to figure out what the volume is (including peak max) for wikimedia with the current system20:23
creihtAnother thing is that we try to optimize for PUT performance as much as possible, since GET performance is going to be way faster20:23
creihtand DEL performance is pretty similar to PUT performance20:24
*** larstobi has quit IRC20:27
burrisok, I see stats collector and log uploader has to run on each account server, and syslog-ng + log uploader has to run on each proxy server, do we just run one log-stats-collector per cluster?20:30
vishysoren: have you had a chance to look at cow-images branch yet?  Do you think it should be pushed as well?20:30
*** ccustine has quit IRC20:30
creihtnotmyname: -^20:30
*** hggdh has joined #openstack20:31
notmynameburris: yes20:31
burristhx20:32
sorenvishy: I glanced at it when you proposed it, but then forgot again.20:33
tr3bucheti got tired of looking up the 9 commands it takes to register an image with euca, made a fairly useful script for taking care of it: https://github.com/tr3buchet/euca-register-image20:33
sorenvishy: I have two other reviews I've promised to do. If I'm still alive afterwards, I'll review the cow thing.20:34
vishyk thix20:34
*** drico has joined #openstack20:34
sorenvishy: I wonder, though, why you stopped passing an execute argument to the various methods?20:35
vishysoren: because we only have one execute now,20:35
vishysoren: i didn't see the point in passing it all over the place20:35
sorenvishy: Oh, that's why it was passed as an argument?20:36
sorenvishy: I thought it was for testing purposes.20:36
uvirtbotNew bug: #702580 in nova "Degister image with invalid Id raises UnknownError" [Undecided,New] https://launchpad.net/bugs/70258020:36
vishysoren: no it was because we had utils.execute and twisted process execute20:36
sorenOh.20:36
sorenHm. Ok.20:36
sorenwell, I guess once I start adding tests for all this stuff I can add it back.20:36
burriswill multiple stats collector processes clobber each other?  can we run multiple ones?20:38
vishysren: we should probably actually make execute in utils stubbable20:40
vishysoren: ^^20:40
*** sophiap has joined #openstack20:40
sorenvishy: Yeah.20:41
sorenvishy: Hey, wanna trade?20:41
sorenvishy: If you review https://code.launchpad.net/~ntt-pf-lab/nova/ipv6-support/+merge/46103,  I'll review the cow thing instead.20:41
vishysoren: I assume that your iptables sec groups will not work with ipv620:41
vishyi'm reviewing it right now20:41
sorenvishy: Yeah, it won't work.20:42
sorenvishy: I don't think it's hard, it's just that I needed the ipv6 address of the guest to be able to set up the rules, and I didn't want to define how that datamodel would look like, seeing as I haven't a clue about ipv6.20:42
sorenvishy: ...but once ipv6 lands, it should be reasonably straightforward to add iptables filtering for it.20:43
sorenvishy: Cool beans. I'll review the cow stuff.20:43
notmynameburris: sorry. been busy with some other stuff and I haven't been paying attention20:46
burrisno sweat, I'm getting much more than I paid for20:46
*** fabiand_ has joined #openstack20:47
*** littleidea has joined #openstack20:47
ttxmasumotok: once the proposal is created, you can add reviewers20:47
notmynameburris: so it looks like 2 log-stats-collector processes can clobber each other. I have a merge proposal to fix that, but it hasn't been approved yet20:47
notmynameburris: but each copy will spawn enough child processes to max the machine20:48
ttxmasumotok: using the "request a review" button at the bottom of the reviewers list20:48
sorenvishy: Have you benchmarked qemu-nbd much?20:48
sorenvishy: Well, qemu-nbd itself is probably fine, but how much overhead does it add to go through it?20:49
vishysoren: not sure, but it just for compatibility in key injection.  IMO key_injection should ultimately be removed20:50
burrisnotmyname, i see the bug about firing off another collector before the previous was done, but what about two collectors running at the same time on separate machines?  do we have to pick a single machine to run this on at a time?20:50
vishysoren: definitely it is a net win in time to launch20:50
sorenvishy: Oh, I didn't realise that's what it was for. Haven't made it that far in the patch yet.20:51
vishysoren: meaning that the time saved by using CoW dramatically outweighs the overhead of qemu-ndb20:51
sorenvishy: But yes, key injection is a crime. It needs to stop.20:51
notmynameburris: that won't cause a problem, but it isn't multi-machine aware. both will end up doing the same thing (unless you have 2 separate stats accounts too)20:51
vishys/ndb/nbd/20:51
sorenvishy: It's only used during bootstrapping, you say?20:52
vishysoren: i think it only makes sense in dev mode, and now that we have ami-tty and working metadata i'm not sure it makes sense at all20:52
notmynameburris: future versions should be able to be scaled out, but it's good enough for now that we can use it to parse 1 hour's logs in less than an hour20:52
masumotokttx: understand. I added you as a reviewer. please review live migration branch20:52
vishysoren: correct it mounts it only to inject the key/network20:52
ttxmasumotok: you don't need my approval before FeatureFreeze hits. I'm not a -core member so I don't count towerds the two necessary approvals20:53
vishysoren: going to lunch bbs20:53
ttxmasumotok: there still is ~11h to the freeze20:53
*** adiantum has quit IRC20:53
vishymasumotok: I will review that branch after lunch20:53
masumotokvishy: thank you! I'm looking forward to check your comments!20:54
sorenvishy: If it's only for injection, what's the point?20:54
sorenvishy: Oh, to support qcow2?20:54
sorenvishy: Right, that makes sense. Ok.20:55
masumotokttx: thanks! I almost forget I need two approval.. :)20:57
*** ugarit has quit IRC20:57
*** adiantum has joined #openstack20:58
*** adiantum has quit IRC21:05
*** littleidea has quit IRC21:06
*** brd_from_italy has quit IRC21:08
*** adiantum has joined #openstack21:11
*** nati has joined #openstack21:13
*** reldan has quit IRC21:14
*** johnpur has quit IRC21:16
*** Cybo has quit IRC21:18
*** Ryan_Lane|away is now known as Ryan_Lane21:19
*** hadrian has quit IRC21:20
*** hadrian has joined #openstack21:20
*** fabiand_ has left #openstack21:21
*** adiantum has quit IRC21:24
*** DubLo7 has quit IRC21:24
*** adiantum has joined #openstack21:28
*** johnpur has joined #openstack21:34
*** ChanServ sets mode: +v johnpur21:34
*** flipzagging has joined #openstack21:37
*** Dweezahr has joined #openstack21:37
*** adiantum has quit IRC21:38
*** sophiap has quit IRC21:38
*** miclorb_ has joined #openstack21:42
ttxsoren: Looks like https://code.launchpad.net/~rconradharris/nova/xs-snap-return-image-id-before-snapshot/+merge/45494 just need a flip of status21:42
ttxsoren: if you agree with the latest answer to your question21:42
*** adiantum has joined #openstack21:44
ttxsame for https://code.launchpad.net/~ed-leafe/nova/xs-password-reset/+merge/4553721:44
*** reldan has joined #openstack21:48
*** Jbain has quit IRC21:49
*** daleolds has quit IRC21:49
*** rlucio has joined #openstack21:51
*** larstobi has joined #openstack21:52
* ttx goes to bed21:53
*** ctennis has quit IRC21:53
natiI fixed ipv6 branch just now.21:55
natiI'm worrying about ipv6 branch will not be merged in today. Muu.. What should I next?21:56
sorenThere's an exception process.22:07
sorennati: ^22:07
*** adiantum has quit IRC22:07
*** aimon has quit IRC22:07
sorenIt's not that I don't want to review it. I just don't really feel qualified to do so. ipv6 is black magic to me.22:07
*** aimon has joined #openstack22:08
sorenI've onced pinged a machine over ipv6. That's the only ipv6 experience I have.22:08
*** ctennis has joined #openstack22:08
*** ctennis has joined #openstack22:08
natisoren: Thank you for your review. I'll try exception process if our code is not merged.22:09
sorenvishy: cow branch reviewed. A couple of things to address. If you can do so within the next half hour or so, I'll be happy to approve.22:09
*** aimon_ has joined #openstack22:10
vishysoren: thanks I saw it.22:10
vishyI will be fixing asap22:10
soren\o/22:10
*** aimon has quit IRC22:12
*** aimon_ is now known as aimon22:12
*** adiantum has joined #openstack22:12
*** troytoman has quit IRC22:14
natisoren: A professional of IPv6 in my company ( NTT which is teleco in Japan) also reviewed IPv6 code. He was worked NGN (Which is very large scale NW in Japan). So we think code is ok on aspect of IPv6.22:15
natisoren: In addition, we wrote smoke test for IPv6.22:17
natiAnyway, would you please feel free to ask about IPv6 for us.22:18
*** westmaas has quit IRC22:18
*** allsystemsarego has quit IRC22:19
sorennati: The one question I had seems to have not been answered. The one about "link local" addresses.22:19
natiSorry! I'll check it.22:20
sorensandywalsh: around?22:20
nati get_my_linklocal is intendted to get ipv6 linklocal address.22:21
sorensandywalsh: Have you concerns been adressed on https://code.launchpad.net/~ed-leafe/nova/xs-password-reset/+merge/45537 ?22:21
sorennati: Yes, that's what the method name suggests. However, that doesn't seem to be what the method does.22:22
sorennati: Again, this is me not knowing anything about ipv6, so I looked it up on Wikipedia. Wikipedia says that link local addresses in ipv6 are in the fe80::/10 range.22:23
sorennati: Yet, as far as I can tell, that method just gets the ipv6 address of a given interface.22:23
natiOK I get your point . Should I change method name for get_linklocal_v6 ?22:23
sorenI don't know :)22:24
sorenI don't know if it's really supposed to find link local addresses or if it's supposed to find the ipv6 address.22:24
sorenIt just seems to me that what the method name suggests the method is going to do doesn't match what it actually does.22:25
sorenI think.22:25
sorenAgain, ipv6 == magic.22:25
natiIt supposed to findd link local because we use inet6 and Scope:Link in regular expressions.22:25
sorenvishy: How's your ipv6-fu?22:25
uvirtbotNew bug: #702636 in nova "Adding existing group gives weird error message" [Undecided,New] https://launchpad.net/bugs/70263622:26
vishysoren: can't say i know much about it :(22:26
sorennati: Can you give me an example output of "ip -f inet6 -o addr show %s" % interface ?22:26
sorennati: Maybe that will help me understand.22:26
*** ppetraki has quit IRC22:27
natisoren: OK I write a example on https://code.launchpad.net/~ntt-pf-lab/nova/ipv6-support/+merge/4619222:28
natiWe can get ipv6 address using -f inet6  option.22:29
natiThe scope in output means type of ipv6 address,and "link" is linklocal.22:29
Xenithsoren: It grabs the link-local address, as far as I can tell.22:31
Xenith"3: eth0    inet6 fe80::21a:92ff:fe2f:8181/64 scope link \       valid_lft forever preferred_lft forever"22:31
Xeniththe "scope link" bit is the key.22:31
XenithWhich is what the function matches on.22:32
*** phymata has quit IRC22:32
natiXennith : yes. Thank you :)22:32
termiesandywalsh: i am now22:33
termiesandywalsh: i didn't update the blueprint :(22:33
termiesandywalsh: got sidetracked22:33
termieby packaging and installation hackation22:33
sorentermie: Where are you located nowadays?22:36
termiesoren: San Francisco, California22:36
sorentermie: Ah. Didn't realise you left Berlin :)22:36
Xenithtermie: Lovely weather today, no? :)22:37
natiIt is also lovely in Japan too. But it is very cold now :)22:38
termieXenith: at least rain usually means it isn't so cold22:39
termiesoren: aye, was a whole two months in Tokyo between there and here, too22:40
sorentermie: Fascinating.22:40
termiesoren: isn't it though? I'm sure we could talk all day about it.22:40
termiealso, foam bath stickers22:41
termienever had them as a kid but i am on a mission to purchase them for small people i know22:41
sorenFoam bath stickers?22:41
termiethey are foam and when they get wet the stick to the walls in the bathroom next to the tub22:42
sorenAwesome.22:42
termieso you can make stuff and play with it22:42
termiei had i think a scuba diver dude that never really worked well22:43
termieand maybe a dinosaur22:43
termiebut these stickers would have made my day22:43
termiei had i think a scuba diver dude that never really worked well22:43
termieerm22:43
termiehttp://www.bestdressedkids.com/proddetail.php?prod=14611922:43
sorenI don't even remember being bathed.22:44
natisoren: Thank you for your approve22:46
sorenSure.22:47
XenithIPv6 is my thing, so its one of the aspects of nova I plan to keep track of. Just gotta learn python. :)22:47
natiXenith : Oh really? It sounds great! :)22:48
nativish: If you don't mind, please approve IPv6 branch.22:49
XenithI work at Hurricane Electric, kind of a job requirement. :)22:49
*** rlucio has quit IRC22:49
sorenXenith: Oh.22:51
sorenXenith: Cool!22:51
*** zul has quit IRC22:52
natiWe are discussing about nova IPv6 demo. For example, 500 instance have public IP address,and run p2p application.22:53
sorenOne thing about ipv6 that I keep hearing that makes absolutely no sense to me is that it allegedly doesn't support NAT.22:53
sorenI don't see how that even makes sense.22:53
creihtNAT is so ipv422:54
pquernamm? i mean, you *could* NAT in ipv6, but the only reason would be to 'firewall' things22:54
*** hggdh has quit IRC22:54
natiWe needs NAT because the number of IPv4 is small. In IPv6, we have fuge addresses,so we don't needs NAT in IPv6.22:54
pquernabut even then, its prolly best to have a good firewall setup.22:54
natipquerna: Yes :)22:54
sorenWell, either firewalling or to just pass connections on to another host, transparent to the client.22:55
natiNAT is not for security.22:55
Xenithsoren: NAT66 is what NAT for ipv6 is called22:55
jk0soren: there is no need for NAT22:55
jk0everything is routable22:55
XenithIt exists, just a lot of IPv6 professionals hate NAT, so are always trying to talk people out of using it.22:56
*** Jbain has joined #openstack22:56
jk0you can still control the "LAN" by setting up rules for your /whatever on your router22:56
natijk0 : Yes.22:56
jk0it's what I do for my /4822:57
sorenjk0: I don't necessarily want to route. What if I want to have clients hit a single address, but pass the connection on to another host than the one actually holding that address?22:57
pquernayou mean a proxy?22:57
sorenYes.22:57
pquernaor load balancer really.22:57
Xenithsoren: In reality, you don't really need NAT on v6, just a stateful firewall.22:57
sorenYeah.22:57
jk0yeah, that would be LB22:58
jk0same idea, just no natting22:58
pquernayou can still do that22:58
pquernaexactly22:58
sorenSo when people say NAT isn't supported, they're full of it?22:58
sorenThat's ok.22:58
XenithYes and no :)22:58
sorenWell, it's not, they should shut up, but that at least makes sense.22:58
natiWe can also set one IPv6 address for multiple host. http://ezinearticles.com/?Ipv6-Anycast-Addresses&id=375502522:58
jk0I'm not sure what they mean by referring to anything related to NAT with IPv622:58
XenithLike regular NAT, NAT66 is just an extension, its not built into the protocol.22:59
sorenFor instance, ip6tables doesn't offer me neither DNAT nor SNAT.22:59
sorenWhat's up with that?22:59
jk0it's not needed22:59
jk0you don't need to translate any ports since each node has their own routable IP23:00
*** DubLo7 has joined #openstack23:00
jk0ip6tables could be used for allowing certain traffic on certain ports to IPs or block behind your router23:00
Xenithsoren: NAT66 is technically an experimental proposal, so no one really implements it.23:00
sorenRight now, I often use DNAT if I move a service from one box to another. Until DNS catches up, I use NAT to get the connections to where they need to be.23:01
XenithYou can just using proxying for that.23:01
uvirtbotNew bug: #702651 in nova "libvirt_conn chmods instance dirs 777" [Undecided,New] https://launchpad.net/bugs/70265123:01
sorenYes.23:01
sorenProxying is one application for NAT.23:01
sorenI'd like to have my kernel do it.23:01
jk0it's a completely different mindset, just takes some time playing with/getting used to23:01
sorenInstead of expensive userspace things.23:01
*** lvaughn_ has quit IRC23:01
jk0IPv6 is what IPv4 intended to be23:02
XenithWhat jk0 said. Don't think of IPv6 in IPv4 terms.23:02
XenithThey don't map one-to-one.23:02
*** lvaughn has joined #openstack23:02
sorenSo how do I get started?23:03
*** Tushar has quit IRC23:03
jk0head to tunnelbroker.net and get a /64 or /4823:03
sorenI already have an account there, I think.23:04
jk0then setup a tunnel on your router/linux box, and install radvd23:04
sorenIt's just not much use to me if I'm going to use it ALL WRONG.23:04
jk0once your tunnel is up, radvd will allow all of your clients on the LAN to automatically pick up an address23:04
jk0and it will "just work"23:05
jk0but I suggest using ip6tables on your tunnel box to secure things23:05
sorenI've heard that before :)23:05
Xenithsoren: Just start with getting outbound ipv6 connectivity working on your local network. Build up, no need to jump right into the crazy v6 forwarding stuff :)23:05
* soren takes a quick break23:06
jk0it's actually really fun to play with23:06
natijk0: Yes. I like v6. I think design of v6 is cool. :)23:07
jk0it's amazing. I can't wait unil everyone is forced to use it :)23:07
natijk0: We can use v6 on next nova :)23:09
jk0:D23:09
sorenI think I already have a tunnelbroker.net account.23:11
jk0log in and check it out, they give you copy/paste directions for setting up the tunnel23:12
jk0it's just a matter of assigning a client /64 to an interface23:12
sorenOh, yeah, this looks familiar.23:13
Xenithjk0: Well, if you're terminating the tunnel on your workstation instead of a router, you don't need to do that.23:13
jk0once that is done, you'll want to assign an IP on your own /64 to eth0 (or whatever is on your LAN)23:13
jk0ah, I assumed he was setting it up on the LAN23:14
*** rlucio has joined #openstack23:14
sorenI somehow doubt my router groks ipv6.23:14
XenithWhat kind of router?23:14
sorenNetgear.23:14
sorenVVG2000.23:14
jk0you don't have to set it up on your router if you have a linux box23:14
jk0radvd will take care of that for you23:15
sorenI have one of those.23:15
sorenOk, so I've run the commands tunnelbroker told me to.23:15
sorenHow to test if it works?23:15
jk0ping6 ipv6.google.com23:15
sorenWhat to ping?23:15
sorenNo luck.23:16
vishysoren: pushed code and comments23:16
natisoren: If you run ipv6 branch, it installs radvd.23:16
sorenvishy: \o/23:16
Xenithsoren: What's the output say?23:16
jk0oh, I know why23:16
jk0you probably need to update your client IPv4 address in tunnelbroker23:17
jk0http://tunnelbroker.net/ipv4_update.php?tunnel_id=<tunnel id>23:17
Xenitha23:17
*** adiantum has quit IRC23:17
*** fcarsten has joined #openstack23:18
XenithActually, my question is, which client ipv4 address did he use in the commands to create the tunnel?23:18
*** Tushar has joined #openstack23:18
jk0no need to specify that in linux23:18
XenithMost people don't notice that if they are behind a NAT devise (like soren is) they need to use their dhcp-given internal IP instead of the public IP.23:19
jk0hm, I dunno about that.. I use my public IP23:19
jk0you might be right though23:19
fcarstenSwift question: I'm looking for some examples of swift usage in production environments. Is Rackspace using swift in its own production environment? Any other big users?23:20
creihtfcarsten: Swift is what currently backs Rackspace's cloud files23:21
creihtNASA is using it23:21
creihtcloudscaling is setting it up for some customers23:21
sorenXenith: My internal IP? How do the packets find their way back?23:21
jk0I would try on your public IP first23:21
Xenithsoren: That's what NAT is doing.23:22
XenithSee why NAT is confusing? :)23:22
natiI should go. Bye  :)23:22
*** nati has quit IRC23:22
sorenXenith: The ipv4 endpoint I tell tunnelbroker about should be... what? My external IP?23:23
Xenithsoren: Your NAT device basically sees the tunnel traffic as any other IP traffic, and NATs accordingly. The reason you need to use the private IP when creating the tunnel is because your local system needs to know which IP/interface to attach the tunnel to.23:23
Xenithsoren: The one you tell tunnelbroker should be the public IP.23:23
sorenXenith: Yeah, that makes sense.23:23
sorenXenith: Gotcha.23:23
fcarstencreiht: thanks. Do you know if Rackspace (and NASA) use additional back-up methods or soley rely on swift replication for redundancy / disaster recovery?23:23
*** adiantum has joined #openstack23:23
creihtfcarsten: We rely on the swift replication/redundancy23:24
* jk0 uses his Cisco 871 for this23:24
creihtfcarsten: I'm on the cloudfiles team :)23:24
*** pvo is now known as pvo_away23:24
jk0but I did it on Linux first for testing23:24
*** pvo_away is now known as pvo23:25
*** pvo is now known as pvo_away23:25
jk0it works surprisingly well. even my wife Vista laptop picked up an address23:25
jk0*wife's23:25
XenithI just replaced my cisco 2651 with a juniper srx100. Works a lot nicer.23:26
jk0haven't had the pleasure of using Juniper routers23:26
XenithThough for some reason that I haven't had time to debug slaac doesn't work on it.23:26
XenithOtherwise ipv6 works great. (Just gotta give systems static IPs)23:26
jk0I've played with their proxy appliances years ago23:26
jk0ah23:26
jk0well that's not too bad23:27
*** aliguori has quit IRC23:28
fcarstencreiht: thanks. Did you do any risk analysis for this? And if yes, is it available (methodology description and results)?23:28
*** jimbaker has quit IRC23:29
creihtfcarsten: does crossing fingers count? :)23:29
creihtfcarsten: there wasn't a formal risk analysis done23:30
fcarstencreiht: :-)23:30
fcarstencreiht: probably not good enough for our level of paranoia. Do you know if NASA did any risk analysis?23:31
creihtnot sure23:31
creihtdevcamcar: -^ ?23:31
creihtfcarsten: short story is, we store 3 replicas of every object23:32
creihteach replica is stored in a different isolation zone23:32
creihtthe isolation zone can be a server, a rack, by power source, etc.23:32
creihtwhich is a tool to allow you to remove the risk of failures prevent the availability of data23:33
vishyfcarsten: we don't have swift in production yet23:34
vishyfcarsten: so no formal risk analysis yet23:34
fcarstenvishy: thanks23:34
creihtfcarsten: is there any specific information about how this works that would help?23:35
*** Lcfseth has joined #openstack23:35
creihtI realized that I could talk quite a while about the things swift does to keep data available23:36
*** gondoi has quit IRC23:36
fcarstencreiht: The context for my question:23:36
jk0soren: any luck?23:36
fcarstencreiht: I've been playing around with swift a bit and it seems to work well enough for us (CSIRO) to consider starting using it internally.23:39
*** jimbaker has joined #openstack23:41
sorenjk0: Nope.23:41
jk0did you add the router?23:41
jk0*route23:41
creihtfcarsten: which part of the risk are you worried about? data loss?23:42
fcarstencreiht: The big question for me at the moment is "How much can we trust swift with our data?". Ie. is it stable / scalable enough for production use? The answer seems "Most likely and can be further evaluated by us". Is it save enough to run entrust our data without additional backup? The answer there is more unclear.23:43
jk0soren: oh, also: sysctl -w net.ipv6.conf.all.forwarding=123:43
fcarstencreiht: The general redundancy approach looks convincing, but the open question is how well it is implemented currently by swift. E.g. how likely is  it that there is a bug in swift whivch might cause all copies to get corrupted / deleted?23:44
notmynamefcarsten: to brag a little, thousands of rackspace customers trust swift with petabytes of data right now. we run it in production as Cloud Files23:44
sorenjk0: We think my router won't let me do it.23:45
jk0hm23:45
jk0the tunnel is created on the linux box itself though23:45
xtoddxsandywalsh: new wsgirouter branch available23:46
jk0oh, I wonder if perhaps protocol 41 is being filtered23:46
*** lvaughn_ has joined #openstack23:46
creihtfcarsten: so we start with 3 replicas of every piece of data23:46
*** dovetaildan has quit IRC23:46
creihtyou can actually use more replicas if you like, if the extra storage space isn't an issue23:46
xtoddxsandywalsh: it fixes nova-combined and the flags issue, as well as generally refactoring some of the paste stuff into nova.wsgi23:47
jk0soren: look around on your router for passing protocol 4123:47
creihtsecond, we isolate failure of those 3 replicas as high up the stack as possible23:47
fcarstennotmyname: I understand that and it is a very positive indicator. People here unfortunately will want to see something more formal :-(23:48
creihtso that we ensure that 2 or more replicas are not on only the same machine, but also in the same cabinent, or network, or power grid23:48
Xenithjk0: Yea, I think that's what the issue is, his router isn't passing protocol41 correctly.23:48
jk0soren: otherwise it might be time to switch to a better router ;)23:48
sorenjk0: That's what I've been doing for the past 10 minutes :)23:48
sorenjk0: Can't.23:48
jk0why not use a linux box?23:48
sorenjk0: It's from my ISP.23:48
jk0ah23:48
jk0well that sucks23:48
jk0I wonder if you could switch it to bridge mode23:49
creihtwhen objects are put into the system, it streams the object to all 3 replicas, and only reports success if at least 2 of the writes were successful23:49
*** lvaughn has quit IRC23:49
creihtall writes are fsynced to disk before reporting success to ensure they are not in volitile cache23:50
creihtreplication is push based and is always running on all the storage nodes in the cluster23:51
fcarstencreiht: thanks. I think that gives em enough information.  for now ;-)23:52
creihthehe23:52
creihtok23:52
*** sophiap has joined #openstack23:52
creihtfcarsten: if you want to dive deeper, let me know23:52
fcarstencreiht: ok thanks.23:53
*** nati has joined #openstack23:53
sirp-looks like we'll need glance on the Hudson server for xs-snaps to merge23:54
fcarstencreiht: one more :-) : Is it currently possible to have 5 zones distributed over 2 data-centers and guarantee that not all copies are in the same datacentre? (I understand 5 zones is the recommended number)23:55
jk0soren: google sure isn't any help when looking up your router model23:57
XenithSeriously.23:57
sorenTell me about it.23:57
jk0must be a very "special" model :)23:58
Xenithjk0: You might also be interested, but there is a #ipv6 channel that's pretty useful at times.23:58
creihtfcarsten: Not yet... There is a blueprint for that though, and is something we will probably be working on soon23:58
fcarstenthanks23:58
jk0Xenith: cool, thanks, I'll have to check that out some time23:58
*** dovetaildan has joined #openstack23:58
jk0soren: do you have DSL w/PPPoE?23:58
jk0if so I think you're better off flipping the modem to bridge mode23:59
jk0and let linux handle the pppoe23:59
creihtfcarsten: We will eventually want that, and NASA needs it as well23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!