*** matiu__ is now known as matiu | 00:06 | |
*** matiu has joined #openstack | 00:06 | |
*** adjohn has joined #openstack | 00:06 | |
*** adjohn has quit IRC | 00:06 | |
*** miclorb_ has quit IRC | 00:07 | |
*** vricci has quit IRC | 00:09 | |
*** scoph has quit IRC | 00:10 | |
*** infernix has quit IRC | 00:14 | |
*** sandywalsh has quit IRC | 00:15 | |
*** oneiroi has quit IRC | 00:15 | |
*** albert23 has left #openstack | 00:18 | |
*** vitiho has quit IRC | 00:18 | |
*** vitiho has joined #openstack | 00:19 | |
*** jj0hns0n has joined #openstack | 00:20 | |
*** MarkAtwood has joined #openstack | 00:21 | |
*** jj0hns0n has quit IRC | 00:24 | |
*** medieval1 has joined #openstack | 00:28 | |
*** emorisse has quit IRC | 00:30 | |
*** krow1 has quit IRC | 00:35 | |
*** localhost has quit IRC | 00:35 | |
*** Deathvalley122 has quit IRC | 00:35 | |
*** localhost has joined #openstack | 00:36 | |
*** vincentricci has joined #openstack | 00:37 | |
*** heckj has quit IRC | 00:37 | |
*** straylyon has quit IRC | 00:37 | |
*** Deathvalley122 has joined #openstack | 00:38 | |
uvirtbot | New bug: #959426 in nova "nova services start before mysql on boot" [Undecided,New] https://launchpad.net/bugs/959426 | 00:42 |
---|---|---|
*** natea_ has joined #openstack | 00:46 | |
*** dwcramer has quit IRC | 00:47 | |
*** natea has quit IRC | 00:49 | |
*** matiu has quit IRC | 00:50 | |
*** littleidea has quit IRC | 00:51 | |
*** natea_ has quit IRC | 00:51 | |
*** Karmaon has joined #openstack | 00:52 | |
*** nhm has quit IRC | 00:52 | |
*** rnorwood has joined #openstack | 00:52 | |
*** nhm has joined #openstack | 00:53 | |
*** jelmer has quit IRC | 00:54 | |
*** jelmer_ has joined #openstack | 00:54 | |
*** kpepple_ has quit IRC | 00:54 | |
*** devcamcar has quit IRC | 00:55 | |
*** kpepple has joined #openstack | 00:55 | |
*** devcamcar has joined #openstack | 00:55 | |
*** vincentricci has quit IRC | 00:56 | |
*** dolphm has quit IRC | 00:56 | |
*** Blackavar has quit IRC | 00:57 | |
*** miclorb_ has joined #openstack | 00:59 | |
*** dwcramer has joined #openstack | 01:01 | |
*** jj0hns0n has joined #openstack | 01:02 | |
*** dolphm has joined #openstack | 01:04 | |
*** dpippenger has quit IRC | 01:06 | |
*** matiu has joined #openstack | 01:07 | |
*** gyee has quit IRC | 01:09 | |
*** nOStahl has quit IRC | 01:10 | |
uvirtbot | New bug: #959843 in nova "Regression in libvirt lxc console" [Undecided,In progress] https://launchpad.net/bugs/959843 | 01:11 |
*** nOStahl has joined #openstack | 01:11 | |
*** livemoon has joined #openstack | 01:13 | |
*** arrsim has joined #openstack | 01:14 | |
*** swoo has quit IRC | 01:15 | |
*** Girls_09 has joined #openstack | 01:15 | |
*** gyee has joined #openstack | 01:16 | |
*** Girls_09 has quit IRC | 01:20 | |
*** songyan has joined #openstack | 01:21 | |
*** songyan has left #openstack | 01:21 | |
*** songyan has joined #openstack | 01:21 | |
*** egant has quit IRC | 01:22 | |
*** warik has left #openstack | 01:23 | |
*** msavy has quit IRC | 01:25 | |
*** vizsla has joined #openstack | 01:28 | |
*** dneary has quit IRC | 01:30 | |
*** spiffxp has quit IRC | 01:32 | |
*** andreas__ has quit IRC | 01:33 | |
*** paulmillar has joined #openstack | 01:36 | |
*** sandywalsh has joined #openstack | 01:37 | |
*** michael_tn has quit IRC | 01:38 | |
*** jdurgin has quit IRC | 01:40 | |
*** rods has quit IRC | 01:40 | |
*** Ard1t2 has joined #openstack | 01:41 | |
*** Ard1t has quit IRC | 01:41 | |
*** gyee has quit IRC | 01:42 | |
*** dolphm has quit IRC | 01:45 | |
*** jj0hns0n has quit IRC | 01:47 | |
*** agonella has joined #openstack | 01:48 | |
*** mnabil has quit IRC | 01:50 | |
*** johnpostlethwait has quit IRC | 02:04 | |
*** Blackavar has joined #openstack | 02:08 | |
*** GeorgeH has joined #openstack | 02:08 | |
*** nid0 has quit IRC | 02:09 | |
*** deshantm_ has joined #openstack | 02:09 | |
*** scoph has joined #openstack | 02:10 | |
*** ayoung is now known as ayoung-afk | 02:10 | |
*** deshantm has quit IRC | 02:13 | |
*** mikal has quit IRC | 02:15 | |
*** marrusl_ has quit IRC | 02:20 | |
*** dolphm has joined #openstack | 02:26 | |
*** erkules has quit IRC | 02:26 | |
*** erkules has joined #openstack | 02:27 | |
*** refactor has quit IRC | 02:27 | |
*** halfss_ has joined #openstack | 02:28 | |
*** fifieldt has joined #openstack | 02:30 | |
*** imsplitbit has joined #openstack | 02:32 | |
*** halfss has quit IRC | 02:32 | |
*** krow has quit IRC | 02:33 | |
*** krow has joined #openstack | 02:33 | |
*** scoph has quit IRC | 02:34 | |
*** imsplitbit has quit IRC | 02:35 | |
*** dprince has joined #openstack | 02:35 | |
uvirtbot | New bug: #959881 in swift "webob 1.2b3 breaking the proxy server" [Undecided,New] https://launchpad.net/bugs/959881 | 02:36 |
*** marrusl has quit IRC | 02:36 | |
*** Karmaon has quit IRC | 02:41 | |
*** Karmaon has joined #openstack | 02:42 | |
*** Karmaon has joined #openstack | 02:43 | |
*** agonella has quit IRC | 02:43 | |
*** Karmaon has quit IRC | 02:44 | |
*** Karmaon has joined #openstack | 02:44 | |
*** krow has quit IRC | 02:44 | |
*** Karmaon has quit IRC | 02:46 | |
*** chasing`Sol has quit IRC | 02:46 | |
*** Karmaon has joined #openstack | 02:46 | |
*** halfss__ has joined #openstack | 02:48 | |
*** Seoman has joined #openstack | 02:48 | |
*** phorgh has joined #openstack | 02:51 | |
*** halfss_ has quit IRC | 02:52 | |
*** bradm_ is now known as bradm | 02:52 | |
*** johnpostlethwait has joined #openstack | 02:52 | |
*** infernix has joined #openstack | 02:53 | |
*** dprince has quit IRC | 02:55 | |
*** mikal has joined #openstack | 03:01 | |
*** anotherjesse_zz is now known as anotherjesse | 03:04 | |
*** rnorwood has quit IRC | 03:04 | |
*** dolphm has quit IRC | 03:05 | |
*** spiffxp has joined #openstack | 03:07 | |
*** rnorwood has joined #openstack | 03:07 | |
*** dtroyer_zzz is now known as dtroyer | 03:07 | |
*** nOStahl has joined #openstack | 03:13 | |
*** infernix has quit IRC | 03:17 | |
*** ywu has quit IRC | 03:19 | |
*** Gordonz has joined #openstack | 03:19 | |
*** MarkAtwood has quit IRC | 03:20 | |
*** nOStahl has quit IRC | 03:22 | |
*** infernix has joined #openstack | 03:23 | |
*** livemoon has left #openstack | 03:25 | |
*** livemoon has joined #openstack | 03:26 | |
*** matiu has quit IRC | 03:27 | |
*** nOStahl has joined #openstack | 03:29 | |
*** mikal has quit IRC | 03:29 | |
*** refactor has joined #openstack | 03:29 | |
*** livemoon has left #openstack | 03:29 | |
*** matiu has joined #openstack | 03:33 | |
*** dolphm has joined #openstack | 03:33 | |
*** littleidea has joined #openstack | 03:33 | |
*** mikal has joined #openstack | 03:34 | |
*** tuf8 has quit IRC | 03:38 | |
*** dtroyer is now known as dtroyer_zzz | 03:38 | |
*** pixelbeat has quit IRC | 03:39 | |
*** Gordonz has quit IRC | 03:42 | |
*** mnewby has quit IRC | 03:43 | |
*** tkleinscea has quit IRC | 03:43 | |
*** littleidea has quit IRC | 03:44 | |
*** catbot_ has joined #openstack | 03:44 | |
*** MarkAtwood has joined #openstack | 03:46 | |
catbot_ | I have 3 physical nodes with 8 cores per one, and the total cores are 24, that mean the number of virtual machine that I can run must be less or equal than 24, right? | 03:46 |
*** livemoon has joined #openstack | 03:47 | |
catbot_ | much more, all the nodes run KVM hypervisor | 03:47 |
*** Seoman has quit IRC | 03:50 | |
*** songyan has quit IRC | 03:52 | |
*** songyan has joined #openstack | 03:52 | |
*** dwcramer has quit IRC | 03:55 | |
*** halfss__ has quit IRC | 03:57 | |
*** clopez has quit IRC | 04:03 | |
*** oneiroi has joined #openstack | 04:04 | |
*** oneiroi has quit IRC | 04:04 | |
*** MarkAtwood has quit IRC | 04:06 | |
*** clopez has joined #openstack | 04:09 | |
*** vitiho has quit IRC | 04:09 | |
*** vitiho has joined #openstack | 04:10 | |
*** wedjat has quit IRC | 04:14 | |
*** halfss has joined #openstack | 04:16 | |
*** halfss_ has joined #openstack | 04:16 | |
*** thinrhino has joined #openstack | 04:18 | |
*** halfss has quit IRC | 04:20 | |
uvirtbot | New bug: #959916 in keystone "sql config options are incorrect" [Medium,In progress] https://launchpad.net/bugs/959916 | 04:26 |
*** johnpostlethwait has quit IRC | 04:26 | |
*** stewart has joined #openstack | 04:36 | |
*** halfss_ has quit IRC | 04:39 | |
*** dolphm has quit IRC | 04:39 | |
*** wonk has quit IRC | 04:39 | |
*** wonk has joined #openstack | 04:40 | |
*** halfss has joined #openstack | 04:41 | |
*** Kog|Work has left #openstack | 04:44 | |
*** deshantm_ has quit IRC | 04:44 | |
*** dubsquared has quit IRC | 04:53 | |
*** littleidea has joined #openstack | 04:54 | |
*** arrsim has quit IRC | 04:55 | |
*** cryptk|offline is now known as cryptk | 04:57 | |
*** hattwick has quit IRC | 05:02 | |
*** Vek has quit IRC | 05:03 | |
*** rnorwood has quit IRC | 05:05 | |
*** hybridpollo has quit IRC | 05:10 | |
*** epim has quit IRC | 05:21 | |
*** fifieldt has quit IRC | 05:22 | |
uvirtbot | New bug: #959929 in nova "--novncproxy_base_url is misdocumented" [Undecided,In progress] https://launchpad.net/bugs/959929 | 05:31 |
*** matiu has quit IRC | 05:37 | |
*** epim has joined #openstack | 05:38 | |
*** q2112 has joined #openstack | 05:40 | |
*** linmin1 has joined #openstack | 05:43 | |
*** clopez has quit IRC | 05:44 | |
*** wedjat has joined #openstack | 05:47 | |
*** adjohn has joined #openstack | 05:52 | |
*** issackelly has quit IRC | 05:53 | |
*** matiu has joined #openstack | 05:54 | |
*** matiu has joined #openstack | 05:54 | |
*** taihen has quit IRC | 05:56 | |
*** phorgh has quit IRC | 05:59 | |
*** hingo has joined #openstack | 06:00 | |
*** krow has joined #openstack | 06:04 | |
*** rgoodwin has quit IRC | 06:04 | |
*** chasmo has quit IRC | 06:07 | |
*** dolphm has joined #openstack | 06:07 | |
*** krow has quit IRC | 06:10 | |
*** supriya_ has joined #openstack | 06:10 | |
*** dolphm has quit IRC | 06:11 | |
halfss | i install dashboard+keystone+nova+glance+swift,now i use dashboard create an user,the user have permissions of nova,but don't have permissions of swift | 06:14 |
halfss | what show i do if i want the user have swift permissions? | 06:14 |
halfss | is there anyone can help me? thks | 06:14 |
*** oNeToWn has joined #openstack | 06:15 | |
*** juergh has joined #openstack | 06:18 | |
*** juergh has left #openstack | 06:20 | |
*** juergh has joined #openstack | 06:21 | |
*** chasmo has joined #openstack | 06:23 | |
*** krow has joined #openstack | 06:24 | |
*** dieterdemeyer has joined #openstack | 06:28 | |
*** hingo has quit IRC | 06:28 | |
*** Kiall has quit IRC | 06:33 | |
*** koolhead17 has quit IRC | 06:34 | |
*** Kiall has joined #openstack | 06:35 | |
*** garyk has joined #openstack | 06:38 | |
*** krow has quit IRC | 06:41 | |
*** leifmadsen has quit IRC | 06:47 | |
*** gpernot has quit IRC | 06:55 | |
*** koolhead17 has joined #openstack | 06:55 | |
*** Crshman has joined #openstack | 06:57 | |
Crshman | What service provides the security group settings? Is that Quantum? | 06:58 |
*** Vek has joined #openstack | 07:00 | |
uvirtbot | New bug: #959953 in swift "x-storage-url from remote server not referring to correct host address" [Undecided,New] https://launchpad.net/bugs/959953 | 07:01 |
*** almaisan-away is now known as al-maisan | 07:06 | |
*** al-maisan is now known as almaisan-away | 07:06 | |
*** adjohn has quit IRC | 07:11 | |
*** fifieldt has joined #openstack | 07:11 | |
*** kayyagari has joined #openstack | 07:13 | |
*** mindpixel has joined #openstack | 07:14 | |
halfss | nova-network | 07:15 |
*** eirikbb has joined #openstack | 07:15 | |
*** supriya_ has quit IRC | 07:15 | |
*** thinrhino has quit IRC | 07:15 | |
*** epim has left #openstack | 07:16 | |
*** thinrhino has joined #openstack | 07:18 | |
*** dj_ryan has joined #openstack | 07:21 | |
*** dpippenger has joined #openstack | 07:22 | |
*** matiu has quit IRC | 07:23 | |
*** thinrhino has quit IRC | 07:24 | |
*** jopz has joined #openstack | 07:25 | |
jopz | hello | 07:25 |
jopz | After completing openstack controller installation i am getting [Errno 13] Permission denied: '/var/www/.novaclient' | 07:26 |
*** miclorb_ has quit IRC | 07:26 | |
jopz | while accessing as project admin | 07:26 |
*** hermy is now known as hermy|away | 07:27 | |
oNeToWn | #keystone | 07:27 |
jopz | keystone-manage service add swift object-store "Swift-compatible Service" | 07:28 |
jopz | keystone-manage service add nova compute "OpenStack Compute Service" | 07:28 |
jopz | keystone-manage service add nova_compat compute "OpenStack Compute Service" | 07:28 |
jopz | keystone-manage service add glance image "OpenStack Image Service" | 07:28 |
jopz | keystone-manage service add identity identity "OpenStack Identity Service" | 07:28 |
jopz | keystone-manage endpointTemplates add RegionOne nova_compat http://192.168.0.69:8774/v1.0/ http://192.168.0.69:8774/v1.0 http://192.168.0.69:8774/v1.0 1 1 | 07:28 |
jopz | keystone-manage endpointTemplates add RegionOne nova http://192.168.0.69:8774/v1.1/%tenant_id% http://192.168.0.69:8774/v1.1/%tenant_id% http://192.168.0.69:8774/v1.1/%tenant_id% 1 1 | 07:28 |
*** cryptk is now known as cryptk|offline | 07:28 | |
jopz | keystone-manage endpointTemplates add RegionOne glance http://192.168.0.69:9292/v1 http://192.168.0.69:9292/v1 http://192.168.0.69:9292/v1 1 1 | 07:28 |
jopz | keystone-manage endpointTemplates add RegionOne identity http://192.168.0.69:5000/v2.0 http://192.168.0.69:35357/v2.0 http://192.168.0.69:5000/v2.0 1 1 | 07:28 |
*** wariola has joined #openstack | 07:28 | |
jopz | keystone-manage user add admin admin | 07:28 |
jopz | keystone-manage tenant add admin | 07:28 |
dj_ryan | any good guides to installing openstack compute with ubuntu 12.04? | 07:28 |
jopz | keystone-manage role add Admin | 07:28 |
jopz | keystone-manage role grant Admin admin | 07:28 |
jopz | keystone-manage role grant Admin admin admin | 07:28 |
jopz | keystone-manage role add KeystoneServiceAdmin | 07:28 |
jopz | keystone-manage role add Member | 07:28 |
jopz | keystone-manage token add 999888777666 admin admin 2015-02-05T00:00 | 07:28 |
dj_ryan | jopz: er, stop | 07:28 |
jopz | what? | 07:28 |
dj_ryan | you are pasing a lot of shit into the channel | 07:29 |
jopz | <dj_ryan> | 07:29 |
jopz | what u mean? | 07:29 |
dj_ryan | are you kidding me? | 07:29 |
dj_ryan | you are pasting your entire installation script/output/whatthefuckever | 07:29 |
jopz | actually i am posting the keystone | 07:30 |
jopz | which i got error | 07:30 |
chmouel | jopz: usually on IRC people use paste service for long texts like http://paste.openstack.org | 07:30 |
jopz | oh ok | 07:30 |
chmouel | and post the link | 07:30 |
jopz | i will post it there | 07:30 |
dj_ryan | you should (a) get someone to indicate they'll look at your problem and (b) do what chmouel says | 07:30 |
dj_ryan | in a bit more of a meta note, why do when i look at the 'crowbar' project and read 'cd images' cry like a little girl? | 07:31 |
jopz | I have posted my keystone which i used | 07:32 |
jopz | http://paste.openstack.org/show/11282/ | 07:32 |
dj_ryan | its 2012, cds and dvds are dying | 07:32 |
dj_ryan | and have no place in production nodes imo | 07:32 |
jopz | please help me | 07:32 |
*** dxd828 has quit IRC | 07:32 | |
jopz | I am getting [Errno 13] Permission denied: '/var/www/.novaclient' | 07:33 |
jopz | while accessing images in dashboard | 07:33 |
jopz | as project admin | 07:33 |
*** robbiew has quit IRC | 07:33 | |
chmouel | jopz: its probably a unix permission problem i am not dashboard expert but that's where i would start investigating | 07:37 |
dj_ryan | chmod 777 already dude | 07:38 |
*** jopz has quit IRC | 07:38 | |
*** asavu has joined #openstack | 07:42 | |
LarsErikP | hi, trying to follow this guide. But keystone doesn't have any option "--token" | 07:43 |
LarsErikP | it says | 07:44 |
*** robix has quit IRC | 07:44 | |
q2112 | hi, how do you associate a vm instance to a specific network? | 07:45 |
*** staignan has joined #openstack | 07:45 | |
*** ghe_ has joined #openstack | 07:48 | |
*** msavy has joined #openstack | 07:51 | |
*** shevek_ has joined #openstack | 07:51 | |
Crshman | what's the difference between swift and nova-volume? | 07:53 |
Crshman | they both handle storage right? | 07:53 |
chmouel | swift is a object-storage (like s3) and nova-volume is a persistent block storage like ebs | 07:55 |
q2112 | swift is an cloud object store while nova-volume is to manage storage volumes in a cloud | 07:55 |
Crshman | ohhhh | 07:55 |
Crshman | thanks guys | 07:55 |
Crshman | A lot of shit going on under the hood hereā¦but it's all pretty neat (and overwhelming! :)) | 07:56 |
q2112 | yep...yep | 07:56 |
*** hattwick has joined #openstack | 07:59 | |
*** msavy has quit IRC | 08:02 | |
*** thinrhino has joined #openstack | 08:04 | |
*** cryptk|offline is now known as cryptk | 08:06 | |
*** davepigott has joined #openstack | 08:06 | |
*** nacx has joined #openstack | 08:07 | |
*** gekko_ has joined #openstack | 08:08 | |
LarsErikP | hmm.. keystone-manage version say Implementation v2012.1-dev but I'm really missing the keystone-all command, keystone doesn't have the --token option.. what is wrong? | 08:09 |
koolhead17 | LarsErikP: are you using from ubuntu repository? | 08:10 |
LarsErikP | no, i used the trunk ppa | 08:10 |
LarsErikP | koolhead17: here is the ouput from apt-get Unpacking keystone (from .../keystone_2012.1~e4~20120206.1578-0ubuntu0ppa1~oneiric1_all.deb) ... | 08:11 |
*** tjikkun has quit IRC | 08:11 | |
koolhead17 | LarsErikP: sudo apt-get upgrade | 08:11 |
*** tjikkun has joined #openstack | 08:12 | |
*** tjikkun has joined #openstack | 08:12 | |
LarsErikP | no... I did install it just now.. | 08:12 |
LarsErikP | Setting up keystone (2012.1~e4~20120206.1578-0ubuntu0ppa1~oneiric1) | 08:16 |
*** supriya has joined #openstack | 08:17 | |
koolhead17 | LarsErikP: pastebin dpkg -l keystone* | 08:17 |
*** mattstep has quit IRC | 08:17 | |
*** Ard1t2 is now known as Ard1t | 08:17 | |
*** Ard1t has quit IRC | 08:17 | |
*** Ard1t has joined #openstack | 08:17 | |
*** mattstep has joined #openstack | 08:18 | |
*** bepernoot has joined #openstack | 08:18 | |
*** reidrac has joined #openstack | 08:19 | |
*** dneary has joined #openstack | 08:20 | |
*** dneary has joined #openstack | 08:20 | |
*** miclorb_ has joined #openstack | 08:21 | |
*** wariola has quit IRC | 08:22 | |
*** phorgh has joined #openstack | 08:22 | |
*** arBmind has joined #openstack | 08:26 | |
koolhead17 | LarsErikP: http://paste.ubuntu.com/891890/ <-- my sources.list file | 08:26 |
oNeToWn | I have the same problem as LarsErikP, I am using ubuntu repo's | 08:26 |
*** thinrhino has quit IRC | 08:26 | |
oNeToWn | deb http://ops.rcb.me/packages oneiric diablo-final | 08:27 |
koolhead17 | and this is the version of keystine am using http://paste.ubuntu.com/891892/ | 08:28 |
LarsErikP | but i'm not using that repo.. | 08:28 |
LarsErikP | oNeToWn: | 08:28 |
koolhead17 | LarsErikP: just used the default precise repo, it works well | 08:29 |
LarsErikP | koolhead17: http://paste.openstack.org/show/11296/ | 08:29 |
LarsErikP | koolhead17: i'm running on oneiric | 08:30 |
*** q2112 has quit IRC | 08:32 | |
*** pixelbeat has joined #openstack | 08:32 | |
oNeToWn | thanks, koolhead17, i will try this one | 08:32 |
koolhead17 | LarsErikP: am not the right guy to tell you about that :( | 08:33 |
*** wariola has joined #openstack | 08:34 | |
koolhead17 | oNeToWn: np :) | 08:34 |
*** kayyagari has quit IRC | 08:35 | |
*** kayyagari has joined #openstack | 08:35 | |
*** foexle has joined #openstack | 08:35 | |
*** darraghb has joined #openstack | 08:36 | |
*** gekko_ has quit IRC | 08:38 | |
*** gekko_ has joined #openstack | 08:38 | |
*** thinrhino has joined #openstack | 08:39 | |
*** Ryan_Lane has quit IRC | 08:43 | |
*** changlp has quit IRC | 08:44 | |
*** changlp has joined #openstack | 08:44 | |
LarsErikP | is it impossible to get keystone rc1 in 11.10? | 08:44 |
*** ohad_ is now known as ohad | 08:46 | |
*** kozze89 has joined #openstack | 08:46 | |
*** Free_maN has joined #openstack | 08:51 | |
*** vitiho has quit IRC | 08:52 | |
*** vitiho has joined #openstack | 08:52 | |
*** fifieldt has quit IRC | 08:53 | |
koolhead17 | LarsErikP: i hope i could be in position to answer that :) | 09:01 |
uvirtbot | New bug: #960018 in swift "Missing tools and tox.ini in published tarballs" [Undecided,New] https://launchpad.net/bugs/960018 | 09:01 |
koolhead17 | *wish | 09:01 |
*** Ryan_Lane has joined #openstack | 09:01 | |
LarsErikP | hehe. Seems that both glance and nova are in rc1 in 11.10.. but keystone is e4... | 09:02 |
koolhead17 | :) | 09:02 |
*** derekh has joined #openstack | 09:04 | |
koolhead17 | seems like without nova endpoint i cannot log in to the dashboard | 09:05 |
*** Ryan_Lane has quit IRC | 09:08 | |
*** jelmer_ is now known as jelmer | 09:09 | |
foexle | heyho guys | 09:10 |
*** kayyagari has quit IRC | 09:10 | |
*** scoph has joined #openstack | 09:10 | |
*** miclorb_ has quit IRC | 09:11 | |
uvirtbot | New bug: #960027 in nova "Some files missing in python-novaclient tarballs" [High,Confirmed] https://launchpad.net/bugs/960027 | 09:11 |
*** wariola has quit IRC | 09:11 | |
*** almaisan-away is now known as al-maisan | 09:11 | |
*** uksysadmin has joined #openstack | 09:12 | |
*** linmin1 has quit IRC | 09:14 | |
foexle | heyho koolhead17 :) | 09:14 |
koolhead17 | hellp foexle | 09:16 |
*** wariola has joined #openstack | 09:19 | |
*** bbcmicrocomputer has joined #openstack | 09:26 | |
*** bbcmicrocomputer has joined #openstack | 09:26 | |
*** kayyagari has joined #openstack | 09:29 | |
*** linmin has joined #openstack | 09:30 | |
uvirtbot | New bug: #960040 in horizon "Incomplete message text when starting multiple instances" [Undecided,New] https://launchpad.net/bugs/960040 | 09:36 |
*** vitiho_ has joined #openstack | 09:38 | |
*** vitiho has quit IRC | 09:38 | |
koolhead17 | + | 09:39 |
*** thinrhino has quit IRC | 09:40 | |
*** mikal has quit IRC | 09:42 | |
*** linmin has quit IRC | 09:42 | |
*** alexn6 has joined #openstack | 09:45 | |
*** mikal has joined #openstack | 09:45 | |
*** abbopenstack has joined #openstack | 09:49 | |
* uksysadmin has been teased with a fixed Horizon in Ubuntu 12.04... damn you rsync... kick in! | 09:49 | |
uksysadmin | or not! | 09:58 |
*** livemoon has left #openstack | 09:59 | |
*** po has joined #openstack | 10:01 | |
uvirtbot | New bug: #960060 in nova "Translation Item #70 should be updated" [Undecided,New] https://launchpad.net/bugs/960060 | 10:05 |
*** conntrack has quit IRC | 10:07 | |
LarsErikP | okey.. precisce installed... new problem.. (but ofc..) No handlers could be found for logger "keystoneclient.client" | 10:08 |
LarsErikP | when running keystone tenant-create ...... | 10:08 |
uvirtbot | New bug: #960061 in nova "server is allowed to be deleted while image snapshot is in progress" [Undecided,New] https://launchpad.net/bugs/960061 | 10:11 |
*** songyan has quit IRC | 10:12 | |
*** thinrhino has joined #openstack | 10:14 | |
*** wonk has quit IRC | 10:15 | |
koolhead17 | LarsErikP: keystone --token ADMIN --endpoint http://<IP>:35357/v2.0 tenant-create --name openstack --description "Default Tenant" --enabled true | 10:15 |
*** wonk has joined #openstack | 10:15 | |
koolhead17 | LarsErikP: keystone --token ADMIN --endpoint http://<IP>:35357/v2.0 tenant-list | 10:16 |
koolhead17 | what do you get | 10:16 |
koolhead17 | LarsErikP: https://github.com/openstack/keystone/blob/master/doc/source/configuration.rst <-- this is where i got reference from | 10:19 |
*** miclorb_ has joined #openstack | 10:21 | |
*** kesor_ has joined #openstack | 10:22 | |
kesor_ | is there a way to run openstack inside a virtualbox or something? | 10:22 |
scoph | can anyone help me with an "IndexError: list index out of range" on a fresh new swift install (initial balance of a new ring) | 10:24 |
*** mikal has quit IRC | 10:24 | |
*** miclorb_ has quit IRC | 10:26 | |
*** bjoernh has joined #openstack | 10:26 | |
uksysadmin | kesor_: most people when trying out OpenStack do it in a vm | 10:26 |
scoph | It appears that it may be because I only have one zone, but I need to do an initial "rebalance" to initialize the .gz files before I can add a second node/zone, correct? | 10:26 |
uksysadmin | install ubuntu as normal and then either grab devstack or follow any number of guides... give your vm enough ram to run and to run instances (say, 2Gb), enough disk space (say 20Gb) and install | 10:27 |
uksysadmin | if you virtual server software can't do nested hardware-vt, then set your --libvirt_type=qemu flag which will use software virtualization emulation | 10:28 |
uksysadmin | kesor_: self publicising: http://uksysadmin.wordpress.com/ although its a bit out of date... best just going straight for the OpenStack on Essex very small guide | 10:29 |
dweimer | scoph: I believe that error usually happens when you have fewer zones than the number of replicas (3 by default). You can add multiple zones with swift-ring-builder before running rebalance. If you are using the default 3 replicas, make sure to have at least 3 zones in the ring before the first rebalance run. | 10:30 |
*** thinrhino has quit IRC | 10:30 | |
*** bjoernh has quit IRC | 10:32 | |
*** abbopenstack has quit IRC | 10:32 | |
*** refactor has quit IRC | 10:33 | |
foexle | uksysadmin: nice :) | 10:34 |
foexle | uksysadmin: but one point is missing :( | 10:35 |
*** abbopenstack has joined #openstack | 10:36 | |
*** kayyagari has quit IRC | 10:37 | |
*** vila has quit IRC | 10:38 | |
*** vila has joined #openstack | 10:38 | |
uksysadmin | foexle: go ahead... | 10:41 |
*** bjoernh has joined #openstack | 10:42 | |
alexn6 | Hi! A networking question. I still cannot get access VM for realIP from inside itself. What to check? | 10:43 |
*** mikal has joined #openstack | 10:44 | |
scoph | dweimer: cool, thanks | 10:45 |
foexle | uksysadmin: advanced networking :) | 10:46 |
foexle | uksysadmin: i'm looking for use shared services in openstack cloud | 10:46 |
kesor_ | uksysadmin: thanks, i'll try and get it working. | 10:47 |
foexle | and i can't find any solution or an approach | 10:47 |
uksysadmin | foexle, what do you mean? separating the installations? so a central keystone, central mysql cluster, etc? | 10:48 |
*** koolhead17 has quit IRC | 10:48 | |
LarsErikP | kordless: used ADMIN as token. worked fine now | 10:48 |
LarsErikP | tnx | 10:48 |
*** linmin has joined #openstack | 10:49 | |
foexle | uksysadmin: yeah i've open a question https://answers.launchpad.net/openstack-ci/+question/191197 ... but yes thats the point | 10:49 |
foexle | uksysadmin: using central db cluster, searching services and other... | 10:50 |
*** linmin has left #openstack | 10:50 | |
uksysadmin | foexle: as in the instances themselves use some resource that's already on your network? | 10:51 |
foexle | yes thats the goal | 10:52 |
kesor_ | eucalyptus is open stack? | 10:52 |
foexle | i've a central mysql cluster, there are all openstack related db's and all user DB's | 10:52 |
foexle | kesor_: no | 10:52 |
foexle | kesor_: its ubuntu's cloud stack | 10:53 |
kesor_ | i'm just reading uksysadmin's script, and it has euca2ools as a dependency, and rabbitmq, and mysql, and whatnot .. | 10:53 |
kesor_ | do i really need al that to create openstack? :/ | 10:54 |
foexle | hahahaha more and more ;) | 10:54 |
uksysadmin | kesor_: openstack is the environment - yes you need a database (although you can rely on a local sqlitedb), a messaging system (rabbitmq is the 'default') and yes you need everything else | 10:54 |
uksysadmin | its not virtualisation software, its a cloud operating system | 10:54 |
foexle | euca2ools are only to control your cloud with amazon api .... but you can use the nova client instead | 10:55 |
uksysadmin | euca2ools and python-novaclient are the client tools to access your cloud to operate it | 10:55 |
kesor_ | i thought it was an api layer mostly | 10:55 |
uksysadmin | its a complete stack... OpenSTACK | 10:55 |
uksysadmin | nova-api provides the api | 10:55 |
uksysadmin | nova-compute allows you to spin up instances | 10:56 |
kesor_ | it doesnt sound so complete if you need to give it mysql, and rabbitmq, and whatnot. | 10:56 |
uksysadmin | kesor_... ???? | 10:56 |
kesor_ | what is the bare minimum I need to run api requests that don't spin anything, just the api ā¦ nova-api? | 10:56 |
uksysadmin | are you suggesting the project re-invents the wheel and produces its own database, messaging system, etc? | 10:56 |
uksysadmin | its built using open standards | 10:57 |
uksysadmin | nova-api will allow you to send commands... but that's like saying you only need the car door and not the whole care... you can have a door that opens, but you need the rest to make it into a car | 10:57 |
kesor_ | guess i'll read the installation guide :/ | 10:57 |
uksysadmin | kesor_: do you want virtualisation or a cloud environment? | 10:58 |
kesor_ | i want the openstack api. | 10:58 |
kesor_ | :) | 10:58 |
*** foexle has quit IRC | 10:58 | |
uksysadmin | what for? | 10:58 |
uksysadmin | without the other components those messages go nowhere | 10:58 |
kesor_ | to write software that talks to it, and then use it for rackspace/etc. | 10:58 |
kesor_ | i don't need them to go anywhere, not really. | 10:59 |
uksysadmin | kesor_, but when you talk to rackspace endpoint api, you're talking to the equivalent of the openstack nova-api | 10:59 |
uksysadmin | you don't go: nova-api -> rackspace-api | 10:59 |
kesor_ | ok, a simpler question ā¦ is there a livecd with openstack installed that I can use to talk with? | 10:59 |
uksysadmin | there is one in progress | 10:59 |
uksysadmin | easier to install ubuntu then run devstack | 11:00 |
kesor_ | excellent, sounds like the perfect solution to what I need I think. | 11:00 |
uksysadmin | ok | 11:00 |
kesor_ | found it here http://nova.openstack.org/livecd.html | 11:00 |
*** garyk has quit IRC | 11:02 | |
*** garyk has joined #openstack | 11:03 | |
*** abbopenstack has quit IRC | 11:03 | |
*** thinrhino has joined #openstack | 11:05 | |
LarsErikP | in the creation of endpoints in keystone. The example only shows for nova. The URLs are different for keeystone, ec2 and glance, right? anyone remember the ports? | 11:05 |
LarsErikP | and urls... | 11:05 |
*** egant has joined #openstack | 11:08 | |
chmouel | LarsErikP: I would advise to look over devstack: https://github.com/openstack-dev/devstack/blob/master/files/keystone_data.sh | 11:08 |
*** foexle has joined #openstack | 11:09 | |
chmouel | LarsErikP: in general i would install devstack in a VM and try to copy and paste the bit needed from your working devstack env | 11:09 |
foexle | uksysadmin: sry kernel panic -.- | 11:09 |
*** stewart has quit IRC | 11:10 | |
*** phorgh has quit IRC | 11:13 | |
*** pixelbeat has quit IRC | 11:18 | |
*** bjoernh has quit IRC | 11:19 | |
*** de_ has quit IRC | 11:20 | |
uksysadmin | awesome - Nova RC1 officially out | 11:22 |
*** FlorianOtel has joined #openstack | 11:23 | |
*** stewart has joined #openstack | 11:23 | |
uksysadmin | FlorianOtel: Flo-Rider... how are you? | 11:24 |
uksysadmin | I got swift and keystone working a charm | 11:24 |
*** nerens has joined #openstack | 11:24 | |
uksysadmin | thanks to you guys and chmouel and agy | 11:24 |
*** kesor_ has quit IRC | 11:24 | |
chmouel | uksysadmin: great! | 11:24 |
FlorianOtel | uksysadmin, Steaming. | 11:25 |
FlorianOtel | uksysadmin, really crappy day so far -- debugging BOMs and corporate shit I hate | 11:25 |
FlorianOtel | anyway | 11:25 |
FlorianOtel | how's going for you ? Was just thinking to debug that doc, fix the swift proxy conf and shoot it over | 11:25 |
FlorianOtel | I haven't even time to look at chmouel 's pad either :( | 11:26 |
FlorianOtel | bad, really bad. | 11:26 |
*** hggdh has quit IRC | 11:27 | |
uksysadmin | FlorianOtel: yes, you should feel bad. :p | 11:29 |
uksysadmin | ;-) | 11:29 |
*** pixelbeat has joined #openstack | 11:29 | |
uksysadmin | all is good - just doing a reinstall of a box to have as a second compute node and a test swift server too so I've got something akin to a useable openstack environment | 11:30 |
uksysadmin | allow me to troubleshoot some networking, etc | 11:30 |
FlorianOtel | uksysadmin, Don't tell me you got glance on swift w/ keystone auth 2.0 | 11:32 |
FlorianOtel | just give me smth to cling on :) | 11:32 |
*** alperkanat has joined #openstack | 11:35 | |
*** oneiroi has joined #openstack | 11:37 | |
*** hggdh has joined #openstack | 11:39 | |
*** nerens has quit IRC | 11:40 | |
*** nid0 has joined #openstack | 11:40 | |
*** livemoon has joined #openstack | 11:40 | |
*** mikal has quit IRC | 11:42 | |
*** dwcramer has joined #openstack | 11:46 | |
*** phorgh has joined #openstack | 11:47 | |
LarsErikP | hmmm got 401 when uploading image... the token it wants.. that is the keystone admin token? | 11:47 |
oneiroi | LarsErikP: if you have linked glance + nova to keystone then yes | 11:50 |
LarsErikP | not installed nova yet... guide says glance first :p | 11:50 |
oneiroi | ah | 11:51 |
oneiroi | just running glance+nova here atm from 2011.3 EPEL packages ... can't say I've tried glance + keystone only, can't see why it wouldn't work | 11:51 |
FlorianOtel | uksysadmin, mail on its way. | 11:51 |
uksysadmin | FlorianOtel, yes I have swift and keystone v2.0 auth | 11:52 |
LarsErikP | oneiroi: okey.. no need for images yet anyways. Can install nova first. no prob. | 11:52 |
LarsErikP | but why would that make a difference? | 11:52 |
* FlorianOtel is going for a quick lunch before heading to the dentist. | 11:52 | |
LarsErikP | oneiroi: running essex rc1 btw | 11:52 |
* FlorianOtel is away | 11:52 | |
*** rods has joined #openstack | 11:52 | |
*** supriya has quit IRC | 11:53 | |
*** ahasenack has joined #openstack | 11:54 | |
*** ayoung-afk has quit IRC | 11:54 | |
*** livemoon has quit IRC | 11:54 | |
*** arBmind has quit IRC | 11:55 | |
*** phorgh has quit IRC | 11:56 | |
*** vizsla has quit IRC | 11:59 | |
*** tserong has quit IRC | 12:06 | |
alexn6 | uksysadmin, can you show yor keystone conf please? you have ubuntu repo openstack diablo install? | 12:09 |
alexn6 | uksysadmin, and swift keystone filter config also | 12:11 |
*** phorgh has joined #openstack | 12:11 | |
uksysadmin | alexn6: I've been concentrating on Essex on 12.04 and the keystone configs have moved on somewhat | 12:13 |
*** livemoon has joined #openstack | 12:13 | |
*** marrusl has joined #openstack | 12:14 | |
alexn6 | uksysadmin, do yo know if one can use essex release keystone with older swift/nova releases? Is it worth for larger functionality? | 12:16 |
LarsErikP | uksysadmin: know why I get 401 when trying to upload an image? :s | 12:20 |
uksysadmin | hmmm... I've seen updates to nova that were needed for keystone... not 100% sure if that configuration to be honest. | 12:20 |
LarsErikP | to glance | 12:20 |
uksysadmin | 401 - A | 12:21 |
uksysadmin | Unauthorized | 12:21 |
*** supriya has joined #openstack | 12:21 | |
uksysadmin | check your user/pass creds in keystone | 12:21 |
uksysadmin | and that you're specifying the correct tenant | 12:21 |
LarsErikP | pretty sure i'm entering right cred | 12:21 |
uksysadmin | I tend to run keystone-all in a terminal to see the gory debug details | 12:22 |
uksysadmin | check you are authorized | 12:22 |
uksysadmin | you also need to be a member of the 'admin' group too within your tenant for an upload to work | 12:22 |
uksysadmin | iirc | 12:22 |
*** leifmadsen has joined #openstack | 12:22 | |
*** leifmadsen has joined #openstack | 12:22 | |
LarsErikP | i have my adminUser user, who is granted the adminRole role.. | 12:23 |
LarsErikP | in the openstackDemo tenant | 12:23 |
uksysadmin | adminRole isn't a standard role... unless you have that specified as a role that is an admin | 12:23 |
LarsErikP | hmm | 12:23 |
LarsErikP | i may have to fix that.. just followed the guide :s http://docs.openstack.org/trunk/openstack-compute/install/content/setting-up-tenants-users-and-roles.html | 12:24 |
TREllis | uksysadmin: did you manage to get the ec2 api bits working yet? | 12:24 |
uksysadmin | TREllis: not yet | 12:25 |
uksysadmin | my setup: ubuntu 12.04, Essex from Ubuntu (last updated packages were Friday), keystone, glance, nova and swift with keystone. can use swift and nova client tools, not euca | 12:26 |
uksysadmin | dashboard still broken for me too | 12:26 |
*** paulmillar has quit IRC | 12:26 | |
*** paulmillar has joined #openstack | 12:26 | |
uksysadmin | once I've just finished a re-install of a second compute node I'll tackle "swift+keystone+glance" which I believe should be doable now? /cc chmouel ? | 12:27 |
*** paulmillar has quit IRC | 12:29 | |
*** praefect has quit IRC | 12:30 | |
*** mutex has quit IRC | 12:30 | |
*** viraptor has quit IRC | 12:30 | |
*** Ard1t has quit IRC | 12:30 | |
*** leifmadsen has quit IRC | 12:30 | |
LarsErikP | what env-variables do i need to set? i'm tired of specifying --username and so on for the keystone-commands | 12:30 |
*** changlp_ has joined #openstack | 12:30 | |
*** mutex_ has joined #openstack | 12:30 | |
*** changlp has quit IRC | 12:31 | |
*** Ard1t has joined #openstack | 12:31 | |
*** changlp_ is now known as changlp | 12:31 | |
*** DigitalFlux has joined #openstack | 12:32 | |
chmouel | uksysadmin: there is a HP guy who's doing the change on glance, it should not be too hard (see one of the post this morning sent to the mailing list) | 12:32 |
uksysadmin | chmouel: yeah will do. Florian sent me his workings so I'll see what I can follow, bearing in mind I'll be looking at doing this with debs as much as possible - else I'll wait until Friday/next week for the Ubuntu guys to catch up | 12:32 |
uksysadmin | LarsErikP: just looking at that document... hmmm - think the role name has to match a config entry (either in keystone.conf or glance.conf - when I've finished an install I'll double check) | 12:32 |
chmouel | uksysadmin: cool, hopefully things will get much more apt-getable quickly in the next couple of weeks now that RCs are coming out | 12:32 |
uksysadmin | e.g. you can call your admin role "god" if you like, providing that keystone has been told that god is essentially an alias to the admin role | 12:32 |
uksysadmin | chmouel: yes - hope so. it needs it. | 12:32 |
*** praefect has joined #openstack | 12:33 | |
*** dneary has quit IRC | 12:33 | |
uksysadmin | LarsErikP: see if this helps: https://github.com/uksysadmin/OpenStackInstaller/blob/essex/upload_ubuntu.sh | 12:34 |
chmouel | LarsErikP: something along those lines http://pastie.org/private/zj4ryxkznkr6s1vgla6czw | 12:35 |
*** supriya has quit IRC | 12:35 | |
uksysadmin | LarsErikP: sorry - I misread tired as tried | 12:35 |
*** arBmind has joined #openstack | 12:38 | |
*** kesor_ has joined #openstack | 12:39 | |
*** ldlework has joined #openstack | 12:40 | |
LarsErikP | uksysadmin: so, how do i tell keystone that the adminRole actually is a admin-role? :s | 12:42 |
*** thinrhino has quit IRC | 12:43 | |
*** Glacee has joined #openstack | 12:43 | |
*** kbringard has joined #openstack | 12:44 | |
LarsErikP | chmouel: no OS_AUTH_KEY? | 12:45 |
uksysadmin | LarsErikP: I just grepped 'admin' in /etc/keystone and in the policy.json there is a line: policy.json: "admin_required": [["role:admin"], ["is_admin:1"]] | 12:45 |
LarsErikP | uksysadmin: ok, i'll check | 12:45 |
*** leifmadsen has joined #openstack | 12:46 | |
*** emorisse has joined #openstack | 12:49 | |
*** kesor_ has left #openstack | 12:49 | |
*** littleidea has quit IRC | 12:50 | |
*** viraptor has joined #openstack | 12:51 | |
*** andrewsmedina has quit IRC | 12:51 | |
*** AlanClark has joined #openstack | 12:52 | |
*** leifmadsen has quit IRC | 12:53 | |
*** indiaswift has joined #openstack | 12:57 | |
LarsErikP | uksysadmin: i have that to... changed it to "role:adminRole" | 12:57 |
LarsErikP | no effect | 12:57 |
uksysadmin | restarted services? | 12:58 |
indiaswift | Hi, need some help on openstack swift formpost middleware | 12:59 |
*** pimpministerp has joined #openstack | 12:59 | |
*** rkukura has quit IRC | 12:59 | |
notmyname | indiaswift: if you don't get an answer, ping me in an hour or so, and I'll try to help | 13:00 |
indiaswift | Cool, thnx | 13:00 |
livemoon | hi | 13:02 |
livemoon | anyone can tell me how to configure vncproxy and xvnc | 13:03 |
*** indiaswift has quit IRC | 13:03 | |
TREllis | uksysadmin: likewise, I have all that going except swift with keystone | 13:04 |
*** dwcramer has quit IRC | 13:06 | |
*** fabiand__ has joined #openstack | 13:07 | |
LarsErikP | uksysadmin: suddenly worked... think i missed admin_token in glance-api.conf | 13:08 |
*** leifmadsen has joined #openstack | 13:08 | |
*** bjoernh has joined #openstack | 13:09 | |
*** heyho has joined #openstack | 13:10 | |
*** sandywalsh has quit IRC | 13:11 | |
*** stewart has quit IRC | 13:11 | |
*** al-maisan is now known as almaisan-away | 13:12 | |
*** lts has joined #openstack | 13:18 | |
*** cryptk is now known as cryptk|offline | 13:19 | |
uksysadmin | TREllis: just got swift + keystone working in the last day | 13:19 |
uksysadmin | LarsErikP: glad all working! | 13:19 |
*** andrewsmedina has joined #openstack | 13:20 | |
*** ayoung has joined #openstack | 13:20 | |
*** mattray has joined #openstack | 13:21 | |
*** ayoung has quit IRC | 13:21 | |
*** ayoung has joined #openstack | 13:22 | |
kbringard | anyone remember the command to query your compute nodes for available resources? | 13:23 |
*** natea has joined #openstack | 13:24 | |
kbringard | ah, n/m, figured it out | 13:24 |
kbringard | : nova-manage service update_resource āhost= ... | 13:24 |
*** sandywalsh has joined #openstack | 13:25 | |
*** stewart has joined #openstack | 13:27 | |
*** markwash has quit IRC | 13:27 | |
*** fabiand__ has quit IRC | 13:27 | |
*** Free_maN has quit IRC | 13:28 | |
*** Free_maN has joined #openstack | 13:28 | |
*** natea has joined #openstack | 13:30 | |
oNeToWn | hum, LarsErikP, any luck? | 13:31 |
oNeToWn | I got a problem when register an image. http://paste.ubuntu.com/892172/ | 13:32 |
*** tkleinscea has joined #openstack | 13:33 | |
*** pimpministerp has quit IRC | 13:33 | |
*** primeministerp has quit IRC | 13:34 | |
*** primeministerp has joined #openstack | 13:34 | |
*** deshantm has joined #openstack | 13:35 | |
*** bjoernh has quit IRC | 13:39 | |
*** adjohn has joined #openstack | 13:39 | |
*** adjohn has quit IRC | 13:40 | |
*** mdomsch has joined #openstack | 13:41 | |
*** markwash has joined #openstack | 13:41 | |
*** rkukura has joined #openstack | 13:42 | |
*** lborda has joined #openstack | 13:43 | |
*** halfss has quit IRC | 13:44 | |
*** natea has quit IRC | 13:47 | |
*** nRy_ has joined #openstack | 13:47 | |
*** Teduardo has joined #openstack | 13:47 | |
*** nRy has quit IRC | 13:48 | |
*** msavy has joined #openstack | 13:48 | |
*** nid0 has quit IRC | 13:50 | |
*** michael_tn has joined #openstack | 13:52 | |
*** almaisan-away is now known as al-maisan | 13:54 | |
*** mattray has quit IRC | 13:54 | |
alexn6 | can anyone tell me If he can work from instance with public address assigned with that address itself? | 13:55 |
*** mrjazzcat has joined #openstack | 13:55 | |
*** krow has joined #openstack | 13:56 | |
*** tserong has joined #openstack | 13:56 | |
*** tserong has quit IRC | 13:56 | |
*** tserong has joined #openstack | 13:56 | |
*** livemoon has quit IRC | 13:57 | |
*** cloudvirt has joined #openstack | 13:57 | |
*** cloudvirt has left #openstack | 13:57 | |
*** mattray has joined #openstack | 13:58 | |
*** bjoernh has joined #openstack | 13:58 | |
uksysadmin | alexn6: not sure what you mean? | 13:59 |
*** livemoon has joined #openstack | 13:59 | |
alexn6 | mm.. I see now this in docs - "Note that you cannot SSH to an instance with a public IP from within the same server as the routing configuration won't allow it." | 14:00 |
alexn6 | I mean smth like this, but not only ssh | 14:00 |
alexn6 | uksysadmin, clear? | 14:01 |
LarsErikP | oNeToWn: managed to upload image now | 14:01 |
uvirtbot | New bug: #960218 in keystone "belongsTo should validate on tenant ID not name" [Undecided,In progress] https://launchpad.net/bugs/960218 | 14:01 |
*** dwcramer has joined #openstack | 14:04 | |
alexn6 | uksysadmin, can you check this? ssh from node with public IP to that IP | 14:05 |
*** indiaswift has joined #openstack | 14:05 | |
uvirtbot | New bug: #960226 in nova "Nova API os-hosts extension broken" [Undecided,New] https://launchpad.net/bugs/960226 | 14:06 |
*** mdomsch has quit IRC | 14:06 | |
*** mdomsch has joined #openstack | 14:06 | |
*** natea has joined #openstack | 14:07 | |
*** supriya has joined #openstack | 14:10 | |
oNeToWn | LarsErikP, sounds good. I still can not upload any shit now. >o | 14:10 |
*** swiftindia has joined #openstack | 14:12 | |
uksysadmin | alexn6: you mean if I have a "public ip" assigned say 172.16.1.1 and I ssh to that instance. Then from that instance i want to ssh to 172.16.1.1 ? | 14:14 |
alexn6 | uksysadmin, yes | 14:14 |
uksysadmin | alexn6: why would you? | 14:15 |
Dieterbe | is the hashing in swift consistent? as in, if nodes join the cluster, will the files get nicely redistributed with minimal overhead? | 14:15 |
uksysadmin | you should get an ssh prompt up, but you won't be able to log in as the private key you used to log in to that instance won't be on that instance you spun up | 14:15 |
alexn6 | uksysadmin, then just try to telnet 172.16.1.1 22 | 14:16 |
notmyname | Dieterbe: yes | 14:16 |
alexn6 | can you just try? | 14:16 |
uksysadmin | ah, yes - your instance has a private IP... it doesn't know about itself | 14:17 |
uksysadmin | so you mightn't get an ssh prompt up | 14:17 |
uksysadmin | it doesn't know, when inside the instance, it has a different IP assigned to it | 14:17 |
alexn6 | it doesn`t matter - it go and ask dnsmasq on nova-compute | 14:18 |
alexn6 | or smth like this | 14:18 |
uksysadmin | alexn6: I'm failing to understand the use case for this... you would just ssh to localhost if you want to ssh to itself | 14:18 |
*** objectiveous has quit IRC | 14:18 | |
uksysadmin | or the private range | 14:18 |
scoph | I'm getting "Object PUT returning 503, 1/2 required connections". running 'swift -A http://my-proxy:8080/auth/v1.0 my setup = 2-nodes, 2 zones, 4 drives-node/zone. I've confirmed that the rings are set up and that swift works and that the ports are listening on serverB. can anyone help? | 14:18 |
Dieterbe | notmyname: thanks, also, do you know what happens when nodes go offline? the files will get rebalanced and the mappings will be adjusted, right? | 14:19 |
alexn6 | uksysadmin, we have some services, that want access itself via net and also must have public accessible urls for the same resources | 14:19 |
LarsErikP | anyone experienced this? http://paste.openstack.org/show/11373/ essex | 14:19 |
*** michael_tn has quit IRC | 14:19 | |
*** alperkanat has quit IRC | 14:19 | |
scoph | soory, that should have read: 'swift -A http://my-proxy:8080/auth/v1.0Ā /auth/v1.0 -U system:me -K mypass upload myfiles /tmp/testfile1 | 14:20 |
*** alperkanat has joined #openstack | 14:20 | |
notmyname | Dieterbe: if they get pulled from the ring, yes. otherwise, existing content will have one less replica and new content will get a replica put on a handoff node (to be moved when the down node comes back online) | 14:20 |
uksysadmin | alexn6: then you access via hostname, not ip | 14:20 |
LarsErikP | compute is throwing that stuff | 14:20 |
uksysadmin | where the hostname internally will resolve to the internal IP | 14:20 |
uksysadmin | and externally will resolve to the external IP | 14:20 |
notmyname | scoph: check your object server logs to see why the 2nd PUT to the object server failed | 14:20 |
notmyname | scoph: with 2 replicas, both must succeed on PUT for the proxy to return 2xx | 14:20 |
Dieterbe | notmyname: thanks. i'm comparing swift to ceph. we need a HA object store, size +- 100TB of files, avg 150MB upto 5GB (later, files will get bigger). file access preferably over linux vfs mount (although api is acceptable too). it seems to me ceph is a bit more promising, but less tested, whereas swift seems to have more production deployments | 14:23 |
scoph | notmyname: I've been looking through them and haven't found any indicators as to why it's failing | 14:24 |
scoph | probably time to crank up log_level | 14:24 |
* FlorianOtel is back | 14:24 | |
alexn6 | uksysadmin, we have working implementation of some package on real node, but to make it work in the cloud we had to make object like innerIP and outerIP -i.e. some kind of change concept and code rewriting. Also you may think about token and auth/certs etc. To me it looks like this is not very rare case, especially if you not know exactly what must be public and what is localhost_like enough | 14:24 |
*** fukushim_ has quit IRC | 14:24 | |
*** livemoon has quit IRC | 14:25 | |
LarsErikP | uksysadmin: do you know anything about my paste up there? | 14:25 |
notmyname | scoph: one of your 2 storage nodes should have an error about why it couldn't write the object (permissions, drive not mounted, etc) | 14:25 |
*** clopez has joined #openstack | 14:26 | |
alexn6 | uksysadmin, will try. don`t think about it. but then hostname must be in public dns, not only in dnsmask | 14:26 |
*** andrewsmedina has quit IRC | 14:27 | |
uksysadmin | alexn6: its how EC2 do it if it helps... seems like a good model to follow | 14:27 |
alexn6 | uksysadmin, btw - real case - tokens in keystone for swift and ssl host cert - must be there an IP or name? | 14:27 |
*** andrewsmedina has joined #openstack | 14:28 | |
uksysadmin | LarsErikP: are you missing a package? | 14:28 |
LarsErikP | uksysadmin: maybe... don't which one.. but.. i created thedirectory.. stopped complaining | 14:29 |
*** robbiew has joined #openstack | 14:29 | |
LarsErikP | still something wrong about the roles... | 14:29 |
uksysadmin | LarsErikP: actually scrub that - you must have a config issue | 14:29 |
uksysadmin | its not present on my system | 14:29 |
LarsErikP | aha | 14:29 |
uksysadmin | and the instances suggests it should be /var/lib/nova/instances...? | 14:29 |
LarsErikP | yeah.. it was that before... sec, i shall post conf | 14:30 |
*** msavy has quit IRC | 14:30 | |
*** maploin has joined #openstack | 14:30 | |
*** maploin has joined #openstack | 14:30 | |
LarsErikP | uksysadmin: http://paste.openstack.org/show/11374/ | 14:30 |
*** robix has joined #openstack | 14:32 | |
alexn6 | uksysadmin, I mean that in swift account has storage url with IP by default, and ssl cert of proxy usually is hostname - so when service with HTTPS want to use that cert it must use cert with IP not with hostname | 14:32 |
Dieterbe | notmyname: so, any thoughts on swift vs ceph for blob storage? | 14:33 |
Dieterbe | or anyone else, for that matter | 14:33 |
*** linztm has joined #openstack | 14:35 | |
*** thinrhino has joined #openstack | 14:36 | |
*** kayyagari has joined #openstack | 14:37 | |
*** sZoz has joined #openstack | 14:37 | |
LarsErikP | how do I ensure that a role in keystone actually _is_ a admin role? | 14:38 |
*** alaski has joined #openstack | 14:39 | |
*** indiaswift has quit IRC | 14:39 | |
*** dubsquared has joined #openstack | 14:40 | |
*** indiaswift has joined #openstack | 14:40 | |
uksysadmin | LarsErikP: this is done on a per-service basis | 14:40 |
uksysadmin | in swift this is specfied in /etc/swift/proxy-server.conf | 14:41 |
*** dolphm has joined #openstack | 14:41 | |
uksysadmin | [filter:keystone] | 14:41 |
uksysadmin | paste.filter_factory = keystone.middleware.swift_auth:filter_factory | 14:41 |
uksysadmin | operator_roles = Member,admin | 14:41 |
uksysadmin | in glance this seems to be /etc/glance/policy.json | 14:41 |
*** arBmind has quit IRC | 14:42 | |
LarsErikP | okey. then i need to check horizon | 14:42 |
uksysadmin | alexn6: ssl cert can be hostname or ip | 14:42 |
LarsErikP | uksysadmin: leaving for work now... talk tonthon wstgrd :-) | 14:42 |
LarsErikP | talk to* | 14:42 |
uksysadmin | np see ya | 14:42 |
*** dachary has joined #openstack | 14:42 | |
dachary | Hi, is there a HOWTO explaining how to retrieve an AMI from AWS to store it in glance ? | 14:43 |
alexn6 | uksysadmin, ok. Thanks a lot for good advice! | 14:43 |
*** swill has joined #openstack | 14:44 | |
*** alaski has left #openstack | 14:44 | |
uksysadmin | np | 14:45 |
swill | i am finding that slogging has data for the same hour in more than one log, should the values be summed together? | 14:46 |
swill | that is probably a question for notmyname | 14:46 |
notmyname | swill: that's expected (or at least not unusual). in whatever importer/aggr you are using for the resulting files, you should combine them (note that storage numbers should not be summed) | 14:47 |
*** dneary has joined #openstack | 14:48 | |
FlorianOtel | uksysadmin, ok..now that was new to me (wrt /etc/glance/policy.json). Mind pointing me to docs ? | 14:48 |
swill | ok, i need to check which numbers are storage. so are storage numbers the total storage used to that date? | 14:48 |
FlorianOtel | or, for that matter, the format for that file ? | 14:48 |
annegentle | dachary: hm,not that I know of, but good idea for a howto | 14:49 |
scoph | notmyname: this is all I'm seeing so far: https://gist.github.com/2136418 | 14:49 |
swill | notmyname: storage is a total in its self and is not the storage added in that period. | 14:49 |
scoph | notmyname: hah, nevermind. I think I found the problem | 14:50 |
dachary | annegentle: it looks like this is not possible : http://stackoverflow.com/questions/3893614/download-an-amazon-ec2-ami https://forums.aws.amazon.com/thread.jspa?messageID=131841 | 14:50 |
notmyname | swill: the storage number is in bytes and is the average number found in the files processed in that log processing run. yes, it's total, not a delta | 14:50 |
*** n0ano has quit IRC | 14:50 | |
uvirtbot | New bug: #960261 in glance "Need policy control over making images public" [Medium,In progress] https://launchpad.net/bugs/960261 | 14:50 |
uvirtbot | New bug: #960265 in nova "DescribeVolumes EC2 API issues" [Undecided,New] https://launchpad.net/bugs/960265 | 14:50 |
zynzel | any good habits to drop traffic from vm to openstack infrastructure? (for example from vm you have access to ALL volumes in nova-volume, from vm you have access to compute-node ssh) | 14:51 |
*** rnirmal has joined #openstack | 14:51 | |
swill | notmyname: is that only the 'bytes_used' field or are there other storage fields that i am not recognizing? | 14:51 |
*** MarkAtwood has joined #openstack | 14:51 | |
*** dubsquared has quit IRC | 14:51 | |
notmyname | swill: that's the only one | 14:52 |
swill | ok ty. | 14:52 |
uksysadmin | FlorianOtel: I was guessing... was the only place that mentioned "admin"... see /etc/glance/policy.json | 14:53 |
FlorianOtel | uksysadmin, On that, I'm reading Jay P. answer here: https://bugs.launchpad.net/glance/+bug/953989/comments/2 wrt to "long-lived" tokens being now deprecated | 14:54 |
uksysadmin | although... erm.... I grepped before and it was there... my file is empty now | 14:54 |
uksysadmin | :S | 14:54 |
FlorianOtel | uksysadmin, (so is mine) | 14:54 |
uksysadmin | FlorianOtel, yeah - its all about user/pass | 14:54 |
* uksysadmin wonders who's server he grepped before! | 14:54 | |
FlorianOtel | uksysadmin, ok, so what do we do with in swift then ? | 14:55 |
uksysadmin | ah no | 14:55 |
uksysadmin | it was /etc/keystone/policy.json | 14:55 |
annegentle | dachary: ah, ok. | 14:55 |
uksysadmin | for glance, there are no restrictions on creating machines | 14:56 |
FlorianOtel | uksysadmin, "Keystone...Glance...it's all policy.json to me" huh :)) ? | 14:56 |
FlorianOtel | sorry mate, just kidding | 14:56 |
uksysadmin | :) | 14:56 |
uksysadmin | haha | 14:56 |
uksysadmin | my swift set up is good now | 14:56 |
uksysadmin | I've not had a chance to read your blog... | 14:56 |
*** jj0hns0n has joined #openstack | 14:57 | |
FlorianOtel | uksysadmin, yes, but does it use a long-lived token or username/pass | 14:57 |
*** hhoover has joined #openstack | 14:57 | |
FlorianOtel | in "tokenauth" middleware | 14:57 |
uksysadmin | ah, see what you mean | 14:57 |
uksysadmin | erm... tbh, not sure | 14:57 |
*** zzed has joined #openstack | 14:57 | |
*** shaon has joined #openstack | 14:58 | |
FlorianOtel | uksysadmin, oh, so Jay must have meant that the concept was deprecated only in Glance / Nova | 14:58 |
FlorianOtel | but not in Swift | 14:58 |
*** hhoover has left #openstack | 14:58 | |
alexn6 | uksysadmin, one more thing - what if I configure service with dnsmasq hostname, and then try on outer machine use URLs to objects with that hostname in path. And real DNS not know about machine at all or have other name. If I don`t allow to make static reference in real DNS, I must use publicIP and then again this scheme will not work straightforwardly. Do you know such cases? | 14:58 |
FlorianOtel | brilliant. Tripple Hurray for consistency ! | 14:58 |
uksysadmin | lol | 14:59 |
uksysadmin | yes looking in proxy-server.conf for keystone setup, I have tokens and user/pass | 14:59 |
*** mattray has quit IRC | 14:59 | |
*** blamar has joined #openstack | 14:59 | |
swill | notmyname: if you are going to bill on 'bytes used', would you bill based on the largest 'bytes used' number in the billing period? | 14:59 |
uksysadmin | alexn6: my head just exploded reading that. | 14:59 |
uksysadmin | FlorianOtel: I guess it *should* use short lived user/pass generated tokens | 15:00 |
notmyname | swill: no, we use the average (mean). the number could be high or low depending on different conditions, so the mean is "good enough". especially since it's calculated hourly but billed monthly | 15:00 |
*** indiaswift has quit IRC | 15:00 | |
uksysadmin | not the ADMIN/999888777666 token hard set - that was what jaypipe was referring to | 15:00 |
swill | notmyname: ok, that makes sense. thanks. | 15:01 |
*** bjoernh has quit IRC | 15:01 | |
alexn6 | uksysadmin, ups. sorry then. Nevermind :) Simply - you have http server and give users urls to objects in it for a local and external services, but cannot change real DNS, then just http://hostname/object will not work. | 15:04 |
FlorianOtel | uksysadmin, dude. your mixing things up -- or I misunderstand you badly. "proxy-server.conf" is swift proxy config. The "tokenauth" section is Keystone middleware . And to me the configs for that middleware should be the same in both Swift and Glance | 15:04 |
FlorianOtel | i.e. in "proxy-server.conf" for Swift, resp "glance-api-paste.ini" for glance | 15:05 |
*** nRy_ has quit IRC | 15:05 | |
*** michael_tn has joined #openstack | 15:05 | |
FlorianOtel | And, come to think of it, it's called "tokenauth" in proxy-server.conf and "authtoken" in glance-api-registry.ini. | 15:07 |
FlorianOtel | Meaning that we can call them "icyposicletokenauthonastick" if we want to | 15:07 |
*** natea has quit IRC | 15:07 | |
FlorianOtel | fark | 15:08 |
*** Blackavar has quit IRC | 15:08 | |
*** ryanpetrello has joined #openstack | 15:08 | |
*** swill_ has joined #openstack | 15:09 | |
*** aex has joined #openstack | 15:09 | |
*** aex is now known as stmod | 15:09 | |
*** troytoman-away is now known as troytoman | 15:09 | |
stmod | hi all | 15:09 |
*** swill has quit IRC | 15:09 | |
*** swill_ is now known as swill | 15:09 | |
*** mdomsch has quit IRC | 15:10 | |
* michael_tn waves, good day all | 15:10 | |
*** vincentricci has joined #openstack | 15:11 | |
stmod | I am doing a research in comparing the API of Openstack with other cloud APIs. Can someone help me? | 15:11 |
*** anotherjesse is now known as anotherjesse_zz | 15:11 | |
*** rgoodwin has joined #openstack | 15:13 | |
stmod | does exist documents explaing the relationship between OpenStack and the other APIs ? | 15:13 |
FlorianOtel | uksysadmin, Now I got me totally confused. My swift is happily using the admin token but glance -- referring to same middleware -- can't / shouldn't (as per Jay's comment). Ok, clear as mud. | 15:13 |
*** dwcramer has quit IRC | 15:14 | |
* uksysadmin thinks everyone is smoking crack in #openstack today | 15:14 | |
uksysadmin | ;-) | 15:15 |
*** msavy has joined #openstack | 15:15 | |
FlorianOtel | uksysadmin, pass the pipe, I'd happily "joint" the party :) | 15:15 |
uksysadmin | alexn6: sorry - I'm doing some day job work and getting distracted... I'll have to help you another day, sorry. | 15:15 |
uksysadmin | pass the pipe? think you're hogging it. | 15:15 |
uksysadmin | hands up if you think FlorianOtel is a nutter? | 15:16 |
uksysadmin | o/ | 15:16 |
uksysadmin | :S | 15:16 |
uksysadmin | ;-0 | 15:16 |
* FlorianOtel raises two hands | 15:16 | |
blamar | stmod: I haven't seen anything comprehensive, but off the top of my head there is the SimpleCloud project which attempts to deal with a bunch of different cloud APIs?so that might be helpful? | 15:16 |
uksysadmin | just checking | 15:16 |
uksysadmin | So yes, proxy-server.conf is like the api-paste stuff - they enable the interaction with keystone for that service | 15:17 |
*** rclewis has joined #openstack | 15:17 | |
stmod | blamar: thank you, I will have a look to that project, because I am really confused about this topic. | 15:17 |
FlorianOtel | uksysadmin, bingo | 15:17 |
FlorianOtel | uksysadmin, i.e. "auth_token" middleware | 15:17 |
uksysadmin | I'm just happy that I've got a working setup - think if those long live tokens disappear, it will just be another release of OpenStack | 15:17 |
uksysadmin | or another day | 15:17 |
alexn6 | uksysadmin, all well. You`ve managed to help me. I know that it`s uneasy to work and answer here. Good day to you! | 15:18 |
FlorianOtel | uksysadmin, so, as my swift is working perfectly fine with that setup | 15:18 |
uksysadmin | np! | 15:18 |
*** littleidea has joined #openstack | 15:18 | |
uksysadmin | FlorianOtel: I think you have an advantage, you're using github source | 15:18 |
FlorianOtel | uksysadmin, why the actual fsck cannot glance / nova -- using the same middleware -- cannot / | 15:18 |
uksysadmin | I'm bound to the ubuntu folks | 15:18 |
uksysadmin | FlorianOtel: I get you | 15:18 |
uksysadmin | technically, yes, it should be the same mechanism | 15:19 |
uksysadmin | send user/pass, get token back | 15:19 |
uksysadmin | ? | 15:19 |
* FlorianOtel reminds uksysadmin that he's still hogging the pipe | 15:19 | |
uksysadmin | point taken | 15:19 |
FlorianOtel | so no, I'm not using github :) | 15:19 |
blamar | stmod: Sure, let me know if I can help reduce confusion at all. | 15:19 |
FlorianOtel | no dude, I'm freaking not. | 15:19 |
FlorianOtel | I'm using Essex-4 keystone + swift v1.4.6 and -- up to this point -- glance Essex-4 | 15:20 |
stmod | @blamr: may we have a priv chat? | 15:20 |
stmod | sorry blamar | 15:20 |
*** natea has joined #openstack | 15:20 | |
uksysadmin | FlorianOtel: I'm on Ubuntu 12.04 B1, E4~RC1 kinda world from the Ubuntu repos for Nova, Glance, Keystone, Swift | 15:20 |
*** jct has quit IRC | 15:21 | |
*** jct has joined #openstack | 15:21 | |
FlorianOtel | uksysadmin, That's cheating. | 15:21 |
uksysadmin | hahaha | 15:21 |
uksysadmin | something about deploying tested packaged code kinda fits here though... crazy as we are ;-) | 15:22 |
*** Gordonz has joined #openstack | 15:22 | |
* FlorianOtel goes grabs t-shirt with "I'm with crazy" logo on | 15:22 | |
*** jct has quit IRC | 15:23 | |
FlorianOtel | I think I need to pull the latest keystone (is it RC1 now ?) and look at auth_token there, and send a mail to the list to sort this out. | 15:24 |
swill | notmyname: i am finding that 'container_requests' seems to be an ever increasing number as time passes. is that field also a total? | 15:24 |
*** jct has joined #openstack | 15:24 | |
* uksysadmin goes and puts on his "I'm with crazy T-shirt" | 15:24 | |
* FlorianOtel goes types crazy mail mail to the mailing list and and spoofs it as from a certain email addie from UK :) | 15:26 | |
dolphm | FlorianOtel: RC1 is coming, but not out yet | 15:26 |
uksysadmin | FlorianOtel: I don't think our Queen cares you're faking her mail addy again though | 15:27 |
*** dwcramer has joined #openstack | 15:27 | |
*** roge has joined #openstack | 15:28 | |
notmyname | swill: I think that should be the count of requests in the processed logs. so yes, a total for that run | 15:30 |
*** thinrhino has quit IRC | 15:31 | |
*** jj0hns0n has quit IRC | 15:31 | |
*** hub_cap has joined #openstack | 15:31 | |
*** seth_ has joined #openstack | 15:32 | |
*** jj0hns0n has joined #openstack | 15:33 | |
swill | notmyname: does that explain why each successive log has an increased number for that? so to figure out the number of requests in a period, i need to find the value for 'container_requests' at the beginning of my period and subtract that from the last entry in my period? | 15:34 |
*** al-maisan is now known as almaisan-away | 15:35 | |
notmyname | swill: hmmm....that's not what I'd expect (but I haven't looked at that part of the code in a while) | 15:35 |
swill | notmyname: its not what i was expecting either, but that is what it is looking like from what i am seeing. | 15:36 |
swill | notmyname: its not hugely important because i am not billing on that right now. | 15:37 |
swill | notmyname: i just wanted to understand. :) | 15:37 |
*** roge has quit IRC | 15:38 | |
*** TheCops has left #openstack | 15:38 | |
*** littleidea has quit IRC | 15:38 | |
*** vitiho_ has quit IRC | 15:39 | |
*** mdomsch has joined #openstack | 15:39 | |
notmyname | swill: a quick glance at the code makes it seem like it should just be a total of container-level requests for that log processing run | 15:40 |
*** roge has joined #openstack | 15:40 | |
*** alexn6 has left #openstack | 15:42 | |
swill | notmyname: i will need to do a bunch of testing with controlled data to ensure everything works as expected, so i will do some testing of this when i do that. | 15:42 |
*** arBmind has joined #openstack | 15:42 | |
uksysadmin | has anyone had experience of using keystone, swift and setting acls using the swift tool? | 15:44 |
swill | uksysadmin: yes, i have done that | 15:45 |
swill | uksysadmin: i am not using keystone anymore though, so i am not sure if I will be much help because i cant really test anything right now. | 15:45 |
*** mestery has quit IRC | 15:46 | |
uksysadmin | swill: no probs | 15:46 |
swill | uksysadmin: are you having specific problems? | 15:46 |
uksysadmin | swill: I've setup a user, 'member' who is just a 'Member' in the 'demo' tenant. | 15:46 |
uksysadmin | I created a container in my swift environment called 'test' by a user that was an admin | 15:47 |
uksysadmin | swift -V 2.0 -A http://172.15.0.1:5000/v2.0/ -U demo:demo -K openstack post test -w demo:member | 15:47 |
*** garyk has quit IRC | 15:47 | |
uksysadmin | (demo user is admin in demo tenant) | 15:47 |
uksysadmin | I assumed that -w option allowed member in the demo tenant write access | 15:47 |
*** davepigott has quit IRC | 15:48 | |
swill | uksysadmin: one sec, i am checking what i had written. i did it in chef, so i should have what i had working at one point (i know keystone has changed since i had that setup working). | 15:49 |
*** dneary has quit IRC | 15:49 | |
* swill checking... | 15:49 | |
uksysadmin | awesome. thanks swill. | 15:49 |
*** cloudvirt has joined #openstack | 15:50 | |
*** cloudvirt has left #openstack | 15:50 | |
*** Gordonz has quit IRC | 15:51 | |
*** Gordonz has joined #openstack | 15:51 | |
*** heckj has joined #openstack | 15:52 | |
swill | uksysadmin: i will have to check, but i am not sure that you can change the permissions on a container once it is set. you may have to create the container with the permissions set. i remember something like that. i am still checking. | 15:52 |
*** indiaswift has joined #openstack | 15:52 | |
uksysadmin | ok - never thought of that - can play | 15:53 |
uksysadmin | ah, could be me... | 15:54 |
uksysadmin | when trying to write to a container, I get the following: | 15:54 |
uksysadmin | Error trying to create container 'test2': 403 Forbidden: 403 Forbidden | 15:54 |
uksysadmin | (as the member user) | 15:54 |
*** wilmoore has joined #openstack | 15:55 | |
*** Blackavar has joined #openstack | 15:55 | |
kbringard | what sort of memory oversubscription ratios do people recommend? | 15:55 |
kbringard | like, allocated to vms : total compute host memory | 15:56 |
uksysadmin | actually, no - the Account is consistent: (Account: AUTH_5a015a68e21f40b6bae8975e815ac703 in my case) | 15:56 |
uksysadmin | which is AUTH_$(tenant_id)s in my keystone setup | 15:57 |
blamar | kbringard: I like a 1:1 :) Good performance. | 15:57 |
kbringard | blamar: hehe, fair enough | 15:57 |
*** krow has quit IRC | 15:59 | |
*** chevin has joined #openstack | 15:59 | |
swill | uksysadmin: so i was only trying to set ACL on creation of a container. i am not sure if that was because i could not get it to work otherwise or if that is all i was testing. | 15:59 |
swill | uksysadmin: in the auth middlewhere i wrote, i allow for acl to be an account. here is how i set the acl. | 16:00 |
swill | swift -v -A http://127.0.0.1:8080/v1.0 -U $account_1_user -K $account_1_key post -r $account_2_name -w $account_2_name swift_container | 16:00 |
swill | this would give read and write access to account 2 on the container swift_container | 16:01 |
uksysadmin | swill: yes that's the syntax I've just done | 16:02 |
*** armaan has joined #openstack | 16:02 | |
uksysadmin | swift -V 2.0 -A http://172.15.0.1:5000/v2.0/ -U demo:user -K openstack stat test2 Account: AUTH_5a015a68e21f40b6bae8975e815ac703 | 16:02 |
uksysadmin | Container: test2 | 16:02 |
uksysadmin | Objects: 0 | 16:02 |
uksysadmin | Bytes: 0 | 16:02 |
uksysadmin | Read ACL: demo:member | 16:02 |
uksysadmin | Write ACL: demo:member | 16:02 |
uksysadmin | Sync To: | 16:02 |
uksysadmin | Sync Key: | 16:02 |
uksysadmin | Accept-Ranges: bytes | 16:02 |
uksysadmin | (user is also an admin in demo) | 16:02 |
armaan | Does latest devstack support fedora too ?? | 16:02 |
swill | uksysadmin: so is it working? it seems to have the right acl set (no?) | 16:04 |
uksysadmin | swill: no | 16:04 |
uksysadmin | my proxy-server.conf is set so that only users with 'admin' role are an admin | 16:04 |
uksysadmin | member is just a member of 'Member' | 16:04 |
*** indiaswift has quit IRC | 16:04 | |
uksysadmin | and I get 403 when trying to upload a file to that test2 container | 16:04 |
*** dneary has joined #openstack | 16:05 | |
uksysadmin | syslog shows a 403 for PUT /v1/AUTH_xxx/test2 | 16:06 |
uksysadmin | and correctly identifies the user being just a member of 'Member' | 16:06 |
*** vitiho has joined #openstack | 16:06 | |
uksysadmin | I'll post to the mailing list to see if its something that has crept in recently | 16:07 |
swill | uksysadmin: is 'Member' and 'demo:member' different? | 16:07 |
swill | uksysadmin: are you using tokenauth or swiftauth? | 16:07 |
uksysadmin | swill: member has been assigned the 'Member' role in the 'demo' tenant | 16:07 |
uksysadmin | tokenauth | 16:08 |
*** thinrhino has joined #openstack | 16:08 | |
*** mutex_ has quit IRC | 16:08 | |
*** aliguori has quit IRC | 16:09 | |
uksysadmin | armaan: its a shell script for ubuntu | 16:09 |
armaan | uksysadmin: i heard the latest also support for fedora | 16:09 |
uksysadmin | maybe they have a fork of it... www.devstack.org - only used Ubuntu 11.10 for it | 16:10 |
russellb | it hasn't been merged in yet | 16:10 |
*** freeflyi1g has joined #openstack | 16:10 | |
armaan | same here, only tried it on ubuntu | 16:10 |
russellb | you can try it from here though: https://review.openstack.org/#change,4364 | 16:11 |
*** rkukura has quit IRC | 16:11 | |
russellb | armaan: ^ | 16:12 |
*** jdurgin has joined #openstack | 16:13 | |
*** freeflying has quit IRC | 16:13 | |
*** dieterdemeyer has left #openstack | 16:13 | |
*** maplebed has joined #openstack | 16:13 | |
swill | uksysadmin: it just occured to me. you are using tempauth style acl groups. maybe try with just the role name. if i remember correctly token auth did not require the role to be the same syntax. | 16:13 |
uksysadmin | ok | 16:15 |
uksysadmin | swill: tried that originally and it failed, but tried again to be sure. and still 403. | 16:15 |
swill | ok | 16:16 |
FlorianOtel | phew. | 16:16 |
*** mutex has joined #openstack | 16:16 | |
FlorianOtel | that took a while to write down | 16:16 |
FlorianOtel | let's see if anyone can make sense of it :) | 16:16 |
* uksysadmin goes to check his email for an epic. Grabs popcorn too. | 16:16 | |
FlorianOtel | uksysadmin, grab the biggest bag you can find mate -- it is going to be epic. | 16:17 |
*** reidrac has quit IRC | 16:17 | |
uksysadmin | swill: you've been a help - I'm sure you've other things to do. I'll post a mail to the mailing list to see if any can see any failing in what I'm trying to do. | 16:18 |
swill | uksysadmin: just so you know. there used to be a bug in tokenauth (https://bugs.launchpad.net/keystone/+bug/890415) which was causing it to not handle acl correctly. this was why i originally changed from tokenauth to swiftauth (to solve that problem). | 16:19 |
swill | uksysadmin: since then I wrote my own auth middleware and removed keystone completely, so i am not up-to-date with the current status of keystone (and tokenauth). | 16:19 |
swill | uksysadmin: just found this... using swift auth, i was setting ACL with: | 16:21 |
swill | swift --auth-version 2.0 -A http://127.0.0.1:5000/v1.0 -U company:company_admin -K testing post -r User -w User company | 16:21 |
*** llang629 has joined #openstack | 16:21 | |
swill | the 'company' at the end is actually the container name | 16:21 |
uksysadmin | swill: so that is just the user and not tenant:user | 16:22 |
*** cloudvirt has joined #openstack | 16:23 | |
swill | uksysadmin: yes... this was my test script to make sure my acl was working with swift_auth: http://pastebin.com/yfsvJVEv | 16:23 |
*** marrusl has quit IRC | 16:23 | |
*** marrusl has joined #openstack | 16:23 | |
swill | --auth-version 2.0 was required to make that work. | 16:24 |
*** imsplitbit has joined #openstack | 16:24 | |
uksysadmin | I could even be tripping over myself with the different middleware and the like... and the flag: operator_roles... I mistook that as admin role | 16:24 |
swill | also setting up the keystone database correctly was key. let me see if i can find more files i can give you to show how my setup was configured. | 16:25 |
uksysadmin | your tests don't test ACL, just that your admin user can upload and delete things? I'd expect User to be auth'd to test the upload | 16:25 |
*** qazwsx has joined #openstack | 16:25 | |
*** llang629 has left #openstack | 16:25 | |
*** rkukura has joined #openstack | 16:25 | |
*** koolhead17 has joined #openstack | 16:27 | |
*** asavu has quit IRC | 16:27 | |
swill | uksysadmin: no, the admin creates a container that allows a user to upload and download. then it uses the user to test if they can upload and download. notice that the user is different. | 16:28 |
*** armaan has left #openstack | 16:28 | |
swill | here was my keystone conf file: http://pastebin.com/2iZLfMkB | 16:28 |
*** bepernoot has quit IRC | 16:28 | |
*** spiffxp has quit IRC | 16:28 | |
*** Turicas has joined #openstack | 16:28 | |
swill | uksysadmin: and this is how i configured keystone. http://pastebin.com/Hm2WsKUj | 16:29 |
swill | uksysadmin: sorry that some of the naming of roles and such are kind of ugly. | 16:30 |
*** warik has joined #openstack | 16:30 | |
*** zomGreg has joined #openstack | 16:31 | |
uksysadmin | swill: ah yes | 16:31 |
swill | uksysadmin: my proxy conf was this: http://pastebin.com/LcS4VtFL | 16:31 |
swill | uksysadmin: did that shed some light on things? | 16:32 |
*** n0ano has joined #openstack | 16:32 | |
*** jct has quit IRC | 16:33 | |
uksysadmin | I don't understand the relationship between: -U company:company_user and post -r User -w User | 16:33 |
zomGreg | what controls the X-Storage-Url that's returned from an auth attempt to the swift endpoint? | 16:33 |
zomGreg | i auth against 10.1.2.3 and I get a 127.0.0.1 as the X-Storage-Url | 16:33 |
zomGreg | what do I need to tweak to make it report 10.1.2.3 as the X-Storage-Url? | 16:34 |
*** aliguori has joined #openstack | 16:34 | |
*** jct has joined #openstack | 16:34 | |
*** foexle has quit IRC | 16:36 | |
uksysadmin | swill: ahh.. peny drops.. is 'User' a role, not a user... | 16:36 |
uksysadmin | (recalls you said this!) | 16:36 |
*** clauden_ has joined #openstack | 16:36 | |
swill | uksysadmin: yes. :) | 16:36 |
*** spiffxp has joined #openstack | 16:37 | |
*** rnorwood has joined #openstack | 16:37 | |
swill | uksysadmin: check this to see how my user, role, etc is setup in keystone: http://pastebin.com/Hm2WsKUj | 16:37 |
swill | uksysadmin: keep in mind that i have not used keystone in a few months and i know it has been changing, so this is the last working state i had, but i have not tested in months. | 16:38 |
uksysadmin | swill: well something is different... but end result the same: 403 | 16:38 |
*** armaan has joined #openstack | 16:38 | |
uksysadmin | but in logs I get: "user xxx:member allowed in ACL: Member authorizing | 16:39 |
swill | uksysadmin: make sure you have configured the Admin and KeystoneServiceAdmin roles (which are defined in your keystone conf). if you dont, you will get 403's all day. (if i remember correctly). | 16:39 |
uksysadmin | but preceding I get a 403 | 16:39 |
uksysadmin | yeah Admin is now 'admin' in keystone light (or that's the trend these days!) | 16:40 |
*** gekko_ has quit IRC | 16:40 | |
swill | and the KeystoneServiceAdmin role? | 16:40 |
swill | or the equivalent in your keystone.conf file | 16:40 |
*** juergh has quit IRC | 16:40 | |
uksysadmin | no don't have one of those... think that's replaced by the keystone user in the service tenant | 16:40 |
*** supriya has quit IRC | 16:41 | |
*** gekko_ has joined #openstack | 16:41 | |
swill | uksysadmin: here was my keystone conf file for reference: http://pastebin.com/2iZLfMkB | 16:41 |
swill | if those are not setup correctly i know you will have issues. | 16:42 |
uksysadmin | swill: it has done it | 16:42 |
uksysadmin | weird | 16:42 |
swill | whats that? | 16:42 |
uksysadmin | I get a 403 but then I see a 200 | 16:42 |
uksysadmin | when I upload now, it works | 16:42 |
swill | did you change anything? | 16:42 |
uksysadmin | but it says "can't create container... xxxx...." and then uploads the file anyway | 16:42 |
uksysadmin | only the role bit - the bit where I missed what you put about role and thought user | 16:43 |
swill | uksysadmin: you could be using a bad syntax for the swift tool. look at my test file to see what was working for me. | 16:43 |
uksysadmin | looks like a bug now | 16:43 |
swill | right | 16:43 |
dolphm | uksysadmin: that's correct KeystoneServiceAdmin role has been replaced | 16:43 |
*** cloudvirt has left #openstack | 16:43 | |
swill | dolphm: thanks for confirming that for us. :) | 16:43 |
dolphm | post essex-4, i think | 16:43 |
dolphm | np | 16:44 |
swill | it has been a while since i have worked with keysone | 16:44 |
swill | but i am glad we got you going. :) | 16:44 |
*** medieval1 has quit IRC | 16:44 | |
uksysadmin | swift --auth-version 2.0 -A http://172.15.0.1:5000/v2.0 -U demo:member -K openstack upload test4 /tmp/test/test2 | 16:44 |
uksysadmin | Error trying to create container 'test4': 403 Forbidden: 403 Forbidden | 16:44 |
uksysadmin | Access was denied to this resource. | 16:44 |
uksysadmin | 16:44 | |
uksysadmin | tmp/test/test2 | 16:44 |
uksysadmin | see the 403 then the 200 | 16:44 |
*** medieval1 has joined #openstack | 16:45 | |
uksysadmin | def in a better place | 16:45 |
uksysadmin | I'll check for bugs now | 16:45 |
uksysadmin | does seem like a bug - trying to create a container before uploading | 16:45 |
robix | can anyone confirm the chance scheduler can crash compute hosts? I hear it doesn't check for resources first so it can over allocate crashing the host.... | 16:46 |
swill | uksysadmin: ya, it is a better place to be troubleshooting from. good luck. :) | 16:47 |
uksysadmin | swill: yes, definitely. thank you! | 16:48 |
swill | uksysadmin: np. :) | 16:48 |
uksysadmin | I'm out of here now - great timing! | 16:48 |
*** uksysadmin has quit IRC | 16:48 | |
*** mindpixel has quit IRC | 16:49 | |
*** heyho has quit IRC | 16:51 | |
*** davepigott has joined #openstack | 16:52 | |
*** WormMan has quit IRC | 16:52 | |
*** FlorianOtel has quit IRC | 16:54 | |
*** dwcramer has quit IRC | 16:54 | |
*** indiaswift has joined #openstack | 16:55 | |
*** natea has quit IRC | 16:56 | |
*** vitiho has quit IRC | 16:57 | |
*** jog0 has joined #openstack | 16:57 | |
*** natea has joined #openstack | 16:59 | |
*** swill has quit IRC | 17:01 | |
*** indiaswift has quit IRC | 17:01 | |
*** swill has joined #openstack | 17:01 | |
*** thinrhino has quit IRC | 17:03 | |
*** MarkAtwood has quit IRC | 17:03 | |
*** dieterdemeyer has joined #openstack | 17:04 | |
*** arBmind has quit IRC | 17:05 | |
*** gyee has joined #openstack | 17:07 | |
*** linztm has quit IRC | 17:09 | |
*** swill has quit IRC | 17:09 | |
*** armaan has left #openstack | 17:10 | |
*** maploin has quit IRC | 17:12 | |
*** sandywalsh has quit IRC | 17:12 | |
*** marrusl has quit IRC | 17:16 | |
*** marrusl has joined #openstack | 17:16 | |
*** wormley has joined #openstack | 17:18 | |
*** wormley is now known as WormMan | 17:19 | |
*** mestery has joined #openstack | 17:19 | |
*** termie_ is now known as termie | 17:20 | |
*** termie has quit IRC | 17:20 | |
*** termie has joined #openstack | 17:20 | |
*** jimbaker has quit IRC | 17:20 | |
*** jimbaker has joined #openstack | 17:20 | |
*** stmod has quit IRC | 17:23 | |
*** shevek_ has quit IRC | 17:24 | |
*** michael_tn has quit IRC | 17:24 | |
*** Ghe_Rivero has joined #openstack | 17:25 | |
*** sandywalsh has joined #openstack | 17:28 | |
*** maplebed has quit IRC | 17:29 | |
*** cloudvirt has joined #openstack | 17:29 | |
*** reed has joined #openstack | 17:30 | |
*** maplebed has joined #openstack | 17:31 | |
*** refactor has joined #openstack | 17:31 | |
*** po has quit IRC | 17:33 | |
*** dneary has quit IRC | 17:36 | |
*** oneiroi has quit IRC | 17:36 | |
*** natea_ has joined #openstack | 17:37 | |
*** natea has quit IRC | 17:39 | |
*** natea_ is now known as natea | 17:39 | |
*** alrs has joined #openstack | 17:40 | |
*** maplebed has quit IRC | 17:40 | |
Glacee | Is there a reason why swift 1.4.7 is only packaged for precise? | 17:42 |
notmyname | mtaylor: ttx: ^? | 17:42 |
*** derekh has quit IRC | 17:43 | |
*** thinrhino has joined #openstack | 17:43 | |
*** maplebed has joined #openstack | 17:44 | |
*** dneary has joined #openstack | 17:44 | |
*** darraghb has quit IRC | 17:45 | |
*** relateable has quit IRC | 17:45 | |
Glacee | well.. 1.4.8 would be more relevant now.. I just saw that ti has been released :0 | 17:45 |
*** cloudvirt has quit IRC | 17:45 | |
*** alrs has quit IRC | 17:47 | |
*** Guest35096 has joined #openstack | 17:47 | |
*** bhall has joined #openstack | 17:47 | |
*** bhall has quit IRC | 17:47 | |
*** bhall has joined #openstack | 17:47 | |
*** alrs has joined #openstack | 17:48 | |
*** refactor has quit IRC | 17:48 | |
*** jfluhmann has joined #openstack | 17:49 | |
*** mjmac has joined #openstack | 17:49 | |
*** jfluhmann has quit IRC | 17:49 | |
*** jfluhmann has joined #openstack | 17:49 | |
reed | Glacee, isn't that a question for Ubuntu? | 17:49 |
annegentle | Glacee: bring it up at the team meeting, someone said something about choosing 1.4.7 at the last team meeting | 17:50 |
*** Free_maN has quit IRC | 17:51 | |
*** shaon has quit IRC | 17:52 | |
*** shaon1 has joined #openstack | 17:52 | |
*** krow has joined #openstack | 17:53 | |
*** shaon1 is now known as shaon | 17:53 | |
*** thinrhino has quit IRC | 17:53 | |
*** issackelly has joined #openstack | 17:55 | |
mtaylor | notmyname: def more of a question for zul | 17:56 |
uvirtbot | New bug: #960437 in nova "CLI volume-snapshot creation error" [Undecided,New] https://launchpad.net/bugs/960437 | 17:56 |
notmyname | mtaylor: gotcha. thanks | 17:56 |
notmyname | mtaylor: do you need anything from me at the CI meeting today? | 17:57 |
*** davepigott has quit IRC | 17:57 | |
*** longoria has joined #openstack | 17:59 | |
mtaylor | notmyname: nope | 17:59 |
uvirtbot | New bug: #960441 in horizon "kernel and ramdisk id should not be required" [Undecided,New] https://launchpad.net/bugs/960441 | 18:01 |
uvirtbot | New bug: #960443 in horizon "image names should not be limited to 25 characters" [Undecided,New] https://launchpad.net/bugs/960443 | 18:01 |
uvirtbot | New bug: #960445 in horizon "firefox instance and volumes page weirdness" [Undecided,New] https://launchpad.net/bugs/960445 | 18:01 |
*** rafaduran has joined #openstack | 18:01 | |
longoria | In the "Volumes" table, is the "ec2_id" being used? I don't see a reference to it in the Volume class, in models.py... | 18:02 |
*** anotherjesse_zz is now known as anotherjesse | 18:05 | |
*** hub_cap has quit IRC | 18:05 | |
*** natea has quit IRC | 18:05 | |
*** rnorwood1 has joined #openstack | 18:07 | |
*** natea has joined #openstack | 18:07 | |
*** rnorwood has quit IRC | 18:10 | |
*** mjmac has left #openstack | 18:13 | |
uvirtbot | New bug: #960448 in horizon "updating image redirects from syspanel to project" [Undecided,New] https://launchpad.net/bugs/960448 | 18:13 |
*** Ard1t has quit IRC | 18:15 | |
*** Ryan_Lane has joined #openstack | 18:16 | |
*** johnpostlethwait has joined #openstack | 18:16 | |
*** dpippenger has quit IRC | 18:16 | |
*** hub_cap has joined #openstack | 18:17 | |
*** Ard1t has joined #openstack | 18:18 | |
*** shaon has quit IRC | 18:22 | |
*** Ghe_Rivero has quit IRC | 18:22 | |
*** Maroo has joined #openstack | 18:23 | |
*** zigo has joined #openstack | 18:24 | |
*** anotherjesse is now known as anotherjesse_zz | 18:26 | |
Maroo | Hi everybody...i'm just another guy who needs some help :) | 18:26 |
*** WormMan has quit IRC | 18:26 | |
*** wormley has joined #openstack | 18:27 | |
*** wormley is now known as WormMan | 18:27 | |
Maroo | Hi everybody...i'm just another guy who needs some help :) | 18:28 |
*** imsplitbit has quit IRC | 18:28 | |
kbringard | can someone tell me what exactly the cc_host is used for? | 18:29 |
Maroo | i'm developing a ftp-like client, with REST, for swift cloud storage, using java | 18:29 |
Maroo | and i need some examples :) | 18:29 |
kbringard | I mean, I know it's supposed to be the host of the nova api server, but what actually uses that flag? | 18:29 |
chmouel | Maroo: you can maybe start from https://github.com/chmouel/ftp-cloudfs | 18:30 |
*** rnorwood1 has quit IRC | 18:31 | |
longoria | Does anyone have knowledge of the Volumes table for Nova? | 18:31 |
*** sandywalsh has quit IRC | 18:31 | |
Maroo | @chmouel thank you | 18:32 |
kbringard | n/m, looks like it's not used anymore | 18:32 |
*** jog0 has left #openstack | 18:32 | |
*** dspano has joined #openstack | 18:33 | |
mugu | java :{ | 18:34 |
Maroo | chmouel: but i need something in java | 18:34 |
*** mattray has joined #openstack | 18:34 | |
*** mnewby has joined #openstack | 18:35 | |
chmouel | I think the java-cloudfiles api could be a start | 18:35 |
*** rnorwood has joined #openstack | 18:36 | |
*** dachary has quit IRC | 18:36 | |
alrs | f | 18:37 |
*** joesavak has joined #openstack | 18:37 | |
justinsb_ | Maroo: Check out https://github.com/justinsb/openstack-java-sdk | 18:38 |
justinsb_ | Luis & I have been working on a Java binding & we hope to release it "real soon now" | 18:38 |
justinsb_ | Includes swift support | 18:38 |
*** dpippenger has joined #openstack | 18:38 | |
Maroo | justinsb_: thanks :) | 18:39 |
*** dpippenger has quit IRC | 18:39 | |
*** dpippenger has joined #openstack | 18:39 | |
*** swill has joined #openstack | 18:40 | |
*** cloudvirt has joined #openstack | 18:43 | |
*** cloudvirt has left #openstack | 18:43 | |
*** sandywalsh has joined #openstack | 18:45 | |
*** natea has quit IRC | 18:46 | |
*** swill has left #openstack | 18:46 | |
*** crescendo has joined #openstack | 18:46 | |
*** alperkanat has quit IRC | 18:47 | |
*** blamar has quit IRC | 18:48 | |
*** nacx has quit IRC | 18:49 | |
*** anotherjesse_zz is now known as anotherjesse | 18:49 | |
*** natea has joined #openstack | 18:50 | |
*** jfluhmann has quit IRC | 18:50 | |
*** straylyon has joined #openstack | 18:51 | |
*** dneary has quit IRC | 18:51 | |
*** alrs has quit IRC | 18:51 | |
uvirtbot | New bug: #960487 in openstack-common "Request deserializer does not pass an empty body" [Undecided,New] https://launchpad.net/bugs/960487 | 18:53 |
*** FACEFOX has joined #openstack | 18:56 | |
*** MarkAtwood has joined #openstack | 18:56 | |
*** jwalcik has joined #openstack | 18:56 | |
*** krow has quit IRC | 18:57 | |
Madkiss | okay. So with the current Ubuntu 12.04 packages, can I get a working nova+keystone+glance+quantum+horizon+swift? | 18:57 |
jeblair | annegentle: ping | 18:57 |
jeblair | annegentle: i have a "how to use the documentation as a user" question... :) | 18:57 |
*** mnewby has quit IRC | 18:58 | |
*** shaon has joined #openstack | 18:58 | |
*** Maroo has quit IRC | 18:58 | |
jeblair | i'd like to know more about what attributes are required/optional, and what they mean. for example looking at this page: http://docs.openstack.org/api/openstack-identity-service/2.0/content/POST_authenticate_v2.0_tokens_Admin_API_Service_Developer_Operations-d1e1356.html | 18:58 |
koolhead17 | ttx, seems like busy day 4 you today!! :) | 18:58 |
*** littleidea has joined #openstack | 18:59 | |
jeblair | i'm wondering (a) is tenantid required? (b) what does it mean in that context? and, skipping ahead a bit, (c) what's the deal with tenantid vs tenantname? :) | 18:59 |
jeblair | annegentle: so is there somewhere else i should be looking for that info? | 18:59 |
*** mnewby has joined #openstack | 19:01 | |
*** mnewby has quit IRC | 19:01 | |
*** littleidea has quit IRC | 19:03 | |
*** mattray has quit IRC | 19:04 | |
annegentle | jeblair: hm. thinking | 19:06 |
*** mnewby has joined #openstack | 19:06 | |
*** alperkanat has joined #openstack | 19:06 | |
annegentle | jeblair: the identity API docs are in disarray, for one. | 19:06 |
*** alrs has joined #openstack | 19:06 | |
annegentle | jeblair: especially the admin API commands | 19:06 |
annegentle | jeblair: this is probably the more accurate page: http://keystone.openstack.org/api_curl_examples.html#id1 | 19:07 |
koolhead17 | jeblair, the best place i would suggest is https://github.com/openstack/keystone/tree/master/doc/source | 19:08 |
koolhead17 | hey annegentle | 19:08 |
annegentle | koolhead17: hey | 19:08 |
koolhead17 | annegentle, i got the mail :( | 19:08 |
annegentle | koolhead17: yeah, saw it :( | 19:08 |
koolhead17 | annegentle, thanks :D | 19:09 |
annegentle | heckj: what do you want to do about the Identity API dev guide that jeblair refers to above? | 19:09 |
koolhead17 | jeblair, are you trying keystone from source? | 19:09 |
jeblair | koolhead17: i'm trying to use libcloud with an openstack provider, and they both do things a little differently. i'd like to submit bug reports, but it would be great to back up my assertions with some documentation | 19:10 |
jeblair | rather than "other people seem to do it this other way" :) | 19:11 |
* koolhead17 googles to find what is libcloud | 19:11 | |
jeblair | and i actually don't have any idea whether keystone is in use, which is why i need to know what the API is supposed to be | 19:11 |
heckj | jeblair: the original WADLs lacked any additional detail to explain context of how to use. It presumes a LOT of a-priori knowledge | 19:12 |
heckj | annegentle: generally fix it, but I've been heads down with the RC1 cuts and haven't spent anything other than light time on docs efforts (including editing WADL's to generate additional detail) | 19:12 |
annegentle | heckj: yeah it is really difficult to hack on. | 19:14 |
*** egant has quit IRC | 19:14 | |
andrewbogott | Does essex nova require keystone, or is that change not happening until folsom? | 19:14 |
heckj | andrewbogott: I don't know about require, but it's definitely fully supported. | 19:15 |
*** albert23 has joined #openstack | 19:15 | |
annegentle | heckj: I can't really fix 'em since I lack the knowledge :) | 19:15 |
andrewbogott | I'm upgrading a diablo install to essex, wondering if I can coast along with the old auth setup for now. | 19:15 |
heckj | annegentle: I've got most of the knowledge now, just need the time to sit down and hack it up with details | 19:15 |
*** imsplitbit has joined #openstack | 19:17 | |
annegentle | heckj: jeblair should I remove that inaccurate doc? | 19:17 |
annegentle | heckj: jeblair temporarily anyway? Seems we do a disservice by leaving it. | 19:18 |
*** bepernoot has joined #openstack | 19:18 | |
*** alperkanat has quit IRC | 19:22 | |
*** MarkAtwood has quit IRC | 19:26 | |
*** msavy has quit IRC | 19:27 | |
*** llang629_ has joined #openstack | 19:30 | |
*** jj0hns0n has quit IRC | 19:32 | |
*** emorisse has quit IRC | 19:32 | |
*** jj0hns0n has joined #openstack | 19:32 | |
*** longoria has left #openstack | 19:34 | |
*** mattray has joined #openstack | 19:35 | |
*** emorisse has joined #openstack | 19:37 | |
*** jj0hns0n has quit IRC | 19:37 | |
*** bepernoot has quit IRC | 19:39 | |
*** clauden_ has quit IRC | 19:41 | |
*** kentbye has joined #openstack | 19:41 | |
*** jj0hns0n has joined #openstack | 19:43 | |
*** Madkiss has quit IRC | 19:44 | |
ttx | koolhead17: lots of fun and long days :) | 19:44 |
lxu | How do I use euca2ools with keystone? dont know how to generate the file credentials | 19:44 |
*** johnpostlethwait has quit IRC | 19:45 | |
koolhead17 | ttx, TBH for the first time i have seen so many mails coming one after another :P | 19:45 |
*** dendrobates is now known as dendro-afk | 19:46 | |
*** johnpostlethwait has joined #openstack | 19:46 | |
koolhead17 | annegentle, https://answers.launchpad.net/keystone/+question/191217 am i doing anything wrong? | 19:47 |
*** jakkudanieru has quit IRC | 19:49 | |
*** mdomsch has quit IRC | 19:49 | |
*** mdomsch has joined #openstack | 19:51 | |
*** nelson1234 has quit IRC | 19:53 | |
*** nelson1234 has joined #openstack | 19:53 | |
*** vitiho has joined #openstack | 19:57 | |
*** epim has joined #openstack | 19:58 | |
annegentle | koolhead17: hm, I don't know. heckj? ^^ | 20:00 |
koolhead17 | annegentle, won`t trouble heckj at this moment :) | 20:00 |
* heckj looks | 20:01 | |
*** mrmartin has joined #openstack | 20:02 | |
heckj | koolhead17: user update only updated name and password right now - doesn't update the tenant linkage. However, just adding a role to a user and a tenant (such as "Member") will link that user account to a tenant. | 20:03 |
*** misheska- has quit IRC | 20:03 | |
*** mikal has joined #openstack | 20:03 | |
*** mikal has quit IRC | 20:04 | |
*** mikal has joined #openstack | 20:04 | |
koolhead17 | heckj, at time of adding user i can pass parameter which tenant he should be associated to i suppose :) | 20:04 |
koolhead17 | with --tenant_id | 20:05 |
heckj | yeah - that's setting a default tenant_id. Not sure that you can change that with command line client tools at this point. | 20:06 |
koolhead17 | but funny part is i can add any random key and user gets added along with tenant_id == "the wrong/non-exisitingting tenant id | 20:06 |
koolhead17 | heckj, i found another way modifying the DB manually :D | 20:06 |
*** mrmartin has quit IRC | 20:07 | |
* heckj nods | 20:07 | |
heckj | koolhead17: do you have that logged as a bug? | 20:08 |
*** dieterdemeyer has left #openstack | 20:08 | |
koolhead17 | heckj, am scared at times filing bugs TBH so i added it in my question. Shall i add it as bug? :P | 20:08 |
heckj | please | 20:09 |
koolhead17 | doing right away sir | 20:09 |
heckj | if the bug isn't valid, we'll just close it as invalid. Would prefer to know there was an issue, even if it's easily resolved | 20:09 |
*** zigo has quit IRC | 20:09 | |
*** rkukura has quit IRC | 20:11 | |
* koolhead17 nods | 20:11 | |
*** mrmartin has joined #openstack | 20:12 | |
*** whenry has joined #openstack | 20:12 | |
*** warik has quit IRC | 20:14 | |
*** jog0_ has joined #openstack | 20:14 | |
*** jog0_ is now known as jog0 | 20:14 | |
*** jog0 has left #openstack | 20:14 | |
*** uksysadmin has joined #openstack | 20:14 | |
*** jfluhmann has joined #openstack | 20:15 | |
kbringard | quick ? about keystone (in diablo-stable, not light or essex) | 20:17 |
kbringard | when using the nova client, i set my nova api endpoint to be the keystone service | 20:17 |
kbringard | which auths and gives me a token and an endpoint | 20:17 |
kbringard | at that point does keystone itself proxy the connection back to the internal url from the endpoint_templates table? | 20:17 |
kbringard | or does it tell the client to do it, which establishes another connection from the outside? | 20:18 |
*** flaviamissi has joined #openstack | 20:20 | |
*** bepernoot has joined #openstack | 20:21 | |
*** flaviamissi has quit IRC | 20:22 | |
*** flaviamissi has joined #openstack | 20:23 | |
*** mdomsch has quit IRC | 20:23 | |
*** Susanne has joined #openstack | 20:23 | |
*** Susanne has quit IRC | 20:24 | |
*** jog0 has joined #openstack | 20:25 | |
uvirtbot | New bug: #960577 in keystone "keystone user-add command takes random --tenant-id value and maps it in user profile" [Undecided,New] https://launchpad.net/bugs/960577 | 20:26 |
*** anotherjesse is now known as anotherjesse_zz | 20:26 | |
*** smballe has joined #openstack | 20:26 | |
*** clauden_ has joined #openstack | 20:26 | |
*** miclorb_ has joined #openstack | 20:28 | |
*** jog0 has left #openstack | 20:28 | |
*** jfluhmann has quit IRC | 20:28 | |
*** mattray has quit IRC | 20:29 | |
*** krow has joined #openstack | 20:30 | |
*** smballe__ has joined #openstack | 20:31 | |
*** smballe has quit IRC | 20:32 | |
*** ChelseaH has joined #openstack | 20:33 | |
*** hingo has joined #openstack | 20:33 | |
*** bepernoot has quit IRC | 20:34 | |
*** ChelseaH has quit IRC | 20:34 | |
*** ChelseaH has joined #openstack | 20:34 | |
*** OzStacker1 has joined #openstack | 20:34 | |
*** smballe__ has joined #openstack | 20:35 | |
*** dwcramer has joined #openstack | 20:35 | |
*** swill has joined #openstack | 20:36 | |
*** OzStacker1 has left #openstack | 20:36 | |
swill | notmyname: i just wanted to let you know that i was wrong previously about the 'container_requests' thing. it is working as expected. | 20:37 |
notmyname | swill: ah cool. thanks for letting me know :-) | 20:37 |
*** krow has quit IRC | 20:39 | |
*** krow1 has joined #openstack | 20:39 | |
swill | notmyname: ya for sure. it was one of those brain fart situations. i was expecting enumerate(headers[2:0]) to give me the index in headers, instead of starting from 0. | 20:39 |
swill | sorry: enumerate(headers[2:]) | 20:39 |
*** egant has joined #openstack | 20:40 | |
*** natea has quit IRC | 20:42 | |
*** warik has joined #openstack | 20:44 | |
*** warik has left #openstack | 20:44 | |
*** natea has joined #openstack | 20:44 | |
*** cloudvirt has joined #openstack | 20:45 | |
*** cloudvirt has left #openstack | 20:45 | |
uvirtbot | New bug: #960588 in horizon "Custom column class triggers KeyError" [High,In progress] https://launchpad.net/bugs/960588 | 20:46 |
uvirtbot | New bug: #960590 in horizon "Column and Cell don't inherit from HTMLElement" [Medium,Confirmed] https://launchpad.net/bugs/960590 | 20:46 |
*** milner has quit IRC | 20:47 | |
*** bbcmicrocomputer has quit IRC | 20:48 | |
*** swill has quit IRC | 20:48 | |
*** milner has joined #openstack | 20:48 | |
*** smballe__ has quit IRC | 20:48 | |
*** johnpostlethwait has quit IRC | 20:49 | |
*** mattray has joined #openstack | 20:49 | |
*** SusanneB has joined #openstack | 20:49 | |
*** miclorb_ has quit IRC | 20:50 | |
*** johnpostlethwait has joined #openstack | 20:50 | |
*** Ard1t has quit IRC | 20:50 | |
*** staignan has quit IRC | 20:51 | |
*** manlymatt83 has joined #openstack | 20:52 | |
*** bepernoot has joined #openstack | 20:52 | |
*** Ard1t has joined #openstack | 20:52 | |
*** Ard1t has joined #openstack | 20:52 | |
manlymatt83 | Hi folks. For a new deployment that we need to get up this week, should we go diablo or essex (and if essex, what's the best way to install it?). While we do need to get something up soon, we *won't* need it to be stable/production for at least a few weeks. | 20:53 |
*** kayyagari has quit IRC | 20:53 | |
oNeToWn | devstack if you won't need it to be stable. ;D | 20:55 |
manlymatt83 | well, it'll need to be stable in a few weeks ;) | 20:57 |
manlymatt83 | so figured if there was some way we could setup four dedicated boxes with essex and then upgrade to release in the upcoming weeks? | 20:57 |
*** rkukura has joined #openstack | 20:58 | |
*** zul has quit IRC | 20:58 | |
*** davlaps has joined #openstack | 20:59 | |
oNeToWn | essex-rc1 just come out. | 20:59 |
*** llang629_ has left #openstack | 21:00 | |
manlymatt83 | oNeToWn: Where's the best way to get that? | 21:00 |
oNeToWn | https://launchpad.net/nova/essex/essex-rc1 | 21:00 |
*** ChelseaH has quit IRC | 21:01 | |
*** zul has joined #openstack | 21:01 | |
manlymatt83 | thanks | 21:01 |
oNeToWn | np. | 21:01 |
manlymatt83 | that's Nova release candidate 1 right? What about the rest of openstack? | 21:02 |
manlymatt83 | I'm a bit confused. There's Nova, then the control panel, swift, etc. right? | 21:02 |
manlymatt83 | is Essex just nova? | 21:02 |
dolphm | all are releasing their own RC's as fast as they can | 21:02 |
*** natea has quit IRC | 21:02 | |
manlymatt83 | ahhh! OK, gotcha. | 21:02 |
dolphm | manlymatt83: countdown to other RC's: http://wiki.openstack.org/releasestatus/rc1.html | 21:03 |
*** bepernoot has quit IRC | 21:03 | |
*** catintheroof has joined #openstack | 21:04 | |
manlymatt83 | dolphm: OK, thanks. Can't really use Nova RC1 for Essex and the older Products from Diablo, right? | 21:05 |
*** jwalcik has left #openstack | 21:05 | |
*** smb_ has joined #openstack | 21:05 | |
*** smb_ has quit IRC | 21:06 | |
*** marrusl has quit IRC | 21:06 | |
*** rnirmal has quit IRC | 21:06 | |
*** qazwsx|2 has joined #openstack | 21:07 | |
*** mdrnstm has joined #openstack | 21:08 | |
*** catintheroof has quit IRC | 21:09 | |
*** deshantm_ has joined #openstack | 21:09 | |
*** qazwsx has quit IRC | 21:10 | |
dolphm | manlymatt83: probably not | 21:10 |
dolphm | keystone essex should be backwards compatible with the rest of diablo, but i can't speak for other projects | 21:10 |
*** mattray has quit IRC | 21:11 | |
manlymatt83 | dolphm: OK. So best bet if we're spinning up a new environment is to either wait two weeks or install diablo, and then upgrade to essex? | 21:12 |
*** deshantm has quit IRC | 21:13 | |
dolphm | manlymatt83: are you installing from packaging or source? | 21:13 |
*** jj0hns0n has quit IRC | 21:13 | |
*** mattray has joined #openstack | 21:13 | |
*** mikal has quit IRC | 21:13 | |
manlymatt83 | dolphm: I'd like to install from packages, but looks like we'd have to use source if we went with essex. | 21:13 |
*** tryggvil__ has quit IRC | 21:15 | |
*** mikal has joined #openstack | 21:15 | |
dolphm | manlymatt83: at the moment, yes | 21:15 |
dolphm | manlymatt83: rc1's could all be out this week *crosses fingers* | 21:16 |
manlymatt83 | OK, thank you. So if it were you, you'd wait for Essex, versus installing Diablo and then upgrading? | 21:16 |
dolphm | manlymatt83: personally, yes | 21:18 |
manlymatt83 | OK, thank you. I assume the upgrade path from diablo -> essex won't be trivial. | 21:19 |
dolphm | manlymatt83: starting with RC's and upgrading to final from there should be trivial, and you won't have to relearn stuff :) | 21:19 |
manlymatt83 | okay, cool ;) So I'll wait for all of the RCs | 21:19 |
dolphm | manlymatt83: we've made that upgrade path as trivial as possible, but there's a learning curve i'd be more worried about :P | 21:19 |
manlymatt83 | gotcha ;) | 21:19 |
*** ldlework has quit IRC | 21:20 | |
cloudfly | anyone have a good source on comparitive benchmarks / stats between openstack opennebula and say cloudstack / eucalyptus? | 21:20 |
*** warik_ has joined #openstack | 21:20 | |
cloudfly | found a chinese article that was decent but the translation was pretty weak and i kinda wanted more technical analysis than feature set comparison | 21:21 |
manlymatt83 | dolphm: while you're here, mind if I ask you a quick question on Keystone? It can be powered by OpenLDAP, right? I heard in Essex that may not be the case. If we need an OpenLDAP store for puppet variables and such, would share Keystone's LDAP directory be a good idea, or best to keep those separate? | 21:21 |
*** troytoman is now known as troytoman-away | 21:22 | |
heckj | manlymatt83: yes, it's possible, but expects you to be comfortable with OpenLDAP and schema config | 21:22 |
manlymatt83 | Yeah, we're running OpenLDAP now. And I'm very comfortable with it. Been using it for many years. | 21:22 |
* dolphm post-emptively defers to heckj. | 21:23 | |
manlymatt83 | We have OpenLDAP for authentication, system authorization (pam_ldap), public keys, puppet external nodes, internal DNS backing for pdns, etc. | 21:23 |
heckj | manlymatt83: the docs are anemic, but the support for identity is there (thank you ayoung!). It's expecting a specific schema | 21:24 |
manlymatt83 | Wondering, when we jump from EC2 over to OpenStack, we'll still need puppet and pdns storage inside OpenLDAP. Wondering if Keystone can simply work with the same OpenLDAP instance(s) too. | 21:24 |
manlymatt83 | heckj: Great! I'll look into it. | 21:24 |
heckj | manlymatt83: read through the bits at keystone.openstack.org - no other docs will have those details yet | 21:25 |
cloudfly | it'd be nice if keystone had more of an RFC style protocol setup | 21:26 |
cloudfly | but maybe not as... special... as LDAPs | 21:26 |
heckj | cloudfly: what do you mean by "RFC style protocol setup"? | 21:27 |
*** hub_cap has quit IRC | 21:27 | |
cloudfly | well setup was probably the wrong word | 21:27 |
cloudfly | but a literal request for comments on keystone protocol elements | 21:27 |
*** jdg has joined #openstack | 21:28 | |
manlymatt83 | Thanks heckj! I'm looking at this now. | 21:28 |
cloudfly | it seems to me that the biggest issue with keystones success is ensuring it can grow to handle all the things it may be called on to do | 21:28 |
cloudfly | but that those things are really aren't clearly known widely yet | 21:28 |
manlymatt83 | We intend to run CentOS as our Guest OS, but rumor has it Ubuntu + KVM is the easiest to run for the VMM. Is that also true? | 21:28 |
cloudfly | openstack of course has only seen some limited use at this point | 21:28 |
cloudfly | manlymatt83 most of openstacks core devs work in ubuntu. but there are a number of very active deployments on centos | 21:29 |
cloudfly | and there is considerable documentation as a result | 21:29 |
cloudfly | from what i have seen | 21:29 |
manlymatt83 | cloudfly: OK, cool. | 21:29 |
kbringard | manlymatt83: when you say "As our guest OS", do you mean as the host, or in a VM that runs on openstack? | 21:30 |
heckj | cloudfly - that was definitely a problem with the V2 API, and we plan to expand on that conversation at the design summit. We're actively collecting use stories to keep keystone grounded in reality. IT's easy to fly away with "woulda coulda shoulda" | 21:31 |
*** mrmartin has quit IRC | 21:32 | |
cloudfly | yeah but that's the whole point of RFCs | 21:32 |
manlymatt83 | kbringard: As in, the OS we'd run inside VMs | 21:33 |
cloudfly | also just because you can't implement something now, doesn't mean you can't keep an eye torward making sure that you can later on when you need to without major issues | 21:33 |
manlymatt83 | kbringard: still trying to figure out to run on the actual physical hosts (the ones we install openstack on). | 21:33 |
kbringard | manlymatt83: that works fine | 21:33 |
kbringard | we run centos 5.7 and 6.2 images all day long | 21:33 |
manlymatt83 | kbringard: I assume that works okay, yeah. We've had good luck running KVM out of box with CentOS (without OpenStack) | 21:33 |
manlymatt83 | just wondering what the best OS is to put on the actual physical hardware. IE: do we do yum install openstack or apt-get install openstack ;) | 21:34 |
kbringard | we run Ubuntu 11.04 | 21:34 |
cloudfly | manlymatt83 my guess is your biggest issue is ensuring the kvm version and libvirt version have everything openstack needs | 21:34 |
*** joesavak has quit IRC | 21:34 | |
cloudfly | kvm has seen a siginificant number of improvements in its own right at a staggering pace | 21:34 |
kbringard | with the rackspace cloud builders repo | 21:34 |
cloudfly | you will want bleeding edge packages | 21:34 |
kbringard | http://ops.rcb.me/packages/pool/diablo-final/ | 21:35 |
kbringard | that's what I use | 21:35 |
kbringard | if it helps | 21:35 |
cloudfly | kbringard dunno if you've rebuilt packages from there before but i find just ripping them apart with ar works great | 21:35 |
cloudfly | to do edits | 21:35 |
cloudfly | easier than rebuilding from scratch | 21:36 |
*** lts has quit IRC | 21:36 | |
kbringard | we have a repo full of diffs that get applied automatically after the packages get installed | 21:36 |
kbringard | which is kind of jankey, but I didn't want to deal with rebuilding my own packages :-D | 21:36 |
manlymatt83 | so are you guys saying if we run Ubuntu under the hood vs. CentOS our lives should be easier package wise? | 21:37 |
kbringard | manlymatt83: I think so, yes | 21:37 |
kbringard | I think grud dynamics maintains centos packages | 21:37 |
kbringard | err | 21:37 |
kbringard | grid* | 21:37 |
kbringard | but Ubuntu has "official" packages, and all the devs use it | 21:37 |
*** dwcramer has quit IRC | 21:38 | |
manlymatt83 | alright. Thank you. | 21:39 |
kbringard | np | 21:39 |
uvirtbot | New bug: #960627 in glance "'bin/glance add' docstring *_format is out of date" [Low,In progress] https://launchpad.net/bugs/960627 | 21:41 |
*** anotherjesse_zz is now known as anotherjesse | 21:44 | |
*** joearnold has joined #openstack | 21:44 | |
uvirtbot | New bug: #960637 in openstack-ci "keystone watch in gerrit isn't sticking" [Undecided,New] https://launchpad.net/bugs/960637 | 21:45 |
*** miclorb_ has joined #openstack | 21:46 | |
*** dolphm has quit IRC | 21:48 | |
*** lborda has quit IRC | 21:48 | |
*** oNeToWn has quit IRC | 21:48 | |
*** aliguori has quit IRC | 21:48 | |
*** mdomsch has joined #openstack | 21:50 | |
*** Ruetobas has quit IRC | 21:51 | |
*** nid0 has joined #openstack | 21:52 | |
*** bruges_ has quit IRC | 21:52 | |
*** shevek_ has joined #openstack | 21:53 | |
*** jj0hns0n has joined #openstack | 21:54 | |
*** Turicas has quit IRC | 21:54 | |
uvirtbot | New bug: #960647 in tempest "Incorrect var name referenced in auth failure exception" [Medium,In progress] https://launchpad.net/bugs/960647 | 21:56 |
*** ayoung has quit IRC | 21:58 | |
*** heckj has quit IRC | 21:59 | |
*** phorgh has quit IRC | 22:00 | |
*** heckj has joined #openstack | 22:00 | |
*** ppradhan has left #openstack | 22:01 | |
*** kbringard has quit IRC | 22:04 | |
*** flaviamissi has quit IRC | 22:05 | |
*** mdomsch has quit IRC | 22:05 | |
*** scoph has quit IRC | 22:07 | |
*** joearnol_ has joined #openstack | 22:07 | |
*** joearnold has quit IRC | 22:09 | |
*** andrewsmedina has quit IRC | 22:10 | |
*** hub_cap has joined #openstack | 22:10 | |
*** uksysadmin has quit IRC | 22:10 | |
uvirtbot | New bug: #960655 in nova "vm_utils vbd_unplug_with_retry failing to retry" [Undecided,In progress] https://launchpad.net/bugs/960655 | 22:11 |
*** MarkAtwood has joined #openstack | 22:11 | |
*** emorisse has quit IRC | 22:15 | |
*** phorgh has joined #openstack | 22:15 | |
uvirtbot | New bug: #960656 in horizon "local_settings.py makes horizon difficult to package" [Undecided,New] https://launchpad.net/bugs/960656 | 22:16 |
*** scoph has joined #openstack | 22:18 | |
*** FACEFOX has quit IRC | 22:19 | |
*** lxu_ has joined #openstack | 22:19 | |
*** aliguori has joined #openstack | 22:19 | |
*** whenry has quit IRC | 22:20 | |
*** warik_ has quit IRC | 22:20 | |
*** asavu has joined #openstack | 22:21 | |
*** lxu_ has quit IRC | 22:21 | |
*** imsplitbit has quit IRC | 22:21 | |
*** dspano has quit IRC | 22:21 | |
*** warik has joined #openstack | 22:22 | |
*** littleidea has joined #openstack | 22:23 | |
*** egant has quit IRC | 22:23 | |
*** egant has joined #openstack | 22:24 | |
*** FACEFOX has joined #openstack | 22:25 | |
*** natea has joined #openstack | 22:25 | |
*** troytoman-away is now known as troytoman | 22:27 | |
*** FACEFOX has quit IRC | 22:27 | |
*** datajerk has quit IRC | 22:28 | |
*** cloudvirt has joined #openstack | 22:28 | |
*** jj0hns0n has quit IRC | 22:28 | |
*** robbiew has quit IRC | 22:30 | |
*** msavy has joined #openstack | 22:30 | |
*** hub_cap has quit IRC | 22:32 | |
*** MarkAtwood has quit IRC | 22:33 | |
*** warik_ has joined #openstack | 22:34 | |
*** cloudvirt has quit IRC | 22:34 | |
*** warik has quit IRC | 22:34 | |
*** warik_ is now known as warik | 22:34 | |
*** datajerk has joined #openstack | 22:35 | |
*** tmichael has quit IRC | 22:35 | |
*** tmichael has joined #openstack | 22:37 | |
*** swoo has joined #openstack | 22:38 | |
*** Guest35096 has quit IRC | 22:39 | |
*** swoo has quit IRC | 22:40 | |
*** FACEFOX has joined #openstack | 22:40 | |
*** bruges has joined #openstack | 22:40 | |
*** littleidea has quit IRC | 22:41 | |
*** epim has quit IRC | 22:42 | |
*** misheska has joined #openstack | 22:42 | |
*** eirikbb has quit IRC | 22:42 | |
*** eirikbb has joined #openstack | 22:43 | |
*** jj0hns0n has joined #openstack | 22:44 | |
*** qazwsx|2 has quit IRC | 22:44 | |
*** jj0hns0n has quit IRC | 22:46 | |
*** wilmoore has quit IRC | 22:49 | |
*** njoy has joined #openstack | 22:49 | |
*** njoy has quit IRC | 22:50 | |
*** msavy has quit IRC | 22:50 | |
*** dwcramer has joined #openstack | 22:51 | |
*** hingo has quit IRC | 22:52 | |
*** scoph has quit IRC | 22:53 | |
*** troytoman is now known as troytoman-away | 22:55 | |
*** jj0hns0n has joined #openstack | 22:55 | |
*** wilmoore has joined #openstack | 22:55 | |
uvirtbot | New bug: #960684 in horizon "Python novaclient writing to homedir" [Undecided,New] https://launchpad.net/bugs/960684 | 22:56 |
*** hub_cap has joined #openstack | 22:57 | |
*** dachary has joined #openstack | 22:57 | |
*** agonella has joined #openstack | 22:58 | |
*** dolphm has joined #openstack | 23:02 | |
*** dwcramer has quit IRC | 23:02 | |
*** jj0hns0n has quit IRC | 23:04 | |
*** anotherjesse is now known as anotherjesse_zz | 23:05 | |
*** stewart has quit IRC | 23:06 | |
*** wilmoore has quit IRC | 23:07 | |
*** guynaor has joined #openstack | 23:07 | |
*** guynaor has left #openstack | 23:08 | |
*** tkleinscea has quit IRC | 23:10 | |
*** AlanClark has quit IRC | 23:11 | |
*** jj0hns0n has joined #openstack | 23:13 | |
*** jog0_ has joined #openstack | 23:13 | |
*** zzed has quit IRC | 23:17 | |
*** jog0_ is now known as jog0 | 23:17 | |
*** egant has quit IRC | 23:18 | |
*** fukushima has joined #openstack | 23:19 | |
*** hub_cap has quit IRC | 23:20 | |
uvirtbot | New bug: #960704 in nova "Allow insecure setting to be specified by environment" [Low,In progress] https://launchpad.net/bugs/960704 | 23:21 |
*** jog0 has left #openstack | 23:21 | |
*** alrs has quit IRC | 23:21 | |
*** mattray has quit IRC | 23:23 | |
*** misheska has quit IRC | 23:24 | |
*** ryanpetrello has quit IRC | 23:25 | |
*** jj0hns0n has quit IRC | 23:25 | |
*** jog0 has joined #openstack | 23:26 | |
*** jog0 has left #openstack | 23:26 | |
dj_ryan | ok now that it's day time | 23:26 |
dj_ryan | anyone have any suggestions on learning how to install openstack essex the hard way (tm) on ubuntu 12.04? | 23:27 |
justinsb_ | dj_ryan: The hard way = from source? | 23:30 |
dj_ryan | no from packages i think | 23:31 |
dj_ryan | i mean there are nightlies | 23:31 |
dj_ryan | but without scripts | 23:31 |
*** asavu has quit IRC | 23:31 | |
justinsb_ | dj_ryan: That is the hard way :-) | 23:31 |
dj_ryan | devstack no worky, and crowbar is just fucked :-) | 23:31 |
dj_ryan | gotcha | 23:31 |
justinsb_ | dj_ryan: I'm sure the packagers would disagree though! | 23:31 |
dj_ryan | heh | 23:31 |
dj_ryan | i just want some vmmmmmms | 23:31 |
justinsb_ | dj_ryan: I've been experimenting with installing from source | 23:31 |
justinsb_ | dj_ryan: https://github.com/justinsb/openstack-simple-config | 23:32 |
justinsb_ | dj_ryan: Work in progress, but it installs nova, swift, glance, horizon with minimal scripting | 23:32 |
justinsb_ | dj_ryan: I should probably do a readme :-) | 23:32 |
*** warik has quit IRC | 23:33 | |
*** justinfine has joined #openstack | 23:33 | |
dj_ryan | the issue is | 23:33 |
dj_ryan | a lot of these are like 'press GO and you get an openstack' | 23:33 |
dj_ryan | i kinda want to know HOW it works practically | 23:33 |
dj_ryan | the docs are only so useful to fully groking how the system works in operation | 23:33 |
dj_ryan | i find seeing it happening helps | 23:33 |
justinsb_ | Well, for that, you're going to have to read the openstack source I guess | 23:34 |
*** Glacee has quit IRC | 23:34 | |
*** alrs has joined #openstack | 23:34 | |
dj_ryan | sure but there is a lot not in the source | 23:34 |
justinsb_ | Check out the scripts (in roles/); they are very minimal and not too much magic | 23:34 |
dj_ryan | like the use of dnsmasq, bridge interfaces, etc | 23:34 |
justinsb_ | dj_ryan: Oh that fun stuff... | 23:35 |
dj_ryan | yes, THAT fun stuff :-) | 23:35 |
justinsb_ | dj_ryan: Networking is very tricky, and I definitely don't understand it all. But if you use FlatManager to side-step most of it | 23:35 |
dj_ryan | i thought that dnsmasq was masqurading dhcp too, but apparently not. | 23:35 |
uvirtbot | New bug: #960719 in keystone "creating the same role multiple time should not create multiple role" [Undecided,New] https://launchpad.net/bugs/960719 | 23:35 |
dj_ryan | so for me i just want virtual machines that are equal peers on the same network as my host, which is also my workstation(s) | 23:35 |
justinsb_ | dj_ryan: Apart from the bridge device. Bridge=software network switch, at least in my mental model | 23:36 |
dj_ryan | since we are using Virtualization to turn a bunch of workstations into hadoopy nodes | 23:36 |
justinsb_ | dj_ryan: Yes, that's what I want to. FlatManager gives you that | 23:36 |
justinsb_ | dj_ryan: I think FlatDHCPManager can do so also, but it's much more complicated | 23:36 |
justinsb_ | s/want to/want too/g | 23:36 |
dj_ryan | yeah i dont get that | 23:37 |
dj_ryan | apparently using DHCP = harder ? | 23:37 |
dj_ryan | reading the openstack docs it seems that flat networking lets you NAT thru a single node? | 23:37 |
dj_ryan | dunno about that shit | 23:37 |
*** deshantm_ is now known as deshantm | 23:38 | |
justinsb_ | dj_ryan: I have it set up like this. My network is 192.168.0.0/16, my gateway is 192.168.1.1, I give 192.168.100.0/24 to VMs | 23:38 |
dj_ryan | ahh | 23:38 |
dj_ryan | k | 23:38 |
justinsb_ | If you had the foresight to use 10.x.x.x, you can probably give OpenStack a more sensible allocation | 23:38 |
dj_ryan | this is my home network atm, still doing office hunting :-) | 23:38 |
justinsb_ | dj_ryan: Me too. My gatway is a DD-WRT. | 23:38 |
dj_ryan | my gateway is a fucking shitty as hell modem from sonic.net | 23:39 |
dj_ryan | fuckers | 23:39 |
justinsb_ | dj_ryan: Well, I'll understand if you drop off IRC then. But OpenStack works just fine on a small scale. | 23:39 |
justinsb_ | dj_ryan: Even if the docs try to make you feel inadequate ;-) | 23:40 |
*** aliguori has quit IRC | 23:40 | |
dj_ryan | i will persevere | 23:40 |
dj_ryan | our business kind of somewhat depends on this | 23:40 |
*** scoph has joined #openstack | 23:41 | |
*** shaon has quit IRC | 23:41 | |
justinsb_ | dj_ryan: devstack should work also. The magic arguments are: | 23:41 |
justinsb_ | NETWORK_CREATE_ARGS="--fixed_cidr=192.168.100.0/24 --gateway=192.168.1.1" | 23:41 |
justinsb_ | NET_MAN=FlatManager | 23:42 |
justinsb_ | EXTRA_OPTS=(--flat_injected=True) | 23:42 |
justinsb_ | FLAT_INTERFACE=eth0 | 23:42 |
dj_ryan | i had some issues with the devstack killing my dnsmasq that provides DNS caching | 23:42 |
*** clauden_ has quit IRC | 23:42 | |
dj_ryan | then i ended upfailing the script | 23:42 |
dj_ryan | rerunning the script would fuck my sudo config | 23:42 |
dj_ryan | then i was fucked, i'd have to boot into recovery to fix! | 23:42 |
justinsb_ | devstack probably isn't great for a multi-node setup | 23:42 |
dj_ryan | im using ubuntu 12.04 did i mention :-P | 23:42 |
*** rnorwood has quit IRC | 23:42 | |
dj_ryan | i think im going to dissassemble the stack.sh and do it "by hand" | 23:43 |
justinsb_ | That's what I'm working on with that github project | 23:43 |
dj_ryan | but with the packages | 23:43 |
dj_ryan | this aint my first rodeo :-P | 23:43 |
justinsb_ | OK! Good luck! | 23:43 |
dj_ryan | thanks! | 23:43 |
*** rkukura has quit IRC | 23:45 | |
*** justinfine has quit IRC | 23:45 | |
*** justfine has joined #openstack | 23:45 | |
*** root____1 has quit IRC | 23:46 | |
*** justfine has quit IRC | 23:49 | |
*** justfine has joined #openstack | 23:49 | |
*** shaon has joined #openstack | 23:50 | |
*** roge has quit IRC | 23:51 | |
*** heckj has quit IRC | 23:56 | |
*** natea is now known as natea|dinner | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!