- OpenStack-announce - lists.openstack.org

OpenStack 2013.2 ("Havana") is released !
by Thierry Carrez 17 Oct '13

17 Oct '13

Hello everyone, It is my great pleasure to announce the final release of OpenStack 2013.2. It marks the end of the "Havana" 6-month-long development cycle, which saw the addition of two integrated components (Ceilometer and Heat), the completion of more than 400 feature blueprints and the fixing of more than 3000 reported bugs ! You can find source tarballs for each integrated project, together with lists of features and bugfixes, at: OpenStack Compute: https://launchpad.net/nova/havana/2013.2 OpenStack Object Storage: https://launchpad.net/swift/havana/1.10.0 OpenStack Image Service: https://launchpad.net/glance/havana/2013.2 OpenStack Networking: https://launchpad.net/neutron/havana/2013.2 OpenStack Block Storage: https://launchpad.net/cinder/havana/2013.2 OpenStack Identity: https://launchpad.net/keystone/havana/2013.2 OpenStack Dashboard: https://launchpad.net/horizon/havana/2013.2 OpenStack Metering: https://launchpad.net/ceilometer/havana/2013.2 OpenStack Orchestration: https://launchpad.net/heat/havana/2013.2 The Havana Release Notes contain an overview of the key features, as well as upgrade notes and current lists of known issues. You can access them at: https://wiki.openstack.org/wiki/ReleaseNotes/Havana In 19 days, our community will gather in Hong-Kong for the OpenStack Summit: 4 days of conference to discuss all things OpenStack and a Design Summit to plan the next 6-month development cycle, codenamed "Icehouse". It's not too late to join us there, see http://www.openstack.org/summit/openstack-summit-hong-kong-2013/ for more details. Congratulations to everyone who contributed to this development cycle and participated in making this awesome release possible ! -- Thierry Carrez (ttx)

1 0

OpenStack Community Weekly Newsletter (Oct 4 – 11)
by Stefano Maffulli 11 Oct '13

11 Oct '13

Register Now For The Summit in Hong Kong <http://www.openstack.org/summit/hk?source=o12> ?????? ?????????????? ???????, ???????? <http://www.openstack.org/summit/hkc?source=o12> CoreOS, a good operating system for your OpenStack controllers <http://sebastien-han.fr/blog/2013/10/10/coreos-a-good-operating-system-for-…> Sébastien Han <http://sebastien-han.fr/> explains why in his opinion CoreOS is an excellent operation system for your OpenStack controllers. Even if CoreOS is not mature enough to be put in production, the technology has a lot of advantages and features that are worth exploring. The Growing Diversity inside OpenStack Object Storage <http://www.openstack.org/blog/2013/10/the-growing-diversity-inside-openstac…> Of all OpenStack projects, Object Storage (also known as Swift) has always been considered mature or, in other words, a place where new things rarely happen. The good news is that a lot of exciting things are happening in Swift <http://activity.openstack.org/data/display/OPNSTK2/swift>, specifically around the community participation and growing ecosystem. Improving the OpenStack Documentation Build Tools <http://jaegerandi.blogspot.com/2013/10/improving-openstack-documentation-bu…> The tools for building and checking the OpenStack Documentation manuals has been improved with a few different options for fine-grained control. The new tools are run locally and as jenkins jobs allowing writers submitting a patch to get quickly an overview about what fails. Tips ‘n Tricks * By Andreas Jaeger <http://jaegerandi.blogspot.com/search/label/OpenStack>: Easily read locally built OpenStack manuals <http://jaegerandi.blogspot.com/2013/10/easily-read-locally-build-openstack.…> * By Raghavan Srinivas <http://www.rackspace.com/blog?author=383> (Rackspace Blog <http://www.rackspace.com/blog>): Implementing High Availability (HA) For Rackspace Private Cloud <http://www.rackspace.com/blog/implementing-high-availability-ha-for-rackspa…> * By Kenneth Hui <http://cloudarchitectmusings.com/>: Deploying A HA OpenStack Cloud On Your Laptop <http://cloudarchitectmusings.com/2013/10/07/deploying-a-ha-openstack-cloud-…> * By Adam Spiers <http://blog.adamspiers.org/>: Easier upstreaming / back-porting of patch series with git <http://blog.adamspiers.org/2013/09/19/easier-upstreaming-with-git/> * By Adam Spiers <http://blog.adamspiers.org/>: more uses for git notes, and hidden treasures in Gerrit <http://blog.adamspiers.org/2013/10/02/more-uses-for-git-notes/> * By Loïc Dachary <http://dachary.org/>: Setting up an openstack-installer test environment <http://dachary.org/?p=2352> Upcoming Events * OpenStack Core Online Forum, Oct 16 13:30 UTC <http://robhirschfeld.com/2013/10/11/openstack-core-online-forum-oct-16-1330…>, online conversation * Swift Hackathon <http://swifthackathon.eventbrite.com/> Oct 15 – 17, 2013 – Austin, TX Details <http://swifthackathon.eventbrite.com/> * LinuxCon/Cloud Open Europe <http://events.linuxfoundation.org/events/cloudopen-europe> Oct 21 – 23, 2013 – Edinburgh, Scotland, UK Details <http://events.linuxfoundation.org/events/cloudopen-europe> * Cloud Connect <http://www.cloudconnectevent.com/chicago> Oct 21 – 17, 2013 – Chicago, IL, USA Details <http://www.cloudconnectevent.com/chicago> * OpenStack Pune Meetup <http://www.meetup.com/OpenStack-Pune/>Oct 23, 2013 – Pune, India Details <http://www.meetup.com/OpenStack-Pune/> * Frankfurt Meetup <http://www.meetup.com/OpenStack-MeetUp-Frankfurt/> Oct 24, 2013 – Frankfurt, Germany Details <http://www.meetup.com/OpenStack-MeetUp-Frankfurt/> * Compute Midwest: The Convergence of Tech <http://www.computemidwest.com/> Oct 25 – 27, 2013 – Kansas City Details <http://www.computemidwest.com/> * OpenStack Havana: So many changes, so little time <http://www.mirantis.com/blog/openstack-havana-so-many-changes-so-little-tim…>, Oct 29, 2013, online webinar * USENIX LISA <https://www.usenix.org/conference/lisa13> Nov 03 – 08, 2013 – Washington DC, USA Details <https://www.usenix.org/conference/lisa13> * OpenStack User Group Meet-up: Cloud Technology Sharing by Technology Pioneer <http://osug.cyberport.hk/>Nov 04, 2013 – Hong Kong Cyberport Details <http://osug.cyberport.hk/> * China & Hong Kong User Group Meeting <http://osug.cyberport.hk/?section=Home> Nov 04, 2013 – Hong Kong, China Details <http://osug.cyberport.hk/?section=Home> * OpenStack Summit <http://www.openstack.org/summit/openstack-summit-hong-kong-2013/> Nov 05 – 08, 2013 – Hong Kong, China Details <http://www.openstack.org/summit/openstack-summit-hong-kong-2013/> * OW2 Annual Conference <http://www.ow2.org/view/OW2con-2013/> Nov 13 – 14, 2013 – Paris, France Details <http://www.ow2.org/view/OW2con-2013/> * INTEROP <http://www.interop.in/> Nov 20 – 22, 2013 – Mumbai, India Details <http://www.interop.in/> * Gartner Data Center Conference <http://www.gartner.com/technology/summits/na/data-center/> Dec 09 – 12, 2013 – Las Vegas, NV, USA Details <http://www.gartner.com/technology/summits/na/data-center/> * OpenStack Israel <http://www.openstack-israel.org/> Dec 09, 2013 – Tel-Aviv, Israel Details <http://www.openstack-israel.org/> Reports from Previous Events * OpenStack Networking w/ VMware – Theory Session, Part 1 <http://rafstack.tumblr.com/post/63656057401> * Event Report: OpenStack India Day, 2013 <http://openstackindia.wordpress.com/2013/10/10/event-report-openstack-india…> * OpenStack at the Grace Hopper Conference <http://www.openstack.org/blog/2013/10/openstack-at-the-grace-hopper-confere…> Other News * The Road to Hong Kong — OpenStack Summit Speakers #1: Load Balancing in OpenStack <http://www.mirantis.com/blog/summit-speakers-series-1-load-balancing-in-ope…> * jclouds 1.6.2 released with support for OpenStack Trove <http://blog.phymata.com/2013/10/10/jclouds-1-6-2-released-with-support-for-…> * Open Mic Spotlight: Armando Migliaccio <http://www.openstack.org/blog/2013/10/open-mic-spotlight-armando-migliaccio/> * OpenStack Project Technical Lead Interview Series #8: Michael Basnight, OpenStack Trove Project <http://www.mirantis.com/blog/openstack-project-technical-lead-interview-ser…> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-10-08-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-10-08-21.…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! <http://www.openstack.org/profile/> * Clare Springer <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, HP * huangtianhua <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Huawei * Romain Hardouin <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, URSSAF * Dave Cahill <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Midokura * Dan Reif <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, BlackMesh * Pradeep Kumar Chandani <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, GlobalLogic * Georgi Demirchev <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Simplica LLC * Trevor R Jr <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Cisco Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * How to augment instance naming (and display) in Nova and remove the ability to specify a name? <https://ask.openstack.org/en/question/5893/how-to-augment-instance-naming-a…> * What do cpu_shares, cpu_period and cpu_quota represent in flavours customization? <https://ask.openstack.org/en/question/5891/what-do-cpu_shares-cpu_period-an…> * No ‘ceilometer.compute.virt’ driver found, looking for libvirt <https://ask.openstack.org/en/question/5883/no-ceilometercomputevirt-driver-…> * How to change the polling period of ceilometer? <https://ask.openstack.org/en/question/5882/how-to-change-the-polling-period…> * How to debug nova-dhcpbridge failing to propagate lease information? <https://ask.openstack.org/en/question/5880/how-to-debug-nova-dhcpbridge-fai…> * How to specify a serial/console pty in nova? <https://ask.openstack.org/en/question/5878/how-to-specify-a-serialconsole-p…> * How to setup NFS v4 on shared instance storage? <https://ask.openstack.org/en/question/5850/how-to-setup-nfs-v4-on-shared-in…> * Metering Data not getting populated on dashboard through ceilometer. <https://ask.openstack.org/en/question/5860/metering-data-not-getting-popula…> * Cannot create a port named gre-3 because a port named gre-3 already exists on bridge br-tun <https://ask.openstack.org/en/question/5844/cannot-create-a-port-named-gre-3…> * How can I extend nova metadata to alter the user data after VM’s boot? <https://ask.openstack.org/en/question/5833/how-can-i-extend-nova-metadata-t…> * How to install heat on ubuntu 12.04? <https://ask.openstack.org/en/question/5811/how-to-install-heat-on-ubuntu-12…> * How to write data from VMs to Ceilometer database? <https://ask.openstack.org/en/question/5792/how-to-write-data-from-vms-to-ce…> * Where can I find details about vlan and gre network types? <https://ask.openstack.org/en/question/5760/where-can-i-find-details-about-v…> * What kind of policies can be created in keystone? <https://ask.openstack.org/en/question/5757/what-kind-of-policies-can-be-cre…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (Sep 27 – Oct 4)
by Stefano Maffulli 04 Oct '13

04 Oct '13

October 4th, 2013 Register Now For The Summit in Hong Kong <http://www.openstack.org/summit/hk?source=o12> ?????? ?????????????? ???????, ???????? <http://www.openstack.org/summit/hkc?source=o12> September 2013 PTL elections – Final results <http://lists.openstack.org/pipermail/openstack-announce/2013-October/000148…> Thank you to the electorate, to all those who voted and to all candidates who put their name forward for PTL for this election. A healthy, open process breeds trust in our decision making capability – thank you to all those who make this process possible. Thinking about how to Implement OpenStack Core Definition <http://robhirschfeld.com/2013/10/04/implement-core/> There have been a number of community discussions (OSCON <http://robhirschfeld.com/2013/08/06/core-community-dialogue/>, SFO & SA-TX) around the process for OpenStack Core definition <http://robhirschfeld.com/2013/08/13/openstack-core-positions/>. We’re continuing to get community feedback. So what’s next? *First…. Get involved: Upcoming Community Core Discussions* * 10/8 7pm (Tues) New York City Meetup <http://www.meetup.com/OpenStack-New-York-Meetup/events/142164302/> (Rob Hirschfeld & Monty Taylor) * 10/16 9am (Wed) *tentative* Online Meetup (details TBD, Rob Hirschfeld & Alan Clark) * 10/22 7pm (Tues) Minnesota Meetup <http://www.meetup.com/Minnesota-OpenStack-Meetup/events/138672972/> (Kyle Mestery & Sean Roberts) * Week Before Summit: Beijing Meetup hosted by Alan Clark (details TBD) What’s Next? Implementation! Rob Hirschfeld <http://robhirschfeld.com/> has some ideas about that too on his blog. Easier upstreaming / back-porting of patch series with git <http://blog.adamspiers.org/2013/09/19/easier-upstreaming-with-git/> Have you ever needed to port a selection of commits from one git <http://git-scm.com/> branch to another, but without doing a full merge? This is a common challenge and Adam Spiers <http://blog.adamspiers.org/> spends some time explaining how to ease the pain. Tips ‘n Tricks * By OpenStack Community Managers: How to Use Ask OpenStack <http://www.openstack.org/blog/2013/09/how-to-use-ask-openstack/> * By Logilab <http://www.logilab.org/view?rql=Any%20X%20ORDERBY%20AA%20DESC%20LIMIT%2010%…>: Setup your project with cloudenvy and OpenStack <http://www.logilab.org/blogentry/180819> * By Steve Hardy <http://hardysteven.blogspot.com/search/label/openstack>: Heat Providers/Environments 101 <http://hardysteven.blogspot.fr/2013/10/heat-providersenvironments-101-ive.h…> * By Mirantis <http://www.mirantis.com/>: 10 Mistakes to Avoid in Planning for OpenStack Cloud <http://www.mirantis.com/blog/10-mistakes-to-avoid-in-planning-for-openstack…> * By Mirantis <http://www.mirantis.com/>: OpenStack Swift-Compatible Windows Clients: How Do They Stack Up? <http://www.mirantis.com/blog/openstack-swift-compatible-windows-clients-how…> Upcoming Events * Gartner Symposium/IT Expo North America <http://www.gartner.com/technology/symposium/orlando/> Oct 06 – 10, 2013 – Orlando, FL, USA Details <http://www.gartner.com/technology/symposium/orlando/> * OpenStack in action ! – The Canadian Chapter <https://openstackinactioncanada.eventbrite.com/> Oct 08, 2013 – Montreal, Canada Details <https://openstackinactioncanada.eventbrite.com/> * Swift Hackathon <http://swifthackathon.eventbrite.com/> Oct 15 – 17, 2013 – Austin, TX Details <http://swifthackathon.eventbrite.com/> * LinuxCon/Cloud Open Europe <http://events.linuxfoundation.org/events/cloudopen-europe> Oct 21 – 23, 2013 – Edinburgh, Scotland, UK Details <http://events.linuxfoundation.org/events/cloudopen-europe> * Cloud Connect <http://www.cloudconnectevent.com/chicago> Oct 21 – 17, 2013 – Chicago, IL, USA Details <http://www.cloudconnectevent.com/chicago> Reports from Previous Events * October 3: Google+ Hangout & IRC Chat on Hyper-V Integration into OpenStack <http://rafstack.tumblr.com/post/62910089771> Other News * linux.conf.au 2014 OpenStack miniconf <http://sites.rcbops.com/lca2014_openstack> * New metrics navigator and data sources on OpenStack Activity Board <http://lists.openstack.org/pipermail/openstack-dev/2013-September/015755.ht…> * Swift Durability and the Mystery of 11 9s <http://www.buildcloudstorage.com/2013/10/swift-durability-and-mystery-of-11…> * Murano team announces new service release, v0.2.1 <http://www.mirantis.com/blog/murano-team-announces-new-service-release-v0-2…> * Read Only LDAP in Keystone <http://adam.younglogic.com/2013/10/read-only-ldap-in-keystone/> * Open Mic Spotlight: Alessandro Pilotti <http://www.openstack.org/blog/2013/10/open-mic-spotlight-alessandro-pilotti/> * Chasing the most discussed OpenStack blueprints <http://www.mirantis.com/blog/chasing-the-most-discussed-openstack-blueprint…> * Keystone with HTTPd in devstack <http://www.jamielennox.net/blog/2013/09/30/keystone-with-httpd-in-devstack/> * Official summary of Oct 3^rd OpenStack Foundation Board Meeting <http://lists.openstack.org/pipermail/foundation/2013-October/001481.html> * Informal report from Oct 3rd OpenStack Foundation Board Meeting <http://blogs.gnome.org/markmc/2013/10/03/oct-3rd-openstack-foundation-board…> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-09-24-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-09-24-21.…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! <http://www.openstack.org/profile/> * Trevor R Jr <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Cisco * Mike Metral <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Rackspace * Inbar Shapira <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, IBM * Kersten Richter <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, IBM * Conrad Weidenkeller <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Rackspace * Stefano Zilli <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, CERN * Rochelle Grober <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Huawei * Adam Spiers <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, SUSE * Tracy Jones <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, VMware * Jinhe Fang <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Netease.com * Dwight Hubbard <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Yahoo! * Rupak Ganguly <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, HP * Joe Mills <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…>, Midokura /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

September 2013 PTL elections - Final results
by Anita Kuno 04 Oct '13

04 Oct '13

Thank you to the electorate, to all those who voted and to all candidates who put their name forward for PTL for this election. A healthy, open process breeds trust in our decision making capability - thank you to all those who make this process possible. Now for the results of the PTL election process, please join me in extending congratulations to the following PTLs: * Compute (Nova) o Russell Bryant * Object Storage (Swift) o John Dickinson * Image Service (Glance) o Mark Washenberger * Identity (Keystone) o Dolph Mathews * Dashboard (Horizon) o Gabriel Hurley * Networking (Neutron) o Mark McClain * Block Storage (Cinder) o John Griffith * Metering/Monitoring (Ceilometer) o Julien Danjou * Orchestration (Heat) o Steve Baker * Database Service (Trove) o Michael Basnight * Bare metal (Ironic) o Devananda van der Veen * Queue service (Marconi) o Kurt Griffiths * Common Libraries (Oslo) o Doug Hellmann * Infrastructure o James E. Blair * Documentation o Anne Gentle * Quality Assurance (QA) o Sean Dague * Deployment (TripleO) o Robert Collins * Devstack (DevStack) o Dean Troyer * Release cycle management o Thierry Carrez * Savanna o Sergey Lukjanov Election Results: Cinder: http://www.cs.cornell.edu/w8/~andru/cgi-perl/civs/results.pl?id=E_8f0141cdd… Heat: http://www.cs.cornell.edu/w8/~andru/cgi-perl/civs/results.pl?id=E_bf6cc46f0… Horizon: http://www.cs.cornell.edu/w8/~andru/cgi-perl/civs/results.pl?id=E_18f40a4ba… Please note that I include the Savanna PTL in this list though Savanna was not part of the original PTL announcement for this round [0], as the program became incubated during the election process [1]. I evaluated the documentation surrounding the Savanna PTL election process as I was requested to do, concluding that their electorate had knowingly elected their PTL to remain in position until the conclusion of the Icehouse release, should the program be incubated. Links to Savanna election process [2][3][4] [0] http://lists.openstack.org/pipermail/openstack-dev/2013-September/015369.ht… [1]http://eavesdrop.openstack.org/meetings/tc/2013/tc.2013-09-24-20.01.html [2] http://eavesdrop.openstack.org/meetings/savanna/2013/savanna.2013-08-15-18.… [3] http://lists.openstack.org/pipermail/openstack-dev/2013-August/013447.html [4] http://www.cs.cornell.edu/w8/~andru/cgi-perl/civs/results.pl?id=E_cf7af88be… I have posted the announcement to the openstack-dev mailing list opening TC nominations. We are into the TC election process. Thierry and I will both be officiating the TC election. Thank you to all involved in the PTL election process, Anita Kuno. (anteaya)

1 0

OpenStack Community Weekly Newsletter (Sep 20-27)
by Stefano Maffulli 27 Sep '13

27 Sep '13

Register Now For The Summit in Hong Kong <http://www.openstack.org/summit/openstack-summit-hong-kong-2013/?source=o12> ???? ???????????????? ???????, ???????? <https://www.eventbrite.com/event/6786581849/o12> Last batch of invites to the Hong Kong summit has been sent to Active Technical Contributors (ATCs). Check your inbox and spam folders if your code merged before September 25^th . Participate in the OpenStack User Survey by September 30! <http://www.openstack.org/blog/2013/09/participate-in-the-openstack-user-sur…> A tale of 3 OpenStack clouds : 50,000 cores in production at CERN <http://openstack-in-production.blogspot.com/2013/09/a-tale-of-3-openstack-c…> Tim Bell in his blog post explains the different OpenStack environments at CERN and their distinct teams of evaluation and administration. OpenStack Icehouse Incubation Roundup <http://www.zerobanana.com/archive/2013/09/04#icehouse-incubation> The OpenStack Technical Committee met this week <http://eavesdrop.openstack.org/meetings/tc/2013/tc.2013-09-03-20.01.html> to consider the status of incubated projects for the upcoming Icehouse cycle. As a result, database provisioning (codename Trove)will be an official part of the Icehouse (2014.1) release, while message queues (Marconi) and bare-metal server provisioning (Ironic) will be in incubation with a view to becoming official in the as-yet-unnamed J (2014.2) release. MapReduce as a service <http://www.zerobanana.com/archive/2013/09/25#savanna-incubation> (Savanna) will also be incubated. How to Use Ask OpenStack <http://www.openstack.org/blog/2013/09/how-to-use-ask-openstack/> We're continuously building together "The best place on the Internet to find answers to common OpenStack problems": our Question&Answers site Ask <https://ask.openstack.org/>OpenStack <https://ask.openstack.org/> is such place and needs everybody's help. Ask OpenStack is a collaborative effort, think of it like a wiki where pages are made only of questions and answers. Anybody with more than 100 karma points can fix a question or an answer and anybody can gain karma points by getting votes on answers and/or questions. Introducing the NNFI scheduler for Zuul <http://amo-probos.org/post/16> We recently made a change to Zuul's scheduling algorithm (how it determines which changes to combine together and run tests). Now when a change fails tests (or has a merge conflict), Zuul will move it out of the series of changes that it is stacking together to be tested, but it will still keep that change's position in the queue. Jobs for changes behind it will be restarted without the failed change in their proposed repo states. And if something later fails ahead of it, Zuul will once again put it back into the stream of changes it's testing and give it another chance. Tips 'n Tricks * By Sean Dague <http://dague.net/>: Gerrit queries to avoid OpenStack review overload <http://dague.net/2013/09/27/gerrit-queries-to-avoid-openstack-review-overlo…> * By Chmouel Boudjnah <http://blog.chmouel.com/>: How to access Rackspace Cloud with latest novaclient/swiftclient <http://blog.chmouel.com/2013/09/27/how-to-access-rackspace-cloud-with-lates…> * By Adam Young <http://adam.younglogic.com/>: Keystone V3 API Examples <http://adam.younglogic.com/2013/09/keystone-v3-api-examples/> * By Mirantis <http://www.mirantis.com/>: Short Update on Hardware Calculator for OpenStack <http://www.mirantis.com/blog/short-update-on-openstack-hardware-calculator/> Upcoming Events * OpenStack on Ales <http://openstack.onales.com/> Sep 30 -- Oct 01, 2013 -- Bend, OR Details <http://openstack.onales.com/> * Open World Forum (Paris) <http://www.openworldforum.com/> Oct 03 -- 05, 2013 -- Paris, France Details <http://www.openworldforum.com/> * Gartner Symposium/IT Expo North America <http://www.gartner.com/technology/symposium/orlando/> Oct 06 -- 10, 2013 -- Orlando, FL, USA Details <http://www.gartner.com/technology/symposium/orlando/> * OpenStack in action ! -- The Canadian Chapter <https://openstackinactioncanada.eventbrite.com/> Oct 08, 2013 -- Montreal, Canada Details <https://openstackinactioncanada.eventbrite.com/> * Swift Hackathon <http://swifthackathon.eventbrite.com/> Oct 15 -- 17, 2013 -- Austin, TX Details <http://swifthackathon.eventbrite.com/> * LinuxCon/Cloud Open Europe <http://events.linuxfoundation.org/events/cloudopen-europe> Oct 21 -- 23, 2013 -- Edinburgh, Scotland, UK Details <http://events.linuxfoundation.org/events/cloudopen-europe> * Cloud Connect <http://www.cloudconnectevent.com/chicago> Oct 21 -- 17, 2013 -- Chicago, IL, USA Details <http://www.cloudconnectevent.com/chicago> Reports from Previous Events * CodeChix OpenStack workshop wrap-up and materials <http://princessleia.com/journal/?p=8526> * LinuxCon Wrapup <http://www.siliconloons.com/?p=508> * Summary: OpenStack India Day, 2013 <http://openstackindia.wordpress.com/2013/09/22/summary-openstack-india-day-…> Other News * Savanna accepted into OpenStack Incubation <http://www.mirantis.com/blog/savanna-accepted-into-openstack-incubation/> * Hadoop on OpenStack <http://www.zerobanana.com/archive/2013/09/25#savanna-incubation> * Tuskar is merging with TripleO <http://lists.openstack.org/pipermail/openstack-dev/2013-September/015599.ht…>. * OpenStack Governance: Electing Technical Leaders For Next Development Cycle <http://www.openstack.org/blog/2013/09/openstack-governance-electing-technic…> * Open Mic Spotlight: Terri Yu <http://www.openstack.org/blog/2013/09/open-mic-spotlight-terri-yu/> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-09-24-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-09-24-21.…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! <http://www.openstack.org/profile/> * Deepti Navale <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Red Hat * Donovan Finch <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, None * Dennis Kliban <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Red Hat * Timur Sufiev <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Mirantis * Debasish Chowdhury <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Globallogic * Kevin Jackson <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Rackspace * Maxime Vidori <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Enovance * zhu zhu <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, None (IBM?) * Vui Lam <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Vmware * Sukhdev Kapur <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Arista Networks * Prashanth Pai <http://50.56.249.200:8090/plugins/zfacts/view.action?viewproperties=true&in…>, Red Hat Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * Swift [Errno -5] No address associated with hostname <https://ask.openstack.org/en/question/5342/swift-errno-5-no-address-associa…> * what is the base endpoint url for networking api <https://ask.openstack.org/en/question/5309/what-is-the-base-endpoint-url-fo…> * How do I enable an instance to access the OpenStack and EC2 APIs on the controller? <https://ask.openstack.org/en/question/5182/how-do-i-enable-an-instance-to-a…> * How do I work around the "TypeError: dist must be a Distribution instance" problem when following the Swift-all-in-one instructions <https://ask.openstack.org/en/question/5478/how-do-i-work-around-the-typeerr…> * What is a "publishing policy" for ceilometer <https://ask.openstack.org/en/question/5467/what-is-a-publishing-policy-for-…> * How to edit the SNAT rules of the L3 agent so that it forwards packets of specific source/dest IPs to a certain VM? <https://ask.openstack.org/en/question/5435/how-to-edit-the-snat-rules-of-th…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (Sep 13-20)
by Stefano Maffulli 21 Sep '13

21 Sep '13

Register Now For The Summit in Hong Kong <http://www.openstack.org/summit/openstack-summit-hong-kong-2013/?source=o12> ?????? ?????????????? ???????, ???????? <https://www.eventbrite.com/event/6786581849/o12> Today all Hong Kong Summit Speakers were notified whether or not your submission was accepted for inclusion in the final Summit agenda. If you submitted a talk please check your email now (the email address that you used when you submitted the session). If you do not see a notification email sent from OpenStack please contact events(a)openstack.org <mailto:events@openstack.org>. Participate in the OpenStack User Survey by September 30! <http://www.openstack.org/blog/2013/09/participate-in-the-openstack-user-sur…> OpenStack Launches Training Marketplace <http://www.openstack.org/blog/2013/09/openstack-launches-training-marketpla…> The OpenStack Foundation has launched a new Training Marketplace, making it easier to discover and participate in training courses offered by technology providers in the OpenStack ecosystem. Aptira, hastexo, The Linux Foundation, Mirantis, Morphlabs, Piston, Rackspace, Red Hat, SUSE and SwiftStack are the first companies to have courses available in the Marketplace, with the goal of growing the OpenStack talent pool and accelerating the availability of OpenStack training courses worldwide. Tips 'n Tricks * By Anne Gentle <http://justwriteclick.com/>: OpenStack DocImpact Flag Walk-through <http://justwriteclick.com/2013/09/17/openstack-docimpact-flag-walk-through/> * By Mirantis <http://www.mirantis.com/>: Planning hardware for your OpenStack cluster: the answers to your questions <http://www.mirantis.com/blog/planning-hardware-for-your-openstack-cluster-t…> * By Adam Young <http://adam.younglogic.com/>: Autoregistering an OpenStack Virtual Machine with FreeIPA <http://adam.younglogic.com/2013/09/register-vm-freeipa/> Upcoming Events * OpenStack India Day <http://openstackindia.wordpress.com/2013/08/14/openstack-india-day-2013-ann…> Sep 21, 2013 -- Bangalore Details <http://openstackindia.wordpress.com/2013/08/14/openstack-india-day-2013-ann…> * CodeChix OpenStack Workshop <http://codechix-openstack1-rss.eventbrite.com/> Sep 22, 2013 -- Palo Alto, CA Details <http://codechix-openstack1-rss.eventbrite.com/> * Hosting & Cloud Transformation Summit <http://na.hostingtransformation.com/>Sep 23 -- 25, 2013 -- Las Vegas, USA Details <http://na.hostingtransformation.com/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 -- Oct 01, 2013 -- Bend, OR Details <http://openstack.onales.com/> * Open World Forum (Paris) <http://www.openworldforum.com/> Oct 03 -- 05, 2013 -- Paris, France Details <http://www.openworldforum.com/> * Gartner Symposium/IT Expo North America <http://www.gartner.com/technology/symposium/orlando/> Oct 06 -- 10, 2013 -- Orlando, FL, USA Details <http://www.gartner.com/technology/symposium/orlando/> * OpenStack in action ! -- The Canadian Chapter <https://openstackinactioncanada.eventbrite.com/> Oct 08, 2013 -- Montreal, Canada Details <https://openstackinactioncanada.eventbrite.com/> * Swift Hackathon <http://swifthackathon.eventbrite.com/> Oct 15 -- 17, 2013 -- Austin, TX Details <http://swifthackathon.eventbrite.com/> * LinuxCon/Cloud Open Europe <http://events.linuxfoundation.org/events/cloudopen-europe> Oct 21 -- 23, 2013 -- Edinburgh, Scotland, UK Details <http://events.linuxfoundation.org/events/cloudopen-europe> * Cloud Connect <http://www.cloudconnectevent.com/chicago> Oct 21 -- 17, 2013 -- Chicago, IL, USA Details <http://www.cloudconnectevent.com/chicago> Reports from Previous Events * VTC Fall 2013: The future of Cloud Operating Systems <http://www.cloudcomp.ch/2013/09/cleen-2013-the-future-of-cloud-operating-sy…> Other News * Open Mic Spotlight: Christopher Armstrong <http://www.openstack.org/blog/2013/09/open-mic-spotlight-christopher-armstr…> * OpenStack Documentation: RTFM is A Good Thing <http://www.mirantis.com/blog/openstack-documentation-rtfm-is-a-good-thing/> * OpenStack Project Meeting: skipped this week Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! * Thomas Maddox, Rackspace * Vitaliy Kolosov, Yahoo! * Chen Xiao, China * Chengli XU, Netease * Vitaly Kostenko, None * David Xie, Platform Computing * Keith Burns, Nexus IS * Dazhao Yu, IBM * Yves-Gwenael Bourhis, Cloudwatt * Sahid Orentino Ferdjaoui, Cloudwatt * Noboru Arai, NEC * Yair Fried, Red Hat * Kiyohiro Adachi, NEC * Ling Gao, IBM * Leonard Packham, Rackspace * Jason Smith, Rackspace * Hart Hoover, Rackspace * Abhishek Lahiri, Symantec Corporation * Evgeny Fedoruk, Radware * Denny Zhang, Unitedstack * Harri Hämäläinen, CSC -- IT Center for Science Ltd. * Victor Morales, Intel * Sam Harwell, Rackspace * Bo Lin, Vmware * Joe Cropper, IBM Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * What causes "versioning for this project requires either an sdist or an access to an upstream git repository" Exception when running stack.sh? <https://ask.openstack.org/en/question/530/what-causes-versioning-for-this-p…> * How do I enable an instance to access the OpenStack and EC2 APIs on the controller? <https://ask.openstack.org/en/question/5182/how-do-i-enable-an-instance-to-a…> * Is Network as a Service completely customizable? <https://ask.openstack.org/en/question/5180/is-network-as-a-service-complete…> * What items to backup? <https://ask.openstack.org/en/question/5174/what-items-to-backup/> * can i use gre tunneling with provider network on quantum ? <https://ask.openstack.org/en/question/5124/can-i-use-gre-tunneling-with-pro…> * Is there a reason why cinder throws an error on one compute node, but not others? <https://ask.openstack.org/en/question/5114/is-there-a-reason-why-cinder-thr…> * An instance couldn't release its resource(vcpu, rom, etc.) only if it is terminated, and what's the reason? Could somebody tell me? <https://ask.openstack.org/en/question/5089/an-instance-couldnt-release-its-…> * RDO: how to disable remote vnc? <https://ask.openstack.org/en/question/5084/rdo-how-to-disable-remote-vnc/> * Why the LXC throughput is so low <https://ask.openstack.org/en/question/5064/why-the-lxc-throughput-is-so-low/> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (Sep 6-13)
by Stefano Maffulli 13 Sep '13

13 Sep '13

Register Now For The Summit in Hong Kong <http://www.openstack.org/summit/openstack-summit-hong-kong-2013/?source=o12> ? ??????????????????? ???????, ???????? <https://www.eventbrite.com/event/6786581849/o12> The last batch of invites to the Summit for OpenStack Active Technical Contributors will be send in the next 10 days. If you have committed code or documentation before September 6 expect official communication soon. Participate in the OpenStack User Survey by September 30! <http://www.openstack.org/blog/2013/09/participate-in-the-openstack-user-sur…> We're kicking off the second round of the OpenStack User Survey this month! You may remember before the April Summit we helped the User Committee run a survey to aggregate OpenStack deployments and share the results. OpenStack Docs Boot Camp Wrap Up <http://justwriteclick.com/2013/09/13/openstack-docs-boot-camp-wrap-up/> We gathered about 20 writers and developers who wanted to learn about OpenStack documentation in the Mirantis training room for two days this week in Mountain View, California. The idea for a docs boot camp came from the OpenStack Infrastructure team who held one back in June <http://www.openstack.org/blog/2013/07/infrastructure-bootcamp/>. We wanted to enable more people to contribute to OpenStack documentation through in-person training and team building. It's not like a book sprint, with the goal of a book in five days, but rather a training session, with questions and answers in real time. Read the full report from Anne Gentle <http://justwriteclick.com/>. Contributing To OpenStack Even If You Are Not A Developer <http://cloudarchitectmusings.com/2013/09/08/contributing-to-openstack-even-…> Kenneth Hui <http://cloudarchitectmusings.com/> outlines some ways for community members to become contributors to OpenStack without having to write a line of Python code. Tips 'n Tricks * By The Official Rackspace Blog <http://www.rackspace.com/blog>: Installing Rackspace Private Cloud In 20 Minutes Or Less <http://www.rackspace.com/blog/installing-rackspace-private-cloud-in-20-minu…> * By Xlcloud <http://blog.xlcloud.me/>: Baremetal Driver and the Devstack. <http://blog.xlcloud.me/post/2013/09/11/Baremetal-Driver-and-the-Devstack> * By eNovance Engineering Teams <http://techs.enovance.com/>: A gentle introduction to DRBD <http://techs.enovance.com/6177/drbd> * By TelekomCloud DevOps team <http://telekomcloud.github.io/>: New Ways of Tempest Stress Testing <http://telekomcloud.github.io/2013/09/11/new-ways-of-tempest-stress-testing…> * By Zane Bitter <http://www.zerobanana.com/tags/OpenStack>: Application Definition with Heat <http://www.zerobanana.com/archive/2013/09/10#heat-application-definition-ta…> * By eNovance Engineering Teams <http://techs.enovance.com/>: Adding new 3rd party tools in Fio <http://techs.enovance.com/6110/adding-new-3rd-party-tools-in-fio> * By Flavio Percoco <http://blog.flaper87.com/>: Test strategies for your Python projects <http://blog.flaper87.com/post/522b9e560f06d32542ede77f/> Upcoming Events * OpenStack In Action -- Powering IaaS Cloud <http://barcampbangalore.org/bcb/bcb14/openstack-in-action-powering-iaas-clo…> Sep 14, 2013 - SAP Labs Whitefield, Bangalore Details <http://barcampbangalore.org/bcb/bcb14/openstack-in-action-powering-iaas-clo…> * Cloud Connect China <http://www.cloudconnectevent.cn/> Sep 15 - 17, 2013 - Shanghai, China Details <http://www.cloudconnectevent.cn/> * LinuxCon/Cloud Open North America <http://events.linuxfoundation.org/events/cloudopen-north-america> Sep 16 - 18, 2013 - New Orleans Details <http://events.linuxfoundation.org/events/cloudopen-north-america> * GigaOM Structure UK <http://event.gigaom.com/structure> Sep 18 - 19, 2013 - London, UK Details <http://event.gigaom.com/structure> * OpenStack India Day <http://openstackindia.wordpress.com/2013/08/14/openstack-india-day-2013-ann…> Sep 21, 2013 -- Bangalore Details <http://openstackindia.wordpress.com/2013/08/14/openstack-india-day-2013-ann…> * CodeChix OpenStack Workshop <http://codechix-openstack1-rss.eventbrite.com/> Sep 22, 2013 - Palo Alto, CA Details <http://codechix-openstack1-rss.eventbrite.com/> * Hosting & Cloud Transformation Summit <http://na.hostingtransformation.com/>Sep 23 - 25, 2013 - Las Vegas, USA Details <http://na.hostingtransformation.com/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 - Oct 01, 2013 - Bend, OR Details <http://openstack.onales.com/> * Open World Forum (Paris) <http://www.openworldforum.com/> Oct 03 - 05, 2013 - Paris, France Details <http://www.openworldforum.com/> * Gartner Symposium/IT Expo North America <http://www.gartner.com/technology/symposium/orlando/> Oct 06 - 10, 2013 - Orlando, FL, USA Details <http://www.gartner.com/technology/symposium/orlando/> * OpenStack in action ! - The Canadian Chapter <https://openstackinactioncanada.eventbrite.com/> Oct 08, 2013 - Montreal, Canada Details <https://openstackinactioncanada.eventbrite.com/> * Swift Hackathon <http://swifthackathon.eventbrite.com/> Oct 15 - 17, 2013 - Austin, TX Details <http://swifthackathon.eventbrite.com/> * LinuxCon/Cloud Open Europe <http://events.linuxfoundation.org/events/cloudopen-europe> Oct 21 - 23, 2013 - Edinburgh, Scotland, UK Details <http://events.linuxfoundation.org/events/cloudopen-europe> * Cloud Connect <http://www.cloudconnectevent.com/chicago> Oct 21 - 17, 2013 - Chicago, IL, USA Details <http://www.cloudconnectevent.com/chicago> Reports from Previous Events * Meetup @ CISCO, Bangalore <http://openstackindia.wordpress.com/2013/09/12/meetup-cisco-bangalore/> * OpenStack Object Storage at Intel Developers Forum <http://swiftstack.com/blog/2013/09/11/openstack-object-storage-at-intel-dev…> Other News * Introducing BasicDB <http://blog.linux2go.dk/2013/09/07/introducing-basicdb/> * OpenStack Ceilometer Havana-3 milestone released <http://julien.danjou.info/blog/2013/openstack-ceilometer-havana-3-milestone…> * Murano 0.2 is here! <http://www.mirantis.com/blog/murano-0-2-is-here/> * The Fanatical Faces Of Rackspace Private Cloud: Bryan Thompson <http://www.rackspace.com/blog/the-fanatical-faces-of-rackspace-private-clou…> * Open Mic Spotlight: Flavio Percoco <http://www.openstack.org/blog/2013/09/open-mic-spotlight-flavio-percoco/> * What does an NFV application owner require from PaaS? <http://orenscloudplatformthoughts.tumblr.com/post/61015756554> * You Can't Collapse Tiered Storage in Private Clouds Built on OpenStack: Whitepaper <http://www.cloudscaling.com/blog/company/you-cant-collapse-tiered-storage-i…> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-09-10-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-09-10-21.…> Security Advisories * Token revocation failure using Keystone memcache/KVS backends (CVE-2013-4294) <http://lists.openstack.org/pipermail/openstack-announce/2013-September/0001…> * Potential denial of service on Nova when using Qpid (CVE-2013-4261) <http://lists.openstack.org/pipermail/openstack-announce/2013-September/0001…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[OSSA 2013-026] Potential denial of service on Nova when using Qpid (CVE-2013-4261)
by Thierry Carrez 12 Sep '13

12 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2013-026 CVE: CVE-2013-4261 Date: September 12, 2013 Title: Potential denial of service on Nova when using Qpid Reporter: Jaroslav Henner (Red Hat) Products: Nova Affects: Folsom, Grizzly Description: Jaroslav Henner from Red Hat reported a vulnerability in Nova when using Apache Qpid as the RPC backend. By sending any random text longer than 65K characters to an instance console and requesting the console log contents through the API, an authenticated user may disrupt the nova-compute node his instance is running on. This vulnerability could be leveraged in a Denial of Service attack against the cloud provider. Only Folsom and Grizzly setups using Qpid as their RPC backend are affected. Havana setups, or setups using other RPC backends (like RabbitMQ), are all unaffected. Grizzly fix: https://review.openstack.org/#/c/43303/ Folsom fix: https://review.openstack.org/#/c/45426/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4261 https://bugs.launchpad.net/nova/+bug/1215091 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJSMducAAoJEFB6+JAlsQQjYqUP/1ebNaaz+k3DxiRfoNpsbRkV EKJtD/W/6/UkCYUzPNGGZSl1ijp9CEQXh6IL82lTBw82nTbsHc3mt22FgusdU6WZ JH6PevC95PlyNWQYsUGO5GzQ6lb28VjzgYUt36Z2ZatQ4lUGJHv9iZcsIBVYayJy OKPnnt2ztiG62B88Ka1GQx4iyEtU50QCcpZEbWHcX5dIXWfWWfYNEMVU+gIfaxlo sVZH+up2ERKVDH7l/JzhvD4ut1zAoM0sp29/GROJLmzh1dqd9P+QIh5WO4e6VLZp 5y90uMZ03O1lN16IZE0B3r9JBc9ekn7JhJ5YXBvwM+Z3Am1ZlDjUL1ojiZ2aBT9B RnPF/oz4CsuGXjghg0mzPrjJuwR/Z46pg1t92FbVXW94Fxx7VfORLF6ELaDoqoiu nmRUpDQxpg+dYw7OS9lQF10eC2M6S0EwKWzlQlloZGR5/kG9VR4fyhLE1w8+YrRF Gr8pDaF6MJoxZxxb4rRhaDsPaXuUX/QPr0GsMeCy6vfV+yX/Yk99YJoNtar7Z7I+ llslcbaet3C2sONR2EbCD2J03E8/3VztdkG32iVGwxn0LHh2K1o+wfno73w1PW4u DV4LIvbypZgmMEbVzHDkDGs1jOfSzFzDhIsCtgEih53rr2HIsd8AmkWeTPirpXN6 EOmohe9HXVlvPUPcVJNd =zUsw -----END PGP SIGNATURE-----

1 0

[OSSA 2013-025] Token revocation failure using Keystone memcache/KVS backends (CVE-2013-4294)
by Thierry Carrez 11 Sep '13

11 Sep '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2013-025 CVE: CVE-2013-4294 Date: September 11, 2013 Title: Token revocation failure using Keystone memcache/KVS backends Reporter: Kieran Spear (University of Melbourne) Products: Keystone Affects: Folsom, Grizzly Description: Kieran Spear from the University of Melbourne reported a vulnerability in Keystone memcache and KVS token backends. The PKI token revocation lists stored the entire token instead of the token ID, triggering comparison failures, ultimately resulting in revoked PKI tokens still being considered valid. Only Folsom and Grizzly Keystone setups making use of PKI tokens with the memcache or KVS token backends are affected. Havana setups, setups using UUID tokens, or setups using PKI tokens with the SQL token backend are all unaffected. Grizzly fix: https://review.openstack.org/#/c/46080/ Folsom fix: https://review.openstack.org/#/c/46079/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4294 https://bugs.launchpad.net/keystone/+bug/1202952 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJSMI+5AAoJEFB6+JAlsQQj2hAQAI/S5bAv+XrYUaXRBgJxvBz4 xVXdrXl/iA7R9iDIlmaFThOCvw4SCsWB7jBYRv8wAk3V3HZw9jEmC3OoebpCFWNb 1q3an25kroviy8rfZyQIqe9KTrwXRa/jDVlun2EEiw7KyUty/HIAjUCVUXVKBhyh 8Bctn90A/Nt2D5Am3hyofsS5fOjmzwW6b73RCY7CDntduxUtPn6lbUthFESXTCwv lojClZ5X78XnCh2/WJuxKkAEm8EujlNqkIHziGgc3HrForxSc2GKSPzgFbg5eBbt BaDTxFkDHW3EwSK/69b+699e9BvN/vuBxbNa7YW2ANiM1IJ34QHouPk4XULMZIeH cZ4QOBX7MtUhvD1htfTlHQfvb1syqlvul49WVmmsk48CMVW6hArSMQvTVbArUqD0 fN2INqfghZMQCkQIlXE+38J88OOL/S+sq6p8dIn96JxP2tnw4rIs9YclSa9E1Ub0 SIDaWPu7NN+wuY1WN+EzHV0zHI8HYs2HkOlrRW3E02JEm3xcEEmYLCwf+c2mwOee Grick3VlxNuQNBP6bls+NtxCzhUzLVI7nOfaxZyzQtOMLjJPKpip4QKMjzotO3nf +6JNk5766T2f63fsNtw0kltbtm4R+RzKzv29vVsaOh+ba57w7xnpEkAA1oaYyFa+ IHvUVYkOhX3quLUgBkCR =pm0d -----END PGP SIGNATURE-----

1 0

OpenStack Community Weekly Newsletter (Aug 30 – Sep 6)
by Stefano Maffulli 06 Sep '13

06 Sep '13

Register Now For The Summit in Hong Kong <http://www.openstack.org/summit/openstack-summit-hong-kong-2013Register> ?????? ?????????????? ???????, ???????? <http://openstacksummitnovember2013.eventbrite.com/> OpenStack Heat and Ceilometer got their dashboard panel <http://sebastien-han.fr/blog/2013/09/06/openstack-heat-and-ceilometer-got-t…> The Havana milestone release of the Horizon dashboard brought an absolutely wonderful panel for Heat, the orchestration service and Ceilometer, the metering service. Enjoy a preview before the Havana’s official release. OpenStack Icehouse Incubation Roundup <http://www.zerobanana.com/archive/2013/09/04#icehouse-incubation> The OpenStack Technical Committee met this week <http://eavesdrop.openstack.org/meetings/tc/2013/tc.2013-09-03-20.01.html> to consider the status of incubated projects for the upcoming Icehouse cycle. As a result, database provisioning (codename Trove <https://wiki.openstack.org/wiki/Trove>) will be an official part of the Icehouse (2014.1) release, while message queues (codename Marconi <https://wiki.openstack.org/wiki/Marconi>) and bare-metal server provisioning (codename Ironic <https://wiki.openstack.org/wiki/Ironic>) will be in incubation with a view to becoming official in the as-yet-unnamed J (2014.2) release. Bringing Go To The Cloud With The Gophercloud SDK <http://www.rackspace.com/blog/bringing-go-to-the-cloud-with-the-gophercloud…> Go is a rapidly emerging programming language created out of Google by Rob Pike and Ken Thompson. Rackspace is investing in Go by creating a multi-cloud software development kit (SDK) for the Go programming community called Gophercloud <https://github.com/rackspace/gophercloud>. It will support OpenStack <http://www.openstack.org/> first, Rackspace Cloud <http://www.rackspace.com/cloud/> second. Scaling the OpenStack Test Environment <http://amo-probos.org/post/15> A year ago James Blair <http://amo-probos.org/> introduced Zuul <https://launchpad.net/zuul>, a program he developed to drive the OpenStack <http://www.openstack.org/> project’s gating system. In short, each change to an OpenStack project must pass unit and integration tests before it is merged. Over the past year, the OpenStack project has grown tremendously, with 62 git repositories related to OpenStack, 30 for the project infrastructure, and an additional 75 unofficial projects that share the same testing infrastructure. In all, the development infrastructure currently serves 167 repositories. They run up to *720 test jobs per hour*, and our dynamic provisioning system has pushed our test node count up to 328 nodes online and running tests simultaneously. Over the past year, the OpenStack Infra team made a large number of changes to prepare for this load. This blog post by jeblair has some of the key innovations that help us test at scale. For VIM users out there: <https://github.com/ameade/qtpy-vim>qtpy.vim <https://github.com/ameade/qtpy-vim> A simple way of running python unit tests from within VIM based on the cursor location. Useful for receiving immediate feedback as you write tests, despite what test runner or framework your project uses to run its tests. Tips ‘n Tricks * By Lorin Hochstein <http://lorinhochstein.wordpress.com/>: Up and running on Rackspace <http://lorinhochstein.wordpress.com/2013/09/04/up-and-running-on-rackspace/> * By Anita Kuno <http://anteaya.info/>: Installing Devstack with Vagrant <http://anteaya.info/blog/2013/09/01/installing-devstack-with-vagrant/> Upcoming Events * 2nd OpenStack User Group Nordics meetup <https://plus.google.com/u/0/106856980692854321746/posts/bFpvMPqffp9>Sep 11, 2013 – Kista, Stockholm Details <http://www.meetup.com/OpenStack-User-Group-Nordics/> * OpenStack In Action – Powering IaaS Cloud <http://barcampbangalore.org/bcb/bcb14/openstack-in-action-powering-iaas-clo…>Sep 14, 2013 – SAP Labs Whitefield, Bangalore Details <http://barcampbangalore.org/bcb/bcb14/openstack-in-action-powering-iaas-clo…> * Cloud Connect China <http://www.cloudconnectevent.cn/>, September 15-17 2013, Shanghai, China * LinuxCon/Cloud Open North America <http://events.linuxfoundation.org/events/cloudopen-north-america>, September 16-18 2013, New Orleans, LA, USA, * GigaOM Structure UK <http://event.gigaom.com/structure>, September 18-19 2013, London, England, UK * OpenStack India Day <http://openstackindia.wordpress.com/2013/08/14/openstack-india-day-2013-ann…> Sep 21, 2013 – Bangalore Details <http://openstackindia.wordpress.com/2013/08/14/openstack-india-day-2013-ann…> * Hosting & Cloud Transformation Summit <http://na.hostingtransformation.com/>Sep 23 – 25, 2013 – Las Vegas, USA Details <http://na.hostingtransformation.com/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 – Oct 01, 2013 – Bend, OR Details <http://openstack.onales.com/> * Open World Forum (Paris) <http://www.openworldforum.com/>,October 3-5 2013, Paris, France * Gartner Symposium/IT Expo North America <http://www.gartner.com/technology/symposium/orlando/>, October 6-10 2013, Orlando, FL, USA, * OpenStack in action! – The Canadian Chapter <https://openstackinactioncanada.eventbrite.com/> Oct 08, 2013 – Montreal, Canada Details <https://openstackinactioncanada.eventbrite.com/> * Swift Hackathon <http://swifthackathon.eventbrite.com/> Oct 15 – 17, 2013 – Aust, TX Details <http://swifthackathon.eventbrite.com/> * LinuxCon/Cloud Open Europe <http://events.linuxfoundation.org/events/cloudopen-europe>, October 21-23 2013, Edinburgh, Scotland, UK * Cloud Connect <http://www.cloudconnectevent.com/chicago>, October 21-24 2013, Chicago, IL, USA Reports from Previous Events * First meeting of OpenStack Venezuela <http://www.openstack.org/blog/2013/09/first-meeting-of-openstack-venezuela/> Other News * Accelerate Your Career With OpenStack: Upcoming LPI Webinar <http://www.rackspace.com/blog/accelerate-your-career-with-openstack-upcomin…> * OpenStacking your Apps <http://cloudifysource.tumblr.com/post/60199054506> * History, objectives and limits of the Ceilometer project <http://techs.enovance.com/6051/objectives-of-ceilometer> * The Fanatical Faces Of Rackspace Private Cloud: Justin Shepherd <http://www.rackspace.com/blog/the-fanatical-faces-of-rackspace-private-clou…> * Open Mic Spotlight: Julien Danjou <http://www.openstack.org/blog/2013/09/open-mic-spotlight-julien-danjou/> * OpenStack Community Meeting: Summary <http://eavesdrop.openstack.org/meetings/openstack_community/2013/openstack_…> and full logs <http://eavesdrop.openstack.org/meetings/openstack_community/2013/openstack_…> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-09-03-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-09-03-21.…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! * Subashini Soundararajan, Rightscale * Sam Alba, dotCloud Inc * Itzik Brown, None * William Van Hevelingen, Portland State University * Brianna Poulos, JHU/APL * ?ukasz Jernas', Allegro Group * Yangyang Zheng, CIeNET Technologies * Valerii Zhelezniakov, None (Mirantis?) * Rob Raymond, HP * Daniel Izquierdo, Bitergia * Swapnil Kulkarni, None * Robert Tingirica, Cloudbase Solutions * Shaun McCance, Cisco * nancykyo, ? * Abishek Subramanian, Cisco * Zhengguang Ou, None * Simon, Unitedstack /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0