- OpenStack-announce - lists.openstack.org

[OSSA 2013-020] Denial of Service in Nova network source security groups (CVE-2013-4185)
by Jeremy Stanley 06 Aug '13

06 Aug '13

OpenStack Security Advisory: 2013-020 CVE: CVE-2013-4185 Date: August 6, 2013 Title: Denial of Service in Nova network source security groups Reporter: Vishvananda Ishaya (Nebula) Products: Nova Affects: All versions Description: Vishvananda Ishaya from Nebula reported a denial of service vulnerability in Nova's handling of network source security group policy updates. By performing a large number of server creation operations, the proportion of updates increases quadratically and may overwhelm nova-network such that it is no longer able to service other requests in a timely fashion. Only setups relying on nova-network are affected. Havana (development branch) fix: https://review.openstack.org/39541 Grizzly fix: https://review.openstack.org/39543 Folsom fix: https://review.openstack.org/39544 Notes: This fix will be included in the havana-3 development milestone and in a future 2013.1.3 release. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4185 https://bugs.launchpad.net/nova/+bug/1184041 -- Jeremy Stanley OpenStack Vulnerability Management Team

1 0

[OSSA 2013-019] Resource limit circumvention in Nova private flavors (CVE-2013-2256)
by Jeremy Stanley 06 Aug '13

06 Aug '13

OpenStack Security Advisory: 2013-019 CVE: CVE-2013-2256 Date: August 6, 2013 Title: Resource limit circumvention in Nova private flavors Reporter: hzrandd (NetEase) Products: Nova Affects: All versions Description: hzrandd from NetEase reported a resource limit circumvention vulnerability in Nova's handling of private flavors. Any tenant is able to show and boot any other tenant's private flavors by guessing a flavor ID. This not only exposes the flavor's name, memory and disk size, swap allocation, VCPU count and similar flavor properties, but potentially allows circumvention of any resource limits enforced through the os-flavor-access:is_public property. Havana (development branch) fix: https://review.openstack.org/34963 Grizzly fix: https://review.openstack.org/37992 Folsom fix: https://review.openstack.org/38318 Notes: This fix is included in the havana-2 development milestone and will appear in a future 2013.1.3 release. References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-2256 https://bugs.launchpad.net/nova/+bug/1194093 -- Jeremy Stanley OpenStack Vulnerability Management Team

1 0

python-novaclient 2.14.0 released
by Russell Bryant 06 Aug '13

06 Aug '13

Greetings, I just pushed out a new release of python-novaclient - 2.14.0. This release contains a number of features and bug fixes from the last 4 months. Here is a list of changes in this release: Feature commits include: 0d45408 Support programmatic use of disk config extension 8b5dcee Add user quota client API support 4025b7e Add name argument to aggregate commands de250bf Add name argument to hypervisor commands cc2c0a8 Enable force_delete and restore instance via novaclient. d095b8a CLI for disable service reason 2770e05 Adds zsh completion ea47123 Return Customer's Quota Usage through Admin API 267dbd2 Support force update quota ee411a6 Cells Support be299d8 Adds support for ExtendedFloatingIps APi extension 7f03b09 Migrate each instances of a host to another. 0d678ed Evacuate each instance from one host to another 87bd54f The 'nova keypair-show key_name' command added. 37da28c Provide nova CLI man page. 789d156 Allow deleting multiple images from shell d43b923 Delete a quota through admin api. 50fe79b Add 'flavor-list --all' admin switch 328805f Add coverage-reset command to reset Nova coverage data. Everything else: ec58616 Sync with global requirements 852e2e5 Check whether the security group id is integer 7fdb52a Fixing host-action on V2 ddda3f3 Fix net-id metavar for interface-attach 5fe9408 make findall in novaclient/base.py more efficient 8311862 Fix the help text process and the generated wrong help 0d061f0 Merge v1_1's base module into main base module 3f0312e Remove python 2.4 and python 2.5 support. 1b5ed91 recognize 429 as an rate limiting status f702c25 Fix backwards-incompatible API change (method signature) af7ca70 Fix and enable gating on H402 c360c3e Add AgregatesManager.get() f50ff36 Skip setting volume_size if not given 70e6cd9 Fix interface-list got none mac address. b5c9101 Remove uncessary code related to nova start/stop 912288c make v2_auth and plugin_auth explictly return their results a5558f8 Sync install_venv_common from oslo 1b3cd6f Clean up and make HACKING.rst point to openstack-dev/hacking 02f906b Allow tenant ID for authentication c7e9b1b Bring stdout/stderr capturing in line w/ nova 0134008 Fixup trivial License Header mismatch. b526c9b Remove Diablo compatibility options 07fd520 python3: Fix print statements a25d4fe python3: Compatibility for iteritems differences 8c4e145 python3: Fix unicode compatibility python2/python3 909a53b Discard possibly expired token before re-authenticating 85a4f6c Update help for --nic opt and make net-id or port-id required 3457394 Remove explicit distribute depend. cdee7e1 Set default value of flavorid to "auto" 96706d5 Set/Delete metadata on all instances of a host. e476179 Use Python 3.x compatible except: construct fa0d6e8 Exit w/ valid code when no servers are deleted. 8820623 python3: Introduce py33 to tox.ini 67c8055 Start using Hacking and PyFlakes 66a9896 Add update method of security group name and description def5df2 Fix shell tests for older prettytable versions. a8ed2f2 Improve error messages for invalid --nic / --file. ff85bd4 100% test coverage for security groups and rules f2559c4 Add MethodNotAllowed and Conflict exception classes c34c371 Move tests into the novaclient package. 51f0596 Add CONTRIBUTING file. 3bbdcda Rename requires files to standard names. 1a0b7b0 Code cleanup in advance of flake8. 9d4db6f Migrate to flake8. c305a45 Revert "Support force update quota" e8e7a0e Only add logging handlers if there currently aren't any d274077 Convert to more modern openstack-common.conf format. ecbf770 Cleanup unused local variables bc0ad1c Reuse oslo for is_uuid_like() implementation 20a3595 Synchronize code from oslo f08ac04 Migrate to pbr. b1802a5 Cleanup nova subcommands for security groups and rules c9fc9b5 Make ManagerWithFind abstract and fix its descendants 3c97f76 Cleanup some flavor commands 075e9ca Fix the default parameter in print_list e745b46 Fix for --bridge-interface being ignore by nova network-create a3a7ebf Add setuptools_git-*.egg to .gitignore eae3d72 Expose retry_after attribute of OverLimit exception e009bec Adds extended status fields to nova list 201b74b Clean up exceptions.from_response c15c8f8 Synchronize code from oslo e5d2e2c Fix nova instance-action-list output field and order 3396894 Make list flavor show extra specs optional. 27e904a Use HTTP keep-alive feature in HTTPClient class dccdd02 Cleanup unused import c230812 Make --vlan option work in network-create in VLAN mode e8b665e Support force update quota 2a495c0 make sure .get() also updates _info 1216a32 Fixing shell command 'service-disable' description 69f9971 Correct a unit test failure that crept into trunk 8ce2330 Fix problem with nova --version ea94b09 Make "multi_host" True when it is set to 'T' in network_create. 20ede68 Fix IBM copyright strings 90b3a1c Allow for bypass_url when using proxy_token Thanks, -- Russell Bryant

1 0

OpenStack Community Weekly Newsletter (July 26 – Aug 2)
by Stefano Maffulli 03 Aug '13

03 Aug '13

Hong Kong Summit – Registration, Call for Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ???????? <http://openstacksummitnovember2013.eventbrite.com/> Benchmarking Performance of OpenStack Swift Configurations <http://www.mirantis.com/blog/openstack-swift-configurations-performance-ben…> The latest OpenStack Object Storage Swift release 1.9.0 features full global clusters support <https://github.com/openstack/swift/blob/master/CHANGELOG>, which allows to /distribute one cluster over multiple, geographically dispersed sites, connected through a high-latency network/. Mirantis published a brief introduction to how to use benchmarks to take full advantage of the new features. Hardware Extension for Ceilometer <http://www.cloudcomp.ch/2013/07/hardware-extension-for-ceilometer/> Ceilometer <https://launchpad.net/ceilometer> is a monitoring tool for OpenStack <http://www.openstack.org/> cloud environments. In the next OpenStack <http://www.openstack.org/> release called Havana it will take part as a core component. However, Ceilometer <https://launchpad.net/ceilometer> is also available for the OpenStack <http://www.openstack.org/> releases Folsom and Grizzly. Currently Ceilometer <https://launchpad.net/ceilometer> offers only data of the OpenStack <http://www.openstack.org/> core components and the virtual machines of the cloud. For this reason the ICCLab <http://www.cloudcomp.ch/> decided to extend Ceilometer <https://launchpad.net/ceilometer> in a way that it is possible to collect data from hardware devices as well. An Introduction to OpenStack Orchestration <http://www.zerobanana.com/archive/2013/07/30#openstack-orchestration-introd…> The forthcoming Havana (2013.2) release of OpenStack <http://www.openstack.org/> will mark the debut of orchestration as part of the official release. It arrives in the form of the Heat <https://wiki.openstack.org/Heat> project, which kicked off in early 2012 and graduated from incubation into OpenStack-proper after the Havana Summit in March this year. Tips ‘n Tricks * By Christian Berendt <http://www.cberendt.de/>: Running Horizon with Gunicorn <http://www.cberendt.de/2013/08/running-horizon-with-gunicorn/?utm_source=rs…> * By eNovance <http://www.enovance.com/>: Role delegation in keystone: Trusts <http://www.enovance.com/fr/blog/5858/role-delegation-in-keystone-trusts> * By Cloudify Engineering <http://cloudifysource.tumblr.com/>: How to Install Heat and DevStack on EC2 <http://cloudifysource.tumblr.com/post/56965159501> * By Oren Katz <http://orenscloudplatformthoughts.tumblr.com/>: Monitoring a distributed cloud <http://orenscloudplatformthoughts.tumblr.com/post/56962987606> * By Terri Yu <http://terriyu.info/blog/>: Becoming a new contributor to open source through Outreach Program for Women and OpenStack <http://terriyu.info/blog/posts/2013/07/becoming-foss-contributor/> * By Terri Yu <http://terriyu.info/blog/>: How to install Devstack and Ceilometer on a Vagrant VM <http://terriyu.info/blog/posts/2013/07/installing-devstack-ceilometer/> * By John Bresnahan <https://tropicaldevel.wordpress.com/>: RDO on Fedora 19 <https://tropicaldevel.wordpress.com/2013/07/29/rdo-on-fedora-19/> * By Alessandro Pilotti <http://www.cloudbase.it/>: Multi-node OpenStack RDO on RHEL and Hyper-V – Part 1 <http://www.cloudbase.it/rdo-multi-node/> Upcoming Events * Bangalore Meetup <http://www.meetup.com/Indian-OpenStack-User-Group/events/132218642/> Aug 24, 2013 – Bangalore, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/132218642/> * 2nd OpenStack User Group Nordics meetup <http://www.meetup.com/OpenStack-User-Group-Nordics/>Sep 11, 2013 – Kista, Stockholm Details <http://www.meetup.com/OpenStack-User-Group-Nordics/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 – Oct 01, 2013 – Bend, OR Details <http://openstack.onales.com/> * INTEROP <http://www.interop.in/> Nov 20 – 22, 2013 – Mumbai, India Details <http://www.interop.in/> Reports from Previous Events * OSCON 2013 – Recap <http://rafstack.tumblr.com/post/56984490142> Other News * Using legacy auth v1 with Keystone <http://www.enovance.com/fr/blog/5882/legacy-auth-v1-keystone> * Open Mic Spotlight: Melanie Witt <http://www.openstack.org/blog/2013/07/open-mic-spotlight-melanie-witt/> * Open Mic Spotlight: Victoria Martínez de la Cruz <http://www.openstack.org/blog/2013/07/open-mic-spotlight-victoria-martinez-…> * Open Mic Spotlight: Dirk Müller <http://www.openstack.org/blog/2013/07/open-mic-spotlight-dirk-muller/> * OpenStack Ceilometer Havana-2 milestone released <http://julien.danjou.info/blog/2013/openstack-ceilometer-havana-2-milestone…> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-30-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-30-21.…> Security Advisories * Missing SSL certificate check in Python glance client (CVE-2013-4111) <http://lists.openstack.org/pipermail/openstack-announce/2013-July/000123.ht…> Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * live migration fails when a cinder volume is attached to a running instance – glusterFS <https://ask.openstack.org/en/question/3702/live-migration-fails-when-a-cind…> * whats the difference between Policies stored in policy.json and policies that can be created using openstack/identity/v3/policies <https://ask.openstack.org/en/question/3073/whats-the-difference-between-pol…> * Is sluggish performance caused by scheduler startup errors? <https://ask.openstack.org/en/question/1238/is-sluggish-performance-caused-b…> * Terms of support for x-glance-api-copy-from header in Glance API <https://ask.openstack.org/en/question/2974/terms-of-support-for-x-glance-ap…> * console url on a different domain <https://ask.openstack.org/en/question/3015/console-url-on-a-different-domai…> * heat Bad port format: port uuid is not in proper format <https://ask.openstack.org/question/3697/heat-bad-port-format-port-uuid-is-n…> * Which deployment tool is good for openstack multinode HA deployment with Xenserver 6.2 and Ceph? <https://ask.openstack.org/question/3635/which-deployment-tool-is-good-for-o…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! * Yuiko Takada, NEC * Rich Bowen, Red Hat * Alejandro Cabrera, Rackspace /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[OSSA 2013-018] Missing SSL certificate check in Python glance client (CVE-2013-4111)
by Thierry Carrez 30 Jul '13

30 Jul '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2013-018 CVE: CVE-2013-4111 Date: July 30, 2013 Title: Missing SSL certificate check in Python glance client Reporter: Thomas Leaman (HP) Products: python-glanceclient Affects: All versions Description: Thomas Leaman from HP reported that the Python Glance client was failing to properly check certificates during the establishment of HTTPS connections. A remote attacker with access over segments of the network between client and server could potentially set up a man-in the-middle attack and access the contents of the Glance client request (or response). python-glanceclient fix (will be included in a future release): https://review.openstack.org/#/c/33464/ References: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4111 https://bugs.launchpad.net/python-glanceclient/+bug/1192229 Regards, - -- Thierry Carrez OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJR98rhAAoJEFB6+JAlsQQjm30P/3zp1YGzDb30pSOcfKz683VR KGYEoRUx3wPLMCC5Vzl4y63xwrl7nrarKNj6VeyU/JUzBVhlIa/MHgIkrBzNDPkj 9yewE6ITihnbRfYIp/u+QnXkX0IgNsfeLPL5DW6qgV4aKRVZQdz0TcTjbQrhDQiV iEVEEq1lZVMwP5Oah38YVxWg5EmL+9vmMqfkcXpWsMa1I2yWcw0YN5m4QqHw5BcD GGeagHDZIQ+nxzpWd67E/OV946uHrhshCRZq+o3lZoGSv1C33bpkcDoruskDYvUm gKtwD63/ifHmXnti8TVNaX9D80C2NdSPzAUFNa/Akht5b/VIzuhqvUDECernDckx UBOYjXsTFVfFkqFYLE+Xderm6iTAX4mC8yCdIEONLRVdZGNMWk4WVPjJ4vhpUUNA uTaFq+csTbwH/DttbxlniiEbJAhoTPAHDKmwzwStTBVIc6mbxeF72vx9GBV6Hx9x 7qA+Hn5otlSWt8WbqU6K14ypFQRwjtswfY38ZZ9YkAQFFnI/dEUWp5P/Ld8JaiiQ RQU6h/m3crdaeoATK020TK2QZBjUAVgLARFNAL2UT3IwfmZixJAsuWn5QfGPHojI PYjdutW1VlBhL8ak8oN/Q2pzkho/ufR9czSMGN35X3U/7db87OrG/0gz8Rp5FZVH diSr4/bWdzDrbfkY/sCI =v33d -----END PGP SIGNATURE-----

1 0

OpenStack Community Weekly Newsletter (July 19 – 26)
by Stefano Maffulli 27 Jul '13

27 Jul '13

Hong Kong Summit – Registration, Call for Speakers & Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ???????? <http://openstacksummitnovember2013.eventbrite.com/> Need support to travel to Hong Kong? The All New OpenStack Travel Support Program <http://www.openstack.org/blog/2013/07/the-all-new-openstack-travel-support-…> What is OpenStack Core? <http://robhirschfeld.com/2013/07/22/kicking-off-core/> OpenStack Foundation board member Rob Hirschfeld <http://robhirschfeld.com/> posted a series of short essays to spark a discussion around defining OpenStack Core. His latest post Twelve straw man positions to frame OpenStack “what is core” discussion <http://robhirschfeld.com/2013/07/24/what-is-core-strawman/> moves to the ‘What’ is core from the /how / <http://robhirschfeld.com/2013/07/23/introducing-the-openstack-spider-graph-…>and/why/ <http://robhirschfeld.com/2013/07/22/making-openstack-meaningful/>. The twelve positions have been crafted over the course of several weeks and are constantly evolving. Next steps are to expand discussions to the OpenStack Community for input and review at the next Board Meeting on August 6th <https://wiki.openstack.org/wiki/Governance/Foundation#Proposed_2013_Board_M…>. Ultimately, we need to close this issue at the next Summit <http://www.openstack.org/summit/openstack-summit-hong-kong-2013/>. To the first OpenStack Documentation BootCamp <http://www.openstack.org/blog/2013/07/to-the-first-openstack-documentation-…> The OpenStack Docs Bootcamp offers a deep dive into the technical tools, workflows, and processes we use to create docs.openstack.org <http://docs.openstack.org/> and api.openstack.org <http://api.openstack.org/>. Our goal is to give enough information that will create sustaining new core members of OpenStack Documentation. You can register to attend through this form <https://docs.google.com/forms/d/1JwBinyXO1dQq_DbtRTrWeK1c7E8iwnGFZ1kgSrL4v7…>. More details on the OpenStack wiki <https://wiki.openstack.org/wiki/Docs_Bootcamp_2013>. OpenStack Hits a Triple with OpenStack on OpenStack <https://blog.hpcloud.com/openstack-hits-triple-openstack-openstack> On the 16th July the OpenStack Technical Committee voted <https://lists.launchpad.net/openstack/msg25222.html> to make OpenStack Deployment <https://wiki.openstack.org/wiki/TripleO> an official OpenStack Program <https://wiki.openstack.org/wiki/Programs>. Our mission is to “Develop and maintain tooling and infrastructure able to deploy OpenStack in production, using OpenStack itself wherever possible.” For the latest code and documentation visit our incubator repository at https://github.com/openstack/tripleo-incubator. OpenStack Deployment (TripleO) was started by HP as part of our active contribution to OpenStack, in order to fill in core gaps in delivering OpenStack to users. Openstack General List Migration <http://markmail.org/message/66izocadk4f5jp2q> Update your filters: starting from now the OpenStack General list openstack(a)lists.launchpad.net <mailto:openstack@lists.launchpad.net> has become openstack(a)lists.openstack.org <mailto:openstack@lists.openstack.org>. We have almost completed the move of all OpenStack mailing lists to our mailman installation on http://lists.openstack.org <http://lists.openstack.org/>. There are some known issues still to be removed, though. Please bear with us while we fix them. Thanks to Paul Hummer and the whole Launchpad team at Canonical for making this migration happen. Tips ‘n Tricks * By Adam Young <http://adam.younglogic.com/>: Troubleshooting PKI token issues in auth_token middleware. <http://adam.younglogic.com/2013/07/troubleshooting-pki-middleware/> * By Fabien Boucher <http://blog.fsquat.net/>: Swift ACL usage examples <http://blog.fsquat.net/?p=40> * By eNovance <http://www.enovance.com/>: How to use temporary urls with Swift <http://www.enovance.com/fr/blog/5828/how-to-use-temporary-urls-with-swift> * By Dan Smith <http://www.danplanet.com/blog>: A brief overview of Nova’s new object model (Part 3) <http://www.danplanet.com/blog/2013/07/20/a-brief-overview-of-novas-new-obje…> Upcoming Events * PuppetConf <http://puppetconf2013.eventbrite.com/?discount=OpenStack>, August 22, San Francisco, CA, Details <http://puppetconf2013.eventbrite.com/?discount=OpenStack> (20% discount to OpenStack community) * 2nd OpenStack User Group Nordics meetup <http://www.meetup.com/OpenStack-User-Group-Nordics/>Sep 11, 2013 – Kista, Stockholm Details <http://www.meetup.com/OpenStack-User-Group-Nordics/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 – Oct 01, 2013 – Bend, OR Details <http://openstack.onales.com/> Reports from Previous Events * OpenStack test event at FLOCK — Fedora Contributor’s conference (AUG 9-12) <http://kashyapc.wordpress.com/2013/07/26/openstack-test-event-at-flock-fedo…> Other News * Savanna 0.2 release details and screencast <http://markmail.org/message/7tn4kgtobulkhfgg> * Open Mic Spotlight: Brian Elliott <http://www.openstack.org/blog/2013/07/open-mic-spotlight-brian-elliott/> * Open Mic Spotlight: Chuck Thier <http://www.openstack.org/blog/2013/07/open-mic-spotlight-chuck-thier/> * Open Mic Spotlight: Devananda van der Veen <http://www.openstack.org/blog/2013/07/open-mic-spotlight-devananda-van-der-…> * Open Mic Spotlight: Pádraig Brady <http://www.openstack.org/blog/2013/07/open-mic-spotlight-padraig-brady/> * Open Mic Spotlight: Edgar Magaña Perdomo <http://www.openstack.org/blog/2013/07/open-mic-spotlight-edgar-magana-perdo…> * OpenStack at large in open source: Voices from OSCON 2013 <http://www.mirantis.com/blog/openstack-opensource-voices-oscon-2013/> * Crowbar lays it all out: RAID & BIOS configs officially open sourced <http://robhirschfeld.com/2013/07/23/raid-bios-open/> * OpenStack Project Technical Lead Interview Series #6: Anne Gentle, OpenStack Community Documentation Coordinator <http://www.mirantis.com/blog/openstack-project-technical-lead-interview-ser…> * OpenStack Project Meeting: didn’t happen this week Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * When creating a volume from an image, openstack always uses root disk space? <https://ask.openstack.org/question/2331/when-creating-a-volume-from-an-imag…> * whats the difference between Policies stored in policy.json and policies that can be created using openstack/identity/v3/policies <https://ask.openstack.org/question/3073/whats-the-difference-between-polici…> * What’s the recommended way to debug LDAP connections to Keystone? <https://ask.openstack.org/question/1237/whats-the-recommended-way-to-debug-…> * How to setup security groups for IPv6 with nova-network? <https://ask.openstack.org/question/1520/how-to-setup-security-groups-for-ip…> * how does quantum (network-type: vlan) configure ESX-host VMs? <https://ask.openstack.org/question/1584/how-does-quantum-network-type-vlan-…> * How to configure multiple Floating IP pools? <https://ask.openstack.org/question/1980/how-to-configure-multiple-floating-…> * how to install healthnmon on grizzly ? <https://ask.openstack.org/question/2405/how-to-install-healthnmon-on-grizzl…> * What causes keystone to throw UnicodeEncodeError using devstack? <https://ask.openstack.org/question/2807/what-causes-keystone-to-throw-unico…> * Openstack services cannot talk to RabbitMQ: Connection refused but log says unreachable? <https://ask.openstack.org/question/3027/openstack-services-cannot-talk-to-r…> * IPv6 Support in Grizzly? <https://ask.openstack.org/question/3168/ipv6-support-in-grizzly/> * How to set domain name in quantum <https://ask.openstack.org/question/3185/how-to-set-domain-name-in-quantum/> * ceilometer can’t get compute.instance.create.start/.end instance <https://ask.openstack.org/question/2179/ceilometer-cant-get-computeinstance…> * Is sluggish performance caused by scheduler startup errors? <https://ask.openstack.org/question/1238/is-sluggish-performance-caused-by-s…> * How can I have a VM mounting more than one disk image? <https://ask.openstack.org/question/1448/how-can-i-have-a-vm-mounting-more-t…> * Is it possible to create multiple networks in FLATDHCP mode? <https://ask.openstack.org/question/2091/is-it-possible-to-create-multiple-n…> * What’s the best guide to follow to install Openstack using Xen and Libvirt? <https://ask.openstack.org/question/2015/whats-the-best-guide-to-follow-to-i…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! * Alistair Coles, HP * Thomas Leaman, HP * Jeff Sloyer, IBM * Adin Scannell, Gridcentric * Sirushti Murugesan, None * Cyril Roelandt, Enovance * Gabriel Wainer, HP * Liang Bo, 99cloud * Zhang Jinnan, 99cloud * Alexander Gorodnev, Mirantis * Ashley McNamara, None * Bill Owen, IBM * Jun Park, EIG/Bluehost * Claxton Correya, Rackspace * Kashi Reddy, Rackspace * Jon Snitow, Swiftstack * Sriram Madapusi Vasudevan, Rackspace * Sysnet, unknown * Anju Tiwari, None /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack Community Weekly Newsletter (July 12 – 19)
by Stefano Maffulli 20 Jul '13

20 Jul '13

Hong Kong Summit – Registration, Call for Speakers & Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ???????? <http://openstacksummitnovember2013.eventbrite.com/> Need support to travel to Hong Kong? The All New OpenStack Travel Support Program <http://www.openstack.org/blog/2013/07/the-all-new-openstack-travel-support-…> OpenStack Celebrates Three Years! <http://www.openstack.org/blog/2013/07/openstack-celebrates-three-years/> OpenStack is no one person or company or idea or line of code. It derives its strength from the collective community. No matter when you joined or what role you play, you have the ability to shape the future of OpenStack and computing. In three short years since the community was established, OpenStack has truly become the center of cloud innovation, attracting hundreds of talented developers, brand-name users, and support from major industry leaders. This calls for a big toast to you, the OpenStack community! A Vision for Keystone <http://adam.younglogic.com/2013/07/a-vision-for-keystone/> As OpenStack evolves, its requirements for Identity Management evolve with it. In the early days, there was a single Nova server, and that stored user-id and password. Once OpenStack evolved into a body of servers, copying passwords around comprised too big a security risk. Keystone was first implemented as a central repository for those passwords. Adam Young <http://adam.younglogic.com/> writes in fine details what the plans are for the future of the OpenStack Identity Management service. Glance Registry Driver <http://blog.flaper87.org/post/51e47d110f06d35a218b0307/> A lot is going on on Glance lately, although you may have not noticed. The team has been working on several blueprints, and most of them aim to promote glance as a public service. Flavio Percoco <http://blog.flaper87.org/> has published an update of what’s cooking in OpenStack Image Service. Tips ‘n Tricks * By Sébastien Han <http://sebastien-han.fr/>: OpenStack: instance evacuation goes to host <http://sebastien-han.fr/blog/2013/07/19/openstack-instance-evacuation-goes-…> * By Chmouel Boudjnah <http://blog.chmouel.com/>: Quick Swift Tip: How to remove a header with Curl <http://blog.chmouel.com/2013/07/17/quick-swift-tip-how-to-remove-a-header-w…> * By Victoria Martínez de la Cruz <http://vmartinezdelacruz.com/>: Getting started with Marconi, the message queue for OpenStack <http://vmartinezdelacruz.com/getting-started-with-marconi-the-message-queue…> * By Kashyap Chamarthy <http://kashyapc.wordpress.com/>: Configuring Libvirt guests with an Open vSwitch bridge <http://kashyapc.wordpress.com/2013/07/13/configuring-libvirt-guests-with-an…> Upcoming Events * Lots of birthday celebrations near you: Blow Out the Candles – OpenStack Turns 3! <http://www.openstack.org/blog/2013/07/blow-out-the-candles-openstack-turns-…> * OpenStack Meeting at “One Convergence” <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> Jul 21, 2013 – Hyderabad, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 – 26, 2013 – Portland, OR Details <http://www.oscon.com/oscon2013> * Gluster Community Workshop @ PDX <http://glusterday-pdx.eventbrite.com/>, Jul 22 – 26, 2013 – Portland, OR Details <http://glusterday-pdx.eventbrite.com/> * 2nd OpenStack User Group Nordics meetup <http://www.meetup.com/OpenStack-User-Group-Nordics/> Sep 11, 2013 – Kista, Stockholm Details <http://www.meetup.com/OpenStack-User-Group-Nordics/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 – Oct 01, 2013 – Bend, OR Details <http://openstack.onales.com/> Reports from Previous Events * Infrastructure Bootcamp <http://www.openstack.org/blog/2013/07/infrastructure-bootcamp/> Other News * python-heatclient 0.2.3 released <http://lists.openstack.org/pipermail/openstack-announce/2013-July/000119.ht…> * Havana-2 development milestone available <http://lists.openstack.org/pipermail/openstack-announce/2013-July/000120.ht…> * Savanna 0.2 released: Bring on the new Hadoop on OpenStack features! <http://www.mirantis.com/blog/savanna-0-2-released-new-hadoop-on-openstack-f…> * Open Mic Spotlight: Elizabeth Krumbach Joseph <http://www.openstack.org/blog/2013/07/open-mic-spotlight-elizabeth-krumbach…> * Open Mic Spotlight: Diane Fleming <http://www.openstack.org/blog/2013/07/open-mic-spotlight-diane-fleming/> * Open Mic Spotlight: Anne Gentle <http://www.openstack.org/blog/2013/07/open-mic-spotlight-anne-gentle/> * Open Mic Spotlight: Clint Byrum <http://www.openstack.org/blog/2013/07/open-mic-spotlight-clint-byrum/> * Open Mic Spotlight: Wayne Walls <http://www.openstack.org/blog/2013/07/open-mic-spotlight-wayne-walls/> * Erasure Codes with OpenStack Swift – Digging Deeper <http://swiftstack.com/blog/2013/07/17/erasure-codes-with-openstack-swift-di…> * OpenStack Project Technical Lead Interview Series #5: Julien Danjou, OpenStack Ceilometer Project <http://www.mirantis.com/blog/openstack-project-technical-lead-interview-ser…> * Three Years and Some with OpenStack <https://blog.hpcloud.com/three-years-and-some-openstack> * Quality Of Service In OpenStack <https://tropicaldevel.wordpress.com/2013/07/15/quality-of-service-in-openst…> * Interview with Nikola Dipanov from Red Hat <http://rafstack.tumblr.com/post/55505012951> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-16-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-16-21.…> Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * What are the best ways to monitor OpenStack Swift? <https://ask.openstack.org/question/3245/what-are-the-best-ways-to-monitor-o…> * How to change status of a Neutron port from DOWN to ACTIVE? <https://ask.openstack.org/question/3239/how-to-change-status-of-a-neutron-p…> * How to modify X-Auth-Token life time in keystone? <https://ask.openstack.org/question/3233/how-to-modify-x-auth-token-life-tim…> * Where does shared storage typically reside for guest filesystems? <https://ask.openstack.org/question/3213/where-does-shared-storage-typically…> * Non-Ubuntu Images from VirtualBox not running correctly <https://ask.openstack.org/question/3208/non-ubuntu-images-from-virtualbox-n…> * remove public quantum network <https://ask.openstack.org/question/3207/remove-public-quantum-network/> * Failed to update the root certificate: cacert.pem ERROR: Unauthorized (HTTP 401) <https://ask.openstack.org/question/3205/failed-to-update-the-root-certifica…> * Errors running ceilometer-collector <https://ask.openstack.org/question/3196/errors-running-ceilometer-collector/> * Get the NAT IP from openstack using chef <https://ask.openstack.org/question/3187/get-the-nat-ip-from-openstack-using…> * VCPU-Hours incorrectly reported in Dashboard? <https://ask.openstack.org/question/3148/vcpu-hours-incorrectly-reported-in-…> * how to boot an instance with always the same ip and hostname <https://ask.openstack.org/question/3159/how-to-boot-an-instance-with-always…> * IPv6 Support in Grizzly? <https://ask.openstack.org/question/3168/ipv6-support-in-grizzly/> * How to set domain name in quantum <https://ask.openstack.org/question/3185/how-to-set-domain-name-in-quantum/> * Access to metadata fails: couldn’t connect to host <https://ask.openstack.org/question/3145/access-to-metadata-fails-couldnt-co…> * Can I migrate VM between two datacenters with openstack <https://ask.openstack.org/question/3124/can-i-migrate-vm-between-two-datace…> * Not getting Keystone token via http but am getting it thru keystone client <https://ask.openstack.org/question/3117/not-getting-keystone-token-via-http…> * how to get the details of a hyper-visor in open stack environment via Openstack Java SDK? <https://ask.openstack.org/question/3018/how-to-get-the-details-of-a-hyper-v…> Welcome New Developers Is your affiliation correct? Check your profile in the OpenStack Foundation Members Database! * Guangya Liu, IBM * Yang Hongyang <http://www.openstack.org/community/members/profile/10122>, None * QingXin Meng <http://www.openstack.org/community/members/profile/9444>, IBM * Yuliya Portnova <http://www.openstack.org/community/members/profile/5841>, Mirantis (or Yulia Portnova <http://www.openstack.org/community/members/profile/10006>?) * Pavel Kirpichyov <http://www.openstack.org/community/members/profile/10496>, None * Elena Ezhova <http://www.openstack.org/community/members/profile/9464>, Mirantis * Hyunsun Moon <http://www.openstack.org/community/members/profile/9723>, None * Joel Coffman <http://www.openstack.org/community/members/profile/8788>, John Hopkins University Applied Physics Lab /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

Havana-2 development milestone available
by Thierry Carrez 18 Jul '13

18 Jul '13

Hi everyone, The second milestone of the Havana development cycle, "havana-2" is now available for Keystone, Glance, Nova, Horizon, Neutron, Cinder, Ceilometer, and Heat. In the last 7 weeks, more than 100 features were added and more than 650 bugs fixed. You can see the full list of new features and fixed bugs, as well as tarball downloads, at: https://launchpad.net/keystone/havana/havana-2 https://launchpad.net/glance/havana/havana-2 https://launchpad.net/nova/havana/havana-2 https://launchpad.net/horizon/havana/havana-2 https://launchpad.net/neutron/havana/havana-2 https://launchpad.net/cinder/havana/havana-2 https://launchpad.net/ceilometer/havana/havana-2 https://launchpad.net/heat/havana/havana-2 The next (and last) development milestone of the Havana cycle, havana-3, is scheduled for September 6th (final release is planned October 17th). Regards, -- Thierry Carrez (ttx) Release Manager, OpenStack

1 0

python-heatclient 0.2.3 released
by Steve Baker 17 Jul '13

17 Jul '13

The heat development community would like to announce the release of python-heatclient version 0.2.3. python-heatclient is a client library for Heat built on the Heat orchestration API. It provides a Python API (the heatclient module) and a command-line tool (heat). This release can be installed from the following locations: http://tarballs.openstack.org/python-heatclient/python-heatclient-0.2.3.tar… https://pypi.python.org/pypi/python-heatclient/0.2.3 The following issues are fixed in this release: #1183842 (Sulochan Acharya) cannot handle "=" in parameters #1190111 (Bryan D. Payne) python-ceilometerclient fails to talk to HTTPS endpoints #1200214 (Dirk Mueller) Relax OpenStack upper capping of client versions #1172444 (Monty Taylor) migrate all projects to flake8 #1177924 (Steve Baker) Use testr instead of nose as the unittest runner. #1179007 (Monty Taylor) Migrate build system to pbr #1179008 (Steven Dake) rename requires files to standard names

1 0

OpenStack Community Weekly Newsletter (July 5 – 12)
by Stefano Maffulli 13 Jul '13

13 Jul '13

Hong Kong Summit – Registration, Call for Speakers & Sponsors Now Open! <http://www.openstack.org/blog/2013/06/hong-kong-summit-registration-call-fo…> ???????????????????? ???????, ????????> <http://openstacksummitnovember2013.eventbrite.com/> The All New OpenStack Travel Support Program <http://www.openstack.org/blog/2013/07/the-all-new-openstack-travel-support-…> The OpenStack Foundation announces the availability of travel grants under the OpenStack Travel Support Program. The program’s aim is to facilitate participation of key contributors to the OpenStack Design Summit covering costs for travel and accommodation. The Travel Support Program is based on the promise of Open Design <https://wiki.openstack.org/wiki/Open>, one of the founding principles upon which the OpenStack project is built. Blow Out the Candles – OpenStack Turns 3! <http://www.openstack.org/blog/2013/07/blow-out-the-candles-openstack-turns-…> OpenStack will celebrate it’s third birthday July 19, and we’re celebrating this month! In three short years, Openstack has truly emerged as the center of cloud innovation, with hundreds of companies around the world relying on OpenStack to run their business. OpenStack is maturing, it’s coming of age and new users being announced every week (Fidelity, Comcast, Best Buy, Bloomberg). Over the past three years, we’ve also seen OpenStack grow internationally. There are now over 40 global user groups and more than 10,000 community members across 121 countries. And we’ve recently crossed the 1,000 authors threshold to the code base. This calls for a big toast to the OpenStack community! A tool for watching Zuul and Jenkins <http://www.danplanet.com/blog/2013/07/10/a-tool-for-watching-zuul-and-jenki…> Dan Smith <http://www.danplanet.com/blog> wrote a very hacky text “dashboard” that merges the information from Gerrit and Zuul, and provides a periodically-refreshed view of what is going on. The tool is useful to keep close watch of patches, both to know when they’re close to merging, as well as to know early when they’re failing a test. Catching something early and pushing a fix will kill the job currently in progress and start over with the new patch. This is a more efficient use of resources and lowers the total amount of time before Jenkins will vote on the patch in such a case. Save Space: the final frontier – Erasure Codes with OpenStack Swift <http://swiftstack.com/blog/2013/07/10/erasure-codes-with-openstack-swift/> The Swift team announced an initiative to introduce erasure codes in OpenStack Swift. This initiative enables deployers to store data with erasure coding instead of or in addition to Swift’s 3-replica model. OpenStack Programs Core Developers <http://dowdberry.blogspot.com/2013/07/openstack-programs-core-developers.ht…> David Medberry <http://dowdberry.blogspot.com/search/label/openstack> wrote a nice summary of how to identify core developers for each of the Official OpenStack Programs <https://wiki.openstack.org/wiki/Programs>. This list is maintained on Gerrit for Nova <https://review.openstack.org/#/admin/groups/25,members>, Glance <https://review.openstack.org/#/admin/groups/13,members>, Swift <https://review.openstack.org/#/admin/groups/24,members>, Horizon <https://review.openstack.org/#/admin/groups/43,members>, Keystone <https://review.openstack.org/#/admin/groups/9,members>, Cinder <https://review.openstack.org/#/admin/groups/83,members>, Neutron <https://review.openstack.org/#/admin/groups/38,members>, Ceilometer <https://review.openstack.org/#/admin/groups/107,members>, Heat <https://review.openstack.org/#/admin/groups/114,members> and OpenStack Doc <https://review.openstack.org/#/admin/groups/30,members>. Tips ‘n Tricks * By Dan Smith <http://www.danplanet.com/blog>: A brief overview of Nova’s new object model (Part 1) <http://www.danplanet.com/blog/2013/07/12/a-brief-overview-of-novas-new-obje…> and (Part 2) <http://www.danplanet.com/blog/2013/07/12/a-brief-overview-of-novas-new-obje…> * By Mirantis <http://www.mirantis.com/>: Understanding OpenStack Authentication: Keystone PKI <http://www.mirantis.com/blog/understanding-openstack-authentication-keyston…> * By Sandro Mathys <http://www.blog.sandro-mathys.ch/search/label/OpenStack>: Setting a user password when launching cloud images <http://www.blog.sandro-mathys.ch/2013/07/setting-user-password-when-launchi…> * By Julie Pichon <http://www.jpichon.net/tag/openstack/>: Testing in Horizon | Unit testing for the Openstack Dashboard <http://www.jpichon.net/blog/2013/07/testing-in-horizon/> Upcoming Events * Boston OpenStack Meetup <http://www.meetup.com/Openstack-Boston/> Jul 16, 2013 – Boston Details <http://www.meetup.com/Openstack-Boston/> * 1st Openstack Athens User Group meeting <http://www.meetup.com/Athens-OpenStack-User-Group/events/128046962/> Jul 17, 2013 – Athens, Greece Details <http://www.meetup.com/Athens-OpenStack-User-Group/events/128046962/> * Lots of birthday celebrations near you: Blow Out the Candles – OpenStack Turns 3! <http://www.openstack.org/blog/2013/07/blow-out-the-candles-openstack-turns-…> * OpenStack Meeting at “One Convergence” <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> Jul 21, 2013 – Hyderabad, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/127721822/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 – 26, 2013 – Portland, OR Details <http://www.oscon.com/oscon2013> * Gluster Community Workshop @ PDX <http://glusterday-pdx.eventbrite.com/>, Jul 22 – 26, 2013 – Portland, OR Details <http://glusterday-pdx.eventbrite.com/> * OpenStack on Ales <http://openstack.onales.com/> Sep 30 – Oct 01, 2013 – Bend, OR Details <http://openstack.onales.com/> Reports from Previous Events * OpenStack at FISL 2013 Brasil <http://www.openstack.org/blog/2013/07/openstack-at-fisl-2013-brasil/> * Hong Kong OpenStack 2nd Workshop: Deploy a 3D Virtual World on OpenStack <http://www.openstack.org/blog/2013/07/hong-kong-openstack-2nd-workshop-depl…> * 2d Polish OpenStack User Group Meetup <https://www.youtube.com/watch?v=h4HVEG3lo-g&feature=c4-feed-u> Other News * Ansible playbooks for OpenStack <http://markmail.org/message/dy4g2hjbrocshnso> * Caimito 0.11 – WebDAV frontend for OpenStack Swift Cloud Storage <http://markmail.org/message/uoqfvdhe2yxik4yr> * New mailing lists in Italian, Spanish, Vietnamese <http://markmail.org/message/plxo2r2jpv4tn3qe> * Open Mic Spotlight: Joe Topjian <http://www.openstack.org/blog/2013/07/open-mic-spotlight-joetopjian/> * Open Mic Spotlight: Mike Perez <http://www.openstack.org/blog/2013/07/open-mic-spotlight-mike-perez/> * Open Mic Spotlight: Aaron Rosen <http://www.openstack.org/blog/2013/07/open-mic-spotlight-aaron-rosen/> * Open Mic Spotlight: Joe Gordon <http://www.openstack.org/blog/2013/07/open-mic-spotlight-joe-gordon/> * Open Mic Spotlight: Everett Toews <http://www.openstack.org/blog/2013/07/open-mic-spotlight-everett-toews/> * Open Mic Spotlight: Doug Hellmann <http://www.openstack.org/blog/2013/07/open-mic-spotlight-doug-hellmann/> * Python Exception Chaining <http://blogs.gnome.org/markmc/2013/07/11/python-exception-chaining/> * Save Space: the final frontier – Erasure Codes with OpenStack Swift <http://swiftstack.com/blog/2013/07/10/erasure-codes-with-openstack-swift/> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-09-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-07-09-21.…> Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * Where is the right place to set the default quota? <https://ask.openstack.org/question/3030/where-is-the-right-place-to-set-the…> * ceilometer and instance snapshots/glance images <https://ask.openstack.org/question/2999/ceilometer-and-instance-snapshotsgl…> * Debugging OpenStack Swift with Eclipse and Pydev <https://ask.openstack.org/question/2997/debugging-openstack-swift-with-ecli…> * Cinder custom driver for falconstor <https://ask.openstack.org/question/2998/cinder-custom-driver-for-falconstor/> * Terms of support for x-glance-api-copy-from header in Glance API <https://ask.openstack.org/question/2974/terms-of-support-for-x-glance-api-c…> * creating isolated networks in grizzly with nova-network <https://ask.openstack.org/question/2949/creating-isolated-networks-in-grizz…> * cinder-volume localhost:5672 unreachable <https://ask.openstack.org/question/2933/cinder-volume-localhost5672-unreach…> * Build MySQL HA on openstack <https://ask.openstack.org/question/2946/build-mysql-ha-on-openstack/> * Openstack services cannot talk to RabbitMQ: Connection refused but log says unreachable? <https://ask.openstack.org/question/3027/openstack-services-cannot-talk-to-r…> * how to get the details of a hyper-visor in open stack environment via Openstack Java SDK? <https://ask.openstack.org/question/3018/how-to-get-the-details-of-a-hyper-v…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0