OpenStack status

[Pádraig Brady]

Hi,

It's been about 3 weeks since the last status update, so here's the latest:

  https://fedoraproject.org/wiki/OpenStack_status_report_2012-06-15

Historical archives are here:

  http://fedoraproject.org/wiki/OpenStack_status_reports

Cheers,
Pádraig.

(appended below for convenience)

= Distro news =

Fedora 17 was released on May 29th containing the [http://fedoraproject.org/wiki/Features/OpenStack_Essex OpenStack Essex "Feature"]

Chris Wright discusses [http://www.youtube.com/watch?v=dmWdYJTsKbM#t=166s OpenStack in the Fedora 17 release video].

== openstack-nova ==
Nova updates for Fedora 16, 17, EPEL 6 and rawhide, were released for
a security issue where [https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-2654 security groups fail to be set correctly]

Nova packages now enable libguestfs image inspection,
which allows injection to more complex guest images.
This is supported by libguestfs updates to the inspection functionality.

== openstack-keystone ==
Derek Higgins identified and fixed important keystone security issues:
* [https://bugzilla.redhat.com/show_bug.cgi?id=824945 Tokens remain valid after a user account is disabled]
* [https://bugzilla.redhat.com/show_bug.cgi?id=824939 Tokens remain valid following a password compromise and subsequent password change]
* [https://bugzilla.redhat.com/show_bug.cgi?id=828794 Once a token is created/distributed its expiry date can be circumvented]

Alan Pevec backported these to the essex release and updated the packages

== novnc ==
novnc packages were finalized to support VNC from a browser to guests through the dashboard.<br/>
There were tested successfully by CERN who shared [https://fedoraproject.org/wiki/Getting_started_with_OpenStack_EPEL#VNC_access setup and testing notes]

Yong Sheng Gong from IBM also documented [https://www.ibm.com/developerworks/mydeveloperworks/blogs/e93514d3-c4f0-4aa0-8844-497f370090f5/entry/openstack_vnc_console18?lang=en OpenStack VNC setups]

== OpenStack Folsom in rawhide ==
Fedora Rawhide has been mostly updated to the Folsom milestone 1 OpenStack release:
* [http://pkgs.fedoraproject.org/gitweb/?p=openstack-keystone.git;a=commit;h=d75edaf2 keystone]
* [http://pkgs.fedoraproject.org/gitweb/?p=openstack-glance.git;a=commit;h=214824b0 glance]
* [http://pkgs.fedoraproject.org/gitweb/?p=openstack-nova.git;a=commit;h=8d4333a nova]
* [http://pkgs.fedoraproject.org/gitweb/?p=python-django-horizon.git;a=commit;h=0176a7c horizon]
* [http://pkgs.fedoraproject.org/gitweb/?p=python-novaclient.git;a=commit;h=d09fbdf python-novaclient]
Also there was a [https://fedoraproject.org/wiki/Features/OpenStack_Folsom Fedora 18 Folsom Feature page] prepared, summarizing the tasks for Folsom support

= OpenStack upstream news =

== Bug triaging day ==
About 20 people on and off, many from the Fedora community,
participated in the upstream OpenStack bug triaging day,
which yielded some [http://fnords.wordpress.com/2012/06/08/bug-triage-day-results/ very beneficial results]

== Fedora/RHEL/Centos docs ==
Anne Gentle wrote and guided through review a significant update to the
[http://docs.openstack.org/trunk/openstack-compute/install/yum/content/ Fedora/RHEL/Centos specific information] in the upstream docs:

== LVM backed guest images ==
GridDynamics after a dedicated review process,
commited [https://github.com/openstack/nova/commit/e0540df support for LVM backed guest images].

This significantly improves performance in their testing,
over guest images run from a standard file system.
As part of this they refactored the guest image handling code,
making it much more maintainable.

== Red Hat upstream work ==

There is too much to track in detail the OpenStack upstream activity of Red Hat developers,
but here is a link showing the [http://goo.gl/aewXr last 3 weeks of Red Hat OpenStack upstream development]

= Misc =

== OpenStack + OpenShift presentation ==
A recent presentation on the synergies of [http://www.slideshare.net/fallenpegasus/openshift-openstack-fedora-awesome OpenStack and OpenShift] was made available.

== CERN's plans for OpenStack ==
Tim  Bell from CERN (who use Red Hat flavored systems) has presented [http://cern.ch/go/NH9w plans for running OpenStack on 15K systems] (running 300K VMs) by 2015.