January 2014 - OpenStack-announce

python-heatclient 0.2.5 released
by Steve Baker 03 Mar '14

03 Mar '14

The heat development community would like to announce the release of python-heatclient version 0.2.5. python-heatclient is a client library for Heat built on the Heat orchestration API. It provides a Python API (the heatclient module) and a command-line tool (heat). This release can be installed from the following locations: http://tarballs.openstack.org/python-heatclient <http://tarballs.openstack.org/python-heatclient> https://pypi.python.org/pypi/python-heatclient <https://pypi.python.org/pypi/python-heatclient> Bugs fixed in this release: https://launchpad.net/python-heatclient/+milestone/v0.2.5 <https://launchpad.net/python-heatclient/+milestone/v0.2.5>

1 2

OpenStack Community Weekly Newsletter (Jan 24 – 31)
by Stefano Maffulli 31 Jan '14

31 Jan '14

OpenStack 2014: Powered by Users <http://www.openstack.org/blog/2014/01/openstack-2014-powered-by-users/> If momentum is any indication, 2014 is poised to be a defining year for OpenStack. All of our vital statistics, from community growth to code commits and tracked deployments, doubled in 2013, and all signs point to continued growth. As we start a new year, we in the OpenStack Foundation are putting our resources behind elevating the voice of OpenStack users and tightening the feedback loop between users and developers to influence decisions such as the scope of the project, new feature priorities, interoperability requirements and operational best practices. New Foundation Gold Members & Sponsors <http://www.openstack.org/blog/2014/01/new-foundation-gold-members-sponsors/> The OpenStack Foundation is thrilled to have new additions to our ecosystem. Three new Gold Members and 18 Corporate Sponsors have recently joined the incredible list of companies who are supporting the Foundation and driving innovation on the platform. *Aptira <http://www.aptira.com/>*, *Huawei* <http://www.huawei.com/> and *Hitachi* <http://www.hitachi.com/> won the OpenStack Board’s approval at the November board meeting and joined the Foundation as Gold members, which requires a strong, strategic commitment to the technology and community. We’ve also seen amazing support in Corporate Sponsorship and we want to share the impressive list of recent additions. OpenStack Commitment to Interoperability <http://www.openstack.org/blog/2014/01/openstack-commitment-to-interoperabil…> Now that OpenStack has tons of users, we need to make sure all (downstream) products labeled “OpenStack” have a certain set of*core capabilities*, and we need to verify those with *automated tests* just like we do upstream. End-users should be our focus, and ensuring they get what they want and expect out of the platform once it’s running as a service is paramount. The goal is to define the first set of tests in time for the May 2014 Summit in Atlanta. If this matters to you, get involved! Maturing the Horizon Overview Page Part 1 <http://uxd-stackabledesign.rhcloud.com/?p=34> and Part 2 <http://uxd-stackabledesign.rhcloud.com/?p=62> User experience designer Liz Blanchard <http://uxd-stackabledesign.rhcloud.com/> goes into details about tells in two blog post how she and Ju <https://plus.google.com/105626042354015503324/posts> approached the designing of the Overview page for Horizon. OpenStack Object Storage release 1.12.0 <http://lists.openstack.org/pipermail/openstack-announce/2014-January/000190…> New release of OpenStack Object Storage (Swift) with new features for operators and end-users alike. Tips ‘n Tricks * By Adam Young <http://adam.younglogic.com/>: Splitting a patch <http://adam.younglogic.com/2014/01/splitting-a-patch/> * By Frederic Lepied <http://techs.enovance.com/6603/how-to-build-edeploy-roles>: How to build eDeploy roles <http://techs.enovance.com/6603/how-to-build-edeploy-roles> * By Matthew Farrellee <http://spinningmatt.wordpress.com/>: Hadoop on OpenStack with a CLI: Creating a cluster <http://spinningmatt.wordpress.com/2014/01/29/hadoop-on-openstack-with-a-cli…> * By ICCLab <http://www.cloudcomp.ch/>: Mirantis Fuel – Openstack installation for Noddy <http://www.cloudcomp.ch/2014/01/mirantis-fuel-openstack-installation-for-no…> * By Kashyap Chamarthy <http://kashyapc.wordpress.com/>: virt-builder, to trivially create various Linux distribution guest images <http://kashyapc.wordpress.com/2014/01/27/virt-builder-to-trivially-create-v…> * By Flavio Percoco <http://blog.flaper87.com/>: Real-Time Systems: High level introduction <http://blog.flaper87.com/post/52e43f93d987d2cc17700b58/> Upcoming Events * FOSDEM <https://fosdem.org/2014/> Feb 01 – 02, 2014 – Bruxelles, Belgium Details <https://fosdem.org/2014/> * SFBay Meetup – Platform Tools in OpenStack <http://www.meetup.com/openstack/events/163020092/> Feb 05, 2014 – Sunnyvale, CA Details <http://www.meetup.com/openstack/events/163020092/> * SFBay Meetup – Beginner track <http://www.meetup.com/openstack/events/123227512/> Feb 06, 2014 – Sunnyvale, CA Details <http://www.meetup.com/openstack/events/123227512/> * SFBay OpenStack Hackathon #OSSFO <http://www.meetup.com/openstack/events/123227492/> Feb 06, 2014 – Details <http://www.meetup.com/openstack/events/123227492/> * OpenStack Finland Meetup <http://www.eventbrite.com/e/2nd-openstack-finland-user-group-meetup-in-hels…> Feb 11, 2014 – Helsinki, Finland Details <http://www.eventbrite.com/e/2nd-openstack-finland-user-group-meetup-in-hels…> * OpenStack Paris Meetup <http://www.meetup.com/OpenStack-France/events/161704432/> Feb 11, 2014 – Paris, France Details <http://www.meetup.com/OpenStack-France/events/161704432/> * OpenStack Days – Tokyo 2014 <http://www.openstackdays.com/en/> Feb 13 – 14, 2014 – Tokyo, Japan Details <http://www.openstackdays.com/en/> * OpenStack Workshop at Gnunify Conference, SICSR Pune <http://www.meetup.com/Indian-OpenStack-User-Group/events/162277702/> Feb 14, 2014 – Bangalore, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/162277702/> * Korea OpenStack Day <http://onoffmix.com/event/22995> Feb 18, 2014 – Seoul, South Korea Details <http://onoffmix.com/event/22995> * Austin OpenStack User Group Meetup <http://www.meetup.com/OpenStack-Austin/events/154331162/> Feb 19, 2014 – Austin, Texas Details <http://www.meetup.com/OpenStack-Austin/events/154331162/> * OpenStack Chicago Meetup <http://www.meetup.com/meetup-group-NjZdcegA/> Feb 20, 2014 – Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/> * SFBay OpenStack Hackathon #OSSFO <http://www.meetup.com/openstack/events/123227532/> Feb 20, 2014 – Details <http://www.meetup.com/openstack/events/123227532/> * OpenStack India Meetup <http://www.meetup.com/Indian-OpenStack-User-Group/events/160120142/> Feb 22, 2014 – Hyderabad, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/160120142/> * Open Cloud Summit at IBM Pulse <http://www.ibmpulseblog.com/second-open-cloud-summit-at-pulse-sunday-februa…> Feb 23 – 26, 2014 – Las Vegas, Nevada Details <http://www.ibmpulseblog.com/second-open-cloud-summit-at-pulse-sunday-februa…> * Mobile World Congress <http://www.mobileworldcongress.com/> Feb 24 – 27, 2014 – Barcelona, Spain Details <http://www.mobileworldcongress.com/> * Cloud Connect Summit at Interop <http://www.interop.com/lasvegas/conference/cloud-connect.php> Mar 31 – Apr 01, 2014 – Las Vegas, Nevada Details <http://www.interop.com/lasvegas/conference/cloud-connect.php> * World Hosting Days <http://www.worldhostingdays.com/eng/>Apr 01 – 03, 2014 – Rust, Germany Details <http://www.worldhostingdays.com/eng/> * PyCon <https://us.pycon.org/2014/> Apr 09 – 17, 2014 – Montreal, Canada Details <https://us.pycon.org/2014/> * OpenStack Summit May 2014 <http://www.openstack.org/summit/openstack-summit-atlanta-2014/> May 12 – 16, 2014 – Atlanta, GA Details <http://www.openstack.org/summit/openstack-summit-atlanta-2014/> * Cloud World Forum <http://cloudwf.com/> Jun 17 – 18, 2014 – London, UK Details <http://cloudwf.com/> Most Popular OpenStack Videos of the Week * OpenStack Havana Demo <https://www.youtube.com/watch?v=vm7aHJtQMQE> * Getting Started with OpenStack <https://www.youtube.com/watch?v=YLCeYGpSjb0> * OpenStack Keynote featuring Concur, DigitalFilm Tree, Shutterstock <https://www.youtube.com/watch?v=qQmGfzewWQw> Reports from Previous Events * CloudCamp Hackathon and Ubuntu User Days <http://princessleia.com/journal/?p=9043> Other News * Google Summer of Code 2014 – 2/14/14 deadline for orgs <http://lists.openstack.org/pipermail/openstack-dev/2014-January/025744.html> * OpenStack Users: join the discussion on logging standards <http://www.openstack.org/blog/2014/01/open-mic-spotlight-tatiana-mazur/> * Open Mic Spotlight: Tatiana Mazur <http://www.openstack.org/blog/2014/01/open-mic-spotlight-tatiana-mazur/> * Chairman’s Corner: Great 2013 to even Greater 2014 <http://www.openstack.org/blog/2014/01/chairmans-corner-great-2013-to-even-g…> * Coming soon – Storage Policies in OpenStack Swift <http://swiftstack.com/blog/2014/01/27/openstack-swift-storage-policies/> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-01-28-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-01-28-21.…> Welcome New Reviewers and Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! <http://www.openstack.org/profile/> Shalini khandelwal <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Zoltan Arnold Nagy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Ronelle Landy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Aaron Greengrass <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> salman memon <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Renat Akhmerov <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Tzanetos Balitsaris <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Ren Qiaowei <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Jesse Noller <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Douglas Mendizabal <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> li,chen <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Steven Weston <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Mat Lowery <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Jesse Noller <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Hirofumi Ichihara <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Ed Leafe <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Alexander Tivelkov <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Pierre Padrixe <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Morgan Jones <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Matthew Booth <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> IvanBerezovskiy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Dan Dyer <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Allison Randal <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Liping Mao <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Assaf Muller <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Heather Whisenhunt <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Latest Activity In Projects Do you want to see at a glance the bugs filed and solved this week? Latest patches submitted for review? Check out the individual project pages on OpenStack Activity Board – Insights <http://activity.openstack.org/data/display/OPNSTK2/>. * Telemetry (Ceilometer) <http://activity.openstack.org/data/display/OPNSTK2/ceilometer> * Block Storage (Cinder) <http://activity.openstack.org/data/display/OPNSTK2/cinder> * Image Service (Glance) <http://activity.openstack.org/data/display/OPNSTK2/glance> * Orchestration API <http://activity.openstack.org/data/display/OPNSTK2/heat> (Heat) <http://activity.openstack.org/data/display/OPNSTK2/heat> * Dashboard (Horizon) <http://activity.openstack.org/data/display/OPNSTK2/horizon> * Bare Metal Provisioning (Ironic) <http://activity.openstack.org/data/display/OPNSTK2/ironic> * Identity (Keystone) <http://activity.openstack.org/data/display/OPNSTK2/keystone> * Manuals <http://activity.openstack.org/data/display/OPNSTK2/openstack-manuals> * Networking (Neutron) <http://activity.openstack.org/data/display/OPNSTK2/neutron> * Compute (Nova) <http://activity.openstack.org/data/display/OPNSTK2/nova> * Hadoop Cluster as a Service (Savanna) <http://stackalytics.com/?release=icehouse&metric=commits&project_type=opens…> * Object Storage (Swift) <http://activity.openstack.org/data/display/OPNSTK2/swift> * Database As A Service (Trove) <http://activity.openstack.org/data/display/OPNSTK2/trove> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./ -- Ask and answer questions on https://ask.openstack.org

1 0

[Swift] release 1.12.0
by John Dickinson 29 Jan '14

29 Jan '14

Today I'm happy to announce that we have released Swift 1.12.0. As always, this is a stable release and you can upgrade to this version of Swift with no customer downtime. You can download the code for this release at https://launchpad.net/swift/icehouse/1.12.0 or bug your package provider for the updated version. I've noticed that OpenStack Swift releases tend to cluster around certain themes. This release is no different. While we've added some nice end-user updates to the project, this release has a ton of good stuff for cluster operators. I'll highlight a few of the major improvements below, but I encourage you to read the entire change log at https://github.com/openstack/swift/blob/master/CHANGELOG. ## Security update **CVE-2014-006** Fixed CVE-2014-0006 to avoid a potential timing attack with temp url. Key validation previously was not using a constant-time string compare, and therefore it may have been possible for an attacker to guess tempurl keys if the object name was known and tempurl had been enabled for that Swift user account. The tempurl key validation now uses a constant-time string compare to close this potential attack vector. ## Major End-User Features **New information added to /info** We added discoverable capabilities via the /info endpoint in a recent release. In this release we have added all of the general cluster constraints to the /info response. This means that a client can discover the cluster limits on names, metadata, and object sizes. We've also added information about the support temp url methods and large object constraints in the cluster. **Last-Modified header values** The Last-Modified header value returned will now be the object's timestamp rounded up to the next second. This allows subsequent requests with If-[un]modified-Since to use the Last-Modified value as expected. ## Major Deployer Features **Generic means for persisting system metadata** Swift now supports system-level metadata on accounts and containers. System metadata provides a means to store internal custom metadata with associated Swift resources in a safe and secure fashion without actually having to plumb custom metadata through the core swift servers. The new gatekeeper middleware prevents this system metadata from leaking into the request or being set by a client. **Middleware changes** As mentioned above, there is a new "gatekeeper" middleware to guard the system metadata. In order to ensure that system metadata doesn't leak into the response, the gatekeeper middleware will be automatically inserted near the beginning of the proxy pipeline if it is not explicitly referenced. Similarly, the catch_errors middleware is also forced to the front of the proxy pipeline if it is not explicitly referenced. Note that for either of these middlewares, if they are already in the proxy pipeline, Swift will not reorder the pipeline. **New container sync configuration option** Container sync has new options to better support syncing containers across multiple clusters without the end-user needing to know he required endpoint. See http://swift.openstack.org/overview_container_sync.html for full information. **Bulk middleware config default changed** The bulk middleware allows the client to send a large body of work to the cluster with just one request. Since this work may take a while to return, Swift can periodically send back whitespace before the actual response data in order to keep the client connection alive. The config parameter to set the minimum frequency of these whitespace characters is set by the yield_frequency value. The default value was lowered from 60 seconds to 10 seconds. This change does not affect deployments, and there is no migration process needed. **Raise RLIMIT_NPROC** In order to support denser storage systems, Swift processes will not attempt to set the RLIMIT_NPROC value to 8192 **Server exit codes** Swift processes will now exist with non-zero exist codes on config errors **Quarantine logs** Swift will now log at warn level when an object is quarantined ## Community growth This release of Swift is the work of twenty-three devs includes eight first-time contributors to the project: * Morgan Fainberg * Zhang Jinnan * Kiyoung Jung * Steve Kowalik * Sushil Kumar * Cristian A Sanchez * Jeremy Stanley * Yuriy Taraday Thank you to everyone who contributes code, promotes the project, and facilitates the community. Your contributions are what make this project successful. --John

1 0

OpenStack Community Weekly Newsletter (Jan 17 – 24)
by Stefano Maffulli 25 Jan '14

25 Jan '14

1 0

[OSSA 2014-003] Live migration can leak root disk into ephemeral storage (CVE-2013-7130)
by Grant Murphy 24 Jan '14

24 Jan '14

OpenStack Security Advisory: 2014-003 CVE: CVE-2013-7130 Date: January 23, 2014 Title: Live migration can leak root disk into ephemeral storage Reporter: Loganathan Parthipan (HP) Products: Nova Affects: All supported versions Description: Loganathan Parthipan from Hewlett Packard reported a vulnerability in the Nova libvirt driver. By spawning a server with the same flavor as another user's migrated virtual machine, an authenticated user can potentially access that user's snapshot content resulting in information leakage. Only setups using KVM live block migration are affected. Icehouse (development branch) fix: https://review.openstack.org/#/c/68658/ Havana (development branch) fix: https://review.openstack.org/#/c/68659/ Grizzly fix: https://review.openstack.org/#/c/68660/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7130 https://bugs.launchpad.net/nova/+bug/1251590 -- Grant Murphy OpenStack Vulnerability Management Team

1 0

Icehouse-2 development milestone available
by Thierry Carrez 24 Jan '14

24 Jan '14

Hi everyone, The second milestone of the Icehouse development cycle, "icehouse-2" is now available for Keystone, Glance, Nova, Horizon, Neutron, Cinder, Ceilometer, Heat, and Trove. You can see the full list of new features and fixed bugs, as well as tarball downloads, at: https://launchpad.net/keystone/icehouse/icehouse-2 https://launchpad.net/glance/icehouse/icehouse-2 https://launchpad.net/nova/icehouse/icehouse-2 https://launchpad.net/horizon/icehouse/icehouse-2 https://launchpad.net/neutron/icehouse/icehouse-2 https://launchpad.net/cinder/icehouse/icehouse-2 https://launchpad.net/ceilometer/icehouse/icehouse-2 https://launchpad.net/heat/icehouse/icehouse-2 https://launchpad.net/trove/icehouse/icehouse-2 Including the oslo libraries, "only" 50 blueprints were implemented and about 650 bugs were fixed during this milestone, which is slightly less than our usual velocity at that point in the cycle. This is mostly due to the recent issues in gating and the end-of-year holiday season. The next development milestone, icehouse-3, is scheduled for March 6th. You can further track upcoming features and Icehouse release cycle status at: http://status.openstack.org/release/ Regards, -- Thierry Carrez (ttx)

1 0

OpenStack Community Weekly Newsletter (Jan 10 – 17)
by Stefano Maffulli 18 Jan '14

18 Jan '14

1 0

[OSSA 2014-002] Swift TempURL timing attack (CVE-2014-0006)
by Thierry Carrez 17 Jan '14

17 Jan '14

OpenStack Security Advisory: 2014-002 CVE: CVE-2014-0006 Date: January 16, 2013 Title: Swift TempURL timing attack Reporter: Samuel Merritt (SwiftStack) Products: Swift Affects: All supported versions Description: Samuel Merritt from SwiftStack reported a timing attack vulnerability in Swift TempURL middleware. By analyzing response times to arbitrary TempURL requests, an attacker may be able to guess valid secret URLs and get access to objects that were only intended to be publicly shared with specific recipients. In order to use this attack, the attacker needs to know the targeted object name, and the object account needs to have a TempURL key set. Only Swift setups enabling the TempURL middleware are affected. Icehouse (development branch) fix: https://review.openstack.org/#/c/67185/ Havana (1.10.0) fix: https://review.openstack.org/#/c/67186/ Grizzly (1.8.0) fix: https://review.openstack.org/#/c/67187/ Note: the Icehouse fix will be included in upcoming 1.12.0 release. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-0006 https://bugs.launchpad.net/swift/+bug/1265665 Regards, -- Thierry Carrez OpenStack Vulnerability Management Team

1 0

[OSSA 2014-001] Nova live snapshots use an insecure local directory (CVE-2013-7048)
by Thierry Carrez 13 Jan '14

13 Jan '14

OpenStack Security Advisory: 2014-001 CVE: CVE-2013-7048 Date: January 13, 2013 Title: Nova live snapshots use an insecure local directory Reporter: Daniel Berrange (Red Hat) Products: Nova Affects: Grizzly and later Description: Daniel Berrange from Red Hat reported that the directories used to temporarily store live snapshots on Nova compute nodes were writable to all local users. A local attacker with shell access on compute nodes could therefore read and modify the contents of live snapshots before those are uploaded to the image service. Icehouse (development branch) fix: https://review.openstack.org/#/c/58852/ Havana fix: https://review.openstack.org/#/c/60548/ Grizzly fix: https://review.openstack.org/#/c/60550/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7048 https://bugs.launchpad.net/nova/+bug/1227027 Regards, -- Thierry Carrez OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (Jan 3 – 10)
by Stefano Maffulli 11 Jan '14

11 Jan '14

1 0