- OpenStack-announce - lists.openstack.org

[OSSA 2012-011] Compute node filesystem injection/corruption (CVE-2012-3447)
by Thierry Carrez 08 Aug '12

08 Aug '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2012-011 CVE: CVE-2012-3447 Date: August 7, 2012 Title: Compute node filesystem injection/corruption Impact: Critical Reporter: Pádraig Brady (Red Hat) Products: Nova Affects: All versions Description: Pádraig Brady from Red Hat discovered that the fix implemented for CVE-2012-3361 (OSSA-2012-008) was not covering all attack scenarios. By crafting a malicious image with root-readable-only symlinks and requesting a server based on it, an authenticated user could still corrupt arbitrary files (all setups affected) or inject arbitrary files (Essex and later setups with OpenStack API enabled and a libvirt-based hypervisor) on the host filesystem, potentially resulting in full compromise of that compute node. Folsom fix: https://github.com/openstack/nova/commit/ce4b2e27be45a85b310237615c47eb53f3… Essex fix: https://github.com/openstack/nova/commit/d9577ce9f266166a297488445b5b0c93c1… Diablo fix: https://review.openstack.org/#/c/10953/ References: https://bugs.launchpad.net/nova/+bug/1031311 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2012-3447 Notes: This fix will be included in the upcoming Nova 2012.1.2 stable update (due Thursday) and the Folsom-3 development milestone (due next week). - -- Thierry Carrez (ttx) OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJQIXv+AAoJEFB6+JAlsQQjnJUQAI+Vp+GCMXAei/ktStVFrkXC ilgIjBB5mcbrj/TGlnqhkS0MB0+kmo8Ucy4tI0O+gAqYaPNcEp6bbGr5pOby8Gdk DehvQuTi4Rvvypnb7ORM+DjqPBtNGGMWKJzO84ls98Ev0z+6Soi4vmQal78wvwpX 3UbyqZG9P85QlDyyK+x/Af2D0YVCQffQ93/7UJi2OwB0hwHy+RS4WN7rYJGD2vh0 50jQYSgw/rrBSUPNupjEH+mXT/DM93z93qWmxHD6TYYUK9MmrfkfUPx8Ki8Fn5oQ 9znwXsIK5h3uexe2dHbABKaIm3AnMP3wCrKynEEjFV/no00r/Evm2zsdam31O3Bv DV8ng6sdSnvltQK2s8F3blp3tNpsAp12QkC0BDI9FlYAACdaTBnDcVhKh4HoO84T cRakJhfj23472GgmwwkIcPNEcfY1fWngUqN4rF2XUggtXzeEHyyqoiZIm4s4ns5+ DkSCmo5qBNbcos1C0BNeyPQ+wdF5U7wzQfggC6SRoKcPj/Mp8P5LCvgjPKwNtBuq gzAVPSlx0Zehlqqey8zkUUGQ4btxiKP5+iwrKajY6QfqgtkqEsG46GR+tm+ygDNR T8ltuixqMWpLPVUFZClaxV0MytSMdjhIgywkzyqHg9bzP4N3MztsGnIBPdQ0HC3a P85xQ28EFbBC5tIZ4WRe =C2MN -----END PGP SIGNATURE-----

1 0

OpenStack Community Weekly Newsletter (July 27-Aug 3)
by Stefano Maffulli 05 Aug '12

05 Aug '12

Highlights of the week OpenStack Foundation Board -- 2012 Election Candidates <http://www.openstack.org/community/openstack-foundation-board-2012-election…> See the current list of nominees for the OpenStack Foundation 2012 Board Member Elections who have received at least one nomination. A candidate must receive at least 10 nominations to appear on the ballot. Any active member of the OpenStack Foundation can support a nominee or nominate a new candidate http://www.openstack.org/community/openstack-foundation-board-2012-election…. A candidate must receive at least 10 nominations to appear on the ballot and must be a member of the Foundation. *The final day to nominate a candidate is Monday August 6, 2012.* Rostyslav Slipetskyy's Thesis on OpenStack security <http://secstack.org/2012/08/the-rostyslav-slipetskyy-thesis/> This is a pretty awesome bit of work done by a researcher in Denmark. I enjoyed reading it and I highly recommend it as day 1 reading for Infosec professionals and researchers getting into OpenStack. Slides <http://www.slideshare.net/oldbam/security-issues-in-openstack> and you can download the full thesis (PDF) <http://nordsecmob.aalto.fi/en/programme/publications/nordsecmob_thesis_2011…>. API Stability Statement <http://wiki.openstack.org/Governance/Approved/APIStability> It is critical to the success of OpenStack <http://wiki.openstack.org/OpenStack> that operators be willing to upgrade to new OpenStack <http://wiki.openstack.org/OpenStack> releases. All OpenStack <http://wiki.openstack.org/OpenStack> APIs use a versioning scheme that is completely independent from the named releases (Essex, Folsom, etc.). One obstacle to upgrading to a new OpenStack <http://wiki.openstack.org/OpenStack> release is if there are incompatible API changes that could cause user applications to stop working. Operators want great new features and APIs to be the only aspect of the upgrade process visible to their users. Old API versions should continue to work. More on http://wiki.openstack.org/Governance/Approved/APIStability OpenStack PPB defined "Supporting Project" There is a new category of OpenStack projects in addition to Core, Incubated, Library and Gating projects: "Supporting projects". The initial list of projects in this category is available on the wiki, with more details: http://wiki.openstack.org/Governance/Accepted/SupportingProjectDefinition. OpenStack Security Primer <http://secstack.org/2012/08/openstack-security-primer/> Matt Joyce introduction to security and OpenStack. He's maintaining the blog http://secstack.org <http://secstack.org/>, now available also on http://planet.openstack.org <http://planet.openstack.org/>. Tips and tricks * By Sébastien Han <http://sebastien-han.fr/>: Auto assign floating IP <http://sebastien-han.fr/blog/2012/08/03/openstack-auto-assign-floating-ip/> * By Mirantis <http://www.mirantis.com/>: OpenStack Networking Tutorial: Single-host FlatDHCPManager <http://www.mirantis.com/blog/openstack-networking-single-host-flatdhcpmanag…> * By Mark McLoughlin <http://blogs.gnome.org/markmc>: Nova DB Poking <http://blogs.gnome.org/markmc/2012/07/31/nova-db-poking/> * By Alessandro Tagiapietra <http://www.alexnetwork.it/>: Build an HA Openstack cloud <http://www.alexnetwork.it/2012/07/31/tutorials/build-an-ha-openstack-cloud-…> (multiple parts) Upcoming Events * South Bay OpenStack Hackathon <http://www.meetup.com/openstack/events/57643102/> Aug 09, 2012 -- Sunnyvale, CA Details <http://www.meetup.com/openstack/events/57643102/> * 2012 OpenStack APEC Conference <http://openstack.csdn.net/index.html> Aug 10 -- 11, 2012 -- Bejing+Shanghai, China Details <http://openstack.csdn.net/index.html> Openstack User Group Meetup ( Delhi NCR ) <http://www.meetup.com/Indian-OpenStack-User-Group/events/75533162/> Aug 12, 2012 -- Dehli Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/75533162/> * Hobart Meetup -- adjacent to PyCon2012, An OpenStack code dojo! <http://aosug.openstack.org.au/events/72708142/> Aug 17, 2012 -- Hobart, Australia Details <http://aosug.openstack.org.au/events/72708142/> * Australian OpenStack User Group -- Adelaide Meetup with SAGE-AU <http://aosug.openstack.org.au/events/66911242/> Aug 28, 2012 -- Adelaide Details <http://aosug.openstack.org.au/events/66911242/> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * Security update: CVE-2012-3426 : Keystone does not properly implement token expiration <http://secstack.org/2012/08/cve-2012-3426-keystone-does-not-properly-implem…> * OpenStack Project Meeting 2012-07-31: Summary <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> Meeting log <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> * OpenStack PPB Meeting 2012-07-31: Summary <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> and Meeting log <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> o Voted on Agreement on proposed API Stability Statement http://wiki.openstack.org/Governance/Approved/APIStability o Voted on Creating a "supporting" project official category http://wiki.openstack.org/Governance/Accepted/SupportingProjectDefinition Stats from traffic on docs.openstack.org Statistics taken from the traffic on docs.openstack.org, from January 1st 2012 to July 31st. <http://www.openstack.org/blog/wp-content/uploads/2012/08/H1-2012-country-vi…> Country/Territory visits to docs.openstack.org from Jan 1 2012 to July 31 2012 /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (July 20-27)
by Stefano Maffulli 28 Jul '12

28 Jul '12

Highlights of the week Join The OpenStack Foundation <http://www.openstack.org/blog/2012/07/join-the-openstack-foundation/> The OpenStack community has worked hard since the announcement of intention to establish an OpenStack Foundation in October 2011. We've come to the point where Individual Members can join and begin making important contributions like nominating board members: http://openstack.org/join (It's free!) OpenStack Foundation Board -- 2012 Election Candidates <http://www.openstack.org/community/openstack-foundation-board-2012-election…> See the current list of nominees for the OpenStack Foundation 2012 Board Member Elections who have received at least one nomination. A candidate must receive at least 10 nominations to appear on the ballot. Any active member of the OpenStack Foundation can support a nominee at the links below or nominate a new candidate by emailing secretary(a)openstack.org <mailto:secretary@openstack.org> (the acting secretary is Jonathan Bryce). A candidate must receive at least 10 nominations to appear on the ballot. *The final day to nominate a candidate is August 6, 2012.* *Creating a development cycle that is more user friendly*** <http://markmail.org/message/7pm63xkknide7oob> *Following recent discussions about increasing the involvement of users in the development of OpenStack, a new thread started. Your opinion is appreciated.* A review of the 1st London OpenStack Meetup <http://berrange.com/posts/2012/07/26/a-review-of-the-1st-london-openstack-m…> The report by Daniel P. Berrangé about a fabulous night, with views across London via the open air roof terrace, watered with pizza & drinks and warm weather in London. Daniel's talk is available also as podcast <http://cloudevangelist.org/2012/07/27/openstack_podcast/> on Cloud Evangelist <http://cloudevangelist.org/> blog. Weekly Hyper-V meeting on Freenode/#openstack-hyper-v <http://markmail.org/message/wxbmggolzwdlldgs> Anyone interested in bringing back support for Hyper-V in Nova is invited to join the new OpenStack-Hyper-V team. Tips and tricks * By Mark McLoughlin <http://blogs.gnome.org/markmc>: How <http://blogs.gnome.org/markmc/2012/07/27/ancient-history/>find the bzr merge proposal in launchpad which caused a given commit to be merged. * By Sébastien Han <http://sebastien-han.fr/>: Watch your nova log at the same time <http://sebastien-han.fr/blog/2012/07/23/tips-watch-your-nova-log-at-the-sam…> Upcoming Events * 2012 OpenStack APEC Conference <http://openstack.csdn.net/index.html> Aug 10 -- 11, 2012 -- Bejing+Shanghai, China Details <http://openstack.csdn.net/index.html> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * OpenStack Project Meeting 2012-07-24: Summary <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> and Meeting log <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> Welcome new contributors Celebrating the first patches submitted this week by: * Aaron Orosen, Nicira * Nayna Patel, HP /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[OSSA 2012-010] Various Keystone token expiration issues (CVE-2012-3426)
by Thierry Carrez 27 Jul '12

27 Jul '12

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2012-010 CVE: CVE-2012-3426 Date: July 27, 2012 Title: Various Keystone token expiration issues Impact: Medium Reporter: Derek Higgins Products: Keystone Affects: Essex, Folsom Description: Derek Higgins reported various issues affecting Keystone token expiration. A token expiration date can be circumvented by continuously creating new tokens before the old one has expired. Existing tokens also remain valid after a user account is disabled or after an account password changed. An authenticated and authorized user could potentially leverage those vulnerabilities to extend his access beyond the account owner expectations. Folsom fixes: http://github.com/openstack/keystone/commit/375838cfceb88cacc312ff6564e64eb… http://github.com/openstack/keystone/commit/628149b3dc6b58b91fd08e6ca8d91c7… http://github.com/openstack/keystone/commit/a67b24878a6156eab17b9098fa649f0… Essex fixes: http://github.com/openstack/keystone/commit/29e74e73a6e51cffc0371b323545583… http://github.com/openstack/keystone/commit/d9600434da14976463a0bd03abd8e03… http://github.com/openstack/keystone/commit/ea03d05ed5de0c015042876100d37a6… References: https://bugs.launchpad.net/keystone/+bug/998185 https://bugs.launchpad.net/keystone/+bug/997194 https://bugs.launchpad.net/keystone/+bug/996595 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2012-3426 Notes: Those fixes were already included in Keystone 2012.1.1 stable update and the Folsom-1 development milestone. - -- Thierry Carrez (ttx) OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJQErMZAAoJEFB6+JAlsQQjMrkP/juA+StMaNQNNqfPyV4gFJHG mI/ZTFq7lf9HBqqxrKbWKdDdAW+AbGM+EXL6Vhu0xBCIk0Q9+dyj1t6BQd/Y/CMv Je5XWZ3YrufHtNI37I9We8hrNBz4WoVhAyLZNHPHmngRu/Dxz8BNtKC4mSrG5bLL ammjtdnecRLPa3GkqYi6tFQgKSzAiU/edXx0+h9veMaxvxKmDzwIKJ625p6CmouR esCnoMkC23e2IoDnq85WaoqK9V8PyMJJ8auU1P+olA/VdvTIXOPAiMOrclEOuFCw EVENPwXmzh/hM2LZKZSSmRgWxSvADfCWnTWc8VT0CvVbJXkOegwMgsFvzd/oy89Q huEu0HiBdOw7yDet5n1f63Es0NO108jEvlN4LNEF0emEv6fNo6rbKHpIqw5R+Dxp Yiu0j3XOiBhE6eIUvVdXv+mAvaRJsk9KzWQaAyrp2UKO52MU6G11+zwJpJCVCRod yjO2kSm1ksZzSF2ZmoteOeFdqJp11qI1LbfT6vswuacW1zrCPHbAM8RP1DS/5X4d PdgzJBZhE20G1YcY+kMMqIlmIs9hgP6IcaeHKxXcrW3Oq/flI00Rade/HmAamQ51 PsT9cVeE3uZt8plARG1SXyzQp8WF+U//H2af2BGiClX3TdrZU3EIOsKby77Xgwxl Z7A0lu7IqS1+4Fm/6738 =fX6q -----END PGP SIGNATURE-----

1 0

OpenStack Community Weekly Newsletter (July 13-20)
by Stefano Maffulli 21 Jul '12

21 Jul '12

Highlights of the week Join The OpenStack Foundation <http://www.openstack.org/blog/2012/07/join-the-openstack-foundation/> The OpenStack community has worked hard since the announcement of intention to establish an OpenStack Foundation in October 2011. We've come to the point where Individual Members can join and begin making important contributions like nominating board members: http://openstack.org/join (It's free!) TryStack.org Adds New ARM Technology-Powered Zone <http://www.openstack.org/blog/2012/07/trystack-org-adds-new-arm-technology-…> A monumental day in ARM server history! TryStack.org <http://www.trystack.org/>, the hosted cloud sandbox for OpenStack, now has an ARM-based OpenStack zone in addition to the x86 zone. (This is, to our knowledge, the first OpenStack cluster made publicly available on an ARM-based system!) <http://www.openstack.org/blog/wp-content/uploads/2012/07/IMG_B474.jpg> Full room at OpenStackDay during OSCON 2012 Tips and tricks * By Sébastien Han <http://sebastien-han.fr/>: how to bring gigabit to your VMs with the virtio driver <http://sebastien-han.fr/blog/2012/07/19/make-the-network-of-your-vms-fly-wi…> Upcoming Events * 13th International Free Software Forum -- OpenStack Track <http://wiki.openstack.org/FISL13> Jul 25 -- 28, 2012 -- Porto Alegre, Brazil Coordination <http://wiki.openstack.org/FISL13> * The 1st London OpenStack Meetup <http://www.meetup.com/Openstack-London/events/55354582/> Jul 25, 2012 -- London, UK Details <http://www.meetup.com/Openstack-London/events/55354582/> * 2012 OpenStack APEC Conference <http://openstack.csdn.net/index.html> Aug 10 -- 11, 2012 -- Bejing+Shanghai, China Details <http://openstack.csdn.net/index.html> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * Developers join the OpenStack-Dev mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev * Updated page about Cinder http://wiki.openstack.org/Cinder * A patch to Swift starts a discussion about testing environment http://openstack.markmail.org/thread/f7kbw3l6sea27eun * OpenStack Project Meeting was postponed to next week. Welcome new contributors Celebrating the first patches submitted this week by: * Wang Long, qq.com * Lars Gellrich, HP * Isethi Iccha, Rackspace * Tom Hancock, HP * Dmitry Khovyakov, GridDynamics * Tong Li, IBM /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (July 6-13)
by Stefano Maffulli 14 Jul '12

14 Jul '12

Highlights of the week G stands for Grizzly <http://markmail.org/message/nrgea2jdl5ms4hdp> Results of the naming poll for next OpenStack release are in, and the G release will be named "*Grizzly*". The regular poll selected "Gazelle" (35 votes), with "Gilroy" (27 votes) being a close second. But the Grizzly revolt poll showed overwhelming support for the "Grizzly" name (88 votes) rather than going with the results of the regular poll (46 votes). The /Waldon exception/ (accepting elements of the state/country flag in addition to city/county names) will be added to our naming rules for future naming contests :) Some clarifications about Cinder <http://markmail.org/message/bfdqiclqtkv2tqql> With the promotion of Cinder to OpenStack core project, Cinder's PTL John Griffith explained what the project does and what the future release, Grizzly, may look like. OpenStack operators are invited to give their opinion and help developers take the best decision. Lots Of OpenStack At OSCON 2012 <http://www.openstack.org/blog/2012/07/lots-of-openstack-at-oscon-2012/> Only a few days to OSCON: find the full list of talks related to OpenStack and don't forget to RSVP fort the OpenStack Party <http://www.oscon.com/oscon2012/public/schedule/detail/26369> at Spirit of 77 (500 NE MLK Blvd.) on July 18th. OpenStack Summit Fall 2012: Tickets & Sponsorships now available <http://www.openstack.org/blog/2012/07/openstack-summit-fall-2012-tickets-sp…> The OpenStack Summit is coming to San Diego October 15th-18th at the Manchester Grand Hyatt . Check out the new Summit website <http://www.openstack.org/summit/san-diego-2012/> to learn more, buy tickets, or to become a sponsor. The early bird price for tickets is $400 until August 31st, then it goes up to $600, so please buy your ticket <http://www.openstack.org/summit/san-diego-2012/> now! Everybody is invited to participate, there are no caps like in past events (the only limit is the physical capacity of the location). OpenStack Overview -- Operational Details of a Large Python Project <https://ep2012.europython.eu/conference/talks/openstack-overview-operationa…> Pádraig Brady <https://ep2012.europython.eu/conference/p/padraig-brady> spoke at *EuroPython 2012 about OpenStack. His talk was recorded (audio starts at minute 11:40).* Tips and tricks * By Michael Still: how to use glance replication <http://www.stillhq.com/openstack/000007.html> * By Yong Sheng Gong: Openstack's Floating IPs <https://www.ibm.com/developerworks/mydeveloperworks/blogs/e93514d3-c4f0-4aa…> Upcoming Events * OpenStack India Users July meetup <http://www.meetup.com/Indian-OpenStack-User-Group/events/69786832/> Jul 14, 2012 -- Bangalore, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/69786832/> * The 1st London OpenStack Meetup <http://www.meetup.com/Openstack-London/events/55354582/> Jul 25, 2012 -- London, UK Details <http://www.meetup.com/Openstack-London/events/55354582/> * OSCON <http://www.openstack.org/assets/oscon-pavilion-prospectus-2012.pdf> Jul 16 -- 20, 2012 -- Portland, OR * 13th International Free Software Forum -- OpenStack Track <http://wiki.openstack.org/FISL13> Jul 25 -- 28, 2012 -- Porto Alegre, Brazil Coordination <http://wiki.openstack.org/FISL13> * 2012 OpenStack APEC Conference <http://openstack.csdn.net/index.html> Aug 10 -- 11, 2012 -- Bejing+Shanghai, China Details <http://openstack.csdn.net/index.html> * OpenStack Summit <http://openstack.org/> Oct 15 -- 18, 2012 -- San Diego, CA Other news * New mailing lists: http://wiki.openstack.org/MailingLists Subscribe to the relevant ones for you. * OpenStack Project Meeting logs: 2012-07-10: Summary <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> and full meeting log <http://eavesdrop.openstack.org/meetings/openstack-meeting/2012/openstack-me…> Welcome new contributors Celebrating the first patches submitted this week by: * Tim Daly Jr, Yahoo /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Conference - Call for Speakers
by Stephen Spector 04 Aug '11

04 Aug '11

On behalf of the OpenStack Conference Program Committee, I am pleased to initiate the Call for Speakers for the Fall 2011 OpenStack Conference in Boston, MA from October 5-7. This gathering of OpenStack developers, users, eco-system partners, open source enthusiasts, and cloud computing technologists presents speakers with the opportunity to actively participate in the shaping of the future of the OpenStack project. I look forward to joining with the community in Boston for an amazing 3 days of OpenStack goodness. PROCESS The Program Committee has listed a series of suggested topics for the overall agenda of the conference. Please review these topics and submit your talk under the various topic(s). Of course, if you have an idea for a topic not listed, please send your information as the Program Committee is always open to new ideas. To submit your request to be a speaker please send an email to stephen.spector(a)openstack.org with the Subject Line: OPENSTACK CONFERENCE SPEAKER SUBMISSION. In the email be sure to include your contact information as well as the topic you are interested in speaking on. Should you submit a new topic, please provide details on that topic. TOPICS The topics suggested by the Program Committee fit under two umbrella categories: technical or business. Each session is currently planned for 30 minutes. Technical Project Overview NOVA Project Overview - SWIFT Project Overview GLANCE Community Developer Tools OpenStack in the Data Center OpenStack Deployments DevOps Project Introductions Information on the various eco-system projects not yet core in OpenStack Business Economics of OpenStack OpenStack Case Study Project Overview NOVA Project Overview - SWIFT Project Overview GLANCE Building an OpenStack Practice (Solution Providers) OpenStack Case Study Public Cloud Hosting Best Practices Private Clouds Hosting Best Practices The Program Committee anxiously awaits your speaker submission as we assemble the final OpenStack Conference Agenda. The deadline to submit your request is September 6, 2011 so that we can release the final agenda on September 14, 2011. All speakers selected will receive a complementary pass to the event via a special registration code. If you have any further questions, please contact me. - - - Stephen Spector, Rackspace OpenStack Community Manager stephen.spector(a)openstack.org OpenStack Blog <http://openstack.org/blog> | @opnstk_ <http://twitter.com/opnstk_com_mgr> com <http://twitter.com/opnstk_com_mgr> _mgr <http://twitter.com/opnstk_com_mgr> Office +1 (512) 539-1162 | Mobile +1 (210) 415-0930

1 0

OpenStack Celebrates a Successful First Year
by Stephen Spector 21 Jul '11

21 Jul '11

>From Jim Curry on the OpenStack.org Blog. A year into the life of OpenStack, it seems like its success should have been more obvious. The market lacked an open platform designed specifically for building and managing a cloud. We knew that fact at Rackspace because we had been forced to build our own solution. For five years we looked for off the shelf technologies that could power our public cloud but never found an acceptable solution. So we kept building our own proprietary technology. But that wasn¹t the right answer. As a company, we had always relied on standardized technologies to power our offers. Technologies that our customers were also running in their own datacenters. But in cloud, such standards did not exist and were nowhere in sight. Certainly, the ones that were emerging were not completely open. And by building our own solution one not available to anyone else we weren¹t actually helping to solve the problem. So we decided to open source our technology, and make it available for use by our competitors and customers alike. What we didn¹t know was whether anyone else saw the world as we did. A year later, its obvious we weren¹t alone. Consider these stats: * We grew from 2 organizations to over 89 * We grew from a couple dozen developers to nearly 250 unique contributors in the Cactus release and over 1,200 in the development community * Over 35,000 downloads from Launchpad and thousands more from our ecosystem * The scope of the project has truly evolved into a cloud operating system, tackling a diverse range of cloud infrastructure needs such as networking, load balancers and database. * Our initial conference and design summit had over 100 people, while the last in April hosted over 450 * We have delivered 3 major releases and are halfway to the fourth * 17 countries have active participants and user groups now exist on 5 continents One of the key reasons OpenStack has been successful is that it has such an audacious mission to build an operating system to power both public and private clouds. We believe that while public and private clouds do have different requirements, much of the core need is shared. Things such as basic management, self-service and scalability. OpenStack started with the large scale cloud expertise of Rackspace and NASA and has since added a wealth of knowledge from a who¹s who list contributors with broad-ranging enterprise and service provider expertise. All of these participants recognize that in order for the promise of cloud to be realized for workloads to seamlessly migrate from one environment to another a common platform is required inside the enterprise DC as well as the public cloud. The technology should also be purpose-built for cloud, rather than a bolt-on to existing server virtualization technologies. And that solution should be open and controlled by a vast community rather than a single vendor. The shared community desire for an open cloud operating system powering both public and private clouds has resulted in a flurry of activity around OpenStack. Consider the following: * Major enterprise software companies such as Citrix and Canonical, as well as startups such as StackOps, have announced commerical distributions of OpenStack. This is a very key development for enterprise adoption. * Reference hardware architectures from the likes of Dell, Cisco, Intel and AMD for OpenStack. * The contributions from service providers and announcement of public clouds powered by OpenStack including Rackspace, Internap, Dreamhost, Dell, Korea Telecom, Memset and Nephoscale among others. * Support for OpenStack deployments by the likes of Cloudscaling, Cybera and Rackspace Cloud Builders. * Deployment support from Puppet Labs and Opscode. * A host of tools and software integration from scores of companies including Scalr, Rightscale, FathomDB, enStratus, and many others. * Venture funding and M&A activity have picked up in the community, including the recent funding of Piston and the acquisition of Cloud.com by Citrix (both OpenStack community members). Most importantly, enterprises are really beginning to deploy OpenStack. It wasn¹t until the Cactus release in April that OpenStack truly became ready for production deployments. But during the 3 months since that release, the number of companies deploying the technologies is truly remarkable. Expect to see many of these stories coming to light in the next few months. Thank you to everyone who has made OpenStack happen over the last year! It has been an incredibly rewarding experience to be part of such an engaged and diverse community committed to the goal of an open cloud operating system. Happy first birthday to all! - - - Stephen Spector, Rackspace OpenStack Community Manager stephen.spector(a)openstack.org OpenStack Blog <http://openstack.org/blog> | @opnstk_ <http://twitter.com/opnstk_com_mgr> com <http://twitter.com/opnstk_com_mgr> _mgr <http://twitter.com/opnstk_com_mgr> Office +1 (512) 539-1162 | Mobile +1 (210) 415-0930

1 0

OpenStack Webinar Rescheduled for Thursday April 21
by Stephen Spector 20 Apr '11

20 Apr '11

OpenStack Enthusiasts: Due to technical difficulties we had to cancel the scheduled webinar yesterday on the newly released Cactus solution from the OpenStack community. We have fixed the issue and are hosting the webinar tomorrow at 4pm EST. Please join us to learn more about this innovate solution from the OpenStack community. The OpenStack Cactus webinar will cover new features implemented in the Cactus release of OpenStack. Presenting these features will be the Project Technical Leads: Vish Ishaya for OpenStack Compute (Nova), John Dickinson for OpenStack Object Storage (Swift), and Jay Pipes for OpenStack Image Service (Glance). Each Project Technical Lead will have 15 minutes to provide a quick overview of their respective technologies, what¹s new in the Cactus release and expected contributions for the next Diablo release of OpenStack. The last 15 minutes will be open for questions and further discussion. Register here: https://cc.readytalk.com/r/kdi85356wy - - - Stephen Spector, Rackspace OpenStack Community Manager stephen.spector(a)openstack.org OpenStack Blog <http://openstack.org/blog> | @opnstk_ <http://twitter.com/opnstk_com_mgr> com <http://twitter.com/opnstk_com_mgr> _mgr <http://twitter.com/opnstk_com_mgr> Office +1 (512) 539-1162 | Mobile +1 (210) 415-0930

1 0

OpenStack Announces the Release of Cactus
by Stephen Spector 16 Apr '11

16 Apr '11

OpenStack Enthusiast: I am pleased to announce the third release from the OpenStack community, Cactus. Much of the development and documentation efforts were spent improving existing features, extending the API and adding support for popular enterprise technologies to enable enterprises and service providers to deploy OpenStack clouds with greater scale and performance. In just 10 weeks since the Bexar¹ release, more than 4,700 code commits and 40 new features were added to the Cactus release from developers at organizations including Canonical, Citrix, FathomDB, Grid Dynamics, NTT Group and Rackspace. ³OpenStack provides a solid software foundation for computing at scale and we are very excited about the advancements we are working on with the community to deliver next generation cloud networking,² said Lew Tucker, Cisco CTO for Cloud Computing. ³As a strong supporter of OpenStack, we believe that cloud consumers should have choice,² said Ewan Mellor, Director, OpenStack Engineering, Datacenter and Cloud Division, Citrix and elected member of the OpenStack Project Policy Board. ³We added support for VMware vSphere to allow enterprises and services providers deploying OpenStack the flexibility to integrate with legacy technologies and take control of their cloud strategy.² More information on Cactus: * OpenStack Blog - http://www.openstack.org/blog/2011/04/openstack-announces-cactus-release/ * OpenStack Press Release - http://eon.businesswire.com/news/eon/20110415005748/en/OpenStack/cloud-compu ting/open-cloud * OpenStack Webinar Tuesday April 19th at 3:00 pm CST (http://connect33143669.adobeconnect.com/cactus/) > * Webinar will be taped and made available for viewing from OpenStack.org > website To obtain Cactus: * Nova 2011.2: https://launchpad.net/nova/cactus/2011.2 * Glance 2011.2:https://launchpad.net/glance/cactus/2011.2 * Swift 1.3.0: https://launchpad.net/swift/1.3/1.3.0 * Release Notes: http://wiki.openstack.org/ReleaseNotes/Cactus Thank you, - - - Stephen Spector, Rackspace OpenStack Community Manager stephen.spector(a)openstack.org OpenStack Blog <http://openstack.org/blog> | @opnstk_ <http://twitter.com/opnstk_com_mgr> com <http://twitter.com/opnstk_com_mgr> _mgr <http://twitter.com/opnstk_com_mgr> Office +1 (512) 539-1162 | Mobile +1 (210) 415-0930

1 0