Thursday, 2011-12-15

uvirtbotNew bug: #904529 in keystone "Schema of ec2tokens is incompatible with XML" [Undecided,New] https://launchpad.net/bugs/90452900:01
*** adjohn has quit IRC00:01
*** _adjohn is now known as adjohn00:01
jkylehow do you start up a vpn with nova-manage, diablo version?00:05
jkylethe docs say 'nova-manage vpn run <projectname>'. My nova-manage rejects that and says the proper syntax is nova-manage vpn run --project=<proj> --user=<user>00:07
*** sdake has quit IRC00:16
*** hugo_kuo has quit IRC00:22
*** katkee has joined #openstack00:23
*** HowardRoark has joined #openstack00:25
*** v0id has quit IRC00:26
*** dragondm has quit IRC00:27
*** nati2 has quit IRC00:28
*** nati2 has joined #openstack00:28
*** dolphm has joined #openstack00:29
*** koolhead17 has quit IRC00:33
*** dnjaramba_ has joined #openstack00:33
*** dnjaramba has quit IRC00:33
*** wilmoore_ has joined #openstack00:38
*** wilmoore has quit IRC00:40
*** PiotrSikora has quit IRC00:44
*** PiotrSikora has joined #openstack00:44
*** po has quit IRC00:49
*** MarcMorata has quit IRC00:50
*** cole has quit IRC00:51
*** anotherjesse has quit IRC00:55
*** zul has quit IRC00:57
*** dolphm has quit IRC00:59
*** katkee has quit IRC00:59
*** lloydde has quit IRC01:00
*** wilmoore_ has quit IRC01:06
comstudmisheska: openstack xenserver code retries if it notices the DomID change01:06
*** sdake has joined #openstack01:07
misheskaThanks!01:07
misheskaI'm not seeing this behavior though01:07
comstudmisheska: we're probably moving away from xenstore for communication... into something that can be used commonly between all hypervisors... but at the moment that's the only way to configure xenserver guests01:08
misheskaThanks for the update - I'll do some more digging - I hope it's just a config problem on my end01:08
*** pixelbeat has joined #openstack01:09
comstudmisheska: Ok.  yeah.. essentially there's a get_agent_version() piece of code in nova..  and that's where the waiting happens01:09
comstudmisheska: We want for agent reply.. in the middle of waiting, if we notice domID change, we start writing to the new domID01:09
misheskaThus you shouldn't need the a "guest agent ready" command in the protocol, right?01:10
*** matiu_ has joined #openstack01:10
comstuds/want/wait/01:10
comstudcorrect01:10
comstudThat was never implemented.. although that might have been handy ;)01:10
*** tungvs has joined #openstack01:11
misheskaThank you very much - at least I know now how it is supposed to work - much appreciated01:11
misheskacomstud: one other question, you say it starts writing to the new domID01:16
*** tryggvil_ has quit IRC01:16
misheskaWhat if the password request was on the old one, does it get rewritten to the new one?01:16
misheskaIf it doesn't that kinda explains the behaviour I'm seeing01:17
comstudno, it doesn't, because we get and wait for agent version first01:18
*** jj0hns0n has joined #openstack01:18
misheskaAh, so the use case I'm encountering is a Windows guest that Syspreps - thus it reboots01:19
comstudyes01:20
comstudthat's the same that we use01:20
comstudthe code flow in nova is this:01:20
comstudpower on the VM01:20
comstudsend guest agent 'version' command01:20
comstudwait for a period for response01:21
comstudif no response, try again... with current DomID01:21
comstudthat 'try again' happens for a while01:21
comstudonly after that do we try password, etc01:22
*** matiu_ has quit IRC01:22
comstudso essentially we keep retrying with the correct DomID until we get a response01:23
misheskaAh OK, so if this is working, I should be enabling the guest agent service AFTER Sysprep completes?  I've tried it both ways though, with the guest agent on the Windows image set to auto-start, then also setting it to start post-Sysprep01:23
comstudeven if DomID changes01:23
*** andrewsben has quit IRC01:23
comstudmisheska: Good question.. I'm not sure which way ours is configured01:23
comstudi would think that either one should work01:23
comstudmaybe post-sysprep is better01:24
*** dotdevops has quit IRC01:24
misheskaIt doesn't if you enable it first only because to prevent the Administrator password prompt from appearing you have to get Sysprep to set it - so it undoes the change the agent made - I verified this01:24
comstudmisheska: In your logs on the nova compute node, do you see a message like "domid changed from <x> to <y>" ?01:24
*** andreask has left #openstack01:25
misheskaNo, but we're on cactus code - that's probably part of the problem01:25
misheskaI'm working on getting us upgraded to diablo01:25
comstudOooh01:25
comstudYeah, that very well could be it01:25
comstudcactus might not have caught the DomID change.01:25
misheskaI'll compare them - I bet you added this in diablo - I have to check01:25
*** jj0hns0n has quit IRC01:25
comstudWe definitely made improvements in diablo01:25
misheskaThe guest agent code wasn't even made public until last December, I think, which would be in the diablo timeframe01:26
*** matiu_ has joined #openstack01:27
misheskaThanks, that gives me enough to go on - much appreciated01:27
*** matiu_ has quit IRC01:27
*** nati2 has quit IRC01:28
*** nati2 has joined #openstack01:28
*** nati2 has quit IRC01:30
*** tmichael has quit IRC01:31
*** nati2 has joined #openstack01:31
*** nati2_ has joined #openstack01:38
*** nati2 has quit IRC01:38
*** stewart has quit IRC01:39
*** stewart has joined #openstack01:40
*** lzyeval has joined #openstack01:40
comstudmisheska: No prob01:43
hugokuomorning01:43
misheskacomstud And yes I just verified that get_agent_version only exists in diablo01:44
misheskaTotally explains what I was seeing - thank you!  A big help to get confirmation on this without having to install diablo first ;-)01:44
comstudmisheska: Yeah, that makes sense.  I thought we were talking about diablo at first ;)01:44
*** tmichael has joined #openstack01:53
*** stewart has quit IRC01:54
*** nati2_ has quit IRC01:54
*** nati2 has joined #openstack01:54
*** pixelbeat has quit IRC01:56
*** stewart has joined #openstack01:57
*** RicardoSSP has quit IRC02:01
*** jkyle has quit IRC02:02
*** adjohn has quit IRC02:03
*** misheska has quit IRC02:05
*** rods has quit IRC02:05
*** rustam has quit IRC02:06
*** MarkAtwood has quit IRC02:08
*** ben_duyujie has joined #openstack02:12
*** osier has joined #openstack02:12
*** lorin1 has joined #openstack02:13
*** Ryan_Lane|away is now known as Ryan_Lane02:16
*** zul has joined #openstack02:18
*** rsampaio has joined #openstack02:18
*** jakedahn has quit IRC02:22
*** jdurgin has quit IRC02:22
*** matiu_ has joined #openstack02:27
*** matiu_ has joined #openstack02:27
*** lorin1 has quit IRC02:30
*** dpippenger has quit IRC02:30
uvirtbotNew bug: #904559 in nova "PEP8 errors too verbose" [Undecided,In progress] https://launchpad.net/bugs/90455902:31
*** wilmoore has joined #openstack02:31
*** longhudou has joined #openstack02:33
*** sdake has quit IRC02:34
longhudou2011-12-15 00:58:24,437 - DataSourceEc2.py[WARNING]: waiting for metadata service at http://169.254.169.254/2009-04-04/meta-data/instance-id02:34
longhudou2011-12-15 00:58:24,438 - DataSourceEc2.py[WARNING]:   00:58:24 [ 1/30]: url error [[Errno 111] Connection refused]02:34
longhudouanybody who can help02:34
longhudouthis is in the console.log02:36
mjforklonghudou: how many nodes in your install? guessing 202:36
mjforkor 2+02:36
longhudou302:36
longhudouone controller node02:36
mjfork2 computes?02:36
longhudoutwo compute node02:36
longhudouyes?02:37
mjforkis nova-network running on just the controller?02:37
longhudouyes02:37
mjforkok02:37
longhudounova-network is also running on the compute node02:38
longhudouis that right02:38
longhudou?02:38
mjforkunless you are going for multihost, no.02:38
mjforki would shut down nova-network on the compute nodes02:38
mjforkrun it only on the controller node02:38
*** 64MAABA57 has quit IRC02:38
longhudouI have tried that ,the same error02:38
mjforkok, shut it down on controoler nodes02:39
mjforkerr02:39
mjforkshut it down on compute nodes02:39
longhudouok02:39
mjforkafter that, go into mysql on controlller node and pastebin the output of SELECT * FROM networks;02:39
longhudouSELECT * FROM networks;you mean that02:40
longhudouERROR 1046 (3D000): No database selected02:41
uvirtbotNew bug: #904560 in nova "InvalidInstanceState 'Cannot wrapped_f while the instance is in this state.'" [Critical,New] https://launchpad.net/bugs/90456002:41
longhudoumjfork:ERROR 1046 (3D000): No database selected02:42
mjforkmysql nova02:42
mjforkor USE nova; in mysql02:42
longhudouDatabase changed02:43
longhudouafter USE nova;02:43
mjforknow SELECT * FROM networks;02:43
longhudouhttp://paste.openstack.org/show/3813/02:44
longhudouthis is the result02:44
mjforknova-cc your controller?02:45
longhudouyes02:45
*** HowardRo_ has joined #openstack02:46
*** HowardRoark has quit IRC02:46
mjforkok, you have have to restart the compute nodes (make sure nova-network is disabled)02:46
*** livemoon has joined #openstack02:46
mjforkwhat is EC2_URL on the compute nodes?02:46
longhudou--ec2_url=http://192.168.1.91:8773/services/Cloud02:47
longhudou91 is controller node ip_addr02:48
mjforkok - try restarting the compute node to clear the neworking chagnes from nova-network02:48
longhudouhttp://paste.openstack.org/show/3814/02:49
longhudouthis is the euca-describe-availability-zone verbose02:49
longhudouon controller node02:49
longhudouis that ok?02:49
mjforknova-mangage service disable nova-network nova-compute102:50
mjforknova-mangage service disable nova-network nova-compute202:50
mjforki think that02:50
uvirtbotNew bug: #904561 in nova "--just-pep8 prompts for virtual env creation" [Undecided,In progress] https://launchpad.net/bugs/90456102:50
*** flamboz has quit IRC02:53
mjforklonghudou: did that stop the service?02:53
mjforkor disable it i should say02:53
*** pradeep has joined #openstack02:55
longhudou2011-12-15 10:59:14,276 nova: No service for nova-network, nova-compute202:59
longhudoumjfork:02:59
mjforkreverse the last 2 args02:59
mjforknova-mangage service disable nova-compute1 nova-network02:59
longhudouthat is right03:00
longhudouand then?03:00
*** livemoon has quit IRC03:01
mjforkrun it for both nodes?03:01
longhudouyes03:01
mjforkdoes euca describe now show those nova-networks disabled?03:02
longhudouyes,I can not see nova-network on compute node03:02
longhudounow03:02
*** livemoon has joined #openstack03:03
mjforkok, then restart your nodes03:04
mjforkcompute nodes03:04
longhudouok03:07
longhudouI have restart them both03:07
*** vladimir3p has quit IRC03:07
longhudoumjfork03:09
mjforkyes03:09
mjforki would03:09
longhudou?03:11
mjforkoh, you did restart them03:11
mjforkrestart your guest, see if the error goes away03:12
longhudouanother problem come:from the compute node ,I can not ping the instance on the controller node03:12
longhudouseems that I don't have br0?03:13
longhudouon the compute node03:13
mjforkwhat is in the console log of the guets03:13
*** krow has joined #openstack03:13
*** mgius has quit IRC03:14
longhudouhttp://paste.openstack.org/show/3815/03:15
longhudouI think it is right03:15
mjforkyes, looksg ood.03:15
mjforkwhat is yoru networking? flat or flatdhcp03:15
*** MarcMorata has joined #openstack03:15
longhudouflatdhcp03:15
longhudouhttp://paste.openstack.org/show/3816/03:16
longhudouafter"brctl show "03:16
mjforkcan you VNC into your guest?03:17
longhudouthe first is on the controller node03:17
mjforkrun ipconfig and see if the IP is set03:17
longhudouand the second is on the compute node03:17
mjforkcan you use VNC to access your guest and see if the IP is set?03:18
longhudouyou mean the fixed Ip ?03:18
*** osier has quit IRC03:18
*** lmh_ has quit IRC03:18
longhudouor floating IP03:18
*** osier has joined #openstack03:18
mjforkany IP03:19
longhudouI can not use vnc to access it03:19
mjforkwhy is that?03:19
longhudoueven the controller node,03:19
mjforkvirsh list03:19
mjforkthen virsh dumpxml <instance name> | grep vnc03:20
longhudou 1 instance-00000039    running03:20
mjforkvirsh dumpxml  instance-00000039 | grep vnc03:20
longhudou <graphics type='vnc' port='5900' autoport='yes' listen='0.0.0.0' keymap='en-us'/>03:21
mjforkpoint VNC to port 5900 on that node03:21
longhudousorry,dont know how to do that03:22
longhudouwhat do you mean?03:22
mjforkdo you have a VNC viewer isntalled?03:23
*** lmh has joined #openstack03:23
longhudouI think yes03:23
longhudouwhen I use vncviewer in the command line03:24
longhudouVNC Viewer Free Edition 4.1.1 for X - built Apr  9 2010 15:52:3703:24
longhudouit shows that03:24
mjforkconnect to the IP address of of the machine running that guest03:25
longhudou vncviewer 10.0.0.2:590003:26
longhudou?03:26
*** mchenetz has quit IRC03:27
mjforksure, try that.03:27
longhudouhttp://paste.openstack.org/show/3817/03:28
longhudouthe result is like that03:28
mjforkdo you have X running?03:28
*** smashthestack has joined #openstack03:29
longhudouI am not sure03:29
longhudou?03:29
longhudouwhat is that03:29
longhudoujust a rookie,sorry to say that03:29
mjforkok, lets take a different approach03:30
mjforkmake sure debug/verbose is on in nova.conf on all your nodes03:30
longhudou--verbose ,set it true?03:31
mjforkyes, on all 3 nodes03:32
longhudouok03:33
longhudouI restart all the services03:33
longhudouon 3 nodes03:33
mjforkincluding nova-network on nova-cc?03:33
longhudouyes03:34
mjforkok03:34
mjforkthen provision a new server and pastebin nova-network.log from nova-cc and nova-compute.log from the host that gets the new VM03:34
longhudoua new server ? what is that , you mean an additional compute node03:35
mjforkno., sorry. a new guest03:37
longhudouI just delete all the nova-network.log,and then start a new guest ,,,,,,,,,,there is no nova-network.log on the controller node03:41
longhudouwhy?03:41
*** mdomsch has joined #openstack03:43
mjforkmay need to restart service03:43
mjforkafter deleting log file03:43
*** pradeep has quit IRC03:47
longhudouhttp://paste.openstack.org/show/3818/03:48
longhudouthe first before****************************is nova-network.log03:48
longhudouand  the latter is nova-compute.log03:49
mjforkyour glance server is not listening.03:49
mjfork192.168.1.20:929203:49
mjforkcan you telnet to that from the compute node03:50
longhudou20?03:50
longhudoumy controller node is 9103:50
mjforkglance, where is glance installed?03:51
longhudouon the controller node03:51
mjforkok, then fix the glance server in nova.conf03:52
longhudouwhen I use "telnet 192.168.1.91 9292" from the compute node03:52
longhudouTrying 192.168.1.91... Connected to 192.168.1.91. Escape character is '^]'.03:52
longhudouit  shows that03:52
mjforkyour compute node is looking @ .2003:53
mjfork glance_host : 192.168.1.20 in the log you pasted03:53
longhudoulet me have a look03:53
longhudou2011-12-15 11:45:07,238 nova: glance_host : 192.168.1.2003:54
longhudoufrom that?03:54
longhudouhttp://paste.openstack.org/show/3819/03:55
longhudouthis is the nova.conf on the compute node03:55
mjforkyou have a - not an =03:56
*** woleium has quit IRC03:57
mjfork--glance_host-192.168.1.91 should be --glance_host=192.168.1.9103:57
*** map_nw has quit IRC03:59
longhudouok, i see ,now let me have a try for another time03:59
*** map_nw has joined #openstack03:59
ipl31can someone tell me if it possible to have nova-network not change the IP of br100 in flatdhcp mode?04:00
*** jakedahn has joined #openstack04:00
*** pradeep1 has joined #openstack04:03
*** andrewbogott has quit IRC04:03
longhudouhttp://paste.openstack.org/show/3820/04:03
longhudoumjfork04:03
longhudouthis is the nova-compute.log on the compute node04:04
mjforklooks like perhaps your iamge was not loaded in glance properly04:05
longhudouseems that something is not transferred from the controller node(/var/lib/nova/instances/_base)04:05
*** smashthestack has quit IRC04:07
*** cmasseraf has joined #openstack04:08
mjforkwhat is the output of ls -l /var/lib/nova/instances/_base04:08
longhudou-rw-r--r-- 1 nova         nogroup          0 2011-12-15 11:46 0000000d -rw-r--r-- 1 libvirt-qemu kvm     1476395008 2011-12-15 12:02 0000000e_sm04:09
mjforkdelete the file "1"04:10
mjforkthat is 0 bytes in length04:10
mjforktry again04:10
*** bcwaldon has joined #openstack04:11
*** cfant has quit IRC04:12
longhudouseems running from the controller node,but when use"virsh list" it is not running04:14
mjforklook in nova--compute.log04:15
mjforkshould be an error04:15
longhudouhttp://paste.openstack.org/show/3821/04:18
longhudouthe nova-compute.log on the compute node04:18
mjforklooks OK04:19
mjforkwhat does virsh list have to say04:19
*** woleium has joined #openstack04:20
longhudou Id Name                 State ----------------------------------   1 instance-00000039    running04:20
longhudouit is the instance running on the controller node04:20
mjfork?04:20
mjforkwhat directories are in /var/lib/nova/instances/04:21
longhudounow I have an instance running successfully on the controller node04:21
mjforkok04:21
longhudouyou mean on the compute node?04:22
mjforkyes, where you sent me the log that says instance instance-0000005e: is running04:22
vlan-osdoes nova network act as a gateway between different projects in case of vlanmanager ?04:23
longhudouon the compute node04:24
longhudouof course04:24
longhudouhttp://paste.openstack.org/show/3823/04:26
longhudouconsole.log for instance-0000005e04:26
mjforkbut it doesn't appear in virsh list?04:27
longhudouyes04:27
mjforkyes it does appear in virsh list?04:28
longhudouonly the instance running on the controller node appear in virsh list04:28
mjforkthen you need to run virs hlist on the compute node04:28
longhudou Id Name                 State ----------------------------------   2 instance-0000005e    running04:29
longhudouok ,I find it04:29
*** PeteDaGuru has quit IRC04:30
longhudoubut from the console.log ,there is still some error ,is that right?04:31
mjforkis nova-network running on this host?04:31
mjforkthe comptue host this vm is running oni04:31
longhudouA moment ago,you got me to disable nova-network on the nova-network04:31
*** cmasseraf has quit IRC04:31
longhudouand I disabled that04:32
longhudouI am a little confused04:32
mjforkok, just verifying that it is indeed not running here04:33
mjforkit should not be04:33
mjforkoften "waiting for metadata service at http://169.254.169.254/2009-04-04/meta-data/instance-id" means that nova-network is running on tha tnode04:33
longhudouok04:34
longhudoufrom console.log,can you see any error?04:35
longhudouhttp://paste.openstack.org/show/3823/04:35
mjforkyes,the  "waiting for metadata service at http://169.254.169.254/2009-04-04/meta-data/instance-id"  followed by timeout errors04:36
*** rsampaio has quit IRC04:37
longhudoulast time it is errno 11104:38
mjforkthat was nova-compute log wtih glance04:38
longhudouthis time  it is time out04:39
mjforkyes, the guest started, cannot hit the 169.254 addr04:40
mjforkon the compute node, what does "curl http://169.254.169.254" show04:41
longhudou<html><body><h1>It works!</h1> <p>This is the default web page for this server.</p> <p>The web server software is running but no content has been added, yet.</p> </body></html>04:42
mjforkthat looks wrong04:42
mjforkdid you ensure nova-network is not running and restart the node?04:42
longhudouhttp://paste.openstack.org/show/3824/04:44
longhudou euca-describe-availability-zones verbose04:44
longhudouon the controller node04:44
longhudoumaybe I should restart controller node?04:44
mjforkyou restarted this compute node correct/04:44
longhudouI use "shutdown -r now"04:45
mjforkwhat does "ip addr show | grep 169" show?04:45
mjforkok04:45
mjforklet it reboot04:45
longhudouinet 169.254.169.254/32 scope link lo04:46
mjforkthat should not be there04:47
longhudou?04:47
mjforkwell, wait04:48
mjforkwas that on the comptue node?04:48
longhudouok04:48
longhudouyes04:48
mjforkyes, if that was on teh compute node, it should node be04:48
mjforkif nova-network is disabled, a reboot should have cleared tha tout04:49
*** krow has quit IRC04:49
longhudoulet me restart all 3 nodes04:49
longhudoudo you think it is ok?04:49
adam_ganyone familiar with the new configuration module, specifically wrt glance?04:49
mjforklonghudou: you probably don't have to restart controller04:50
longhudouok04:50
longhudoustill there" inet 169.254.169.254/32 scope link lo"04:52
mjforkis there a nova-network log on that box?04:52
longhudouoh my god,there is nova-network.log04:53
longhudoumaybe I should use apt-get auto remove to remove nova-network04:54
mjforkdid you disable the serivce?04:55
mjforki don't think you can remove it04:55
longhudouI disable the service on the controller node04:55
longhudouuse the command you give04:55
mjforkupdate-rc.d -f nova-network remove04:56
mjforkmaybe liek that?04:56
mjforknot an ubuntu user04:56
*** jkyle has joined #openstack04:56
*** krow has joined #openstack04:56
longhudouwhen I use"nova-manage service list"04:58
longhudouhttp://paste.openstack.org/show/3825/04:58
longhudouon the compute node04:58
mjforki am talking a system levle service04:58
mjforknot the openstack service04:58
mjforkopenstack doesn't control if nova-network starts on the compute node04:58
longhudouI just run"update-rc.d -f nova-network remove" on the compute node04:59
mjforkok05:02
mjforktry restring now05:02
longhudouthe process nova-network is still alive05:02
mjforkafter running nova-neotwork remove and restarting?05:03
longhudounova      1711  1657  2 13:01 ?        00:00:01 /usr/bin/python /usr/bin/nova-network --flagfile=/etc/nova/nova.conf05:03
longhudoumaybe it is caused of nova.conf?05:03
*** llang629 has joined #openstack05:03
*** llang629 has left #openstack05:03
mjforkno, its in /etc/init.d05:03
mjforktry05:05
mjforkchkconfig nova-network off05:05
longhudouand then05:07
longhudourestart the compute node?05:07
longhudouor just do chkconfig nova-network off05:08
*** mestery has quit IRC05:08
longhudouok ,I have done"chkconfig nova-network off"05:08
*** mestery has joined #openstack05:08
mjforkok05:09
mjforkreboot node05:09
*** sdake has joined #openstack05:09
*** HowardRoark has joined #openstack05:12
*** HowardRo_ has quit IRC05:12
*** wilmoore has quit IRC05:14
longhudounova-network.log is still there05:16
longhudoumjfork05:17
mjforkis it running?05:17
mjforkps auwxw | grep nova-nework05:17
mjforkps auxww | grep nova-network05:17
longhudounova      1605  0.0  0.0   3108  1316 ?        Ss   13:15   0:00 su -c nova-network --flagfile=/etc/nova/nova.conf nova05:18
longhudounova      1647  1.9  0.1  37948 22696 ?        S    13:15   0:02 /usr/bin/python /usr/bin/nova-network --flagfile=/etc/nova/nova.conf05:18
*** livemoon_ has joined #openstack05:18
mjforkwhat does "chkconfig nova-newtork" say?05:20
longhudouI just use"apt-get purge nova-network"05:21
longhudouwait for a moment05:21
mjforkok05:21
longhudouI will restart05:21
*** livemoon has quit IRC05:21
*** jakedahn has quit IRC05:22
*** jakedahn has joined #openstack05:22
*** livemoon_ has quit IRC05:23
mjforkk05:23
longhudoumjfork,this time ,nova-network disappears05:23
mjforkok05:23
*** rsampaio has joined #openstack05:25
longhudoumjfork05:27
*** jakkudan_ has joined #openstack05:27
longhudouanother problem05:27
longhudouI wonder could you help05:27
mjforkok05:27
longhudou?05:27
mjforkwhat is it?05:28
longhudounow I can ping and ssh the instance running on the compute node from the controller node05:28
longhudoubut can not ping and ssh it from the compute node05:28
*** krow has quit IRC05:29
mjforkthats not surprising - flat DHCP right?05:30
longhudouyes05:30
mjforkthe IP is actually bound to the controller node since it has nova-network running05:31
mjforkdo you need to be able to SSH to it from compute node?05:31
longhudouyes05:32
mjforkwhy?05:32
longhudoucan I?05:32
mjforkall of you access should originate outside of the OpenStack infrastrecutre05:32
longhudouyou mean from controller node05:33
longhudou to communicate with openstack05:33
longhudou?05:33
mjforkwhy do you need to SSH to your running guest from a compute node05:33
mjforkvs from your workstation05:33
longhudouthe instance is running on the compute node , I should ping the vm running on my physical machine,05:34
longhudouis that right05:34
mjforknot sure what you are trying to do05:35
longhudouI should be able to05:35
mjforkare you trying to access the running VM ?05:35
longhudouyes05:35
mjforkand you can SSH to it from the controoller?05:35
longhudouyes05:36
*** smashthestack has joined #openstack05:36
mjforkthen i woudl say you are all set.05:37
mjforkhow do you access yuor controller? via SSH?05:37
longhudouyes05:37
longhudouI have not setup dashboard05:37
longhudouyet05:37
mjforkcan you SSH to your guest IP from your workstatioN?05:38
longhudouwhat do you mean by "workstation"? sorry a little confused05:38
mjforkfrom where do you SSH to conttroler?05:39
*** tungvs has quit IRC05:39
longhudouan PC running windows705:39
mjforkok, and what IP is that controller?05:39
longhudou192.1681.9105:40
longhudou192.168.1.9105:40
mjforkok ,and what IP did you geuest VM get that you SSH to?05:40
longhudou10.0.0.*05:41
mjforkwhat is the specific IP?05:41
mjforkyou did not SSH to 10.0.0* and acces sthe guest right?05:41
longhudou10.0.0.605:41
mjforkok, can you SSH to that from your windows 7 machien?05:42
longhudouI cannot05:43
mjforkok, then your routing is messed up I suspect05:43
mjforkif you can  SSH to it from the controller05:43
longhudouI use ssh -i test3.pem ubuntu@10.0.0.6 from the controller node05:43
longhudouand I can ping and ssh 10.0.0.6,I mean this05:44
mjforkyep, but not from your windows 7 machien?05:44
longhudouyes,from my windows7 machine,I just try to ssh to 10.0.0.6 use putty(I wonder whether you know),but failed05:45
*** nerens has joined #openstack05:45
mjforkyeah, so my guess is your PC has no idea that 10.0.0.6 is available on your compute node05:46
mjforkerr, on your controller node05:46
*** rsampaio has quit IRC05:46
longhudouon controller node?05:47
mjforkright05:47
longhudouI should assign an 192 address to the vm?05:49
longhudouor something like floating IP05:49
mjforkyes, that would help05:49
*** tungvs has joined #openstack05:50
longhudoucan I assign an 10.0.0.* address to the compute node, so that from the compute node I can ping and ssh the instance05:51
longhudou?05:51
mjforkit should work, but i don't see what that gets you05:51
mjforkjust SSH to controller05:51
longhudouyou mean then from the controller ping and ssh the instance(whether on the controller node or compute node),am I right?05:54
*** livemoon has joined #openstack05:54
*** swills has quit IRC05:54
mjforkyes, also SSH to controller node to access guests05:54
*** livemoon has quit IRC05:54
*** swills has joined #openstack05:54
*** swills has joined #openstack05:54
longhudouok,I got it05:55
mjforkyes, always SSH to the controller node to access guests that is05:55
longhudouok , thanks a lot05:56
mjforknp. glad to be of help.05:56
*** livemoon has joined #openstack05:56
longhudouI saw someone said you should have nova-network on each compute node05:56
longhudoumaybe it is wrong05:56
mjforkthat is for mutlihsot setup05:57
mjforkwhich can be useful if have a specific rason05:58
mjforkreason05:58
longhudoumultihost is multi NIC card on one machine?05:58
longhudouor?05:59
mjforkno05:59
mjforkmultiple hosts runing nova-nework05:59
*** HowardRoark has quit IRC05:59
*** redconnection has quit IRC06:00
*** livemoon has left #openstack06:00
*** livemoon has joined #openstack06:01
*** mdomsch has quit IRC06:02
longhudoumjfork:   ok,got it,maybe will ask for your help in the future06:04
*** pradeep1 has quit IRC06:07
*** mjfork has quit IRC06:07
*** jedi4ever has joined #openstack06:08
*** egant has joined #openstack06:09
*** smashthestack has quit IRC06:18
*** stewart has quit IRC06:19
*** bryguy has quit IRC06:23
*** bryguy has joined #openstack06:24
*** laclasse has quit IRC06:24
*** ldlework has quit IRC06:25
adam_gd06:25
*** adjohn has joined #openstack06:26
*** hadrian has quit IRC06:27
*** stewart has joined #openstack06:31
*** plu has quit IRC06:33
*** bepernoot has joined #openstack06:36
*** vlan-os has quit IRC06:37
*** jkyle has quit IRC06:39
*** laclasse has joined #openstack06:40
Madkisshi adjohn06:42
Madkisserr06:42
Madkisshi adam_g06:42
*** bepernoot has quit IRC06:51
*** rocambol1 has joined #openstack06:54
*** mindpixel has joined #openstack07:08
*** GheRivero has quit IRC07:15
*** osier_ has joined #openstack07:18
*** mgoldmann has joined #openstack07:20
*** osier has quit IRC07:20
*** guigui1 has joined #openstack07:21
*** ejat has joined #openstack07:24
*** ejat has joined #openstack07:24
*** koolhead17 has joined #openstack07:29
*** plu has joined #openstack07:29
*** TheOsprey has joined #openstack07:31
*** wilmoore has joined #openstack07:34
*** marcuz has joined #openstack07:36
*** dnjaramba_ has quit IRC07:43
*** dnjaramba has joined #openstack07:48
*** bepernoot has joined #openstack07:51
*** adjohn has quit IRC07:54
*** woleium has quit IRC07:55
*** nati2 has quit IRC08:00
*** MarcMorata has quit IRC08:04
*** Ramonster has joined #openstack08:10
*** reidrac has joined #openstack08:16
*** nRy has quit IRC08:17
*** nati2 has joined #openstack08:18
*** katkee has joined #openstack08:20
*** mikemowgli has quit IRC08:22
*** map_nw has quit IRC08:23
*** map_nw has joined #openstack08:23
*** slop has quit IRC08:24
*** nacx has joined #openstack08:26
*** nati2 has quit IRC08:28
*** vmf has joined #openstack08:33
*** koolhead17 has quit IRC08:33
*** foexle has joined #openstack08:34
foexleahoi08:34
*** pixelbeat has joined #openstack08:34
*** mikemowgli has joined #openstack08:37
*** binbash_ has quit IRC08:40
*** longhudou has quit IRC08:40
*** binbash_ has joined #openstack08:41
*** alekibango has joined #openstack08:42
*** bepernoot has quit IRC08:42
*** bepernoot has joined #openstack08:42
*** vmf has quit IRC08:46
*** nijaba has quit IRC08:49
*** nijaba has joined #openstack08:50
*** nijaba has joined #openstack08:50
*** dev_sa has joined #openstack08:52
*** dev_sa has left #openstack08:52
*** zul has quit IRC08:52
*** osier_ has quit IRC08:54
*** andreask has joined #openstack08:56
*** katkee has quit IRC08:56
*** tungvs has quit IRC09:03
*** tungvs_ has joined #openstack09:03
*** lzyeval has quit IRC09:03
*** uksysadmin has joined #openstack09:04
*** dxd828 has joined #openstack09:04
*** osier has joined #openstack09:06
*** siwos has joined #openstack09:09
*** eqx311 has quit IRC09:12
*** map_nw_ has joined #openstack09:12
*** map_nw has quit IRC09:12
*** eqx311 has joined #openstack09:12
*** wariola has joined #openstack09:12
*** javiF has joined #openstack09:23
*** bepernoot has quit IRC09:30
*** Oneiroi has joined #openstack09:32
*** Oneiroi has quit IRC09:32
*** Oneiroi has joined #openstack09:32
*** Oneiroi has quit IRC09:33
*** Oneiroi has joined #openstack09:33
*** arBmind has joined #openstack09:37
*** wariola has quit IRC09:38
*** tryggvil_ has joined #openstack09:40
*** Oneiroi has quit IRC09:41
uksysadminhello all09:46
uksysadminI tried to get Win2k3 SP2 ISO to boot under KVM last night to play with creating new images... but the ISO isn't bootable.  What's the best workaround - copying the contents and creating your own bootable ISO?09:47
*** ben_duyujie has left #openstack09:47
*** rustam has joined #openstack09:48
*** darraghb has joined #openstack09:49
*** Oneiroi has joined #openstack09:49
*** guigui1 has quit IRC09:59
*** vdo has joined #openstack10:03
*** nerens has quit IRC10:09
*** perestrelka has quit IRC10:13
*** livemoon has left #openstack10:15
*** perestrelka has joined #openstack10:17
*** dev_sa has joined #openstack10:17
*** guigui has joined #openstack10:18
*** dev_sa has left #openstack10:18
*** smashthestack has joined #openstack10:19
smashthestackI was able to run the instances10:19
smashthestackbut i cannot ping or ssh it10:19
smashthestackwhy?10:19
smashthestackits saying destination host unreachable10:20
smashthestackalso is it possible to create a server with one network interface?10:20
*** daysmen has joined #openstack10:26
*** zul has joined #openstack10:27
uksysadminsmashthestack, have you created an appropriate security group that allows ssh and icmp?10:28
smashthestackyes10:28
smashthestacki followed your tutorial for virtual machines10:28
smashthestackit worked10:29
smashthestackbut when it comes to physical machines10:29
smashthestacki used docs.openstack.org10:29
smashthestackbut i got this pbm10:29
uksysadminstill using VLAN network?10:29
smashthestackno physical LAN10:29
uksysadminyeah, but with VLAN tagging?  Does your switch support it?10:29
uksysadminmy tutorial  is quite "lazy" in that I know vbox doesn't care about VLANs... so it ignores them and allows the packets through regardless - like an unmanaged switch10:30
uksysadminbut if you have a managed switch then the ports connected to it must understand 802.11q and know to pass through VLAN 100 (default)10:31
smashthestacki ll check it out10:31
*** pixelbeat has quit IRC10:31
smashthestacki didnt think about it10:31
smashthestackThanks anyway!10:33
*** guigui has quit IRC10:33
*** wilmoore has quit IRC10:40
*** smashthestack has quit IRC10:41
*** jedi4ever has quit IRC10:45
*** map_nw has joined #openstack10:50
*** map_nw_ has quit IRC10:54
*** katkee has joined #openstack10:57
*** mindpixel has quit IRC11:01
*** Hakon|mbp has joined #openstack11:05
*** yshh has joined #openstack11:06
*** pixelbeat has joined #openstack11:10
*** katkee has quit IRC11:20
*** katkee has joined #openstack11:21
*** bepernoot has joined #openstack11:24
*** ejat has quit IRC11:26
*** ton_katsu has joined #openstack11:28
ton_katsuhello11:32
*** mcclurmc has quit IRC11:34
ton_katsui'm tring multi zone. diablo version.11:35
ton_katsuI can not start instance.11:35
*** ejat has joined #openstack11:36
*** ejat has joined #openstack11:36
*** mcclurmc has joined #openstack11:36
*** livemoon has joined #openstack11:37
*** anpl has joined #openstack11:37
anplHi11:37
anplI have installed Diablo 4 on SL 6.111:37
anplI used GridDynamics Yum repo11:38
anpleverything went fine11:38
ton_katsuanpl: multi zone ok?11:38
anplbut when I try to launch an instance I get the following error11:38
anplUnable to launch instance: 'Fault' object has no attribute 'explanation'11:39
anplnit multizone11:39
anplI did a single node installation11:39
*** rods has joined #openstack11:41
ton_katsuanpl: keystone use ?11:44
anplyes11:44
anplI used keystone11:44
*** pradeep has joined #openstack11:45
anplbefore I managed to launch an instance using same steps( 2 months back) using same repo11:45
anplI have tried from scratch so many times11:45
anpland I get the same error11:45
anpldo you need me share the error from the nova-api.log11:46
anplone more error I see is when I try to allocate floating IP11:46
anplit says the tenant has no free floating IP11:46
anplI used nova-manage network create novanetwork 10.11.12.0/24 1 64 bridge_interface=eth011:49
anpldo we supply the tenant ID here?11:49
*** marcuz has quit IRC11:51
ton_katsueuca-describe-instances is ok?11:51
*** tungvs_ has quit IRC12:00
*** pradeep has quit IRC12:00
*** ugarit has joined #openstack12:05
ugaritdo vmware's vmdk images "run" without problems on #openstack ?12:08
*** ldlework has joined #openstack12:12
*** GeoDud has quit IRC12:19
*** jakkudan_ has quit IRC12:24
*** pixelbeat has quit IRC12:27
*** livemoon has left #openstack12:28
*** ugarit has quit IRC12:29
*** livemoon has joined #openstack12:29
Madkiss /window 812:29
Madkissoops12:29
*** rsampaio has joined #openstack12:31
siwosugarit: even if not, you can easily convert them to qcow2 which is a native format for openstack12:32
*** ben_duyujie has joined #openstack12:35
uvirtbotNew bug: #904723 in swift "additional fsync operation needed after file upload" [Undecided,New] https://launchpad.net/bugs/90472312:41
*** koolhead11 has joined #openstack12:41
*** hadrian has joined #openstack12:44
foexlehey guys ... do any have an issue if any instance boot and comes to cloud-init they will be hangs up12:44
*** livemoon has left #openstack12:44
*** yshh has quit IRC12:44
foexlethe instance won't to try to fetch metadata :(12:44
foexleno errors reported and i'm using default ubuntu uec image12:45
*** po has joined #openstack12:45
uvirtbotNew bug: #904724 in nova "nova rebuild won't work" [Undecided,New] https://launchpad.net/bugs/90472412:46
*** itz_ has joined #openstack12:46
koolhead11foexle: and what is your nw like12:46
foexlennw?12:47
itz_Hi: installed nova-compute on RH6.1. The instance is created but fails to run.I see the error  ignoring error injecting data into image 8 (cannot find any suitable libguestfs supermin or ordinary appliance on LIBGUESTFS_PATH (search path: /usr/lib64/guestfs)) in the log12:48
koolhead11foexle network i meant12:49
koolhead11can you pastebin error u see12:49
* koolhead11 scratches his head12:50
koolhead11foexle: is the error says connecting to metadata server again and again?12:54
foexlenono12:56
foexlethe boot process hangs up12:56
*** saurabh has joined #openstack12:56
foexlebefore they try to get metadata12:56
saurabhhello12:56
koolhead11foexle: sounds cool12:56
*** mjfork has joined #openstack12:56
*** ejat has quit IRC12:56
saurabhI need to know about using ACLs12:57
*** mjfork has quit IRC12:57
foexlekoolhead11: :/ yeah12:57
koolhead11foexle: interesting. paste me the image url. i will download and try to run in my end12:57
koolhead11!acl12:58
openstackkoolhead11: Error: "acl" is not a valid command.12:58
saurabhI am using 'X-Container-Read: .r:*, .r: -test:tester3', need to know will this deny tester3 to download any object for the container in swift-?12:58
foexlekoolhead11: the image runs ... it's the same image i used the last weeks12:59
koolhead11foexle: so did you do any change in your infta <OS>13:00
foexleno13:01
foexlebut i think it's maybe a networking problem13:02
*** livemoon has joined #openstack13:03
foexle-.-13:03
foexlesolved13:03
*** ejat has joined #openstack13:04
foexleman ... i see don't see the forest for the trees -.-13:05
*** pradeep1 has joined #openstack13:06
*** egant has quit IRC13:08
*** egant has joined #openstack13:10
*** daysmen has quit IRC13:10
*** rustam has quit IRC13:11
koolhead11foexle: i thought so13:11
koolhead11:P13:11
*** ejat has quit IRC13:13
*** ejat has joined #openstack13:13
*** ejat has joined #openstack13:13
*** mjfork has joined #openstack13:13
*** praefect has joined #openstack13:14
*** Nac_ has joined #openstack13:15
*** stuntmachine has joined #openstack13:16
Nac_Hello everybody13:17
*** gohko_nao has joined #openstack13:18
rwmjonesitz_: which version of nova-compute is this?  AFAIK there is no libguestfs in nova13:18
Nac_I have a little cluster made by 6 nodes and they are allway cosuming a lot CPU and net bandwidth...... also when the cluster is empty and nobody is doing anything13:19
Nac_why?13:19
*** javiF has quit IRC13:19
Nac_the procces is "swift-container"13:19
Nac_and it is consume a lot of CPU .... ALWAYS.....in ALL the nodes.....why?13:21
*** rustam has joined #openstack13:21
*** rsampaio has quit IRC13:21
*** fujin has quit IRC13:23
*** jingizu_ has quit IRC13:23
*** scottsanchez has quit IRC13:23
*** ben_duyujie has left #openstack13:24
*** PotHix has joined #openstack13:24
*** pixelbeat has joined #openstack13:30
*** fujin has joined #openstack13:32
*** cmasseraf has joined #openstack13:33
*** hugokuo has quit IRC13:33
*** saurabh has left #openstack13:34
*** fghaas has joined #openstack13:36
*** jingizu_ has joined #openstack13:36
*** egant has quit IRC13:38
mjforkwhat is the right way to prevent the nova-scheduler service from starting on Ubuntu?13:39
foexlemjfork: update-rc.d -f nova-scheduler remove13:40
mjforkthanks foexle13:42
*** ninkotech has quit IRC13:42
*** vlan-os has joined #openstack13:45
*** arBmind_ has joined #openstack13:46
*** mjfork has quit IRC13:47
*** mjfork has joined #openstack13:48
*** mattray has joined #openstack13:48
*** arBmind has quit IRC13:48
*** arBmind_ is now known as arBmind13:48
*** Xenith has quit IRC13:52
*** Xenith has joined #openstack13:53
*** PeteDaGuru has joined #openstack13:55
vlan-osI know that network host acts as the gateway for traffic from vm's in a project to the outside world but does it also act as gateway for vm's in different project (subnets) to talk to each other ?13:59
itz_rwmjones: openstack-nova-compute-2011.3-b118814:00
mjforkvlan-os: VLANs or ?14:00
*** PeteDaGuru has quit IRC14:00
itz_rwmjones: https://review.openstack.org/#change,199414:01
vlan-osmjfork: yes 1:1 mapping of vlans and subnet14:01
*** PeteDaGuru has joined #openstack14:01
mjforkyes, i would expect that nova-network would have to act as gateway since none of the machines could see each other14:02
*** scottsanchez has joined #openstack14:03
vlan-osmjfork: but that implies that vm's in one project be able to reach vm's on another project via the network host -< this part is giving me sleepless nights14:03
rwmjonesitz_: oh I see you're using padraig's patch14:05
rwmjonesitz_: what host platform is this?14:05
rwmjonesand what version of libguestfs have you got installed14:05
*** lorin1 has joined #openstack14:05
rwmjonesand can you run libguestfs-test-tool14:05
mjforkchecking14:07
*** cloudgeek has joined #openstack14:07
vlan-osmjfork: thank you sir !14:07
mjforkvlan-os: have you tested it today?14:08
vlan-osmjfork : using diablo release on ubuntu - yes14:08
mjforkand your machines on different VLANs  can talk?14:08
foexlevlan-os: searching by google openstack shared networks14:08
*** osier has quit IRC14:09
vlan-osmjfork: yes, coz different vlan's map to different subnets and network host has a bridge interface  that acts as a gateway for each subnet.14:10
*** Razique has joined #openstack14:10
mjforkso yes, you tested it and verified that they can talk cross VLANs through gateway?14:11
vlan-osmjfork: yes14:11
mjforkok, so i would propose that on the mailing list and ask for solutions14:12
mjforki would expect it is some set of iptables rules14:12
*** dprince has joined #openstack14:12
rwmjonespixelbeat: ^^ itz_ is using your patch14:13
kodapaHello, I'm trying to implement this: http://blog.defunct.ca/2011/09/19/using-nova-networks-multi_host-to-remove-spof/14:15
vlan-osmjfork: ok..but i the behavior that i'm seeing shouldnt be happening coorect ?14:15
kodapaNetworking is working, except for cloud-init metadata stuff14:15
*** ejat has quit IRC14:16
kodapaon the nodes running only nova-compute and nova-network14:16
kodapaI added --ec2_dmz_host=10.24.1.10 and --multi_host to nova.conf14:16
kodapaAny ideas?14:16
mjforkvlan-os: well, my guess is if your routing is setup to allow it nova-network doesn't do anythign to break it.14:17
*** joesavak has joined #openstack14:17
*** mrjazzcat has joined #openstack14:17
vlan-osmjfork: yes, ip forwarding is enabled and the routes are populated to direct traffic to the correct bridge interface for each subnet on the network hos14:18
mjforkvlan-os: i would propose your setup on the general mailing list, the current behavior, and your desired behavior and ask how best to get there.14:19
*** jsavak has joined #openstack14:20
uvirtbotNew bug: #904767 in nova "nova-manage vpn spawn won't work" [Undecided,New] https://launchpad.net/bugs/90476714:21
*** Shentonfreude has joined #openstack14:22
*** mrjazzcat has left #openstack14:23
*** joesavak has quit IRC14:23
*** cloudgeek has quit IRC14:25
*** freeflying has quit IRC14:28
*** freeflying has joined #openstack14:28
itz_rwmjones: RH6.114:31
*** lborda has joined #openstack14:32
mjforkkodapa start nova-api on each hsot14:32
Raziquehey guys :)14:32
foexlebon soir monsieur Razique :)14:33
*** Shentonfreude has left #openstack14:33
kodapamjfork: hmm i tried that before14:33
kodapamjfork: I seem to have the same problem as this guy: https://answers.launchpad.net/nova/+question/18125814:33
kodapaNo answers there :(14:33
foexlekodapa: this guy its me :D14:34
mjforkso, you started nova-api on each compute host running nova-network?14:35
foexlekodapa: do you have your api on an other host as your compute ?14:35
rwmjonesitz_: that's RHEL 6.1 with libguestfs 1.7.17-17?14:35
*** alekibango has quit IRC14:35
kodapafoexle: yes14:36
kodapafoexle: i've got two nodes14:36
kodapafoexle: one running nova-api, nova-scheduler, nova-compute, nova-network14:36
kodapafoexle: and another running nova-compute and nova-network14:36
kodapafoexle: running multi host mode and vlan networking14:36
mjforkthe 2nd node should be running nova-pi14:36
mjforkapi14:36
kodapamjfork: should I remove --ec2_dmz_host=10.24.2.10 in nova.conf?14:37
kodapaThat's what a guide said fix the metadata stuff14:37
foexlekodapa: ah ok :) .... and if you spawn an instance on host 1 you get a connection to metadata and on the second not right ?14:37
kodapafoexle: excactly14:37
Raziquehey mr foexle14:38
foexlekodapa: ok so that is a problem in nova network .... you have no route to your api14:38
*** katkee has quit IRC14:38
Raziquesup ?14:38
kodapafoexle: hm14:38
foexlekarmabot: you have 3 options14:38
karmabotWhat?14:38
kodapamjfork: it's working now after installing nova-api again on second node14:39
kodapamjfork: strange because I had it before14:39
*** katkee has joined #openstack14:39
kodapafoexle: is there a way to fix it?14:39
foexlekodapa: so the route are not correct in nova14:39
foexlekodapa: you have a route to your api => if you have set the correct dmz host and souce_ip14:39
*** huslage has joined #openstack14:39
foexlekodapa: but the masqarading of your internatl ip14:39
kodapasouce_ip? source_ip?14:39
foexleits the problem14:40
foexlekodapa: yes14:40
mjforkkodapa so it works? what are your ec2_dmz_host and ec2_url14:40
*** JesperA has joined #openstack14:40
*** cloudgeek has joined #openstack14:40
foexlekodapa: you can take your api-server in the same net (floating or fixed)14:41
foexlekodapa: but you have running a compute and network on your api host14:41
foexlekodapa: so you can change your dmz-host to the bridge ip of host 114:42
foexleon host214:42
foexleand your source ip (second node) ip of the bridge14:42
kodapamjfork: No it didn't work, it just spawned on first node :P14:42
kodapamjfork: I'm blind, sorry xD14:42
kodapafoexle: http://pastebin.com/3fQtT19n14:42
*** jedi4ever has joined #openstack14:42
foexlebut thats a verry messi way14:42
kodapafoexle: that's my nova.conf14:42
foexlewhich fixed network you are using ?14:43
*** cmasseraf has quit IRC14:43
Nac_Hi14:43
kodapafoexle: I'm running vlan networking14:43
foexleyeah i mean wich ip range14:44
Nac_How can I see a list of user on Swift?14:44
kodapafoexle: different for each project14:44
kodapafoexle: 10.24.2.0/24 is the net between nova boxes14:44
kodapafoexle: 10.24.2.10 is box 1 and 10.24.2.10 is box 214:44
kodapaooops14:44
kodapa10.24.2.11 is box 214:45
foexleyeah thats was my problem :) .... my workaround solution => auto-floating ip14:45
kodapaThat's not what we want14:45
kodapaWe need VLAN14:45
kodapa:/14:45
foexleyeah it's only to startup14:45
foexleto communicato to get metadata14:45
kodapaYes but this wont work for us14:46
kodapaCustomers should be able to launch own instances14:46
foexleafter that you can disattach the pub ip14:46
kodapaaha now I understand what you mean14:46
vlan-osmjfork: https://answers.launchpad.net/nova/+question/18199414:47
foexlekodapa: so openstack have many ha-options and tricks, but the main thing it is not :( unfortunately14:47
*** joesavak has joined #openstack14:47
mjforkyou could pop over to openstack-dev and ask vishy - he wrote the multihost articles14:47
*** ton_katsu has quit IRC14:48
*** zigo has joined #openstack14:48
foexleso if you need to communicate over the backnet14:48
foexleshould you take a look to quantum14:48
foexlebut i think it's not production ready14:48
foexleRazique: whats up man ? :)14:49
*** jsavak has quit IRC14:51
kodapafoexle: I'm getting TRACE: RemoteError: FloatingIpNotFoundForAddress Floating ip not found for address14:52
kodapafoexle: with auto floating ip14:52
kodapa:/14:52
*** itz_ has quit IRC14:52
foexlekodapa: sec14:52
mjforkis auto floating IP an option?14:52
*** zz_bonzay is now known as bonzay14:52
foexlekodapa: https://github.com/openstack/nova/commit/80d73a2df2c33212217c59783f62d74673776ebb change this 4 lines14:53
foexleand restart nova-network14:53
foexleafter that its running14:53
kodapafoexle: I'm running ubuntu 11.10 packages :/14:53
*** bonzay is now known as zz_bonzay14:54
*** robbiew has joined #openstack14:54
foexleme too14:54
foexleits the same14:55
foexlenova diablo 2011.314:55
*** hugokuo has joined #openstack14:55
*** mattray has quit IRC14:55
foexleyou can locate this file in /usr/shared/pyshared/nova/network14:55
*** mchenetz has joined #openstack14:57
kodapafoexle: then what happens if theres an update?14:57
kodapafoexle: will the changes be overwritten?14:57
foexleif they not in the next update yes :(14:58
foexlebut i've backuped manage.py14:58
kodapafoexle: please tell me if you find another solution for this15:00
foexlekodapa: you too :)15:00
kodapafoexle: I have a deadline on the openstack cloud setup in january so there's still some time to fix things15:00
kodapaHowever people want to test it like, yesterday15:00
foexlekodapa: yeah i have the same problem :)15:01
*** rsampaio has joined #openstack15:01
foexlekodapa: but my first openstack cloud setup is with 18 servers and shared services like loadbalancer and db cluster -.- .... many problems :) but i think the essex version will be better for ha15:02
*** CaptTofu has joined #openstack15:03
*** deshantm has joined #openstack15:03
CaptTofumorning!15:04
kodapafoexle: yeah hopefully15:04
JesperAevening15:04
kodapafoexle: I have customers queued already for the new cloud15:04
foexledito :>15:04
kodapafoexle: our old cloud is full and we're out of rack space and the DC is so damn slow to setup new racks15:04
kodapafoexle: we've been waiting over a year for a patch cable :)15:04
foexle:)15:04
kodapafoexle: our new cloud is in another DC ;D15:05
foexle:>15:05
gnu111anyone has good instructions for installing dashboard + keystone in RHEL diablo?15:05
kodapagnu111: it's pain in the ass15:05
*** jsavak has joined #openstack15:06
kodapagnu111: I've spent so much time trying to get it to work15:06
gnu111kodapa: :( yup that's what I am discovering.15:06
foexlekodapa: hahaha sign :)15:06
gnu111kodapa: are you using LDAP as well?15:06
kodapagnu111: no15:06
otaku2wtfwtf15:07
uksysadminotaku2, yes you say that alot with OpenStack15:07
* uksysadmin ducks and covers15:07
gnu111kodapa: I might try to install it with the python instructions instead of the griddynamics rpms.15:08
mjforkgnu111: i have it working, with instructions15:09
kodapaotaku2: why wtf?15:09
kodapagnu111: is there any advantage of using ldap?15:09
gnu111kodapa: I have already existing users in LDAP so trying to leverage that.15:09
kodapaAHa15:09
kodapaAnyone else, is there any reason to use ldap with openstack?15:10
*** joesavak has quit IRC15:10
mjforkgnu111: what are you trying to get with dashboard/keystone?15:10
*** joesavak has joined #openstack15:10
*** jsavak has quit IRC15:10
gnu111mjfork: I just did yum install and bit confused on how to proceed to the next step. I can manage most of the stuff from command line but for others I need a web interface and also need LDAP with keystone working.15:11
*** hugokuo has quit IRC15:11
*** siwos has quit IRC15:12
*** cp16net has joined #openstack15:12
mjforkgnu111: i have not done LDAP, but i can tell you i had no luck with yum packages of Dashobard/Keystone abouta  month back, I installed from github source.15:12
*** rods has quit IRC15:12
mjforkgnu111:  have you see http://mirantis.blogspot.com/2011/08/ldap-identity-store-for-openstack.html15:13
gnu111mjfork: ok. that's what I was going to try next.15:13
mjforkgnu111: let me point you to some directions15:13
gnu111mjfork: thanks!15:13
mjforkgnu111: http://forums.openstack.org/viewtopic.php?f=23&t=482&p=1745&hilit=github+horizon+keystone#p174515:14
gnu111mjfork: ok, that looks helpful, I will try that.15:15
*** imsplitbit has quit IRC15:16
mjforkgnu111: feel free to reach out with questions, I have diablo versions of dashboard + keystone + nova + glance all running (nova on RHEL, rest on Ubunut)15:16
uvirtbotNew bug: #904792 in openstack-manuals "Cleanup on nova-manage commands" [Undecided,New] https://launchpad.net/bugs/90479215:18
*** crescendo_ has quit IRC15:21
*** dnjaramba has quit IRC15:22
*** MarkAtwood has joined #openstack15:25
*** javiF has joined #openstack15:26
*** wilmoore has joined #openstack15:28
gnu111mjfork: how did you install python-pip in RHEL? it is not on the yum repo.15:29
*** dubsquared has joined #openstack15:29
*** wilmoore has quit IRC15:30
mjforki did those in Ubuntu15:30
gnu111mjfork: i have easy_install. is that the same thing?15:31
mjforkwhat version of RHEL?15:32
gnu111mjfork: RHEL 6.215:33
*** vladimir3p has joined #openstack15:34
mjforkhttp://pkgs.org/centos-6-rhel-6/epel-i386/python-pip-0.8-1.el6.noarch.rpm.html15:35
mjforkcould try that15:35
reidracyou may want to upgrade pip anyway, 0.8 it's too old15:35
*** yshh has joined #openstack15:36
reidracpip --upgrade install pip; or something like that15:36
mjforkyeah, i see i am on 1.0.215:36
reidracI've found 0.8 to be unusable, like downloading wrong versions!15:36
mjforkgnu111: is it erroring out on pip? if you isntall python-setuptools and run easy_install virtualenv and python tools/install_venv.py does it work?15:37
*** AlanClark has joined #openstack15:38
*** deshantm_ has joined #openstack15:38
*** lborda has quit IRC15:39
*** jsavak has joined #openstack15:39
gnu111mjfork: i will try the easy_install path.  how do you use pip? I installed the rpm but pip , python-pip seems to not available as a command.15:40
*** livemoon has left #openstack15:41
mjforki ran these against ubuntu15:41
*** JesperA has quit IRC15:41
mjforkall i can say is try it on RHEL and see if it fails15:41
gnu111mjfork: it installed it here: /usr/bin/pip-python15:41
*** datajerk has quit IRC15:42
*** deshantm has quit IRC15:42
mjforkok, good.15:42
*** rnorwood has joined #openstack15:42
*** joesavak has quit IRC15:43
gnu111mjfork: the pip install part failed. http://paste.openstack.org/show/3833/15:45
mjforklooks like network conection failed?15:47
mjforkre run it?15:47
*** Trebortech has joined #openstack15:48
gnu111It seems to be having issues with Downloading/unpacking coverage. re running it now.15:48
*** lborda has joined #openstack15:48
gnu111ok. seems to be moving along.15:48
*** deshantm_ is now known as deshantm15:50
Spirilishmm15:51
Spirilisanyone know what to do with this kind of error-15:51
SpirilisImproperlyConfigured: Error importing middleware django_openstack.middleware.keystone: "No module named openstack"15:51
Spirilisfound in Apache's error.log?  trying to get horizon working...15:51
Spirilisusing the git repos referenced in devstack, but, doing it by hand15:52
*** imsplitbit has joined #openstack15:52
*** katkee has quit IRC15:52
*** jsavak has quit IRC15:52
otaku22011-12-15 10:52:44,259 nova: No module named MySQLdb15:53
*** jsavak has joined #openstack15:53
otaku2this is on an openstack-nova diablo installed from rpm's - what am I missing?15:54
*** nati2 has joined #openstack15:54
*** cmasseraf has joined #openstack15:54
mjforkotaku2: do you have MySQL-python package installed?15:54
otaku2nope. apparently it was not in the dependencies.15:55
otaku2thanks.15:55
*** rnirmal has joined #openstack15:56
*** adjohn has joined #openstack15:57
mjforkSpirilis: are you installing from latest branch?15:57
TrebortechI just created a Centos Image following the instructions on the OpenStack site. When I boot the image I get a "No bootable device" error message. The image boots find in kvm locally. Any idea?15:58
*** jsh has joined #openstack15:58
*** HowardRoark has joined #openstack15:58
gnu111mjfork: ok. the pip step is done. I needed to also install python-devel sqlite-devel and python-ldap.15:58
*** huslage has quit IRC15:59
mjforkgnu111: ok, good. glad you were able to work through it.16:00
*** stuntmachine has quit IRC16:00
*** rocambol1 has quit IRC16:01
*** cp16net has quit IRC16:02
*** cp16net has joined #openstack16:02
Spirilismjfork: I'm not sure, using stable/diablo when I do the git checkout?16:02
Spirilistbh I'm not that familiar with git yet :)16:02
mjforkok, then no, not latest code.  so if you want to get dashbaord up use this link: http://forums.openstack.org/viewtopic.php?f=23&t=482&p=1745&hilit=github+horizon+keystone#p174516:03
*** jedi4ever has quit IRC16:03
mjforksame process gnu111 is going through now16:03
*** cp16net has quit IRC16:03
*** cp16net has joined #openstack16:03
*** cmasseraf has quit IRC16:03
*** datajerk has joined #openstack16:03
Spirilisah k, I did install keystone from the git repo I think, let me see what's different about the dashboard16:04
*** TheOsprey has quit IRC16:04
Spirilisthx16:04
*** rnorwood has quit IRC16:04
*** cmasseraf has joined #openstack16:04
*** dragondm has joined #openstack16:05
Spirilisah definitely missing some of the pip reqs for keystone16:05
*** rnorwood has joined #openstack16:06
*** jsavak has quit IRC16:07
gnu111mjfork: the part regarding integrating keystone into nova. "link keystone into the nova root dir" "ln -s keystone/keystone nova/keystone" where is this keystone/keystone dir?16:08
mjforkgnu111: where do you see that?16:09
gnu111https://github.com/openstack/keystone/blob/master/README.md16:09
mjforki didn't have do that16:10
*** freeflyi1g has joined #openstack16:10
mjforkrefer back to the forum post for stable/diablo16:11
gnu111mjfork: how does nova know about keystone? is there a nova.conf flag?16:11
*** whit has joined #openstack16:11
mjforkno, look in /etc/nova/api-paste.ini16:12
*** whit has quit IRC16:12
Spiriliswerd, doing the install_venv.py for horizon now.  yet something else I forgot ;)16:12
uvirtbotNew bug: #904815 in keystone "sampledata does not work with real LDAP backend" [Undecided,New] https://launchpad.net/bugs/90481516:13
*** whit has joined #openstack16:13
mjforkgnu111: is there a keystone entry in the pipeline16:13
*** freeflying has quit IRC16:13
gnu111mjfork: no there isn't one.16:14
*** whit has quit IRC16:14
*** maplebed has quit IRC16:16
*** fghaas has quit IRC16:16
mjforklet me paste the conf16:16
*** perestrelka has quit IRC16:16
Tristani3Dmjfork: got some time to do a little troubleshooting with me? Im trying to figure out why my storage is still red in dashboard16:17
mjforkgnu111: http://paste.openstack.org/show/3837/16:18
mjforkTristani3D: i cn try16:19
Tristani3Dmjfork: ok where to start16:19
mjforkwhat "Storage"?16:19
mjforknova-volume? swift?16:19
*** cmasseraf has quit IRC16:20
mjforkgnu111:  that is my api-paste.ini16:20
Tristani3Dmjfork: swift16:20
*** cmasseraf has joined #openstack16:20
gnu111mjfork: ok. got it. how did you generate the admin token?16:20
*** cmasseraf has quit IRC16:21
Spirilishuh, the python tools/install_venv.py keeps bombing with some timeout doing a download (on eventlet, last attempt I tried)16:21
Spirilisoh16:22
*** dxd828 has quit IRC16:22
Spirilisbetcha the supposed firewall code upgrade our network team has scheduled for today is at fault :-)16:22
*** perestrelka has joined #openstack16:23
*** RobertLaptop has joined #openstack16:23
gnu111Spirilis: I am having similar issues: http://paste.openstack.org/show/3838/16:23
*** RobertLaptop has left #openstack16:23
*** reidrac has quit IRC16:23
Tristani3Dmjfork: where to start16:24
*** jkyle has joined #openstack16:24
mjforkgnu111: http://paste.openstack.org/show/3839/ run those commands, subsistiting your IPs16:25
otaku2and do you really need swift? it seems like such a pain to set up for just a fancy httpd server with overcomplicated storage buckets.  What's the point?16:25
mjforkTristani3D: i haven't not done swift inside dahsbaord, but lets start with the endpoint, what does keystone-manage endpointTemplates list16:25
uvirtbotNew bug: #904820 in openstack-ci "Gerrit should set bugs In Progress with assignee when a patchset is proposed" [Wishlist,In progress] https://launchpad.net/bugs/90482016:26
notmynameotaku2: I think swift is a bit more than "a fancy httpd server with overcomplicated storage buckets" ;-)16:27
Tristani3Dmjfork: http://pastebin.com/5C75pB0T16:27
otaku2notmyname: please, enlighten me.  what is the point of it then?16:27
notmynameotaku2: storing unstructured data that can grow without bound16:28
notmynameotaku2: common use cases include storing backups and storing static web content16:28
notmynameotaku2: http://www.buildcloudstorage.com/2011/12/if-youve-been-following-my-previous.html16:28
*** nati2 has quit IRC16:29
mjforkTristani3D: select * from endpointTemplates in the sqliite db16:29
mjforkmost interested in admin url16:29
notmynameotaku2: swift isn't designed to give you a few GB or TB of hard drive space. it's designed to allow you to store TB to PB of data cheaply and reliably16:30
Spirilisgnu111: lol ah k, I'm not going insane then16:30
*** GheRivero has joined #openstack16:30
*** bepernoot has quit IRC16:30
Tristani3Dmjfork: there is no sqlite?16:30
Tristani3Donly mysql?16:30
*** dev_sa has joined #openstack16:31
otaku2notmyname: but something still has to know what api call to hit, it's not like I can just wget my.jpg right?16:31
notmynameotaku2: the API is all over HTTP, so ya, you actually can wget a file :-)16:31
otaku2I guess I have a lot more RTFM'ing to do. I'm from the old pre-s3 cdn mindset16:32
*** gyee has quit IRC16:33
mjforkTristani3D: on the Keystone node, use sqllite: sqlite3 <path to keystone.db>16:34
otaku2I also don't understand what good it does for running VM's.  A VM needs hard drive images that are constantly mounted.  Is there a driver that mounts a root drive via s3? Sounds scary.16:35
gnu111Spirilis: finally got it done after 10 timeouts.16:36
Tristani3Dmjfork: like this? sql_connection = mysql://keystone:BSMZsjMwC4saw2V31RuH@192.168.124.81/keystone16:36
*** lorin1 has quit IRC16:36
mjforkoh, didn't realize you setup mysql for keystone, then use Mysql16:36
*** betodalas has joined #openstack16:36
mjforkeitehr way, want to the contents of endpointTemplates table16:36
*** lorin1 has joined #openstack16:36
*** wilmoore has joined #openstack16:36
Tristani3Dyeah16:37
Tristani3Dsqlite3 is working16:37
betodalasHello, anyone know about Openstack with Xen?[16:37
mjforkotaku2: ou are right, there isn't much use for swift with hard drive images16:37
mjforkotaku2: swift's use with nova is very limited, outside storing base VM images16:37
Tristani3Dmjfork: never used sqlite, dont know the queries16:37
otaku2so is there a reason to even install it?16:38
mjforkotaku2: what are ou trying to do?16:38
Spirilisgnu111: yeah, same here16:38
mjforkTristani3D: are you connected to the DB in MySql or sqllite?16:38
gnu111Spirilis: did you get this error: Error: That port is already in use.16:38
Tristani3Dmjfork: well i am inside sqlite, want to see the db's16:38
Tristani3Dto verify if keystone uses. sqlite or mysql16:39
otaku2run vm16:39
Spirilisgnu111: yeah, I had "nova-ajax-console-proxy" running, I stopped that and it cleared up16:39
mjforkTristani3D: do you have a file on your system named keystone.db16:39
SpirilisI didn't see that nova-ajax-console-proxy stuff running in the devstack environment, so, I figure it's not necessary?16:39
otaku2I want a portal where people can provision vm's. thats pretty much it16:39
mjforkotaku2: then no, you probably don't need swift just to run VMs16:39
SpirilisOk now new error: ImportError: Could not import settings 'dashboard.settings' (Is it on sys.path?): No module named dashboard.settings16:39
Tristani3Dmjfork: MySQL it seems16:40
mjforkSpirilis: is this when starting the dfashboard?16:40
otaku2k. so how do I run nova without it?  It wants an e2 or s3 server I believe16:40
Tristani3Dmysql> show databases;16:40
Tristani3D+--------------------+16:40
Tristani3D| Database           |16:40
Tristani3D+--------------------+16:40
Tristani3D| information_schema |16:40
Tristani3D| keystone           |16:40
Tristani3D+--------------------+16:40
mjforkTristani3D: use keystone; SELECT * FROM endpointTemplates;16:40
Spirilismjfork: This is when hitting it, that error was in apache's log.  I was able to do the dashboard/manage.py runserver piece without error16:40
mjforknever used apache...can you stay with runserver?16:41
Tristani3Dmjfork: | endpoint_templates | you mean?16:41
mjforkyes. sorry.16:41
SpirilisI can hit it at port 8000 as it's bound directly I guess...16:41
betodalasjaypipes Hello16:41
uvirtbotNew bug: #904830 in swift "Swift should search for "type" field in serviceCatalog" [Undecided,New] https://launchpad.net/bugs/90483016:41
SpirilisHmm, though on port 8000 I get: ImproperlyConfigured: Error importing middleware django_openstack.middleware.keystone: "No module named openstackx"16:41
betodalas*jaypipes* hello16:41
SpirilisI thought I'd installed that one already16:42
mjforkSpirilis: check the dashboard logs, guessing you need openstackx on nova-compute16:42
Tristani3Dmjfork: http://pastebin.com/g4SJBA2216:42
*** mchenetz has quit IRC16:44
mjforkTristani3D: what exactly does the dashboard show?16:44
jaypipesbetodalas: heya, ok, back now... whatup?16:44
*** perestrelka has quit IRC16:45
Spirilishm16:46
Tristani3Dmjfork: http://imageshack.us/photo/my-images/194/naamlooslod.png/16:46
SpirilisI do have --osapi_extensions_path set in nova.conf16:46
Spirilisrestarting the nova services for good measure, let me see now16:46
mjforkSpirilis: what is the path passed to  --osapi_extensions_path and what is at that folder?16:47
Spirilisno difference.  humm16:47
Spirilis--osapi_extensions_path=/usr/local/lib/python2.7/dist-packages/openstackx-0.2-py2.7.egg/extensions16:47
*** llang629 has joined #openstack16:47
Spirilislooks like admin.py/pyc, __init__.py/pyc16:47
mjforkTristani3D: where does Swift live for yuo?16:48
*** ppradhan has joined #openstack16:49
mjforkSpirilis:  on Ubuntu?16:49
Spirilisyeah16:49
Tristani3Dmjfork: the swift-proxy-acct and swift-ring-compute on the same node, swift-storage on 5 other nodes16:49
mjforkok, what IP though?16:49
Tristani3Dfor what service?16:50
*** katkee has joined #openstack16:50
mjforkSpirilis: those look right to me - can you pasetbin full stack?16:50
Spirilisthough I did modify horizon's pip-requires, I think it asked for openstackx and I removed that since I'd already d/l'ed it and installed before16:50
mjforkdid it error out? or did you remove it proactively?\16:51
*** perestrelka has joined #openstack16:51
SpirilisProactively16:51
*** llang629 has left #openstack16:51
SpirilisI was having enough trouble d/l'ing the packages (as gnu111 had above too) I lightened the load a bit...16:51
SpirilisLet me add that back and see what it does16:51
mjforkSpirilis: add it back and try again16:51
Tristani3Dmjfork: IP's of the swift-proxy-acct and swift-ring-compute node: http://pastebin.com/UsEhnuk616:52
*** deshantm has quit IRC16:52
*** betodalas has quit IRC16:52
mjforkTristani3D: pretty sure this si the problem public_url = http://192.168.122.5:8080/v1.1/AUTH_%tenant_id% and admin_url = http://192.168.124.81:8080/v1.0/AUTH_%tenant_id% |16:53
mjforklook @ IPs16:53
*** Leander has joined #openstack16:54
Tristani3D122.5 is from the swift-proxy-acct and swift-ring-compute node / public: eth0: 192.168.122.516:54
mjforki think the admin_url needs udpated16:54
mjforkand itnernal_url16:54
*** dev_sa has left #openstack16:55
Leanderhello! I'm in need of som help regarding the configuration of openstack with keystone16:55
Tristani3Ddont follow, to what?16:55
Leandersome*16:55
Spirilisah still rocking timeout hell, let me try it a few more times16:56
Spirilisor loop it with a script until it returns exit code 0 lol16:56
Leanderi have configured all the services according to the page: http://keystone.openstack.org/configuringservices.html (except for swift which is not installed at the moment), however i'm not sure how test if the integration is complete16:56
mjforkTristani3D: nevermind, i see now. can dashbaord telnet to http://192.168.124.81:8080/v1.0/AUTH_%tenant_id%16:57
Leanderi've tried to run the following command "sudo nova-manage project zipfile demo admin", i have both the tenant demo and the user admin configured there16:57
Spirilishmm, connection refused when doing the git's for git://github.com/rackspace/python-novaclient.git16:58
Spirilisthat might be our internal firewalling at fault, not sure16:58
Tristani3Dmjfork: root@d00-0c-29-40-bc-63:~# telnet  http://192.168.124.81:8080/v1.0/AUTH_%tenant_id%16:58
Tristani3Dtelnet: could not resolve http://192.168.124.81:8080/v1.0/AUTH_%tenant_id%/telnet: Temporary failure in name resolution16:58
Leanderhowever, it keeps failing and according to the logs it keeps performing a database look up16:58
Leanderam i missing something16:58
Leander?16:58
mjforkTristani3D: telnet 192.168.124.81 808016:58
Spiriliswell no good reason I can't switch that to using https I guess16:58
mjforkLeander: i don't beleive zipfile works with keystone16:58
*** Ramonster has quit IRC16:58
Tristani3Droot@d00-0c-29-40-bc-63:~# telnet 192.168.124.81 808016:58
Tristani3DTrying 192.168.124.81...16:58
Tristani3DConnected to 192.168.124.81.16:58
Tristani3DEscape character is '^]'16:58
*** cloudgeek has quit IRC16:59
Leanderthen how can use the euca commands?16:59
Leanderor do they not work as well with keystone?17:00
mjforkLeander: they do not work well with keystone, you can search the mailing list archives for more deatils17:00
mjforkTristani3D: do you see anything in dashbaord logs?17:02
*** Oneiroi has quit IRC17:03
*** lorin1 has quit IRC17:03
*** rods has joined #openstack17:03
Spirilismjfork: hot dang, that worked :)17:04
*** Ryan_Lane has quit IRC17:05
KiallLeander / mjfork: all the euca commands bar those needing a pem cert (ie image upload) work fine with keystone17:05
Tristani3Dmjfork: where are the dashboard logs?17:05
*** nati2 has joined #openstack17:05
mjforkTristani3D: how do you start dashbaord?17:06
Tristani3Dits started by crowbar17:06
mjforkTristani3D: in that case...i don't know :-) search for something like dashboard.log?17:06
SpirilisGUI looks nice... just gotta see why nova-volume and objectstore show up red now17:06
mjforkKiall: is it the standand zipfile create to get ecua working?17:06
Spirilisah nova-volume of course, the LVM volume group isn't active17:07
Kiallmjfork: no, none of the "nova-manage project" or "nova-manage user" commands should be used when you use keystone17:07
mjforkKiall: what is required then to use euca commands with keystone?17:07
Kiall(Really, those commands should disappear if keystone is used as they are useless and cause confusion)17:07
LeanderKial: then how exactly do i proceed?17:08
KiallCreate a novarc file, something like this: https://github.com/managedit/openstack-setup/blob/master/openrc.tmpl17:08
KiallAnd then add EC2 credentials to keystone like this: https://github.com/managedit/openstack-setup/blob/master/keystone_data.sh.tmpl#L3617:09
*** katkee has quit IRC17:11
*** ninkotech has joined #openstack17:13
*** RobertLaptop has joined #openstack17:13
Leanderaccording to the example configuration in "http://keystone.openstack.org/configuringservices.html", the NOVA_REGION should be RegionOne right?17:14
Leander(from https://github.com/managedit/openstack-setup/blob/master/openrc.tmpl)17:14
*** RobertLaptop has quit IRC17:14
*** clauden has joined #openstack17:15
Tristani3Dmjfork: gotta run, thx sofar17:16
*** Tristani3D has quit IRC17:16
*** maplebed has joined #openstack17:17
*** arBmind has quit IRC17:17
KiallLeander: it should be set to whatever you have in nova.conf and keystone..17:17
Spirilishot damn, Houston we have liftoff!17:17
SpirilisGot a KVM process started from the "tty" default image that devstack uses...17:17
KiallThat doc suggests its RegionOne, but I'm betting nova.conf has something different since that doc doesnt explain that they need to match17:17
SpirilisAll done through the GUI too...17:17
mjforkLeander: run keystone-manage endpointTemplates list17:18
Leanderi'm checing my nova.conf and i can't find any references to regions17:19
LeandernovaRegionOnehttp://172.16.225.138:8774/v1.1/ glanceRegionOnehttp://172.16.225.138:9292/v1.1/ keystoneRegionOnehttp://http://172.16.225.138:6000/v2.017:19
*** jeblair has quit IRC17:19
Leander(ouput from keystone-manage)17:19
mjforkuse RegionOne17:19
*** woleium has joined #openstack17:19
Spirilisand I am able to login to that instance.  Wow!17:19
Spirilismjfork: Thank you so much for your assistance.  Now I'm gonna document everything I did, blow away the server and redo it from scratch... crossing fingers... lol17:20
mjforkgood luck - what is your goal? developemnt? POC?17:20
*** mnour has joined #openstack17:21
*** deshantm has joined #openstack17:21
*** huslage has joined #openstack17:22
*** huslage has quit IRC17:22
Leandermjfork: thks. Do you know where the euca-* tools store their logs, if any? i think i have one port that's not well configured since i got a "[Errno 111] Connection refused" as a result17:24
*** jkyle_ has joined #openstack17:24
*** uksysadmin has quit IRC17:24
*** jkyle has quit IRC17:24
mjforkLeander: what are you trying todo?17:24
Leandereuca-describe-instances17:25
Leanderi'm trying to check if everything is well configured17:25
SpirilisPOC for now...17:26
*** jeblair has joined #openstack17:26
SpirilisThe end-goal is to have a dev environment for our web applications folks17:26
mjforkSpirilis: i would suggest not using devstack the17:26
SpirilisYeah17:26
SpirilisThat's why I'm rolling it by hand to get down into the muck of things17:27
SpirilisDevstack did at least provide a good learning reference17:27
SpirilisI had a lot of fun with Swift (cactus), we have a POC of that running at the moment, nobody's ponying up cash to build a real cluster though17:28
Spirilisso it's mostly a toy for us IT/storage folks17:28
SpirilisI think the nova cluster will be the first foot in the door17:28
*** andrewsben has joined #openstack17:31
*** vdo has quit IRC17:32
Leandermjfork: i'm trying to check if everything is well configured and ran euca-describe-instances17:32
*** bepernoot has joined #openstack17:33
*** jkyle_ has quit IRC17:33
*** Razique has quit IRC17:35
uvirtbotNew bug: #904850 in glance "Glance service selection from ServiceCatalog when using keystone" [Undecided,New] https://launchpad.net/bugs/90485017:36
mjforkSpirilis: very good - good luck!17:36
*** pixelbeat has quit IRC17:37
*** MarcMorata has joined #openstack17:38
*** pixelbeat has joined #openstack17:39
*** dotdevops has joined #openstack17:41
*** anpl has quit IRC17:42
*** lorin1 has joined #openstack17:43
*** vladimir3p has quit IRC17:44
*** sdake has quit IRC17:45
*** sdake_ has joined #openstack17:45
*** koolhead11 has quit IRC17:45
Leanderare the ports 6000/6001 reserved for something on linux?17:45
*** andrewbogott has joined #openstack17:45
*** deshantm has quit IRC17:45
Leanderkeystone wouldn't launch with 5000/5001 so i had to change them to 6000/6000117:45
*** sdake_ has quit IRC17:46
*** jdurgin has joined #openstack17:46
Spirilis6000+ is often used for the X11 display17:47
Spirilisif your server doesn't have X running on its console then it shouldn't be a problem17:47
*** sdake has joined #openstack17:47
Leanderit's running on a server17:47
*** adjohn has quit IRC17:47
Leanderif that's the case i'm not sure what the euca commands can't dial to17:48
Leanderconnect*17:48
Leanderi always get a connection refused error17:48
mjforkLeander: what command are you running? euca-describe-instances?17:48
Leanderyes17:48
mjforkpastebin the output and novarc file17:49
*** sdake has quit IRC17:50
Leanderoutput: [Errno 111] Connection refused17:50
*** sdake has joined #openstack17:50
mjforkok, and pastebin novsrc17:51
Leandernovarc: NOVA_API_HOST=172.16.225.138 GLANCE_API_HOST=172.16.225.138 KEYSTONE_API_HOST=172.16.225.138  KEYSTONE_TENANT="admin" KEYSTONE_USERNAME="admin" KEYSTONE_PASSWORD="nova"  NOVA_REGION=RegionOne  # Common Stuff Dont change export NOVA_USERNAME=$KEYSTONE_USERNAME export NOVA_PROJECT_ID=$KEYSTONE_TENANT export NOVA_PASSWORD=$KEYSTONE_PASSWORD export NOVA_API_KEY=$KEYSTONE_PASSWORD export NOVA_REGION_NAME=$NOVA_REGION export NOV17:51
Leanderexport OS_AUTH_USER=$KEYSTONE_USERNAME export OS_AUTH_KEY=$KEYSTONE_PASSWORD export OS_AUTH_TENANT=$KEYSTONE_TENANT export OS_AUTH_URL="http://${KEYSTONE_API_HOST}:6000/v2.0/" export OS_AUTH_STRATEGY="keystone"17:51
Leanderexport EC2_URL="http://${NOVA_API_HOST}:8773/services/Cloud" export EC2_ACCESS_KEY="$KEYSTONE_USERNAME:$KEYSTONE_TENANT" export EC2_SECRET_KEY=$KEYSTONE_PASSWORD export S3_URL="http://${GLANCE_API_HOST}:3333"17:51
*** yshh has quit IRC17:54
mjforkLeander: please paste it at paste.openstack.org17:54
Leandermjfork: sorry about that, http://paste.openstack.org/show/3843/17:55
mjforkcan you telnet 172.16.225.138 8773 on machine running ecua17:56
*** huslage has joined #openstack17:57
*** RobertLaptop has joined #openstack17:57
Leandernope, connection refused17:58
*** RobertLaptop has left #openstack17:58
mjforkthere is your issue17:58
mjforknetstat -tnap | grep LISTEN | grep 877317:59
mjforkanything there?17:59
Leanderempty result17:59
*** MarkAtwood has quit IRC17:59
mjforkso, nothing is liistening on 877318:00
mjforkon yor controlleris nova-api listening?18:00
Leanderthis is my nova.conf btw, http://paste.openstack.org/show/3844/18:00
uvirtbotNew bug: #904861 in horizon "Tenant id error on syspanel overview page." [Undecided,New] https://launchpad.net/bugs/90486118:01
*** pixelbeat has quit IRC18:01
uvirtbotNew bug: #904863 in glance "glance-manage db_sync fails with "no such option: add_group"" [Undecided,New] https://launchpad.net/bugs/90486318:01
mjforkwhy did you set ec2_dmz_host?18:01
mjforkdo you have multiple nodes?18:01
Leanderat the moment i do not18:02
mjforkalso - can you verify nova-api is running?18:02
Leanderi do that with nova-manage service list right?18:02
*** rnorwood has quit IRC18:03
mjforkps auxww | grep nova-api18:04
*** MarkAtwood has joined #openstack18:04
Leandernot running18:05
mjforkstart that service18:05
*** bepernoot has quit IRC18:05
mjforkare you a single node?18:05
Leanderyes18:05
SpirilisHmm, so it appears nova-api is returning an http 400 when I run euca-describe-images18:05
Spirilisor euca-describe-instances18:05
*** nacx has quit IRC18:06
Leandernova-api is not launching18:06
Leanderthe log say something like "CRITICAL nova [-] No module named ec2_token"18:06
Leandersays*18:06
mjforkok, sounds like your paste-api is not right18:06
Leanderapi-paste.ini > http://paste.openstack.org/show/3845/18:09
*** jdg has joined #openstack18:09
*** spiffxp has joined #openstack18:09
*** Hakon|mbp has quit IRC18:10
*** bepernoot has joined #openstack18:10
*** mchenetz has joined #openstack18:10
*** ejat has joined #openstack18:10
*** ejat has joined #openstack18:10
mjfork[filter:totoken]18:11
mjforkpaste.filter_factory = keystone.middleware.ec2_token:EC2Token.factory18:11
mjforkguessing that line, try googling it.18:11
*** TheOsprey has joined #openstack18:12
*** whit has joined #openstack18:12
*** koolhead17 has joined #openstack18:13
*** opensanjib has joined #openstack18:18
opensanjibhi all i have just installed openstack in a virtual system ubuntu 11.10 using devstack script...but i could not login to dashboard18:20
*** bepernoot has quit IRC18:20
*** rustam has quit IRC18:21
*** Ryan_Lane has joined #openstack18:22
*** nati2_ has joined #openstack18:22
*** nati2 has quit IRC18:25
Leandermjfork: i've tried to see if this was related to the issue http://osdir.com/ml/openstack-cloud-computing/2011-10/msg00704.html18:25
Leanderbut when i checked that file i did not find any "ec2_token.py"18:26
Leandercould it be that the version of keystone bundled with ubuntu 11.10 is outdated by now?18:26
mjforkLeander: what do you have in keystone/middleware dir?18:29
Leanderauth_basic.py          auth_token.pyc         nova_auth_token.py     swift_auth.pyc auth_basic.pyc         glance_auth_token.py   nova_auth_token.pyc    url.py auth_openid.py         glance_auth_token.pyc  remoteauth.py          url.pyc auth_openid.pyc        __init__.py            remoteauth.pyc          auth_token.py          __init__.pyc           swift_auth.py18:29
opensanjibdoes anyone know default user name and password for openstack dashboard that has been installed using devstack.org script18:30
mjforkwhere did you install from?18:30
Leanderapt-get18:30
mjforkdiablO?18:30
Leanderi think it's the latest release18:30
*** localhost has quit IRC18:30
mjforkLeander: i see that file in both stable/diable and maseter - no idea why you don't ahve it18:31
mjforkbut you need it18:31
Leanderi'm clueless as well18:31
*** localhost has joined #openstack18:32
mjforkLeander: grab it from github and drop it in, see what happens.18:32
*** huslage has quit IRC18:35
*** jog0 has joined #openstack18:36
*** cfant has joined #openstack18:36
*** mchenetz has quit IRC18:38
*** rnorwood has joined #openstack18:39
*** troytoman-away is now known as troytoman18:39
*** mattray has joined #openstack18:40
*** jakedahn has quit IRC18:42
*** lxu has joined #openstack18:43
lxuhi18:43
Leandermjfork: nova-api is now running18:43
Leanderi was also missing nova_keystone_context for some reason18:43
*** jog0 has left #openstack18:44
*** mchenetz has joined #openstack18:44
mjforkok18:45
Leandernow it get the following: Warning: failed to parse error message from AWS: <unknown>:1:0: syntax error \n None: None18:47
Leanderwhen i run euca-describe-instances18:48
*** adjohn has joined #openstack18:49
*** GheRivero has quit IRC18:49
*** opensanjib has quit IRC18:50
*** mchenetz has quit IRC18:50
*** mchenetz has joined #openstack18:52
mjforkcheck nova-api.log18:54
*** Tony_ has joined #openstack18:55
Tony_Hello all!18:55
*** lloydde has joined #openstack18:56
*** sdake has quit IRC18:57
Leanderthis is all i get INFO nova.api [-] 0.72431s 172.16.225.138 POST /services/Cloud/ None:None 400 [Boto/2.0 (linux2)] application/x-www-form-urlencoded text/plain18:58
*** Tony_ has quit IRC18:59
*** javiF has quit IRC18:59
jdgLeander:  I was just getting ready to ask the same question!18:59
mjforksorry, i don't think i can be of much more help here. i don't use euca2ools with Keystone.19:00
mjforkbest bet is general mailing list or launchpad answers19:00
Leanderthanks for all your help so far!!19:00
mjforkLeander: no porblem, too bad i couldn't finish it off.19:01
uvirtbotNew bug: #904888 in nova "nova db sync failure on precise" [Undecided,New] https://launchpad.net/bugs/90488819:02
*** rnorwood has quit IRC19:05
*** dpippenger has joined #openstack19:07
Leandermjfork: You brought me further than i possibly could19:07
Leanderwell, i got to run19:07
Leanderthanks for all the help19:07
*** Leander has quit IRC19:08
*** rnorwood has joined #openstack19:08
*** jakedahn has joined #openstack19:11
*** fghaas has joined #openstack19:11
*** zykes- has quit IRC19:11
*** jakedahn has quit IRC19:12
Spirilisyeah I'm getting that same error19:13
Spiriliscan't use euca-describe-images or anything else with it19:13
Spirilisof course the other thing is I'm not entirely sure what EC2_* variables to set19:13
Spiriliswith the keystone backended version19:13
Spiriliskeystone's got some token feature but I'm not sure how to craft the env variables from that19:13
*** darraghb has quit IRC19:14
mjforkcan you use the equivalent nova commands in place of euca19:14
Spirilishmm19:15
Spirilisare those based on nova-manage?19:15
mjforkwhat are you trying to do?19:15
Spirilisview what images I have available, and maybe launch an image from CLI19:15
Spirilisboth of those functions work OK in the Horizon gui so far19:16
Spirilisalso, add a public IP to a node, and add a nova-volume disk volume19:16
mjforkok, i think nova & nova-manage can do some of that19:17
mjforkbut not all19:17
Spirilisman it's just so confusing b/c the openstack docs all use euca-* commands in their examples, but I haven't seen anything about configuring the EC2_* variables that these cmds need19:18
mjforkyeah, did you verify all the entries you have in novarc are valid hosts/ports?19:18
*** katkee has joined #openstack19:20
Spirilisnovarc?19:20
Spirilisprobably need to generate that first :)19:20
annegentleSpirilis: yeah we've got a doc bug logged about taking out all euca commands and replacing with nova commands19:20
Spirilisare the euca-* commands being deprecated (i.e. new installations, should we ignore them for now?)19:21
mjforkannegentle: great news! that woudl be great19:21
annegentleSpirilis: http://docs.openstack.org/diablo/openstack-compute/admin/content/creating-certifications.html is where you learn how to create EC2 creds19:22
mjforkcomes up alot on the forums and here.19:22
*** crayon_z has quit IRC19:22
Spirilisannegentle: ah k thx :)  Does the fact that I'm using keystone affect any of that?19:22
annegentleSpirilis: well it's more nuanced than that, as I understand it. If you're using "deprecated auth" then you can continue to use EC2 and euca commands. If you're using Keystone, you want nova client commands.19:22
Spiriliscause I noticed nova-manage user list ... didn't show any users19:22
Spirilisahh k19:23
annegentleSpirilis: yup, with Keystone nova-manage is also deprecated19:23
annegentleSpirilis: and yeah, not all docs describe this nuance :)19:23
Spirilisahh k it's all making more sense now19:23
*** jakedahn has joined #openstack19:24
Spirilisis there a good command reference out there for the nova CLI?19:24
*** lloydde has quit IRC19:24
*** dirkx_ has joined #openstack19:25
Spiriliser nm, "nova help" seems to work :-)19:26
annegentleSpirilis: yeah that's your best one for now :)19:27
*** llang629 has joined #openstack19:28
*** zykes- has joined #openstack19:29
*** mchenetz has quit IRC19:29
*** mchenetz has joined #openstack19:29
Spirilisso to fill out the nova auth variables/options, username and password are obvious, what do you typically use for --apikey ?19:30
*** stuntmachine has joined #openstack19:31
*** map_nw has quit IRC19:32
Spirilisnm, figured it out, had to point my --url to Keystone rather than nova itself19:35
*** lxu has quit IRC19:36
*** llang629 has left #openstack19:39
ppradhanmjfork: hi. what might be the reason the brigde interface on compute node doesnot get the IP. One node gets the IP but the 2nd node doesnot19:39
mjforki what IP do you expect to be assigned to it?19:40
ppradhanmjfork: 10.0.0.x19:40
ppradhanthe 1st node gets 10.0.0.119:40
*** woleium has quit IRC19:40
ppradhan2nd node has no ip19:40
mjfork1st node = compute node? guest running on a compute node?19:40
*** woleium has joined #openstack19:40
mjfork1st node=  controller?19:40
ppradhan1st node controller, 2nd node compute19:41
ppradhanguest runs on 2nd node19:41
mjforkok, and the 1st node has a 10.0.0.1 IP?19:41
mjforkthe controller that is19:42
ppradhanyes correct19:42
*** vladimir3p has joined #openstack19:42
Spirilissweet, successfully created a nova-volume disk & attached it19:42
mjforkusing euca commands?19:43
mjforkppradhan: what networkign?19:43
ppradhanvlan19:43
ppradhaninterafces are up19:43
mjforki am guessing 10.0.0.1 IP is your VLAN gateway and controller node got it because it is running nova-network19:44
ppradhanif you have lets say 5 nodes.. every nodes' br100 interface should get the IP?19:45
mjforkno19:45
mjfork10.0.0.1 is a client network19:45
mjforkyou would not want your infrastrecuture running on it and accessible to clients19:45
ppradhanonly that runs the nova-network should get it?19:45
mjforkyes, because it is the gateway node19:45
Spirilismjfork: nah using the 'nova' cmd19:45
*** jog0 has joined #openstack19:46
ppradhanmjfork:  ok19:46
mjforkok, good. nova create-volumes?19:46
*** Draft has joined #openstack19:46
Spirilisyeah nova volume-create, volume-attach19:46
*** jog0 has left #openstack19:46
Spirilisnow I'm messing with deleting a volume, detaching one already attached, seems to work fine19:46
mjforki need a newer nova command19:46
mjforkmine doesn't have the volume-*19:46
Spirilisthough deleting a volume took a while19:46
Spirilisyeah I think I got python-novaclient from git19:46
*** vladimir3p has quit IRC19:46
*** fghaas has left #openstack19:46
*** alekibango has joined #openstack19:46
Spirilisthe nova cmd looks so much simpler to understand than the multitude of euca-* cmds19:47
Spirilisonly oddball is you have to specify numeric IDs for the servers, volumes, etc. and can't specify them by name.  I'm hoping that'll be fixed in the future ;)19:47
gnu111mjfork: I got the dashboard web interface running. Now, tacking the user management part. I already have a admin user in nova. But i need to create a new one right?19:49
mjforkhmm, i pastebin'ed command ealirer for you right?19:51
mjforkto setup admin user?19:51
DraftHello. I want to use the nova API to start an instance but in a specific zone. With ec2 API I can use "euca-run-instances -z zoneA xxxxx" but how to do it with nova client? Is it supported?19:53
*** bcwaldon has quit IRC19:53
*** whit has quit IRC19:53
gnu111mjfork: yes. this one: http://paste.openstack.org/show/3839/19:54
gnu111mjfork: how do you setup the password?19:55
*** yshh has joined #openstack19:55
uvirtbotNew bug: #904916 in horizon "Allocate floating ips does not work" [High,Fix committed] https://launchpad.net/bugs/90491619:56
mjforklog into the dashboard and create the users19:56
mjforkthats what i do19:57
gnu111mjfork: not sure which user/pass to use to login?19:57
gnu111keystone-manage user add admin admin is this the command for admin user/pass?19:58
mjforkadmin/admin for dshaboard19:59
*** yshh has quit IRC19:59
*** bcwaldon has joined #openstack19:59
*** siwos has joined #openstack19:59
gnu111mjfork: I get Error authenticating with keystone: [Errno 111] ECONNREFUSED19:59
mjforkin the dhasbord?20:00
gnu111yes.20:00
mjforkpastebin stacktrace20:00
gnu111mjfork: from the dashboard log? not sure how to get the stacktrace.20:02
mjforkyes, from dashbaord log20:03
mjforkalternaitive is from the screen20:04
*** praefect has quit IRC20:04
gnu111mjfork: my keystone wasn't running. But now I am getting 401 http://paste.openstack.org/show/3848/20:05
*** nati2_ has quit IRC20:05
*** jdg has quit IRC20:06
*** jdg has joined #openstack20:06
*** vlan-os has quit IRC20:06
*** Draft has quit IRC20:07
Spirilishmmm20:07
Spirilisfloating ips assign correctly it seems, but, I can't actually get to it from outside the compute/control/network server (they're all the same atm)20:08
*** zigo has quit IRC20:08
Spirilisgot it working so it assigns floating ips to interface br100, which links to eth0 (the only interface on the server), but can't ping that or hit port 2220:08
Spirilisiptables shows some DNAT rules set up for it that reroute to 192.168.10.220:09
Spirilislooks like the ARP is working, hosts outside that server correctly arp the MAC addr of the server for that floating IP20:09
*** pothos_ has joined #openstack20:09
*** pothos has quit IRC20:11
gnu111Spirilis: did you do euca-authorize?20:13
*** pothos_ has quit IRC20:13
*** pothos has joined #openstack20:13
Spirilisnah, probably haven't done the 'nova' cli equiv anyway20:14
Spirilislet me look at that20:14
*** Draft has joined #openstack20:14
mjforkgnu111: what is your token specified in the dasboard's local settings20:14
gnu111mjfork: ah! I forgot that part!20:15
*** dprince has quit IRC20:16
*** mchenetz has quit IRC20:16
*** pothos has quit IRC20:16
*** tmichael has quit IRC20:16
*** pothos has joined #openstack20:16
*** siwos has quit IRC20:17
mjforkSpirilis: what is your problem ?20:18
*** Draft has quit IRC20:18
*** pothos has quit IRC20:19
*** woleium_ has joined #openstack20:19
*** pothos has joined #openstack20:19
Spirilismjfork: I assigned a floating IP to a running VM, but can't actually communicate with that floating IP from the compute host itself or from a host outside that openstack node (but on the same physical LAN segment, and shares the same subnet as the openstack node's main IP)20:20
Spirilisjust started playing with the secgroup subcmds to authorize traffic20:20
Spirilisstill doesn't seem to be helping though20:20
uvirtbotNew bug: #904932 in nova "test_linux_net creates directories and files" [Undecided,New] https://launchpad.net/bugs/90493220:21
mjforkSpirilis: VLANs?20:21
*** pothos has quit IRC20:22
*** pothos has joined #openstack20:22
Spirilismjfork: not using VLANs in my openstack env, just FlatDHCPManager ... we use vlans in our larger enterprise environment, but this server has no awareness of it (its port isn't a trunk link)20:23
*** woleium has quit IRC20:23
*** woleium_ is now known as woleium20:23
mjforkSpirilis: assuming routing, etc is setup right for the floating IPs? did you run a tcpdump to see if they hit the nova-network controller20:24
*** map_nw has joined #openstack20:25
Spirilislet me try that20:25
*** pothos has quit IRC20:25
*** pothos has joined #openstack20:25
Spirilisjust to recap real quick though, tell me if this doesn't make sense-- my server's main IP is 10.104.51.142, the "floating IP" subnet I added (with nova-manage floating create) is 10.104.51.192/28, the IP I've assigned is 10.104.51.19220:26
Spirilisnothing else using that .192+ range on the network20:27
Spirilismy fixed IPs for the VMs is 192.168.10.0/2420:27
*** bsza has joined #openstack20:28
*** pothos has quit IRC20:28
*** pothos has joined #openstack20:28
*** map_nw has quit IRC20:29
Spirilisyep traffic is making it through the openstack node's eth0 for sure20:29
*** dirkx_ has quit IRC20:29
*** siwos has joined #openstack20:30
*** AhmedSoliman has joined #openstack20:30
*** dirkx_ has joined #openstack20:31
*** pothos has quit IRC20:31
*** pothos has joined #openstack20:31
mjforkis it hitting the compute nodes?20:32
Spirilisah I see one problem, the traffic isn't showing up on the bridge20:33
Spiriliseth0 sees the incoming traffic but br100 doesn't20:33
mjforkis iP_forwarding on and rp_filter in ssysctl20:33
*** siwos has quit IRC20:34
*** pothos has quit IRC20:34
*** pothos has joined #openstack20:34
Spirilislooks like it is, and rp_filter is enabled as well20:34
mjforktry rp-filter = 2?20:37
*** pothos has quit IRC20:37
*** pothos has joined #openstack20:37
Spirilisdidn't seem to make any difference20:38
Spirilisone thing I have noticed though is that I don't see any iptables rules for the secgroup-add-rule cmd for tcp port 2220:39
*** rnorwood has quit IRC20:40
mjforkSpirilis: i need to run, good lujck. back later if you need me.20:40
Spiriliserrr actually I take that back20:40
Spirilismjfork: thanks for all your help man!20:41
Spirilisthis almost sounds like a bug, the iptables rule was updated for instance #3 but not instance #2 when I modified the secgroup20:41
*** tmichael has joined #openstack20:45
*** bcwaldon has quit IRC20:45
Spirilisboom, manually added the iptables rules to instance #2 (which holds the floating IP) identical to what instance #3 saw after I ran nova secgroup-add-rule20:46
Spirilisnow I can ping and ssh from outside (pings return dupes though, probably since the server also registers the IP on its own interfaces)20:46
Spirilissweet!20:47
Spirilisannegentle: also much thanks to you for clarifying things :)20:47
Spirilisthis is exciting, now I get to build it all out again from scratch to see how much I learned ;)20:47
*** byeager has quit IRC20:47
*** jakedahn_ has joined #openstack20:53
nhmForgive me if this has been answered on the web somewhere, but can keystone provide auth services for existing users in ldap?20:54
*** spiffxp has quit IRC20:55
*** byeager has joined #openstack20:56
*** andrewsben has quit IRC20:56
*** MarcMorata has quit IRC20:56
*** jakedahn has quit IRC20:56
*** jakedahn_ is now known as jakedahn20:56
*** byeager has left #openstack20:57
*** andrewsben has joined #openstack20:57
*** byeager has joined #openstack20:58
gnu111nhm: This is in my todo list. If I understand correctly it can do authentication, not sure about authz. You probably seen this: http://mirantis.blogspot.com/2011/08/ldap-identity-store-for-openstack.html21:00
*** zul has quit IRC21:00
gnu111anyone seen the Error authenticating: Unauthorized error while login to dashboard?21:02
nhmgnu111: yep, though it looks like there you are expected to use keystone-manage.  I want to allow existing users from a centrally managed ldap installation to have acess to openstack.21:02
gnu111nhm: yes correct. before keystone there was a ldapdriver. but now keystone is the overall auth service and one of the option there is LDAP.21:02
gnu111nhm: here;s the older LDAP stuff: http://git.cloud.com/cgit/nova/tree/nova/auth/slap.sh21:03
*** tmichael has quit IRC21:03
nhmgnu111: yeah.  I haven't been able to find any new docs on keystone LDAP tying into an existing LDAP setup.21:04
*** sdake has joined #openstack21:05
*** zul has joined #openstack21:05
gnu111nhm: here's the new ObjectClasses: https://github.com/openstack/keystone/blob/master/keystone/backends/ldap/keystone.ldif21:06
*** whit has joined #openstack21:07
*** jakedahn has quit IRC21:07
*** andrewsben has quit IRC21:08
*** whit_ has joined #openstack21:08
*** lxu has joined #openstack21:08
*** dirkx_ has quit IRC21:08
*** jpwalters has joined #openstack21:08
*** heydrick has quit IRC21:09
*** stuntmachine has quit IRC21:11
Spirilisah yunno, I don't think that secgroup problem was a bug, the two instances I was running were in separate tenants21:11
Spirilisand my NOVA_PROJECT_ID was set to instance #3's tenant string21:11
Spiriliswoops :)21:11
*** whit has quit IRC21:12
jpwaltersI'm trying to get devstack installed on a fresh Ubuntu 11.10 VM, and the script fails with: mkdir: cannot create directory '/opt/stack/horizon/openstack-dashboard/quantum': permission denied21:12
*** whit_ is now known as whit21:12
jpwaltersanyone know what's going on?  I'm running the script as root, so I wouldn't think that there should be any permissions issues21:12
*** Ryan_Lane has quit IRC21:13
lxuis possible to have data replication with nova-volume?21:15
Spirilislxu: since nova-volume is backed by Linux LVM, I would think you could do data replication on the disk devices underlying that LVM VG if you wanted to21:16
jdgjpwalters:  Not sure, but aren't you supposed to run stack.sh as a regular user?  I believe it sudos and prompts for password to add to sudoers file.21:17
Spirilisthough I doubt you could guarantee that, say, the system magically fails over in the event that your primary host goes south21:17
*** Ryan_Lane has joined #openstack21:17
jdggnu111:  I run into this from time to time, for me restarting all of the glance, keystone and nova services resolves the issue.21:18
gnu111jdg: how do you restart keystone? I didn't create a service for it.21:19
jdgHow did you install?  Are you using screens?21:19
*** heckj has joined #openstack21:19
lxuSpirilis: ty21:20
*** lxu has quit IRC21:20
*** leifmadsen has joined #openstack21:20
jpwaltersjdg: I actually tried both ways, and got a different error as a non-root user, so I went ahead and tried as root21:21
jdgjpwalters: I've seen some finiky behavior with stack.sh but never like what you're describing.  Does the directory structure up to '.../openstack-dashboar' exist?21:22
jdggnu111:  Depending on how you installed, you can just try 'service keystone restart' and see if it works.21:22
*** Ryan_Lane has quit IRC21:23
jdgjpwalters:  you're not giving it 'sudo' when you run as a normal user are you?21:23
jpwaltersjdg: yes, /opt/stack/horizon exists21:23
jpwaltersand no, I wasn't giving it sudo when running from a normal user21:24
jdgjpwalters: that was for gnu111  ;)21:24
jdgjpwalters:  Does openstack-dashboard exist as well?21:24
jdgjpwalters: I'm running it on a fresh system right now... see if I run into the same problem.21:25
jpwaltersjdg: no openstack-dashboard doesn't exist...everything up to horizon does though21:26
*** vlan-os has joined #openstack21:28
*** andrewsben has joined #openstack21:28
jpwaltersjdg: I don't know what the difference was, but I restarted stack.sh as a normal user, and this time everything built correctly21:29
jdgjpwalters:  Sadly I have the same experience on a regular basis :(21:29
jpwaltersjdg: heh, well, for now I guess I'm good then.  Thanks for  your help21:30
*** tmichael has joined #openstack21:31
*** AhmedSoliman has quit IRC21:32
gnu111jdg: restarting the services didn't help: http://paste.openstack.org/show/3849/21:32
*** _adjohn has joined #openstack21:32
*** Trebortech has quit IRC21:34
*** adjohn has quit IRC21:34
*** _adjohn is now known as adjohn21:34
jdggnu111:  Unfortunatley you're delving into areas that I'm not that familiar with.21:34
*** lorin1 has quit IRC21:34
jdggnu111: How did you install your setup?21:34
gnu111jdg: thanks for your help. I think it is something basic I am missing. I just did the install following the steps here: http://forums.openstack.org/viewtopic.php?f=23&t=482&p=1745&hilit=github+horizon+keystone#p174521:35
*** dirkx_ has joined #openstack21:35
*** andreask has left #openstack21:36
jdgAhhh.... I tried that once  :( I ended up resorting to one of the openstack-installer script21:36
jdgIt's toooo easy to miss a step21:36
jdgone suggestion is check your db for user entries.21:37
gnu111jdg: ok.21:37
jdgsolidfire21:37
jdgoops... wrong window21:37
*** Nac_ has quit IRC21:38
uvirtbotNew bug: #904971 in nova "Error handler in Scheduler uses ID, not UUID" [Medium,In progress] https://launchpad.net/bugs/90497121:38
jdgDoes anybody know how to get nova commands or euca-xxxx commands to work with a devstack install?21:40
*** rnorwood has joined #openstack21:41
gnu111how do select a db in sqlite3?21:41
Spirilisjdg: if annegentle's info earlier is correct, the euca-* commands don't work since devstack uses Keystone, so only the 'nova' cmd works and 'nova-manage's user/project commands won't have the intended effect21:41
Spirilisanyway here's what I had to do to get the 'nova' cmd working:21:42
Spirilisset environment variables NOVA_USERNAME, NOVA_PASSWORD, NOVA_URL=<url to keystone, e.g. http://127.0.0.1:5000/v2.0/>, NOVA_VERSION=1.1, NOVA_PROJECT_ID=<tenant>21:42
SpirilisI think the tenants created include admin and demo21:43
uvirtbotNew bug: #904976 in nova "Floating ip association fails for non-admin users" [Undecided,New] https://launchpad.net/bugs/90497621:43
Spirilisbe mindful of which one you are in when you create instances, since the nova cmd will only change polices/perform work on the instances in that tenant21:43
jdgSpirilis:  Thanks a ton!!  I tried setting the env var's and even tried just using --username xxx --password xxx but no luck.  Maybe I missed something  in the URL/Version etc21:44
*** stuntmachine has joined #openstack21:44
*** whit has quit IRC21:45
*** mchenetz has joined #openstack21:45
Spirilisyeah, the URL has to point to the Keystone as I mentioned21:45
Spirilisand it will bomb if you don't specify a NOVA_PROJECT_ID or --projectid which is just a tenant21:46
*** v0id has joined #openstack21:46
*** andrewsben has quit IRC21:46
Spirilisand you can ignore the apikey part, I think the apikey portion is used when you create custom tokens in keystone21:46
*** mszilagyi has joined #openstack21:47
*** mszilagyi has quit IRC21:48
*** mszilagyi has joined #openstack21:48
jdgSpirlis:  Thanks, tried it but still getting the dang 'Invalid OpenStack Nova credentials'21:48
*** andreask has joined #openstack21:49
otaku2can anyone recommend a good linux-based nas server distro? anything to consider other than openfiler vs freenas21:49
Spirilisjdg: hmm, my devstack install works ok with this:  nova --username admin --password <adminpw> --projectid admin --url http://127.0.0.1:5000/v2.0/ --version 1.1 list21:50
uvirtbotNew bug: #904532 in nova "Provide a script to automate cleanup of _base" [Medium,Confirmed] https://launchpad.net/bugs/90453221:51
jdgAHHH!!!  that worked.  I must have fat fingered it the first time!21:53
jdgThank you thank you thank you21:53
Spirilisnp, remember it's NOVA_USERNAME, NOVA_PASSWORD, NOVA_URL, NOVA_VERSION, NOVA_PROJECT_ID that are the variables21:53
SpirilisI kept doing NOVA_PROJECT instead of NOVA_PROJECT_ID and that screwed me up21:53
*** whit has joined #openstack21:54
*** miclorb_ has joined #openstack21:54
*** katkee has quit IRC21:56
*** jj0hns0n has joined #openstack21:59
*** bepernoot has joined #openstack21:59
*** andrewsben has joined #openstack22:01
*** jdg has quit IRC22:02
*** Ryan_Lane has joined #openstack22:04
*** dolphm has joined #openstack22:10
*** whit has quit IRC22:12
*** dolphm has quit IRC22:14
*** donaldngo_hp has joined #openstack22:14
*** foexle has quit IRC22:21
*** donaldngo_hp has quit IRC22:26
*** mgoldmann has quit IRC22:27
*** whit has joined #openstack22:28
*** bepernoot has quit IRC22:31
*** dubsquared has quit IRC22:34
jasonaanyone done an openstack presentation lately ? :)22:39
*** bepernoot has joined #openstack22:40
jasonae.g to explain to a technical audience 'what is openstack' etc.22:40
*** redconnection has joined #openstack22:40
*** rsampaio has quit IRC22:41
*** bepernoot has quit IRC22:42
*** markvoelker has quit IRC22:43
*** lborda has quit IRC22:45
*** jj0hns0n has quit IRC22:46
*** dragondm has quit IRC22:47
*** glenc has joined #openstack22:50
*** ldlework has quit IRC22:51
*** jj0hns0n has joined #openstack22:51
*** glenc_ has quit IRC22:52
*** TheOsprey has quit IRC22:54
*** perestrelka has quit IRC23:00
*** tmichael has quit IRC23:04
*** perestrelka has joined #openstack23:04
*** ldlework has joined #openstack23:05
*** heckj has quit IRC23:06
*** jakedahn has joined #openstack23:07
uvirtbotNew bug: #905020 in horizon "Fix formatting of django tags in templates" [Undecided,New] https://launchpad.net/bugs/90502023:08
*** rnirmal has quit IRC23:08
*** vlan-os has quit IRC23:09
*** dirkx_ has quit IRC23:09
*** dirkx_ has joined #openstack23:09
*** PotHix has quit IRC23:11
*** troytoman is now known as troytoman-away23:13
*** imsplitbit has quit IRC23:14
*** jj0hns0n has quit IRC23:16
*** tmichael has joined #openstack23:19
*** krow has joined #openstack23:20
*** rustam has joined #openstack23:22
*** whit has quit IRC23:22
*** rnorwood has quit IRC23:22
*** jj0hns0n has joined #openstack23:23
*** hugokuo has joined #openstack23:24
*** adjohn has quit IRC23:25
*** adjohn has joined #openstack23:25
*** HowardRoark has quit IRC23:25
*** cfant has quit IRC23:25
*** po has quit IRC23:27
*** cfant has joined #openstack23:32
*** PiotrSikora has quit IRC23:34
*** Ramonster has joined #openstack23:34
*** PiotrSikora_ has joined #openstack23:35
*** whit has joined #openstack23:35
*** ppradhan has left #openstack23:36
*** RobertLaptop has joined #openstack23:37
*** RobertLaptop has left #openstack23:38
*** clauden has quit IRC23:40
*** clauden has joined #openstack23:41
*** cfant has quit IRC23:43
*** AlanClark has quit IRC23:45
*** mattray has quit IRC23:45
*** Ramonster has quit IRC23:49
*** bsza has quit IRC23:54
*** cfant has joined #openstack23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!