<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman",serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.im
{mso-style-name:im;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Courier New";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D">Ali,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D">OK, thanks. I’ll check on that. Also, you could find more at #tesora on IRC.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D">Thanks,<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D">-amrith<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Courier New";color:#1F497D"><o:p> </o:p></span></p>
<div style="border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt">
<div>
<div style="border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif">From:</span></b><span style="font-size:11.0pt;font-family:"Calibri",sans-serif"> Ali Nazemian [mailto:alinazemian@gmail.com]
<br>
<b>Sent:</b> Thursday, February 12, 2015 10:27 AM<br>
<b>To:</b> Amrith Kumar<br>
<b>Cc:</b> Mark Kirkwood; openstack@lists.openstack.org<br>
<b>Subject:</b> Re: [Openstack] customizing trove instances security group<o:p></o:p></span></p>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">Dear Armith,<o:p></o:p></p>
<div>
<p class="MsoNormal">Hi,<o:p></o:p></p>
<div>
<p class="MsoNormal">Thank you very much for your response. According to your reply I think I have two options in order to ssh into created trove instance:<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">1- Using local password if exists in used image. Since I did use trove-centos-7.0-mysql-5.5 image from Tesora, I dont know if there is any built-in password in this image. I really appreciate if you tell me is there any built-in password
for this image or not?<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">2- Modify this image and add a built-in password or add the public key of my controller node (or whatever node I want to use as a source for creating ssh connection) to authorized_keys part of cloud-init config file.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">I already tried the second one for adding the public key of my controller node to authorzied_keys part of cloud-init config file. However, I did end up with permission denied (public key) error in this case. Please consider I just want
to debug trove-guestagent in order to find out what is wrong with my configuration. Therefore did not consider security concerns in suggested solutions. It is only for the purpose of debugging. <o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Thank you very much.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal">Best regards. <o:p></o:p></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
<div>
<p class="MsoNormal">On Thu, Feb 12, 2015 at 4:39 PM, Amrith Kumar <<a href="mailto:amrith@tesora.com" target="_blank">amrith@tesora.com</a>> wrote:<o:p></o:p></p>
<blockquote style="border:none;border-left:solid #CCCCCC 1.0pt;padding:0in 0in 0in 6.0pt;margin-left:4.8pt;margin-right:0in">
<p class="MsoNormal">Ali,<br>
<br>
Mark's answer below would address the networking part, I just wanted to highlight the other pieces here that are that if your trove image has a public key (typically ~/.ssh/authorized_keys) and you know the user name, and an SSH server is installed and running,
getting to the instance on SSH is merely a matter of adjusting the networking to allow access on route 22. There's nothing special in trove in this regard; that which you would do with Nova will work with Trove.<br>
<br>
Hope that helps,<br>
<br>
-amrith<br>
<br>
<span class="im">| -----Original Message-----</span><br>
<span class="im">| From: Mark Kirkwood [mailto:<a href="mailto:mark.kirkwood@catalyst.net.nz">mark.kirkwood@catalyst.net.nz</a>]</span><br>
<span class="im">| Sent: Wednesday, February 11, 2015 6:02 PM</span><br>
<span class="im">| To: <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a></span><br>
<span class="im">| Subject: Re: [Openstack] customizing trove instances security group</span><br>
<span class="im">|</span><o:p></o:p></p>
<div>
<div>
<p class="MsoNormal">| On 12/02/15 09:09, Ali Nazemian wrote:<br>
| > Dear all,<br>
| > Hi,<br>
| > I was wondering how can I customize the security group of created<br>
| > trove instance in order to add ssh rule for the purpose of accessing<br>
| > to the created instance using ssh.<br>
| ><br>
|<br>
| You can set this via the command line tools e.g:<br>
|<br>
| $ neutron security-group-list<br>
| $ neutron security-group-rule-create --protocol tcp \<br>
| --port-range-min 22 --port-range-max 22 --direction ingress <sec group<br>
| id><br>
|<br>
| Cheers<br>
|<br>
| Mark<br>
|<br>
| _______________________________________________<br>
| Mailing list: <a href="http://lists.openstack.org/cgi-" target="_blank">http://lists.openstack.org/cgi-</a><br>
| bin/mailman/listinfo/openstack<br>
| Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
| Unsubscribe : <a href="http://lists.openstack.org/cgi-" target="_blank">http://lists.openstack.org/cgi-</a><br>
| bin/mailman/listinfo/openstack<br>
<br>
_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><o:p></o:p></p>
</div>
</div>
</blockquote>
</div>
<p class="MsoNormal"><br>
<br clear="all">
<o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal">-- <o:p></o:p></p>
<div>
<p class="MsoNormal">A.Nazemian<o:p></o:p></p>
</div>
</div>
</div>
</div>
</body>
</html>