- OpenStack-announce - lists.openstack.org

OpenStack Community Weekly Newsletter (Feb 13 - 20)
by Stefano Maffulli 21 Feb '15

21 Feb '15

OpenStack Technical Committee Update: Project Reform Progress Over the last few months, the Technical Committee has been discussing plans to dissolve the binary concept of the integrated release and adapt our projects structure to the future needs of collaborative development in the OpenStack community. A specification was written to describe the rationale for the reform and its goals. In the past weeks, the OpenStack Technical Committee approved a first set of changes, affecting how OpenStack upstream teams and projects developed by our community are organized. Contributing to open cloud projects without losing your mind If you’re interested in contributing to OPNFV, OpenDaylight or OpenStack, there are a few things to keep in mind to make the process easier. Welcome to the wild west of networking and cloud infrastructure It may look like the wild west now, but the future of open networking and cloud infrastructure is bright. That’s the main takeaway from a panel featuring speakers from Red Hat, Ericsson, Cumulus Networks and the OpenStack Foundation moderated by Neela Jacques at the Linux Collaboration Summit. Nice APIs: Limits in OpenStack SDK Brian Curtin has been working with a team on the OpenStack SDK, a project aimed at providing a great experience for Python developers who use OpenStack. He and his colleagues want to enable people to build great things on top of OpenStack and are looking for feedback. The Road to Vancouver * Vote now for OpenStack Vancouver Summit presentations: Voting ends 5 p.m. Central Time Zone Monday, February 23. * Superuser Awards Nominations Now Open * Applications for OpenStack Travel Support Program with Tips for getting a travel grant to the next OpenStack Summit * Vancouver Summit Sponsorships Now Available * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * GSoC2015: Its time for potential mentors and participants! And Call for mentors - Upstream Training, Google Summer of Code, Outreachy (AKA OPW) * proposal for a "OpenStack Application Tutorial" application * Lets keep our community open, lets fight for it Deadlines and Development Priorities * [cinder] Kilo Deadlines need to have a CI by end of K-3, March 19th 2015 * [cinder] Proposals for Liberty Summit * [nova] List of all Feature Freeze Exception requests Reports From Previous Events * OpenStack Swift Hackathon Security Advisories and Notices * None Tips ‘n Tricks * By Daniel P. Berrangé: Nova metadata recorded in libvirt guest instance XML and Nova and its use of Olso Incubator Guru Meditation Reports * By Keith Tenzer: Building Custom Dashboards in OpenStack Horizon * By Tim Bell: Delegation of rights * By Sébastien Han: OpenStack and Backup * By Matt Fischer: Using Keystone’s LDAP Connection Pools to Speed Up OpenStack * By Dan Kingshott: Opensource Log Aggregation: Kibana * By Jamie Lennox: Loading Authentication Plugins * By Julien Danjou: Hacking Python AST: checking methods declaration * By Adam Young: Adding an LDAP backed domain to a Packstack install Upcoming Events The 2015 events plan is now available on the Global Events Calendar wiki. * Feb 19 - 20, 2015 World Techies Forum Mumbai, Maharashtra, IN * Mar 04, 2015 OpenStack Finland meetup Helsinki, Uusimaa, FI * Mar 04, 2015 #CloudBeerGothenburg Gothenburg, SE * Mar 04, 2015 Dallas OpenStack Meetup Plano, Texas, US * Mar 05, 2015 9thOpenStackUGMeetup Zurich, Zurich, CH * Mar 11 - 12, 2015 Cloud Expo Europe London, GB * Mar 11, 2015 Philadelphia OpenStack Meetup Philadelphia, PA, US * Mar 12, 2015 OpenStack NYC Meetup New York, NY, US * Mar 12, 2015 Ceph Day San Francisco San Francisco, California, US * Mar 17, 2015 OpenStack Munich Meetup Munich, Bavaria, DE * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Mar 26, 2015 #CloudBeerStockholm Stockholm, SE * Mar 31, 2015 Ceph Day Amsterdam Amsterdam, Netherlands, NL * Apr 01, 2015 OpenStack Meetup DFW Frisco, Texas, US * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * Chris Anderson on how the cloud fosters innovation * Cumulus Networks and Mirantis: An Open Stack for Open Network Hardware * Three cloud computing myths, debunked * TaskFlow 0.7.1 released * Welcome new user group: OpenStack Turkey Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * How to import existing volumes in Cinder * How to repair a broken fstab in guest VM? * Openstack orchestration of OpenShift without heat The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

OpenStack Community Weekly Newsletter (Feb 6 - 13)
by Stefano Maffulli 13 Feb '15

13 Feb '15

OpenStack crowns “Liberty” its next release name OpenStack’s next release will be called Liberty. While you might be thinking of the word liberty in terms of “freedom” (as in free beer or other things), the name comes from a village in the Canadian province of Saskatchewan. Introducing PoshStack, the PowerShell client for OpenStack OpenStack SDKs exist for several programming languages, including Python, Go, Ruby, and many more. For those who don't wish to write code, users in the *nix world can use Curl at the command line to perform operations. What about Microsoft Windows administrators? Windows admins can use PowerShell and PoshStack". How you can help refresh OpenStack’s Documentation site If you’ve checked out the OpenStack Documentation site recently, you may have noticed a new look. The refreshed design of the landing page is the beginning of an ongoing overhaul. The site is, however, open under construction and people are already applauding the refresh. The move to a simpler markup language will go a long way to helping OpenStack contributors work on the documentation that matters to them. GSoC2015: Its time for potential mentors and participants! It is time for us to apply for slots for the annual Google Summer of Code event. Last year, we got a bunch of slots and had awesome projects. We are hoping this year we will get even more slots, uber cool projects etc. If you are interested - either as a mentor or as a participant, please feel free to add your name, project ideas to the wiki page. The Road to Vancouver * Applications for OpenStack Travel Support Program with Tips for getting a travel grant to the next OpenStack Summit * Vancouver Summit Sponsorships Now Available * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * The Future of OpenStack’s EC2 APIs * Lets keep our community open, lets fight for it * What should openstack-specs review approval rules be ? * The API WG mission statement Deadlines and Development Priorities * [cinder] Kilo Deadlines need to have a CI by end of K-3, March 19th 2015 Reports From Previous Events * Big in Japan: OpenStack Days in Tokyo double in size * OpenStack Day in Korea 2015: to infinity and beyond! * “Kon-ni-chi-wa – Hello, Japan!” — OpenStack Days Tokyo 2015 Security Advisories and Notices * None Tips ‘n Tricks * By Xav Paice: Creating OpenStack debs for everyday operators * By Mehdi Abaakouk: Writing a Gnocchi storage driver for ceph * By Jamie Lennox: Step-by-Step: Kerberized Keystone * By Adam Young: Debugging OpenStack with rpdb * By Lars Kellogg-Stedman: Installing nova-docker with devstack * By Sébastien Han: OpenStack: perform consistent snapshots with Qemu Guest Agent * By Sean Dague: how to use a devstack external plugin in gate testing * By Clint Byrum: Firehose Email Reading Kit https://github.com/SpamapS/ferk Upcoming Events The 2015 events plan is now available on the Global Events Calendar wiki. Supercomputing 2015 Call for Presentations Deadlines Coming Up * Feb 13, 2015 Gnunify OpenStack Mini Conf Pune, Maharastra, IN * Feb 18, 2015 First OpenStack BW Meetup Stuttgart, Baden-Württemberg, DE * Feb 18, 2015 First OpenStack meetup in Stuttgart Stuttgart, DE * Feb 18, 2015 OpenStack L.A. Meetup Pasadena, CA, US * Feb 19 - 20, 2015 World Techies Forum Mumbai, Maharashtra, IN * Mar 04, 2015 OpenStack Finland meetup Helsinki, Uusimaa, FI * Mar 04, 2015 #CloudBeerGothenburg Gothenburg, SE * Mar 04, 2015 Dallas OpenStack Meetup Plano, Texas, US * Mar 05, 2015 9thOpenStackUGMeetup Zurich, Zurich, CH * Mar 11 - 12, 2015 Cloud Expo Europe London, GB * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Mar 26, 2015 #CloudBeerStockholm Stockholm, SE * Apr 01, 2015 OpenStack Meetup DFW Frisco, Texas, US * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * OpenStack-zh mailing list is live! Go sign up and let all the Chinese Community members know about it * python-heatclient 0.3.0 released * Rebase button enabled for all Gerrit users Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * How is OpenStack functionally different from vCenter? * What is the difference between Nova metadata service and Heat metadata server? * Installing Helion OpenStack with ESX -> where download "vCenter Proxy Appliance" & VCN Agent Appliance? * Rootwrap - python - write to root only owned file * Swift: custom 404 & 401 error pages? The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

python-heatclient 0.3.0 released
by Steve Baker 10 Feb '15

10 Feb '15

The heat development community would like to announce the release of python-heatclient version 0.3.0. python-heatclient is a client library for Heat built on the Heat orchestration API. It provides a Python API (the heatclient module) and a command-line tool (heat). This release can be installed from the following locations: http://tarballs.openstack.org/python-heatclient https://pypi.python.org/pypi/python-heatclient Changes in this release: - The following new CLI commands have been added: config-create Create a software configuration. config-delete Delete software configurations. config-show View details of a software configuration. deployment-delete Delete software deployments. deployment-metadata-show Get deployment configuration metadata for the specified server. deployment-show Show the details of a software deployment. output-list Show available outputs. output-show Show a specific stack output. service-list List the Heat engines. - Environment files now support the parameter_defaults section. - Now works with python 3.4 - output-show command gains flags --all and --format Other changes: https://launchpad.net/python-heatclient/+milestone/v0.3.0

1 0

OpenStack Community Weekly Newsletter (Jan 30 - Feb 6)
by Stefano Maffulli 06 Feb '15

06 Feb '15

OpenStack "L" naming poll We'd like your help again in selecting the right name for the development cycle and release coming after "Kilo". Our next summit will happen in Vancouver, BC (Canada) in May. L candidate names were proposed, selected and checked for various issues... leaving 4 candidates on the final public poll. Please take a moment to participate to our poll: https://www.surveymonkey.com/r/openstack-l-naming Take these OpenStack Infrastructure tools and run! When you’ve got thousands of proposed patchsets, comments and test environments flooding in every day, you need the right tools to handle them. OpenStack created these free software tools to handle its burgeoning scale - here’s what they can do for you. How to craft a successful OpenStack Summit proposal The community has plenty to say: there were over 1,000 proposals for less than 200 talks at the Paris Summit in November 2014. For the upcoming Summit in Vancouver, there are 17 Summit tracks, from community building and security to hands-on labs. The deadline for proposals is February 9. Musings and Predictions from Superuser's Editorial Advisors We spoke to Superuser’s editorial advisory board to hear their perspectives on the Kilo release and what they’re looking forward to as the Vancouver Summit approaches in May. The Road to Vancouver * Call For Speakers open until February 9 – TWO MORE DAYS! * Applications for OpenStack Travel Support Program * Vancouver Summit Sponsorships Now Available * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * All About That Loop. Lessons from the OpenStack Product Mid-Cycle * Finding people to work on the EC2 API in Nova * do we really need project tags in the governance repository? * “Vanilla OpenStack” Doesn’t Exist and Never Will * The API WG mission statement Deadlines and Development Priorities * [cinder] Kilo Deadlines need to have a CI by end of K-3, March 19th 2015 * OpenStack 2014.2.2 released [Stable] * Kilo-2 development milestone available Reports From Previous Events * Big in Japan: OpenStack Days in Tokyo double in size * OpenStack Nova Mid-cycle Meetup, Day 3 Security Advisories and Notices * [OSSN 0043] glibc 'GHOST' vulnerability can allow remote code execution Tips ‘n Tricks * By Lars Kellogg-Stedman: Installing nova-docker in N easy steps and Filtering libvirt XML in Nova * By Tim Bell: Choosing the right image * By Craige McWhirter: Attaching Multiple Network Interfaces and Floating IPs to OpenStack Instances with Neutron * By Sébastien Han: OpenStack and Ceph: RBD discard Upcoming Events The 2015 events plan is now available on the Global Events Calendar wiki. * Feb 11, 2015 HandsOn Prescriptive Topology Mgr Mountain View, CA, US * Feb 11, 2015 CloudCamp Bangladesh @Digital World Dhaka, BD * Feb 18, 2015 First OpenStack BW Meetup Stuttgart, Baden-Württemberg, DE * Feb 19 - 20, 2015 World Techies Forum Mumbai, Maharashtra, IN * Mar 04, 2015 OpenStack Finland meetup Helsinki, Uusimaa, FI * Mar 11 - 12, 2015 Cloud Expo Europe London, GB * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * OpenStack Foundation 2014 Annual Report * Hypervisor support matrix now in GIT * Announcing 61 new infra puppet modules * New small project: stackquery-dashboard * What Do OpenStack Operators Do All Day? * Playing with QueueController * Ubuntu OpenStack Charms: 15.01 release * Python 3 is dead, long live Python 3 * What's Up Doc? Jan 30 2015 Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * Helion baremetal stuck on undercloud install - no valid host found * vpn service restarted in any tenant when add/updating/del ipsec connection - openstack juno 2014.2.1 * heat SoftwareDeployment executed twice when depends_on property used * HP Helion CE Installation of the under cloud and over cloud fails at ipmi validation. * Help about OS_Federation register a idp, map and rules The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

Kilo-2 development milestone available
by Thierry Carrez 06 Feb '15

06 Feb '15

Hi everyone, The second milestone of the Kilo development cycle, "kilo-2" is now reached for the Kilo "integrated release" projects, Keystone, Glance, Nova, Horizon, Neutron, Cinder, Ceilometer, Heat, Trove, Sahara, and Ironic ! It contains all the new features and bugfixes that have been added since the the Christmas holiday break. You can find the full list of new features and fixed bugs, as well as tarball downloads, at: https://launchpad.net/keystone/kilo/kilo-2 https://launchpad.net/glance/kilo/kilo-2 https://launchpad.net/nova/kilo/kilo-2 https://launchpad.net/horizon/kilo/kilo-2 https://launchpad.net/neutron/kilo/kilo-2 https://launchpad.net/cinder/kilo/kilo-2 https://launchpad.net/ceilometer/kilo/kilo-2 https://launchpad.net/heat/kilo/kilo-2 https://launchpad.net/trove/kilo/kilo-2 https://launchpad.net/sahara/kilo/kilo-2 https://launchpad.net/ironic/kilo/kilo-2 84 blueprints were implemented and no less than 708 bugs were fixed during this milestone (not including fixes that landed in Oslo libraries). The next development milestone, kilo-3, is scheduled for March 19th, and will coincide with the final feature freeze for integrated projects in the Kilo cycle. You can further track upcoming features and Kilo release cycle status at: http://status.openstack.org/release/ Regards, -- Thierry Carrez (ttx)

1 0

OpenStack 2014.2.2 released
by Chuck Short 05 Feb '15

05 Feb '15

Hello everyone, The OpenStack Stable Maintenance team is happy to announce the 2014.2.2 stable Juno release. We have been busy reviewing and accepting backported bugfixes to the stable/Juno branches according to the criteria set at: https://wiki.openstack.org/wiki/StableBranch A total of 104 bugs have been fixed across all projects since 2014.1.2. These updates to Juno are intended to be low risk with no intentional regressions or API changes. The list of bugs, tarballs and other milestone information for each project may be found on Launchpad: https://launchpad.net/ceilometer/juno/2014.2.2 https://launchpad.net/cinder/juno/2014.2.2 https://launchpad.net/glance/juno/2014.2.2 https://launchpad.net/heat/juno/2014.2.2 https://launchpad.net/horizon/juno/2014.2.2 https://launchpad.net/keystone/juno/2014.2.2 https://launchpad.net/neutron/juno/2014.2.2 https://launchpad.net/nova/juno/2014.2.2 https://luanchpad.net/sahara/juno/2014.2.2 https://launchpad.net/trove/juno/2014.2.2 Release notes may be found on the wiki: https://wiki.openstack.org/wiki/ReleaseNotes/2014.2.2 The freeze on the stable/juno branches will be lifted today as we begin working toward 2014.2.3, which will be released on a TBD. Thanks chuck

1 0

[Swift] Swift 2.2.2 released today
by John Dickinson 02 Feb '15

02 Feb '15

Everyone, I'm happy to announce that today we have release Swift 2.2.2. (Yes, that's 2.2.2 on 2/2.) This release has a few very important features that came directly from production clusters. I recommend that you upgrade so you can take advantage of the new goodness. As always, you can upgrade to this version of Swift with zero end-user downtime. So what's so great in this release? Below are some highlights, but please read the full changelog at https://github.com/openstack/swift/blob/master/CHANGELOG * Data placement changes This release has several major changes to data placement in Swift in order to better handle different deployment patterns. First, with an unbalance-able ring, less partitions will move if the movement doesn't result in any better dispersion across failure domains. Also, empty (partition weight of zero) devices will no longer keep partitions after rebalancing when there is an unbalance-able ring. Second, the notion of "overload" has been added to Swift's rings. This allows devices to take some extra partitions (more than would normally be allowed by the device weight) so that smaller and unbalanced clusters will have less data movement between servers, zones, or regions if there is a failure in the cluster. Finally, rings have a new metric called "dispersion". This is the percentage of partitions in the ring that have too many replicas in a particular failure domain. For example, if you have three servers in a cluster but two replicas for a partition get placed onto the same server, that partition will count towards the dispersion metric. A lower value is better, and the value can be used to find the proper value for "overload". The overload and dispersion metrics have been exposed in the swift-ring-build CLI tools. See http://swift.openstack.org/overview_ring.html for more info on how data placement works now. * Improve container replication for large, out-of-date containers * Added console logging to swift-drive-audit * Changed retaliating to support whitelisting and blacklisting based on account metadata (sysmeta). Note that the existing config options continue to work. This release is the combined work of 20 developers, including 3 first-time Swift contributors: * Harshit Chitalia * Dhriti Shikhar * Nicolas Trangez Thank you to everyone who contributed: developers, support staff, and operators alike--all of whom helped find and diagnose the problems solved in this release. --John

1 0

OpenStack Community Weekly Newsletter (Jan 23 - 30)
by Stefano Maffulli 30 Jan '15

30 Jan '15

Working to bridge the developer/end-user divide in OpenStack The Product Working Group will embark on a listening campaign to improve dialogue between developers and their managers. How to craft a successful OpenStack Summit proposal Inspiration, tips and a kick in the pants for the Feb. 9 deadline. An atomic upgrade process for OpenStack compute nodes Steve Dake has been involved with the Kolla project, a project to containerize OpenStack as well as Magnum, a project to provide containers as a service. In his blog post he talks about containers, how they are are super useful as an upgrade tool for OpenStack. Building a cloud career with OpenStack What can OpenStack do for you? How about helping you along your career? OpenStack is a growing space and there are more than enough jobs still to go around for qualified seekers. So how do you go about getting one of those jobs? The Road to Vancouver * Call For Speakers open until February 9 – DEADLINE APPROACHING FAST * Applications for OpenStack Travel Support Program * Vancouver Summit Sponsorships Now Available * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * Finding people to work on the EC2 API in Nova * Vancouver Design Summit format changes * do we really need project tags in the governance repository? Deadlines and Development Priorities * [Keystone] Spec proposal deadline Feb 5 * [Cinder] Cutoff deadlines for cinder drivers: volume drivers need to have a CI by end of K-3, March 19th 2015 * [nova] Kilo FeatureProposalFreeze 22nd Jan and FeatureFreeze 5th Feb * [neutron] BPs in Launchpad for Kilo-2 Reports From Previous Events * OpenStack Nova Mid-cycle Meetup, Day 1 * Day One of the OpenStack Product Management Kilo Midcycle * OpenStack Nova Mid-cycle Meetup, Day 2 * Day Two of the OpenStack Product Management Kilo Midcycle Security Advisories and Notices * Glance user storage quota bypass (CVE-2014-9623) Tips ‘n Tricks * By Antonio Cimmino: How to install a multi region devstack Part-1 * By Tim Bell: Exceeding tracked connections * By Adam Johnson: Scalable open virtual networking with MidoNet * By Christian Berendt: Simple auto scaling environment with Heat Upcoming Events The 2015 events plan is now available on the Global Events Calendar wiki. * Jan 31 - Feb 01, 2015 FOSDEM Brussels, BE * Feb 02 - 03, 2015 Upstream Training in Japan Tokyo, JP * Feb 02, 2015 OpenStack Seattle Meetup Seattle, WA, US * Feb 03 - 04, 2015 OpenStack Days Tokyo 2015 Tokyo, JP * Feb 05, 2015 OpenStack Day in Korea Seoul, Seoul, KR * Feb 11, 2015 HandsOn Prescriptive Topology Mgr Mountain View, CA, US * Feb 11, 2015 CloudCamp Bangladesh @Digital World Dhaka, BD * Feb 18, 2015 First OpenStack BW Meetup Stuttgart, Baden-Württemberg, DE * Feb 19 - 20, 2015 World Techies Forum Mumbai, Maharashtra, IN * Mar 04, 2015 OpenStack Finland meetup Helsinki, Uusimaa, FI * Mar 11 - 12, 2015 Cloud Expo Europe London, GB * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * Swift Feature Highlight - TempURLs * FOSDEM 2015: Where you can learn more about OpenStack * Interview with Kenneth Hui: Involvement with OpenStack, thoughts and future of the Trove project, and more * Why Fuel now runs on Docker * OpenStack Crossproject Meeting: Summary and full logs. Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * How to set up a Federation in Openstack Juno? * Attempt to install Nova-Docker driver on Fedora 21 * how to use keyring? * Can't get requested routers from kwarg in def sync_routers * VNC port not open in firewall The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

[OSSA 2015-003] Glance user storage quota bypass (CVE-2014-9623)
by Tristan Cacqueray 26 Jan '15

26 Jan '15

=============================================== OSSA-2015-003: Glance user storage quota bypass =============================================== :Date: January 26, 2015 :CVE: CVE-2014-9623 Affects ~~~~~~~ - Glance: up to 2014.1.3 and 2014.2 versions up to 2014.2.1 Description ~~~~~~~~~~~ Tushar Patil from NTT reported a vulnerability in Glance. By deleting images that are being uploaded, a malicious user can overcome the storage quota and thus may overrun the backend. Images in deleted state are not taken into account by quota and won't be effectively deleted until the upload is completed. Only Glance setups configured with user_storage_quota are affected. Patches ~~~~~~~ - https://review.openstack.org/149646 (Icehouse) - https://review.openstack.org/149387 (Juno) - https://review.openstack.org/144464 (Kilo) Credits ~~~~~~~ - Tushar Patil from NTT (CVE-2014-9623) References ~~~~~~~~~~ - https://launchpad.net/bugs/1398830 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9623 Notes ~~~~~ - This fix will be included in the kilo-2 development milestone and in future 2014.2.2 (juno) and 2014.1.4 (icehouse) releases. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (Jan 16 - 23)
by Stefano Maffulli 24 Jan '15

24 Jan '15

The Whys and Hows of the Oslo Namespace Change During the Kilo cycle the Oslo team has been busy deprecating the oslo. namespace in all of our projects. The first question this probably raises for most people is: why? Ben Nemec has the answer in his blog post and also explains how the Common Libraries team has fixed the issue. The Road to Vancouver * Call For Speakers open until February 9 * Accepting applications for OpenStack Travel Support Program Relevant Conversations * Will the Big Tent “break” OpenStack? * OpenStack Product Management Kilo Midcycle Topics Finalized * The OpenStack Elections - Another Look * The OpenStack Foundation lumbers toward a stronger IP policy * EC2 API standalone service * Vancouver Design Summit format changes Deadlines and Development Priorities * [Keystone] Spec proposal deadline Feb 5 * [Cinder] Cutoff deadlines for cinder drivers: volume drivers need to have a CI by end of K-3, March 19th 2015 * [nova] Kilo FeatureProposalFreeze 22nd Jan and FeatureFreeze 5th Feb * Etherpad for the Nova midcycle meetup * Etherpad for the Keystone midcycle meetup * Etherpad for the Cinder midcycle meetup * [neutron] BPs in Launchpad for Kilo-2 * [Ironic] Bay Area Midcycle * [barbican] Kilo Mid-Cycle Sprint * Infrastructure Puppet module split sprint, Jan 28 Reports From Previous Events * OpenStack Bootstrapping Hour - oslo.messaging anti-patterns - Friday Jan 16th 17:00 UTC * Linux Conf Australia 2015 Security Advisories and Notices * [OSSA 2015-002.1] Glance v2 API unrestricted path traversal through filesystem:// scheme (CVE-2015-1195) ERRATA 1 Tips ‘n Tricks * By Alessandro Pilotti: SaltStack states for OpenStack * By Sébastien Han: OpenStack Cinder with Ceph under the hood * By James Page: Extreme OpenStack: Scale testing OpenStack Messaging * By Jason Baker: Building a successful OpenStack group * By Sébastien Han: OpenStack: disable a compute node during its first bootstrap * By Shaifali Agrawal: Two Merge so far… * By Lars Kellogg-Stedman: Running nova-libvirt and nova-docker on the same host Upcoming Events 2015 OpenStack Foundation Events Plan and Calls for Papers Available. The 2015 events plan is now available on the Global Events Calendar wiki. The detailed spreadsheet covers industry events, Summits (dates and locations), as well as regional OpenStack Days organized by the community. If you’re interested in sponsoring or speaking at a planned OpenStack Day, please contact the contact listed in the spreadsheet. * Jan 26 - 27, 2015 Product Management Group Meeting Palo Alto, CA, US * Jan 26, 2015 OpenStack Production-Grade Doha, QA * Jan 27 - 29, 2015 Cinder Kilo Midcycle Meetup Austin, Texas, US * Jan 31 - Feb 01, 2015 FOSDEM Brussels, BE * Feb 02 - 03, 2015 Upstream Training in Japan Tokyo, JP * Feb 02, 2015 OpenStack Seattle Meetup Seattle, WA, US * Feb 03 - 04, 2015 OpenStack Days Tokyo 2015 Tokyo, JP * Feb 05, 2015 OpenStack Day in Korea Seoul, Seoul, KR * Feb 11, 2015 HandsOn Prescriptive Topology Mgr Mountain View, CA, US * Feb 11, 2015 CloudCamp Bangladesh @Digital World Dhaka, BD * Feb 18, 2015 First OpenStack BW Meetup Stuttgart, Baden-Württemberg, DE * Feb 19 - 20, 2015 World Techies Forum Mumbai, Maharashtra, IN * Mar 04, 2015 OpenStack Finland meetup Helsinki, Uusimaa, FI * Mar 11 - 12, 2015 Cloud Expo Europe London, GB * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * Group Based Policy - Announcing Release * Call for Testing: Ubuntu OpenStack Kilo-1 development milestone * Neutron versus Chaos Monkey: Is Neutron Reliable At Scale? * Announcing git-deps: commit dependency analysis / visualization tool * gabbi: A tool for declarative testing of APIs * What's Up Doc? Jan 23 2015 [heat] [cinder] * Announcing Magnum's First Release * OpenStack Crossproject Meeting: (skipped). Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * Migrate VMs from oVirt to OpenStack * Why openvswitch logs appear in a different timezone? * openstack_dashboard wsgi gives "m2crypto.so: wrong ELF class: ELFCLASS32" error * Red Hat Enterprise Linux OpenStack Platform 5 reference architecture or tutorial for HA installation * mirroring traffic between vm The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0