- OpenStack-announce - lists.openstack.org

python-swiftclient releases
by John Dickinson 15 Feb '14

15 Feb '14

I'm pleased to announce a couple of big releases for python-swiftclient: versions 1.9.0 and 2.0.2. You can find them both on PyPI: https://pypi.python.org/pypi/python-swiftclient/2.0.2 https://pypi.python.org/pypi/python-swiftclient/1.9.0 So why the two releases? The 2.0.2 release is the result of migrating to the Python requests library. The 1.9.0 release is the final release of the 1.X series and includes all unreleased changes before the port to requests. Below is a summary of the changes included in 1.9.0 and 2.0.2. 1.9.0 new features: * Add parameter --object-name, which: 1) Sets target object name when upload single file 2) Sets object prefix when upload a directory * Add capabilities command This option uses the new /info endpoint to request the remote capabilities and nicely display it. * Allow custom headers when using swift download (CLI) A repeatable option, --header or -H, is added so a user can specify custom headers such as Range or If-Modified-Since when downloading an object with the swift CLI. 2.0.2 new features and important info: * Ported to use the "requests" library to support TLS/SSL certificate validation. The certificate validation changes the interpretation and usage of the "--insecure" option. Usage of the requests library has two important caveats: 1) SSL compression is no longer settable with the "--no-ssl-compression" option. The option is preserved as a no-op for client compatibility. SSL compression is set by the system SSL library. 2) The requests library does not currently support Expect 100-continue requests on upload. Users requiring this feature should use python-swiftclient 1.9.0 until requests support this feature or use a different API wrapper. Please pay special attention to these changes. There are no plans to maintain ongoing development on the 1.X series. All future work, including support for Python 3, will happen in the 2.X series. I'd also like to explicitly thank the eNovance development team, especially Tristan Cacqueray, Christian Schwede, and Chmouel Boudjnah, for their work in these releases. In addition to several smaller features, they led the effort to port python-swiftclient to the requests library. Note: 2.0.2 and not simply 2.0 is because of a bug that was discovered after 2.0 was tagged. See http://lists.openstack.org/pipermail/openstack-dev/2014-February/027172.html for details. --John

1 0

OpenStack 2013.2.2 released
by Alan Pevec 14 Feb '14

14 Feb '14

Hello everyone, The OpenStack Stable Maintenance team is happy to announce the release of the 2013.2.2 stable Havana release. We have been busy reviewing and accepting backported bugfixes to the stable/havana branches according to the criteria set at: https://wiki.openstack.org/wiki/StableBranch A total of 98 bugs have been fixed across all projects. These updates to Havana are intended to be low risk with no intentional regressions or API changes. The list of bugs, tarballs and other milestone information for each project may be found on Launchpad: https://launchpad.net/nova/havana/2013.2.2 https://launchpad.net/keystone/havana/2013.2.2 https://launchpad.net/glance/havana/2013.2.2 https://launchpad.net/neutron/havana/2013.2.2 https://launchpad.net/cinder/havana/2013.2.2 https://launchpad.net/horizon/havana/2013.2.2 https://launchpad.net/heat/havana/2013.2.2 https://launchpad.net/ceilometer/havana/2013.2.2 Release notes may be found on the wiki: https://wiki.openstack.org/wiki/ReleaseNotes/2013.2.2 The freeze on the stable/havana branches will be lifted today as we begin working toward the 2013.2.3 release, to be released on April 3rd and managed by Adam Gandelman. Thanks, Alan

1 0

[OSSA 2014-004] Glance Swift store backend password leak (CVE-2014-1948)
by Jeremy Stanley 13 Feb '14

13 Feb '14

OpenStack Security Advisory: 2014-004 CVE: CVE-2014-1948 Date: February 12, 2014 Title: Glance Swift store backend password leak Reporter: Nikhil Komawar (Rackspace) Products: Glance Versions: 2013.2 versions up to 2013.2.1 Description: Nikhil Komawar from Rackspace reported an information leak in Glance logs. The password for the Swift store backend is logged at WARNING level as part of the URL when authentication to a store fails if image location is not disabled by policy or the store is a single-tenant configuration. An attacker with access to the logs (local shell, log aggregation system access, or accidental leak) may leverage this vulnerability to elevate privileges and gain direct full access to the Glance Swift store backend. Only Glance setups using the Swift store backend are affected. Icehouse (development branch) fix: https://review.openstack.org/71419 Havana fix: https://review.openstack.org/72473 Notes: This fix will be included in the icehouse-2 development milestone and the upcoming 2013.2.2 release. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1948 https://launchpad.net/bugs/1275062 -- Jeremy Stanley OpenStack Vulnerability Management Team

1 0

OpenStack Community Weekly Newsletter (Jan 31 - Feb 7)
by Stefano Maffulli 08 Feb '14

08 Feb '14

1 0

[OpenStack-announce] python-cinderclient 1.0.8 released to PyPi
by John Griffith 05 Feb '14

05 Feb '14

1 0

OpenStack Community Weekly Newsletter (Jan 24 – 31)
by Stefano Maffulli 31 Jan '14

31 Jan '14

OpenStack 2014: Powered by Users <http://www.openstack.org/blog/2014/01/openstack-2014-powered-by-users/> If momentum is any indication, 2014 is poised to be a defining year for OpenStack. All of our vital statistics, from community growth to code commits and tracked deployments, doubled in 2013, and all signs point to continued growth. As we start a new year, we in the OpenStack Foundation are putting our resources behind elevating the voice of OpenStack users and tightening the feedback loop between users and developers to influence decisions such as the scope of the project, new feature priorities, interoperability requirements and operational best practices. New Foundation Gold Members & Sponsors <http://www.openstack.org/blog/2014/01/new-foundation-gold-members-sponsors/> The OpenStack Foundation is thrilled to have new additions to our ecosystem. Three new Gold Members and 18 Corporate Sponsors have recently joined the incredible list of companies who are supporting the Foundation and driving innovation on the platform. *Aptira <http://www.aptira.com/>*, *Huawei* <http://www.huawei.com/> and *Hitachi* <http://www.hitachi.com/> won the OpenStack Board’s approval at the November board meeting and joined the Foundation as Gold members, which requires a strong, strategic commitment to the technology and community. We’ve also seen amazing support in Corporate Sponsorship and we want to share the impressive list of recent additions. OpenStack Commitment to Interoperability <http://www.openstack.org/blog/2014/01/openstack-commitment-to-interoperabil…> Now that OpenStack has tons of users, we need to make sure all (downstream) products labeled “OpenStack” have a certain set of*core capabilities*, and we need to verify those with *automated tests* just like we do upstream. End-users should be our focus, and ensuring they get what they want and expect out of the platform once it’s running as a service is paramount. The goal is to define the first set of tests in time for the May 2014 Summit in Atlanta. If this matters to you, get involved! Maturing the Horizon Overview Page Part 1 <http://uxd-stackabledesign.rhcloud.com/?p=34> and Part 2 <http://uxd-stackabledesign.rhcloud.com/?p=62> User experience designer Liz Blanchard <http://uxd-stackabledesign.rhcloud.com/> goes into details about tells in two blog post how she and Ju <https://plus.google.com/105626042354015503324/posts> approached the designing of the Overview page for Horizon. OpenStack Object Storage release 1.12.0 <http://lists.openstack.org/pipermail/openstack-announce/2014-January/000190…> New release of OpenStack Object Storage (Swift) with new features for operators and end-users alike. Tips ‘n Tricks * By Adam Young <http://adam.younglogic.com/>: Splitting a patch <http://adam.younglogic.com/2014/01/splitting-a-patch/> * By Frederic Lepied <http://techs.enovance.com/6603/how-to-build-edeploy-roles>: How to build eDeploy roles <http://techs.enovance.com/6603/how-to-build-edeploy-roles> * By Matthew Farrellee <http://spinningmatt.wordpress.com/>: Hadoop on OpenStack with a CLI: Creating a cluster <http://spinningmatt.wordpress.com/2014/01/29/hadoop-on-openstack-with-a-cli…> * By ICCLab <http://www.cloudcomp.ch/>: Mirantis Fuel – Openstack installation for Noddy <http://www.cloudcomp.ch/2014/01/mirantis-fuel-openstack-installation-for-no…> * By Kashyap Chamarthy <http://kashyapc.wordpress.com/>: virt-builder, to trivially create various Linux distribution guest images <http://kashyapc.wordpress.com/2014/01/27/virt-builder-to-trivially-create-v…> * By Flavio Percoco <http://blog.flaper87.com/>: Real-Time Systems: High level introduction <http://blog.flaper87.com/post/52e43f93d987d2cc17700b58/> Upcoming Events * FOSDEM <https://fosdem.org/2014/> Feb 01 – 02, 2014 – Bruxelles, Belgium Details <https://fosdem.org/2014/> * SFBay Meetup – Platform Tools in OpenStack <http://www.meetup.com/openstack/events/163020092/> Feb 05, 2014 – Sunnyvale, CA Details <http://www.meetup.com/openstack/events/163020092/> * SFBay Meetup – Beginner track <http://www.meetup.com/openstack/events/123227512/> Feb 06, 2014 – Sunnyvale, CA Details <http://www.meetup.com/openstack/events/123227512/> * SFBay OpenStack Hackathon #OSSFO <http://www.meetup.com/openstack/events/123227492/> Feb 06, 2014 – Details <http://www.meetup.com/openstack/events/123227492/> * OpenStack Finland Meetup <http://www.eventbrite.com/e/2nd-openstack-finland-user-group-meetup-in-hels…> Feb 11, 2014 – Helsinki, Finland Details <http://www.eventbrite.com/e/2nd-openstack-finland-user-group-meetup-in-hels…> * OpenStack Paris Meetup <http://www.meetup.com/OpenStack-France/events/161704432/> Feb 11, 2014 – Paris, France Details <http://www.meetup.com/OpenStack-France/events/161704432/> * OpenStack Days – Tokyo 2014 <http://www.openstackdays.com/en/> Feb 13 – 14, 2014 – Tokyo, Japan Details <http://www.openstackdays.com/en/> * OpenStack Workshop at Gnunify Conference, SICSR Pune <http://www.meetup.com/Indian-OpenStack-User-Group/events/162277702/> Feb 14, 2014 – Bangalore, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/162277702/> * Korea OpenStack Day <http://onoffmix.com/event/22995> Feb 18, 2014 – Seoul, South Korea Details <http://onoffmix.com/event/22995> * Austin OpenStack User Group Meetup <http://www.meetup.com/OpenStack-Austin/events/154331162/> Feb 19, 2014 – Austin, Texas Details <http://www.meetup.com/OpenStack-Austin/events/154331162/> * OpenStack Chicago Meetup <http://www.meetup.com/meetup-group-NjZdcegA/> Feb 20, 2014 – Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/> * SFBay OpenStack Hackathon #OSSFO <http://www.meetup.com/openstack/events/123227532/> Feb 20, 2014 – Details <http://www.meetup.com/openstack/events/123227532/> * OpenStack India Meetup <http://www.meetup.com/Indian-OpenStack-User-Group/events/160120142/> Feb 22, 2014 – Hyderabad, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/160120142/> * Open Cloud Summit at IBM Pulse <http://www.ibmpulseblog.com/second-open-cloud-summit-at-pulse-sunday-februa…> Feb 23 – 26, 2014 – Las Vegas, Nevada Details <http://www.ibmpulseblog.com/second-open-cloud-summit-at-pulse-sunday-februa…> * Mobile World Congress <http://www.mobileworldcongress.com/> Feb 24 – 27, 2014 – Barcelona, Spain Details <http://www.mobileworldcongress.com/> * Cloud Connect Summit at Interop <http://www.interop.com/lasvegas/conference/cloud-connect.php> Mar 31 – Apr 01, 2014 – Las Vegas, Nevada Details <http://www.interop.com/lasvegas/conference/cloud-connect.php> * World Hosting Days <http://www.worldhostingdays.com/eng/>Apr 01 – 03, 2014 – Rust, Germany Details <http://www.worldhostingdays.com/eng/> * PyCon <https://us.pycon.org/2014/> Apr 09 – 17, 2014 – Montreal, Canada Details <https://us.pycon.org/2014/> * OpenStack Summit May 2014 <http://www.openstack.org/summit/openstack-summit-atlanta-2014/> May 12 – 16, 2014 – Atlanta, GA Details <http://www.openstack.org/summit/openstack-summit-atlanta-2014/> * Cloud World Forum <http://cloudwf.com/> Jun 17 – 18, 2014 – London, UK Details <http://cloudwf.com/> Most Popular OpenStack Videos of the Week * OpenStack Havana Demo <https://www.youtube.com/watch?v=vm7aHJtQMQE> * Getting Started with OpenStack <https://www.youtube.com/watch?v=YLCeYGpSjb0> * OpenStack Keynote featuring Concur, DigitalFilm Tree, Shutterstock <https://www.youtube.com/watch?v=qQmGfzewWQw> Reports from Previous Events * CloudCamp Hackathon and Ubuntu User Days <http://princessleia.com/journal/?p=9043> Other News * Google Summer of Code 2014 – 2/14/14 deadline for orgs <http://lists.openstack.org/pipermail/openstack-dev/2014-January/025744.html> * OpenStack Users: join the discussion on logging standards <http://www.openstack.org/blog/2014/01/open-mic-spotlight-tatiana-mazur/> * Open Mic Spotlight: Tatiana Mazur <http://www.openstack.org/blog/2014/01/open-mic-spotlight-tatiana-mazur/> * Chairman’s Corner: Great 2013 to even Greater 2014 <http://www.openstack.org/blog/2014/01/chairmans-corner-great-2013-to-even-g…> * Coming soon – Storage Policies in OpenStack Swift <http://swiftstack.com/blog/2014/01/27/openstack-swift-storage-policies/> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-01-28-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-01-28-21.…> Welcome New Reviewers and Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! <http://www.openstack.org/profile/> Shalini khandelwal <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Zoltan Arnold Nagy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Ronelle Landy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Aaron Greengrass <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> salman memon <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Renat Akhmerov <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Tzanetos Balitsaris <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Ren Qiaowei <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Jesse Noller <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Douglas Mendizabal <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> li,chen <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Steven Weston <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Mat Lowery <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Jesse Noller <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Hirofumi Ichihara <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Ed Leafe <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Alexander Tivelkov <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Pierre Padrixe <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Morgan Jones <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Matthew Booth <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> IvanBerezovskiy <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Dan Dyer <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Allison Randal <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Liping Mao <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Assaf Muller <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Heather Whisenhunt <http://activity.openstack.org/data/plugins/zfacts/view.action?viewpropertie…> Latest Activity In Projects Do you want to see at a glance the bugs filed and solved this week? Latest patches submitted for review? Check out the individual project pages on OpenStack Activity Board – Insights <http://activity.openstack.org/data/display/OPNSTK2/>. * Telemetry (Ceilometer) <http://activity.openstack.org/data/display/OPNSTK2/ceilometer> * Block Storage (Cinder) <http://activity.openstack.org/data/display/OPNSTK2/cinder> * Image Service (Glance) <http://activity.openstack.org/data/display/OPNSTK2/glance> * Orchestration API <http://activity.openstack.org/data/display/OPNSTK2/heat> (Heat) <http://activity.openstack.org/data/display/OPNSTK2/heat> * Dashboard (Horizon) <http://activity.openstack.org/data/display/OPNSTK2/horizon> * Bare Metal Provisioning (Ironic) <http://activity.openstack.org/data/display/OPNSTK2/ironic> * Identity (Keystone) <http://activity.openstack.org/data/display/OPNSTK2/keystone> * Manuals <http://activity.openstack.org/data/display/OPNSTK2/openstack-manuals> * Networking (Neutron) <http://activity.openstack.org/data/display/OPNSTK2/neutron> * Compute (Nova) <http://activity.openstack.org/data/display/OPNSTK2/nova> * Hadoop Cluster as a Service (Savanna) <http://stackalytics.com/?release=icehouse&metric=commits&project_type=opens…> * Object Storage (Swift) <http://activity.openstack.org/data/display/OPNSTK2/swift> * Database As A Service (Trove) <http://activity.openstack.org/data/display/OPNSTK2/trove> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./ -- Ask and answer questions on https://ask.openstack.org

1 0

[Swift] release 1.12.0
by John Dickinson 29 Jan '14

29 Jan '14

Today I'm happy to announce that we have released Swift 1.12.0. As always, this is a stable release and you can upgrade to this version of Swift with no customer downtime. You can download the code for this release at https://launchpad.net/swift/icehouse/1.12.0 or bug your package provider for the updated version. I've noticed that OpenStack Swift releases tend to cluster around certain themes. This release is no different. While we've added some nice end-user updates to the project, this release has a ton of good stuff for cluster operators. I'll highlight a few of the major improvements below, but I encourage you to read the entire change log at https://github.com/openstack/swift/blob/master/CHANGELOG. ## Security update **CVE-2014-006** Fixed CVE-2014-0006 to avoid a potential timing attack with temp url. Key validation previously was not using a constant-time string compare, and therefore it may have been possible for an attacker to guess tempurl keys if the object name was known and tempurl had been enabled for that Swift user account. The tempurl key validation now uses a constant-time string compare to close this potential attack vector. ## Major End-User Features **New information added to /info** We added discoverable capabilities via the /info endpoint in a recent release. In this release we have added all of the general cluster constraints to the /info response. This means that a client can discover the cluster limits on names, metadata, and object sizes. We've also added information about the support temp url methods and large object constraints in the cluster. **Last-Modified header values** The Last-Modified header value returned will now be the object's timestamp rounded up to the next second. This allows subsequent requests with If-[un]modified-Since to use the Last-Modified value as expected. ## Major Deployer Features **Generic means for persisting system metadata** Swift now supports system-level metadata on accounts and containers. System metadata provides a means to store internal custom metadata with associated Swift resources in a safe and secure fashion without actually having to plumb custom metadata through the core swift servers. The new gatekeeper middleware prevents this system metadata from leaking into the request or being set by a client. **Middleware changes** As mentioned above, there is a new "gatekeeper" middleware to guard the system metadata. In order to ensure that system metadata doesn't leak into the response, the gatekeeper middleware will be automatically inserted near the beginning of the proxy pipeline if it is not explicitly referenced. Similarly, the catch_errors middleware is also forced to the front of the proxy pipeline if it is not explicitly referenced. Note that for either of these middlewares, if they are already in the proxy pipeline, Swift will not reorder the pipeline. **New container sync configuration option** Container sync has new options to better support syncing containers across multiple clusters without the end-user needing to know he required endpoint. See http://swift.openstack.org/overview_container_sync.html for full information. **Bulk middleware config default changed** The bulk middleware allows the client to send a large body of work to the cluster with just one request. Since this work may take a while to return, Swift can periodically send back whitespace before the actual response data in order to keep the client connection alive. The config parameter to set the minimum frequency of these whitespace characters is set by the yield_frequency value. The default value was lowered from 60 seconds to 10 seconds. This change does not affect deployments, and there is no migration process needed. **Raise RLIMIT_NPROC** In order to support denser storage systems, Swift processes will not attempt to set the RLIMIT_NPROC value to 8192 **Server exit codes** Swift processes will now exist with non-zero exist codes on config errors **Quarantine logs** Swift will now log at warn level when an object is quarantined ## Community growth This release of Swift is the work of twenty-three devs includes eight first-time contributors to the project: * Morgan Fainberg * Zhang Jinnan * Kiyoung Jung * Steve Kowalik * Sushil Kumar * Cristian A Sanchez * Jeremy Stanley * Yuriy Taraday Thank you to everyone who contributes code, promotes the project, and facilitates the community. Your contributions are what make this project successful. --John

1 0

OpenStack Community Weekly Newsletter (Jan 17 – 24)
by Stefano Maffulli 25 Jan '14

25 Jan '14

1 0

[OSSA 2014-003] Live migration can leak root disk into ephemeral storage (CVE-2013-7130)
by Grant Murphy 24 Jan '14

24 Jan '14

OpenStack Security Advisory: 2014-003 CVE: CVE-2013-7130 Date: January 23, 2014 Title: Live migration can leak root disk into ephemeral storage Reporter: Loganathan Parthipan (HP) Products: Nova Affects: All supported versions Description: Loganathan Parthipan from Hewlett Packard reported a vulnerability in the Nova libvirt driver. By spawning a server with the same flavor as another user's migrated virtual machine, an authenticated user can potentially access that user's snapshot content resulting in information leakage. Only setups using KVM live block migration are affected. Icehouse (development branch) fix: https://review.openstack.org/#/c/68658/ Havana (development branch) fix: https://review.openstack.org/#/c/68659/ Grizzly fix: https://review.openstack.org/#/c/68660/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-7130 https://bugs.launchpad.net/nova/+bug/1251590 -- Grant Murphy OpenStack Vulnerability Management Team

1 0

Icehouse-2 development milestone available
by Thierry Carrez 24 Jan '14

24 Jan '14

Hi everyone, The second milestone of the Icehouse development cycle, "icehouse-2" is now available for Keystone, Glance, Nova, Horizon, Neutron, Cinder, Ceilometer, Heat, and Trove. You can see the full list of new features and fixed bugs, as well as tarball downloads, at: https://launchpad.net/keystone/icehouse/icehouse-2 https://launchpad.net/glance/icehouse/icehouse-2 https://launchpad.net/nova/icehouse/icehouse-2 https://launchpad.net/horizon/icehouse/icehouse-2 https://launchpad.net/neutron/icehouse/icehouse-2 https://launchpad.net/cinder/icehouse/icehouse-2 https://launchpad.net/ceilometer/icehouse/icehouse-2 https://launchpad.net/heat/icehouse/icehouse-2 https://launchpad.net/trove/icehouse/icehouse-2 Including the oslo libraries, "only" 50 blueprints were implemented and about 650 bugs were fixed during this milestone, which is slightly less than our usual velocity at that point in the cycle. This is mostly due to the recent issues in gating and the end-of-year holiday season. The next development milestone, icehouse-3, is scheduled for March 6th. You can further track upcoming features and Icehouse release cycle status at: http://status.openstack.org/release/ Regards, -- Thierry Carrez (ttx)

1 0