<div dir="ltr"><div><div><div><div><div><div><div><div><div><div><div>Wow. Thank you all for the response!<br><br></div>Well, Installing Kilo because I started this last August and have worked on it gradually. Should probably do Liberty. <br><br></div>Yes, I get timesouts between Nova and "model service" which I assume is Glance.<br><br><br>Message timeouts and recoveries for large images. 100GB CentOS server.<br><br>2015-12-20 18:19:33.759 3755 TRACE nova.servicegroup.drivers.db MessagingTimeout: Timed out waiting for a reply to message ID 34fe85f35bf84908b516b8e79110f516.<br>2015-12-20 18:19:33.759 3755 TRACE nova.servicegroup.drivers.db <br>2015-12-20 18:19:33.895 3755 WARNING nova.openstack.common.loopingcall [req-37a3f586-84de-4a1b-9257-1f968ec99273 - - - - -] task <bound method DbDriver._report_state of <nova.servicegroup.drivers.db.DbDriver object at 0x3d3fb10>> run outlasted interval by 8.43 sec<br>2015-12-20 18:19:33.896 3755 INFO nova.scheduler.client.report [req-9f0894b2-95f4-40f1-b9b0-83788d0e75d5 - - - - -] Compute_service record updated for ('<a href="http://maersk.chrishull.com">maersk.chrishull.com</a>', '<a href="http://maersk.chrishull.com">maersk.chrishull.com</a>')<br>2015-12-20 18:19:33.896 3755 INFO nova.compute.resource_tracker [req-9f0894b2-95f4-40f1-b9b0-83788d0e75d5 - - - - -] Compute_service record updated for maersk.chrishull.com:m<a href="http://aersk.chrishull.com">aersk.chrishull.com</a><br>2015-12-20 18:19:54.642 3755 ERROR nova.servicegroup.drivers.db [req-37a3f586-84de-4a1b-9257-1f968ec99273 - - - - -] Recovered model server connection!<br><br><br></div>Perhaps this doesn't happen with smaller images like Cirros. <br><br></div>Here's my Glance.conf<br><br></div>Is this some sort of REST timeout? RabbitMQ?<br>========================================================================</div>======================== glance-api.conf<br>========================================================================<br>[DEFAULT]<br>notification_driver = noop<br><br># Show more verbose log output (sets INFO log level output)<br>verbose=True<br><br># Show debugging output in logs (sets DEBUG log level output)<br>#debug=False<br><br># Maximum image size (in bytes) that may be uploaded through the<br># Glance API server. Defaults to 1 TB.<br># WARNING: this value should only be increased after careful consideration<br># and must be set to a value under 8 EB (9223372036854775808).<br>#image_size_cap=1099511627776<br><br># Address to bind the API server<br>#bind_host=0.0.0.0<br><br># Port the bind the API server to<br>#bind_port=9292<br><br># Log to this file. Make sure you do not set the same log file for both the API<br># and registry servers!<br>#<br># If `log_file` is omitted and `use_syslog` is false, then log messages are<br># sent to stdout as a fallback.<br>#log_file=/var/log/glance/api.log<br><br># Backlog requests when creating socket<br>#backlog=4096<br><br># TCP_KEEPIDLE value in seconds when creating socket.<br># Not supported on OS X.<br>#tcp_keepidle=600<br><br># Timeout (in seconds) for client connections' socket operations. If an incoming<br># connection is idle for this period it will be closed. A value of "0"<br># means wait forever.<br>#client_socket_timeout=0<br><br># API to use for accessing data. Default value points to sqlalchemy<br># package, it is also possible to use: glance.db.registry.api<br># data_api = glance.db.sqlalchemy.api<br><br># The number of child process workers that will be<br># created to service API requests. The default will be<br># equal to the number of CPUs available. (integer value)<br>#workers=4<br><br># Maximum line size of message headers to be accepted.<br># max_header_line may need to be increased when using large tokens<br># (typically those generated by the Keystone v3 API with big service<br># catalogs)<br># max_header_line = 16384<br><br># Role used to identify an authenticated user as administrator<br>#admin_role=admin<br><br># Allow unauthenticated users to access the API with read-only<br># privileges. This only applies when using ContextMiddleware.<br>#allow_anonymous_access=False<br><br># Allow access to version 1 of glance api<br>#enable_v1_api=True<br><br># Allow access to version 2 of glance api<br>#enable_v2_api=True<br><br># Return the URL that references where the data is stored on<br># the backend storage system. For example, if using the<br># file system store a URL of 'file:///path/to/image' will<br># be returned to the user in the 'direct_url' meta-data field.<br># The default value is false.<br>#show_image_direct_url=False<br><br># Send headers containing user and tenant information when making requests to<br># the v1 glance registry. This allows the registry to function as if a user is<br># authenticated without the need to authenticate a user itself using the<br># auth_token middleware.<br># The default value is false.<br>#send_identity_headers=False<br><br># Supported values for the 'container_format' image attribute<br>#container_formats=ami,ari,aki,bare,ovf,ova<br><br># Supported values for the 'disk_format' image attribute<br>#disk_formats=ami,ari,aki,vhd,vmdk,raw,qcow2,vdi,iso<br><br># Property Protections config file<br># This file contains the rules for property protections and the roles/policies<br># associated with it.<br># If this config value is not specified, by default, property protections<br># won't be enforced.<br># If a value is specified and the file is not found, then the glance-api<br># service will not start.<br>#property_protection_file =<br><br># Specify whether 'roles' or 'policies' are used in the<br># property_protection_file.<br># The default value for property_protection_rule_format is 'roles'.<br>#property_protection_rule_format=roles<br><br># This value sets what strategy will be used to determine the image location<br># order. Currently two strategies are packaged with Glance 'location_order'<br># and 'store_type'.<br>#location_strategy=location_order<br><br><br># Public url to use for versions endpoint. The default is None,<br># which will use the request's host_url attribute to populate the URL base.<br># If Glance is operating behind a proxy, you will want to change this to<br># represent the proxy's URL.<br>#public_endpoint=<None><br><br># http_keepalive option. If False, server will return the header<br># "Connection: close", If True, server will return "Connection: Keep-Alive"<br># in its responses. In order to close the client socket connection<br># explicitly after the response is sent and read successfully by the client,<br># you simply have to set this option to False when you create a wsgi server.<br>#http_keepalive=True<br><br># ================= Syslog Options ============================<br><br># Send logs to syslog (/dev/log) instead of to file specified<br># by `log_file`<br>#use_syslog=False<br><br># Facility to use. If unset defaults to LOG_USER.<br>#syslog_log_facility=LOG_LOCAL0<br><br># ================= SSL Options ===============================<br><br># Certificate file to use when starting API server securely<br>#cert_file=/path/to/certfile<br><br># Private key file to use when starting API server securely<br>#key_file=/path/to/keyfile<br><br># CA certificate file to use to verify connecting clients<br>#ca_file=/path/to/cafile<br><br># ================= Security Options ==========================<br><br># AES key for encrypting store 'location' metadata, including<br># -- if used -- Swift or S3 credentials<br># Should be set to a random string of length 16, 24 or 32 bytes<br>#metadata_encryption_key=<16, 24 or 32 char registry metadata key><br><br><br># Digest algorithm which will be used for digital signature, the default is<br># sha1 in Kilo for a smooth upgrade process, and it will be updated with<br># sha256 in next release(L). Use command<br># "openssl list-message-digest-algorithms" to get the available algorithms<br># supported by the version of OpenSSL on the platform. Examples are 'sha1',<br># 'sha256', 'sha512', etc.<br>#digest_algorithm=sha1<br><br># ============ Registry Options ===============================<br><br># Address to find the registry server<br>#registry_host=0.0.0.0<br><br># Port the registry server is listening on<br>#registry_port=9191<br><br># What protocol to use when connecting to the registry server?<br># Set to https for secure HTTP communication<br>#registry_client_protocol=http<br><br># The path to the key file to use in SSL connections to the<br># registry server, if any. Alternately, you may set the<br># GLANCE_CLIENT_KEY_FILE environ variable to a filepath of the key file<br>#registry_client_key_file=/path/to/key/file<br><br># The path to the cert file to use in SSL connections to the<br># registry server, if any. Alternately, you may set the<br># GLANCE_CLIENT_CERT_FILE environ variable to a filepath of the cert file<br>#registry_client_cert_file=/path/to/cert/file<br><br># The path to the certifying authority cert file to use in SSL connections<br># to the registry server, if any. Alternately, you may set the<br># GLANCE_CLIENT_CA_FILE environ variable to a filepath of the CA cert file<br>#registry_client_ca_file=/path/to/ca/file<br><br># When using SSL in connections to the registry server, do not require<br># validation via a certifying authority. This is the registry's equivalent of<br># specifying --insecure on the command line using glanceclient for the API<br># Default: False<br>#registry_client_insecure=False<br><br># The period of time, in seconds, that the API server will wait for a registry<br># request to complete. A value of '0' implies no timeout.<br># Default: 600<br>#registry_client_timeout=600<br><br># Enable DEBUG log messages from sqlalchemy which prints every database<br># query and response.<br># Default: False<br>#sqlalchemy_debug=True<br><br># Pass the user's token through for API requests to the registry.<br># Default: True<br>#use_user_token=True<br><br># If 'use_user_token' is not in effect then admin credentials<br># can be specified. Requests to the registry on behalf of<br># the API will use these credentials.<br># Admin user name<br>#admin_user=%SERVICE_USER%<br># Admin password<br>#admin_password=%SERVICE_PASSWORD%<br># Admin tenant name<br>#admin_tenant_name=%SERVICE_TENANT_NAME%<br># Keystone endpoint<br>#auth_url=None<br># Keystone region<br>#auth_region=None<br># Auth strategy<br>#auth_strategy=keystone<br><br># ============ Notification System Options =====================<br><br># Driver or drivers to handle sending notifications. Set to<br># 'messaging' to send notifications to a message queue.<br># notification_driver = noop<br><br># Default publisher_id for outgoing notifications.<br># default_publisher_id = image.localhost<br><br># List of disabled notifications. A notification can be given either as a<br># notification type to disable a single event, or as a notification group<br># prefix to disable all events within a group.<br># Example: if this config option is set to<br># ["image.create", "metadef_namespace"], then "image.create" notification will<br># not be sent after image is created and none of the notifications for<br># metadefinition namespaces will be sent.<br># disabled_notifications = []<br><br># Messaging driver used for 'messaging' notifications driver<br># rpc_backend = 'rabbit'<br><br># Configuration options if sending notifications via rabbitmq (these are<br># the defaults)<br>#rabbit_host=localhost<br>#rabbit_port=5672<br>#rabbit_use_ssl=false<br>#rabbit_userid=guest<br>#rabbit_password=guest<br>#rabbit_virtual_host=/<br>#rabbit_notification_exchange=glance<br>#rabbit_notification_topic=notifications<br>#rabbit_durable_queues=False<br><br># Configuration options if sending notifications via Qpid (these are<br># the defaults)<br>#qpid_notification_exchange=glance<br>#qpid_notification_topic=notifications<br>#qpid_hostname=localhost<br>#qpid_port=5672<br>#qpid_username=<br>#qpid_password=<br>#qpid_sasl_mechanisms=<br>#qpid_reconnect_timeout=0<br>#qpid_reconnect_limit=0<br>#qpid_reconnect_interval_min=0<br>#qpid_reconnect_interval_max=0<br>#qpid_reconnect_interval=0<br>#qpid_heartbeat=5<br># Set to 'ssl' to enable SSL<br>#qpid_protocol=tcp<br>#qpid_tcp_nodelay=True<br><br># ============ Delayed Delete Options =============================<br><br># Turn on/off delayed delete<br>#delayed_delete=False<br><br># Delayed delete time in seconds<br>#scrub_time=43200<br><br># Directory that the scrubber will use to remind itself of what to delete<br># Make sure this is also set in glance-scrubber.conf<br>#scrubber_datadir=/var/lib/glance/scrubber<br><br># =============== Quota Options ==================================<br><br># The maximum number of image members allowed per image<br>#image_member_quota=128<br><br># The maximum number of image properties allowed per image<br>#image_property_quota=128<br><br># The maximum number of tags allowed per image<br>#image_tag_quota=128<br><br># The maximum number of locations allowed per image<br>#image_location_quota=10<br><br># Set a system wide quota for every user. This value is the total number<br># of bytes that a user can use across all storage systems. A value of<br># 0 means unlimited.<br>#user_storage_quota=0<br><br># =============== Image Cache Options =============================<br><br># Base directory that the Image Cache uses<br>#image_cache_dir=/var/lib/glance/image-cache/<br><br># =============== Policy Options ==================================<br><br>[oslo_policy]<br># The JSON file that defines policies.<br># Deprecated group/name - [DEFAULT]/policy_file<br>#policy_file=policy.json<br><br># Default rule. Enforced when a requested rule is not found.<br># Deprecated group/name - [DEFAULT]/policy_default_rule<br>#policy_default_rule=default<br><br># Directories where policy configuration files are stored.<br># They can be relative to any directory in the search path<br># defined by the config_dir option, or absolute paths.<br># The file defined by policy_file must exist for these<br># directories to be searched.<br># Deprecated group/name - [DEFAULT]/policy_dirs<br>#policy_dirs=policy.d<br><br># =============== Database Options =================================<br><br>[database]<br># The file name to use with SQLite (string value)<br>#sqlite_db=oslo.sqlite<br><br># If True, SQLite uses synchronous mode (boolean value)<br>#sqlite_synchronous=True<br><br># The backend to use for db (string value)<br># Deprecated group/name - [DEFAULT]/db_backend<br>#backend=sqlalchemy<br><br># The SQLAlchemy connection string used to connect to the<br># database (string value)<br># Deprecated group/name - [DEFAULT]/sql_connection<br># Deprecated group/name - [DATABASE]/sql_connection<br># Deprecated group/name - [sql]/connection<br>#connection=mysql://glance:glance@localhost/glance<br>connection = mysql://glance:openg00dle232@controller/glance<br><br># The SQL mode to be used for MySQL sessions. This option,<br># including the default, overrides any server-set SQL mode. To<br># use whatever SQL mode is set by the server configuration,<br># set this to no value. Example: mysql_sql_mode= (string<br># value)<br>#mysql_sql_mode=TRADITIONAL<br><br># Timeout before idle sql connections are reaped (integer<br># value)<br># Deprecated group/name - [DEFAULT]/sql_idle_timeout<br># Deprecated group/name - [DATABASE]/sql_idle_timeout<br># Deprecated group/name - [sql]/idle_timeout<br>#idle_timeout=3600<br><br># Minimum number of SQL connections to keep open in a pool<br># (integer value)<br># Deprecated group/name - [DEFAULT]/sql_min_pool_size<br># Deprecated group/name - [DATABASE]/sql_min_pool_size<br>#min_pool_size=1<br><br># Maximum number of SQL connections to keep open in a pool<br># (integer value)<br># Deprecated group/name - [DEFAULT]/sql_max_pool_size<br># Deprecated group/name - [DATABASE]/sql_max_pool_size<br>#max_pool_size=<None><br><br># Maximum db connection retries during startup. (setting -1<br># implies an infinite retry count) (integer value)<br># Deprecated group/name - [DEFAULT]/sql_max_retries<br># Deprecated group/name - [DATABASE]/sql_max_retries<br>#max_retries=10<br><br># Interval between retries of opening a sql connection<br># (integer value)<br># Deprecated group/name - [DEFAULT]/sql_retry_interval<br># Deprecated group/name - [DATABASE]/reconnect_interval<br>#retry_interval=10<br><br># If set, use this value for max_overflow with sqlalchemy<br># (integer value)<br># Deprecated group/name - [DEFAULT]/sql_max_overflow<br># Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow<br>#max_overflow=<None><br><br># Verbosity of SQL debugging information. 0=None,<br># 100=Everything (integer value)<br># Deprecated group/name - [DEFAULT]/sql_connection_debug<br>#connection_debug=0<br><br># Add python stack traces to SQL as comment strings (boolean<br># value)<br># Deprecated group/name - [DEFAULT]/sql_connection_trace<br>#connection_trace=False<br><br># If set, use this value for pool_timeout with sqlalchemy<br># (integer value)<br># Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout<br>#pool_timeout=<None><br><br># Enable the experimental use of database reconnect on<br># connection lost (boolean value)<br>#use_db_reconnect=False<br><br># seconds between db connection retries (integer value)<br>#db_retry_interval=1<br><br># Whether to increase interval between db connection retries,<br># up to db_max_retry_interval (boolean value)<br>#db_inc_retry_interval=True<br><br># max seconds between db connection retries, if<br># db_inc_retry_interval is enabled (integer value)<br>#db_max_retry_interval=10<br><br># maximum db connection retries before error is raised.<br># (setting -1 implies an infinite retry count) (integer value)<br>#db_max_retries=20<br><br>[oslo_concurrency]<br><br># Enables or disables inter-process locks. (boolean value)<br># Deprecated group/name - [DEFAULT]/disable_process_locking<br>#disable_process_locking=false<br><br># Directory to use for lock files. For security, the specified<br># directory should only be writable by the user running the processes<br># that need locking. It could be read from environment variable<br># OSLO_LOCK_PATH. This setting needs to be the same for both<br># glance-scrubber and glance-api service. Default to a temp directory.<br># Deprecated group/name - [DEFAULT]/lock_path (string value)<br>#lock_path=/tmp<br><br>[keystone_authtoken]<br>#identity_uri=<a href="http://127.0.0.1:35357">http://127.0.0.1:35357</a><br>#admin_tenant_name=%SERVICE_TENANT_NAME%<br>#admin_user=%SERVICE_USER%<br>#admin_password=%SERVICE_PASSWORD%<br>#revocation_cache_time=10<br><br>auth_uri = <a href="http://controller:5000">http://controller:5000</a><br>auth_url = <a href="http://controller:35357">http://controller:35357</a><br>auth_plugin = password<br>project_domain_id = default<br>user_domain_id = default<br>project_name = service<br>username = glance<br>password = sleestack<br><br><br>[paste_deploy]<br># Name of the paste configuration file that defines the available pipelines<br>#config_file=/usr/share/glance/glance-api-dist-paste.ini<br><br># Partial name of a pipeline in your paste configuration file with the<br># service name removed. For example, if your paste section name is<br># [pipeline:glance-api-keystone], you would configure the flavor below<br># as 'keystone'.<br>#flavor=<br>flavor = keystone<br>[store_type_location_strategy]<br># The scheme list to use to get store preference order. The scheme must be<br># registered by one of the stores defined by the 'stores' config option.<br># This option will be applied when you using 'store_type' option as image<br># location strategy defined by the 'location_strategy' config option.<br>#store_type_preference =<br><br>[profiler]<br># If False fully disable profiling feature.<br>#enabled=False<br><br># If False doesn't trace SQL requests.<br>#trace_sqlalchemy=False<br><br>[task]<br># ================= Glance Tasks Options ============================<br><br># Specifies how long (in hours) a task is supposed to live in the tasks DB<br># after succeeding or failing before getting soft-deleted.<br># The default value for task_time_to_live is 48 hours.<br># task_time_to_live = 48<br><br># Specifies which task executor to be used to run the task scripts.<br># The default value for task_executor is taskflow.<br># task_executor = taskflow<br><br># Work dir for asynchronous task operations. The directory set here<br># will be used to operate over images - normally before they are<br># imported in the destination store. When providing work dir, make sure<br># enough space is provided for concurrent tasks to run efficiently<br># without running out of space. A rough estimation can be done by<br># multiplying the number of `max_workers` - or the N of workers running<br># - by an average image size (e.g 500MB). The image size estimation<br># should be done based on the average size in your deployment. Note that<br># depending on the tasks running you may need to multiply this number by<br># some factor depending on what the task does. For example, you may want<br># to double the available size if image conversion is enabled. All this<br># being said, remember these are just estimations and you should do them<br># based on the worst case scenario and be prepared to act in case they<br># were wrong.<br># work_dir=None<br><br># Specifies the maximum number of eventlet threads which can be spun up by<br># the eventlet based task executor to perform execution of Glance tasks.<br># DEPRECATED: Use [taskflow_executor]/max_workers instead.<br># eventlet_executor_pool_size = 1000<br><br>[taskflow_executor]<br># The mode in which the engine will run. Can be 'default', 'serial',<br># 'parallel' or 'worker-based'<br>#engine_mode=serial<br><br># The number of parallel activities executed at the same time by<br># the engine. The value can be greater than one when the engine mode is<br># 'parallel' or 'worker-based', otherwise this value will be ignored.<br>#max_workers=10<br><br>[glance_store]<br><br><br>default_store = file<br>filesystem_store_datadir = /home/glance/images/<br><br><br># List of which store classes and store class locations are<br># currently known to glance at startup.<br># Deprecated group/name - [DEFAULT]/known_stores<br># Existing but disabled stores:<br># glance.store.rbd.Store,<br># glance.store.s3.Store,<br># glance.store.swift.Store,<br># glance.store.sheepdog.Store,<br># glance.store.cinder.Store,<br># glance.store.gridfs.Store,<br># glance.store.vmware_datastore.Store,<br>#stores=glance.store.filesystem.Store,<br># glance.store.http.Store<br><br># Which backend scheme should Glance use by default is not specified<br># in a request to add a new image to Glance? Known schemes are determined<br># by the stores option.<br># Deprecated group/name - [DEFAULT]/default_store<br># Default: 'file'<br>#default_store=file<br><br># ============ Filesystem Store Options ========================<br><br># Directory that the Filesystem backend store<br># writes image data to<br>#filesystem_store_datadir=/var/lib/glance/images/<br><br># A list of directories where image data can be stored.<br># This option may be specified multiple times for specifying multiple store<br># directories. Either one of filesystem_store_datadirs or<br># filesystem_store_datadir option is required. A priority number may be given<br># after each directory entry, separated by a ":".<br># When adding an image, the highest priority directory will be selected, unless<br># there is not enough space available in cases where the image size is already<br># known. If no priority is given, it is assumed to be zero and the directory<br># will be considered for selection last. If multiple directories have the same<br># priority, then the one with the most free space available is selected.<br># If same store is specified multiple times then BadStoreConfiguration<br># exception will be raised.<br>#filesystem_store_datadirs=/var/lib/glance/images/:1<br><br># A path to a JSON file that contains metadata describing the storage<br># system. When show_multiple_locations is True the information in this<br># file will be returned with any location that is contained in this<br># store.<br>#filesystem_store_metadata_file=None<br><br># ============ Swift Store Options =============================<br><br># Version of the authentication service to use<br># Valid versions are '2' for keystone and '1' for swauth and rackspace<br>#swift_store_auth_version=2<br><br># Address where the Swift authentication service lives<br># Valid schemes are 'http://' and 'https://'<br># If no scheme specified, default to 'https://'<br># For swauth, use something like '<a href="http://127.0.0.1:8080/v1.0/">127.0.0.1:8080/v1.0/</a>'<br>#swift_store_auth_address=<a href="http://127.0.0.1:5000/v2.0/">127.0.0.1:5000/v2.0/</a><br><br># User to authenticate against the Swift authentication service<br># If you use Swift authentication service, set it to 'account':'user'<br># where 'account' is a Swift storage account and 'user'<br># is a user in that account<br>#swift_store_user=jdoe:jdoe<br><br># Auth key for the user authenticating against the<br># Swift authentication service<br>#swift_store_key=a86850deb2742ec3cb41518e26aa2d89<br><br># Container within the account that the account should use<br># for storing images in Swift<br>#swift_store_container=glance<br><br># Do we create the container if it does not exist?<br>#swift_store_create_container_on_put=False<br><br># What size, in MB, should Glance start chunking image files<br># and do a large object manifest in Swift? By default, this is<br># the maximum object size in Swift, which is 5GB<br>#swift_store_large_object_size=5120<br><br># swift_store_config_file = glance-swift.conf<br># This file contains references for each of the configured<br># Swift accounts/backing stores. If used, this option can prevent<br># credentials being stored in the database. Using Swift references<br># is disabled if this config is left blank.<br><br># The reference to the default Swift parameters to use for adding new images.<br># default_swift_reference = 'ref1'<br><br># When doing a large object manifest, what size, in MB, should<br># Glance write chunks to Swift? This amount of data is written<br># to a temporary disk buffer during the process of chunking<br># the image file, and the default is 200MB<br>#swift_store_large_object_chunk_size=200<br><br># If set, the configured endpoint will be used. If None, the storage URL<br># from the auth response will be used. The location of an object is<br># obtained by appending the container and object to the configured URL.<br>#<br># swift_store_endpoint = <a href="https://www.example.com/v1/not_a_container">https://www.example.com/v1/not_a_container</a><br>#swift_store_endpoint =<br><br># If set to True enables multi-tenant storage mode which causes Glance images<br># to be stored in tenant specific Swift accounts.<br>#swift_store_multi_tenant=False<br><br># If set to an integer value between 1 and 32, a single-tenant store will<br># use multiple containers to store images. If set to the default value of 0,<br># only a single container will be used. Multi-tenant stores are not affected<br># by this option. The max number of containers that will be used to store<br># images is approximately 16^N where N is the value of this option. Discuss<br># the impact of this with your swift deployment team, as this option is only<br># beneficial in the largest of deployments where swift rate limiting can lead<br># to unwanted throttling on a single container.<br>#swift_store_multiple_containers_seed=0<br><br># A list of swift ACL strings that will be applied as both read and<br># write ACLs to the containers created by Glance in multi-tenant<br># mode. This grants the specified tenants/users read and write access<br># to all newly created image objects. The standard swift ACL string<br># formats are allowed, including:<br># <tenant_id>:<username><br># <tenant_name>:<username><br># *:<username><br># Multiple ACLs can be combined using a comma separated list, for<br># example: swift_store_admin_tenants = service:glance,*:admin<br>#swift_store_admin_tenants =<br><br># The region of the swift endpoint to be used for single tenant. This setting<br># is only necessary if the tenant has multiple swift endpoints.<br>#swift_store_region =<br><br># If set to False, disables SSL layer compression of https swift requests.<br># Setting to 'False' may improve performance for images which are already<br># in a compressed format, eg qcow2. If set to True, enables SSL layer<br># compression (provided it is supported by the target swift proxy).<br>#swift_store_ssl_compression=True<br><br># The number of times a Swift download will be retried before the<br># request fails<br>#swift_store_retry_get_count=0<br><br># Bypass SSL verification for Swift<br>#swift_store_auth_insecure=False<br><br># The path to a CA certificate bundle file to use for SSL verification when<br># communicating with Swift.<br>#swift_store_cacert =<br><br># ============ S3 Store Options =============================<br><br># Address where the S3 authentication service lives<br># Valid schemes are 'http://' and 'https://'<br># If no scheme specified, default to 'http://'<br>#s3_store_host=<a href="http://s3.amazonaws.com">s3.amazonaws.com</a><br><br># User to authenticate against the S3 authentication service<br>#s3_store_access_key=<20-charAWSaccesskey><br><br># Auth key for the user authenticating against the<br># S3 authentication service<br>#s3_store_secret_key=<40-charAWSsecretkey><br><br># Container within the account that the account should use<br># for storing images in S3. Note that S3 has a flat namespace,<br># so you need a unique bucket name for your glance images. An<br># easy way to do this is append your AWS access key to "glance".<br># S3 buckets in AWS *must* be lowercased, so remember to lowercase<br># your AWS access key if you use it in your bucket name below!<br>#s3_store_bucket=<lowercased20-charawsaccesskey>glance<br><br># Do we create the bucket if it does not exist?<br>#s3_store_create_bucket_on_put=False<br><br># When sending images to S3, the data will first be written to a<br># temporary buffer on disk. By default the platform's temporary directory<br># will be used. If required, an alternative directory can be specified here.<br>#s3_store_object_buffer_dir=/path/to/dir<br><br># When forming a bucket url, boto will either set the bucket name as the<br># subdomain or as the first token of the path. Amazon's S3 service will<br># accept it as the subdomain, but Swift's S3 middleware requires it be<br># in the path. Set this to 'path' or 'subdomain' - defaults to 'subdomain'.<br>#s3_store_bucket_url_format=subdomain<br><br># Size, in MB, should S3 start chunking image files<br># and do a multipart upload in S3. The default is 100MB.<br>#s3_store_large_object_size=100<br><br># Multipart upload part size, in MB, should S3 use when uploading<br># parts. The size must be greater than or equal to<br># 5MB. The default is 10MB.<br>#s3_store_large_object_chunk_size=10<br><br># The number of thread pools to perform a multipart upload<br># in S3. The default is 10.<br>#s3_store_thread_pools=10<br><br># ============ RBD Store Options =============================<br><br># Ceph configuration file path<br># If using cephx authentication, this file should<br># include a reference to the right keyring<br># in a client.<USER> section<br>#rbd_store_ceph_conf=/etc/ceph/ceph.conf<br><br># RADOS user to authenticate as (only applicable if using cephx)<br># If <None>, a default will be chosen based on the client. section<br># in rbd_store_ceph_conf<br>#rbd_store_user=<None><br><br># RADOS pool in which images are stored<br>#rbd_store_pool=images<br><br># RADOS images will be chunked into objects of this size (in megabytes).<br># For best performance, this should be a power of two<br>#rbd_store_chunk_size=8<br><br># ============ Sheepdog Store Options =============================<br><br>#sheepdog_store_address=localhost<br><br>#sheepdog_store_port=7000<br><br># Images will be chunked into objects of this size (in megabytes).<br># For best performance, this should be a power of two<br>#sheepdog_store_chunk_size=64<br><br># ============ Cinder Store Options ===============================<br><br># Info to match when looking for cinder in the service catalog<br># Format is : separated values of the form:<br># <service_type>:<service_name>:<endpoint_type> (string value)<br>#cinder_catalog_info=volume:cinder:publicURL<br><br># Override service catalog lookup with template for cinder endpoint<br># e.g. <a href="http://localhost:8776/v1/%(project_id)s">http://localhost:8776/v1/%(project_id)s</a> (string value)<br>#cinder_endpoint_template=<None><br><br># Region name of this node (string value)<br>#os_region_name=<None><br><br># Location of ca certicates file to use for cinder client requests<br># (string value)<br>#cinder_ca_certificates_file=<None><br><br># Number of cinderclient retries on failed http calls (integer value)<br>#cinder_http_retries=3<br><br># Allow to perform insecure SSL requests to cinder (boolean value)<br>#cinder_api_insecure=False<br><br># ============ VMware Datastore Store Options =====================<br><br># ESX/ESXi or vCenter Server target system.<br># The server value can be an IP address or a DNS name<br># e.g. 127.0.0.1, <a href="http://127.0.0.1:443">127.0.0.1:443</a>, <a href="http://www.vmware-infra.com">www.vmware-infra.com</a><br>#vmware_server_host=<None><br><br># Server username (string value)<br>#vmware_server_username=<None><br><br># Server password (string value)<br>#vmware_server_password=<None><br><br># Inventory path to a datacenter (string value)<br># Value optional when vmware_server_ip is an ESX/ESXi host: if specified<br># should be `ha-datacenter`.<br># Deprecated in favor of vmware_datastores.<br>#vmware_datacenter_path=<None><br><br># Datastore associated with the datacenter (string value)<br># Deprecated in favor of vmware_datastores.<br>#vmware_datastore_name=<None><br><br># A list of datastores where the image can be stored.<br># This option may be specified multiple times for specifying multiple<br># datastores. Either one of vmware_datastore_name or vmware_datastores is<br># required. The datastore name should be specified after its datacenter<br># path, separated by ":". An optional weight may be given after the datastore<br># name, separated again by ":". Thus, the required format becomes<br># <datacenter_path>:<datastore_name>:<optional_weight>.<br># When adding an image, the datastore with highest weight will be selected,<br># unless there is not enough free space available in cases where the image size<br># is already known. If no weight is given, it is assumed to be zero and the<br># directory will be considered for selection last. If multiple datastores have<br># the same weight, then the one with the most free space available is selected.<br>#vmware_datastores=<None><br><br># The number of times we retry on failures<br># e.g., socket error, etc (integer value)<br>#vmware_api_retry_count=10<br><br># The interval used for polling remote tasks<br># invoked on VMware ESX/VC server in seconds (integer value)<br>#vmware_task_poll_interval=5<br><br># Absolute path of the folder containing the images in the datastore<br># (string value)<br>#vmware_store_image_dir=/openstack_glance<br><br># Allow to perform insecure SSL requests to the target system (boolean value)<br>#vmware_api_insecure=False<br><br><br><br><br><br><br><br><br><br><br><br>========================================================================</div>================== glance-cache.conf<br>========================================================================<br><br>[DEFAULT]<br># Show more verbose log output (sets INFO log level output)<br>#verbose=True<br><br># Show debugging output in logs (sets DEBUG log level output)<br>#debug=False<br><br># Log to this file. Make sure you do not set the same log file for both the API<br># and registry servers!<br>#<br># If `log_file` is omitted and `use_syslog` is false, then log messages are<br># sent to stdout as a fallback.<br>#log_file=/var/log/glance/image-cache.log<br><br># Send logs to syslog (/dev/log) instead of to file specified by `log_file`<br>#use_syslog=False<br><br># Directory that the Image Cache writes data to<br>#image_cache_dir=/var/lib/glance/image-cache/<br><br># Number of seconds after which we should consider an incomplete image to be<br># stalled and eligible for reaping<br>#image_cache_stall_time=86400<br><br># The upper limit (the maximum size of accumulated cache in bytes) beyond<br># which pruner, if running, starts cleaning the images cache.<br>#image_cache_max_size=10737418240<br><br># Address to find the registry server<br>#registry_host=0.0.0.0<br><br># Port the registry server is listening on<br>#registry_port=9191<br><br># Auth settings if using Keystone<br># auth_url = <a href="http://127.0.0.1:5000/v2.0/">http://127.0.0.1:5000/v2.0/</a><br># admin_tenant_name = %SERVICE_TENANT_NAME%<br># admin_user = %SERVICE_USER%<br># admin_password = %SERVICE_PASSWORD%<br><br># List of which store classes and store class locations are<br># currently known to glance at startup.<br># known_stores = glance.store.filesystem.Store,<br># glance.store.http.Store,<br># glance.store.rbd.Store,<br># glance.store.s3.Store,<br># glance.store.swift.Store,<br># glance.store.sheepdog.Store,<br># glance.store.cinder.Store,<br># glance.store.vmware_datastore.Store,<br><br># ============ Filesystem Store Options ========================<br><br># Directory that the Filesystem backend store<br># writes image data to<br>#filesystem_store_datadir=/var/lib/glance/images/<br><br># ============ Swift Store Options =============================<br><br># Version of the authentication service to use<br># Valid versions are '2' for keystone and '1' for swauth and rackspace<br>#swift_store_auth_version=2<br><br># Address where the Swift authentication service lives<br># Valid schemes are 'http://' and 'https://'<br># If no scheme specified, default to 'https://'<br># For swauth, use something like '<a href="http://127.0.0.1:8080/v1.0/">127.0.0.1:8080/v1.0/</a>'<br>#swift_store_auth_address=<a href="http://127.0.0.1:5000/v2.0/">127.0.0.1:5000/v2.0/</a><br><br># User to authenticate against the Swift authentication service<br># If you use Swift authentication service, set it to 'account':'user'<br># where 'account' is a Swift storage account and 'user'<br># is a user in that account<br>#swift_store_user=jdoe:jdoe<br><br># Auth key for the user authenticating against the<br># Swift authentication service<br>#swift_store_key=a86850deb2742ec3cb41518e26aa2d89<br><br># Container within the account that the account should use<br># for storing images in Swift<br>#swift_store_container=glance<br><br># Do we create the container if it does not exist?<br>#swift_store_create_container_on_put=False<br><br># What size, in MB, should Glance start chunking image files<br># and do a large object manifest in Swift? By default, this is<br># the maximum object size in Swift, which is 5GB<br>#swift_store_large_object_size=5120<br><br># This file contains references for each of the configured<br># Swift accounts/backing stores. If used, this option can prevent<br># credentials being stored in the database. Using Swift references<br># is disabled if this config is left blank.<br>#swift_store_config_file=glance-swift.conf<br><br># The reference to the default Swift parameters to use for adding new images.<br>#default_swift_reference='ref1'<br><br># When doing a large object manifest, what size, in MB, should<br># Glance write chunks to Swift? This amount of data is written<br># to a temporary disk buffer during the process of chunking<br># the image file, and the default is 200MB<br>#swift_store_large_object_chunk_size=200<br><br># If set, the configured endpoint will be used. If None, the storage URL<br># from the auth response will be used. The location of an object is<br># obtained by appending the container and object to the configured URL.<br>#<br># swift_store_endpoint = <a href="https://www.example.com/v1/not_a_container">https://www.example.com/v1/not_a_container</a><br>#swift_store_endpoint=None<br><br># If set to True enables multi-tenant storage mode which causes Glance images<br># to be stored in tenant specific Swift accounts.<br>#swift_store_multi_tenant=False<br><br># A list of swift ACL strings that will be applied as both read and<br># write ACLs to the containers created by Glance in multi-tenant<br># mode. This grants the specified tenants/users read and write access<br># to all newly created image objects. The standard swift ACL string<br># formats are allowed, including:<br># <tenant_id>:<username><br># <tenant_name>:<username><br># *:<username><br># Multiple ACLs can be combined using a comma separated list, for<br># example: swift_store_admin_tenants = service:glance,*:admin<br>#swift_store_admin_tenants =<br><br># The region of the swift endpoint to be used for single tenant. This setting<br># is only necessary if the tenant has multiple swift endpoints.<br>#swift_store_region =<br><br># If set to False, disables SSL layer compression of https swift requests.<br># Setting to 'False' may improve performance for images which are already<br># in a compressed format, eg qcow2. If set to True, enables SSL layer<br># compression (provided it is supported by the target swift proxy).<br>#swift_store_ssl_compression=True<br><br># The number of times a Swift download will be retried before the<br># request fails<br>#swift_store_retry_get_count=0<br><br># Bypass SSL verification for Swift<br>#swift_store_auth_insecure=False<br><br># The path to a CA certificate bundle file to use for SSL verification when<br># communicating with Swift.<br>#swift_store_cacert =<br><br># ============ S3 Store Options =============================<br><br># Address where the S3 authentication service lives<br># Valid schemes are 'http://' and 'https://'<br># If no scheme specified, default to 'http://'<br>#s3_store_host=<a href="http://s3.amazonaws.com">s3.amazonaws.com</a><br><br># User to authenticate against the S3 authentication service<br>#s3_store_access_key=<20-charAWSaccesskey><br><br># Auth key for the user authenticating against the<br># S3 authentication service<br>#s3_store_secret_key=<40-charAWSsecretkey><br><br># Container within the account that the account should use<br># for storing images in S3. Note that S3 has a flat namespace,<br># so you need a unique bucket name for your glance images. An<br># easy way to do this is append your AWS access key to "glance".<br># S3 buckets in AWS *must* be lowercased, so remember to lowercase<br># your AWS access key if you use it in your bucket name below!<br>#s3_store_bucket=<lowercased20-charawsaccesskey>glance<br><br># Do we create the bucket if it does not exist?<br>#s3_store_create_bucket_on_put=False<br><br># When sending images to S3, the data will first be written to a<br># temporary buffer on disk. By default the platform's temporary directory<br># will be used. If required, an alternative directory can be specified here.<br># s3_store_object_buffer_dir = /path/to/dir<br><br># ============ Cinder Store Options ===========================<br><br># Info to match when looking for cinder in the service catalog<br># Format is : separated values of the form:<br># <service_type>:<service_name>:<endpoint_type> (string value)<br>#cinder_catalog_info=volume:cinder:publicURL<br><br># Override service catalog lookup with template for cinder endpoint<br># e.g. <a href="http://localhost:8776/v1/%(project_id)s">http://localhost:8776/v1/%(project_id)s</a> (string value)<br>#cinder_endpoint_template=<None><br><br># Region name of this node (string value)<br>#os_region_name=<None><br><br># Location of ca certicates file to use for cinder client requests<br># (string value)<br>#cinder_ca_certificates_file=<None><br><br># Number of cinderclient retries on failed http calls (integer value)<br>#cinder_http_retries=3<br><br># Allow to perform insecure SSL requests to cinder (boolean value)<br>#cinder_api_insecure=False<br><br># ============ VMware Datastore Store Options =====================<br><br># ESX/ESXi or vCenter Server target system.<br># The server value can be an IP address or a DNS name<br># e.g. 127.0.0.1, <a href="http://127.0.0.1:443">127.0.0.1:443</a>, <a href="http://www.vmware-infra.com">www.vmware-infra.com</a><br>#vmware_server_host=<None><br><br># Server username (string value)<br>#vmware_server_username=<None><br><br># Server password (string value)<br>#vmware_server_password=<None><br><br># Inventory path to a datacenter (string value)<br># Value optional when vmware_server_ip is an ESX/ESXi host: if specified<br># should be `ha-datacenter`.<br>#vmware_datacenter_path=<None><br><br># Datastore associated with the datacenter (string value)<br>#vmware_datastore_name=<None><br><br># The number of times we retry on failures<br># e.g., socket error, etc (integer value)<br>#vmware_api_retry_count=10<br><br># The interval used for polling remote tasks<br># invoked on VMware ESX/VC server in seconds (integer value)<br>#vmware_task_poll_interval=5<br><br># Absolute path of the folder containing the images in the datastore<br># (string value)<br>#vmware_store_image_dir=/openstack_glance<br><br># Allow to perform insecure SSL requests to the target system (boolean value)<br>#vmware_api_insecure=False<br><br># ================= Security Options ==========================<br><br># AES key for encrypting store 'location' metadata, including<br># -- if used -- Swift or S3 credentials<br># Should be set to a random string of length 16, 24 or 32 bytes<br># metadata_encryption_key = <16, 24 or 32 char registry metadata key><br><br># =============== Policy Options ==============================<br><br>[oslo_policy]<br># The JSON file that defines policies.<br># Deprecated group/name - [DEFAULT]/policy_file<br>#policy_file=policy.json<br><br># Default rule. Enforced when a requested rule is not found.<br># Deprecated group/name - [DEFAULT]/policy_default_rule<br>#policy_default_rule=default<br><br># Directories where policy configuration files are stored.<br># They can be relative to any directory in the search path<br># defined by the config_dir option, or absolute paths.<br># The file defined by policy_file must exist for these<br># directories to be searched.<br># Deprecated group/name - [DEFAULT]/policy_dirs<br>#policy_dirs=policy.d<br><br><br><br><br><br><br><br>========================================================================</div>==================== glance-registry.conf<br>========================================================================<br><br>[DEFAULT]<br><br>notification_driver = noop<br><br># Show more verbose log output (sets INFO log level output)<br>verbose=True<br><br># Show debugging output in logs (sets DEBUG log level output)<br>#debug=False<br><br># Address to bind the registry server<br>#bind_host=0.0.0.0<br><br># Port the bind the registry server to<br>#bind_port=9191<br><br># Log to this file. Make sure you do not set the same log file for both the API<br># and registry servers!<br>#<br># If `log_file` is omitted and `use_syslog` is false, then log messages are<br># sent to stdout as a fallback.<br>#log_file=/var/log/glance/registry.log<br><br># Backlog requests when creating socket<br>#backlog=4096<br><br># TCP_KEEPIDLE value in seconds when creating socket.<br># Not supported on OS X.<br>#tcp_keepidle=600<br><br># Timeout (in seconds) for client connections' socket operations. If an incoming<br># connection is idle for this period it will be closed. A value of "0"<br># means wait forever.<br>#client_socket_timeout=0<br><br># API to use for accessing data. Default value points to sqlalchemy<br># package.<br>#data_api=glance.db.sqlalchemy.api<br><br># The number of child process workers that will be<br># created to service Registry requests. The default will be<br># equal to the number of CPUs available. (integer value)<br>#workers=None<br><br># Enable Registry API versions individually or simultaneously<br>#enable_v1_registry=True<br>#enable_v2_registry=True<br><br># Limit the api to return `param_limit_max` items in a call to a container. If<br># a larger `limit` query param is provided, it will be reduced to this value.<br>#api_limit_max=1000<br><br># If a `limit` query param is not provided in an api request, it will<br># default to `limit_param_default`<br>#limit_param_default=25<br><br># Role used to identify an authenticated user as administrator<br>#admin_role=admin<br><br># Enable DEBUG log messages from sqlalchemy which prints every database<br># query and response.<br># Default: False<br>#sqlalchemy_debug=True<br><br># http_keepalive option. If False, server will return the header<br># "Connection: close", If True, server will return "Connection: Keep-Alive"<br># in its responses. In order to close the client socket connection<br># explicitly after the response is sent and read successfully by the client,<br># you simply have to set this option to False when you create a wsgi server.<br>#http_keepalive=True<br><br># ================= Syslog Options ============================<br><br># Send logs to syslog (/dev/log) instead of to file specified<br># by `log_file`<br>#use_syslog=False<br><br># Facility to use. If unset defaults to LOG_USER.<br>#syslog_log_facility=LOG_LOCAL1<br><br># ================= SSL Options ===============================<br><br># Certificate file to use when starting registry server securely<br>#cert_file=/path/to/certfile<br><br># Private key file to use when starting registry server securely<br>#key_file=/path/to/keyfile<br><br># CA certificate file to use to verify connecting clients<br>#ca_file=/path/to/cafile<br><br># ============ Notification System Options =====================<br><br># Driver or drivers to handle sending notifications. Set to<br># 'messaging' to send notifications to a message queue.<br># notification_driver = noop<br><br># Default publisher_id for outgoing notifications.<br># default_publisher_id = image.localhost<br><br># Messaging driver used for 'messaging' notifications driver<br># rpc_backend = 'rabbit'<br><br># Configuration options if sending notifications via rabbitmq (these are<br># the defaults)<br>#rabbit_host=localhost<br>#rabbit_port=5672<br>#rabbit_use_ssl=false<br>#rabbit_userid=guest<br>#rabbit_password=guest<br>#rabbit_virtual_host=/<br>#rabbit_notification_exchange=glance<br>#rabbit_notification_topic=notifications<br>#rabbit_durable_queues=False<br><br># Configuration options if sending notifications via Qpid (these are<br># the defaults)<br>#qpid_notification_exchange=glance<br>#qpid_notification_topic=notifications<br>#qpid_hostname=localhost<br>#qpid_port=5672<br>#qpid_username=<br>#qpid_password=<br>#qpid_sasl_mechanisms=<br>#qpid_reconnect_timeout=0<br>#qpid_reconnect_limit=0<br>#qpid_reconnect_interval_min=0<br>#qpid_reconnect_interval_max=0<br>#qpid_reconnect_interval=0<br>#qpid_heartbeat=5<br># Set to 'ssl' to enable SSL<br>#qpid_protocol=tcp<br>#qpid_tcp_nodelay=True<br><br><br># =============== Policy Options ==============================<br><br>[oslo_policy]<br># The JSON file that defines policies.<br># Deprecated group/name - [DEFAULT]/policy_file<br>#policy_file=policy.json<br><br># Default rule. Enforced when a requested rule is not found.<br># Deprecated group/name - [DEFAULT]/policy_default_rule<br>#policy_default_rule=default<br><br># Directories where policy configuration files are stored.<br># They can be relative to any directory in the search path<br># defined by the config_dir option, or absolute paths.<br># The file defined by policy_file must exist for these<br># directories to be searched.<br># Deprecated group/name - [DEFAULT]/policy_dirs<br>#policy_dirs=policy.d<br><br># ================= Database Options ==========================<br><br>[database]<br># The file name to use with SQLite (string value)<br>#sqlite_db=glance.sqlite<br><br># If True, SQLite uses synchronous mode (boolean value)<br>#sqlite_synchronous=True<br><br># The backend to use for db (string value)<br># Deprecated group/name - [DEFAULT]/db_backend<br>#backend=sqlalchemy<br><br># The SQLAlchemy connection string used to connect to the<br># database (string value)<br># Deprecated group/name - [DEFAULT]/sql_connection<br># Deprecated group/name - [DATABASE]/sql_connection<br># Deprecated group/name - [sql]/connection<br>#connection=mysql://glance:glance@localhost/glance<br>connection = mysql://glance:openg00dle232@controller/glance<br><br># The SQL mode to be used for MySQL sessions. This option,<br># including the default, overrides any server-set SQL mode. To<br># use whatever SQL mode is set by the server configuration,<br># set this to no value. Example: mysql_sql_mode= (string<br># value)<br>#mysql_sql_mode=TRADITIONAL<br><br># Timeout before idle sql connections are reaped (integer<br># value)<br># Deprecated group/name - [DEFAULT]/sql_idle_timeout<br># Deprecated group/name - [DATABASE]/sql_idle_timeout<br># Deprecated group/name - [sql]/idle_timeout<br>#idle_timeout=3600<br><br># Minimum number of SQL connections to keep open in a pool<br># (integer value)<br># Deprecated group/name - [DEFAULT]/sql_min_pool_size<br># Deprecated group/name - [DATABASE]/sql_min_pool_size<br>#min_pool_size=1<br><br># Maximum number of SQL connections to keep open in a pool<br># (integer value)<br># Deprecated group/name - [DEFAULT]/sql_max_pool_size<br># Deprecated group/name - [DATABASE]/sql_max_pool_size<br>#max_pool_size=<None><br><br># Maximum db connection retries during startup. (setting -1<br># implies an infinite retry count) (integer value)<br># Deprecated group/name - [DEFAULT]/sql_max_retries<br># Deprecated group/name - [DATABASE]/sql_max_retries<br>#max_retries=10<br><br># Interval between retries of opening a sql connection<br># (integer value)<br># Deprecated group/name - [DEFAULT]/sql_retry_interval<br># Deprecated group/name - [DATABASE]/reconnect_interval<br>#retry_interval=10<br><br># If set, use this value for max_overflow with sqlalchemy<br># (integer value)<br># Deprecated group/name - [DEFAULT]/sql_max_overflow<br># Deprecated group/name - [DATABASE]/sqlalchemy_max_overflow<br>#max_overflow=<None><br><br># Verbosity of SQL debugging information. 0=None,<br># 100=Everything (integer value)<br># Deprecated group/name - [DEFAULT]/sql_connection_debug<br>#connection_debug=0<br><br># Add python stack traces to SQL as comment strings (boolean<br># value)<br># Deprecated group/name - [DEFAULT]/sql_connection_trace<br>#connection_trace=False<br><br># If set, use this value for pool_timeout with sqlalchemy<br># (integer value)<br># Deprecated group/name - [DATABASE]/sqlalchemy_pool_timeout<br>#pool_timeout=<None><br><br># Enable the experimental use of database reconnect on<br># connection lost (boolean value)<br>#use_db_reconnect=False<br><br># seconds between db connection retries (integer value)<br>#db_retry_interval=1<br><br># Whether to increase interval between db connection retries,<br># up to db_max_retry_interval (boolean value)<br>#db_inc_retry_interval=True<br><br># max seconds between db connection retries, if<br># db_inc_retry_interval is enabled (integer value)<br>#db_max_retry_interval=10<br><br># maximum db connection retries before error is raised.<br># (setting -1 implies an infinite retry count) (integer value)<br>#db_max_retries=20<br><br>[keystone_authtoken]<br><br><br>auth_uri = <a href="http://controller:5000">http://controller:5000</a><br>auth_url = <a href="http://controller:35357">http://controller:35357</a><br>auth_plugin = password<br>project_domain_id = default<br>user_domain_id = default<br>project_name = service<br>username = glance<br>password = sleestack<br> <br><br>#identity_uri=<a href="http://127.0.0.1:35357">http://127.0.0.1:35357</a><br>#admin_tenant_name=%SERVICE_TENANT_NAME%<br>#admin_user=%SERVICE_USER%<br>#admin_password=%SERVICE_PASSWORD%<br><br>[paste_deploy]<br>flavor = keystone<br><br><br># Name of the paste configuration file that defines the available pipelines<br>#config_file=/usr/share/glance/glance-registry-dist-paste.ini<br><br># Partial name of a pipeline in your paste configuration file with the<br># service name removed. For example, if your paste section name is<br># [pipeline:glance-registry-keystone], you would configure the flavor below<br># as 'keystone'.<br>#flavor=<br><br>[profiler]<br># If False fully disable profiling feature.<br>#enabled=False<br><br># If False doesn't trace SQL requests.<br>#trace_sqlalchemy=False<br><br><br><br><br><br><br><br>========================================================================</div>========================== glance-scrubber.conf<br>========================================================================<br><br>[DEFAULT]<br># Show more verbose log output (sets INFO log level output)<br>#verbose=True<br><br># Show debugging output in logs (sets DEBUG log level output)<br>#debug=False<br><br># Log to this file. Make sure you do not set the same log file for both the API<br># and registry servers!<br>#<br># If `log_file` is omitted and `use_syslog` is false, then log messages are<br># sent to stdout as a fallback.<br>#log_file=/var/log/glance/scrubber.log<br><br># Send logs to syslog (/dev/log) instead of to file specified by `log_file`<br>#use_syslog=False<br><br># Should we run our own loop or rely on cron/scheduler to run us<br>#daemon=False<br><br># Loop time between checking for new items to schedule for delete<br>#wakeup_time=300<br><br># Directory that the scrubber will use to remind itself of what to delete<br># Make sure this is also set in glance-api.conf<br>#scrubber_datadir=/var/lib/glance/scrubber<br><br># Only one server in your deployment should be designated the cleanup host<br>#cleanup_scrubber=False<br><br># pending_delete items older than this time are candidates for cleanup<br>#cleanup_scrubber_time=86400<br><br># Address to find the registry server for cleanups<br>#registry_host=0.0.0.0<br><br># Port the registry server is listening on<br>#registry_port=9191<br><br># Auth settings if using Keystone<br># auth_url = <a href="http://127.0.0.1:5000/v2.0/">http://127.0.0.1:5000/v2.0/</a><br># admin_tenant_name = %SERVICE_TENANT_NAME%<br># admin_user = %SERVICE_USER%<br># admin_password = %SERVICE_PASSWORD%<br><br># API to use for accessing data. Default value points to sqlalchemy<br># package, it is also possible to use: glance.db.registry.api<br>#data_api=glance.db.sqlalchemy.api<br><br># ================= Security Options ==========================<br><br># AES key for encrypting store 'location' metadata, including<br># -- if used -- Swift or S3 credentials<br># Should be set to a random string of length 16, 24 or 32 bytes<br>#metadata_encryption_key=<16, 24 or 32 char registry metadata key><br><br># =============== Policy Options ==============================<br><br># The JSON file that defines policies.<br>#policy_file=policy.json<br><br># Default rule. Enforced when a requested rule is not found.<br>#policy_default_rule=default<br><br># Directories where policy configuration files are stored.<br># They can be relative to any directory in the search path<br># defined by the config_dir option, or absolute paths.<br># The file defined by policy_file must exist for these<br># directories to be searched.<br>#policy_dirs=policy.d<br><br># ================= Database Options ===============+==========<br><br>[database]<br><br># The SQLAlchemy connection string used to connect to the<br># database (string value)<br>#connection=sqlite:////glance/openstack/common/db/$sqlite_db<br><br># The SQLAlchemy connection string used to connect to the<br># slave database (string value)<br>#slave_connection=<br><br># timeout before idle sql connections are reaped (integer<br># value)<br>#idle_timeout=3600<br><br># Minimum number of SQL connections to keep open in a pool<br># (integer value)<br>#min_pool_size=1<br><br># Maximum number of SQL connections to keep open in a pool<br># (integer value)<br>#max_pool_size=<None><br><br># maximum db connection retries during startup. (setting -1<br># implies an infinite retry count) (integer value)<br>#max_retries=10<br><br># interval between retries of opening a sql connection<br># (integer value)<br>#retry_interval=10<br><br># If set, use this value for max_overflow with sqlalchemy<br># (integer value)<br>#max_overflow=<None><br><br># Verbosity of SQL debugging information. 0=None,<br># 100=Everything (integer value)<br>#connection_debug=0<br><br># Add python stack traces to SQL as comment strings (boolean<br># value)<br>#connection_trace=false<br><br># If set, use this value for pool_timeout with sqlalchemy<br># (integer value)<br>#pool_timeout=<None><br><br>[oslo_concurrency]<br><br># Enables or disables inter-process locks. (boolean value)<br># Deprecated group/name - [DEFAULT]/disable_process_locking<br>#disable_process_locking=false<br><br># Directory to use for lock files. For security, the specified<br># directory should only be writable by the user running the processes<br># that need locking. It could be read from environment variable<br># OSLO_LOCK_PATH. This setting needs to be the same for both<br># glance-scrubber and glance-api service. Default to a temp directory.<br># Deprecated group/name - [DEFAULT]/lock_path (string value)<br>#lock_path=/tmp<br><br><br><br><br><br>========================================================================</div>===================== policy.json<br>========================================================================<br><br>{<br> "context_is_admin": "role:admin",<br> "default": "",<br><br> "add_image": "",<br> "delete_image": "",<br> "get_image": "",<br> "get_images": "",<br> "modify_image": "",<br> "publicize_image": "role:admin",<br> "copy_from": "",<br><br> "download_image": "",<br> "upload_image": "",<br><br> "delete_image_location": "",<br> "get_image_location": "",<br> "set_image_location": "",<br><br> "add_member": "",<br> "delete_member": "",<br> "get_member": "",<br> "get_members": "",<br> "modify_member": "",<br><br> "manage_image_cache": "role:admin",<br><br> "get_task": "",<br> "get_tasks": "",<br> "add_task": "",<br> "modify_task": "",<br><br> "deactivate": "",<br> "reactivate": "",<br><br> "get_metadef_namespace": "",<br> "get_metadef_namespaces":"",<br> "modify_metadef_namespace":"",<br> "add_metadef_namespace":"",<br><br> "get_metadef_object":"",<br> "get_metadef_objects":"",<br> "modify_metadef_object":"",<br> "add_metadef_object":"",<br><br> "list_metadef_resource_types":"",<br> "get_metadef_resource_type":"",<br> "add_metadef_resource_type_association":"",<br><br> "get_metadef_property":"",<br> "get_metadef_properties":"",<br> "modify_metadef_property":"",<br> "add_metadef_property":"",<br><br> "get_metadef_tag":"",<br> "get_metadef_tags":"",<br> "modify_metadef_tag":"",<br> "add_metadef_tag":"",<br> "add_metadef_tags":""<br><br>}<br><br><br><br><br>========================================================================</div>================= schema-image.json<br>========================================================================<br><br>{<br> "kernel_id": {<br> "type": "string",<br> "pattern": "^([0-9a-fA-F]){8}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){12}$",<br> "description": "ID of image stored in Glance that should be used as the kernel when booting an AMI-style image."<br> },<br> "ramdisk_id": {<br> "type": "string",<br> "pattern": "^([0-9a-fA-F]){8}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){4}-([0-9a-fA-F]){12}$",<br> "description": "ID of image stored in Glance that should be used as the ramdisk when booting an AMI-style image."<br> },<br> "instance_uuid": {<br> "type": "string",<br> "description": "ID of instance used to create this image."<br> },<br> "architecture": {<br> "description": "Operating system architecture as specified in <a href="http://docs.openstack.org/trunk/openstack-compute/admin/content/adding-images.html">http://docs.openstack.org/trunk/openstack-compute/admin/content/adding-images.html</a>",<br> "type": "string"<br> },<br> "os_distro": {<br> "description": "Common name of operating system distribution as specified in <a href="http://docs.openstack.org/trunk/openstack-compute/admin/content/adding-images.html">http://docs.openstack.org/trunk/openstack-compute/admin/content/adding-images.html</a>",<br> "type": "string"<br> },<br> "os_version": {<br> "description": "Operating system version as specified by the distributor",<br> "type": "string"<br> }<br>}<br><br><br><div><div><div><div><div><br></div></div></div></div></div></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div><div>- Christopher T. Hull<br></div><div>333 Orchard Ave, Sunnyvale CA. 94085<br>(415) 385 4865<br></div><div><a href="mailto:chrishull42@gmail.com" target="_blank">chrishull42@gmail.com</a><br></div><a href="http://chrishull.com" target="_blank">http://chrishull.com</a><br><br></div></div><div><div><br></div></div></div></div></div></div></div>
<br><div class="gmail_quote">On Mon, Jan 25, 2016 at 10:50 AM, Edgar Magana <span dir="ltr"><<a href="mailto:edgar.magana@workday.com" target="_blank">edgar.magana@workday.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Same here, we are using apache as front and the same for keystone. In Future we will move all public url in from of HAProxy<br>
<span class="HOEnZb"><font color="#888888"><br>
Edgar<br>
</font></span><div class="HOEnZb"><div class="h5"><br>
<br>
<br>
<br>
On 1/25/16, 10:40 AM, "Kris G. Lindgren" <<a href="mailto:klindgren@godaddy.com">klindgren@godaddy.com</a>> wrote:<br>
<br>
>In the past we have had issues with having glance terminating ssl and downloads either not completing or being corrupted. If you are having glance terminate ssl, for us moving ssl termination to haproxy and running glance as non-ssl fixed that issue for us.<br>
><br>
>___________________________________________________________________<br>
>Kris Lindgren<br>
>Senior Linux Systems Engineer<br>
>GoDaddy<br>
><br>
><br>
><br>
><br>
><br>
><br>
><br>
>On 1/25/16, 11:23 AM, "Clint Byrum" <<a href="mailto:clint@fewbar.com">clint@fewbar.com</a>> wrote:<br>
><br>
>>Excerpts from Christopher Hull's message of 2016-01-25 09:11:59 -0800:<br>
>>> Hello all;<br>
>>><br>
>>> I'm an experienced developer and I work at Cisco. Chances are I've covered<br>
>>> the basics here,but just in case, check me.<br>
>>> I've followed the Kilo install instructions to the letter so far as I can<br>
>>> tell. I have not installed Swift, but I think everything else, and my<br>
>>> installation almost works. I'm having a little trouble with Glance.<br>
>>><br>
>>> It seems that when I attempt to create a large image (that may or not may<br>
>>> be the issue), the checksum that Glance records in it's DB is incorrect.<br>
>>> Cirros image runs just fine. CentOS cloud works. But when I offload and<br>
>>> create an image from a big CentOS install (say 100gb), nova says the<br>
>>> checksum is wrong when I try to boot it.<br>
>>><br>
>><br>
>>Did you check the file that glance saved to disk to make sure it was<br>
>>the same one you uploaded? I kind of wonder if something timed out and<br>
>>did not properly report the error, leading to a partially written file.<br>
>><br>
>>Also, is there some reason you aren't deploying Liberty?<br>
>><br>
>>_______________________________________________<br>
>>OpenStack-operators mailing list<br>
>><a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>
>><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
>_______________________________________________<br>
>OpenStack-operators mailing list<br>
><a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>
><a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
_______________________________________________<br>
OpenStack-operators mailing list<br>
<a href="mailto:OpenStack-operators@lists.openstack.org">OpenStack-operators@lists.openstack.org</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators</a><br>
</div></div></blockquote></div><br></div>