February 2014 - OpenStack-announce

python-heatclient 0.2.5 released
by Steve Baker 02 Mar '14

02 Mar '14

The heat development community would like to announce the release of python-heatclient version 0.2.5. python-heatclient is a client library for Heat built on the Heat orchestration API. It provides a Python API (the heatclient module) and a command-line tool (heat). This release can be installed from the following locations: http://tarballs.openstack.org/python-heatclient <http://tarballs.openstack.org/python-heatclient> https://pypi.python.org/pypi/python-heatclient <https://pypi.python.org/pypi/python-heatclient> Bugs fixed in this release: https://launchpad.net/python-heatclient/+milestone/v0.2.5 <https://launchpad.net/python-heatclient/+milestone/v0.2.5>

1 2

python-novaclient 2.16.0 released
by Russell Bryant 26 Feb '14

26 Feb '14

I just pushed a new novaclient release. It contains several bug fixes and new features made over the last 4-5 months. I expect another release closer to the release of Icehouse to capture any last fixes and features that get merged for Icehouse. Please report any issues to our bug tracker: https://bugs.launchpad.net/python-novaclient Thanks, -- Russell Bryant

1 0

[OSSA 2014-005] Missing SSL certificate check in Python Swift client (CVE-2013-6396)
by Tristan Cacqueray 17 Feb '14

17 Feb '14

OpenStack Security Advisory: 2014-005 CVE: CVE-2013-6396 Date: February 17, 2014 Title: Missing SSL certificate check in Python Swift client Reporter: Thomas Leaman (HP) Products: python-swiftclient Versions: 1.0 version up to 1.9.0 Description: Thomas Leaman from HP reported that the Python Swift client was failing to properly check certificates during the establishment of HTTPS connections. A remote attacker with access over segments of the network between client and server could potentially set up a man-in-the-middle attack and access the contents of the Swift client's communication with the server, including any used credentials. python-swiftclient fix (included in 2.0 release): https://review.openstack.org/#/c/69187 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-6396 https://bugs.launchpad.net/bugs/1199783 -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (Feb 7 - 14)
by Stefano Maffulli 15 Feb '14

15 Feb '14

OpenStack 2013.2.2 released <http://lists.openstack.org/pipermail/openstack-announce/2014-February/00019…> The OpenStack Stable Maintenance team is happy to announce the release of the 2013.2.2 stable Havana release. A total of 98 bugs have been fixed across all projects. These updates to Havana are intended to be low risk with no intentional regressions or API changes. Official release notes <https://wiki.openstack.org/wiki/ReleaseNotes/2013.2.2>. The road to Juno Summit - Atlanta 2014 * Have you redeemed your invite code yet? Do it now! Check your inbox and spam folder if you contributed code before January 25 for yours. * Next batch of invites will be sent regularly after each milestone until feature freeze. * *The call for speakers is open: submit your proposal <http://www.openstack.org/summit/openstack-summit-atlanta-2014/call-for-spea…> by end of **today**.* * Applying for Visa? Looking for accommodation in Atlante? Visit http://openstack.org/summit * Applications for Travel Support Program. <https://wiki.openstack.org/wiki/Travel_Support_Program> Apply by Mar 2. Tips 'n Tricks * By Jay Pipes <http://www.joinfu.com/>: Setting Up an External OpenStack Testing System -- Part 1 <http://www.joinfu.com/2014/02/setting-up-an-external-openstack-testing-syst…> * By Christian Berendt <http://www.cberendt.de/>: Use of full virtualization with Xen/Libvirt <http://www.cberendt.de/2014/02/use-of-full-virtualization-with-xenlibvirt/> * By Kenneth Hui <http://www.rackspace.com/blog/laying-cinder-block-volumes-in-openstack-part…>: Laying Cinder Block (Volumes) In OpenStack, Part 2: Solutions Design <http://www.rackspace.com/blog/laying-cinder-block-volumes-in-openstack-part…> * By Andrew Hutchings <http://www.linuxjedi.co.uk/search/label/openstack>: Caveats with Eventlet <http://www.linuxjedi.co.uk/2014/02/caveats-with-eventlet.html> and Working with Syslog <http://www.linuxjedi.co.uk/2014/02/working-with-syslog.html> * By Everett Toews <http://blog.phymata.com/>: Fixing my OpenStack Gerrit Permission denied (publickey) problem <http://blog.phymata.com/2014/02/12/fixing-my-openstack-gerrit-problem/> * By Inside My Home Rackspace Private Cloud, OpenStack Lab, Part 1: The Setup <http://www.rackspace.com/blog/inside-my-home-rackspace-private-cloud-openst…> * By Miranda ZHANG <http://mirandazhangq.wordpress.com/>: Wish List, Common Misunderstanding, Undocumented -- OpenStack Identity API -- Authentication, Add User <http://mirandazhangq.wordpress.com/2014/02/10/wish-list-common-misunderstan…> * By Florent Flament <http://www.florentflament.com/blog/>: Customizing OpenStack RBAC policies <http://www.florentflament.com/blog/customizing-openstack-rbac-policies.html> * By Bmwiedemann <http://lizards.opensuse.org/2014/02/08/another-way-to-access-a-cloud-vms-vn…>: another way to access a cloud VM's VNC console <http://lizards.opensuse.org/2014/02/08/another-way-to-access-a-cloud-vms-vn…> Reports from Previous Events * Sayali Lunkaad's <http://sayalilunkad.github.io/> first talk <http://sayalilunkad.github.io/posts/Meetup> at Pune GNUnify OpenStack meetup <http://www.meetup.com/Indian-OpenStack-User-Group/events/162277702/> * Women In Computer Science Being Bold At Harvard University <http://www.rackspace.com/blog/women-in-computer-science-being-bold-at-harva…> Upcoming Events * Korea OpenStack Day <http://onoffmix.com/event/22995> Feb 18, 2014 - Seoul, South Korea Details <http://onoffmix.com/event/22995> * Austin OpenStack User Group Meetup <http://www.meetup.com/OpenStack-Austin/events/154331162/> Feb 19, 2014 - Austin, Texas Details <http://www.meetup.com/OpenStack-Austin/events/154331162/> * OpenStack Boston Meetup <http://www.meetup.com/Openstack-Boston/events/154504702/> Feb 19, 2014 - Boston, MA Details <http://www.meetup.com/Openstack-Boston/events/154504702/> * OpenStack Chicago Meetup <http://www.meetup.com/meetup-group-NjZdcegA/> Feb 20, 2014 - Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/> * SFBay OpenStack Hackathon #OSSFO <http://www.meetup.com/openstack/events/123227532/> Feb 20, 2014 - Details <http://www.meetup.com/openstack/events/123227532/> * OpenStack India Meetup <http://www.meetup.com/Indian-OpenStack-User-Group/events/160120142/> Feb 22, 2014 - Hyderabad, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/160120142/> * Open Cloud Summit at IBM Pulse <http://www.ibmpulseblog.com/second-open-cloud-summit-at-pulse-sunday-februa…> Feb 23 - 26, 2014 - Las Vegas, Nevada Details <http://www.ibmpulseblog.com/second-open-cloud-summit-at-pulse-sunday-februa…> * Mobile World Congress <http://www.mobileworldcongress.com/> Feb 24 - 27, 2014 - Barcelona, Spain Details <http://www.mobileworldcongress.com/> * OpenStack India Meetup <http://www.meetup.com/Indian-OpenStack-User-Group/events/163302142/> Mar 01, 2014 - Bangalore, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/163302142/> * SFBay Meetup - Beginner track <http://www.meetup.com/openstack/events/123227552/> Mar 06, 2014 - Sunnyvale, CA Details <http://www.meetup.com/openstack/events/123227552/> * SFBay OpenStack Hackathon #OSSFO <http://www.meetup.com/openstack/events/123227542/> Mar 06, 2014 - Details <http://www.meetup.com/openstack/events/123227542/> * Cloud Connect Summit at Interop <http://www.interop.com/lasvegas/conference/cloud-connect.php> Mar 31 - Apr 01, 2014 - Las Vegas, Nevada Details <http://www.interop.com/lasvegas/conference/cloud-connect.php> * World Hosting Days <http://www.worldhostingdays.com/eng/>Apr 01 - 03, 2014 - Rust, Germany Details <http://www.worldhostingdays.com/eng/> * PyCon <https://us.pycon.org/2014/> Apr 09 - 17, 2014 - Montreal, Canada Details <https://us.pycon.org/2014/> * OpenStack Summit May 2014 <http://www.openstack.org/summit/openstack-summit-atlanta-2014/> May 12 - 16, 2014 - Atlanta, GA Details <http://www.openstack.org/summit/openstack-summit-atlanta-2014/> * Cloud World Forum <http://cloudwf.com/> Jun 17 - 18, 2014 - London, UK Details <http://cloudwf.com/> Security Advisories * Glance Swift store backend password leak (CVE-2014-1948) <http://lists.openstack.org/pipermail/openstack-announce/2014-February/00019…> Popular OpenStack Videos of the Week * OpenStack Networking Hands-on Lab <https://www.youtube.com/watch?v=_pLPtGiGh9M> * Bridging the Gap Explaining OpenStack to VMware Administrators <https://www.youtube.com/watch?v=1JAHopy-aVs> Got Answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * "MissingSchema at /admin/" from havana dashboard <https://ask.openstack.org/en/question/12043/missingschema-at-admin-from-hav…> * Failed to retrieve management_url from token <https://ask.openstack.org/en/question/11395/failed-to-retrieve-management_u…> * live-migration with qemu is possible? <https://ask.openstack.org/en/question/12033/live-migration-with-qemu-is-pos…> * where does ceilometer stores all the data related to instances <https://ask.openstack.org/en/question/11964/where-does-ceilometer-stores-al…> * Devstack (Havana) - curl SSL Certification verification error <https://ask.openstack.org/en/question/11834/devstack-havana-curl-ssl-certif…> * Nova compute service does not shutdown gracefully when it is terminated abruptly during create server api <https://ask.openstack.org/en/question/11830/nova-compute-service-does-not-s…> * How to configure networking when Controller and Compute are connected together through one public interface <https://ask.openstack.org/en/question/11805/how-to-configure-networking-whe…> * Connectivity breaks between compute and controller <https://ask.openstack.org/en/question/11812/connectivity-breaks-between-com…> * Why isn't neutron net-create working? <https://ask.openstack.org/en/question/11797/why-isnt-neutron-net-create-wor…> * OVS flows disappear <https://ask.openstack.org/en/question/11778/ovs-flows-disappear/> * how to create instances from web interface <https://ask.openstack.org/en/question/11770/how-to-create-instances-from-we…> Other News * python-swiftclient releases <http://lists.openstack.org/pipermail/openstack-announce/2014-February/00019…> * Jan 30 OpenStack Foundation Board Meeting <http://blogs.gnome.org/markmc/2014/02/07/jan-30-openstack-foundation-board-…> * How OpenStack parallels the adoption of Linux <http://opensource.com/business/14/2/openstack-parallels-linux> * Open Mic Spotlight: Chang Bo Guo <http://www.openstack.org/blog/2014/02/open-mic-spotlight-chang-bo-guo/> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-02-11-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-02-11-21.…> Latest Activity In Projects Do you want to see at a glance the bugs filed and solved this week? Latest patches submitted for review? Check out the individual project pages on OpenStack Activity Board -- Insights <http://activity.openstack.org/data/display/OPNSTK2/>. * Telemetry (Ceilometer) <http://activity.openstack.org/data/display/OPNSTK2/ceilometer> * Block Storage (Cinder) <http://activity.openstack.org/data/display/OPNSTK2/cinder> * Image Service (Glance) <http://activity.openstack.org/data/display/OPNSTK2/glance> * Orchestration API <http://activity.openstack.org/data/display/OPNSTK2/heat> (Heat) <http://activity.openstack.org/data/display/OPNSTK2/heat> * Dashboard (Horizon) <http://activity.openstack.org/data/display/OPNSTK2/horizon> * Bare Metal Provisioning (Ironic) <http://activity.openstack.org/data/display/OPNSTK2/ironic> * Identity (Keystone) <http://activity.openstack.org/data/display/OPNSTK2/keystone> * Manuals <http://activity.openstack.org/data/display/OPNSTK2/openstack-manuals> * Networking (Neutron) <http://activity.openstack.org/data/display/OPNSTK2/neutron> * Compute (Nova) <http://activity.openstack.org/data/display/OPNSTK2/nova> * Hadoop Cluster as a Service (Savanna) <http://stackalytics.com/?release=icehouse&metric=commits&project_type=opens…> * Object Storage (Swift) <http://activity.openstack.org/data/display/OPNSTK2/swift> * Database As A Service (Trove) <http://activity.openstack.org/data/display/OPNSTK2/trove> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

python-swiftclient releases
by John Dickinson 14 Feb '14

14 Feb '14

I'm pleased to announce a couple of big releases for python-swiftclient: versions 1.9.0 and 2.0.2. You can find them both on PyPI: https://pypi.python.org/pypi/python-swiftclient/2.0.2 https://pypi.python.org/pypi/python-swiftclient/1.9.0 So why the two releases? The 2.0.2 release is the result of migrating to the Python requests library. The 1.9.0 release is the final release of the 1.X series and includes all unreleased changes before the port to requests. Below is a summary of the changes included in 1.9.0 and 2.0.2. 1.9.0 new features: * Add parameter --object-name, which: 1) Sets target object name when upload single file 2) Sets object prefix when upload a directory * Add capabilities command This option uses the new /info endpoint to request the remote capabilities and nicely display it. * Allow custom headers when using swift download (CLI) A repeatable option, --header or -H, is added so a user can specify custom headers such as Range or If-Modified-Since when downloading an object with the swift CLI. 2.0.2 new features and important info: * Ported to use the "requests" library to support TLS/SSL certificate validation. The certificate validation changes the interpretation and usage of the "--insecure" option. Usage of the requests library has two important caveats: 1) SSL compression is no longer settable with the "--no-ssl-compression" option. The option is preserved as a no-op for client compatibility. SSL compression is set by the system SSL library. 2) The requests library does not currently support Expect 100-continue requests on upload. Users requiring this feature should use python-swiftclient 1.9.0 until requests support this feature or use a different API wrapper. Please pay special attention to these changes. There are no plans to maintain ongoing development on the 1.X series. All future work, including support for Python 3, will happen in the 2.X series. I'd also like to explicitly thank the eNovance development team, especially Tristan Cacqueray, Christian Schwede, and Chmouel Boudjnah, for their work in these releases. In addition to several smaller features, they led the effort to port python-swiftclient to the requests library. Note: 2.0.2 and not simply 2.0 is because of a bug that was discovered after 2.0 was tagged. See http://lists.openstack.org/pipermail/openstack-dev/2014-February/027172.html for details. --John

1 0

OpenStack 2013.2.2 released
by Alan Pevec 13 Feb '14

13 Feb '14

Hello everyone, The OpenStack Stable Maintenance team is happy to announce the release of the 2013.2.2 stable Havana release. We have been busy reviewing and accepting backported bugfixes to the stable/havana branches according to the criteria set at: https://wiki.openstack.org/wiki/StableBranch A total of 98 bugs have been fixed across all projects. These updates to Havana are intended to be low risk with no intentional regressions or API changes. The list of bugs, tarballs and other milestone information for each project may be found on Launchpad: https://launchpad.net/nova/havana/2013.2.2 https://launchpad.net/keystone/havana/2013.2.2 https://launchpad.net/glance/havana/2013.2.2 https://launchpad.net/neutron/havana/2013.2.2 https://launchpad.net/cinder/havana/2013.2.2 https://launchpad.net/horizon/havana/2013.2.2 https://launchpad.net/heat/havana/2013.2.2 https://launchpad.net/ceilometer/havana/2013.2.2 Release notes may be found on the wiki: https://wiki.openstack.org/wiki/ReleaseNotes/2013.2.2 The freeze on the stable/havana branches will be lifted today as we begin working toward the 2013.2.3 release, to be released on April 3rd and managed by Adam Gandelman. Thanks, Alan

1 0

[OSSA 2014-004] Glance Swift store backend password leak (CVE-2014-1948)
by Jeremy Stanley 12 Feb '14

12 Feb '14

OpenStack Security Advisory: 2014-004 CVE: CVE-2014-1948 Date: February 12, 2014 Title: Glance Swift store backend password leak Reporter: Nikhil Komawar (Rackspace) Products: Glance Versions: 2013.2 versions up to 2013.2.1 Description: Nikhil Komawar from Rackspace reported an information leak in Glance logs. The password for the Swift store backend is logged at WARNING level as part of the URL when authentication to a store fails if image location is not disabled by policy or the store is a single-tenant configuration. An attacker with access to the logs (local shell, log aggregation system access, or accidental leak) may leverage this vulnerability to elevate privileges and gain direct full access to the Glance Swift store backend. Only Glance setups using the Swift store backend are affected. Icehouse (development branch) fix: https://review.openstack.org/71419 Havana fix: https://review.openstack.org/72473 Notes: This fix will be included in the icehouse-2 development milestone and the upcoming 2013.2.2 release. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1948 https://launchpad.net/bugs/1275062 -- Jeremy Stanley OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (Jan 31 - Feb 7)
by Stefano Maffulli 07 Feb '14

07 Feb '14

1 0

[OpenStack-announce] python-cinderclient 1.0.8 released to PyPi
by John Griffith 05 Feb '14

05 Feb '14

1 0