Re: help needed
by Garrett Holmstrom
On Mar 28, 2012 9:06 PM, "Heherson Pagcaliwagan" <herson(a)azneita.org> wrote:
>
> On Thu, Mar 29, 2012 at 12:22 AM, Dennis Gilmore <dennis(a)ausil.us> wrote:
> > i have uploaded a x86_64 image to us-east-1 in ec2 the ami is
> > ami-3fb16f56 for whatever reason that i can not yet figure out the
> > image is booting fine but ssh will not allow me to connect. ive stopped
> > the image and attached it to a f16 instance and examined the disk and
> > it all looks fine. with the ssh logs just saying that the client
> > disconnected.
> >
> > Id appreciate if some people could have a look and see if its working
> > for them or help diagnose what exactly is going on.
>
> Not sure if this is it, but I did not see a /root/.ssh/authorized_keys
file.
This is expected. Look for it under /home/ec2-user instead.
Of course, if it isn't there either then there may be a problem. ;-)
11 years, 8 months
Cloud SIG Meeting is Today! (2012-03-30)
by Robyn Bergeron
WOOHOO, Cloud SIG Friday is here again.
Join us for our weekly hour of fun and productivity and mind-sharing on
IRC today :)
When: 1900 UTC (3pm US Eastern, 12pm US Pacific)
Where: #fedora-meeting on irc.freenode.net
See you there!
-Robyn
11 years, 8 months
help needed
by Dennis Gilmore
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hey all,
i have uploaded a x86_64 image to us-east-1 in ec2 the ami is
ami-3fb16f56 for whatever reason that i can not yet figure out the
image is booting fine but ssh will not allow me to connect. ive stopped
the image and attached it to a f16 instance and examined the disk and
it all looks fine. with the ssh logs just saying that the client
disconnected.
Id appreciate if some people could have a look and see if its working
for them or help diagnose what exactly is going on.
Thanks
Dennis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
iEYEARECAAYFAk9zOt4ACgkQkSxm47BaWfcIHgCfduA/pxetpSS9fwI9v4CIw18m
WpIAnRxsQmuINqgZ8Ex3lJJ9T5dkW0ka
=+ZUv
-----END PGP SIGNATURE-----
11 years, 8 months
Cloud SIG Meeting Minutes :: 2012-03-23
by Robyn Bergeron
Yo! Minutes below. A few highlights:
* Having a few issues with EC2 and being able to log in (as we move
towards beta, want this to work); server side says client disconnected,
client side says key was rejected; anyone with ideas, pipe up plz.
* ayoung is curious about interest in diskless booting with ramdisk rootFS
* Mirrors with S3 are now up and running
Thanks to all for coming, see you next time! :)
-robyn
Minutes:
http://meetbot.fedoraproject.org/fedora-meeting/2012-03-23/cloud_sig.2012...
Log:
http://meetbot.fedoraproject.org/fedora-meeting/2012-03-23/cloud_sig.2012...
==========================
#fedora-meeting: Cloud SIG
==========================
Meeting started by rbergeron at 19:00:12 UTC. The full logs are
available at
http://meetbot.fedoraproject.org/fedora-meeting/2012-03-23/cloud_sig.2012...
.
Meeting summary
---------------
* Gathering of the Peeps (rbergeron, 19:00:55)
* EC2, images, and so forth (rbergeron, 19:04:50)
* ec2 images are booting; can only boot but not log in (rbergeron,
19:08:33)
* server side says client disconnected; client side says key was
rejected; not sure wtf is going on at the moment, but still plugging
way (rbergeron, 19:08:50)
* thank you to dgilmore for plugging away at this :) (rbergeron,
19:09:01)
* ACTION: dgilmore to post info about additional non-ec2 images being
"ready to try" at beta (or additionally beforehand with a heads-up
of what is coming) (rbergeron, 19:16:21)
* Special Guest Star skvidal and The Cloud Stuff He's Doing (rbergeron,
19:16:44)
* Fedora Infra has a plan to build a eucalyptus cluster (for unicorns
and magical ponies, and for builders and random testing)
(rbergeron, 19:18:32)
* test cluster is setup using out of warranty hw currently;
structure/concept is under our belts, waiting on actual hardware to
arrive (rbergeron, 19:19:03)
* will be eucalyptus 3.<mumble> (rbergeron, 19:19:13)
* the hope is that this cloudy space will be easier for contributors
to take advantage of, as it ideally will be separated from the more
protected pieces of infrastructure (rbergeron, 19:25:08)
* it is using KVM, in case anyone is wondering (rbergeron, 19:25:54)
* Events incoming (rbergeron, 19:27:43)
* OpenStack Summit/Conf is coming, see email I sent to list
(rbergeron, 19:27:55)
* LINK: https://fedoraproject.org/wiki/OpenStackSummitConf_April2012
(rbergeron, 19:28:12)
* if you're going, plz sign up so I can harass you into sitting at the
booth for at least a wee bit of time on Thurs/Fri (rbergeron,
19:28:31)
* err, sweetly ask you (rbergeron, 19:28:39)
* LINK:
http://lists.fedoraproject.org/pipermail/cloud/2012-March/001333.html
(rbergeron, 19:28:55)
* OpenCloudConf - April 30 - May 3 (rbergeron, 19:30:46)
* LINK: http://www.opencloudconf.com/ (rbergeron, 19:30:52)
* Feature Fun (rbergeron, 19:33:01)
* rackerjoe is working on chef recipes for fedora packages, mostly for
rax infrastructure deployments but you can find it.... (rbergeron,
19:38:24)
* LINK: github.com/rcbops (rbergeron, 19:38:28)
* OpenStack: "the incipience of essex" - lots of updates in lsat week
or so to RC1 for varoius essex projects (rbergeron, 19:39:13)
* plz test, wtb help there (rbergeron, 19:39:21)
* correction: the chef recipes are for rcb deployments of openstack,
not rax public cloud infrastructure (rbergeron, 19:39:46)
* dprince and derekh are working on puppet-y things (rbergeron,
19:40:01)
* devstack is a script primarily used for upstream dev; gets the whole
stack up and running quickly from git checkouts; not design for
operational deployments... (rbergeron, 19:42:49)
* was prevoiusly ubuntu-only, now getting fedora support (rbergeron,
19:43:06)
* rackerhacker is working on automated kickstarts to et openstack set
up within vms/servers devstack-ish aproach, but more for production)
(rbergeron, 19:43:55)
* Euca still plugs along, dep list has about 4 things left
(rbergeron, 19:49:54)
* anyone in Rochester area, head over to CloudCampRoc and harass mull
and gregdek about how ncst is gonna implode tonight (rbergeron,
19:51:29)
* LINK: http://ianweller.fedorapeople.org/brackets/rbergero.html
(rbergeron, 19:52:24)
* S3& Mirrors (rbergeron, 19:52:56)
* ACTION: mdomsch to upload F8 into the S3 mirror (mdomsch, 20:03:47)
* S3 / mirrors is now ON! unique ip checks to s3 mirror since
3/21/2012: EL5: 5296; EL6: 1683; Fedora (15-16-16): 170 (rbergeron,
20:04:39)
* S3 / mirrors is now ON! unique ip checks to s3 mirror since
3/21/2012: EL5: 5296; EL6: 1683; Fedora (15-16-17): 170 (rbergeron,
20:05:25)
* SUPER HUGE MIRACULOUS HUGS to mdomsch for all his work on this,
thank you! (rbergeron, 20:06:07)
* ACTION: rbergeron to harass spevack to read these logs and give
input to above thoughts on other zones (rbergeron, 20:08:33)
* Open Floor / Your topic here (rbergeron, 20:08:49)
* openshift is still working towards being open sourced in time for
F18 (YAY) (rbergeron, 20:10:54)
* ayoung curious about interest in diskless booting with ramdisk
rootFS; will blog (rbergeron, 20:15:35)
* idea is that cloud nodes are ideally diskless, at least in certain
usages (rbergeron, 20:15:45)
Meeting ended at 20:19:41 UTC.
Action Items
------------
* dgilmore to post info about additional non-ec2 images being "ready to
try" at beta (or additionally beforehand with a heads-up of what is
coming)
* mdomsch to upload F8 into the S3 mirror
* rbergeron to harass spevack to read these logs and give input to above
thoughts on other zones
Action Items, by person
-----------------------
* dgilmore
* dgilmore to post info about additional non-ec2 images being "ready
to try" at beta (or additionally beforehand with a heads-up of what
is coming)
* mdomsch
* mdomsch to upload F8 into the S3 mirror
* rbergeron
* rbergeron to harass spevack to read these logs and give input to
above thoughts on other zones
* **UNASSIGNED**
* (none)
People Present (lines said)
---------------------------
* rbergeron (179)
* skvidal (40)
* mdomsch (39)
* dgilmore (20)
* rackerhacker (14)
* gholms (14)
* ayoung (12)
* rackerjoe (9)
* mull (8)
* russellb (8)
* zodbot (6)
* tdawson (5)
* gregdek (3)
* dprince (2)
* nirik (1)
Generated by `MeetBot`_ 0.1.4
.. _`MeetBot`: http://wiki.debian.org/MeetBot
11 years, 8 months
The Weekly Gathering of the Cloud SIG is TODAY! 2012-03-23
by Robyn Bergeron
Greetings and salutations,
'Tis time for the weekly meeting of the minds, more commonly known as
"the Cloud SIG meeting." Your favorite place to be on Friday!
When: 1900 UTC (3pm US Eastern, 12pm US Pacific)
Where: #fedora-meeting on irc.freenode.net
Today's approximate agenda:
* Updates on images and availability for Beta (ec2 and other image types)
* Quick overview of The Fedora Cloud Thing that is coming down the
pipeline, brought to you by seth vidal.
* Events update
** OpenStack Summit/Conf
** OpenCloudConf
* Feature-land:
** OpenStack
** Cloudstack
** OpenNebula
** AS7 Checkin
** Euca (futurefeature!)
* Mirrors & S3
* Bonus topic: Trolling NCST fans about how their team is going DOWNNNN
tonight [1]
* YOUR TOPIC HERE! aka: Open Floor. Bring your topic, we'll get to it. :)
See you folks there.
-Robyn
[1] Yes, that was just a shameless way into getting some of you to come
today. :)
11 years, 8 months
OpenStack Summit/Conf. & Marketing Collateral (a two-part email!)
by Robyn Bergeron
Howdy howdy Cloud SIG pals,
This is a dual-purpose email, so if you don't care about the first part
(OpenStack Summit/Conf.) at least bear with me and skip on to the second
part :)
First:
There is a handful of folks from Fedora-land, I suspect, who will be in
attendance at the OpenStack Summit & Conference coming up April 16-20.
I've arranged for us to have some shared .org booth space at the event;
we would likely want to staff that on Thursday/Friday (the conference
portion), though my understanding is that the booth area will likely be
open all days of the week. I'll be in attendance, but would love to have
some backup. I'm not asking for anyone to spend all day, but if you can
spend an hour or two over a day or two, that would be rockin'.
I've made an event page to try and organize anything we have going on at
the event, here:
https://fedoraproject.org/wiki/OpenStackSummitConf_April2012
So if you're planning on attending, and are willing to hang at the booth
at some point, please add your name to the "Fedora Representatives"
section, and as soon as the schedule looks more firm (or published,
really) we can try and nail down a more firm schedule for boothiness.
And I also won't have to subject everyone on the Cloud SIG mailing list
to reading the hashing out of schedule details. :)
Also: I'm curious if anyone might be interested in wrangling some sort
of Fedora/OpenStack BoF, maybe Thursday night, or $someothertime? I
think it would be a good way to connect with people who might be
potential contributor types, might be willing to test, etc.
I'm planning on having a small amount of media and some stickers to give
away at the booth, but I think it would be SUPER BENEFICIAL to have some
Cloud-specific collateral to give away, since the audience for this is
obviously very targeted.
AND THUS BEGINS THE SECOND PART OF THE MAIL.
More generally, I think it would be great to have some Cloud SIG
materials available for conferences and such, not just this one. I've
created some *incredibly* drafty brainstorming pages for two pieces of
material that we could do as flyers, or
nicer-printed-on-heavy-paper-special-sized handouts:
* Cloud SIG or Fedora in the Cloud:
https://fedoraproject.org/wiki/Cloud_Marketing_Collateral/Cloud_SIG
I'm thinking this would be more of a catch-all, "What is in Fedora that
is cloudy" handout, including EC2 info as well as some of the tooling we
have.
* OpenStack & Fedora:
https://fedoraproject.org/wiki/Cloud_Marketing_Collateral/OpenStack_in_Fe...
For this: I'm thinking "What's in F16, What's coming in F17", as well as
more generalized info ("About Fedora," "Contributing to the Cloud SIG").
So in a nutshell: If you're one of the folks working on the OpenStack
stuff, I would muchomucho appreciate your help/content/etc. in creating
this second flyer; if you're Anyone who Cares about Fedora and Cloud, I
would love your help in creating content for the first flyer listed.
Additionally, I've requested a logo for our lovely group from the Design
Team, so hopefully they can come up with something awesome. Once we
have a good handle on content for flyers, we can probably work with the
design team to come up with something that actually looks nice in
addition to being informative.
Obviously, other flyer ideas are welcome too, the OpenStack one is
mostly to have something specific for a very narrowly-focused event.
Your feedback is welcome, as always. :D
-Robyn
11 years, 8 months
OpenStack status
by Mark McLoughlin
Hey,
Here's our latest update:
http://fedoraproject.org/wiki/OpenStack_status_report_2012-03-20
Thanks to Pádraig for his help pulling this one together. Hopefully,
with Pádraig's help, these updates will become much more regular :)
We've decided to push these to the wiki instead of just by email.
Historical archives are here:
http://fedoraproject.org/wiki/OpenStack_status_reports
Cheers,
Mark.
(appended below for convenience)
OpenStack status report 2012 03 20
= Test Day =
We held a [[Test_Day:2012-03-08_OpenStack_Test_Day|test day for
OpenStack Essex in Fedora 17 on March 8]].
The event was fairly well attended with 11 people reporting their test
results on the wiki page.
The set of test cases we used were heavily based on the
[[Test_Day:2011-10-20_OpenStack_Test_Day|Fedora 16 Test Day]] but
included testing Keystone, Horizon and Quantum (with openvswitch)
integration. We also had instructions detailing how to run the Tempest
test suite. Finally, for the first time, we had a Fedora 16 guest image
that everyone could download and use for testing.
Running through the various tests highlighted some of the implications
of using keystone authentication e.g.
# <code>nova-manage</code>'s user and project commands become obsolete
# Equivalent of <code>nova-manage project zipfile</code> is non-trivial
# <code>nova-manage image convert</code> doesn't work anymore, you need
to use glance directly
Worryingly, we hit a number of serious SELinux issues e.g.
# [https://bugzilla.redhat.com/801299 #801299 - AVC when first starting
mysqld]
# [https://bugzilla.redhat.com/801330 #801330 - AVC denials starting
OpenStack glance services]
# [https://bugzilla.redhat.com/801352 #801352 - SELinux policy for
OpenStack's new nova-cert service]
# [https://bugzilla.redhat.com/801746 #801746 - SELinux AVC denial
executing from /tmp]
# [https://bugzilla.redhat.com/760055 #760055 - SELinux policy for
keystone]
Horizon mostly "just worked", which is really great. We did file a
number of bugs, though:
# [https://bugzilla.redhat.com/801745 #801745 - intermittent database
connection errors]
# [https://bugzilla.redhat.com/801690 #801690 - horizon: download ec2
credentials fails]
# [https://bugzilla.redhat.com/801688 #801688 - horizon: cannot delete a
user or project]
# [https://bugzilla.redhat.com/801686 #801686 - horizon: failed to
detach or delete a volume]
# [https://bugzilla.redhat.com/801685 #801685 - horizon: no VNC console]
# [https://bugzilla.redhat.com/801684 #801684 - horizon: action
dropdowns don't appear to work]
# [https://bugzilla.redhat.com/801208 #801208 - tenant chooser doesn't
work]
Some other bugs filed include:
# [https://bugzilla.redhat.com/803354 #803354 - keystone returns 500
errors after a while]
# [https://bugzilla.redhat.com/801452 #801452 - euca-describe-instances
does not show IP addresses]
# [https://bugzilla.redhat.com/801312 #801312 - webob deprecation
warnings]
# [https://bugzilla.redhat.com/801302 #801302 - sqlalchemy-migrate
warnings during openstack-nova-db-setup]
# [https://bugzilla.redhat.com/801366 #801366 - [API] Invalid
X-Auth-Token breaks API service]
# [https://bugzilla.redhat.com/800704 #800704 - keystone endpoint-list
tracebacks]
We also stumbled across this cheeky little libvirt regression introduced
by switching to systemd:
# [https://bugzilla.redhat.com/802475 #802475 - libvirt in a VM
occasionally brings up 'default' network when it shouldn't, kills vm
networking]
One idea for future improvement is for us to use a dedicated yum
repository for the test day to remove any ambiguity about which updates
have been pushed to the mirrors and to allow us to quickly push out
fixes on the day itself.
= Fedora 17 =
== Essex Release Progress ==
The [https://lists.launchpad.net/openstack/msg08173.html essex-4
milestone] was released on March 1 and quickly pushed into Fedora 17, as
was [https://lists.launchpad.net/openstack/msg08445.html swift 1.4.7]
and [https://lists.launchpad.net/openstack/msg08197.html Quantum
essex-4].
The Essex release now enters its release candidates phase in the lead up
to the final release on April 5.
So far, [https://lists.launchpad.net/openstack/msg08855.html Nova rc1]
and [https://lists.launchpad.net/openstack/msg08806.html Quantum rc1]
have been released, and Swift has tagged its
[https://launchpad.net/swift/+milestone/1.4.8 1.4.8 release].
== Getting Started Wiki ==
In preparation for the Fedora 17 release, we have updated the
[[Getting_started_with_OpenStack_Nova]] wiki page and moved it to
[[Getting_started_with_OpenStack_on_Fedora_17]].
The new instructions include details on how to use Keystone
authentication and the Horizon dashboard.
Also [[Quantum]] installation and troubleshooting steps have been
prepared
for testing nova and quantum in a multi-node setup using openvswitch as
a plugin.
== F-17 Package Updates ==
Since the last status report, the following notable updates have been
pushed to F-17:
*
[http://admin.fedoraproject.org/updates/openstack-nova-2012.1-0.7.e4.fc17 openstack-nova-2012.1-0.7.e4.fc17]
*# update to essex-4
*# switch to new <code>.ini</code> style conf file format
*# depend on [https://bugzilla.redhat.com/788485 new bridge-utils
package]
*
[http://admin.fedoraproject.org/updates/openstack-nova-2012.1-0.8.e4.fc17 openstack-nova-2012.1-0.8.e4.fc17]
*# support non-blocking libvirt operations
*# suppress power state errors
*# fix [https://bugzilla.redhat.com/801791 nova-compute failing to
start]
*# fix [https://bugzilla.redhat.com/801302 sqlalchemy-migrate warnings
during openstack-nova-db-setup]
*# fix [https://bugzilla.redhat.com/803905 osapi v1.1 returns errors
when getting server status]
*
[http://admin.fedoraproject.org/updates/openstack-glance-2012.1-0.5.e4.fc17 openstack-glance-2012.1-0.5.e4.fc17]
*# Update to essex-4
*# Require pyxattr rather than python-xattr
*# Add python-iso8601 dependency
*
[http://admin.fedoraproject.org/updates/openstack-keystone-2012.1-0.9.e4.fc17 openstack-keystone-2012.1-0.9.e4.fc17]
*# Update to essex-4
*
[http://admin.fedoraproject.org/updates/openstack-keystone-2012.1-0.10.e4.... openstack-keystone-2012.1-0.10.e4.fc17]
*# [http://bugzilla.redhat.com/800704 Change default catalog backend to
sql]
*# Add missing keystoneclient dep
*# Add openstack-config-set script
*
[http://admin.fedoraproject.org/updates/python-django-horizon-2012.1-0.1.r... python-django-horizon-2012.1-0.1.rc1.fc17]
*# Update to RC1 snapshot
*# Change default URL to <code>http://localhost/dashboard</code>
*# Fix [https://bugzilla.redhat.com/788567 static content]
*
[http://admin.fedoraproject.org/updates/openstack-quantum-2012.1-0.3.e4.fc17 openstack-quantum-2012.1-0.3.e4.fc17]
*# Depend on Open vSwitch
*
[http://admin.fedoraproject.org/updates/openstack-quantum-2012.1-0.5.e4.fc17 openstack-quantum-2012.1-0.3.e5.fc17]
*# Update to Essex RC1 candidate tarball
== Open vSwitch Package Review ==
Chris Wight and Dan Berrange worked [https://bugzilla.redhat.com/799171
openvswitch through the review process].
[[Features/Open_vSwitch|Open vSwitch]] is a major Fedora 17 feature that
is going to be hugely beneficial to OpenStack and Quantum in Fedora.
Very exciting!
== Multiple Instances of Swift Services ==
When swift moved from SysV init to systemd, we lost the ability to
launch multiple instances of the same service on a machine.
Derek stumbled across systemd's "instances" support and we'll soon
re-instate this support. See [https://bugzilla.redhat.com/805149
#805149] for more details.
== Keystone LDAP Support ==
Adam Young had his [https://review.openstack.org/4362 LDAP backend]
merged into keystone for essex-4.
Adam blogged about
[http://adam.younglogic.com/2012/02/freeipa-keystone-ldap/ using
keystone's LDAP driver with FreeIPA].
= Misc Fedora News =
== F-16 Guest Images ==
Dan Berrange
[http://www.spinics.net/linux/fedora/fedora-cloud/msg01304.html posted a
F-16 guest image] which can be used with OpenStack.
The image is based on the Fedora EC2 images, includes cloud-init and is
a 200Mb download.
== Essex Preview Repo For F-16 ==
Alan Pevec has started maintaining a
[https://fedoraproject.org/wiki/Getting_started_with_OpenStack_on_Fedora_1... "preview" repository for Essex on Fedora 16].
If you're running Fedora 16 and you want to try out the Essex release,
this is the repo for you!
Also Steve Dake
[http://oss-us-1.clusterlabs.org/pipermail/pcmk-cloud/2012-March/000709.html summarized steps] for updating the OpenStack Diablo release to Essex on Fedora 16.
== Devstack F-16 Support ==
Russell Bryant has been hard at working improving devstack's F-16
support in his
[https://github.com/russellb/devstack/commits/fedora-support
fedora-support branch in github]. This branch also adds support for
using Qpid instead of RabbitMQ.
== Keystone Fedora PAM Support ==
Russell also added [https://review.openstack.org/5365 PAM authentication
support] for Keystone in Fedora.
== Fedora Support in Puppet Labs Recipes ==
Derek Higgins has been working on adding Fedora support to Puppet Labs'
recipes for OpenStack.
Support was [Nova
https://github.com/derekhiggins/puppetlabs-nova/commit/e66e5ab added to
Nova]. Work
[https://github.com/derekhiggins/puppetlabs-swift/commits/fedora_testing
is underway for Swift]. And a whole bunch of dependent modules are also
gaining Fedora support.
These recipes are used by [http://smokestack.openstack.org upstream's
Smokestack instance] when testing on Fedora.
== iSCSI tgtd Issue With Systemd ==
A recent systemd update caused tgtd to hang for 5 minutes on startup.
[http://pkgs.fedoraproject.org/gitweb/?p=scsi-target-utils.git;a=commitdif... Derek pushed this simple fix] for the problem.
== cloud-init and OpenStack ==
We're now testing cloud-init with OpenStack a bit more. Pádraig Brady
and Joe Brue filed these bugs:
# [https://bugzilla.redhat.com/795998 #795998 - run-parts is run with
the non-existent --regex option]
# [https://bugzilla.redhat.com/750979 #750979 - cloud-init scripts do
not make hostname changes permanent in /etc/sysconfig/network]
and both have been fixed in recent updates.
== Broken python-boto Update ==
OpenStack folks identified a [https://bugzilla.redhat.com/804041 serious
python-boto issue] before update hit stable.
= Upstream News =
== OpenStack Governance Elections ==
The OpenStack project held its spring governance elections recently and
elected technical leads for Nova, Swift, Glance, Keystone and Horizon.
Two new members of the Project Policy Board were also elected.
Two Fedora developers - Mark McLoughlin and Eoghan Glynn - were
nominated for positions but, despite a hard-fought and emotional
campaign, neither were elected. Next time!
== Rewritten libvirt Driver XML Generation ==
Dan Berrange has posted a
[https://lists.launchpad.net/openstack/msg08408.html massive patch set
to Nova] for comments. The patches replaces Nova's usage of Cheetah
templates for generating libvirt XML with a safer approach of
de-serializing a DOM.
Since this is such a large change, it will not be proposed until Folsom
opens up.
Dan also had these interesting fixes merged lately:
# [https://review.openstack.org/5043 Remove the <acpi/> feature from
UML/LXC guests]
# [https://review.openstack.org/5076 Simply & unify console handling for
libvirt drivers]
# [https://review.openstack.org/5147 Use cache='none' for all disks]
== libvirt Driver Image Handling ==
Pádraig continued improving the libvirt driver's image handling with
these fixes:
# [https://review.openstack.org/5442 ensure atomic manipulation of
libvirt disk images]
# [https://review.openstack.org/5456 allow the compute service to start
with missing libvirt disks]
== libvirt Issue Fixed in F-16, Broken in Ubuntu Oneric ==
[https://lists.launchpad.net/openstack/msg08581.html This report of a
libvirt issue with OpenStack] is rather interesting. It turns out that
this was an issue found upstream, fixed in Fedora 16 but is still broken
in Ubuntu Oneric.
Kudos to our libvirt package maintainers!
== Rootwrap in Quantum ==
Rootwrap is a helper script added to Nova in Essex to help lock down the
sudo commands that Nova can run. Bob Kukura has now
[https://bugs.launchpad.net/quantum/+bug/948467 added rootwrap to
Quantum] and, while doing so, ensured that the Quantum agents no longer
need to run as root.
= Blogs etc. =
== Keystone Blog Posts ==
Adam also blogged on some other topics related to keystone:
#
[http://adam.younglogic.com/2012/03/keystone-should-move-to-apache-httpd/ Keystone should move to Apache HTTPD]
# [http://adam.younglogic.com/2012/03/pki-for-keystone/ PKI for
Keystone]
# [http://adam.younglogic.com/2012/03/hateoas-openstack-keystone/
HATEOAS Openstack Keystone]
== OpenStack, Deltacloud and CIMI ==
Marios Andreou, a developer on the deltacloud project, wrote
[http://www.mariosandreou.com/deltacloud/cloud_API/2012/03/05/openstack-ci... this interesting blog post on OpenStack Networking and CIMI].
[http://dmtf.org/standards/cloud CIMI] is a cloud API standard being
developed by the DMTF and supported by the deltacloud project.
11 years, 8 months
NotAuthorized: You are not authorized to complete this action
by 彭勇
https://bugs.launchpad.net/glance/+bug/958568
i install a multi node openstack. it works in contoller with a
compute, i can run instances on it.
when i copy nova.conf to a new compute, and run instance, it reports:
2012-03-18 21:53:50 ERROR nova.rpc.common [-] Exception during message handling
(nova.rpc.common): TRACE: Traceback (most recent call last):
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/rpc/amqp.py", line 250, in
_process_data
(nova.rpc.common): TRACE: rval = node_func(context=ctxt, **node_args)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/exception.py", line 112, in
wrapped
(nova.rpc.common): TRACE: return f(*args, **kw)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 180,
in decorated_function
(nova.rpc.common): TRACE: sys.exc_info())
(nova.rpc.common): TRACE: File "/usr/lib64/python2.7/contextlib.py",
line 24, in __exit__
(nova.rpc.common): TRACE: self.gen.next()
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 174,
in decorated_function
(nova.rpc.common): TRACE: return function(self, context,
instance_uuid, *args, **kwargs)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 649,
in run_instance
(nova.rpc.common): TRACE: self._run_instance(context, instance_uuid, **kwargs)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 452,
in _run_instance
(nova.rpc.common): TRACE: self._set_instance_error_state(context, instance_uuid)
(nova.rpc.common): TRACE: File "/usr/lib64/python2.7/contextlib.py",
line 24, in __exit__
(nova.rpc.common): TRACE: self.gen.next()
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 421,
in _run_instance
(nova.rpc.common): TRACE: image_meta = self._check_image_size(context, instance)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 499,
in _check_image_size
(nova.rpc.common): TRACE: image_meta = _get_image_meta(context,
instance['image_ref'])
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 187,
in _get_image_meta
(nova.rpc.common): TRACE: return image_service.show(context, image_id)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/image/glance.py", line 236, in
show
(nova.rpc.common): TRACE: image_id)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/nova/image/glance.py", line 145, in
_call_retry
(nova.rpc.common): TRACE: return getattr(client, name)(*args, **kwargs)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/glance/client.py", line 101, in
get_image_meta
(nova.rpc.common): TRACE: res = self.do_request("HEAD", "/images/%s" % image_id)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/glance/common/client.py", line 61,
in wrapped
(nova.rpc.common): TRACE: return func(self, *args, **kwargs)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/glance/common/client.py", line 390,
in do_request
(nova.rpc.common): TRACE: headers=headers)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/glance/common/client.py", line 75,
in wrapped
(nova.rpc.common): TRACE: return func(self, method, url, body, headers)
(nova.rpc.common): TRACE: File
"/usr/lib/python2.7/site-packages/glance/common/client.py", line 500,
in _do_request
(nova.rpc.common): TRACE: raise exception.NotAuthorized(res.read())
(nova.rpc.common): TRACE: NotAuthorized: You are not authorized to
complete this action.
(nova.rpc.common): TRACE: Details:
(nova.rpc.common): TRACE:
here is my nova.conf:
[DEFAULT]
verbose=True
logdir = /var/log/nova
state_path = /var/lib/nova
lock_path = /var/lib/nova/tmp
dhcpbridge = /usr/bin/nova-dhcpbridge
dhcpbridge_flagfile = /etc/nova/nova.conf
root_helper = sudo nova-rootwrap
force_dhcp_release = True
injected_network_template = /usr/share/nova/interfaces.template
libvirt_xml_template = /usr/share/nova/libvirt.xml.template
vpn_client_template = /usr/share/nova/client.ovpn.template
credentials_template = /usr/share/nova/novarc.template
api_paste_config=/etc/nova/api-paste.ini
sql_connection = mysql://nova:nova@192.168.28.5/nova
iscsi_ip_prefix = 192.168.28.5
iscsi_helper = tgtadm
connection_type = libvirt
libvirt_type = kvm
rabbit_host=192.168.28.5
rabbit_password=nova
firewall_driver = nova.virt.libvirt.firewall.IptablesFirewallDriver
network_manager=nova.network.manager.FlatDHCPManager
flat_network_bridge=br100
flat_injected=False
public_interface=em1
flat_interface=em2
auth_strategy=keystone
allow_resize_to_same_host=True
compute_scheduler_driver=nova.scheduler.simple.SimpleScheduler
#compute_scheduler_driver=nova.scheduler.distributed_scheduler.DistributedScheduler
image_service=nova.image.glance.GlanceImageService
#nova glance host
s3_host=192.168.28.5
glance_api_servers=192.168.28.5:9292
volume_group=nova-volumes
volume_name_template=volume-%08x
osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
--
Peng Yong
11 years, 8 months
NotAuthorized: You are not authorized to complete this action
by 彭勇
https://bugs.launchpad.net/glance/+bug/958568
i install openstack in fedora 17 testing:
# rpm -qa|grep openstack
openstack-nova-2012.1-0.8.e4.fc17.noarch
openstack-dashboard-2012.1-0.1.rc1.fc17.noarch
openstack-keystone-2012.1-0.10.e4.fc17.noarch
openstack-glance-2012.1-0.5.e4.fc17.noarch
it works in FlatDHCPManager, the instance get a IP address.
when i enable multi_host mode, it failed to get the DHCP address:
Mar 18 22:59:43 nova dnsmasq-dhcp[6614]: DHCPDISCOVER(br100)
02:16:3e:2a:f0:d0 no address available
Mar 18 22:59:46 nova dnsmasq-dhcp[6614]: DHCPDISCOVER(br100)
02:16:3e:2a:f0:d0 no address available
Mar 18 22:59:49 nova dnsmasq-dhcp[6614]: DHCPDISCOVER(br100)
02:16:3e:2a:f0:d0 no address available
Mar 18 23:00:12 nova dnsmasq-dhcp[6614]: DHCPDISCOVER(br100)
02:16:3e:2a:f0:d0 no address available
Mar 18 23:00:15 nova dnsmasq-dhcp[6614]: DHCPDISCOVER(br100)
02:16:3e:2a:f0:d0 no address available
Mar 18 23:00:18 nova dnsmasq-dhcp[6614]: DHCPDISCOVER(br100)
02:16:3e:2a:f0:d0 no address available
the command i used to create network:
nova-manage network create private --multi_host=T --fixed_range_v4=
10.8.0.0/24 --num_networks=1 --network_size=256 --bridge=br100
--bridge_interface=em2
here is nova.conf:
[DEFAULT]
multi_host=True
#send_arp_for_ha=True
verbose=True
logdir = /var/log/nova
state_path = /var/lib/nova
lock_path = /var/lib/nova/tmp
dhcpbridge = /usr/bin/nova-dhcpbridge
dhcpbridge_flagfile = /etc/nova/nova.conf
force_dhcp_release = True
injected_network_template = /usr/share/nova/interfaces.template
libvirt_xml_template = /usr/share/nova/libvirt.xml.template
vpn_client_template = /usr/share/nova/client.ovpn.template
credentials_template = /usr/share/nova/novarc.template
iscsi_ip_prefix = 192.168.28.6
iscsi_helper = tgtadm
sql_connection = mysql://nova:nova@192.168.28.6/nova
connection_type = libvirt
firewall_driver = nova.virt.libvirt.firewall.IptablesFirewallDriver
root_helper = sudo nova-rootwrap
libvirt_type = kvm
rabbit_host=192.168.28.6
rabbit_password=nova
network_manager=nova.network.manager.FlatDHCPManager
flat_network_bridge=br100
flat_injected=False
public_interface=em1
flat_interface=em2
auth_strategy=keystone
allow_resize_to_same_host=True
s3_host=192.168.28.6
volume_group=nova-volumes
volume_name_template=volume-%08x
osapi_compute_extension=nova.api.openstack.compute.contrib.standard_extensions
my_ip=192.168.28.6
novncproxy_base_url=http://192.168.28.6:6080/vnc_auto.html
xvpvncproxy_base_url=http://192.168.28.6:6081/console
vncserver_listen=127.0.0.1
vncserver_proxyclient_address=127.0.0.1
api_paste_config=/etc/nova/api-paste.ini
image_service=nova.image.glance.GlanceImageService
ec2_dmz_host=192.168.28.6
glance_api_servers=192.168.28.6:9292
--
Peng Yong
11 years, 8 months
