- OpenStack-announce - lists.openstack.org

OpenStack Community Weekly Newsletter (Apr 5 – 12)
by Stefano Maffulli 12 Apr '13

12 Apr '13

Highlights of the week Introducing the OpenStack Activity Board <http://www.openstack.org/blog/2013/04/introducing-the-openstack-activity-bo…> I am pleased to announce that a beta release of the OpenStack Activity Board (beta) <http://activity.openstack.org/data/> is now live. The development Activity Board announced few months ago <http://www.openstack.org/blog/2012/09/providing-a-unified-view-of-openstack…> provides a visual overview of all the OpenStack public activity of community members across multiple dimensions: contributors and organizations, projects and tools. From a single interface, you can easily surf OpenStack project content, whether it is coming from the LaunchPad bug tracker, Git or Gerrit, all mapped against the OpenStack Foundation members database. Join the session at the Summit <http://openstacksummitapril2013.sched.org/event/ebbf37e343246e0b80bf99540a0…> to learn more and give feedback. The need for releases <http://fnords.wordpress.com/2013/04/11/the-need-for-releases/> The beginning of a new release cycle is as good as any moment to question why we actually go through the hassle of producing OpenStack releases. Twice per year <https://wiki.openstack.org/wiki/Release_Cycle>, on a precise date we announce 6 months in advance, we bless and publish source code tarballs of the various integrated projects in OpenStack. Every week we have a meeting <https://wiki.openstack.org/wiki/Meetings/ProjectMeeting> that tracks our progress toward this common goal. Read Thierry’s post if you want to know why. International Community Forum – Wednesday April 17 3.40pm in A105 <http://openstacksummitapril2013.sched.org/event/e45f299aad360fea432241f9b60…> If you are travelling to the OpenStack Summit from afar, we are holding an International Forum where we would like you to come along with your answer to the following question, “What’s an important, unique and interesting thing about OpenStack in my country”. The aim of the session is to share the answers so that we all might learn and gather new ideas for the improvement of the OpenStack community around the world!” It will be great to see just how many countries we can see represented in the one room, and a great opportunity for international networking. Understanding nova-conductor in OpenStack Nova <http://cloudystuffhappens.blogspot.com/2013/04/understanding-nova-conductor…> Nova conductor is a new service in Nova introduced in the Grizzly release. It as one of the top three changes in Nova in the Grizzly cycle, along with bare metal provisioning and cell. In this article, Yun Mao <http://cloudystuffhappens.blogspot.com/search/label/openstack> discusses its pros and cons to help you understand it better. OpenStack Networking, use of “Quantum” <http://markmail.org/message/w37tv4bgzxld7x4a> We have to phase out the trademark or attention getting use of the code name “Quantum” when referring to the the OpenStack Networking project, as part of a legal agreement with Quantum Corporation, the owner of the “Quantum” trademark. The Board of Directors and Technical Committee members involved in Networking related development and documentation were notified so we could start working to remove “Quantum” from public references. At the summit we have a session scheduled to talk about project names generally and the path forward for OpenStack Networking specifically. For instance, in places where there is a need for something shorter, such as the CLI, we could come up with a new code name or use something more descriptive like “os-network.” This is a question it probably makes sense to look at across projects at the same time. If you have input on this, please come participate in the session Thursday April 18 at 4:10pm: http://openstacksummitapril2013.sched.org/event/95df68f88b519a3e4981ed9da7c… Tips and Tricks * By Andreas Jaeger <http://jaegerandi.blogspot.com/search/label/OpenStack>: Chef and Crowbar for setting up OpenStack clouds – with openSUSE and SUSE Cloud <http://jaegerandi.blogspot.com/2013/04/chef-and-crowbar-for-setting-up.html> * By Mirantis <http://www.mirantis.com/>: Guest Post: Offloading CPU data traffic in OpenStack cloud with iSCSI over RDMA <http://www.mirantis.com/blog/offloading-cpu-data-traffic-in-openstack-cloud…> * By Xlcloud <http://xlcloud.org/bin/view/Blog/OpenStack>: Devstack with OpenStack Networking in a multi-node configuration <http://xlcloud.org/bin/view/Blog/Devstack+with+Quantum+in+a+multi-node+conf…> * By Sébastien Han <http://sebastien-han.fr/>: Openstack: quickly fix mirrored queues errors <http://sebastien-han.fr/blog/2013/04/09/openstack-quickly-fix-mirrored-queu…> * By Spilgames Engineering <http://engineering.spilgames.com/>: OpenStack with Open vSwitch and Networking (Folsom) on Scientific Linux <http://engineering.spilgames.com/openstack-with-open-vswitch-on-scientific-…> * By Michael Still <http://www.stillhq.com/>: Faster pip installs <http://www.stillhq.com/openstack/tips/000001.html> * By Yun Mao <http://cloudystuffhappens.blogspot.com/search/label/openstack>: How to run pylint with few false positives <http://cloudystuffhappens.blogspot.com/2013/04/how-to-run-pylint-with-few-f…> * By Kashyap Chamarthy <http://kashyapc.wordpress.com/>: Finding serial console log of a nova instance <http://kashyapc.wordpress.com/2013/04/06/finding-serial-console-log-of-a-no…> Upcoming Events * OpenStack Summit April 2013 <http://www.openstack.org/summit/portland-2013/> Apr 15 – 18, 2013 – Portland, OR Details <http://www.openstack.org/summit/portland-2013/> * Beers / Summit Debrief / Internally Promoting OpenStack <http://www.meetup.com/meetup-group-NjZdcegA/events/108730682/> Apr 24, 2013 – Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/events/108730682/> * OpenStack meeting in Cologne <http://www.meetup.com/OpenStack-DACH/events/108876542/> May 04, 2013 – Cologne, Germany Details <http://www.meetup.com/OpenStack-DACH/events/108876542/> * OpenStack DACH Day <http://www.prweb.com/releases/2013/3/prweb10526716.htm> May 24, 2013 – Berlin Fairgrounds Details <http://www.prweb.com/releases/2013/3/prweb10526716.htm> * OpenStack Israel <http://www.meetup.com/IGTCloud/events/99146542/> May 27, 2013 – Tel-Aviv, Israel Details <http://www.openstack-israel.org/> * OpenStack CEE Day <http://www.openstack.org/> May 29, 2013 – Budapest Details <http://www.openstack.org/> * Building an OpenStack Cloud <http://www.meetup.com/meetup-group-NjZdcegA/events/108731562/> May 30, 2013 – Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/events/108731562/> * OpenStack meeting in Munich <http://www.meetup.com/openstack-de/events/109700562/> Jun 11, 2013 – Munich, Germany Details <http://www.meetup.com/openstack-de/events/109700562/> * GigaOM Structure <http://event.gigaom.com/structure/> Jun 19 – 20, 2013 – San Francisco, CA Details <http://event.gigaom.com/structure/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 – 26, 2013 – Portland, OR Details <http://www.oscon.com/oscon2013> Other News * OpenStack Board of Directors Talks: Episode 9 with Alan Clark, Chairman of the Board <http://rafstack.tumblr.com/post/47690655131> * OpenStack Board of Directors Talks: Episode 8 with Lew Tucker, VP/CTO Cloud Computing at Cisco Systems <http://en.community.dell.com/techcenter/b/techcenter/archive/2013/04/10/ope…> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-04-09-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-04-09-21.…> Got answers? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. Interesting questions waiting for answers: * How to upgrade from Folsom to Grizzly? <https://ask.openstack.org/question/191/how-to-upgrade-from-folsom-to-grizzl…> * Are there any video tutorials for setting up a Horizon development environment? <https://ask.openstack.org/question/42/are-there-any-video-tutorials-for-set…> * How do I assign multiple networks to a tenant? <https://ask.openstack.org/question/151/how-do-i-assign-multiple-networks-to…> * Why do I get “Timed out” error when trying to create a glance image? <https://ask.openstack.org/question/43/why-do-i-get-timed-out-error-when-try…> * Any insight/resources/examples/suggestions of how to design applications to take advantage of the openstack platform? <https://ask.openstack.org/question/51/any-insightresourcesexamplessuggestio…> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[ANNOUNCE] OpenStack 2012.2.4 released
by Alan Pevec 11 Apr '13

11 Apr '13

Hi everybody, In the time since the Folsom release, we have been busy selectively back-porting bugfixes to the stable/folsom branch according to our "safe source of high-impact fixes" criteria documented here: http://wiki.openstack.org/StableBranch We're happy to announce the 2012.2.4 release, the latest in the series of stable releases. These releases are bugfix updates to Folsom and are intended to be relatively risk free with no intentional regressions or API changes. A total of 90 bugs have been fixed in this release. The list of bugs fixed can be seen here: https://launchpad.net/nova/folsom/2012.2.4 https://launchpad.net/glance/folsom/2012.2.4 https://launchpad.net/keystone/folsom/2012.2.4 https://launchpad.net/cinder/folsom/2012.2.4 https://launchpad.net/quantum/folsom/2012.2.4 https://launchpad.net/horizon/folsom/2012.2.4 Please read (and add to!) the release notes at: http://wiki.openstack.org/ReleaseNotes/2012.2.4 This release is the last planned stable release but stable/folsom branches will continue to be maintained by the openstack-folsom-maint team. If you are interested in helping please contact me. Enjoy! Alan

1 0

OpenStack Community Weekly Newsletter (Mar 29 – Apr 5)
by Stefano Maffulli 05 Apr '13

05 Apr '13

Highlights of the week OpenStack Grizzly <http://www.openstack.org/blog/2013/04/openstack-grizzly/> Done: OpenStack’s 7th release, called “Grizzly”, is out: thank you, the over 500 stackers who contributed and the many more who participated in the OpenStack Summit last October where this release was planned. This release, more than any before it, was driven by users who have been running OpenStack in production for the past year (or more) and have asked for broader support for the compute, storage, and networking technologies they trust and even greater scale and ease of operations. Mark Collier’s <http://www.openstack.org/blog/2013/04/openstack-grizzly/> post has a summary of the new features and a screencast of the updated OpenStack Dashboard. Building a Multi-Tier Application With OpenStack <http://blog.aaronorosen.com/building-a-multi-tier-application-with-openstac…> In his blog post Aaron Rosen <http://blog.aaronorosen.com/> shows how to build a simple multi-tier application on OpenStack, something that is made possible by the new features of OpenStack Grizzly: security groups and about Load-balancer-as-a-Service (LBaaS). Autoscale and Orchestration: the Heat of OpenStack <http://technicae.cogitat.io/2013/04/autoscale-and-orchestration-heat-of.html> Duncan McGreggor tells the story of how OpenStack orchestration service (codename Heat) is gaining new autoscaling features thanks to increased efforts by Rackspace. Following discussions at Pycon, Rackspace’s management decided to add two development teams to Heat and add some of the features that initially they were developing internally. Another good story of different companies collaborating inside the OpenStack Community. There will be no reliable cloud (part 1) <http://blog.hendrikvolkmer.de/2013/04/03/there-will-be-no-reliable-cloud-pa…> It’s the eternal debate about cloud and high availability, legacy enterprise applications and chaos monkeys. Hendrik Volkmer <http://blog.hendrikvolkmer.de/> shares his thoughts, summarised in “Stop wasting your time trying to find one”. His suggestion: With all that free time, start to build reliable systems on top of unreliable clouds. Grizzly, the day after <http://fnords.wordpress.com/2013/04/05/grizzly-the-day-after/> Thierry’s, our fine release manager, wrote his therapeutic post-release essay, balancing the excitement of the new release and the sadness of all the things that could have done better. Put on relaxing music, sit back on the chair and listen like any therapist would do. Tips and Tricks * By SwiftStack Team <http://swiftstack.com/>: Using CORS with Swift <http://swiftstack.com/blog/2013/04/02/using-cors-with-swift/> * By Michael Still <http://www.stillhq.com/>: Merged in Havana: configurable iptables drop actions in nova <http://www.stillhq.com/openstack/havana/000001.html> Upcoming Events * OpenStack Summit April 2013 <http://www.openstack.org/summit/portland-2013/> Apr 15 – 18, 2013 – Portland, OR Details <http://www.openstack.org/summit/portland-2013/> * Beers / Summit Debrief / Internally Promoting OpenStack <http://www.meetup.com/meetup-group-NjZdcegA/events/108730682/> Apr 24, 2013 – Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/events/108730682/> * OpenStack meeting in Cologne <http://www.meetup.com/OpenStack-DACH/events/108876542/> May 04, 2013 – Cologne, Germany Details <http://www.meetup.com/OpenStack-DACH/events/108876542/> * OpenStack DACH Day <http://www.prweb.com/releases/2013/3/prweb10526716.htm> May 24, 2013 – Berlin Fairgrounds Details <http://www.prweb.com/releases/2013/3/prweb10526716.htm> * OpenStack Israel <http://www.meetup.com/IGTCloud/events/99146542/> May 27, 2013 – Tel-Aviv, Israel Details <http://www.meetup.com/IGTCloud/events/99146542/> * OpenStack CEE Day <http://www.openstack.org/> May 29, 2013 – Budapest Details <http://www.openstack.org/> * Building an OpenStack Cloud <http://www.meetup.com/meetup-group-NjZdcegA/events/108731562/> May 30, 2013 – Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/events/108731562/> * OpenStack meeting in Munich <http://www.meetup.com/openstack-de/events/109700562/> Jun 11, 2013 – Munich, Germany Details <http://www.meetup.com/openstack-de/events/109700562/> * GigaOM Structure <http://event.gigaom.com/structure/> Jun 19 – 20, 2013 – San Francisco, CA Details <http://event.gigaom.com/structure/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 – 26, 2013 – Portland, OR Details <http://www.oscon.com/oscon2013> Reports from past events * Vietnam OpenStack Meetup 3 <http://www.openstack.org/blog/2013/04/vietnam-openstack-meetup-3/> * DreamHost’s collection of presentations from PyCon 2013 <http://dreamhost.com/dreamscape/2013/04/02/on-stage-at-pycon-2013/> * 3rd Swiss OpenStack User Group Meetup <http://www.openstack.org/blog/2013/04/3rd-swiss-openstack-user-group-meetup/> * Interview with Cloudscaling’s Eric Windisch on the Simplicity Scales engineering blog <http://rafstack.tumblr.com/post/47179669042> Other News * Hear what’s new in OpenStack technology at OpenStack Israel May 27 <http://cloudifysource.tumblr.com/post/47011535593> * Announcing the Python3 Compatibility Team <http://engineering.cloudscaling.com/2013/04/announcing-python3-compat-team/> * Announcing: OpenStack Security Mailing List <http://lists.openstack.org/pipermail/openstack-dev/2013-April/007135.html> * New Reviewday location <http://lists.openstack.org/pipermail/openstack-dev/2013-April/007116.html>: http://status.openstack.org/reviews/ * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-04-02-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-04-02-21.…> Got questions? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

OpenStack 2013.1 ("Grizzly") is released !
by Thierry Carrez 04 Apr '13

04 Apr '13

Hello everyone, The "Grizzly" development cycle, started 6 months ago, ends today with the immediate release of OpenStack 2013.1. It is the result of the work of 550 different people who contributed code, documentation, or infrastructure configurations. This amazing journey saw the implementation of 232 blueprints and the fixing of 1900 bugs within the 7 integrated projects alone. You can find source tarballs for each integrated project, together with lists of features and bugfixes, at: OpenStack Compute: https://launchpad.net/nova/grizzly/2013.1 OpenStack Object Storage: https://launchpad.net/swift/grizzly/1.8.0 OpenStack Image Service: https://launchpad.net/glance/grizzly/2013.1 OpenStack Networking: https://launchpad.net/quantum/grizzly/2013.1 OpenStack Block Storage: https://launchpad.net/cinder/grizzly/2013.1 OpenStack Identity: https://launchpad.net/keystone/grizzly/2013.1 OpenStack Dashboard: https://launchpad.net/horizon/grizzly/2013.1 The Grizzly Release Notes contain an overview of the key features, as well as upgrade notes and current lists of known issues. You can access them at: https://wiki.openstack.org/wiki/ReleaseNotes/Grizzly In 11 days our community will gather in Portland, OR for the OpenStack Summit: 4 days of conference to discuss the state of OpenStack and a Design Summit to plan the next 6-month development cycle, codenamed "Havana". See https://www.openstack.org/summit/portland-2013/ for more details. Congratulations everyone on this awesome release ! -- Thierry Carrez (ttx) Release Manager, OpenStack

1 0

OpenStack Community Weekly Newsletter (Mar 8-22)
by Stefano Maffulli 29 Mar '13

29 Mar '13

Highlights of the week Kwapi: an energy efficiency architecture <http://xlcloud.org/bin/view/Blog/Kwapi+an+energy+efficiency+architecture?la…> XLcloud HPC project focuses on providing high performance HPC services, while improving energy efficiency. Kwapi makes a smart use of data collected by Ceilometer interfaced with wattmeters in order to introduce power consumption statistics in OpenStack Nova scheduling strategies. Kwapi is stored on StackForge <https://github.com/stackforge/kwapi> and a blueprint is available here <http://www.xlcloud.org/bin/view/XLcloudProjectManagement/EEA>. Logging and debugging in OpenStack <http://vmartinezdelacruz.com/logging-and-debugging-in-openstack/> The importance of debugging is much more noticeable on large projects like OpenStack, which require both developers and common users contribute and report when something is not going well. In #openstack-101 Victoria Martínez de la Cruz <http://vmartinezdelacruz.com/> met many people wanting to start contributing to OpenStack, but a lot of them didn't know how to provide the right information to see where the problem was when they were facing a blocker. A must read for anybody starting (and a handy bookmark to provide to people stuck somewhere). Announcing Climate, the OpenStack capacity leasing project <http://julien.danjou.info/blog/2013/openstack-climate-capacity-leasing> A capacity leasing service is something really needed by service providers, especially in the context of cloud platforms dedicated to HPC style workload. Instead of building something really specific, the decision has been made to build a new standalone OpenStack components aiming to provide this kind of functionnality to OpenStack. In the spirit of others OpenStack components, it will be extensible to fullfil a large panel of needs around this problematic. Participate in the first OpenStack User Survey! <http://www.openstack.org/blog/2013/03/participate-in-the-first-openstack-us…> If you are an OpenStack user or have customers with OpenStack deployments, please take 10 minutes to respond to our first User Survey or pass it along to your network. Our community has grown at an amazing rate in 2.5 years, and it's time to better define our user base and requirements, so we can respond and advocate accordingly. TAKE THE SURVEY <http://awe.sm/r0NkC> *The Cost Of Client Side Image Downloads On the CPU* <https://tropicaldevel.wordpress.com/2013/03/26/the-cost-of/> John Bresnahan <https://tropicaldevel.wordpress.com/> discusses the importance of managing the resource consumption of large file transfers. The NIC (and the network in general) is always thought of as a consumable resource involved in a data transfer. To a lesser extent the disk bandwidth is considered, and on occasion the system bus is as well. However, the effects on the CPU tend to be underestimated. John experimented a bit and charted his results. Welcome to the renovated OpenStack Technical Committee <https://wiki.openstack.org/wiki/Governance/TechnicalCommittee> The "Spring 2013? election round is now over, and the following 15 people will be members of the OpenStack Technical Committee <https://wiki.openstack.org/wiki/Governance/TechnicalCommittee> for the next 6 months: * Russell Bryant (russellb), Nova PTL * Thierry Carrez (ttx), Directly-elected * Steven Dake (sdake), Heat PTL * Julien Danjou (jd__), Ceilometer PTL * John Dickinson (notmyname), Swift PTL * Anne Gentle (annegentle), Directly-elected * John Griffith (jgriffith), Cinder PTL * Gabriel Hurley (gabrielhurley), Horizon PTL * Vish Ishaya (vishy), Directly-elected * Dolph Mathews (dolphm), Keystone PTL * Mark McClain (markmcclain), Quantum PTL * Mark McLoughlin (markmc), Oslo PTL * Mikal Still (mikal), Directly-elected * Monty Taylor (mordred), Directly-elected * Mark Washenberger (markwash), Glance PTL Tips and Tricks * By Christian Berendt <http://www.cberendt.de/>: Build images using VeeWee <http://www.cberendt.de/2013/03/build-images-using-veewee/?utm_source=rss&ut…> * By Sandro Mathys <http://red-fedora.blogspot.com/search/label/OpenStack>: Unused base images in OpenStack Nova <http://red-fedora.blogspot.com/2013/03/unused-base-images-in-openstack-nova…> * By Christian Berendt <http://www.cberendt.de/>: Usage of nested virtualization inside instances <http://www.cberendt.de/2013/03/usage-of-nested-virtualization-inside-instan…> * By Kashyap Chamarthy <http://kashyapc.wordpress.com/>: Debugging nova --- a small illustration with pdb <http://kashyapc.wordpress.com/2013/03/27/debugging-nova-a-small-illustratio…> * By John Dickinson <http://programmerthoughts.com/>: OpenStack Swift on Raspberry Pi <http://programmerthoughts.com/openstack/swift-on-pi> Upcoming Events * Vietnam OpenStack Meeting <https://www.facebook.com/events/467317409990701/> Mar 30, 2013 -- Ho Chi Minh City, Vietnam Details <https://www.facebook.com/events/467317409990701/> * 1st OpenStack User Group Nordics meetup <http://www.meetup.com/OpenStack-User-Group-Nordics/events/95258382/> Apr 03, 2013 -- Kista, Sweden Details <http://www.meetup.com/OpenStack-User-Group-Nordics/events/95258382/> * OpenStack Technology Deep Dive <http://www.meetup.com/meetup-group-NjZdcegA/events/108724942/> Apr 04, 2013 -- Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/events/108724942/> * OpenStack Summit April 2013 <http://www.openstack.org/summit/portland-2013/> Apr 15 -- 18, 2013 -- Portland, OR Details <http://www.openstack.org/summit/portland-2013/> * Beers / Summit Debrief / Internally Promoting OpenStack <http://www.meetup.com/meetup-group-NjZdcegA/events/108730682/> Apr 24, 2013 -- Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/events/108730682/> * OpenStack meeting in Cologne <http://www.meetup.com/OpenStack-DACH/events/108876542/> May 04, 2013 -- Cologne, Germany Details <http://www.meetup.com/OpenStack-DACH/events/108876542/> * OpenStack DACH Day <http://www.prweb.com/releases/2013/3/prweb10526716.htm> May 24, 2013 -- Berlin Fairgrounds Details <http://www.prweb.com/releases/2013/3/prweb10526716.htm> * OpenStack Israel <http://www.meetup.com/IGTCloud/events/99146542/> May 27, 2013 -- Tel-Aviv, Israel Details <http://www.meetup.com/IGTCloud/events/99146542/> * OpenStack CEE Day <http://www.openstack.org/> May 29, 2013 -- Budapest Details <http://www.openstack.org/> * Building an OpenStack Cloud <http://www.meetup.com/meetup-group-NjZdcegA/events/108731562/> May 30, 2013 -- Chicago, IL Details <http://www.meetup.com/meetup-group-NjZdcegA/events/108731562/> * OpenStack meeting in Munich <http://www.meetup.com/openstack-de/events/109700562/> Jun 11, 2013 -- Munich, Germany Details <http://www.meetup.com/openstack-de/events/109700562/> * GigaOM Structure <http://event.gigaom.com/structure/> Jun 19 -- 20, 2013 -- San Francisco, CA Details <http://event.gigaom.com/structure/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 -- 26, 2013 -- Portland, OR Details <http://www.oscon.com/oscon2013> Reports from past events * Report: March month OpenStack meetup,Bangalore, India <http://www.openstack.org/blog/2013/03/report-march-month-openstack-meetupba…> * OpenStack hits World Hosting Days 2013 in Germany! <http://www.openstack.org/blog/2013/03/openstack-hits-world-hosting-days-201…> * Taiwan OpenStack User Group Meeting March 27 <http://www.pagedise.com/po_list.php?url_code=504C7PZ5RA6FO#.UVPmvhd6jrw> Other News * Puppet modules for Ceph finally landed! <http://www.enovance.com/fr/blog/5478/puppet-modules-for-ceph-finally-landed> * State of the Q -- ZeroMQ in OpenStack Grizzly <http://engineering.cloudscaling.com/2013/03/grizzly-0mq-messaging-update/> * Recruiting -- Translation Coordinator <https://lists.launchpad.net/openstack/msg22306.html> * Documentation -- Push for Grizzly <https://lists.launchpad.net/openstack/msg22306.html> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-03-26-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-03-26-21.…> Got questions? Ask OpenStack <https://ask.openstack.org/> is the go-to destination for OpenStack users. /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

Technical Committee members (Havana development cycle)
by Thierry Carrez 29 Mar '13

29 Mar '13

The "Spring 2013" election round is now over, and the following 15 people will be members of the OpenStack Technical Committee for the next 6 months: * Russell Bryant (russellb), Nova PTL * Thierry Carrez (ttx), Directly-elected * Steven Dake (sdake), Heat PTL * Julien Danjou (jd__), Ceilometer PTL * John Dickinson (notmyname), Swift PTL * Anne Gentle (annegentle), Directly-elected * John Griffith (jgriffith), Cinder PTL * Gabriel Hurley (gabrielhurley), Horizon PTL * Vish Ishaya (vishy), Directly-elected * Dolph Mathews (dolphm), Keystone PTL * Mark McClain (markmcclain), Quantum PTL * Mark McLoughlin (markmc), Oslo PTL * Mikal Still (mikal), Directly-elected * Monty Taylor (mordred), Directly-elected * Mark Washenberger (markwash), Glance PTL More information about the Technical Committee at: https://wiki.openstack.org/wiki/Governance/TechnicalCommittee -- Thierry Carrez (ttx) Chair, OpenStack Technical Committee

1 0

OpenStack Community Weekly Newsletter (Mar 8-22)
by Stefano Maffulli 22 Mar '13

22 Mar '13

Highlights of the week Participate in the first OpenStack User Survey! <http://www.openstack.org/blog/2013/03/participate-in-the-first-openstack-us…> If you are an OpenStack user or have customers with OpenStack deployments, please take 10 minutes to respond to our first User Survey or pass it along to your network. Our community has grown at an amazing rate in 2.5 years, and it's time to better define our user base and requirements, so we can respond and advocate accordingly. TAKE THE SURVEY <http://awe.sm/r0NkC> A new agent management approach for Quantum in OpenStack Grizzly <http://www.mirantis.com/blog/a-new-agent-management-approach-in-quantum-for…> In Folsom, Quantum didn't have facilities to schedule its agents between cluster nodes, but the Grizzly release brings the support of a new component management approach, which addresses this issue. Havana Project Technical Leads Welcome to the new PTLs for OpenStack's future release, Havana: * Nova: Russell Bryant * Ceilometer: Julien Danjou * Keystone: Dolph Matthews * Cinder: John Griffith * Glance: Mark Washenberger * Heat: Steven Dake * Horizon: Gabriel Hurley * Oslo: Mark McLoughlin * Quantum: Marck McClain * Swift: John Dickenson They were elected democratically by their peer developers according to the rules of the OpenStack community to lead the next release cycle. Congratulations. The new PTLs will join three more people whose election is still ongoing, to form the OpenStack Technical Committee. *Moving to open development: OpenStack / Crowbar / Chef on SUSE* <http://jaegerandi.blogspot.com/2013/03/moving-to-open-development-openstack…> Crowbar was originally developed by Dell engineers, and is now a fully-fledged Open Source project involving close collaboration with SUSE and others. There are weekly public meetings <https://github.com/crowbar/crowbar/wiki/Meetings>, a public mailing list <https://lists.us.dell.com/mailman/listinfo/crowbar>, a |#crowbar| IRC channel <https://github.com/crowbar/crowbar/wiki/IRC-channel>, public Trello boards <https://github.com/crowbar/crowbar/wiki/Development> and so on. As an indication of the project's independent nature, the authoritative location for the git repositories has changed from https://github.com/dellcloudedge to https://github.com/crowbar, and a new homepage <http://crowbar.github.com/>is currently under construction. OpenStack Miniconf at PyCon Australia 2013 <http://aptira.wufoo.com/forms/pyconau2013-openstack-miniconf-call-for-prese…> PyCon Australia 2013 will be hosting two one-day miniconfs on *Friday 5 July* before the main conference proceedings kick off on Saturday 6 July. Miniconfs are events that focus on a specific community that relies heavily on Python, and allows practitioners in those communities to explore those topics in a much deeper way than the main PyCon conference can allow. The Call For Presenters for the OpenStack Miniconf is open now and closes on 15 April, 2013. To submit a presentation, visit the OpenStack Miniconf CFP site at http://aptira.wufoo.com/forms/pyconau2013-openstack-miniconf-call-for-prese… Tips and Tricks * By Anita Kuno <http://anteaya.info/>: Reviewing an OpenStack Patch <http://anteaya.info/blog/2013/03/21/reviewing-an-openstack-patch/> * By Adam Young <http://adam.younglogic.com/>: Trusts and Role Based Access Control for Open Stack <http://adam.younglogic.com/2013/03/trusts-rbac/> * By Mate Lakat <http://blogs.citrix.com/>: Virtual Hypervisor: how to deploy XenServer inside a XenServer <http://blogs.citrix.com/2013/03/18/virtual-hypervisor/> * By Sébastien Han <http://sebastien-han.fr/>: Grizzly availability zones <http://sebastien-han.fr/blog/2013/03/18/grizzly-availability-zones/> * By Yun Mao <http://cloudystuffhappens.blogspot.com/search/label/openstack>: /How to use the ZooKeeper driver for ServiceGroup in OpenStack Nova <http://cloudystuffhappens.blogspot.com/2013/03/zookeeper-and-openstack-nova…>/ * By Kashyap Chamarthy <http://kashyapc.wordpress.com/>: OpenStack --- nova image-create, under the hood <http://kashyapc.wordpress.com/2013/03/11/openstack-nova-image-create-under-…> Security Advisories * OSSA 2013-007] Backend credentials leak in Glance v1 API (CVE-2013-1840) <http://lists.openstack.org/pipermail/openstack-announce/2013-March/000085.h…> * OSSA 2013-008] Nova DoS by allocating all Fixed IPs (CVE-2013-1838) <http://lists.openstack.org/pipermail/openstack-announce/2013-March/000086.h…> * [OSSA 2013-009] Keystone PKI tokens online validation bypasses revocation check (CVE-2013-1865) <http://lists.openstack.org/pipermail/openstack-announce/2013-March/000087.h…> Upcoming Events * OpenStack Hungary Meeting <http://www.meetup.com/OpenStack-Hungary-Meetup-Group/events/109973362/> Mar 25, 2013 -- Budapest, Hungary Details <http://www.meetup.com/OpenStack-Hungary-Meetup-Group/events/109973362/> * Vietnam OpenStack Meeting <https://www.facebook.com/events/467317409990701/> Mar 30, 2013 -- Ho Chi Minh City, Vietnam Details <https://www.facebook.com/events/467317409990701/> * 1st OpenStack User Group Nordics meetup <http://www.meetup.com/OpenStack-User-Group-Nordics/events/95258382/> Apr 03, 2013 -- Kista, Sweden Details <http://www.meetup.com/OpenStack-User-Group-Nordics/events/95258382/> * OpenStack Summit April 2013 <http://www.openstack.org/summit/portland-2013/> Apr 15 -- 18, 2013 -- Portland, OR Details <http://www.openstack.org/summit/portland-2013/> * OpenStack meeting in Cologne <http://www.meetup.com/OpenStack-DACH/events/108876542/> May 04, 2013 -- Cologne, Germany Details <http://www.meetup.com/OpenStack-DACH/events/108876542/> * OpenStack DACH Day <http://www.prweb.com/releases/2013/3/prweb10526716.htm> May 24, 2013 -- Berlin Fairgrounds Details <http://www.prweb.com/releases/2013/3/prweb10526716.htm> * OpenStack Israel <http://www.meetup.com/IGTCloud/events/99146542/> May 27, 2013 -- Tel-Aviv, Israel Details <http://www.meetup.com/IGTCloud/events/99146542/> * OpenStack CEE Day <http://www.openstack.org/> May 29, 2013 -- Budapest Details <http://www.openstack.org/> * OpenStack meeting in Munich <http://www.meetup.com/openstack-de/events/109700562/> Jun 11, 2013 -- Munich, Germany Details <http://www.meetup.com/openstack-de/events/109700562/> * GigaOM Structure <http://event.gigaom.com/structure/> Jun 19 -- 20, 2013 -- San Francisco, CA Details <http://event.gigaom.com/structure/> * OSCON 2013 <http://www.oscon.com/oscon2013> Jul 22 -- 26, 2013 -- Portland, OR Details <http://www.oscon.com/oscon2013> Reports from past events * Event Report: OpenStack workshop Bangalore, India <http://www.openstack.org/blog/2013/03/event-report-openstack-workshop-banga…> * OpenStack and Friends at SCALE 11x <http://www.openstack.org/blog/2013/03/openstack-and-friends-at-scale-11x/> Other News * Amanda Enterprise 3.3 brings advanced backup management features <http://www.zmanda.com/blogs/?p=1053> * Report from the Chairman of the Board, Alan Clark: A Pretty Good Place to Be <http://www.openstack.org/blog/2013/03/a-pretty-good-place-to-be/> * openSUSE 12.3 is out, with OpenStack love <http://www.vuntz.net/journal/post/2013/03/13/openSUSE-12.3-is-out%2C-with-O…> * Chef 11: Interview with Lucas Welch, Director of Communications at Opscode <http://rafstack.tumblr.com/post/45181547441> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-03-19-21.…> and full logs <http://eavesdrop.openstack.org/meetings/project/2013/project.2013-03-19-21.…> Welcome New Contributors Celebrating the first patches submitted this week by: * Christopher Yeoh, IBM * Scott Devoid, ANL * Greg Ball, Rackspace * Andy Hill * Roman Podolyaka, Mirantis * afazekas, Redhat * Senhua Huang, Cisco * Ilya Kharin, Mirantis * Ryan O'Hara, Redhat * Michael Kerrin, HP * Allan Feid /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./

1 0

[OSSA 2013-009] Keystone PKI tokens online validation bypasses revocation check (CVE-2013-1865)
by Thierry Carrez 20 Mar '13

20 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2013-009 CVE: CVE-2013-1865 Date: March 20, 2013 Title: Keystone PKI tokens online validation bypasses revocation check Reporter: Guang Yee (HP) Products: Keystone Affects: Folsom Description: Guang Yee from HP reported a vulnerability in the revocation check for Keystone PKI tokens. Those tokens are supposed to be validated locally using cryptographic checks, but the user also has the option of asking the server to validate them. In that case, the online verification of PKI tokens would bypass the revocation check, potentially affirming revocated tokens are still valid. Only Folsom setups making use of online verification of PKI tokens are affected. Folsom fix: https://review.openstack.org/#/c/24906/ References: https://bugs.launchpad.net/keystone/folsom/+bug/1129713 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2013-1865 - -- Thierry Carrez (ttx) OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJRSdTdAAoJEFB6+JAlsQQj9sUQAL0y9zV5xWHDhAFpfaUGobq6 n5TVeEEf3kb1CIYuVhX6vHuPl2CtoekMSX7MOLehiwmbxGw3B4G7DONZrWuxmzOT J9B9kwMew3K5lE3X4oYH3cHjkTC+ZsnlUBzNiJIXEAkBFaGLmCwbt2eCREBcKvU8 glaPKncO226Y85wMV+Sbe12qDX/82o6TydkcJglhdGF3AYI4813yGb/U41rkKUnq zlsg4Zaea4IFUe23fc9EchRDcgR1N+yfZf04+CKRymhvOcYzSLZDNxJpYN+jwzLy UcB3Jqak8FR0+w3k28bz41COUWtynrTy5FAoDgvGtLM2m1GedMygNKdMb1yERC9z ELWb0P1Z6qt5zZa6BORM185PJ9Dy5zQkOOOH1I7nWjnIa9wFzvbQBKHv5WPARWDu rdAM2I55JmGxo6qFJWK6QnpYI6o6PQjQ2s0FC/H2kCMgXPygURD/X101Y2lOFSZ7 P8OhTKoVYqZf5pImpKCbtm1GHWIpev7BkzWvsFpPhVz4ExHSTsmc1Mk2ugDGQrgO tCcF7Eo0eABepY4qVrSUi4euZvpFsWcjl7GzQ0WLCWyMUdPo9271ZfsgxfPxId7l CMgn2hgpGv5+yTDDg4p8NSqmUp5hSMo/i6zgDrL9XEn4qx5Rr8pNqV/vUhmYQmzV qQqwB3DR57T1eFMlGL7y =9dar -----END PGP SIGNATURE-----

1 0

[OSSA 2013-008] Nova DoS by allocating all Fixed IPs (CVE-2013-1838)
by Thierry Carrez 14 Mar '13

14 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2013-008 CVE: CVE-2013-1838 Date: March 14, 2013 Title: Nova DoS by allocating all Fixed IPs Reporter: Vish Ishaya (Nebula) Products: Nova Affects: All versions Description: Vish Ishaya reported a vulnerability in Nova where there is no quota for Fixed IPs. Previously the instance quota acted as a proxy for a Fixed IP quota, but if your configuration allows an instance to consume more than one Fixed IP via an extension such as multinic then this is no longer true. Running out of Fixed IPs would result in not being able to spawn new instances. Grizzly (development branch) fix: https://review.openstack.org/#/c/24451/ Folsom fix: https://review.openstack.org/#/c/24452/ Essex fix: https://review.openstack.org/#/c/24453/ References: https://bugs.launchpad.net/nova/+bug/1125468 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2013-1838 - -- Thierry Carrez (ttx) OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJRQgtEAAoJEFB6+JAlsQQjf6gP/0Ao3Hq5MSChlbwtjMiUPPlC ralE6V5l3/V/jPJ/XiHrSJo2qbwgil4SSrwj6mDx00bwj3lLyYKV9KjRx9FJjwl0 YuUm/AY1R4/miED8HyjhhteC0xAisqciwZQLrN6DwAdP3YEDZZk0Cfxp3Xw6XxAM SAb2Gp0Ranu0lc7jLBNsp0G4idZvF232kXRDEMgpAwcsjmxh1sl97IBUqq87UJax RDnI2p/bpPahZXBZK4RPZR92IbdVZ4SE+piC0b4ITESdxAh9NadWfUBIkf4fOdvM yVKWFvRMhIFqTFEnpaX/091mOzkHJ8bWRpKImrw3qSLvXzyzlBwuuT0NyL6qDTPQ 0cY9gkiyqOtlvsAxF7tNDHxnIlq/zy86Tvi3KVoyJcUenGPjZwWNINhyvvFWs03t n0W58XQOnXPxYLSI3CG5gUcJUWTbJQKQAapkoMGUASc7kcVCNv334z45Ui4n51o4 5WUOQTzgWJRskqolull7wpScaNoZtQgnnSTHwtAXt4Pykum4N3FEOEo4C/gHa1uz nW8YkZRgoHbGYNypNDDWE6UdPZT/WOO/+RbMQwRVitFJtHzG1FuLa1fNP6mKxDPn vpHnp9jBZlW9OjBZgp7/YqFv586l/xrT1hG3i+I6fq2w5G7Gru5PeRhUElzq4qHF k+FvT1+nkHkvTbMb8z1z =gipy -----END PGP SIGNATURE-----

1 0

[OSSA 2013-007] Backend credentials leak in Glance v1 API (CVE-2013-1840)
by Thierry Carrez 14 Mar '13

14 Mar '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 OpenStack Security Advisory: 2013-007 CVE: CVE-2013-1840 Date: March 14, 2013 Title: Backend credentials leak in Glance v1 API Reporter: Stuart McLaren (HP) Products: Glance Affects: All versions Description: Stuart McLaren from HP reported a vulnerability in the information potentially returned to the user in Glance v1 API. If an authenticated user requests, through the v1 API, an image that is already cached, the headers returned may disclose the Glance operator's backend credentials for that endpoint. Only setups accepting the Glance v1 API and using either the single-tenant Swift store or S3 store are affected. Grizzly (development branch) fix: https://review.openstack.org/24437 Folsom fix: https://review.openstack.org/24438 Essex fix: https://review.openstack.org/24439 References: https://bugs.launchpad.net/glance/+bug/1135541 http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=2013-1840 - -- Thierry Carrez (ttx) OpenStack Vulnerability Management Team -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQIcBAEBCAAGBQJRQfdoAAoJEFB6+JAlsQQj0g4QAL+tmSjDHukvwPZ1D72ClLIR NKV9ceVNT+qus1W5Og2GOKjnrib8X4qkoR/P/Wp+nEoWYosch4YTMvpxc8hamm9P OohMdT4RFxQut//ZR6sn/TC2qLgErovlZRMxBKA43sFqHNbirprF5b9A4fF7glp6 atPAAM7rIHTJDXHvE+a8Qe8qOPKJKP1pOXrSZDL94ZMPq6uAy/0M0v/r/++aAUHy Qr7p2ITuVepJ3IM9/sZ+RQ1PXFya0BGBpLBEgaotBmmOMI/FNbthS3PT8W1ywX0S gpgcBLiXMXoNsMZCmsLeYirzldaT+ZtqjOxYqZYiAjn5cIQ5XXjFPq8w9vlh83An 8IVnanVl4C1M4hnYo3sCeFsCnh5sLdM/LVnd19Wz1k1PHTCM7vrNtU0wqAMQFj2C BQqNMMcQvFZdEjvzYymlm365DP07DHOi/jgK59EWCfeaEHx4Vs4fL0a9nnoxs/fV 8SysPv4A3iAaXDOan+0s+T0dac2/KU2FBio0+cuvV4qASYWN5CHAR9/6icWJQ2qh InUWIqcgwcOqR6azhQHg/ARw7iNZtv+omVvVOYZu6HOiK4BDj8RkQmPyWsis/ekU 4Ez6AyKSDmRHtoR9w7GcM14xCrHyqFfbaGUp+qDI73NNGmbXXtXlVEO8/g2ywbKc F0k3S2Z5fLOPFeo9ll4C =BmKh -----END PGP SIGNATURE-----

1 0