- OpenStack-announce - lists.openstack.org

Technical Committee elections results, Fall 2012
by Thierry Carrez 28 Sep '12

28 Sep '12

The OpenStack TC election period is now over. The winners for the 3 remaining seats on the Technical Committee are: * Monty Taylor * Anne Gentle * Russell Bryant They are elected for a one-year term, and join the already-elected members: Vish Ishaya, John Dickinson, Brian Waldon, Joe Heck, Gabriel Hurley, Dan Wendlandt, John Griffith, Mark McLoughlin, Jay Pipes and Thierry Carrez. You can see detailed election results at: http://www.cs.cornell.edu/w8/~andru/cgi-perl/civs/results.pl?id=E_019fda1f0… The Technical Committee lives at: http://wiki.openstack.org/Governance/TechnicalCommittee -- Thierry Carrez (ttx) Election official

1 0

OpenStack 2012.2 ("Folsom") released !
by Thierry Carrez 27 Sep '12

27 Sep '12

Hello everyone, It is my great pleasure to announce the immediate release of OpenStack 2012.2, codenamed "Folsom". This release includes two new services: OpenStack Networking ("Quantum") and OpenStack Block Storage ("Cinder"). You can find source tarballs for each component, together with lists of features and bugfixes introduced during this 6-month development cycle, at: OpenStack Compute: https://launchpad.net/nova/folsom/2012.2 OpenStack Object Storage: https://launchpad.net/swift/folsom/1.7.4 OpenStack Image Service: https://launchpad.net/glance/folsom/2012.2 OpenStack Networking: https://launchpad.net/quantum/folsom/2012.2 OpenStack Block Storage: https://launchpad.net/cinder/folsom/2012.2 OpenStack Identity: https://launchpad.net/keystone/folsom/2012.2 OpenStack Dashboard: https://launchpad.net/horizon/folsom/2012.2 You're strongly encouraged to read the Release Notes, available at: http://wiki.openstack.org/ReleaseNotes/Folsom We hope you will enjoy this release as much as we have enjoyed creating it. -- Thierry Carrez (ttx) Release Manager, OpenStack

1 0

OpenStack Object Storage ("Swift") 1.7.4 released
by Thierry Carrez 26 Sep '12

26 Sep '12

Hi everyone, A memory leak was discovered in Swift 1.7.2, prompting a last-minute new release for inclusion in the common Folsom OpenStack release tomorrow: https://launchpad.net/swift/folsom/1.7.4 This should (really) be the last release of Swift in the Folsom series, and that version shall be included in the common OpenStack "Folsom" release tomorrow. Regards, -- Thierry Carrez (ttx) Release Manager, OpenStack

1 0

OpenStack Community Weekly Newsletter (Sep 14-21)
by Stefano Maffulli 22 Sep '12

22 Sep '12

Highlights of the week The OpenStack Foundation is here <http://www.openstack.org/foundation/> If you haven't heard the news, the Foundation is fully operationally now and it's hiring <http://www.openstack.org/community/jobs/?foundation=1>, too. We celebrated globally with many of the OpenStack User Groups around the world (some pictures are in OpenStack flickr group <http://www.flickr.com/groups/1574695@N22/>). What's new in OpenStack Folsom ? <http://my1.fr/blog/whats-new-in-openstack-folsom/?utm_source=rss&utm_medium…> Emilien Macchi <http://my1.fr/blog> wrote a summary of what's coming in OpenStack Folsom. Getting ready for the OpenStack F release. What's Up Doc? September 19 2012 <https://lists.launchpad.net/openstack/msg16869.html> Report from Docs land: still over 100 doc bugs, 18 targeted for folsom, 11 of those 18 do not have assignees. New docs landing pages from https://review.openstack.org/#/c/11232/ should land this week or next prior to the release date. OpenStack Governance Elections: Technical Committee <http://www.openstack.org/blog/2012/09/openstack-governance-elections-techni…> The OpenStack community is called to elect the last 3 members of the OpenStack Technical Committee <http://wiki.openstack.org/Governance/Foundation/TechnicalCommittee>. Per section 4.1(b) of the OpenStack Foundation bylaws <http://wiki.openstack.org/Governance/Foundation/Bylaws>, the Technical Committee ("TC") is a technical meritocracy managing all the technical matters relating to OpenStack. It replaces the "Project Policy Board" from the old governance. We have 11 candidates and the election process started. If you're a qualified voter <https://lists.launchpad.net/openstack/msg16849.html> you have received an email with instructions on how to vote. Check your spam folders if you haven't received any communication . Trystack latest status update <https://lists.launchpad.net/openstack/msg16895.html> The team is taking small steps to get the TryStack experience back on track. Nachi Ueno would like assistance with deploying Compute, Image, and Identity on TryStack. Contact him to help. Great opportunity to get some ops chops! OpenStack China Tour Launches from Beijing <http://www.openstack.org/blog/2012/09/openstack-china-tour-beijing/> On September 16, /OpenStack China Tour /began its trip from Beijing. It is a series of OpenStack meetups organized by COSUG and CSDN in some Chinese major cities(Beijing, Shenzhen, Chengdu, Wuhan and Xi'an) in turn. A Globally Distributed OpenStack Swift Cluster <http://swiftstack.com/blog/2012/09/16/globally-distributed-openstack-swift-…> SwifStack team is working towards evolving Swift into a single cluster can be distributed over multiple, geographically dispersed sites, joined via high-latency network connections. Tips and tricks * By Sébastien Han <http://sebastien-han.fr/>: Openstack: play with quota <http://sebastien-han.fr/blog/2012/09/19/openstack-play-with-quota/> * By Emilien Macchi <http://my1.fr/blog> : Running an OpenFlow Network with OpenStack Quantum & Floodlight <http://my1.fr/blog/running-an-openflow-network-with-openstack-quantum-flood…> * By Yong Sheng Gong <http://pipes.yahoo.com/pipes/pipe.info?_id=bb3905a64a08b9d8167502028410a1e8>: Quantum Folsom <https://www.ibm.com/developerworks/mydeveloperworks/blogs/e93514d3-c4f0-4aa…> Upcoming Events * Help needed to organize the OpenStack devroom for *FOSDEM* 2013 <http://markmail.org/message/7ridfk4vgilz7slj> * OpenStack China Tour #2 <http://hui.csdn.net/MeetingInfo.aspx?MID=135> Sep 22, 2012 -- Shenzen, China Details <http://hui.csdn.net/MeetingInfo.aspx?MID=135> * Puppet Master Pulls Deployment Strings with Ease <http://www.meetup.com/OpenStack-LA/events/79142862/> Sep 27, 2012 -- Los Angeles, CA Details <http://www.meetup.com/OpenStack-LA/events/79142862/> * PyCon India 2012 <http://in.pycon.org/2012/funnel/pyconindia2012/48-openstack-open-source-sof…>, Sept 28-30 -- Bangalore, India, Details <http://in.pycon.org/2012/funnel/pyconindia2012/48-openstack-open-source-sof…> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * OpenStack Folsom RC1 is here * OpenStack Project Meeting 2012-09-18: Summary <http://eavesdrop.openstack.org/meetings/project/2012/project.2012-09-18-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2012/project.2012-09-18-21.…> Welcome new contributors Celebrating the first patches submitted this week by: * Nikola Dipanov, RedHat.com * Arathi, Persistent * Ripal Nathuji, Calxeda.com * Vijaya-erukala, Persistent * Newptone, Sina * Lapgoon Silly entertainment of the week: openSUSE community welcomes OpenStack Foundation /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Object Storage ("Swift") 1.7.2 released
by Thierry Carrez 20 Sep '12

20 Sep '12

Hi everyone, A Folsom release-critical bug was discovered in Swift 1.7.0, prompting a new release for inclusion in the common OpenStack release next week: https://launchpad.net/swift/folsom/1.7.2 Unless some (new) critical issue is uncovered, this should be the last release of Swift in the Folsom series, and that version shall be included in the common OpenStack "Folsom" release on September 27. Regards, -- Thierry Carrez (ttx) Release Manager, OpenStack

1 0

OpenStack Community Weekly Newsletter (Sep 7-14)
by Stefano Maffulli 14 Sep '12

14 Sep '12

Highlights of the week OpenStack Summit: Vote for Speakers <http://www.openstack.org/blog/2012/09/openstack-summit-vote-for-speakers/> We've gotten a lot of great speaking submissions, and would like your help shaping the agenda for the next OpenStack Summit, October 15-18, in San Diego. We've made the submissions public for your input, and you have until Thursday, September 13, to vote <http://openstack.org/summit/san-diego-2012/vote-for-speakers/> up your favorites. Please note you need to be an Individual Member of the OpenStack Foundation in order to access the voting system. OpenStack Governance Elections: Technical Committee <http://www.openstack.org/blog/2012/09/openstack-governance-elections-techni…> Now that we have elected the Project Technical Leads for the next release, the OpenStack community is called to elect the last 3 members of the OpenStack Technical Committee <http://wiki.openstack.org/Governance/Foundation/TechnicalCommittee>. Per section 4.1(b) of the OpenStack Foundation bylaws <http://wiki.openstack.org/Governance/Foundation/Bylaws>, the Technical Committee ("TC") is a technical meritocracy managing all the technical matters relating to OpenStack. It replaces the "Project Policy Board" from the old governance. OpenStack Governance Elections Autumn 2012 Results <http://www.openstack.org/blog/2012/09/openstack-governance-elections-autumn…> The OpenStack community has elected the Project Technical Leads. Demo: Live Migration, without shared storage, using XenServer and OpenStack <http://blogs.citrix.com/2012/09/11/demo-live-migration-without-shared-stora…> Renuka Apte demonstrates the new OpenStack Folsom and Storage XenMotion to enables live migration of VMs, without shared storage, using XenServer and OpenStack. This week in Docs <http://lists.openstack.org/pipermail/openstack-docs/2012-September/000139.h…> Getting ready for Folsom release, the doc team went from 34 High folsom-targeted doc bugs two weeks ago to 17 on Monday. The documentation team is working hard to deliver always better documentation for OpenStack. See what else there is to be done. Security announcements * Keystone: Revoking a role does not affect existing tokens (CVE-2012-4413) <http://lists.openstack.org/pipermail/openstack-announce/2012-September/0000…> Tips and tricks * By Mark McCoughlin: Friday is for Yak Shaving <http://blogs.gnome.org/markmc/2012/09/14/friday-is-for-yak-shaving/> (experiences on using openstack-client over ssh tunnel) Upcoming Events * Help needed to organize the OpenStack devroom for *FOSDEM* 2013 <http://markmail.org/message/7ridfk4vgilz7slj> * OpenStack China Tour #1 <http://hui.csdn.net/MeetingInfo.aspx?mid=129> Sep 16, 2012 -- Bejing, China Details <http://hui.csdn.net/MeetingInfo.aspx?mid=129> * OpenStack China Tour #2 <http://hui.csdn.net/MeetingInfo.aspx?MID=135> Sep 22, 2012 -- Shenzen, China Details <http://hui.csdn.net/MeetingInfo.aspx?MID=135> * PyCon India 2012 <http://in.pycon.org/2012/funnel/pyconindia2012/48-openstack-open-source-sof…>, Sept 28-30 -- Bangalore, India, Details <http://in.pycon.org/2012/funnel/pyconindia2012/48-openstack-open-source-sof…> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * Approaching OpenStack Folsom RC1 * OpenStack Project Meeting 2012-09-11: Summary <http://eavesdrop.openstack.org/meetings/project/2012/project.2012-09-11-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2012/project.2012-09-11-21.…> Welcome new contributors Celebrating the first patches submitted this week by: * pengyuwei * Clemens Perz * jokcylou * Derek Yarnell * Teng Li * Alessandro Tagliapietra * Chris Yeoh, IBM * Sirisha Devineni, Persistent /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

PTL elections results, Fall 2012
by Thierry Carrez 14 Sep '12

14 Sep '12

The OpenStack PTL election period is now over. The following people have been elected as Project Technical Leads for the upcoming 6-month Grizzly development cycle: Nova PTL: Vish Ishaya Swift PTL: John Dickinson Glance PTL: Brian Waldon Keystone PTL: Joe Heck Horizon PTL: Gabriel Hurley Quantum PTL: Dan Wendlandt Cinder PTL: John Griffith openstack-common PTL: Mark McLoughlin Note that elected PTLs are automatically granted a 6-month seat on the OpenStack Technical Committee. Congrats everyone ! -- Thierry Carrez (ttx) Election official

1 0

OpenStack Object Storage ("Swift") 1.7.0 released
by Thierry Carrez 13 Sep '12

13 Sep '12

Hi everyone, The latest release of OpenStack Object Storage, also known as Swift, is now available at: https://launchpad.net/swift/folsom/1.7.0 Unless some critical issue is uncovered, this should be the last release of Swift in the Folsom series, and that version shall be included in the common OpenStack "Folsom" release on September 27. Note that the on-disk format of the ring files changed in 1.7.0. To upgrade safely, you should follow John's advice, posted at: https://lists.launchpad.net/openstack/msg16188.html Regards, -- Thierry Carrez (ttx) Release Manager, OpenStack

1 0

[OSSA 2012-014] Revoking a role does not affect existing tokens (CVE-2012-4413)
by Thierry Carrez 12 Sep '12

12 Sep '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2012-014 CVE: CVE-2012-4413 Date: September 12, 2012 Title: Revoking a role does not affect existing tokens Impact: High Reporter: Dolph Mathews (Rackspace) Products: Keystone Affects: Essex, Folsom Description: Dolph Mathews reported a vulnerability in Keystone. Granting and revoking roles from a user is not reflected upon token validation for pre-existing tokens. Pre-existing tokens continue to be valid for the original set of roles for the remainder of the token's lifespan, or until explicitly invalidated. This fix invalidates all tokens held by a user upon role grant/revoke to circumvent the issue. Folsom fix: http://github.com/openstack/keystone/commit/efb6b3fca0ba0ad768b3e803a324043… Essex fix: http://github.com/openstack/keystone/commit/58ac6691a21675be9e2ffb0f84a05fc… References: https://bugs.launchpad.net/keystone/+bug/1041396 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2012-4413 Notes: This fix will be included in the future Keystone 2012.1.3 stable update and the upcoming Folsom-RC1 development milestone. - -- Thierry Carrez (ttx) OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iQIcBAEBCAAGBQJQULoUAAoJEFB6+JAlsQQjGacQAJUvJb+oIjh73KAYYuDpl/YP PqJa4nmjVin7CyQ8AbxHK63xrAQ7isPFpCCqtEmjZ5kvFCrJRHiQggHNqISRhnvo +HyS6RSn4Vrp001PSZSmQI5MpgkeWhbOy+fk4/ZY7hFgUyS2YqC8YiK7DTMdKRBi toWOHRVWrmA4fUEDDcDdm9XzRseTC0cZAbj9bYAF+vXPdpxeGpq5l9Kb6yDezXGD 62dFvHghVTWdUIN+gK4V4d77PoyeO9NRd4Ud0GjDpV/asQL31dW6B4aRPYVDPhL3 7xcnhRsnZ3Y5J31n+7E/gMF+J+6kOaY/DNFZQ8chNW18kplYnmJnm7s3BJNjD512 UF/S5A5sH1Rk/vwe2nAHSqvQ1Dq3K0sRvW3YCijG2Rdj3mhBOr6OlvT5uJmnkeJT GQQ8SR3y+ZLS/2EEW+cVjDMxV4Gnf9Zzrw/tSjVp6QLmJAkG8qrFmgdisQ/Jao4M ygE8ZVu8lJq7N8b+k8XkB+bhz9E9V6hYOUuGoifEHRIPki/Ed7++BcdVTQdQYpAL kDTaoVZt1+plwAu4ZBLxUg1vhVz19qgDc7UeoY1sPc1JcRWp/ONnp6K4z+Y+7Rsx 3E4FLH0/qgFxKDHdGX91Plehk9dIEjHcGtKaXI8vOvGT17srYQaF6Y7rc+9TwaqI bggBCxcI2PLQgjuWyF4M =+6UN -----END PGP SIGNATURE-----

1 0

OpenStack Community Weekly Newsletter (Aug 31-Sep 7)
by Stefano Maffulli 07 Sep '12

07 Sep '12

Highlights of the week New OpenStack Foundation Gold Members: Intel, VmWare, NEC <http://lists.openstack.org/pipermail/foundation/2012-September/001091.html> Today, the OpenStack Board of Directors approved the applications of three companies wishing to become Gold Members: Intel, NEC and VMware. The factors considered by the Board included a commitment to helping achieve the OpenStack Foundation Mission through demonstrated and potential contribution to the OpenStack community in terms of code, adoption into product roadmaps, adoption as an end user, geographic and industry diversity and community development efforts. Join us to welcome them to the Foundation. Session proposals for the Design Summit now open <http://lists.openstack.org/pipermail/openstack-dev/2012-September/001059.ht…> Differently from previous OpenStack Design Summit and Confernece, this time the "Design Summit" is a specific track in the overall "OpenStack Summit" event. It is different from other tracks, too. Please make sure to read the full announcement <http://lists.openstack.org/pipermail/openstack-dev/2012-September/001059.ht…> and help make this summit the best Design Summit ever. Caimito 0.9 -- WebDAV frontend <http://markmail.org/message/hcnyvanvu6pojjxq>e <http://markmail.org/message/hcnyvanvu6pojjxq>for OpnStack Swift Cloud Storage <http://markmail.org/message/hcnyvanvu6pojjxq> Caimito is an open source (Apache Software License 2.0) WebDAV,caching, and content management and delivery server frontend for cloud storage. Caimito supports Openstack Swift Storage <http://openstack.org/projects/storage/> (Rackspace, Softlayer, etc.), and Amazon S3 <http://aws.amazon.com/s3/>. Caimito also features a REST API in addition to the Web interface for configuring user access. Caimito is designed with an event-driven and non-blocking architecture for Scalability. Caimito is ideal for Hosting and Reseller environments. Quantum vs. Nova-network in Folsom <http://markmail.org/message/kg3arb4gn57cm4rl> tl;dr both Quantum and nova-network will be core and fully supported in Folsom. More details from Quantum and Nova PTLs on Quantum vs. Nova-network in Folsom <http://markmail.org/message/yvkaq7jubab6vkjh>. OpenStack, Xen and XenServer: a match made in Heaven! <http://blogs.citrix.com/2012/09/06/openstack-xen-and-xenserver-a-match-made…> A report from John Garbutt, back from XenSummit in San Diego. There was lots of OpenStack related news in many of the CloudOpen sessions, including the announcement from SUSE that they have an OpenStack distribution that supports Xen. XCP-XAPI on Precise <http://blogs.citrix.com/2012/09/03/xcp-xapi-on-precise-2/> The Citrix-Openstack team is already running automated OpenStack tests against the stable, and the latest XenServer. As the XCP-XAPI is already available for Ubuntu systems, the team plans to run the tests against that platform as well. Register now for OpenStack Summit in San Diego <http://www.openstack.org/summit/san-diego-2012/> The OpenStack room rate is now sold out at the Grand Hyatt. We've set up another room block at the Embassy Suites located across the street. Reserve a room <http://embassysuites.hilton.com/en/es/groups/personalized/S/SANDNES-OPE-201…> at the OpenStack rate. Security announcements * Horizon, Open redirect through 'next' parameter (CVE-2012-3540) <http://lists.openstack.org/pipermail/openstack-announce/2012-August/000026.…> * Keystone, Lack of authorization for adding users to tenants (CVE-2012-3542) <http://lists.openstack.org/pipermail/openstack-announce/2012-August/000025.…> Tips and tricks * By Mirantis: Using Software Load Balancing in High Availability (HA) for OpenStack Cloud API Services <http://www.mirantis.com/blog/software-high-availability-load-balancing-open…> * By Mate Lakat: VHD to OpenStack using a XAPI host plugin <http://blogs.citrix.com/2012/09/06/vhd-to-openstack-using-a-xapi-host-plugi…> * By Brian Waldon: Upgrading OpenStack Glance -- Essex to Folsom <http://bcwaldon.cc/2012/09/05/glance-essex-to-folsom-upgrade.html> * A paper on handling compromised components of IaaS with a specific use case in OpenStack. Definitely worth a read: Aryan TaheriMonfared / Martin G Jaatun -- Handling Compromised Components in an IaaS Cloud Installation <http://secstack.org/2012/09/aryan-taherimonfared-martin-g-jaatun-handling-c…> * By Everett Toews: Getting jclouds and OpenStack work together <http://blog.phymata.com/2012/09/04/jclouds-and-openstack/> Upcoming Events * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * OpenStack election of Project Tech Leads is ongoing. Results will be announced on September 13th http://wiki.openstack.org/Governance/TCElectionsFall2012 * OpenStack Project Meeting 2012-09-04: Summary <http://eavesdrop.openstack.org/meetings/project/2012/project.2012-09-04-21.…> and Meeting log <http://eavesdrop.openstack.org/meetings/project/2012/project.2012-09-04-21.…> Welcome new contributors Celebrating the first patches submitted this week by: * Matthew Treinish, IBM * lrqrun * Constantine Peresypkin, Litestack * jiangwt100 * John Dunning * Duncan Thomas * Brian Rosmaita, Rackspace * Rosario Di Somma, Dreamhost * Peng Yuwei * Mathew Odden, IBM * Ian Wells, Cisco * Dermot Tynan, HP * Dongdong Zhou * Andrew James, HP /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0