- OpenStack-announce - lists.openstack.org

OpenStack Community Weekly Newsletter (Mar 27 - Apr 3)
by Stefano Maffulli 04 Apr '15

04 Apr '15

Game changer: inside Adobe’s new Marketing Cloud architecture The Adobe Marketing Cloud powers software-as-a-service marketing for outfits such as the Los Angeles Kings, eBags and Verizon Wireless. When the IT infrastructure team in Adobe’s Digital Marketing group realized it was time for an evolutionary revamp, it turned to OpenStack and VMware to up its game. Nominations for OpenStack PTLs (Program Technical Leads) are now open Nominations for OpenStack PTLs (Program Technical Leads) are now open and will remain open until April 9, 2015 05:59 UTC. To announce your candidacy please start a new openstack-dev at lists.openstack.org mailing list thread with the program name as a tag, example [Glance] PTL Candidacy with the body as your announcement of intent. People who are not the candidate, please refrain from posting +1 to the candidate announcement posting. Additional information about the nomination process can be found on the wiki. Additions to OpenStack git namespace * Magnum is now in the openstack git namespace * [congress] is an openstack project The Road to Vancouver * Sign up for OpenStack Upstream Training in Vancouver * Canada Visa Information * Official Hotel Room Blocks * 2015 OpenStack T-Shirt Design Contest * Preparation to Design summit * Liberty Design Summit planning * [Nova] Tracking ideas for summit sessions * [QA] Tracking Ideas for Summit Sessions * [neutron] Design Summit Session etherpad Relevant Conversations * The Evolution of core developer to maintainer? * [Nova][Neutron] Status of the nova-network to Neutron migration work * "First App" Tutorial for OpenStack * [api] Erring is Caring: An API Working Group Guideline for Errors * "The Security Team" for OpenStack Deadlines and Development Priorities * [Nova] Identifying release critical bugs in Kilo * [neutron] FF and our march towards the RC * [cinder] Proposals for Liberty Summit * [Cinder] Bug Triage - Call for Participation * [sahara] Design summit proposals for Liberty Summit * [Nova] Liberty specs are now open * [neutron] Liberty Specs are now open! Security Advisories and Notices * None Tips ‘n Tricks * By Victoria Martínez de la Cruz: Creation of Trove-Compatible Images for RDO Reports from Previous Events * OpenStack QA Code Sprint in NYC * Best Practices and Considerations Deploying OpenStack In Production Upcoming Events * Apr 06 - 07, 2015 April Meetup: “I Can Haz Moar Networks?” w/Midokura & Cumulus Networks Morrisville, NC, US * Apr 07, 2015 April Sydney Meetup * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 08 - 09, 2015 Software Defined Networks (SDN) & Linux Based Network OS (#20) Washington D.C., DC, US * Apr 09 - 10, 2015 Are you getting the most out of Cinder block storage in OpenStack? * Apr 09, 2015 OpenStack Howto part 1 - Install and Run Prague, CZ * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 13 - 16, 2015 StackAttack! A HOLatCollaborate15 Las Vegas, NV, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 15 - 16, 2015 1º Hangout OpenStack Brasil 2015 Brasil, BR * Apr 16 - 18, 2015 Open Cloud 2015 Beijing, Beijing, CN * Apr 16, 2015 8th OpenStack Meetup Stockholm Stockholm, SE * Apr 16, 2015 8th OpenStack User Group Nordics meetup Stockholm, SE * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC Other News * Parallels goes open source, wants OpenStack’s help to penetrate enterprise * Passion + community support = Success with OpenStack * python-barbicanclient 3.0.3 released * Million level scalability test report from cascading * What's Up Doc? Apr 2 2015 * [release] taskflow 0.8.1 * Call for testing: 2014.2.3 candidate tarballs The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

OpenStack Community Weekly Newsletter (Mar 20 - 27)
by Stefano Maffulli 28 Mar '15

28 Mar '15

OpenStack DefCore Process Draft Posted for Review [major milestone] OpenStack DefCore Committee is looking for community feedback about the proposed DefCore Process. March has been a month for OpenStack DefCore milestones. At the March Board meeting, the first official DefCore Guideline (called DefCore 2015.03) was approved. And the first DefCore Process draft is ready to be committed. 2015 OpenStack T-Shirt Design Contest It’s that time of year again and we’re looking for a new design to grace OpenStack’s T-Shirts. Here’s your chance to show us your creative talent and submit an original design for our 2015 OpenStack T-shirt Design Contest! The Road to Vancouver * Sign up for OpenStack Upstream Training in Vancouver * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * [Nova][Neutron] Status of the nova-network to Neutron migration work Deadlines and Development Priorities * [cinder] Deadline For Volume Drivers to Be Readded * [neutron] FF and our march towards the RC * Feature freeze + Kilo-3 development milestone available * [cinder] Proposals for Liberty Summit * [Cinder] Bug Triage - Call for Participation * [sahara] Design summit proposals for Liberty Summit * [oslo] must-fix bugs for final kilo releases * [Nova] Liberty specs are now open Security Advisories and Notices * Nova console Cross-Site WebSocket hijacking (CVE-2015-0259) Tips ‘n Tricks * By Belmiro Moreira: Nova quota usage - synchronization * By Anne Gentle: Male allies for women in tech: What’s needed? * By Sébastien Han: OpenStack: reserve memory on your hypervisors * By emoralesrh: SR-IOV Networking – Part II: Implementation Best Practices * By Tim Bell: Not all cores are created equal * By Sean Dague: OpenStack Emacs Tools * By Maish Saidel-Keesing: Installing OpenStack CLI clients on Mac OSX * By Adam Young: OpenStack keeps resetting my hostname * By Steve Martinelli: Checklist for performing OpenStack code reviews * By Adam Young: Troubleshooting Keystone in a New Install Reports from Previous Events * Scale & Maturity: Thoughts on the OpenStack Mid-Cycle Operators Meetup Upcoming Events OpenStack @ PyCon 2015: Booth info, looking for volunteers, posting of jobs, OpenStack presentations * Mar 31, 2015 Ceph Day Amsterdam Amsterdam, Netherlands, NL * Mar 31, 2015 OpenStack: fueled and containerized Rome, IT * Apr 01, 2015 OpenStack Meetup DFW Frisco, Texas, US * Apr 03 - 06, 2015 ISCC2015 Ariana, Ariana, TN * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 13 - 16, 2015 StackAttack! A HOLatCollaborate15 Las Vegas, NV, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 16 - 18, 2015 Open Cloud 2015 Beijing, Beijing, CN * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * Interview with Doug Hellmann, OpenStack Contributor and Technical Committee Member * As Paypal.com approaches 100 percent OpenStack, the private cloud is here to stay * Why OpenStack is different from other open source projects * OpenStack at 10: different code, same collaboration? The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

OpenStack Community Weekly Newsletter (Mar 13 - 20)
by Stefano Maffulli 21 Mar '15

21 Mar '15

Feature freeze + Kilo-3 development milestone available We just hit Feature Freeze, so please do not approve changes that add features or new configuration options unless those have been granted a feature freeze exception. This is also String Freeze, so you should avoid changing translatable strings. If you have to modify a translatable string, you should give a heads-up to the I18N team. Finally, this is also DepFreeze so you should avoid adding new dependencies (bumping oslo or openstack client libraries is OK until RC1). If you have a new dependency to add, raise a thread on openstack-dev about it. The kilo-3 development milestone was tagged, it contains more than 200 features and 825 bugfixes added since the kilo-2 milestone 6 weeks ago. More details on the full announcement. The joy of contributing to OpenStack Contributing to OpenStack doesn’t have to be painful. To ease these pain points, OpenStack developed free upstream training.. You can sign up for the next one by May 2. Another nice reading on the topic is Why your first OpenStack commit will always be the hardest, the interview with Susanne Balle, distinguished technologist with HP Cloud working on platform services. Leveraging OpenStackClient as your unified command line interface OpenStackClient v1.0.3 was released last week and this release includes a large number of feature requests and bug fixes. But the even more exciting news is that the OpenStack Technical Committee voted in favor to include OpenStackClient as part of it’s list of official projects! The newly integrated OpenStackClient project will include python-openstackclient, cliff and os-client-config. Handling High Email Volume with sup Over the last year, the openstack-dev mailing list has averaged 2500 messages every month. Staying on top of that much email can be challenging, especially with some of the consumer-grade email clients available today. Doug Hellmann recently upgraded his email setup to use sup, a terminal-based mail client. He says the switch helped him process the mailing list, and even keep up with gerrit at the same time. Sounds too good to be true to me. What do you think? The Road to Vancouver * Sign up for OpenStack Upstream Training in Vancouver * Deadline for Superuser Awards: March 22 * Vancouver Summit Sponsorships Now Available * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * if by "archived" you mean, "wipes out your tables completely", then sure, it works fine * Example configs * Capability Discovery API Deadlines and Development Priorities * Feature freeze + Kilo-3 development milestone available * [cinder] Proposals for Liberty Summit * [Cinder] Bug Triage - Call for Participation * [sahara] Design summit proposals for Liberty Summit * [oslo] must-fix bugs for final kilo releases * [Nova] Liberty specs are now open * Gerrit downtime on 2015-03-21 Security Advisories and Notices * None Tips ‘n Tricks * By Kashyap Chamarthy: Minimal DevStack with OpenStack Neutron networking * By CaptainKVM: Custom Cloud Images for OpenStack pt1 * By Ben Nemec: QuintupleO Success! * By Sébastien Han: OpenStack Glance NFS and Compute local direct fetch Upcoming Events OpenStack @ PyCon 2015: Booth info, looking for volunteers, posting of jobs, OpenStack presentations * Mar 22 - 23, 2015 OpenStack Workshop, Pune, Bangalore, Karnataka, IN * Mar 22 - 23, 2015 OpenStack Workshop at SICSR, Pune * Mar 24, 2015 OpenStack Malaysia 2nd Meetup Damansara, Kuala Lumpur, MY * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Mar 26, 2015 #CloudBeerStockholm Stockholm, SE * Mar 26, 2015 OpenStack L.A. March Meetup Pasadena, CA, US * Mar 31, 2015 Ceph Day Amsterdam Amsterdam, Netherlands, NL * Mar 31, 2015 OpenStack: fueled and containerized Rome, IT * Apr 01, 2015 OpenStack Meetup DFW Frisco, Texas, US * Apr 03 - 06, 2015 ISCC2015 Ariana, Ariana, TN * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 13 - 16, 2015 StackAttack! A HOLatCollaborate15 Las Vegas, NV, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 16 - 18, 2015 Open Cloud 2015 Beijing, Beijing, CN * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * QuintupleO Demo Video * What’s Going On With Heat-Translator * Meet AVOS: the analytics dashboard for your OpenStack cloud * QEMU QCow2 built-in encryption: just say no. Deprecated now, to be deleted soon * [Ceilometer] Gnocchi 1.0.0a1 released * [Ironic] Announcing Bifrost Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * is there planned support for destination ip as a load balancing method? * Network connection leak in Keystone? * read failed with input/output error on VolGroup * How to use Opendaylight loadbalance app in OpenStack Neutron Lbaas? * JJB looking for the postbuilders(maven project) config to set "Run only if build succeeds" * Rally throwing errors for heat testing. * Inserting additional status entries into nova.instance_actions? The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

Feature freeze + Kilo-3 development milestone available
by Thierry Carrez 20 Mar '15

20 Mar '15

Hi everyone, We just hit feature freeze[1], so please do not approve changes that add features or new configuration options unless those have been granted a feature freeze exception. This is also string freeze[2], so you should avoid changing translatable strings. If you have to modify a translatable string, you should give a heads-up to the I18N team. Finally, this is also DepFreeze[3], so you should avoid adding new dependencies (bumping oslo or openstack client libraries is OK until RC1). If you have a new dependency to add, raise a thread on openstack-dev about it. The kilo-3 development milestone was tagged, it contains more than 200 features and 825 bugfixes added since the kilo-2 milestone 6 weeks ago (not even counting the Oslo libraries in the mix !). You can find the full list of new features and fixed bugs, as well as tarball downloads, at: https://launchpad.net/keystone/kilo/kilo-3 https://launchpad.net/glance/kilo/kilo-3 https://launchpad.net/nova/kilo/kilo-3 https://launchpad.net/horizon/kilo/kilo-3 https://launchpad.net/neutron/kilo/kilo-3 https://launchpad.net/cinder/kilo/kilo-3 https://launchpad.net/ceilometer/kilo/kilo-3 https://launchpad.net/heat/kilo/kilo-3 https://launchpad.net/trove/kilo/kilo-3 https://launchpad.net/sahara/kilo/kilo-3 https://launchpad.net/ironic/kilo/kilo-3 Congrats to all the PTLs and release management liaisons who made us reach this important milestone in the Kilo development cycle ! Regards, [1] https://wiki.openstack.org/wiki/FeatureFreeze [2] https://wiki.openstack.org/wiki/StringFreeze [3] https://wiki.openstack.org/wiki/DepFreeze Regards, -- Thierry Carrez (ttx)

1 0

OpenStack Community Weekly Newsletter (Mar 6 - 13)
by Stefano Maffulli 14 Mar '15

14 Mar '15

Five years in: Charting the OpenStack galaxy The Starship Enterprise had a five year mission, to "explore strange new worlds," among other things, and as we approach the five year mark in our own mission, it's fun to think about the worlds we've seen and contemplate where to go next. Did anyone think we'd have a non-profit foundation in year three, with VMware joining right after we started it? Strange new worlds, indeed. Check out what's under the hood at TryStack Billed as the easiest way to try out OpenStack, this free service lets you test what the cloud can do for you, offering networking, storage, and compute instances, without having to go all in with your own hardware. Dan Radez, whose day job is at Red Hat, unveiled TryStack’s new gear in a lightning show-and-tell talk at the recent Mid-Cycle Ops Meetup. The Road to Vancouver * Sign up for OpenStack Upstream Training in Vancouver * Superuser Awards Nominations Now Open * Vancouver Summit Sponsorships Now Available * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * Call for mentors - Upstream Training, Outreachy (former OPW) * Stepping out of the way * readout from Philly Operators Meetup * Avoiding regression in project governance * Microversions. And why do we need API extensions for new API functionality? Deadlines and Development Priorities * [nova] Kilo FeatureFreeze is March 19th, FeatureProposalFreeze has happened * [cinder] Kilo Deadlines need to have a CI by end of K-3, March 19th 2015 * [cinder] Proposals for Liberty Summit * [sahara] Design summit proposals for Liberty Summit * [oslo] must-fix bugs for final kilo releases * Log Working Group priorities Security Advisories and Notices * Nova console Cross-Site WebSocket hijacking (CVE-2015-0259) * [OSSN 0045] Vulnerable clients allow a TLS protocol downgrade (FREAK) Reports from Previous Events * March 2 Board of Directors Meeting * OpenStack Mid-Cycle meetup, day one roundup * OpenStack Mid-Cycle meetup, day two roundup * Takeaways from OpenStack’s Mid-Cycle Ops Meetup: A little more conversation, a little more action * [horizon] Kilo angular virtual sprint Tips ‘n Tricks * By Lars Kellogg-Stedman: Diagnosing problems with an OpenStack deployment * By Doug Hellmann: Deploying Nested ZNC Services with Ansible * By Gabriel Samfira: Windows + Open Compute + MAAS = ♥ * By Matthias Runge: Testing Horizon git snapshots * By Russell Bryant: The Different Facets of OpenStack HA * By Emilien Macchi: Writing a new OpenStack Puppet module Upcoming Events OpenStack @ PyCon 2015: Booth info, looking for volunteers, posting of jobs, OpenStack presentations * Mar 14, 2015 Meetup event in Intel * Mar 16 - 17, 2015 OpenStack Workshop ,Bangalore, Karnataka, IN * Mar 16 - 17, 2015 OpenStack Workshop at PESIT * Mar 17, 2015 OpenStack Munich Meetup Munich, Bavaria, DE * Mar 17, 2015 Disrupting Vendor Clouds Stanford, CA, US * Mar 17, 2015 HP Helion Technical Session Boston, MA, US * Mar 17, 2015 OpenStack München Meetup – Lets talk about Storage * Mar 18 - 19, 2015 Introduction to OpenDaylight: Current Events and OpenStack Neutron Integration * Mar 19 - 20, 2015 Keystone and External Authentication Implementation * Mar 19 - 20, 2015 OpenStack Baltimore Meetup #3 * Mar 19 - 20, 2015 OpenStack networking - Neutron deep dive with PLUMgrid * Mar 20 - 21, 2015 March Sydney Hackathon - Tentative Date * Mar 20, 2015 SFBay OpenStack Hackathon #OSSFO * Mar 22 - 23, 2015 OpenStack Workshop, Pune, Bangalore, Karnataka, IN * Mar 22 - 23, 2015 OpenStack Workshop at SICSR, Pune * Mar 24, 2015 OpenStack Malaysia 2nd Meetup Damansara, Kuala Lumpur, MY * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Mar 26, 2015 #CloudBeerStockholm Stockholm, SE * Mar 26, 2015 OpenStack L.A. March Meetup Pasadena, CA, US * Mar 31, 2015 Ceph Day Amsterdam Amsterdam, Netherlands, NL * Mar 31, 2015 OpenStack: fueled and containerized Rome, IT * Apr 01, 2015 OpenStack Meetup DFW Frisco, Texas, US * Apr 03 - 06, 2015 ISCC2015 Ariana, Ariana, TN * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 13 - 16, 2015 StackAttack! A HOLatCollaborate15 Las Vegas, NV, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 16 - 18, 2015 Open Cloud 2015 Beijing, Beijing, CN * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * OpenStack 2014.1.4 released * glance_store release 0.1.12 * [OpenStackClient] OSC release 1.0.3 * Announcing Gertty 1.1.0 * Second Release of Magnum * Superuser Reader app for Android available now * Welcoming oslo.policy into the OpenStack Oslo family * Pass the Mic User Spotlight: Jeremy Stanley, OpenStack Infrastructure Team * OpenStack and the Balance Between Independence and Compatibility * How to Take the CI/CD Plunge or How I Learned to Stop Worrying and Love OpenStack — Q&A * Xen Project Now an Easy Option in OpenStack Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * I accidentally deleted nova-cert service. How can I rebuild it? * ImportError: No module named auth.identity * Ceilometer: How to get metrics from SDN controllers * Why the BufferedHttpResponse stops proceeding requests? * Why does Openstack Swift PUT requests are blocked by eventlet.green.httplib? * Using Openstack alarms The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

[OSSA 2015-005] Nova console Cross-Site WebSocket hijacking (CVE-2015-0259)
by Tristan Cacqueray 13 Mar '15

13 Mar '15

========================================================== OSSA-2015-005: Nova console Cross-Site WebSocket hijacking ========================================================== :Date: March 13, 2015 :CVE: CVE-2015-0259 Affects ~~~~~~~ - Nova: up to 2014.1.3 and 2014.2 versions up to 2014.2.2 Description ~~~~~~~~~~~ Brian Manifold from Cisco and Paul McMillan from Nebula reported a vulnerability in Nova console websocket. By tricking an authenticated user into visiting a malicious URL, a remote attacker or a man in the middle may exploit a cross-site-websocket-hijacking vulnerability resulting in potential hijack of consoles where the user is still logged in. Only Nova setups with vnc or spice enabled are affected. Patches ~~~~~~~ - https://review.openstack.org/163035 (Icehouse) - https://review.openstack.org/163034 (Juno) - https://review.openstack.org/163033 (Kilo) Credits ~~~~~~~ - Brian Manifold from Cisco (CVE-2015-0259) - Paul McMillan from Nebula (CVE-2015-0259) References ~~~~~~~~~~ - https://launchpad.net/bugs/1409142 - http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0259 Notes ~~~~~ - This fix is included in 2014.1.4 (icehouse) release and it will be included in the kilo-3 development milestone and in the future 2014.2.3 (juno) release. -- Tristan Cacqueray OpenStack Vulnerability Management Team

1 0

OpenStack 2014.1.4 released
by Alan Pevec 13 Mar '15

13 Mar '15

Hello everyone, The OpenStack Stable Maintenance team is happy to announce the 2014.1.4 stable Icehouse release. We have been busy reviewing and accepting backported bugfixes to the stable/icehouse branches according to the criteria set at: https://wiki.openstack.org/wiki/StableBranch A total of 89 bugs have been fixed across all projects since 2014.1.3. These updates to Icehouse are intended to be low risk with no intentional regressions or API changes. The list of bugs, tarballs and other milestone information for each project may be found on Launchpad: https://launchpad.net/ceilometer/icehouse/2014.1.4 https://launchpad.net/cinder/icehouse/2014.1.4 https://launchpad.net/glance/icehouse/2014.1.4 https://launchpad.net/heat/icehouse/2014.1.4 https://launchpad.net/horizon/icehouse/2014.1.4 https://launchpad.net/keystone/icehouse/2014.1.4 https://launchpad.net/neutron/icehouse/2014.1.4 https://launchpad.net/nova/icehouse/2014.1.4 https://launchpad.net/trove/icehouse/2014.1.4 Release notes may be found on the wiki: https://wiki.openstack.org/wiki/ReleaseNotes/2014.1.4 The freeze on the stable/icehouse branches will be lifted today as we begin working toward 2014.1.5, the last planned official Icehouse release. Thanks, Alan

1 0

OpenStack Community Weekly Newsletter (Feb 27 - Mar 6)
by Stefano Maffulli 08 Mar '15

08 Mar '15

OpenStack User Groups get a new home It’s easy to stay in touch with OpenStack birds-of-a-feather wherever you are, from India to Italy, with the new OpenStack User Groups portal. Even with events all over the globe, it's super simple to stay current — join a group, and you’ll be notified of new events when they're created. The facets of the OpenStack integrated release Thierry Carrez looks into the various meanings the "integrated release" ended up having in our history, and see how we can better convey that information through separate tags. DefCore Process 9 Point Graphic balances Community, Vendor, Goverance Rob Hirschfeld has been working on the OpenStack DefCore process for nearly 3 years and he recognizes that the number #1 challenge of the effort remains how to explain it simply. The DefCore team has nevertheless managed to boil it down into nine key points. The Road to Vancouver * Sign up for OpenStack Upstream Training in Vancouver * Superuser Awards Nominations Now Open * Vancouver Summit Sponsorships Now Available * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * OpenStack options for visually impaired contributors * creating a unified developer reference manual * Call for mentors - Upstream Training, Outreachy (former OPW) * An alternative view of OpenStack, or how to encourage innovation by getting out of the way * Gerrit tooling improvements * [nova] blueprint about multiple workers supported in nova-scheduler * Magnum - OpenStack Containers Service * Microversions. And why do we need API extensions for new API functionality? Deadlines and Development Priorities * [cinder] Kilo Deadlines need to have a CI by end of K-3, March 19th 2015 * [nova] List of all Feature Freeze Exception requests * [cinder] Proposals for Liberty Summit * Outcome of the nova FFE meeting for Kilo Security Advisories and Notices * [OSSN 0044] Older versions of noVNC allow session theft Tips ‘n Tricks * By Adam Young: Keystone Federation via mod_lookup_identity redux and Convince Nova to Use the V3 version of the API * By Boris Pavlovic: Rally as an OpenStack performance dashboard * By Nir Yechiel: SR-IOV Networking – Part I: Understanding the Basics * By Ben Nemec: IPMI Controller for OpenStack Instances * By John Eckersberg: Improving HA Failures with TCP Timeouts * By Swapnil Kulkarni: Rally in a Containter : A reference implementation similar to TCup Upcoming Events The 2015 events plan is now available on the Global Events Calendar wiki. * Mar 11 - 12, 2015 Cloud Expo Europe London, GB * Mar 11, 2015 Philadelphia OpenStack Meetup Philadelphia, PA, US * Mar 12, 2015 OpenStack NYC Meetup New York, NY, US * Mar 12, 2015 Ceph Day San Francisco San Francisco, California, US * Mar 17, 2015 OpenStack Munich Meetup Munich, Bavaria, DE * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Mar 26, 2015 #CloudBeerStockholm Stockholm, SE * Mar 31, 2015 Ceph Day Amsterdam Amsterdam, Netherlands, NL * Apr 01, 2015 OpenStack Meetup DFW Frisco, Texas, US * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * Why OpenStack’s drive for inclusivity matters * python-glanceclient release 0.16.1 Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * How neutron calculates new routing path * Ceilometer filter by user_id (or username) The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

OpenStack Community Weekly Newsletter (Feb 20 - 27)
by Stefano Maffulli 28 Feb '15

28 Feb '15

OpenStack DefCore Accelerates & Simplifies with Clear and Timely Guidelines [Feedback?] Last week, the OpenStack DefCore committee rolled up our collective sleeves and got to work in a serious way. We had a in-person meeting with great turn out with 5 board members, Foundation executives/staff and good community engagement. TL;DR > We think DefCore deliverables should be dated milestone guidelines instead tightly coupled to release events (see graphic on Rob Hirschfeld's blog). Scaling OpenStack Neutron Development During Kilo cycle, Neutron's team has made an effort to expand and scale the Neutron development community. Plugin Decomposition and Advanced Services Split were designed to enable a more scalable development environment which will allow for fast code iteration in all the areas affected. How have we done with these? OpenStack + Kubernetes = More choice and flexibility for developers Sometimes a demo can go almost too well. By the time Craig Peters and Georgy Okrokvertskhov took the mic to show how OpenStack support for Kubernetes makes managing Docker containers pretty much a point-and-click operation, the crowd at the Kubernetes San Francisco meetup was almost hoping for a glitch. Instead, in just under 10 minutes, the pair did a seamless walk-through of how to set up a Kubernetes cluster using OpenStack in the final demo of the night. The Road to Vancouver * Sign up for OpenStack Upstream Training in Vancouver * Superuser Awards Nominations Now Open * Vancouver Summit Sponsorships Now Available * Canada Visa Information * Official Hotel Room Blocks * Next batch of invites to Kilo contributors will be sent after a new milestone is released Relevant Conversations * creating a unified developer reference manual * Re-evaluating the suitability of the 6 month release cycle * DefCore isn't a punk band, but if you use OpenStack, listen up * GSoC2015: Its time for potential mentors and participants! And Call for mentors - Upstream Training, Google Summer of Code, Outreachy (AKA OPW) * proposal for a "OpenStack Application Tutorial" application * OpenStack Technical Committee Update: Project Reform Progress * Infra cloud: infra running a cloud for nodepool Deadlines and Development Priorities * [cinder] Kilo Deadlines need to have a CI by end of K-3, March 19th 2015 * [nova] List of all Feature Freeze Exception requests * [cinder] Proposals for Liberty Summit * Outcome of the nova FFE meeting for Kilo Reports From Previous Events * Welcome to the wild west of networking and cloud infrastructure * CloudCamp Bangladesh sparks conversation on the future of cloud * Slides and Recording of Webinar: An Introduction to Database as a Service on OpenStack using Trove Security Advisories and Notices * Glance import task leaks image in backend (CVE-2014-9684, CVE-2015-1881) Tips ‘n Tricks * By Sébastien Han: Analyse OpenStack guest writes and reads running on Ceph * By Adam Young: Three Types of Tokens * By Brad Topol: Building a Cloud Storage Application * By Rich Bowen: How to build RedHat 100 node Openstack lab on AWS * By Ben Nemec: Quick and Dirty Snapshots of Instances Booted from Volume * By Nick Chase: Integrating OpenStack and Kubernetes with Murano * By Sébastien Han: Quick and efficient Ceph DevStacking * By Jamie Lennox: V3 Authentication With Auth_token Middleware * By Joe Gordon: How to turn tempest CLI tests into python-*client in-tree functional tests Upcoming Events The 2015 events plan is now available on the Global Events Calendar wiki. * Mar 04, 2015 OpenStack Finland meetup Helsinki, Uusimaa, FI * Mar 04, 2015 #CloudBeerGothenburg Gothenburg, SE * Mar 04, 2015 Dallas OpenStack Meetup Plano, Texas, US * Mar 05, 2015 9thOpenStackUGMeetup Zurich, Zurich, CH * Mar 11 - 12, 2015 Cloud Expo Europe London, GB * Mar 11, 2015 Philadelphia OpenStack Meetup Philadelphia, PA, US * Mar 12, 2015 OpenStack NYC Meetup New York, NY, US * Mar 12, 2015 Ceph Day San Francisco San Francisco, California, US * Mar 17, 2015 OpenStack Munich Meetup Munich, Bavaria, DE * Mar 26, 2015 PDX OpenStack Hackathon Portland, OR, US * Mar 26, 2015 #CloudBeerStockholm Stockholm, SE * Mar 31, 2015 Ceph Day Amsterdam Amsterdam, Netherlands, NL * Apr 01, 2015 OpenStack Meetup DFW Frisco, Texas, US * Apr 08 - 16, 2015 PyCon 2015 Montreal, Quebec, CA * Apr 13 - 14, 2015 OpenStack Live Santa Clara, CA, US * Apr 15, 2015 iX OpenStack Tag Köln, NRW, DE * Apr 21 - 22, 2015 CONNECT 2015 Melbourne, Victoria, AU * Apr 22 - 23, 2015 China SDNNFV Conference Beijing, CN * Apr 22, 2015 OpenStack NYC Meetup New York, NY, US * Apr 23, 2015 OpenStack Philadelphia Meetup Philadelphia, PA, US * May 05 - 07, 2015 CeBIT AU 2015 Sydney, NSW, AU * May 18 - 22, 2015 OpenStack Summit May 2015 Vancouver, BC * Jun 11, 2015 OpenStack DACH Day 2015 Berlin, DE * Jul 20 - 24, 2015 OSCON 2015 Portland, OR, US * Aug 10 - 13, 2015 Gartner Catalyst Conference San Diego, CA, US * Sep 17, 2015 OpenStack Benelux Conference 2015 Bussum, NL * Oct 04 - 08, 2015 Gartner SymposiumITxpo Orlando, FL, US * Nov 15 - 20, 2015 Supercomputing 15 Austin, TX, US Other News * Romancing the devs: another reason Walmart Labs went open source * Integrating OpenStack and Kubernetes with Murano * Release of python-keystoneclient 1.2.0 * What's Up Doc? Feb 26 2015 * Group Based Policy - Kilo-1 development milestone * [nova] Hypervisor support matrix now in GIT Got Answers? Ask OpenStack is the go-to destination for OpenStack users. Interesting questions waiting for answers: * Windows 7 Console Unicode errors * how to know when a router has been deleted? * Low-Budget Cluster with OpenStack? * Query regarding SAML with keystone * How to run a service on vm when its bootstapped from cloud init * How to interpret timestamp in ceilometer v2/meters/disk.read.bytes? * Adding a new datacentre (swift object store) * Calling batch script from cloudbase-init? The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment.

1 0

[python-keystoneclient] Release of python-keystoneclient 1.2.0
by Morgan Fainberg 27 Feb '15

27 Feb '15

The Keystone team has released python-keystoneclient 1.2.0. This release can be installed from the following locations: * http://tarballs.openstack.org/python-keystoneclient * https://pypi.python.org/pypi/python-keystoneclient Detailed changes in this release: https://launchpad.net/python-keystoneclient/+milestone/1.2.0 -- Morgan Fainberg

1 0