OpenStack Community Weekly Newsletter (Apr 4 – 11)
Take the OpenStack User Survey and Change the (OpenStack) World http://openstack.org/user-survey
Still a few more hours to fill in the OpenStack User Survey.
Heartbleed http://blogs.gnome.org/markmc/2014/04/10/heartbleed/
The bug discovered affecting OpenSSL and “breaking” internet doesn’t directly touch OpenStack but can lead to OpenStack compromise http://lists.openstack.org/pipermail/openstack/2014-April/006539.html. The width of the problem discovered this week is extremely wide though and I think it’s worth spending some more time learning about it. Mark McLoughlin http://blogs.gnome.org/markmc has collected an impressive amount of links where you can learn more.
Security auditing of OpenStack releases https://blog-nkinder.rhcloud.com/?p=51
Nathan Kinder https://blog-nkinder.rhcloud.com/ started a conversation about how to deal with high-level security related questions about OpenStack.
How to govern a project on the scale of OpenStack http://opensource.com/business/14/4/governance-openstack
How an open source project is governed can matter just as much as the features it supports, the speed at which it runs, or the code that underlies it. Some open source projects have what I call a “benevolent dictator for life http://www.theatlantic.com/technology/archive/2014/01/on-the-reign-of-benevolent-dictators-for-life-in-software/283139/.” Others are outgrowths of corporate projects that, while open, still have their goals and code led by the company that manages it. And of course, there are thousands of projects out there that are written and managed by a single person or a small group of people for whom governance is less of an issue than insuring project sustainability http://opensource.com/life/14/1/evaluate-sustainability-open-source-project.
Introducing the OpenStack SDK for PHP http://engineeredweb.com/blog/2014/openstack-sdk-php-intro/
Marrying OpenStack with one of the most popular programming languages on the planet. Write applications to interact with OpenStack public and private clouds, using the APIs. The OpenStack SDK for PHP https://wiki.openstack.org/wiki/OpenStack-SDK-PHP is meant to be by the community and for the community. It will be able to work with clouds from a variety of vendors or vanilla OpenStack setups.
Tearing down obstacles to OpenStack documentation contributions http://justwriteclick.com/2014/04/10/tearing-down-obstacles-to-openstack-documentation-contributions/
Rip. Shred. Tear. Let’s gather up the obstacles to documentation contribution and tear them down one by one. I’ve designed a survey https://docs.google.com/forms/d/136-BssH-OxjVo8vNoOD-gW4x8fDFpvixbgCfeV1w_do/viewform with the help of the OpenStack docs team to determine blockers for docs contributions. If you’ve contributed to OpenStack, pleasefill it out https://docs.google.com/forms/d/136-BssH-OxjVo8vNoOD-gW4x8fDFpvixbgCfeV1w_do/viewform.
The road to Juno Summit – Atlanta 2014
* Applying for Visa? Looking for accommodation in Atlanta? Visit http://openstack.org/summit * Check the official agenda http://openstacksummitmay2014atlanta.sched.org/ * Call for Proposals Open Source @ OpenStack Summit http://www.openstack.org/blog/2014/03/call-for-proposals-open-source-openstack-summit/
Security Advisories and Notices
* XSS in Horizon orchestration dashboard (CVE-2014-0157) http://lists.openstack.org/pipermail/openstack-announce/2014-April/000218.html * RBAC policy not properly enforced in Nova EC2 API (CVE-2014-0167) http://lists.openstack.org/pipermail/openstack-announce/2014-April/000219.html * Remote code execution in Glance Sheepdog backend (CVE-2014-0162) http://lists.openstack.org/pipermail/openstack-announce/2014-April/000220.html * Keystone DoS through V3 API authentication chaining (CVE-2014-2828) http://lists.openstack.org/pipermail/openstack-announce/2014-April/000221.html * Heat templates with invalid references allows unintended network access http://lists.openstack.org/pipermail/openstack/2014-April/006428.html * OpenSSL Heartbleed vulnerability can lead to OpenStack compromise http://lists.openstack.org/pipermail/openstack/2014-April/006539.html
Tips ‘n Tricks
* By Steve Hardy http://hardysteven.blogspot.com/search/label/openstack: Heat auth model updates – part 1 Trusts http://hardysteven.blogspot.com/2014/04/heat-auth-model-updates-part-1-trusts.html * By Adam Young http://adam.younglogic.com/: Teaching Horizon to Share http://adam.younglogic.com/2014/04/teaching-horizon-to-share/ * By Christian Berendt http://www.cberendt.de/: An other Vagrant box with Devstack and Ubuntu 14.04 http://www.cberendt.de/2014/04/an-other-vagrant-box-with-devstack-and-ubuntu-14-04/ * By How To Store Incremental Backups On The Cloudwatt Object Store Using Duplicity http://dev.cloudwatt.com/en/blog/how-to-store-incremental-backups-on-the-cloudwatt-object-store-using-duplicity.html * By Cameron Seader http://blog.seader.us/search/label/OpenStack: Quickly Setting-up an OpenStack Cloud with the SUSE Cloud 3 Admin Appliance http://blog.seader.us/2014/04/quickly-setting-up-openstack-cloud-with.html * By Sean Dague https://dague.net/: Devstack Vagrant https://dague.net/2014/04/06/devstack-vagrant/ * By Cody Bunch http://openstack.prov12n.com/: How to Make A LOT of Devstack with Vagrant http://openstack.prov12n.com/how-to-make-a-lot-of-devstack-with-vagrant/
Reports from Previous Events
* OpenStack Meetup, Coimbatore – 31 March 2014 http://aptira.com/blog/98-openstack-meetup-coimbatore-31-march-2014 * Nordic OpenStack meetup 3 April – hosted by Elastx and Solidfire http://elastx.com/our-blog/openstack-meetup-hosted-by-elastx-and-solidfire
Upcoming Events
* PyCon https://us.pycon.org/2014/ Apr 09 – 17, 2014 – Montreal, Canada Details https://us.pycon.org/2014/ * OpenStack India Meeting http://www.meetup.com/Indian-OpenStack-User-Group/events/173478572/ Apr 12, 2014 – Mumbai, India Details http://www.meetup.com/Indian-OpenStack-User-Group/events/173478572/ * San Antonio OpenStack Meeting http://www.meetup.com/SA-Open-Stackers/events/175211322/ Apr 16, 2014 – San Antonio, TC Details http://www.meetup.com/SA-Open-Stackers/events/175211322/ * SFBay OpenStack Hackathon #OSSFO http://www.meetup.com/openstack/ Apr 17, 2014 – Details http://www.meetup.com/openstack/ * Icehouse Release Party! http://www.meetup.com/Openstack-Amsterdam/events/174447942/ Apr 17, 2014 – Amsterdam, Netherlands Details http://www.meetup.com/Openstack-Amsterdam/events/174447942/ * Running OpenStack User Groups http://www.meetup.com/OpenStack-Online-Meetup/events/174880782/ Apr 17, 2014 – Online Details http://www.meetup.com/OpenStack-Online-Meetup/events/174880782/ * SAFNOG http://www.safnog.org/meetings-future/agenda-2014-safnog-1.htmlApr 22 – 23, 2014 – Johannesburg, South Africa Details http://www.safnog.org/meetings-future/agenda-2014-safnog-1.html * Philly OpenStack Meeting http://www.meetup.com/Philly-OpenStack-Meetup-Group/events/157769942/ Apr 24, 2014 – Philadelphia, PA Details http://www.meetup.com/Philly-OpenStack-Meetup-Group/events/157769942/ * OpenStack India Meeting http://www.meetup.com/Indian-OpenStack-User-Group/events/173701902/ Apr 26, 2014 – Bangalore, India Details http://www.meetup.com/Indian-OpenStack-User-Group/events/173701902/ * OpenStack Day Mexico https://openstackdaylatam.com/?lang=en Apr 29, 2014 – Mexico City, Mexico Details https://openstackdaylatam.com/?lang=en * OpenStack Paris Meeting http://www.meetup.com/OpenStack-France/events/172754772/ Apr 29, 2014 – Paris, France Details http://www.meetup.com/OpenStack-France/events/172754772/ * SFBay Meetup – Beginner track http://www.meetup.com/openstack/events/123227622/ May 01, 2014 – Sunnyvale, CA Details http://www.meetup.com/openstack/events/123227622/ * SFBay OpenStack Hackathon #OSSFO http://www.meetup.com/openstack/ May 01, 2014 – Details http://www.meetup.com/openstack/ * OpenStack Brasil User Group Meeting @ FISL15 http://softwarelivre.org/fisl15 May 07 – 10, 2014 – Porto Alegre, Brasil Details http://softwarelivre.org/fisl15 * OpenStack DACH Day at LinuxTag 2014 http://www.linuxtag.org/2014/en/#openstack May 09, 2014 – Berlin, Germany Details http://www.linuxtag.org/2014/en/#openstack * OpenStack Summit May 2014 http://www.openstack.org/summit/openstack-summit-atlanta-2014/ May 12 – 16, 2014 – Atlanta, GA Details http://www.openstack.org/summit/openstack-summit-atlanta-2014/
Other News
* Why We Craft OpenStack (Featuring Rackspace Principal Architect Kurt Griffiths) http://www.rackspace.com/blog/why-we-craft-openstack-featuring-rackspace-principal-architect-kurt-griffiths/ * OpenStack Israel Podcast, Episode 7 http://cloudifysource.tumblr.com/post/82113910247 * MongoDB 2.6 is out, Marconi will benefit from it http://blog.flaper87.com/post/53440a53d987d2dc534d4530/ * Why I Support Mark McClain for OpenStack Neutron PTL http://sarob.com/2014/04/why-i-support-mark-mcclain-for-openstack-neutron-ptl/ * OpenStack Day Events April – May – June 2014 http://www.openstack.org/blog/2014/04/openstack-day-events-april-may-june-2014/ * Take the OpenStack User Survey and Change the (OpenStack) World https://www.suse.com/communities/conversations/take-openstack-user-survey-change-openstack-world/ * OpenStack Project Meeting: Summary http://eavesdrop.openstack.org/meetings/project/2014/project.2014-04-08-21.03.html and full logs http://eavesdrop.openstack.org/meetings/project/2014/project.2014-04-08-21.03.log.html
Welcome New Reviewers and Developers
Jason Kincl http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personfa79dd2b-efa8-4ae2-a27c-2403097b53cd Manish Godara http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,persone87953ff-6004-4489-8501-d3c010953c14
Choe, Cheng-Dae http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person77f2fe4a-c6d0-4f7f-89de-f1693ad8fe69 Jason Ni http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personfac5629d-0584-4b32-86c2-fa2bddad706d
Juan Antonio Osorio Robles http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person089f126d-502a-4822-b177-84b1f5c2c03e vishal yadav http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personfb3a20f8-13d5-4a0c-98f8-a6206857423b
Peter Jönsson http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person12e8a305-9c1a-4a33-a975-7e688284c325 Amrith http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personae0d8a83-9fe7-42b6-9a11-700669cb8b46
vaibhav http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,persond916cd64-576c-4be4-a826-9016800cc407 Doug Shelley http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,persond28659b8-3c5e-4eb0-8007-1634fc72cbb8
Victor Boivie http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person398b5244-5476-415f-8a79-102c5c138cd9 Aimon Bustardo http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,persond081b5f0-9528-4a2c-9593-bd6b796b9a31
Marc Abramowitz http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person992da121-eafa-4a18-a583-7f4bc7fb2d39 Igor Duarte Cardoso http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personac41219a-48e6-4e9f-a3d6-7eacfcb05913
Latest Activity In Projects
Do you want to see at a glance the bugs filed and solved this week? Latest patches submitted for review? Check out the individual project pages on OpenStack Activity Board – Insights http://activity.openstack.org/data/display/OPNSTK2/.
* Telemetry (Ceilometer) http://activity.openstack.org/data/display/OPNSTK2/ceilometer * Block Storage (Cinder) http://activity.openstack.org/data/display/OPNSTK2/cinder * Image Service (Glance) http://activity.openstack.org/data/display/OPNSTK2/glance * Orchestration API http://activity.openstack.org/data/display/OPNSTK2/heat (Heat) http://activity.openstack.org/data/display/OPNSTK2/heat * Dashboard (Horizon) http://activity.openstack.org/data/display/OPNSTK2/horizon * Bare Metal Provisioning (Ironic) http://activity.openstack.org/data/display/OPNSTK2/ironic * Identity (Keystone) http://activity.openstack.org/data/display/OPNSTK2/keystone * Manuals http://activity.openstack.org/data/display/OPNSTK2/openstack-manuals * Networking (Neutron) http://activity.openstack.org/data/display/OPNSTK2/neutron * Compute (Nova) http://activity.openstack.org/data/display/OPNSTK2/nova * Data Processing (Sahara) http://stackalytics.com/?release=icehouse&metric=commits&project_type=openstack&module=sahara-group&company=&user_id= * Object Storage (Swift) http://activity.openstack.org/data/display/OPNSTK2/swift * Database As A Service (Trove) http://activity.openstack.org/data/display/OPNSTK2/trove
/The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./
participants (1)
-
Stefano Maffulli