<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<style type="text/css" style="display:none"><!--P{margin-top:0;margin-bottom:0;} .EmailQuote
{margin-left:1pt;
padding-left:4pt;
border-left:#800000 2px solid}--></style>
</head>
<body dir="ltr" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>Kevin,</p>
<p><br>
</p>
<p>You are right. To avoid overloading the app catalog servers, Solum operators can (should?) have local</p>
<p>copies of the languagepacks (LPs) in their Glance/Swift installations which are part of their Solum install.<br>
</p>
<p><br>
</p>
<p>Solum currently does have the ability to download LPs from Glance or Swift and use them to build</p>
<p>application containers. Solum internally maintains metadata about each LP. One of attributes in this
</p>
<p>is to identify whether an LP is an "operator LP". The LPs that an operator downloads from the app catalog</p>
<p>would be marked as operator LPs in Solum. Also, I would assume that operators would define a process to<br>
</p>
<p>periodically refresh these LPs from the app catalog. </p>
<p><br>
</p>
<p>Currently operator LPs are available for all the tenants in Solum.</p>
<p>Such LPs are downloaded only the first time on the hosts that build application containers,
</p>
<p>when an application that depends on that LP is built for the very first time.</p>
<p>After that the LP is cached on the host. So the Docker daemon on that host does not need to download it again.</p>
<p>Solum also provides configurable option to delete LPs to control hosts' disk usage.</p>
<p><br>
</p>
<p>We have not yet solved how to enable a tenant to make public the LPs that they create
</p>
<p>(i.e. make their LPs available to other tenants). The solution for this would be different for different backends.<br>
</p>
<p>I believe that Glance has a way to make images public. So we could use that for Glance.</p>
<p><br>
</p>
<p>- Devdatta<br>
</p>
<p><br>
</p>
<div style="color: rgb(33, 33, 33);">
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Fox, Kevin M <Kevin.Fox@pnnl.gov><br>
<b>Sent:</b> Wednesday, June 17, 2015 8:28 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Solum][app-catalog] [ Supporting swift downloads for operator languagepacks</font>
<div> </div>
</div>
<div>
<div>That would work, but would be a per tenant thing? So if you had lots of tenants using the same image, it would redownloaded lots of times. Are there any plans for glance integration so the cloud deployer could cache it in the image catalog? I seem to remember
a version of docker that could use glance directly?<br>
<br>
Thanks,<br>
Kevin <strong>
<div><font face="Tahoma" color="#000000" size="2"> </font></div>
</strong>
<hr tabindex="-1">
<font face="Tahoma" size="2"><b>From:</b> Adrian Otto<br>
<b>Sent:</b> Wednesday, June 17, 2015 5:31:11 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Solum][app-catalog] [ Supporting swift downloads for operator languagepacks<br>
</font><br>
<div></div>
</div>
<font size="2"><span style="font-size:10pt">
<div class="PlainText">Kevin,<br>
<br>
Magnum has a plan for dealing with that. Solum will likely have a Magnum integration that will leverage it:<br>
<br>
<a href="https://blueprints.launchpad.net/magnum/+spec/registryv2-in-master">https://blueprints.launchpad.net/magnum/+spec/registryv2-in-master</a><br>
<br>
With that said, yes, you could also optimize the performance of the upstream by caching it locally in swift. You’d want an async proceed to keep it continually updated though.<br>
<br>
Adrian<br>
<br>
> On Jun 17, 2015, at 4:30 PM, Fox, Kevin M <Kevin.Fox@pnnl.gov> wrote:<br>
> <br>
> so, to not beat up on the public facing server, the user would have to copy the container from the public server to the cloud's swift stoage, then the docker hosts could pull from there?<br>
> <br>
> Thanks,<br>
> Kevin<br>
> ________________________________________<br>
> From: Adrian Otto [adrian.otto@rackspace.com]<br>
> Sent: Wednesday, June 17, 2015 4:21 PM<br>
> To: OpenStack Development Mailing List (not for usage questions)<br>
> Subject: Re: [openstack-dev] [Solum][app-catalog] [ Supporting swift downloads for operator languagepacks<br>
> <br>
> Kevin,<br>
> <br>
>> On Jun 17, 2015, at 4:03 PM, Fox, Kevin M <Kevin.Fox@pnnl.gov> wrote:<br>
>> <br>
>> Would then each docker host try and redownload the the prebuilt container externally? If you build from source, does it build it once and then all the docker hosts use that one local copy? Maybe Solum needs a mechanism to pull in a prebuilt LP?<br>
> <br>
> On each docker server Solum downloads built LP’s from swift before the containers are created, so Docker has no reason to contact the public image repository for fetching the LP images because is has a local copy.<br>
> <br>
> Adrian<br>
> <br>
>> <br>
>> Thanks,<br>
>> Kevin<br>
>> ________________________________________<br>
>> From: Murali Allada [murali.allada@RACKSPACE.COM]<br>
>> Sent: Wednesday, June 17, 2015 12:53 PM<br>
>> To: OpenStack Development Mailing List (not for usage questions)<br>
>> Subject: Re: [openstack-dev] [Solum][app-catalog] [ Supporting swift downloads for operator languagepacks<br>
>> <br>
>> Kevin\Keith,<br>
>> <br>
>> Yes, we would like to use the catalog for globally available artifacts, such as operator languagepacks. More specifically the catalog would be a great place to store metadata about publicly available artifacts to make them searchable and easy to discover.<br>
>> <br>
>> The catalog would point to the 'built' artifact, not the 'unbuilt' dockerfile in github.<br>
>> The point of languagepacks is to reduce the amount of time the solum CI pipeline<br>
>> spends building the users application container. We shouldn't build the languagepack from scratch each time.<br>
>> <br>
>> -Murali<br>
>> <br>
>> <br>
>> <br>
>> <br>
>> <br>
>> <br>
>> <br>
>> ________________________________________<br>
>> From: Keith Bray <keith.bray@RACKSPACE.COM><br>
>> Sent: Wednesday, June 17, 2015 2:10 PM<br>
>> To: OpenStack Development Mailing List (not for usage questions)<br>
>> Subject: Re: [openstack-dev] [Solum][app-catalog] [ Supporting swift downloads for operator languagepacks<br>
>> <br>
>> Hi Kevin,<br>
>> <br>
>> We absolute envision languagepack artifacts being made available via<br>
>> apps.openstack.org (ignoring for a moment that the name may not be a<br>
>> perfect fit, particularly for things like vanilla glance images ... Is it<br>
>> an OS or an App? ... catalog.openstack.org might be more fitting).<br>
>> Anyway, there are two stages for language packs, unbuilt, and built. If<br>
>> it's in an unbuilt state, then it's really a Dockerfile + any accessory<br>
>> files that the Dockerfile references. If it's in a built state, then<br>
>> it's a Docker image (same as what is found on Dockerhub I believe). I<br>
>> think there will need to be more discussion to know what users prefer,<br>
>> built vs. unbuilt, or both options (where unbuilt is often a collection of<br>
>> files, best managed in a repo like github vs. built which are best<br>
>> provided as direct links so a single source like Dockerhub).<br>
>> <br>
>> -Keith<br>
>> <br>
>> On 6/17/15 1:58 PM, "Fox, Kevin M" <Kevin.Fox@pnnl.gov> wrote:<br>
>> <br>
>>> This question may be off on a tangent, or may be related.<br>
>>> <br>
>>> As part of the application catalog project, (<a href="http://apps.openstack.org/">http://apps.openstack.org/</a>)<br>
>>> we're trying to provide globally accessible resources that can be easily<br>
>>> consumed in OpenStack Clouds. How would these global Language Packs fit<br>
>>> in? Would the url record in the app catalog be required to point to an<br>
>>> Internet facing public Swift system then? Or, would it point to the<br>
>>> source git repo that Solum would use to generate the LP still?<br>
>>> <br>
>>> Thanks,<br>
>>> Kevin<br>
>>> ________________________________________<br>
>>> From: Randall Burt [randall.burt@RACKSPACE.COM]<br>
>>> Sent: Wednesday, June 17, 2015 11:38 AM<br>
>>> To: OpenStack Development Mailing List (not for usage questions)<br>
>>> Subject: Re: [openstack-dev] [Solum] Supporting swift downloads<br>
>>> for operator languagepacks<br>
>>> <br>
>>> Yes. If an operator wants to make their LP publicly available outside of<br>
>>> Solum, I was thinking they could just make GET's on the container public.<br>
>>> That being said, I'm unsure if this is realistically do-able if you still<br>
>>> have to have an authenticated tenant to access the objects. Scratch that;<br>
>>> <a href="http://blog.fsquat.net/?p=40">http://blog.fsquat.net/?p=40</a> may be helpful.<br>
>>> <br>
>>> On Jun 17, 2015, at 1:27 PM, Adrian Otto <adrian.otto@rackspace.com><br>
>>> wrote:<br>
>>> <br>
>>>> To be clear, Randall is referring to a swift container (directory).<br>
>>>> <br>
>>>> Murali has a good idea of attempting to use swift client first, as it<br>
>>>> has performance optimizations that can speed up the process more than<br>
>>>> naive file transfer tools. I did mention to him that wget does have a<br>
>>>> retiree feature, and that we could see about using curl instead to allow<br>
>>>> for chunked encoding as additional optimizations.<br>
>>>> <br>
>>>> Randall, are you suggesting that we could use swift client for both<br>
>>>> private and public LP uses? That sounds like a good suggestion to me.<br>
>>>> <br>
>>>> Adrian<br>
>>>> <br>
>>>>> On Jun 17, 2015, at 11:10 AM, Randall Burt<br>
>>>>> <randall.burt@RACKSPACE.COM> wrote:<br>
>>>>> <br>
>>>>> Can't an operator make the target container public therefore removing<br>
>>>>> the need for multiple access strategies?<br>
>>>>> <br>
>>>>> -------- Original message --------<br>
>>>>> From: Murali Allada<br>
>>>>> Date:06/17/2015 11:41 AM (GMT-06:00)<br>
>>>>> To: "OpenStack Development Mailing List (not for usage questions)"<br>
>>>>> Subject: [openstack-dev] [Solum] Supporting swift downloads for<br>
>>>>> operator languagepacks<br>
>>>>> <br>
>>>>> Hello Solum Developers,<br>
>>>>> <br>
>>>>> When we were designing the operator languagepack feature for Solum, we<br>
>>>>> wanted to make use of public urls to download operator LPs, such as<br>
>>>>> those available for CDN backed swift containers we have at Rackspace,<br>
>>>>> or any publicly accessible url. This would mean that when a user<br>
>>>>> chooses to build applications on top of a languagepack provided by<br>
>>>>> the operator, we use a url to 'wget' the LP image.<br>
>>>>> <br>
>>>>> Recently, we have started noticing a number of failures because of<br>
>>>>> corrupted docker images downloaded using 'wget'. The docker images work<br>
>>>>> fine when we download them manually with a swift client and use them.<br>
>>>>> The corruption seem to be happening when we try to download a large<br>
>>>>> image using 'wget' and there are dropped packets or intermittent<br>
>>>>> network issues.<br>
>>>>> <br>
>>>>> My thinking is to start using the swift client to download operator<br>
>>>>> LPs by default instead of wget. The swift client already implements<br>
>>>>> retry logic, downloading large images in chunks, etc. This means we<br>
>>>>> would not get the niceties of using publicly accessible urls. However,<br>
>>>>> the feature will be more reliable and robust.<br>
>>>>> <br>
>>>>> The implementation would be as follows:<br>
>>>>> • We'll use the existing service tenant configuration available<br>
>>>>> in the solum config file to authenticate and store operator<br>
>>>>> languagepacks using the swift client. We were using a different tenant<br>
>>>>> to build and host LPs, but now that we require the tenants credentials<br>
>>>>> in the config file, it's best to reuse the existing service tenant<br>
>>>>> creds. Note: If we don't, we'll have 3 separate tenants to maintain.<br>
>>>>> • Service tenant<br>
>>>>> • Operator languagepack tenant<br>
>>>>> • Global admin tenant<br>
>>>>> • I'll keep the option to download the operator languagepacks<br>
>>>>> from a publicly available url. I'll allow operators to choose which<br>
>>>>> method they want to use by changing a setting in the solum config file.<br>
>>>>> FYI: In my tests, I've noticed that downloading an image using the<br>
>>>>> swift client is twice as fast as downloading the same image using<br>
>>>>> 'wget' from a CDN url.<br>
>>>>> <br>
>>>>> Thanks,<br>
>>>>> Murali<br>
>>>>> <br>
>>>>> <br>
>>>>> ________________________________________________________________________<br>
>>>>> __<br>
>>>>> OpenStack Development Mailing List (not for usage questions)<br>
>>>>> Unsubscribe:<br>
>>>>> OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
>>>>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
>>>> <br>
>>>> <br>
>>>> _________________________________________________________________________<br>
>>>> _<br>
>>>> OpenStack Development Mailing List (not for usage questions)<br>
>>>> Unsubscribe:<br>
>>>> OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
>>>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
>>> <br>
>>> __________________________________________________________________________<br>
>>> OpenStack Development Mailing List (not for usage questions)<br>
>>> Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
>>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
>>> __________________________________________________________________________<br>
>>> OpenStack Development Mailing List (not for usage questions)<br>
>>> Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
>>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
>> <br>
>> __________________________________________________________________________<br>
>> OpenStack Development Mailing List (not for usage questions)<br>
>> Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
>> __________________________________________________________________________<br>
>> OpenStack Development Mailing List (not for usage questions)<br>
>> Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
>> __________________________________________________________________________<br>
>> OpenStack Development Mailing List (not for usage questions)<br>
>> Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
>> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
> <br>
> __________________________________________________________________________<br>
> OpenStack Development Mailing List (not for usage questions)<br>
> Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
> __________________________________________________________________________<br>
> OpenStack Development Mailing List (not for usage questions)<br>
> Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
> <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: OpenStack-dev-request@lists.openstack.org?subject:unsubscribe<br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
</div>
</span></font></div>
</div>
</body>
</html>