What you need to know about Astara <http://superuser.openstack.org/articles/what-you-need-to-know-about-astara> Henrik Rosendahl, CEO of Akanda, introduces OpenStack's newest project, an open-source network orchestration platform built by OpenStack operators for OpenStack clouds. An OpenStack security primer <http://superuser.openstack.org/articles/an-openstack-security-primer> Meet the troubleshooters and firefighters of the OpenStack Security project and how you can get involved. The Road to Tokyo The OpenStack Summit Tokyo will sell out! Register NOW! <https://www.eventbrite.com/e/openstack-summit-october-2015-tokyo-tickets-17356780598> The schedule and mobile app for the OpenStack Summit in Tokyo are now available <https://www.openstack.org/summit/tokyo-2015/schedule/> If you have already downloaded an OpenStack Summit mobile app before, no need to do it again! Just refresh your existing app. OpenStack training sessions available in Tokyo <https://www.openstack.org/blog/2015/10/openstack-training-sessions-available-in-tokyo/> Several ecosystem companies are offering training in Tokyo during the week of the Summit. Check out the sessions available and plan your travel accordingly The Summit maps are now available online <https://www.openstack.org/summit/tokyo-2015/campus-maps> Speakers, sponsors, and ATC registration codes deactivate 10/19, so register now <https://www.eventbrite.com/e/openstack-summit-october-2015-tokyo-tickets-17356780598>! <http://superuser.openstack.org/articles/coming-soon-superuser-tv> Community feedback OpenStack is always interested in feedback and community contributions, if you would like to see a new section in the OpenStack Weekly Community Newsletter or have ideas on how to present content please get in touch: community@openstack.org <mailto:community@openstack.org>. Reports from Previous Events None this week Deadlines and Contributors Notifications Liberty Release Oct., 15, 2015 <https://wiki.openstack.org/wiki/Liberty_Release_Schedule> Outreachy Mentorship Application deadline: Nov., 02, 2015, 07:00 pm UTC <https://www.gnome.org/outreachy/> Call for papers: FOSDEM’16 <https://fosdem.org/2016/news/2015-09-24-call-for-participation/> deadline: October 30, 2015 PyCon 2016 <https://us.pycon.org/2016/speaking/> deadline: Jan 3, 2016 USENIX Annual Technical Conference 2016 <https://www.usenix.org/conference/atc16/call-for-papers> deadline: February 1, 2016 Superuser Awards: your vote counts <http://superuser.openstack.org/articles/superuser-awards-your-vote-counts> (voting closes on 10/12 at 11:59 pm PT) Vote for one of the four finalists: FICO <http://superuser.openstack.org/articles/tokyo-superuser-awards-finalist-fico>, GoDaddy <http://superuser.openstack.org/articles/tokyo-superuser-awards-finalist-godaddy>, Lithium Technologies <http://superuser.openstack.org/articles/tokyo-superuser-awards-finalist-lithium-technologies>, or NTT <http://superuser.openstack.org/articles/tokyo-superuser-awards-finalist-ntt-group>. The winner will be announced at the Tokyo Summit. (Vote here <https://www.surveymonkey.com/r/SuperuserAwards>) Security Advisories and Notices [openstack-announce] [OSSA 2015-021] Nova network security group changes are not applied to running instances (CVE-2015-7713) <http://lists.openstack.org/pipermail/openstack-announce/2015-October/000683.html> Tips ‘n Tricks By Belmiro Moreira: Scheduling and disabling Cells <http://openstack-in-production.blogspot.com/2015/10/scheduling-and-disabling-cells.html> Upcoming Events <https://www.openstack.org/community/events> Oct 10, 2015 OpenStack India Meetup, Pune Pune, IN <http://www.meetup.com/Indian-OpenStack-User-Group/events/225039190/> Oct 12, 2015 OpenStack Cinder deep dive Stockholm, SE <http://www.meetup.com/Indian-OpenStack-User-Group/events/225039190/> Oct 13, 2015 Pub Gathering Manchester, GB <http://www.meetup.com/Manchester-OpenStack-Meetup/events/224421141/> Oct 14 - 15, 2015 Monolithic to Cloud-Native Apps: Lessons Learned by HP/ Neutron with Akanda <http://www.meetup.com/OpenStack-New-York-Meetup/events/225737696/> Oct 14, 2015 3. Istanbul Meetup: OpenStack'de Ceph Storage kullanimi Istanbul, TR <http://www.meetup.com/Turkey-OpenStack-Meetup/events/225916298/> Oct 14, 2015 教你玩東京~~東京高峰會介紹Taipei, TW <http://www.meetup.com/OpenStack-Taiwan-User-Group/events/225859043/> Oct 15, 2015 OpenStack Howto part 7 - Data Processing Prague, CZ <http://www.meetup.com/OpenStack-Czech-User-Group-Meetup/events/222955596/> What you need to know from the developer's list (WIP) Success Bot Says <https://wiki.openstack.org/wiki/Successes> harlowja: The OpenStack Universe [1] krotscheck: OpenStack CI posted first package to NPM [2] markvan: OpenStack Chef Cookbook team recently put in place all the pieces to allow for a running a full (devstack like) CI test against all the cookbook projects commits. proton driver running with Kerberos for encryption and authentication Tell us yours via IRC with a message "#success [insert success] Proposed Design Summit allocation <http://lists.openstack.org/pipermail/openstack-dev/2015-October/076000.html> Track layout is on the official schedule [3]. PTLs or liaisons can start pushing up schedule details. The wiki [4] explains how. Reach out to ttx or thingee on IRC if there are any issues. Devstack extras.d support going away M-1 <http://lists.openstack.org/pipermail/openstack-dev/2015-October/076310.html> Sean Dague mentions extras.d is devstack plugins, and has existed for 10 months. Projects should prioritize getting to the real plugin architecture. Sean compiled a list of the top 25 jobs (by volume) that giving warnings of breaking [5]. Naming N and O Release Now <http://lists.openstack.org/pipermail/openstack-dev/2015-October/076327.html> Sean Dague suggests since we already have the locations for N and O summits, we should start the name polls now. Carol Barrett mentions that the current release naming process only allows the release to be named is announced and no sooner than the opening of development of the previous release [6]. Consensus is made to have this changed. Monty mentions this option was discussed in the past, but it was changed because we wanted to keep a sense of ownership by the people who actually worked on the release. Sean will propose this to the next group of TC members. Requests + urllib3 + distro packages <http://lists.openstack.org/pipermail/openstack-dev/2015-October/076518.html> Problems: Requests python library has very very specific versions of urllib3 it works with. So specific that they aren't always released. Linux vendors often unbundle urllib3 from requests and then apply what patches were needed to their urllib3 while not updating their requests package dependencies. We use urllib3 and requests in some places, but don't mix them up. If we have a distro-alterted requests + pip installed urllib3, request usually breaks. Lots of places the last problem can happen; they all depend on us having a dependency on requests that is compatible with the version installed by the distro, but a urllib3 dependency that triggers an upgrade of just urllib3. When constraints are in use, the requests version has to match the distro requests version exactly, but that will happen from time to time. Examples include: DVSM test jobs where the base image already has python-requests installed. Virtualenvs where the system-site-packages are enabled. Solutions: Make sure none of our testing environments include distro requests packages. Monty notes we're working hard to make this happen. Make our requirements be tightly matched to what requests needed to deal with unbundling. In progress by Matt Riedemann [7]. Teach pip how to identify and avoid this situation by always upgrading requests. Get the distros to stop un-vendoring urllib3. [1] - https://gist.github.com/harlowja/e5838f65edb0d3a9ff8a [2] - https://www.npmjs.com/package/eslint-config-openstack [3] - https://mitakadesignsummit.sched.org/ [4] - https://wiki.openstack.org/wiki/Design_Summit/SchedulingForPTLs [5] - http://lists.openstack.org/pipermail/openstack-dev/2015-October/076559.html [6] - http://governance.openstack.org/reference/release-naming.html [7] - https://review.openstack.org/#/c/213310/