Tuesday, 2012-03-20

*** matiu__ is now known as matiu00:06
*** matiu has joined #openstack00:06
*** adjohn has joined #openstack00:06
*** adjohn has quit IRC00:06
*** miclorb_ has quit IRC00:07
*** vricci has quit IRC00:09
*** scoph has quit IRC00:10
*** infernix has quit IRC00:14
*** sandywalsh has quit IRC00:15
*** oneiroi has quit IRC00:15
*** albert23 has left #openstack00:18
*** vitiho has quit IRC00:18
*** vitiho has joined #openstack00:19
*** jj0hns0n has joined #openstack00:20
*** MarkAtwood has joined #openstack00:21
*** jj0hns0n has quit IRC00:24
*** medieval1 has joined #openstack00:28
*** emorisse has quit IRC00:30
*** krow1 has quit IRC00:35
*** localhost has quit IRC00:35
*** Deathvalley122 has quit IRC00:35
*** localhost has joined #openstack00:36
*** vincentricci has joined #openstack00:37
*** heckj has quit IRC00:37
*** straylyon has quit IRC00:37
*** Deathvalley122 has joined #openstack00:38
uvirtbotNew bug: #959426 in nova "nova services start before mysql on boot" [Undecided,New] https://launchpad.net/bugs/95942600:42
*** natea_ has joined #openstack00:46
*** dwcramer has quit IRC00:47
*** natea has quit IRC00:49
*** matiu has quit IRC00:50
*** littleidea has quit IRC00:51
*** natea_ has quit IRC00:51
*** Karmaon has joined #openstack00:52
*** nhm has quit IRC00:52
*** rnorwood has joined #openstack00:52
*** nhm has joined #openstack00:53
*** jelmer has quit IRC00:54
*** jelmer_ has joined #openstack00:54
*** kpepple_ has quit IRC00:54
*** devcamcar has quit IRC00:55
*** kpepple has joined #openstack00:55
*** devcamcar has joined #openstack00:55
*** vincentricci has quit IRC00:56
*** dolphm has quit IRC00:56
*** Blackavar has quit IRC00:57
*** miclorb_ has joined #openstack00:59
*** dwcramer has joined #openstack01:01
*** jj0hns0n has joined #openstack01:02
*** dolphm has joined #openstack01:04
*** dpippenger has quit IRC01:06
*** matiu has joined #openstack01:07
*** gyee has quit IRC01:09
*** nOStahl has quit IRC01:10
uvirtbotNew bug: #959843 in nova "Regression in libvirt lxc console" [Undecided,In progress] https://launchpad.net/bugs/95984301:11
*** nOStahl has joined #openstack01:11
*** livemoon has joined #openstack01:13
*** arrsim has joined #openstack01:14
*** swoo has quit IRC01:15
*** Girls_09 has joined #openstack01:15
*** gyee has joined #openstack01:16
*** Girls_09 has quit IRC01:20
*** songyan has joined #openstack01:21
*** songyan has left #openstack01:21
*** songyan has joined #openstack01:21
*** egant has quit IRC01:22
*** warik has left #openstack01:23
*** msavy has quit IRC01:25
*** vizsla has joined #openstack01:28
*** dneary has quit IRC01:30
*** spiffxp has quit IRC01:32
*** andreas__ has quit IRC01:33
*** paulmillar has joined #openstack01:36
*** sandywalsh has joined #openstack01:37
*** michael_tn has quit IRC01:38
*** jdurgin has quit IRC01:40
*** rods has quit IRC01:40
*** Ard1t2 has joined #openstack01:41
*** Ard1t has quit IRC01:41
*** gyee has quit IRC01:42
*** dolphm has quit IRC01:45
*** jj0hns0n has quit IRC01:47
*** agonella has joined #openstack01:48
*** mnabil has quit IRC01:50
*** johnpostlethwait has quit IRC02:04
*** Blackavar has joined #openstack02:08
*** GeorgeH has joined #openstack02:08
*** nid0 has quit IRC02:09
*** deshantm_ has joined #openstack02:09
*** scoph has joined #openstack02:10
*** ayoung is now known as ayoung-afk02:10
*** deshantm has quit IRC02:13
*** mikal has quit IRC02:15
*** marrusl_ has quit IRC02:20
*** dolphm has joined #openstack02:26
*** erkules has quit IRC02:26
*** erkules has joined #openstack02:27
*** refactor has quit IRC02:27
*** halfss_ has joined #openstack02:28
*** fifieldt has joined #openstack02:30
*** imsplitbit has joined #openstack02:32
*** halfss has quit IRC02:32
*** krow has quit IRC02:33
*** krow has joined #openstack02:33
*** scoph has quit IRC02:34
*** imsplitbit has quit IRC02:35
*** dprince has joined #openstack02:35
uvirtbotNew bug: #959881 in swift "webob 1.2b3 breaking the proxy server" [Undecided,New] https://launchpad.net/bugs/95988102:36
*** marrusl has quit IRC02:36
*** Karmaon has quit IRC02:41
*** Karmaon has joined #openstack02:42
*** Karmaon has joined #openstack02:43
*** agonella has quit IRC02:43
*** Karmaon has quit IRC02:44
*** Karmaon has joined #openstack02:44
*** krow has quit IRC02:44
*** Karmaon has quit IRC02:46
*** chasing`Sol has quit IRC02:46
*** Karmaon has joined #openstack02:46
*** halfss__ has joined #openstack02:48
*** Seoman has joined #openstack02:48
*** phorgh has joined #openstack02:51
*** halfss_ has quit IRC02:52
*** bradm_ is now known as bradm02:52
*** johnpostlethwait has joined #openstack02:52
*** infernix has joined #openstack02:53
*** dprince has quit IRC02:55
*** mikal has joined #openstack03:01
*** anotherjesse_zz is now known as anotherjesse03:04
*** rnorwood has quit IRC03:04
*** dolphm has quit IRC03:05
*** spiffxp has joined #openstack03:07
*** rnorwood has joined #openstack03:07
*** dtroyer_zzz is now known as dtroyer03:07
*** nOStahl has joined #openstack03:13
*** infernix has quit IRC03:17
*** ywu has quit IRC03:19
*** Gordonz has joined #openstack03:19
*** MarkAtwood has quit IRC03:20
*** nOStahl has quit IRC03:22
*** infernix has joined #openstack03:23
*** livemoon has left #openstack03:25
*** livemoon has joined #openstack03:26
*** matiu has quit IRC03:27
*** nOStahl has joined #openstack03:29
*** mikal has quit IRC03:29
*** refactor has joined #openstack03:29
*** livemoon has left #openstack03:29
*** matiu has joined #openstack03:33
*** dolphm has joined #openstack03:33
*** littleidea has joined #openstack03:33
*** mikal has joined #openstack03:34
*** tuf8 has quit IRC03:38
*** dtroyer is now known as dtroyer_zzz03:38
*** pixelbeat has quit IRC03:39
*** Gordonz has quit IRC03:42
*** mnewby has quit IRC03:43
*** tkleinscea has quit IRC03:43
*** littleidea has quit IRC03:44
*** catbot_ has joined #openstack03:44
*** MarkAtwood has joined #openstack03:46
catbot_I have 3 physical nodes with 8 cores per one, and the total cores are 24, that mean the number of virtual machine that I can run must be less or equal than 24, right?03:46
*** livemoon has joined #openstack03:47
catbot_much more, all the nodes run KVM hypervisor03:47
*** Seoman has quit IRC03:50
*** songyan has quit IRC03:52
*** songyan has joined #openstack03:52
*** dwcramer has quit IRC03:55
*** halfss__ has quit IRC03:57
*** clopez has quit IRC04:03
*** oneiroi has joined #openstack04:04
*** oneiroi has quit IRC04:04
*** MarkAtwood has quit IRC04:06
*** clopez has joined #openstack04:09
*** vitiho has quit IRC04:09
*** vitiho has joined #openstack04:10
*** wedjat has quit IRC04:14
*** halfss has joined #openstack04:16
*** halfss_ has joined #openstack04:16
*** thinrhino has joined #openstack04:18
*** halfss has quit IRC04:20
uvirtbotNew bug: #959916 in keystone "sql config options are incorrect" [Medium,In progress] https://launchpad.net/bugs/95991604:26
*** johnpostlethwait has quit IRC04:26
*** stewart has joined #openstack04:36
*** halfss_ has quit IRC04:39
*** dolphm has quit IRC04:39
*** wonk has quit IRC04:39
*** wonk has joined #openstack04:40
*** halfss has joined #openstack04:41
*** Kog|Work has left #openstack04:44
*** deshantm_ has quit IRC04:44
*** dubsquared has quit IRC04:53
*** littleidea has joined #openstack04:54
*** arrsim has quit IRC04:55
*** cryptk|offline is now known as cryptk04:57
*** hattwick has quit IRC05:02
*** Vek has quit IRC05:03
*** rnorwood has quit IRC05:05
*** hybridpollo has quit IRC05:10
*** epim has quit IRC05:21
*** fifieldt has quit IRC05:22
uvirtbotNew bug: #959929 in nova "--novncproxy_base_url is misdocumented" [Undecided,In progress] https://launchpad.net/bugs/95992905:31
*** matiu has quit IRC05:37
*** epim has joined #openstack05:38
*** q2112 has joined #openstack05:40
*** linmin1 has joined #openstack05:43
*** clopez has quit IRC05:44
*** wedjat has joined #openstack05:47
*** adjohn has joined #openstack05:52
*** issackelly has quit IRC05:53
*** matiu has joined #openstack05:54
*** matiu has joined #openstack05:54
*** taihen has quit IRC05:56
*** phorgh has quit IRC05:59
*** hingo has joined #openstack06:00
*** krow has joined #openstack06:04
*** rgoodwin has quit IRC06:04
*** chasmo has quit IRC06:07
*** dolphm has joined #openstack06:07
*** krow has quit IRC06:10
*** supriya_ has joined #openstack06:10
*** dolphm has quit IRC06:11
halfssi install dashboard+keystone+nova+glance+swift,now i use dashboard create an user,the user have permissions of nova,but don't have permissions of swift06:14
halfsswhat show i do if i want the user have swift permissions?06:14
halfssis there anyone can help me? thks06:14
*** oNeToWn has joined #openstack06:15
*** juergh has joined #openstack06:18
*** juergh has left #openstack06:20
*** juergh has joined #openstack06:21
*** chasmo has joined #openstack06:23
*** krow has joined #openstack06:24
*** dieterdemeyer has joined #openstack06:28
*** hingo has quit IRC06:28
*** Kiall has quit IRC06:33
*** koolhead17 has quit IRC06:34
*** Kiall has joined #openstack06:35
*** garyk has joined #openstack06:38
*** krow has quit IRC06:41
*** leifmadsen has quit IRC06:47
*** gpernot has quit IRC06:55
*** koolhead17 has joined #openstack06:55
*** Crshman has joined #openstack06:57
CrshmanWhat service provides the security group settings? Is that Quantum?06:58
*** Vek has joined #openstack07:00
uvirtbotNew bug: #959953 in swift "x-storage-url from remote server not referring to correct host address" [Undecided,New] https://launchpad.net/bugs/95995307:01
*** almaisan-away is now known as al-maisan07:06
*** al-maisan is now known as almaisan-away07:06
*** adjohn has quit IRC07:11
*** fifieldt has joined #openstack07:11
*** kayyagari has joined #openstack07:13
*** mindpixel has joined #openstack07:14
halfssnova-network07:15
*** eirikbb has joined #openstack07:15
*** supriya_ has quit IRC07:15
*** thinrhino has quit IRC07:15
*** epim has left #openstack07:16
*** thinrhino has joined #openstack07:18
*** dj_ryan has joined #openstack07:21
*** dpippenger has joined #openstack07:22
*** matiu has quit IRC07:23
*** thinrhino has quit IRC07:24
*** jopz has joined #openstack07:25
jopzhello07:25
jopzAfter completing openstack controller installation i am getting [Errno 13] Permission denied: '/var/www/.novaclient'07:26
*** miclorb_ has quit IRC07:26
jopzwhile accessing as project admin07:26
*** hermy is now known as hermy|away07:27
oNeToWn#keystone07:27
jopzkeystone-manage service add swift object-store "Swift-compatible Service"07:28
jopzkeystone-manage service add nova compute "OpenStack Compute Service"07:28
jopzkeystone-manage service add nova_compat compute "OpenStack Compute Service"07:28
jopzkeystone-manage service add glance image "OpenStack Image Service"07:28
jopzkeystone-manage service add identity identity "OpenStack Identity Service"07:28
jopzkeystone-manage endpointTemplates add RegionOne nova_compat http://192.168.0.69:8774/v1.0/ http://192.168.0.69:8774/v1.0 http://192.168.0.69:8774/v1.0 1 107:28
jopzkeystone-manage endpointTemplates add RegionOne nova http://192.168.0.69:8774/v1.1/%tenant_id% http://192.168.0.69:8774/v1.1/%tenant_id% http://192.168.0.69:8774/v1.1/%tenant_id% 1 107:28
*** cryptk is now known as cryptk|offline07:28
jopzkeystone-manage endpointTemplates add RegionOne glance http://192.168.0.69:9292/v1 http://192.168.0.69:9292/v1 http://192.168.0.69:9292/v1 1 107:28
jopzkeystone-manage endpointTemplates add RegionOne identity http://192.168.0.69:5000/v2.0 http://192.168.0.69:35357/v2.0 http://192.168.0.69:5000/v2.0 1 107:28
*** wariola has joined #openstack07:28
jopzkeystone-manage user add admin admin07:28
jopzkeystone-manage tenant add admin07:28
dj_ryanany good guides to installing openstack compute with ubuntu 12.04?07:28
jopzkeystone-manage role add Admin07:28
jopzkeystone-manage role grant Admin admin07:28
jopzkeystone-manage role grant Admin admin admin07:28
jopzkeystone-manage role add KeystoneServiceAdmin07:28
jopzkeystone-manage role add Member07:28
jopzkeystone-manage token add 999888777666 admin admin 2015-02-05T00:0007:28
dj_ryanjopz: er, stop07:28
jopzwhat?07:28
dj_ryanyou are pasing a lot of shit into the channel07:29
jopz<dj_ryan>07:29
jopzwhat u mean?07:29
dj_ryanare you kidding me?07:29
dj_ryanyou are pasting your entire installation script/output/whatthefuckever07:29
jopzactually i am posting the keystone07:30
jopzwhich i got error07:30
chmoueljopz: usually on IRC people use paste service for long texts like http://paste.openstack.org07:30
jopzoh ok07:30
chmoueland post the link07:30
jopzi will post it there07:30
dj_ryanyou should (a) get someone to indicate they'll look at your problem and (b) do what chmouel says07:30
dj_ryanin a bit more of a meta note, why do when i look at the 'crowbar' project and read 'cd images' cry like a little girl?07:31
jopzI have posted my keystone which i used07:32
jopzhttp://paste.openstack.org/show/11282/07:32
dj_ryanits 2012, cds and dvds are dying07:32
dj_ryanand have no place in production nodes imo07:32
jopzplease help me07:32
*** dxd828 has quit IRC07:32
jopzI am getting [Errno 13] Permission denied: '/var/www/.novaclient'07:33
jopzwhile accessing images in dashboard07:33
jopzas project admin07:33
*** robbiew has quit IRC07:33
chmoueljopz: its probably a unix permission problem i am not dashboard expert but that's where i would start investigating07:37
dj_ryanchmod 777 already dude07:38
*** jopz has quit IRC07:38
*** asavu has joined #openstack07:42
LarsErikPhi, trying to follow this guide. But keystone doesn't have any option "--token"07:43
LarsErikPit says07:44
*** robix has quit IRC07:44
q2112hi, how do you associate a vm instance to a specific network?07:45
*** staignan has joined #openstack07:45
*** ghe_ has joined #openstack07:48
*** msavy has joined #openstack07:51
*** shevek_ has joined #openstack07:51
Crshmanwhat's the difference between swift and nova-volume?07:53
Crshmanthey both handle storage right?07:53
chmouelswift is a object-storage (like s3) and nova-volume is a persistent block storage like ebs07:55
q2112swift is an cloud object store while nova-volume is to manage storage volumes in a cloud07:55
Crshmanohhhh07:55
Crshmanthanks guys07:55
CrshmanA lot of shit going on under the hood hereā€¦but it's all pretty neat (and overwhelming! :))07:56
q2112yep...yep07:56
*** hattwick has joined #openstack07:59
*** msavy has quit IRC08:02
*** thinrhino has joined #openstack08:04
*** cryptk|offline is now known as cryptk08:06
*** davepigott has joined #openstack08:06
*** nacx has joined #openstack08:07
*** gekko_ has joined #openstack08:08
LarsErikPhmm.. keystone-manage version say Implementation v2012.1-dev but I'm really missing the keystone-all command, keystone doesn't have the --token option.. what is wrong?08:09
koolhead17LarsErikP: are you using from ubuntu repository?08:10
LarsErikPno, i used the trunk ppa08:10
LarsErikPkoolhead17: here is the ouput from apt-get Unpacking keystone (from .../keystone_2012.1~e4~20120206.1578-0ubuntu0ppa1~oneiric1_all.deb) ...08:11
*** tjikkun has quit IRC08:11
koolhead17LarsErikP: sudo apt-get upgrade08:11
*** tjikkun has joined #openstack08:12
*** tjikkun has joined #openstack08:12
LarsErikPno... I did install it just now..08:12
LarsErikPSetting up keystone (2012.1~e4~20120206.1578-0ubuntu0ppa1~oneiric1)08:16
*** supriya has joined #openstack08:17
koolhead17LarsErikP: pastebin dpkg -l keystone*08:17
*** mattstep has quit IRC08:17
*** Ard1t2 is now known as Ard1t08:17
*** Ard1t has quit IRC08:17
*** Ard1t has joined #openstack08:17
*** mattstep has joined #openstack08:18
*** bepernoot has joined #openstack08:18
*** reidrac has joined #openstack08:19
*** dneary has joined #openstack08:20
*** dneary has joined #openstack08:20
*** miclorb_ has joined #openstack08:21
*** wariola has quit IRC08:22
*** phorgh has joined #openstack08:22
*** arBmind has joined #openstack08:26
koolhead17LarsErikP: http://paste.ubuntu.com/891890/   <-- my sources.list file08:26
oNeToWnI have the same problem as LarsErikP, I am using ubuntu repo's08:26
*** thinrhino has quit IRC08:26
oNeToWndeb http://ops.rcb.me/packages oneiric diablo-final08:27
koolhead17and this is the version of keystine am using http://paste.ubuntu.com/891892/08:28
LarsErikPbut i'm not using that repo..08:28
LarsErikPoNeToWn:08:28
koolhead17LarsErikP: just used the default precise repo, it works well08:29
LarsErikPkoolhead17: http://paste.openstack.org/show/11296/08:29
LarsErikPkoolhead17: i'm running on oneiric08:30
*** q2112 has quit IRC08:32
*** pixelbeat has joined #openstack08:32
oNeToWnthanks, koolhead17, i will try this one08:32
koolhead17LarsErikP: am not the right guy to tell you about that :(08:33
*** wariola has joined #openstack08:34
koolhead17oNeToWn: np :)08:34
*** kayyagari has quit IRC08:35
*** kayyagari has joined #openstack08:35
*** foexle has joined #openstack08:35
*** darraghb has joined #openstack08:36
*** gekko_ has quit IRC08:38
*** gekko_ has joined #openstack08:38
*** thinrhino has joined #openstack08:39
*** Ryan_Lane has quit IRC08:43
*** changlp has quit IRC08:44
*** changlp has joined #openstack08:44
LarsErikPis it impossible to get keystone rc1 in 11.10?08:44
*** ohad_ is now known as ohad08:46
*** kozze89 has joined #openstack08:46
*** Free_maN has joined #openstack08:51
*** vitiho has quit IRC08:52
*** vitiho has joined #openstack08:52
*** fifieldt has quit IRC08:53
koolhead17LarsErikP: i hope i could be in position to answer that :)09:01
uvirtbotNew bug: #960018 in swift "Missing tools and tox.ini in published tarballs" [Undecided,New] https://launchpad.net/bugs/96001809:01
koolhead17*wish09:01
*** Ryan_Lane has joined #openstack09:01
LarsErikPhehe. Seems that both glance and nova are in rc1 in 11.10.. but keystone is e4...09:02
koolhead17:)09:02
*** derekh has joined #openstack09:04
koolhead17seems like without nova endpoint i cannot log in to the dashboard09:05
*** Ryan_Lane has quit IRC09:08
*** jelmer_ is now known as jelmer09:09
foexleheyho guys09:10
*** kayyagari has quit IRC09:10
*** scoph has joined #openstack09:10
*** miclorb_ has quit IRC09:11
uvirtbotNew bug: #960027 in nova "Some files missing in python-novaclient tarballs" [High,Confirmed] https://launchpad.net/bugs/96002709:11
*** wariola has quit IRC09:11
*** almaisan-away is now known as al-maisan09:11
*** uksysadmin has joined #openstack09:12
*** linmin1 has quit IRC09:14
foexleheyho koolhead17 :)09:14
koolhead17hellp foexle09:16
*** wariola has joined #openstack09:19
*** bbcmicrocomputer has joined #openstack09:26
*** bbcmicrocomputer has joined #openstack09:26
*** kayyagari has joined #openstack09:29
*** linmin has joined #openstack09:30
uvirtbotNew bug: #960040 in horizon "Incomplete message text when starting multiple instances" [Undecided,New] https://launchpad.net/bugs/96004009:36
*** vitiho_ has joined #openstack09:38
*** vitiho has quit IRC09:38
koolhead17+09:39
*** thinrhino has quit IRC09:40
*** mikal has quit IRC09:42
*** linmin has quit IRC09:42
*** alexn6 has joined #openstack09:45
*** mikal has joined #openstack09:45
*** abbopenstack has joined #openstack09:49
* uksysadmin has been teased with a fixed Horizon in Ubuntu 12.04... damn you rsync... kick in!09:49
uksysadminor not!09:58
*** livemoon has left #openstack09:59
*** po has joined #openstack10:01
uvirtbotNew bug: #960060 in nova "Translation Item #70 should be updated" [Undecided,New] https://launchpad.net/bugs/96006010:05
*** conntrack has quit IRC10:07
LarsErikPokey.. precisce installed... new problem.. (but ofc..) No handlers could be found for logger "keystoneclient.client"10:08
LarsErikPwhen running keystone tenant-create ......10:08
uvirtbotNew bug: #960061 in nova "server is allowed to be deleted while image snapshot is in progress" [Undecided,New] https://launchpad.net/bugs/96006110:11
*** songyan has quit IRC10:12
*** thinrhino has joined #openstack10:14
*** wonk has quit IRC10:15
koolhead17LarsErikP: keystone --token ADMIN --endpoint http://<IP>:35357/v2.0 tenant-create --name openstack --description "Default Tenant" --enabled true10:15
*** wonk has joined #openstack10:15
koolhead17LarsErikP: keystone --token ADMIN --endpoint http://<IP>:35357/v2.0 tenant-list10:16
koolhead17what do you get10:16
koolhead17LarsErikP: https://github.com/openstack/keystone/blob/master/doc/source/configuration.rst  <-- this is where i got reference from10:19
*** miclorb_ has joined #openstack10:21
*** kesor_ has joined #openstack10:22
kesor_is there a way to run openstack inside a virtualbox or something?10:22
scophcan anyone help me with an "IndexError: list index out of range" on a fresh new swift install (initial balance of a new ring)10:24
*** mikal has quit IRC10:24
*** miclorb_ has quit IRC10:26
*** bjoernh has joined #openstack10:26
uksysadminkesor_: most people when trying out OpenStack do it in a vm10:26
scophIt appears that it may be because I only have one zone, but I need to do an initial "rebalance" to initialize the .gz files before I can add a second node/zone, correct?10:26
uksysadmininstall ubuntu as normal and then either grab devstack or follow any number of guides... give your vm enough ram to run and to run instances (say, 2Gb), enough disk space (say 20Gb) and install10:27
uksysadminif you virtual server software can't do nested hardware-vt, then set your --libvirt_type=qemu flag which will use software virtualization emulation10:28
uksysadminkesor_: self publicising: http://uksysadmin.wordpress.com/ although its a bit out of date... best just going straight for the OpenStack on Essex very small guide10:29
dweimerscoph: I believe that error usually happens when you have fewer zones than the number of replicas (3 by default). You can add multiple zones with swift-ring-builder before running rebalance. If you are using the default 3 replicas, make sure to have at least 3 zones in the ring before the first rebalance run.10:30
*** thinrhino has quit IRC10:30
*** bjoernh has quit IRC10:32
*** abbopenstack has quit IRC10:32
*** refactor has quit IRC10:33
foexleuksysadmin: nice :)10:34
foexleuksysadmin: but one point is missing :(10:35
*** abbopenstack has joined #openstack10:36
*** kayyagari has quit IRC10:37
*** vila has quit IRC10:38
*** vila has joined #openstack10:38
uksysadminfoexle: go ahead...10:41
*** bjoernh has joined #openstack10:42
alexn6Hi! A networking question. I still cannot get access VM for realIP from inside itself. What to check?10:43
*** mikal has joined #openstack10:44
scophdweimer:  cool, thanks10:45
foexleuksysadmin: advanced networking :)10:46
foexleuksysadmin: i'm looking for use shared services in openstack cloud10:46
kesor_uksysadmin: thanks, i'll try and get it working.10:47
foexleand i can't find any solution or an approach10:47
uksysadminfoexle, what do you mean? separating the installations? so a central keystone, central mysql cluster, etc?10:48
*** koolhead17 has quit IRC10:48
LarsErikPkordless: used ADMIN as token. worked fine now10:48
LarsErikPtnx10:48
*** linmin has joined #openstack10:49
foexleuksysadmin: yeah i've open a question https://answers.launchpad.net/openstack-ci/+question/191197 ... but yes thats the point10:49
foexleuksysadmin: using central db cluster, searching services and other...10:50
*** linmin has left #openstack10:50
uksysadminfoexle: as in the instances themselves use some resource that's already on your network?10:51
foexleyes thats the goal10:52
kesor_eucalyptus is open stack?10:52
foexlei've a central mysql cluster, there are all openstack related db's and all user DB's10:52
foexlekesor_: no10:52
foexlekesor_: its ubuntu's cloud stack10:53
kesor_i'm just reading uksysadmin's script, and it has euca2ools as a dependency, and rabbitmq, and mysql, and whatnot ..10:53
kesor_do i really need al that to create openstack? :/10:54
foexlehahahaha more and more ;)10:54
uksysadminkesor_: openstack is the environment - yes you need a database (although you can rely on a local sqlitedb), a messaging system (rabbitmq is the 'default') and yes you need everything else10:54
uksysadminits not virtualisation software, its a cloud operating system10:54
foexleeuca2ools are only to control your cloud with amazon api .... but you can use the nova client instead10:55
uksysadmineuca2ools and python-novaclient are the client tools to access your cloud to operate it10:55
kesor_i thought it was an api layer mostly10:55
uksysadminits a complete stack... OpenSTACK10:55
uksysadminnova-api provides the api10:55
uksysadminnova-compute allows you to spin up instances10:56
kesor_it doesnt sound so complete if you need to give it mysql, and rabbitmq, and whatnot.10:56
uksysadminkesor_... ????10:56
kesor_what is the bare minimum I need to run api requests that don't spin anything, just the api ā€¦  nova-api?10:56
uksysadminare you suggesting the project re-invents the wheel and produces its own database, messaging system, etc?10:56
uksysadminits built using open standards10:57
uksysadminnova-api will allow you to send commands... but that's like saying you only need the car door and not the whole care... you can have a door that opens, but you need the rest to make it into a car10:57
kesor_guess i'll read the installation guide :/10:57
uksysadminkesor_: do you want virtualisation or a cloud environment?10:58
kesor_i want the openstack api.10:58
kesor_:)10:58
*** foexle has quit IRC10:58
uksysadminwhat for?10:58
uksysadminwithout the other components those messages go nowhere10:58
kesor_to write software that talks to it, and then use it for rackspace/etc.10:58
kesor_i don't need them to go anywhere, not really.10:59
uksysadminkesor_, but when you talk to rackspace endpoint api, you're talking to the equivalent of the openstack nova-api10:59
uksysadminyou don't go:  nova-api -> rackspace-api10:59
kesor_ok, a simpler question ā€¦   is there a livecd with openstack installed that I can use to talk with?10:59
uksysadminthere is one in progress10:59
uksysadmineasier to install ubuntu then run devstack11:00
kesor_excellent, sounds like the perfect solution to what I need I think.11:00
uksysadminok11:00
kesor_found it here http://nova.openstack.org/livecd.html11:00
*** garyk has quit IRC11:02
*** garyk has joined #openstack11:03
*** abbopenstack has quit IRC11:03
*** thinrhino has joined #openstack11:05
LarsErikPin the creation of endpoints in keystone. The example only shows for nova. The URLs are different for keeystone, ec2 and glance, right? anyone remember the ports?11:05
LarsErikPand urls...11:05
*** egant has joined #openstack11:08
chmouelLarsErikP: I would advise to look over devstack: https://github.com/openstack-dev/devstack/blob/master/files/keystone_data.sh11:08
*** foexle has joined #openstack11:09
chmouelLarsErikP: in general i would install devstack in a VM and try to copy and paste the bit needed from your working devstack env11:09
foexleuksysadmin: sry kernel panic -.-11:09
*** stewart has quit IRC11:10
*** phorgh has quit IRC11:13
*** pixelbeat has quit IRC11:18
*** bjoernh has quit IRC11:19
*** de_ has quit IRC11:20
uksysadminawesome - Nova RC1 officially out11:22
*** FlorianOtel has joined #openstack11:23
*** stewart has joined #openstack11:23
uksysadminFlorianOtel: Flo-Rider... how are you?11:24
uksysadminI got swift and keystone working a charm11:24
*** nerens has joined #openstack11:24
uksysadminthanks to you guys and chmouel and agy11:24
*** kesor_ has quit IRC11:24
chmoueluksysadmin: great!11:24
FlorianOteluksysadmin, Steaming.11:25
FlorianOteluksysadmin, really crappy day so far -- debugging BOMs  and corporate shit I hate11:25
FlorianOtelanyway11:25
FlorianOtelhow's going for you ? Was just thinking to debug that doc, fix the swift proxy conf and shoot it over11:25
FlorianOtelI haven't even time to look at chmouel 's pad either :(11:26
FlorianOtelbad, really bad.11:26
*** hggdh has quit IRC11:27
uksysadminFlorianOtel: yes, you should feel bad. :p11:29
uksysadmin;-)11:29
*** pixelbeat has joined #openstack11:29
uksysadminall is good - just doing a reinstall of a box to have as a second compute node and a test swift server too so I've got something akin to a useable openstack environment11:30
uksysadminallow me to troubleshoot some networking, etc11:30
FlorianOteluksysadmin, Don't tell me you got glance on swift  w/ keystone auth 2.011:32
FlorianOteljust give me smth to cling on  :)11:32
*** alperkanat has joined #openstack11:35
*** oneiroi has joined #openstack11:37
*** hggdh has joined #openstack11:39
*** nerens has quit IRC11:40
*** nid0 has joined #openstack11:40
*** livemoon has joined #openstack11:40
*** mikal has quit IRC11:42
*** dwcramer has joined #openstack11:46
*** phorgh has joined #openstack11:47
LarsErikPhmmm got 401 when uploading image... the token it wants.. that is the keystone admin token?11:47
oneiroiLarsErikP: if you have linked glance + nova to keystone then yes11:50
LarsErikPnot installed nova yet... guide says glance first :p11:50
oneiroiah11:51
oneiroijust running glance+nova here atm from 2011.3 EPEL packages ... can't say I've tried glance + keystone only, can't see why it wouldn't work11:51
FlorianOteluksysadmin, mail on its way.11:51
uksysadminFlorianOtel, yes I have swift and keystone v2.0 auth11:52
LarsErikPoneiroi: okey.. no need for images yet anyways. Can install nova first. no prob.11:52
LarsErikPbut why would that make a difference?11:52
* FlorianOtel is going for a quick lunch before heading to the dentist. 11:52
LarsErikPoneiroi: running essex rc1 btw11:52
* FlorianOtel is away 11:52
*** rods has joined #openstack11:52
*** supriya has quit IRC11:53
*** ahasenack has joined #openstack11:54
*** ayoung-afk has quit IRC11:54
*** livemoon has quit IRC11:54
*** arBmind has quit IRC11:55
*** phorgh has quit IRC11:56
*** vizsla has quit IRC11:59
*** tserong has quit IRC12:06
alexn6uksysadmin, can you show yor keystone conf please? you have ubuntu repo openstack diablo install?12:09
alexn6uksysadmin, and swift keystone filter config also12:11
*** phorgh has joined #openstack12:11
uksysadminalexn6: I've been concentrating on Essex on 12.04 and the keystone configs have moved on somewhat12:13
*** livemoon has joined #openstack12:13
*** marrusl has joined #openstack12:14
alexn6uksysadmin, do yo know if one can use essex release keystone with older swift/nova releases? Is it worth for larger functionality?12:16
LarsErikPuksysadmin: know why I get 401 when trying to upload an image? :s12:20
uksysadminhmmm... I've seen updates to nova that were needed for keystone... not 100% sure if that configuration to be honest.12:20
LarsErikPto glance12:20
uksysadmin401 - A12:21
uksysadminUnauthorized12:21
*** supriya has joined #openstack12:21
uksysadmincheck your user/pass creds in keystone12:21
uksysadminand that you're specifying the correct tenant12:21
LarsErikPpretty sure i'm entering right cred12:21
uksysadminI tend to run keystone-all in a terminal to see the gory debug details12:22
uksysadmincheck you are authorized12:22
uksysadminyou also need to be a member of the 'admin' group too within your tenant for an upload to work12:22
uksysadminiirc12:22
*** leifmadsen has joined #openstack12:22
*** leifmadsen has joined #openstack12:22
LarsErikPi have my adminUser user, who is granted the adminRole role..12:23
LarsErikPin the openstackDemo tenant12:23
uksysadminadminRole isn't a standard role...  unless you have that specified as a role that is an admin12:23
LarsErikPhmm12:23
LarsErikPi may have to fix that.. just followed the guide :s http://docs.openstack.org/trunk/openstack-compute/install/content/setting-up-tenants-users-and-roles.html12:24
TREllisuksysadmin: did you manage to get the ec2 api bits working yet?12:24
uksysadminTREllis: not yet12:25
uksysadminmy setup: ubuntu 12.04, Essex from Ubuntu (last updated packages were Friday), keystone, glance, nova and swift with keystone. can use swift and nova client tools, not euca12:26
uksysadmindashboard still broken for me too12:26
*** paulmillar has quit IRC12:26
*** paulmillar has joined #openstack12:26
uksysadminonce I've just finished a re-install of a second compute node I'll tackle "swift+keystone+glance" which I believe should be doable now? /cc chmouel ?12:27
*** paulmillar has quit IRC12:29
*** praefect has quit IRC12:30
*** mutex has quit IRC12:30
*** viraptor has quit IRC12:30
*** Ard1t has quit IRC12:30
*** leifmadsen has quit IRC12:30
LarsErikPwhat env-variables do i need to set? i'm tired of specifying --username and so on for the keystone-commands12:30
*** changlp_ has joined #openstack12:30
*** mutex_ has joined #openstack12:30
*** changlp has quit IRC12:31
*** Ard1t has joined #openstack12:31
*** changlp_ is now known as changlp12:31
*** DigitalFlux has joined #openstack12:32
chmoueluksysadmin: there is a HP guy who's doing the change on glance, it should not be too hard (see one of the post this morning sent to the mailing list)12:32
uksysadminchmouel: yeah will do. Florian sent me his workings so I'll see what I can follow, bearing in mind I'll be looking at doing this with debs as much as possible - else I'll wait until Friday/next week for the Ubuntu guys to catch up12:32
uksysadminLarsErikP: just looking at that document... hmmm - think the role name has to match a config entry (either in keystone.conf or glance.conf - when I've finished an install I'll double check)12:32
chmoueluksysadmin: cool, hopefully things will get much more apt-getable quickly in the next couple of weeks now that RCs are coming out12:32
uksysadmine.g. you can call your admin role "god" if you like, providing that keystone has been told that god is essentially an alias to the admin role12:32
uksysadminchmouel: yes - hope so.  it needs it.12:32
*** praefect has joined #openstack12:33
*** dneary has quit IRC12:33
uksysadminLarsErikP: see if this helps: https://github.com/uksysadmin/OpenStackInstaller/blob/essex/upload_ubuntu.sh12:34
chmouelLarsErikP: something along those lines http://pastie.org/private/zj4ryxkznkr6s1vgla6czw12:35
*** supriya has quit IRC12:35
uksysadminLarsErikP: sorry - I misread tired as tried12:35
*** arBmind has joined #openstack12:38
*** kesor_ has joined #openstack12:39
*** ldlework has joined #openstack12:40
LarsErikPuksysadmin: so, how do i tell keystone that the adminRole actually is a admin-role? :s12:42
*** thinrhino has quit IRC12:43
*** Glacee has joined #openstack12:43
*** kbringard has joined #openstack12:44
LarsErikPchmouel: no OS_AUTH_KEY?12:45
uksysadminLarsErikP: I just grepped 'admin' in /etc/keystone and in the policy.json there is a line: policy.json:    "admin_required": [["role:admin"], ["is_admin:1"]]12:45
LarsErikPuksysadmin: ok, i'll check12:45
*** leifmadsen has joined #openstack12:46
*** emorisse has joined #openstack12:49
*** kesor_ has left #openstack12:49
*** littleidea has quit IRC12:50
*** viraptor has joined #openstack12:51
*** andrewsmedina has quit IRC12:51
*** AlanClark has joined #openstack12:52
*** leifmadsen has quit IRC12:53
*** indiaswift has joined #openstack12:57
LarsErikPuksysadmin: i have that to... changed it to "role:adminRole"12:57
LarsErikPno effect12:57
uksysadminrestarted services?12:58
indiaswiftHi, need some help on openstack swift formpost middleware12:59
*** pimpministerp has joined #openstack12:59
*** rkukura has quit IRC12:59
notmynameindiaswift: if you don't get an answer, ping me in an hour or so, and I'll try to help13:00
indiaswiftCool, thnx13:00
livemoonhi13:02
livemoonanyone can tell me how to configure vncproxy and xvnc13:03
*** indiaswift has quit IRC13:03
TREllisuksysadmin: likewise, I have all that going except swift with keystone13:04
*** dwcramer has quit IRC13:06
*** fabiand__ has joined #openstack13:07
LarsErikPuksysadmin: suddenly worked... think i missed admin_token in glance-api.conf13:08
*** leifmadsen has joined #openstack13:08
*** bjoernh has joined #openstack13:09
*** heyho has joined #openstack13:10
*** sandywalsh has quit IRC13:11
*** stewart has quit IRC13:11
*** al-maisan is now known as almaisan-away13:12
*** lts has joined #openstack13:18
*** cryptk is now known as cryptk|offline13:19
uksysadminTREllis: just got swift + keystone working in the last day13:19
uksysadminLarsErikP: glad all working!13:19
*** andrewsmedina has joined #openstack13:20
*** ayoung has joined #openstack13:20
*** mattray has joined #openstack13:21
*** ayoung has quit IRC13:21
*** ayoung has joined #openstack13:22
kbringardanyone remember the command to query your compute nodes for available resources?13:23
*** natea has joined #openstack13:24
kbringardah, n/m, figured it out13:24
kbringard: nova-manage service update_resource ā€”host= ...13:24
*** sandywalsh has joined #openstack13:25
*** stewart has joined #openstack13:27
*** markwash has quit IRC13:27
*** fabiand__ has quit IRC13:27
*** Free_maN has quit IRC13:28
*** Free_maN has joined #openstack13:28
*** natea has joined #openstack13:30
oNeToWnhum, LarsErikP, any luck?13:31
oNeToWnI got a problem when register an image. http://paste.ubuntu.com/892172/13:32
*** tkleinscea has joined #openstack13:33
*** pimpministerp has quit IRC13:33
*** primeministerp has quit IRC13:34
*** primeministerp has joined #openstack13:34
*** deshantm has joined #openstack13:35
*** bjoernh has quit IRC13:39
*** adjohn has joined #openstack13:39
*** adjohn has quit IRC13:40
*** mdomsch has joined #openstack13:41
*** markwash has joined #openstack13:41
*** rkukura has joined #openstack13:42
*** lborda has joined #openstack13:43
*** halfss has quit IRC13:44
*** natea has quit IRC13:47
*** nRy_ has joined #openstack13:47
*** Teduardo has joined #openstack13:47
*** nRy has quit IRC13:48
*** msavy has joined #openstack13:48
*** nid0 has quit IRC13:50
*** michael_tn has joined #openstack13:52
*** almaisan-away is now known as al-maisan13:54
*** mattray has quit IRC13:54
alexn6can anyone tell me If he can work from instance with public address assigned with that address itself?13:55
*** mrjazzcat has joined #openstack13:55
*** krow has joined #openstack13:56
*** tserong has joined #openstack13:56
*** tserong has quit IRC13:56
*** tserong has joined #openstack13:56
*** livemoon has quit IRC13:57
*** cloudvirt has joined #openstack13:57
*** cloudvirt has left #openstack13:57
*** mattray has joined #openstack13:58
*** bjoernh has joined #openstack13:58
uksysadminalexn6: not sure what you mean?13:59
*** livemoon has joined #openstack13:59
alexn6mm.. I see now this in docs - "Note that you cannot SSH to an instance with a public IP from within the same server as the routing configuration won't allow it."14:00
alexn6I mean smth like this, but not only ssh14:00
alexn6uksysadmin, clear?14:01
LarsErikPoNeToWn: managed to upload image now14:01
uvirtbotNew bug: #960218 in keystone "belongsTo should validate on tenant ID not name" [Undecided,In progress] https://launchpad.net/bugs/96021814:01
*** dwcramer has joined #openstack14:04
alexn6uksysadmin, can you check this? ssh from node with public IP to that IP14:05
*** indiaswift has joined #openstack14:05
uvirtbotNew bug: #960226 in nova "Nova API os-hosts extension broken" [Undecided,New] https://launchpad.net/bugs/96022614:06
*** mdomsch has quit IRC14:06
*** mdomsch has joined #openstack14:06
*** natea has joined #openstack14:07
*** supriya has joined #openstack14:10
oNeToWnLarsErikP, sounds good. I still can not upload any shit now. >o14:10
*** swiftindia has joined #openstack14:12
uksysadminalexn6: you  mean if I have a "public ip" assigned say 172.16.1.1 and I ssh to that instance.  Then from that instance i want to ssh to 172.16.1.1 ?14:14
alexn6uksysadmin, yes14:14
uksysadminalexn6: why would you?14:15
Dieterbeis the hashing in swift consistent? as in, if nodes join the cluster, will the files get nicely redistributed with minimal overhead?14:15
uksysadminyou should get an ssh prompt up, but you won't be able to log in as the private key you used to log in to that instance won't be on that instance you spun up14:15
alexn6uksysadmin, then just try to telnet 172.16.1.1 2214:16
notmynameDieterbe: yes14:16
alexn6can you just try?14:16
uksysadminah, yes - your instance has a private IP... it doesn't know about itself14:17
uksysadminso you mightn't get an ssh prompt up14:17
uksysadminit doesn't know, when inside the instance, it has a different IP assigned to it14:17
alexn6it doesn`t matter - it go and ask dnsmasq on nova-compute14:18
alexn6or smth like this14:18
uksysadminalexn6: I'm failing to understand the use case for this... you would just ssh to localhost if you want to ssh to itself14:18
*** objectiveous has quit IRC14:18
uksysadminor the private range14:18
scophI'm  getting "Object PUT returning 503, 1/2 required connections".  running  'swift -A http://my-proxy:8080/auth/v1.0 my setup =  2-nodes, 2 zones, 4 drives-node/zone.  I've confirmed that the rings are set up and that swift works and that the ports are listening on serverB.  can anyone help?14:18
Dieterbenotmyname: thanks, also, do you know what happens when nodes go offline? the files will get rebalanced and the mappings will be adjusted, right?14:19
alexn6uksysadmin, we have some services, that want access itself via net and also must have public accessible urls for the same resources14:19
LarsErikPanyone experienced this? http://paste.openstack.org/show/11373/ essex14:19
*** michael_tn has quit IRC14:19
*** alperkanat has quit IRC14:19
scophsoory, that should have read: 'swift -A http://my-proxy:8080/auth/v1.0Ā  /auth/v1.0 -U system:me -K mypass upload myfiles /tmp/testfile114:20
*** alperkanat has joined #openstack14:20
notmynameDieterbe: if they get pulled from the ring, yes. otherwise, existing content will have one less replica and new content will get a replica put on a handoff node (to be moved when the down node comes back online)14:20
uksysadminalexn6: then you access via hostname, not ip14:20
LarsErikPcompute is throwing that stuff14:20
uksysadminwhere the hostname internally will resolve to the internal IP14:20
uksysadminand externally will resolve to the external IP14:20
notmynamescoph: check your object server logs to see why the 2nd PUT to the object server failed14:20
notmynamescoph: with 2 replicas, both must succeed on PUT for the proxy to return 2xx14:20
Dieterbenotmyname: thanks.  i'm comparing swift to ceph. we need a HA object store, size +- 100TB of files, avg 150MB upto 5GB (later, files will get bigger). file access preferably over linux vfs mount (although api is acceptable too). it seems to me ceph is a bit more promising, but less tested, whereas swift seems to have more production deployments14:23
scophnotmyname: I've been looking through them and haven't found any indicators as to why it's failing14:24
scophprobably time to crank up log_level14:24
* FlorianOtel is back14:24
alexn6uksysadmin, we have working implementation of some package on real node, but to make it work in the cloud we had to make object like innerIP and outerIP -i.e. some kind of change concept and code rewriting. Also you may think about token and auth/certs etc. To me it looks like this is not very rare case, especially if you not know exactly what must be public and what is localhost_like enough14:24
*** fukushim_ has quit IRC14:24
*** livemoon has quit IRC14:25
LarsErikPuksysadmin: do you know anything about my paste up there?14:25
notmynamescoph: one of your 2 storage nodes should have an error about why it couldn't write the object (permissions, drive not mounted, etc)14:25
*** clopez has joined #openstack14:26
alexn6uksysadmin, will try. don`t think about it. but then hostname must be in public dns, not only in dnsmask14:26
*** andrewsmedina has quit IRC14:27
uksysadminalexn6: its how EC2 do it if it helps... seems like a good model to follow14:27
alexn6uksysadmin, btw - real case - tokens in keystone for swift and ssl host cert - must be there an IP or name?14:27
*** andrewsmedina has joined #openstack14:28
uksysadminLarsErikP: are you missing a package?14:28
LarsErikPuksysadmin: maybe... don't which one.. but.. i created thedirectory.. stopped complaining14:29
*** robbiew has joined #openstack14:29
LarsErikPstill something wrong about the roles...14:29
uksysadminLarsErikP: actually scrub that - you must have a config issue14:29
uksysadminits not present on my system14:29
LarsErikPaha14:29
uksysadminand the instances suggests it should be /var/lib/nova/instances...?14:29
LarsErikPyeah.. it was that before... sec, i shall post conf14:30
*** msavy has quit IRC14:30
*** maploin has joined #openstack14:30
*** maploin has joined #openstack14:30
LarsErikPuksysadmin: http://paste.openstack.org/show/11374/14:30
*** robix has joined #openstack14:32
alexn6uksysadmin, I mean that in swift account has storage url with IP by default, and ssl cert of proxy usually is hostname - so when service with HTTPS want to use that cert it must use cert with IP not with hostname14:32
Dieterbenotmyname: so, any thoughts on swift vs ceph for blob storage?14:33
Dieterbeor anyone else, for that matter14:33
*** linztm has joined #openstack14:35
*** thinrhino has joined #openstack14:36
*** kayyagari has joined #openstack14:37
*** sZoz has joined #openstack14:37
LarsErikPhow do I ensure that a role in keystone actually _is_ a admin role?14:38
*** alaski has joined #openstack14:39
*** indiaswift has quit IRC14:39
*** dubsquared has joined #openstack14:40
*** indiaswift has joined #openstack14:40
uksysadminLarsErikP: this is done on a per-service basis14:40
uksysadminin swift this is specfied in /etc/swift/proxy-server.conf14:41
*** dolphm has joined #openstack14:41
uksysadmin[filter:keystone]14:41
uksysadminpaste.filter_factory = keystone.middleware.swift_auth:filter_factory14:41
uksysadminoperator_roles = Member,admin14:41
uksysadminin glance this seems to be /etc/glance/policy.json14:41
*** arBmind has quit IRC14:42
LarsErikPokey. then i need to check horizon14:42
uksysadminalexn6: ssl cert can be hostname or ip14:42
LarsErikPuksysadmin: leaving for work now... talk tonthon  wstgrd :-)14:42
LarsErikPtalk to*14:42
uksysadminnp see ya14:42
*** dachary has joined #openstack14:42
dacharyHi, is there a HOWTO explaining how to retrieve an AMI from AWS to store it in glance ?14:43
alexn6uksysadmin, ok. Thanks a lot  for good advice!14:43
*** swill has joined #openstack14:44
*** alaski has left #openstack14:44
uksysadminnp14:45
swilli am finding that slogging has data for the same hour in more than one log, should the values be summed together?14:46
swillthat is probably a question for notmyname14:46
notmynameswill: that's expected (or at least not unusual). in whatever importer/aggr you are using for the resulting files, you should combine them (note that storage numbers should not be summed)14:47
*** dneary has joined #openstack14:48
FlorianOteluksysadmin, ok..now that was new to me (wrt /etc/glance/policy.json). Mind pointing me to docs ?14:48
swillok, i need to check which numbers are storage.  so are storage numbers the total storage used to that date?14:48
FlorianOtelor, for that matter, the format for that file ?14:48
annegentledachary: hm,not that I know of, but good idea for a howto14:49
scophnotmyname: this is all I'm seeing so far: https://gist.github.com/213641814:49
swillnotmyname: storage is a total in its self and is not the storage added in that period.14:49
scophnotmyname: hah, nevermind.  I think I found the problem14:50
dacharyannegentle: it looks like this is not possible : http://stackoverflow.com/questions/3893614/download-an-amazon-ec2-ami https://forums.aws.amazon.com/thread.jspa?messageID=13184114:50
notmynameswill: the storage number is in bytes and is the average number found in the files processed in that log processing run. yes, it's total, not a delta14:50
*** n0ano has quit IRC14:50
uvirtbotNew bug: #960261 in glance "Need policy control over making images public" [Medium,In progress] https://launchpad.net/bugs/96026114:50
uvirtbotNew bug: #960265 in nova "DescribeVolumes EC2 API issues" [Undecided,New] https://launchpad.net/bugs/96026514:50
zynzelany good habits to drop traffic from vm to openstack infrastructure? (for example from vm you have access to ALL volumes in nova-volume, from vm you have access to compute-node ssh)14:51
*** rnirmal has joined #openstack14:51
swillnotmyname:  is that only the 'bytes_used' field or are there other storage fields that i am not recognizing?14:51
*** MarkAtwood has joined #openstack14:51
*** dubsquared has quit IRC14:51
notmynameswill: that's the only one14:52
swillok ty.14:52
uksysadminFlorianOtel: I was guessing... was the only place that mentioned "admin"... see /etc/glance/policy.json14:53
FlorianOteluksysadmin,  On that, I'm reading  Jay P. answer here: https://bugs.launchpad.net/glance/+bug/953989/comments/2    wrt to "long-lived" tokens being now deprecated14:54
uksysadminalthough... erm.... I grepped before and it was there... my file is empty now14:54
uksysadmin:S14:54
FlorianOteluksysadmin,  (so is mine)14:54
uksysadminFlorianOtel, yeah - its all about user/pass14:54
* uksysadmin wonders who's server he grepped before!14:54
FlorianOteluksysadmin, ok, so what do we do with in swift then   ?14:55
uksysadminah no14:55
uksysadminit was /etc/keystone/policy.json14:55
annegentledachary: ah, ok.14:55
uksysadminfor glance, there are no restrictions on creating machines14:56
FlorianOteluksysadmin, "Keystone...Glance...it's all policy.json to me" huh :)) ?14:56
FlorianOtelsorry mate, just kidding14:56
uksysadmin:)14:56
uksysadminhaha14:56
uksysadminmy swift set up is good now14:56
uksysadminI've not had a chance to read your blog...14:56
*** jj0hns0n has joined #openstack14:57
FlorianOteluksysadmin, yes, but does it use a long-lived token or username/pass14:57
*** hhoover has joined #openstack14:57
FlorianOtelin "tokenauth" middleware14:57
uksysadminah, see what you mean14:57
uksysadminerm... tbh, not sure14:57
*** zzed has joined #openstack14:57
*** shaon has joined #openstack14:58
FlorianOteluksysadmin, oh, so Jay must have meant that the concept was deprecated only in Glance / Nova14:58
FlorianOtelbut not in Swift14:58
*** hhoover has left #openstack14:58
alexn6uksysadmin, one more thing - what if I configure service with dnsmasq hostname, and then try on outer machine use URLs to objects with that hostname in path. And real DNS not know about machine at all or have other name. If I don`t allow to make static reference in real DNS, I must use publicIP and then again this scheme will not work straightforwardly. Do you know such cases?14:58
FlorianOtelbrilliant.  Tripple Hurray  for consistency !14:58
uksysadminlol14:59
uksysadminyes looking in proxy-server.conf for keystone setup, I have tokens and user/pass14:59
*** mattray has quit IRC14:59
*** blamar has joined #openstack14:59
swillnotmyname: if you are going to bill on 'bytes used', would you bill based on the largest 'bytes used' number in the billing period?14:59
uksysadminalexn6: my head just exploded reading that.14:59
uksysadminFlorianOtel: I guess it *should* use short lived user/pass generated tokens15:00
notmynameswill: no, we use the average (mean). the number could be high or low depending on different conditions, so the mean is "good enough". especially since it's calculated hourly but billed monthly15:00
*** indiaswift has quit IRC15:00
uksysadminnot the ADMIN/999888777666 token hard set - that was what jaypipe was referring to15:00
swillnotmyname: ok, that makes sense.  thanks.15:01
*** bjoernh has quit IRC15:01
alexn6uksysadmin, ups. sorry then. Nevermind :)  Simply - you have http server and give users urls to objects in it for a local and external services, but cannot change real DNS, then just http://hostname/object will not work.15:04
FlorianOteluksysadmin, dude. your mixing things up  -- or  I misunderstand you badly.  "proxy-server.conf" is  swift proxy config. The "tokenauth" section is Keystone middleware . And to me the configs for that middleware should be the same in both Swift and Glance15:04
FlorianOteli.e. in "proxy-server.conf" for Swift, resp "glance-api-paste.ini" for glance15:05
*** nRy_ has quit IRC15:05
*** michael_tn has joined #openstack15:05
FlorianOtelAnd, come to think of it, it's called "tokenauth" in proxy-server.conf and "authtoken" in glance-api-registry.ini.15:07
FlorianOtelMeaning that we can call them "icyposicletokenauthonastick" if we want to15:07
*** natea has quit IRC15:07
FlorianOtelfark15:08
*** Blackavar has quit IRC15:08
*** ryanpetrello has joined #openstack15:08
*** swill_ has joined #openstack15:09
*** aex has joined #openstack15:09
*** aex is now known as stmod15:09
*** troytoman-away is now known as troytoman15:09
stmodhi all15:09
*** swill has quit IRC15:09
*** swill_ is now known as swill15:09
*** mdomsch has quit IRC15:10
* michael_tn waves, good day all15:10
*** vincentricci has joined #openstack15:11
stmodI am doing a research in comparing the API of Openstack with other cloud APIs. Can someone help me?15:11
*** anotherjesse is now known as anotherjesse_zz15:11
*** rgoodwin has joined #openstack15:13
stmoddoes exist documents explaing the relationship between OpenStack and the other APIs ?15:13
FlorianOteluksysadmin, Now I got me totally confused. My swift is happily using the admin token but glance -- referring to same middleware -- can't / shouldn't (as per Jay's comment). Ok, clear as mud.15:13
*** dwcramer has quit IRC15:14
* uksysadmin thinks everyone is smoking crack in #openstack today15:14
uksysadmin;-)15:15
*** msavy has joined #openstack15:15
FlorianOteluksysadmin, pass the pipe, I'd happily "joint" the party :)15:15
uksysadminalexn6: sorry - I'm doing some day job work and getting distracted... I'll have to help you another day, sorry.15:15
uksysadminpass the pipe? think you're hogging it.15:15
uksysadminhands up if you think FlorianOtel is a nutter?15:16
uksysadmino/15:16
uksysadmin:S15:16
uksysadmin;-015:16
* FlorianOtel raises two hands15:16
blamarstmod: I haven't seen anything comprehensive, but off the top of my head there is the SimpleCloud project which attempts to deal with a bunch of different cloud APIs?so that might be helpful?15:16
uksysadminjust checking15:16
uksysadminSo yes, proxy-server.conf is like the api-paste stuff - they enable the interaction with keystone for that service15:17
*** rclewis has joined #openstack15:17
stmodblamar: thank you, I will have a look to that project, because I am really confused about this topic.15:17
FlorianOteluksysadmin, bingo15:17
FlorianOteluksysadmin, i.e. "auth_token" middleware15:17
uksysadminI'm just happy that I've got a working setup - think if those long live tokens disappear, it will just be another release of OpenStack15:17
uksysadminor another day15:17
alexn6uksysadmin, all well. You`ve managed to help me. I know that it`s uneasy to work and answer here. Good day to you!15:18
FlorianOteluksysadmin, so, as my swift is working perfectly fine with that setup15:18
uksysadminnp!15:18
*** littleidea has joined #openstack15:18
uksysadminFlorianOtel: I think you have an advantage, you're using github source15:18
FlorianOteluksysadmin, why the actual fsck  cannot glance / nova -- using the same middleware -- cannot /15:18
uksysadminI'm bound to the ubuntu folks15:18
uksysadminFlorianOtel: I get you15:18
uksysadmintechnically, yes, it should be the same mechanism15:19
uksysadminsend user/pass, get token back15:19
uksysadmin?15:19
* FlorianOtel reminds uksysadmin that he's still hogging the pipe15:19
uksysadminpoint taken15:19
FlorianOtelso no, I'm not using github :)15:19
blamarstmod: Sure, let me know if I can help reduce confusion at all.15:19
FlorianOtelno dude, I'm freaking not.15:19
FlorianOtelI'm using Essex-4 keystone + swift v1.4.6 and -- up to this point -- glance Essex-415:20
stmod@blamr: may we have a priv chat?15:20
stmodsorry blamar15:20
*** natea has joined #openstack15:20
uksysadminFlorianOtel: I'm on Ubuntu 12.04 B1, E4~RC1 kinda world from the Ubuntu repos for Nova, Glance, Keystone, Swift15:20
*** jct has quit IRC15:21
*** jct has joined #openstack15:21
FlorianOteluksysadmin, That's cheating.15:21
uksysadminhahaha15:21
uksysadminsomething about deploying tested packaged code kinda fits here though... crazy as we are ;-)15:22
*** Gordonz has joined #openstack15:22
* FlorianOtel goes grabs t-shirt with "I'm with crazy" logo on15:22
*** jct has quit IRC15:23
FlorianOtelI think I need to pull the latest keystone (is it RC1 now ?) and look at auth_token there, and send a mail to the list to sort this out.15:24
swillnotmyname: i am finding that 'container_requests' seems to be an ever increasing number as time passes.  is that field also a total?15:24
*** jct has joined #openstack15:24
* uksysadmin goes and puts on his "I'm with crazy T-shirt"15:24
* FlorianOtel goes types crazy mail mail to the mailing list and and spoofs it as from a certain email addie from UK :)15:26
dolphmFlorianOtel: RC1 is coming, but not out yet15:26
uksysadminFlorianOtel: I don't think our Queen cares you're faking her mail addy again though15:27
*** dwcramer has joined #openstack15:27
*** roge has joined #openstack15:28
notmynameswill: I think that should be the count of requests in the processed logs. so yes, a total for that run15:30
*** thinrhino has quit IRC15:31
*** jj0hns0n has quit IRC15:31
*** hub_cap has joined #openstack15:31
*** seth_ has joined #openstack15:32
*** jj0hns0n has joined #openstack15:33
swillnotmyname: does that explain why each successive log has an increased number for that?  so to figure out the number of requests in a period, i need to find the value for 'container_requests' at the beginning of my period and subtract that from the last entry in my period?15:34
*** al-maisan is now known as almaisan-away15:35
notmynameswill: hmmm....that's not what I'd expect (but I haven't looked at that part of the code in a while)15:35
swillnotmyname: its not what i was expecting either, but that is what it is looking like from what i am seeing.15:36
swillnotmyname: its not hugely important because i am not billing on that right now.15:37
swillnotmyname: i just wanted to understand.  :)15:37
*** roge has quit IRC15:38
*** TheCops has left #openstack15:38
*** littleidea has quit IRC15:38
*** vitiho_ has quit IRC15:39
*** mdomsch has joined #openstack15:39
notmynameswill: a quick glance at the code makes it seem like it should just be a total of container-level requests for that log processing run15:40
*** roge has joined #openstack15:40
*** alexn6 has left #openstack15:42
swillnotmyname: i will need to do a bunch of testing with controlled data to ensure everything works as expected, so i will do some testing of this when i do that.15:42
*** arBmind has joined #openstack15:42
uksysadminhas anyone had experience of using keystone, swift and setting acls using the swift tool?15:44
swilluksysadmin: yes, i have done that15:45
swilluksysadmin: i am not using keystone anymore though, so i am not sure if I will be much help because i cant really test anything right now.15:45
*** mestery has quit IRC15:46
uksysadminswill: no probs15:46
swilluksysadmin: are you having specific problems?15:46
uksysadminswill: I've setup a user, 'member' who is just a 'Member' in the 'demo' tenant.15:46
uksysadminI created a container in my swift environment called 'test' by a user that was an admin15:47
uksysadminswift -V 2.0 -A http://172.15.0.1:5000/v2.0/ -U demo:demo -K openstack post test -w demo:member15:47
*** garyk has quit IRC15:47
uksysadmin(demo user is admin in demo tenant)15:47
uksysadminI assumed that -w option allowed member in the demo tenant write access15:47
*** davepigott has quit IRC15:48
swilluksysadmin: one sec, i am checking what i had written.  i did it in chef, so i should have what i had working at one point (i know keystone has changed since i had that setup working).15:49
*** dneary has quit IRC15:49
* swill checking...15:49
uksysadminawesome. thanks swill.15:49
*** cloudvirt has joined #openstack15:50
*** cloudvirt has left #openstack15:50
*** Gordonz has quit IRC15:51
*** Gordonz has joined #openstack15:51
*** heckj has joined #openstack15:52
swilluksysadmin: i will have to check, but i am not sure that you can change the permissions on a container once it is set.  you may have to create the container with the permissions set.  i remember something like that.  i am still checking.15:52
*** indiaswift has joined #openstack15:52
uksysadminok - never thought of that - can play15:53
uksysadminah, could be me...15:54
uksysadminwhen trying to write to a container, I get the following:15:54
uksysadminError trying to create container 'test2': 403 Forbidden: 403 Forbidden15:54
uksysadmin(as the member user)15:54
*** wilmoore has joined #openstack15:55
*** Blackavar has joined #openstack15:55
kbringardwhat sort of memory oversubscription ratios do people recommend?15:55
kbringardlike, allocated to vms : total compute host memory15:56
uksysadminactually, no - the Account is consistent: (Account: AUTH_5a015a68e21f40b6bae8975e815ac703 in my case)15:56
uksysadminwhich is AUTH_$(tenant_id)s in my keystone setup15:57
blamarkbringard: I like a 1:1 :) Good performance.15:57
kbringardblamar: hehe, fair enough15:57
*** krow has quit IRC15:59
*** chevin has joined #openstack15:59
swilluksysadmin:  so i was only trying to set ACL on creation of a container.  i am not sure if that was because i could not get it to work otherwise or if that is all i was testing.15:59
swilluksysadmin:  in the auth middlewhere i wrote, i allow for acl to be an account.  here is how i set the acl.16:00
swillswift -v -A http://127.0.0.1:8080/v1.0 -U $account_1_user -K $account_1_key post -r $account_2_name -w $account_2_name swift_container16:00
swillthis would give read and write access to account 2 on the container swift_container16:01
uksysadminswill: yes that's the syntax I've just done16:02
*** armaan has joined #openstack16:02
uksysadminswift -V 2.0 -A http://172.15.0.1:5000/v2.0/ -U demo:user -K openstack stat test2  Account: AUTH_5a015a68e21f40b6bae8975e815ac70316:02
uksysadminContainer: test216:02
uksysadmin  Objects: 016:02
uksysadmin    Bytes: 016:02
uksysadmin Read ACL: demo:member16:02
uksysadminWrite ACL: demo:member16:02
uksysadmin  Sync To:16:02
uksysadmin Sync Key:16:02
uksysadminAccept-Ranges: bytes16:02
uksysadmin(user is also an admin in demo)16:02
armaanDoes latest devstack support fedora too ??16:02
swilluksysadmin: so is it working?  it seems to have the right acl set (no?)16:04
uksysadminswill: no16:04
uksysadminmy proxy-server.conf is set so that only users with 'admin' role are an admin16:04
uksysadminmember is just a member of 'Member'16:04
*** indiaswift has quit IRC16:04
uksysadminand I get 403 when trying to upload a file to that test2 container16:04
*** dneary has joined #openstack16:05
uksysadminsyslog shows a 403 for PUT /v1/AUTH_xxx/test216:06
uksysadminand correctly identifies the user being just a member of 'Member'16:06
*** vitiho has joined #openstack16:06
uksysadminI'll post to the mailing list to see if its something that has crept in recently16:07
swilluksysadmin: is 'Member' and 'demo:member' different?16:07
swilluksysadmin: are you using tokenauth or swiftauth?16:07
uksysadminswill: member has been assigned the 'Member' role in the 'demo' tenant16:07
uksysadmintokenauth16:08
*** thinrhino has joined #openstack16:08
*** mutex_ has quit IRC16:08
*** aliguori has quit IRC16:09
uksysadminarmaan: its a shell script for ubuntu16:09
armaanuksysadmin: i heard the latest also support for fedora16:09
uksysadminmaybe they have a fork of it... www.devstack.org - only used Ubuntu 11.10 for it16:10
russellbit hasn't been merged in yet16:10
*** freeflyi1g has joined #openstack16:10
armaansame here, only tried it on ubuntu16:10
russellbyou can try it from here though: https://review.openstack.org/#change,436416:11
*** rkukura has quit IRC16:11
russellbarmaan: ^16:12
*** jdurgin has joined #openstack16:13
*** freeflying has quit IRC16:13
*** dieterdemeyer has left #openstack16:13
*** maplebed has joined #openstack16:13
swilluksysadmin: it just occured to me.  you are using tempauth style acl groups.  maybe try with just the role name.  if i remember correctly token auth did not require the role to be the same syntax.16:13
uksysadminok16:15
uksysadminswill: tried that originally and it failed, but tried again to be sure. and still 403.16:15
swillok16:16
FlorianOtelphew.16:16
*** mutex has joined #openstack16:16
FlorianOtelthat took a while to write down16:16
FlorianOtellet's see if anyone can make sense of it :)16:16
* uksysadmin goes to check his email for an epic. Grabs popcorn too.16:16
FlorianOteluksysadmin, grab the biggest bag you can find mate -- it is going to be epic.16:17
*** reidrac has quit IRC16:17
uksysadminswill: you've been a help - I'm sure you've other things to do. I'll post a mail to the mailing list to see if any can see any failing in what I'm trying to do.16:18
swilluksysadmin: just so you know.  there used to be a bug in tokenauth (https://bugs.launchpad.net/keystone/+bug/890415) which was causing it to not handle acl correctly.  this was why i originally changed from tokenauth to swiftauth (to solve that problem).16:19
swilluksysadmin: since then I wrote my own auth middleware and removed keystone completely, so i am not up-to-date with the current status of keystone (and tokenauth).16:19
swilluksysadmin: just found this...  using swift auth, i was setting ACL with:16:21
swillswift --auth-version 2.0 -A http://127.0.0.1:5000/v1.0 -U company:company_admin -K testing post -r User -w User company16:21
*** llang629 has joined #openstack16:21
swillthe 'company' at the end is actually the container name16:21
uksysadminswill: so that is just the user and not tenant:user16:22
*** cloudvirt has joined #openstack16:23
swilluksysadmin: yes...  this was my test script to make sure my acl was working with swift_auth:  http://pastebin.com/yfsvJVEv16:23
*** marrusl has quit IRC16:23
*** marrusl has joined #openstack16:23
swill--auth-version 2.0 was required to make that work.16:24
*** imsplitbit has joined #openstack16:24
uksysadminI could even be tripping over myself with the different middleware and the like... and the flag: operator_roles... I mistook that as admin role16:24
swillalso setting up the keystone database correctly was key.  let me see if i can find more files i can give you to show how my setup was configured.16:25
uksysadminyour tests don't test ACL, just that your admin user can upload and delete things?  I'd expect User to be auth'd to test the upload16:25
*** qazwsx has joined #openstack16:25
*** llang629 has left #openstack16:25
*** rkukura has joined #openstack16:25
*** koolhead17 has joined #openstack16:27
*** asavu has quit IRC16:27
swilluksysadmin: no, the admin creates a container that allows a user to upload and download.  then it uses the user to test if they can upload and download.  notice that the user is different.16:28
*** armaan has left #openstack16:28
swillhere was my keystone conf file: http://pastebin.com/2iZLfMkB16:28
*** bepernoot has quit IRC16:28
*** spiffxp has quit IRC16:28
*** Turicas has joined #openstack16:28
swilluksysadmin: and this is how i configured keystone.  http://pastebin.com/Hm2WsKUj16:29
swilluksysadmin: sorry that some of the naming of roles and such are kind of ugly.16:30
*** warik has joined #openstack16:30
*** zomGreg has joined #openstack16:31
uksysadminswill: ah yes16:31
swilluksysadmin: my proxy conf was this: http://pastebin.com/LcS4VtFL16:31
swilluksysadmin: did that shed some light on things?16:32
*** n0ano has joined #openstack16:32
*** jct has quit IRC16:33
uksysadminI don't understand the relationship between: -U company:company_user and post -r User -w User16:33
zomGregwhat controls the X-Storage-Url that's returned from an auth attempt to the swift endpoint?16:33
zomGregi auth against 10.1.2.3 and I get a 127.0.0.1 as the X-Storage-Url16:33
zomGregwhat do I need to tweak to make it report 10.1.2.3 as the X-Storage-Url?16:34
*** aliguori has joined #openstack16:34
*** jct has joined #openstack16:34
*** foexle has quit IRC16:36
uksysadminswill: ahh.. peny drops.. is 'User' a role, not a user...16:36
uksysadmin(recalls you said this!)16:36
*** clauden_ has joined #openstack16:36
swilluksysadmin: yes.  :)16:36
*** spiffxp has joined #openstack16:37
*** rnorwood has joined #openstack16:37
swilluksysadmin: check this to see how my user, role, etc is setup in keystone: http://pastebin.com/Hm2WsKUj16:37
swilluksysadmin: keep in mind that i have not used keystone in a few months and i know it has been changing, so this is the last working state i had, but i have not tested in months.16:38
uksysadminswill: well something is different... but end result the same: 40316:38
*** armaan has joined #openstack16:38
uksysadminbut in logs I get: "user xxx:member allowed in ACL: Member authorizing16:39
swilluksysadmin: make sure you have configured the Admin and KeystoneServiceAdmin roles (which are defined in your keystone conf).  if you dont, you will get 403's all day.  (if i remember correctly).16:39
uksysadminbut preceding I get a 40316:39
uksysadminyeah Admin is now 'admin' in keystone light (or that's the trend these days!)16:40
*** gekko_ has quit IRC16:40
swilland the KeystoneServiceAdmin role?16:40
swillor the equivalent in your keystone.conf file16:40
*** juergh has quit IRC16:40
uksysadminno don't have one of those... think that's replaced by the keystone user in the service tenant16:40
*** supriya has quit IRC16:41
*** gekko_ has joined #openstack16:41
swilluksysadmin: here was my keystone conf file for reference: http://pastebin.com/2iZLfMkB16:41
swillif those are not setup correctly i know you will have issues.16:42
uksysadminswill: it has done it16:42
uksysadminweird16:42
swillwhats that?16:42
uksysadminI get a 403 but then I see a 20016:42
uksysadminwhen I upload now, it works16:42
swilldid you change anything?16:42
uksysadminbut it says "can't create container... xxxx...." and then uploads the file anyway16:42
uksysadminonly the role bit - the bit where I missed what you put about role and thought user16:43
swilluksysadmin: you could be using a bad syntax for the swift tool.  look at my test file to see what was working for me.16:43
uksysadminlooks like a bug now16:43
swillright16:43
dolphmuksysadmin: that's correct KeystoneServiceAdmin role has been replaced16:43
*** cloudvirt has left #openstack16:43
swilldolphm: thanks for confirming that for us.  :)16:43
dolphmpost essex-4, i think16:43
dolphmnp16:44
swillit has been a while since i have worked with keysone16:44
swillbut i am glad we got you going.  :)16:44
*** medieval1 has quit IRC16:44
uksysadminswift --auth-version 2.0 -A http://172.15.0.1:5000/v2.0 -U demo:member -K openstack upload test4 /tmp/test/test216:44
uksysadminError trying to create container 'test4': 403 Forbidden: 403 Forbidden16:44
uksysadminAccess was denied to this resource.16:44
uksysadmin16:44
uksysadmintmp/test/test216:44
uksysadminsee the 403 then the 20016:44
*** medieval1 has joined #openstack16:45
uksysadmindef in a better place16:45
uksysadminI'll check for bugs now16:45
uksysadmindoes seem like a bug - trying to create a container before uploading16:45
robixcan anyone confirm the chance scheduler can crash compute hosts?  I hear it doesn't check for resources first so it can over allocate crashing the host....16:46
swilluksysadmin: ya, it is a better place to be troubleshooting from.  good luck.  :)16:47
uksysadminswill: yes, definitely. thank you!16:48
swilluksysadmin: np.  :)16:48
uksysadminI'm out of here now - great timing!16:48
*** uksysadmin has quit IRC16:48
*** mindpixel has quit IRC16:49
*** heyho has quit IRC16:51
*** davepigott has joined #openstack16:52
*** WormMan has quit IRC16:52
*** FlorianOtel has quit IRC16:54
*** dwcramer has quit IRC16:54
*** indiaswift has joined #openstack16:55
*** natea has quit IRC16:56
*** vitiho has quit IRC16:57
*** jog0 has joined #openstack16:57
*** natea has joined #openstack16:59
*** swill has quit IRC17:01
*** indiaswift has quit IRC17:01
*** swill has joined #openstack17:01
*** thinrhino has quit IRC17:03
*** MarkAtwood has quit IRC17:03
*** dieterdemeyer has joined #openstack17:04
*** arBmind has quit IRC17:05
*** gyee has joined #openstack17:07
*** linztm has quit IRC17:09
*** swill has quit IRC17:09
*** armaan has left #openstack17:10
*** maploin has quit IRC17:12
*** sandywalsh has quit IRC17:12
*** marrusl has quit IRC17:16
*** marrusl has joined #openstack17:16
*** wormley has joined #openstack17:18
*** wormley is now known as WormMan17:19
*** mestery has joined #openstack17:19
*** termie_ is now known as termie17:20
*** termie has quit IRC17:20
*** termie has joined #openstack17:20
*** jimbaker has quit IRC17:20
*** jimbaker has joined #openstack17:20
*** stmod has quit IRC17:23
*** shevek_ has quit IRC17:24
*** michael_tn has quit IRC17:24
*** Ghe_Rivero has joined #openstack17:25
*** sandywalsh has joined #openstack17:28
*** maplebed has quit IRC17:29
*** cloudvirt has joined #openstack17:29
*** reed has joined #openstack17:30
*** maplebed has joined #openstack17:31
*** refactor has joined #openstack17:31
*** po has quit IRC17:33
*** dneary has quit IRC17:36
*** oneiroi has quit IRC17:36
*** natea_ has joined #openstack17:37
*** natea has quit IRC17:39
*** natea_ is now known as natea17:39
*** alrs has joined #openstack17:40
*** maplebed has quit IRC17:40
GlaceeIs there a reason why swift 1.4.7 is only packaged for precise?17:42
notmynamemtaylor: ttx: ^?17:42
*** derekh has quit IRC17:43
*** thinrhino has joined #openstack17:43
*** maplebed has joined #openstack17:44
*** dneary has joined #openstack17:44
*** darraghb has quit IRC17:45
*** relateable has quit IRC17:45
Glaceewell.. 1.4.8 would be more relevant now.. I just saw that ti has been released :017:45
*** cloudvirt has quit IRC17:45
*** alrs has quit IRC17:47
*** Guest35096 has joined #openstack17:47
*** bhall has joined #openstack17:47
*** bhall has quit IRC17:47
*** bhall has joined #openstack17:47
*** alrs has joined #openstack17:48
*** refactor has quit IRC17:48
*** jfluhmann has joined #openstack17:49
*** mjmac has joined #openstack17:49
*** jfluhmann has quit IRC17:49
*** jfluhmann has joined #openstack17:49
reedGlacee, isn't that a question for Ubuntu?17:49
annegentleGlacee: bring it up at the team meeting, someone said something about choosing 1.4.7 at the last team meeting17:50
*** Free_maN has quit IRC17:51
*** shaon has quit IRC17:52
*** shaon1 has joined #openstack17:52
*** krow has joined #openstack17:53
*** shaon1 is now known as shaon17:53
*** thinrhino has quit IRC17:53
*** issackelly has joined #openstack17:55
mtaylornotmyname: def more of a question for zul17:56
uvirtbotNew bug: #960437 in nova "CLI volume-snapshot creation error" [Undecided,New] https://launchpad.net/bugs/96043717:56
notmynamemtaylor: gotcha. thanks17:56
notmynamemtaylor: do you need anything from me at the CI meeting today?17:57
*** davepigott has quit IRC17:57
*** longoria has joined #openstack17:59
mtaylornotmyname: nope17:59
uvirtbotNew bug: #960441 in horizon "kernel and ramdisk id should not be required" [Undecided,New] https://launchpad.net/bugs/96044118:01
uvirtbotNew bug: #960443 in horizon "image names should not be limited to 25 characters" [Undecided,New] https://launchpad.net/bugs/96044318:01
uvirtbotNew bug: #960445 in horizon "firefox instance and volumes page weirdness" [Undecided,New] https://launchpad.net/bugs/96044518:01
*** rafaduran has joined #openstack18:01
longoriaIn the "Volumes" table, is the "ec2_id" being used?  I don't see a reference to it in the Volume class, in models.py...18:02
*** anotherjesse_zz is now known as anotherjesse18:05
*** hub_cap has quit IRC18:05
*** natea has quit IRC18:05
*** rnorwood1 has joined #openstack18:07
*** natea has joined #openstack18:07
*** rnorwood has quit IRC18:10
*** mjmac has left #openstack18:13
uvirtbotNew bug: #960448 in horizon "updating image redirects from syspanel to project" [Undecided,New] https://launchpad.net/bugs/96044818:13
*** Ard1t has quit IRC18:15
*** Ryan_Lane has joined #openstack18:16
*** johnpostlethwait has joined #openstack18:16
*** dpippenger has quit IRC18:16
*** hub_cap has joined #openstack18:17
*** Ard1t has joined #openstack18:18
*** shaon has quit IRC18:22
*** Ghe_Rivero has quit IRC18:22
*** Maroo has joined #openstack18:23
*** zigo has joined #openstack18:24
*** anotherjesse is now known as anotherjesse_zz18:26
MarooHi everybody...i'm just another guy who needs some help :)18:26
*** WormMan has quit IRC18:26
*** wormley has joined #openstack18:27
*** wormley is now known as WormMan18:27
MarooHi everybody...i'm just another guy who needs some help :)18:28
*** imsplitbit has quit IRC18:28
kbringardcan someone tell me what exactly the cc_host is used for?18:29
Marooi'm developing a ftp-like client, with REST, for swift cloud storage, using java18:29
Marooand i need some examples :)18:29
kbringardI mean, I know it's supposed to be the host of the nova api server, but what actually uses that flag?18:29
chmouelMaroo: you can maybe start from https://github.com/chmouel/ftp-cloudfs18:30
*** rnorwood1 has quit IRC18:31
longoriaDoes anyone have knowledge of the Volumes table for Nova?18:31
*** sandywalsh has quit IRC18:31
Maroo@chmouel thank you18:32
kbringardn/m, looks like it's not used anymore18:32
*** jog0 has left #openstack18:32
*** dspano has joined #openstack18:33
mugujava :{18:34
Maroochmouel: but i need something in java18:34
*** mattray has joined #openstack18:34
*** mnewby has joined #openstack18:35
chmouelI think the java-cloudfiles api could be a start18:35
*** rnorwood has joined #openstack18:36
*** dachary has quit IRC18:36
alrsf18:37
*** joesavak has joined #openstack18:37
justinsb_Maroo: Check out https://github.com/justinsb/openstack-java-sdk18:38
justinsb_Luis & I have been working on a Java binding & we hope to release it "real soon now"18:38
justinsb_Includes swift support18:38
*** dpippenger has joined #openstack18:38
Maroojustinsb_: thanks :)18:39
*** dpippenger has quit IRC18:39
*** dpippenger has joined #openstack18:39
*** swill has joined #openstack18:40
*** cloudvirt has joined #openstack18:43
*** cloudvirt has left #openstack18:43
*** sandywalsh has joined #openstack18:45
*** natea has quit IRC18:46
*** swill has left #openstack18:46
*** crescendo has joined #openstack18:46
*** alperkanat has quit IRC18:47
*** blamar has quit IRC18:48
*** nacx has quit IRC18:49
*** anotherjesse_zz is now known as anotherjesse18:49
*** natea has joined #openstack18:50
*** jfluhmann has quit IRC18:50
*** straylyon has joined #openstack18:51
*** dneary has quit IRC18:51
*** alrs has quit IRC18:51
uvirtbotNew bug: #960487 in openstack-common "Request deserializer does not pass an empty body" [Undecided,New] https://launchpad.net/bugs/96048718:53
*** FACEFOX has joined #openstack18:56
*** MarkAtwood has joined #openstack18:56
*** jwalcik has joined #openstack18:56
*** krow has quit IRC18:57
Madkissokay. So with the current Ubuntu 12.04 packages, can I get a working nova+keystone+glance+quantum+horizon+swift?18:57
jeblairannegentle: ping18:57
jeblairannegentle: i have a "how to use the documentation as a user" question...  :)18:57
*** mnewby has quit IRC18:58
*** shaon has joined #openstack18:58
*** Maroo has quit IRC18:58
jeblairi'd like to know more about what attributes are required/optional, and what they mean.  for example looking at this page: http://docs.openstack.org/api/openstack-identity-service/2.0/content/POST_authenticate_v2.0_tokens_Admin_API_Service_Developer_Operations-d1e1356.html18:58
koolhead17ttx, seems like busy day 4 you today!! :)18:58
*** littleidea has joined #openstack18:59
jeblairi'm wondering (a) is tenantid required?  (b) what does it mean in that context?  and, skipping ahead a bit, (c) what's the deal with tenantid vs tenantname?  :)18:59
jeblairannegentle: so is there somewhere else i should be looking for that info?18:59
*** mnewby has joined #openstack19:01
*** mnewby has quit IRC19:01
*** littleidea has quit IRC19:03
*** mattray has quit IRC19:04
annegentlejeblair: hm. thinking19:06
*** mnewby has joined #openstack19:06
*** alperkanat has joined #openstack19:06
annegentlejeblair: the identity API docs are in disarray, for one.19:06
*** alrs has joined #openstack19:06
annegentlejeblair: especially the admin API commands19:06
annegentlejeblair: this is probably the more accurate page: http://keystone.openstack.org/api_curl_examples.html#id119:07
koolhead17jeblair, the best place i would suggest is https://github.com/openstack/keystone/tree/master/doc/source19:08
koolhead17hey annegentle19:08
annegentlekoolhead17: hey19:08
koolhead17annegentle, i got the mail :(19:08
annegentlekoolhead17: yeah, saw it :(19:08
koolhead17annegentle, thanks :D19:09
annegentleheckj: what do you want to do about the Identity API dev guide that jeblair refers to above?19:09
koolhead17jeblair, are you trying keystone from source?19:09
jeblairkoolhead17: i'm trying to use libcloud with an openstack provider, and they both do things a little differently.  i'd like to submit bug reports, but it would be great to back up my assertions with some documentation19:10
jeblairrather than "other people seem to do it this other way"  :)19:11
* koolhead17 googles to find what is libcloud19:11
jeblairand i actually don't have any idea whether keystone is in use, which is why i need to know what the API is supposed to be19:11
heckjjeblair: the original WADLs lacked any additional detail to explain context of how to use. It presumes a LOT of a-priori knowledge19:12
heckjannegentle: generally fix it, but I've been heads down with the RC1 cuts and haven't spent anything other than light time on docs efforts (including editing WADL's to generate additional detail)19:12
annegentleheckj: yeah it is really difficult to hack on.19:14
*** egant has quit IRC19:14
andrewbogottDoes essex nova require keystone, or is that change not happening until folsom?19:14
heckjandrewbogott: I don't know about require, but it's definitely fully supported.19:15
*** albert23 has joined #openstack19:15
annegentleheckj: I can't really fix 'em since I lack the knowledge :)19:15
andrewbogottI'm upgrading a diablo install to essex, wondering if I can coast along with the old auth setup for now.19:15
heckjannegentle: I've got most of the knowledge now, just need the time to sit down and hack it up with details19:15
*** imsplitbit has joined #openstack19:17
annegentleheckj: jeblair should I remove that inaccurate doc?19:17
annegentleheckj: jeblair temporarily anyway? Seems we do a disservice by leaving it.19:18
*** bepernoot has joined #openstack19:18
*** alperkanat has quit IRC19:22
*** MarkAtwood has quit IRC19:26
*** msavy has quit IRC19:27
*** llang629_ has joined #openstack19:30
*** jj0hns0n has quit IRC19:32
*** emorisse has quit IRC19:32
*** jj0hns0n has joined #openstack19:32
*** longoria has left #openstack19:34
*** mattray has joined #openstack19:35
*** emorisse has joined #openstack19:37
*** jj0hns0n has quit IRC19:37
*** bepernoot has quit IRC19:39
*** clauden_ has quit IRC19:41
*** kentbye has joined #openstack19:41
*** jj0hns0n has joined #openstack19:43
*** Madkiss has quit IRC19:44
ttxkoolhead17: lots of fun and long days :)19:44
lxuHow do I use euca2ools with keystone? dont know how to generate the file credentials19:44
*** johnpostlethwait has quit IRC19:45
koolhead17ttx, TBH for the first time i have seen so many mails coming one after another :P19:45
*** dendrobates is now known as dendro-afk19:46
*** johnpostlethwait has joined #openstack19:46
koolhead17annegentle, https://answers.launchpad.net/keystone/+question/191217  am i doing anything wrong?19:47
*** jakkudanieru has quit IRC19:49
*** mdomsch has quit IRC19:49
*** mdomsch has joined #openstack19:51
*** nelson1234 has quit IRC19:53
*** nelson1234 has joined #openstack19:53
*** vitiho has joined #openstack19:57
*** epim has joined #openstack19:58
annegentlekoolhead17: hm, I don't know. heckj? ^^20:00
koolhead17annegentle, won`t trouble heckj at this moment :)20:00
* heckj looks20:01
*** mrmartin has joined #openstack20:02
heckjkoolhead17: user update only updated name and password right now - doesn't update the tenant linkage. However, just adding a role to a user and a tenant (such as "Member") will link that user account to a tenant.20:03
*** misheska- has quit IRC20:03
*** mikal has joined #openstack20:03
*** mikal has quit IRC20:04
*** mikal has joined #openstack20:04
koolhead17heckj, at time of adding user i can pass parameter which tenant he should be associated to i suppose :)20:04
koolhead17with --tenant_id20:05
heckjyeah - that's setting a default tenant_id. Not sure that you can change that with command line client tools at this point.20:06
koolhead17but funny part is i can add any random key and user gets added along with tenant_id == "the wrong/non-exisitingting tenant id20:06
koolhead17heckj, i found another way modifying the DB manually :D20:06
*** mrmartin has quit IRC20:07
* heckj nods20:07
heckjkoolhead17: do you have that logged as a bug?20:08
*** dieterdemeyer has left #openstack20:08
koolhead17heckj, am scared at times filing bugs TBH so i added it in my question. Shall i add it as bug? :P20:08
heckjplease20:09
koolhead17doing right away sir20:09
heckjif the bug isn't valid, we'll just close it as invalid. Would prefer to know there was an issue, even if it's easily resolved20:09
*** zigo has quit IRC20:09
*** rkukura has quit IRC20:11
* koolhead17 nods20:11
*** mrmartin has joined #openstack20:12
*** whenry has joined #openstack20:12
*** warik has quit IRC20:14
*** jog0_ has joined #openstack20:14
*** jog0_ is now known as jog020:14
*** jog0 has left #openstack20:14
*** uksysadmin has joined #openstack20:14
*** jfluhmann has joined #openstack20:15
kbringardquick ? about keystone (in diablo-stable, not light or essex)20:17
kbringardwhen using the nova client, i set my nova api endpoint to be the keystone service20:17
kbringardwhich auths and gives me a token and an endpoint20:17
kbringardat that point does keystone itself proxy the connection back to the internal url from the endpoint_templates table?20:17
kbringardor does it tell the client to do it, which establishes another connection from the outside?20:18
*** flaviamissi has joined #openstack20:20
*** bepernoot has joined #openstack20:21
*** flaviamissi has quit IRC20:22
*** flaviamissi has joined #openstack20:23
*** mdomsch has quit IRC20:23
*** Susanne has joined #openstack20:23
*** Susanne has quit IRC20:24
*** jog0 has joined #openstack20:25
uvirtbotNew bug: #960577 in keystone "keystone user-add command takes random --tenant-id value and maps it in user profile" [Undecided,New] https://launchpad.net/bugs/96057720:26
*** anotherjesse is now known as anotherjesse_zz20:26
*** smballe has joined #openstack20:26
*** clauden_ has joined #openstack20:26
*** miclorb_ has joined #openstack20:28
*** jog0 has left #openstack20:28
*** jfluhmann has quit IRC20:28
*** mattray has quit IRC20:29
*** krow has joined #openstack20:30
*** smballe__ has joined #openstack20:31
*** smballe has quit IRC20:32
*** ChelseaH has joined #openstack20:33
*** hingo has joined #openstack20:33
*** bepernoot has quit IRC20:34
*** ChelseaH has quit IRC20:34
*** ChelseaH has joined #openstack20:34
*** OzStacker1 has joined #openstack20:34
*** smballe__ has joined #openstack20:35
*** dwcramer has joined #openstack20:35
*** swill has joined #openstack20:36
*** OzStacker1 has left #openstack20:36
swillnotmyname: i just wanted to let you know that i was wrong previously about the 'container_requests' thing.  it is working as expected.20:37
notmynameswill: ah cool. thanks for letting me know :-)20:37
*** krow has quit IRC20:39
*** krow1 has joined #openstack20:39
swillnotmyname: ya for sure.  it was one of those brain fart situations.  i was expecting enumerate(headers[2:0]) to give me the index in headers, instead of starting from 0.20:39
swillsorry: enumerate(headers[2:])20:39
*** egant has joined #openstack20:40
*** natea has quit IRC20:42
*** warik has joined #openstack20:44
*** warik has left #openstack20:44
*** natea has joined #openstack20:44
*** cloudvirt has joined #openstack20:45
*** cloudvirt has left #openstack20:45
uvirtbotNew bug: #960588 in horizon "Custom column class triggers KeyError" [High,In progress] https://launchpad.net/bugs/96058820:46
uvirtbotNew bug: #960590 in horizon "Column and Cell don't inherit from HTMLElement" [Medium,Confirmed] https://launchpad.net/bugs/96059020:46
*** milner has quit IRC20:47
*** bbcmicrocomputer has quit IRC20:48
*** swill has quit IRC20:48
*** milner has joined #openstack20:48
*** smballe__ has quit IRC20:48
*** johnpostlethwait has quit IRC20:49
*** mattray has joined #openstack20:49
*** SusanneB has joined #openstack20:49
*** miclorb_ has quit IRC20:50
*** johnpostlethwait has joined #openstack20:50
*** Ard1t has quit IRC20:50
*** staignan has quit IRC20:51
*** manlymatt83 has joined #openstack20:52
*** bepernoot has joined #openstack20:52
*** Ard1t has joined #openstack20:52
*** Ard1t has joined #openstack20:52
manlymatt83Hi folks.  For a new deployment that we need to get up this week, should we go diablo or essex (and if essex, what's the best way to install it?).  While we do need to get something up soon, we *won't* need it to be stable/production for at least a few weeks.20:53
*** kayyagari has quit IRC20:53
oNeToWndevstack if you won't need it to be stable. ;D20:55
manlymatt83well, it'll need to be stable in a few weeks ;)20:57
manlymatt83so figured if there was some way we could setup four dedicated boxes with essex and then upgrade to release in the upcoming weeks?20:57
*** rkukura has joined #openstack20:58
*** zul has quit IRC20:58
*** davlaps has joined #openstack20:59
oNeToWnessex-rc1 just come out.20:59
*** llang629_ has left #openstack21:00
manlymatt83oNeToWn: Where's the best way to get that?21:00
oNeToWnhttps://launchpad.net/nova/essex/essex-rc121:00
*** ChelseaH has quit IRC21:01
*** zul has joined #openstack21:01
manlymatt83thanks21:01
oNeToWnnp.21:01
manlymatt83that's Nova release candidate 1 right?  What about the rest of openstack?21:02
manlymatt83I'm a bit confused.  There's Nova, then the control panel, swift, etc. right?21:02
manlymatt83is Essex just nova?21:02
dolphmall are releasing their own RC's as fast as they can21:02
*** natea has quit IRC21:02
manlymatt83ahhh!  OK, gotcha.21:02
dolphmmanlymatt83: countdown to other RC's: http://wiki.openstack.org/releasestatus/rc1.html21:03
*** bepernoot has quit IRC21:03
*** catintheroof has joined #openstack21:04
manlymatt83dolphm: OK, thanks.  Can't really use Nova RC1 for Essex and the older Products from Diablo, right?21:05
*** jwalcik has left #openstack21:05
*** smb_ has joined #openstack21:05
*** smb_ has quit IRC21:06
*** marrusl has quit IRC21:06
*** rnirmal has quit IRC21:06
*** qazwsx|2 has joined #openstack21:07
*** mdrnstm has joined #openstack21:08
*** catintheroof has quit IRC21:09
*** deshantm_ has joined #openstack21:09
*** qazwsx has quit IRC21:10
dolphmmanlymatt83: probably not21:10
dolphmkeystone essex should be backwards compatible with the rest of diablo, but i can't speak for other projects21:10
*** mattray has quit IRC21:11
manlymatt83dolphm: OK.  So best bet if we're spinning up a new environment is to either wait two weeks or install diablo, and then upgrade to essex?21:12
*** deshantm has quit IRC21:13
dolphmmanlymatt83: are you installing from packaging or source?21:13
*** jj0hns0n has quit IRC21:13
*** mattray has joined #openstack21:13
*** mikal has quit IRC21:13
manlymatt83dolphm: I'd like to install from packages, but looks like we'd have to use source if we went with essex.21:13
*** tryggvil__ has quit IRC21:15
*** mikal has joined #openstack21:15
dolphmmanlymatt83: at the moment, yes21:15
dolphmmanlymatt83: rc1's could all be out this week *crosses fingers*21:16
manlymatt83OK, thank you.  So if it were you, you'd wait for Essex, versus installing Diablo and then upgrading?21:16
dolphmmanlymatt83: personally, yes21:18
manlymatt83OK, thank you.  I assume the upgrade path from diablo -> essex won't be trivial.21:19
dolphmmanlymatt83: starting with RC's and upgrading to final from there should be trivial, and you won't have to relearn stuff :)21:19
manlymatt83okay, cool ;) So I'll wait for all of the RCs21:19
dolphmmanlymatt83: we've made that upgrade path as trivial as possible, but there's a learning curve i'd be more worried about :P21:19
manlymatt83gotcha ;)21:19
*** ldlework has quit IRC21:20
cloudflyanyone have a good source on comparitive benchmarks / stats between openstack opennebula and say cloudstack / eucalyptus?21:20
*** warik_ has joined #openstack21:20
cloudflyfound a chinese article that was decent but the translation was pretty weak and i kinda wanted more technical analysis than feature set comparison21:21
manlymatt83dolphm: while you're here, mind if I ask you a quick question on Keystone?  It can be powered by OpenLDAP, right?  I heard in Essex that may not be the case.  If we need an OpenLDAP store for puppet variables and such, would share Keystone's LDAP directory be a good idea, or best to keep those separate?21:21
*** troytoman is now known as troytoman-away21:22
heckjmanlymatt83: yes, it's possible, but expects you to be comfortable with OpenLDAP and schema config21:22
manlymatt83Yeah, we're running OpenLDAP now.  And I'm very comfortable with it.  Been using it for many years.21:22
* dolphm post-emptively defers to heckj.21:23
manlymatt83We have OpenLDAP for authentication, system authorization (pam_ldap), public keys, puppet external nodes, internal DNS backing for pdns, etc.21:23
heckjmanlymatt83: the docs are anemic, but the support for identity is there (thank you ayoung!). It's expecting a specific schema21:24
manlymatt83Wondering, when we jump from EC2 over to OpenStack, we'll still need puppet and pdns storage inside OpenLDAP.  Wondering if Keystone can simply work with the same OpenLDAP instance(s) too.21:24
manlymatt83heckj: Great!  I'll look into it.21:24
heckjmanlymatt83: read through the bits at keystone.openstack.org - no other docs will have those details yet21:25
cloudflyit'd be nice if keystone had more of an RFC style protocol setup21:26
cloudflybut maybe not as... special... as LDAPs21:26
heckjcloudfly: what do you mean by "RFC style protocol setup"?21:27
*** hub_cap has quit IRC21:27
cloudflywell setup was probably the wrong word21:27
cloudflybut a literal request for comments on keystone protocol elements21:27
*** jdg has joined #openstack21:28
manlymatt83Thanks heckj!  I'm looking at this now.21:28
cloudflyit seems to me that the biggest issue with keystones success is ensuring it can grow to handle all the things it may be called on to do21:28
cloudflybut that those things are really aren't clearly known widely yet21:28
manlymatt83We intend to run CentOS as our Guest OS, but rumor has it Ubuntu + KVM is the easiest to run for the VMM.  Is that also true?21:28
cloudflyopenstack of course has only seen some limited use at this point21:28
cloudflymanlymatt83 most of openstacks core devs work in ubuntu.  but there are a number of very active deployments on centos21:29
cloudflyand there is considerable documentation as a result21:29
cloudflyfrom what i have seen21:29
manlymatt83cloudfly: OK, cool.21:29
kbringardmanlymatt83: when you say "As our guest OS", do you mean as the host, or in a VM that runs on openstack?21:30
heckjcloudfly - that was definitely a problem with the V2 API, and we plan to expand on that conversation at the design summit. We're actively collecting use stories to keep keystone grounded in reality. IT's easy to fly away with "woulda coulda shoulda"21:31
*** mrmartin has quit IRC21:32
cloudflyyeah but that's the whole point of RFCs21:32
manlymatt83kbringard: As in, the OS we'd run inside VMs21:33
cloudflyalso just because you can't implement something now, doesn't mean you can't keep an eye torward making sure that you can later on when you need to without major issues21:33
manlymatt83kbringard: still trying to figure out to run on the actual physical hosts (the ones we install openstack on).21:33
kbringardmanlymatt83: that works fine21:33
kbringardwe run centos 5.7 and 6.2 images all day long21:33
manlymatt83kbringard: I assume that works okay, yeah.  We've had good luck running KVM out of box with CentOS (without OpenStack)21:33
manlymatt83just wondering what the best OS is to put on the actual physical hardware. IE: do we do yum install openstack or apt-get install openstack ;)21:34
kbringardwe run Ubuntu 11.0421:34
cloudflymanlymatt83 my guess is your biggest issue is ensuring the kvm version and libvirt version have everything openstack needs21:34
*** joesavak has quit IRC21:34
cloudflykvm has seen a siginificant number of improvements in its own right at a staggering pace21:34
kbringardwith the rackspace cloud builders repo21:34
cloudflyyou will want bleeding edge packages21:34
kbringardhttp://ops.rcb.me/packages/pool/diablo-final/21:35
kbringardthat's what I use21:35
kbringardif it helps21:35
cloudflykbringard dunno if you've rebuilt packages from there before but i find just ripping them apart with ar works great21:35
cloudflyto do edits21:35
cloudflyeasier than rebuilding from scratch21:36
*** lts has quit IRC21:36
kbringardwe have a repo full of diffs that get applied automatically after the packages get installed21:36
kbringardwhich is kind of jankey, but I didn't want to deal with rebuilding my own packages :-D21:36
manlymatt83so are you guys saying if we run Ubuntu under the hood vs. CentOS our lives should be easier package wise?21:37
kbringardmanlymatt83: I think so, yes21:37
kbringardI think grud dynamics maintains centos packages21:37
kbringarderr21:37
kbringardgrid*21:37
kbringardbut Ubuntu has "official" packages, and all the devs use it21:37
*** dwcramer has quit IRC21:38
manlymatt83alright.  Thank you.21:39
kbringardnp21:39
uvirtbotNew bug: #960627 in glance "'bin/glance add' docstring *_format is out of date" [Low,In progress] https://launchpad.net/bugs/96062721:41
*** anotherjesse_zz is now known as anotherjesse21:44
*** joearnold has joined #openstack21:44
uvirtbotNew bug: #960637 in openstack-ci "keystone watch in gerrit isn't sticking" [Undecided,New] https://launchpad.net/bugs/96063721:45
*** miclorb_ has joined #openstack21:46
*** dolphm has quit IRC21:48
*** lborda has quit IRC21:48
*** oNeToWn has quit IRC21:48
*** aliguori has quit IRC21:48
*** mdomsch has joined #openstack21:50
*** Ruetobas has quit IRC21:51
*** nid0 has joined #openstack21:52
*** bruges_ has quit IRC21:52
*** shevek_ has joined #openstack21:53
*** jj0hns0n has joined #openstack21:54
*** Turicas has quit IRC21:54
uvirtbotNew bug: #960647 in tempest "Incorrect var name referenced in auth failure exception" [Medium,In progress] https://launchpad.net/bugs/96064721:56
*** ayoung has quit IRC21:58
*** heckj has quit IRC21:59
*** phorgh has quit IRC22:00
*** heckj has joined #openstack22:00
*** ppradhan has left #openstack22:01
*** kbringard has quit IRC22:04
*** flaviamissi has quit IRC22:05
*** mdomsch has quit IRC22:05
*** scoph has quit IRC22:07
*** joearnol_ has joined #openstack22:07
*** joearnold has quit IRC22:09
*** andrewsmedina has quit IRC22:10
*** hub_cap has joined #openstack22:10
*** uksysadmin has quit IRC22:10
uvirtbotNew bug: #960655 in nova "vm_utils vbd_unplug_with_retry failing to retry" [Undecided,In progress] https://launchpad.net/bugs/96065522:11
*** MarkAtwood has joined #openstack22:11
*** emorisse has quit IRC22:15
*** phorgh has joined #openstack22:15
uvirtbotNew bug: #960656 in horizon "local_settings.py makes horizon difficult to package" [Undecided,New] https://launchpad.net/bugs/96065622:16
*** scoph has joined #openstack22:18
*** FACEFOX has quit IRC22:19
*** lxu_ has joined #openstack22:19
*** aliguori has joined #openstack22:19
*** whenry has quit IRC22:20
*** warik_ has quit IRC22:20
*** asavu has joined #openstack22:21
*** lxu_ has quit IRC22:21
*** imsplitbit has quit IRC22:21
*** dspano has quit IRC22:21
*** warik has joined #openstack22:22
*** littleidea has joined #openstack22:23
*** egant has quit IRC22:23
*** egant has joined #openstack22:24
*** FACEFOX has joined #openstack22:25
*** natea has joined #openstack22:25
*** troytoman-away is now known as troytoman22:27
*** FACEFOX has quit IRC22:27
*** datajerk has quit IRC22:28
*** cloudvirt has joined #openstack22:28
*** jj0hns0n has quit IRC22:28
*** robbiew has quit IRC22:30
*** msavy has joined #openstack22:30
*** hub_cap has quit IRC22:32
*** MarkAtwood has quit IRC22:33
*** warik_ has joined #openstack22:34
*** cloudvirt has quit IRC22:34
*** warik has quit IRC22:34
*** warik_ is now known as warik22:34
*** datajerk has joined #openstack22:35
*** tmichael has quit IRC22:35
*** tmichael has joined #openstack22:37
*** swoo has joined #openstack22:38
*** Guest35096 has quit IRC22:39
*** swoo has quit IRC22:40
*** FACEFOX has joined #openstack22:40
*** bruges has joined #openstack22:40
*** littleidea has quit IRC22:41
*** epim has quit IRC22:42
*** misheska has joined #openstack22:42
*** eirikbb has quit IRC22:42
*** eirikbb has joined #openstack22:43
*** jj0hns0n has joined #openstack22:44
*** qazwsx|2 has quit IRC22:44
*** jj0hns0n has quit IRC22:46
*** wilmoore has quit IRC22:49
*** njoy has joined #openstack22:49
*** njoy has quit IRC22:50
*** msavy has quit IRC22:50
*** dwcramer has joined #openstack22:51
*** hingo has quit IRC22:52
*** scoph has quit IRC22:53
*** troytoman is now known as troytoman-away22:55
*** jj0hns0n has joined #openstack22:55
*** wilmoore has joined #openstack22:55
uvirtbotNew bug: #960684 in horizon "Python novaclient writing to homedir" [Undecided,New] https://launchpad.net/bugs/96068422:56
*** hub_cap has joined #openstack22:57
*** dachary has joined #openstack22:57
*** agonella has joined #openstack22:58
*** dolphm has joined #openstack23:02
*** dwcramer has quit IRC23:02
*** jj0hns0n has quit IRC23:04
*** anotherjesse is now known as anotherjesse_zz23:05
*** stewart has quit IRC23:06
*** wilmoore has quit IRC23:07
*** guynaor has joined #openstack23:07
*** guynaor has left #openstack23:08
*** tkleinscea has quit IRC23:10
*** AlanClark has quit IRC23:11
*** jj0hns0n has joined #openstack23:13
*** jog0_ has joined #openstack23:13
*** zzed has quit IRC23:17
*** jog0_ is now known as jog023:17
*** egant has quit IRC23:18
*** fukushima has joined #openstack23:19
*** hub_cap has quit IRC23:20
uvirtbotNew bug: #960704 in nova "Allow insecure setting to be specified by environment" [Low,In progress] https://launchpad.net/bugs/96070423:21
*** jog0 has left #openstack23:21
*** alrs has quit IRC23:21
*** mattray has quit IRC23:23
*** misheska has quit IRC23:24
*** ryanpetrello has quit IRC23:25
*** jj0hns0n has quit IRC23:25
*** jog0 has joined #openstack23:26
*** jog0 has left #openstack23:26
dj_ryanok now that it's day time23:26
dj_ryananyone have any suggestions on learning how to install openstack essex the hard way (tm) on ubuntu 12.04?23:27
justinsb_dj_ryan: The hard way = from source?23:30
dj_ryanno from packages i think23:31
dj_ryani mean there are nightlies23:31
dj_ryanbut without scripts23:31
*** asavu has quit IRC23:31
justinsb_dj_ryan: That is the hard way :-)23:31
dj_ryandevstack no worky, and crowbar is just fucked :-)23:31
dj_ryangotcha23:31
justinsb_dj_ryan: I'm sure the packagers would disagree though!23:31
dj_ryanheh23:31
dj_ryani just want some vmmmmmms23:31
justinsb_dj_ryan: I've been experimenting with installing from source23:31
justinsb_dj_ryan: https://github.com/justinsb/openstack-simple-config23:32
justinsb_dj_ryan: Work in progress, but it installs nova, swift, glance, horizon with minimal scripting23:32
justinsb_dj_ryan: I should probably do a readme :-)23:32
*** warik has quit IRC23:33
*** justinfine has joined #openstack23:33
dj_ryanthe issue is23:33
dj_ryana lot of these are like 'press GO and you get an openstack'23:33
dj_ryani kinda want to know HOW it works practically23:33
dj_ryanthe docs are only so useful to fully groking how the system works in operation23:33
dj_ryani find seeing it happening helps23:33
justinsb_Well, for that, you're going to have to read the openstack source I guess23:34
*** Glacee has quit IRC23:34
*** alrs has joined #openstack23:34
dj_ryansure but there is a lot not in the source23:34
justinsb_Check out the scripts (in roles/); they are very minimal and not too much magic23:34
dj_ryanlike the use of dnsmasq, bridge interfaces, etc23:34
justinsb_dj_ryan: Oh that fun stuff...23:35
dj_ryanyes, THAT fun stuff :-)23:35
justinsb_dj_ryan: Networking is very tricky, and I definitely don't understand it all.  But if you use FlatManager to side-step most of it23:35
dj_ryani thought that dnsmasq was masqurading dhcp too, but apparently not.23:35
uvirtbotNew bug: #960719 in keystone "creating the same role multiple time should not create multiple role" [Undecided,New] https://launchpad.net/bugs/96071923:35
dj_ryanso for me i just want virtual machines that are equal peers on the same network as my host, which is also my workstation(s)23:35
justinsb_dj_ryan: Apart from the bridge device.  Bridge=software network switch, at least in my mental model23:36
dj_ryansince we are using Virtualization to turn a bunch of workstations into hadoopy nodes23:36
justinsb_dj_ryan: Yes, that's what I want to.  FlatManager gives you that23:36
justinsb_dj_ryan: I think FlatDHCPManager can do so also, but it's much more complicated23:36
justinsb_s/want to/want too/g23:36
dj_ryanyeah i dont get that23:37
dj_ryanapparently using DHCP = harder ?23:37
dj_ryanreading the openstack docs it seems that flat networking lets you NAT thru a single node?23:37
dj_ryandunno about that shit23:37
*** deshantm_ is now known as deshantm23:38
justinsb_dj_ryan: I have it set up like this.  My network is 192.168.0.0/16, my gateway is 192.168.1.1, I give 192.168.100.0/24 to VMs23:38
dj_ryanahh23:38
dj_ryank23:38
justinsb_If you had the foresight to use 10.x.x.x, you can probably give OpenStack a more sensible allocation23:38
dj_ryanthis is my home network atm, still doing office hunting :-)23:38
justinsb_dj_ryan: Me too.  My gatway is a DD-WRT.23:38
dj_ryanmy gateway is a fucking shitty as hell modem from sonic.net23:39
dj_ryanfuckers23:39
justinsb_dj_ryan: Well, I'll understand if you drop off IRC then.  But OpenStack works just fine on a small scale.23:39
justinsb_dj_ryan: Even if the docs try to make you feel inadequate ;-)23:40
*** aliguori has quit IRC23:40
dj_ryani will persevere23:40
dj_ryanour business kind of somewhat depends on this23:40
*** scoph has joined #openstack23:41
*** shaon has quit IRC23:41
justinsb_dj_ryan: devstack should work also.  The magic arguments are:23:41
justinsb_NETWORK_CREATE_ARGS="--fixed_cidr=192.168.100.0/24 --gateway=192.168.1.1"23:41
justinsb_NET_MAN=FlatManager23:42
justinsb_EXTRA_OPTS=(--flat_injected=True)23:42
justinsb_FLAT_INTERFACE=eth023:42
dj_ryani had some issues with the devstack killing my dnsmasq that provides DNS caching23:42
*** clauden_ has quit IRC23:42
dj_ryanthen i ended upfailing the script23:42
dj_ryanrerunning the script would fuck my sudo config23:42
dj_ryanthen i was fucked, i'd have to boot into recovery to fix!23:42
justinsb_devstack probably isn't great for a multi-node setup23:42
dj_ryanim using ubuntu 12.04 did i mention :-P23:42
*** rnorwood has quit IRC23:42
dj_ryani think im going to dissassemble the stack.sh and do it "by hand"23:43
justinsb_That's what I'm working on with that github project23:43
dj_ryanbut with the packages23:43
dj_ryanthis aint my first rodeo :-P23:43
justinsb_OK!  Good luck!23:43
dj_ryanthanks!23:43
*** rkukura has quit IRC23:45
*** justinfine has quit IRC23:45
*** justfine has joined #openstack23:45
*** root____1 has quit IRC23:46
*** justfine has quit IRC23:49
*** justfine has joined #openstack23:49
*** shaon has joined #openstack23:50
*** roge has quit IRC23:51
*** heckj has quit IRC23:56
*** natea is now known as natea|dinner23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!