[Openstack] Openstack Digest, Vol 27, Issue 10
Naveen Yadav
naveen.yadav at aricent.com
Tue Sep 22 11:20:09 UTC 2015
Hi Murali
Not sure if you are able to resolve your issue, if not please check this https://www.mirantis.com/blog/configuring-floating-ip-addresses-networking-openstack-public-private-clouds/
It may help you.
Regards
Naveen
From: murali Srikanth [mailto:srikanth.as.avm at gmail.com]
Sent: Friday, September 11, 2015 8:45 PM
To: Naveen Yadav
Cc: openstack at lists.openstack.org
Subject: Re: [Openstack] Openstack Digest, Vol 27, Issue 10
Hi Naveen,
Thanks for your quick response, Just now i check the firewall status on my three nodes.
Please find the below details:
root at controller:~# sudo ufw status verbose
Status: inactive
root at network:~# sudo ufw status verbose
Status: inactive
root at compute:~# sudo ufw status verbose
Status: inactive
Thanks & regards,
Srikanth VM
9035719966
On Fri, Sep 11, 2015 at 7:06 PM, Naveen Yadav <naveen.yadav at aricent.com<mailto:naveen.yadav at aricent.com>> wrote:
We are not able to ping openstack instance external Ip address.
>> check your FW, you can try after disabling it.
From: murali Srikanth [mailto:srikanth.as.avm at gmail.com<mailto:srikanth.as.avm at gmail.com>]
Sent: Friday, September 11, 2015 6:09 PM
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Re: [Openstack] Openstack Digest, Vol 27, Issue 10
Hi,
I need your assistance on this. We setup openstack 3-node architecture.
OS: Ubuntu 14.04 LTS
Controller Node 1 NIC
Network Node 2 NIC's
Compute Node 2 NIC's
We followed ( http://docs.openstack.org/kilo/install-guide/install/apt/content/ ) this link for openstack setup.
We created router and tenant network as demo user
We created external network as admin user.
We blindly followed the above url and everything is working fine, except below mentioned things.
Our Problem:
We are not able to ping openstack router gate way IP address.
We are not able to ping openstack instance external Ip address.
Thanks in advance.
Thanks & Regards,
Srikanth VM
On Fri, Sep 11, 2015 at 5:30 PM, <openstack-request at lists.openstack.org<mailto:openstack-request at lists.openstack.org>> wrote:
Send Openstack mailing list submissions to
openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
or, via email, send a message with subject or body 'help' to
openstack-request at lists.openstack.org<mailto:openstack-request at lists.openstack.org>
You can reach the person managing the list at
openstack-owner at lists.openstack.org<mailto:openstack-owner at lists.openstack.org>
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Openstack digest..."
Today's Topics:
1. about network configuration (applyhhj)
2. Re: about network configuration (Nasir Mahmood)
3. Re: question about manila in relationship to nfs-ganesha and
glusterfs (Ramana Raja)
4. help! (Heidi Bretz)
5. ??????? LinkedIn (??) ???????????????? (venkatesh kotipalli)
6. GBP(Group Based Policy) REST APIs (Shital Patil)
----------------------------------------------------------------------
Message: 1
Date: Thu, 10 Sep 2015 20:50:54 +0800
From: "applyhhj"<applyhhj at 163.com<mailto:applyhhj at 163.com>>
To: "openstack"<openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: [Openstack] about network configuration
Message-ID: <24a2b2fb.5ffe.14fb74f132c.Coremail.applyhhj at 163.com<mailto:24a2b2fb.5ffe.14fb74f132c.Coremail.applyhhj at 163.com>>
Content-Type: text/plain; charset="utf-8"
Hi Everyone,
I am new to openstack. When following the Install Guidance(kilo version) for Ubuntu, I was unable to correctly configure the network. I followed the Guidance and set up 1 controller node, 1 network node and 3 computing nodes. All configuration is almost the same as the Guidance. However, if I set the gateway of management interface in network node to 10.0.0.1 and change external interface to ?dhcp? mode, which is required by my external network environment, then I cannot ping other nodes from network nodes. So I comment the gateway configuration and everything works fine. But only network node can access to external network, other nodes are not able to ping outside website. It will throw ?unknown host? error. Can anyone help me with this problem please? Thank you very much!!
2015-09-10
applyhhj
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150910/21d09df9/attachment-0001.html>
------------------------------
Message: 2
Date: Thu, 10 Sep 2015 18:17:29 +0500
From: Nasir Mahmood <nasir.mahmood at gmail.com<mailto:nasir.mahmood at gmail.com>>
To: applyhhj <applyhhj at 163.com<mailto:applyhhj at 163.com>>
Cc: openstack <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: Re: [Openstack] about network configuration
Message-ID:
<CACnWpYN39vcMegx8t7gAfwYLyknUJZKPDpQBw303PYebNokjcw at mail.gmail.com<mailto:CACnWpYN39vcMegx8t7gAfwYLyknUJZKPDpQBw303PYebNokjcw at mail.gmail.com>>
Content-Type: text/plain; charset="utf-8"
hi
The gateway 10.0.0.1 is for only those hosts where you configure them
within the physical network requiring outside access. In this case, where
you wouldn't require any outside access to this private or management LAN
of 10.0.x.x, I would recommend not to use any gateway at all ( only if you
are connecting these interfaces using small network switch or a VLAN ).
The other error that might be due to DNS issue. what you getting when you
type 'nslookup yahoo.com<http://yahoo.com> or nslookup google.com<http://google.com>'
what are you routing entries on private and public LAN interfaces and have
you configured them to be isolated from each other?
On Thu, Sep 10, 2015 at 5:50 PM, applyhhj <applyhhj at 163.com<mailto:applyhhj at 163.com>> wrote:
> Hi Everyone,
>
> I am new to openstack. When following the Install Guidance(kilo
> version) for Ubuntu, I was unable to correctly configure the network. I
> followed the Guidance and set up 1 controller node, 1 network node and 3
> computing nodes. All configuration is almost the same as the Guidance.
> However, if I set the gateway of management interface in network node to
> 10.0.0.1 and change external interface to ?dhcp? mode, which is required by
> my external network environment, then I cannot ping other nodes from
> network nodes. So I comment the gateway configuration and everything works
> fine. But only network node can access to external network, other nodes are
> not able to ping outside website. It will throw ?unknown host? error. Can
> anyone help me with this problem please? Thank you very much!!
>
>
>
>
> 2015-09-10
> ------------------------------
> applyhhj
>
> _______________________________________________
> Mailing list:
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
>
--
Nasir Mahmood
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150910/5229c1d2/attachment-0001.html>
------------------------------
Message: 3
Date: Thu, 10 Sep 2015 15:07:24 +0000 (UTC)
From: Ramana Raja <rraja at redhat.com<mailto:rraja at redhat.com>>
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Re: [Openstack] question about manila in relationship to
nfs-ganesha and glusterfs
Message-ID: <loom.20150910T165214-833 at post.gmane.org<mailto:loom.20150910T165214-833 at post.gmane.org>>
Content-Type: text/plain; charset=utf-8
Hi Andrea,
> Andrea Y Ma <ayma at ...<mailto:ayma at ...>> writes:
> I'm trying to use devstack with manila and nfs-ganesha with glusterfs as
> the backend
>
> Environment: I have glusterfs installed on two bare metal systems and
> devstack using kilo installed on another bare metal system.
>
> I'm a little confused about how I should be using ganesha nfs with
> glusterfs as the backend.
>
> Should nfs-ganesha be installed in:
> a) my glusterFS servers and update the manila.conf setting
> glusterfs_nfs_server_type= Ganesha
> b) my devstack
> c) a service VM that I manually spawn?
Very sorry about the late reply. We've been held up by our deliverables for the
Liberty release. Thanks to your questions it's been easy for us to figure out
the gaps in our documentation. We definitely plan to cover the misses for
Liberty. For now, I've answered your questions below.
The NFS-Ganesha server can be installed in a), b) or c). To use
Ganesha-GlusterFS with Manila, Manila's share service needs root access to the
Ganesha server and the GlusterFS server machines to perform privileged actions.
This can be done by enabling password-less ssh root login for the manila
service user to the Ganesha server and the GlusterFS server machines when both
these servers run in machines remote to the manila service. And then, Manila
config options need to be set to identify the Ganesha and GlusterFS servers.
>
> I see the following link:
> http://docs.openstack.org/developer/manila/devref/ganesha.html
> which points to there being ganesha support built into manila.
> The only requirement is that I have nfs-ganesha 2.1 or later.
> This would seem to imply that I should have nfs-ganesha installed
> on my devstack instance where manila is running. However from the
> values in the wiki I'm not sure how to point the nanila.conf file
> to use those parameters. Should I just add them to the glusterfs
> section I have or do I make a new ganesha section and update a
> manila config setting?
You can add the ganesha config options to the glusterfs section. Here's an
example,
##
## glusterfs-ganesha section
[glusterfs_ganesha1]
share_driver = manila.share.drivers.glusterfs.GlusterfsShareDriver
driver_handles_share_servers = False
## config option specifying the GlusterFS volume and GlusterFS server node
glusterfs_target = root at 172.16.53.14:/manila-nfs-volume<mailto:root at 172.16.53.14:/manila-nfs-volume>
glusterfs_nfs_server_type = Ganesha
## Config option indicating the IP of the Ganesha server node
## Here Ganesha server and GlusterFS server are in the same machine.
glusterfs_ganesha_server_ip = 172.16.53.14
ganesha_service_name = nfs-ganesha
share_backend_name = GLUSTERFS_GANESHA
## End of Config file
It's not necessary for NFS-Ganesha to run in the GlusterFS server machine. It
can run on a machine that can connect to the GlusterFS server, Manila host,
and the Manila client's network. The manila-share service figures out Ganesha
server's location using the "glusterfs_ganesha_server_ip" option. The
glusterfs driver doc should've covered this option, but it does not. This needs
to be sorted out.
The ganesha library in Manila makes use of NFS-Ganesha's D-Bus service and
Systemd/Upstart service file. Check whether they're available in the Ganesha
server machine. A key yet easy-to-miss step to configure Ganesha for Manila
is to create a ganesha export directory with an empty file 'INDEX.conf'
within it.
This file needs to be included by the Ganesha's config file, done by adding the
following line to ganesha.conf,
%include <ganesha_export_dir>/INDEX.conf
The above step is covered in the ganesha doc.
> In the glusterFS driver I saw a ganesha reference in this link:
> http://docs.openstack.org/developer/manila/devref/glusterfs_driver.html
> So this made me wonder if nfs-ganesha should be installed on the
> baremetals running glusterfs. I don't see a client/server nfs-ganesha
> rpm so was thinking I need to install nfs-ganesha on both the
> devstack and the glusterfs servers. Please correct me if I am wrong.
> The instructions I found for nfs-ganesha was the following:
> http://blog.gluster.org/2014/09/glusterfs-and-nfs-ganesha-integration/
The following two NFS-Ganesha rpms need to be installed, nfs-ganesha and
nfs-ganesha-fsal-gluster(for nfs-ganesha v2.1)/nfs-ganesha-gluster(for
nfs-ganesha v2.2)
I'm afraid that the gluster blog you mention here is dated. I've requested
the gluster community to update this doc.
>
>
> I was also looking at this video:
> https://www.youtube.com/watch?v=1zUSFzbhThM
> #vBrownBag 2014 OpenStack Paris - Bill Owen, Csaba Henk ?
> Supporting NFS Ganesha in Manila)
> In the video it shows a slide titled "Improved Ganesha-Based
> Drivers with Service VM". I'm wondering how the serviceVM got generated.
> When I tried just with the glusterFsShareDriver I did not notice a service
> VM get spawned. Perhaps I had an error in my setup for using the
> glusterFSShareDriver so wanted to make sure. Or perhaps I need to do some
>
> combination of the generic and glusterFsShareDrivers because I did see
> with
> the generic driver a service VM getting spawned. Or am I supposed to
> manually spawn a service VM and install nfs-ganesha on that newly
> spawned service VM. If so how do I tell manila about it?
The GlusterfsShaserDriver with Ganesha does not yet suppport handling of share
servers. The behaviour that you observe is expected. And the topic of the slide
in the Paris talk still remains a Blueprint that's yet to be implemented.
>
> Once I have it running then do I need to do something different for the
> share protocol or is there a document on what the extra-specs should be?
By default, Manila's DevStack plugin sets up manila.conf to allow NFS and CIFS
to be used as share protocols. It also creates a default share type with the
spec "driver_handles_share_servers" as True. "glusterfs" driver with Ganehsa
does not handle share servers so you'd need to create a share type with the
spec set as False. Here's how you can do it as an OpenStack admin,
$ manila type-create gluster_ganesha false
You can also add the following extra spec type,
$ manila type-key gluster_ganesha set share_backend_name=GLUSTERFS_GANESHA
And in the current master(Liberty in progress), not in Kilo, you'd need to add
the following step,
$ manila type-key gluster_ganesha set snapshot_support=False
You can now create a share using glusterfs driver,
$ manila create --share-type gluster_ganesha NFS 1
Once you've created a share, you'd like to know about the bug,
https://bugs.launchpad.net/manila/+bug/1493080
that'd be fixed in Liberty. Not sure if the fix would be backported to Kilo.
Thanks,
Ramana
------------------------------
Message: 4
Date: Thu, 10 Sep 2015 11:38:01 -0700
From: "Heidi Bretz" <heidi at openstack.org<mailto:heidi at openstack.org>>
To: <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: [Openstack] help!
Message-ID: <005b01d0ebf7$d3c2e8c0$7b48ba40$@openstack.org<http://openstack.org>>
Content-Type: text/plain; charset="us-ascii"
Please unsubscribe me
-----Original Message-----
From: openstack-request at lists.openstack.org<mailto:openstack-request at lists.openstack.org>
[mailto:openstack-request at lists.openstack.org<mailto:openstack-request at lists.openstack.org>]
Sent: Wednesday, September 09, 2015 5:00 AM
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Openstack Digest, Vol 27, Issue 8
Send Openstack mailing list submissions to
openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
or, via email, send a message with subject or body 'help' to
openstack-request at lists.openstack.org<mailto:openstack-request at lists.openstack.org>
You can reach the person managing the list at
openstack-owner at lists.openstack.org<mailto:openstack-owner at lists.openstack.org>
When replying, please edit your Subject line so it is more specific than
"Re: Contents of Openstack digest..."
Today's Topics:
1. Console via NoVNC showing garbled screen for Windows XP guest
(Silvano Cirujano Cuesta)
2. port-delete issue (Yngvi P?ll ?orfinnsson)
3. Re: Query regarding contribution for monitoring of Nova and
Swift (John Dickinson)
4. Re: Query regarding contribution for monitoring of Nova and
Swift (Erik McCormick)
5. Re: port-delete issue (Brian Haley)
6. Re: port-delete issue (Yngvi P?ll ?orfinnsson)
7. Re: port-delete issue (Yngvi P?ll ?orfinnsson)
8. Re: port-delete issue (Brian Haley)
9. Re: port-delete issue (Yngvi P?ll ?orfinnsson)
10. [OSSA 2015-018] Neutron firewall rules bypass through port
update (CVE-2015-5240) (Tristan Cacqueray)
11. Devstack multinode setup integration with Opendaylight
(saurabh suman)
12. Re: port-delete issue (Yngvi P?ll ?orfinnsson)
13. [openstack][swift]Got error when installing swift all in one.
(hao wang)
14. Re: [openstack][swift]Got error when installing swift all in
one. (Kota TSUYUZAKI)
15. Cannot Attach Volumes Via Horizon (Ludwig Tirazona)
16. Neutron with apache2 wsgi module don't ack rabbitMQ messages
(Heiko Kr?mer)
----------------------------------------------------------------------
Message: 1
Date: Tue, 8 Sep 2015 17:25:14 +0200
From: Silvano Cirujano Cuesta <silvano.cirujano-cuesta at siemens.com<mailto:silvano.cirujano-cuesta at siemens.com>>
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: [Openstack] Console via NoVNC showing garbled screen for
Windows XP guest
Message-ID: <55EEFDDA.4040505 at siemens.com<mailto:55EEFDDA.4040505 at siemens.com>>
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Hi,
We have a test installation of OpenStack where we can instantiate VMs via
Horizon without problems.
But when we try to view the graphical console of VMs hosting a WindowsXP
installation we get the garbled screen that you can see in the screenshot.
Did anybody observed something similar? I couldn't find anybody describing
similar effects in the internet...
The graphical console via virt-manager looks good, so the QEMU VNC server is
working fine.
The boot-up splash screen also looks good with Horizon, so the VNC
web-client (right now NoVNC) works at least partially.
Since other VNC clients work fine, I think it's an issue with the NoVNC
client.
Some information about our environment:
- OpenStack version: Kilo
- OpenStack nodes running as VMs in a server that is behind a gateway,
therefore network latencies can be high
Any help first to find out the origin of the issue and then to fix it will
be appreciated!
Regards,
Silvano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: novnc.png
Type: image/png
Size: 46222 bytes
Desc: not available
URL:
<http://lists.openstack.org/pipermail/openstack/attachments/20150908/79cc1aa
5/attachment-0001.png<http://lists.openstack.org/pipermail/openstack/attachments/20150908/79cc1aa5/attachment-0001.png>>
------------------------------
Message: 2
Date: Tue, 8 Sep 2015 16:01:11 +0000
From: Yngvi P?ll ?orfinnsson <yngvith at siminn.is<mailto:yngvith at siminn.is>>
To: "openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>" <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: [Openstack] port-delete issue
Message-ID: <1397f802959543b18f1339ac11738929 at simi-mbx-04.siminn.is<mailto:1397f802959543b18f1339ac11738929 at simi-mbx-04.siminn.is>>
Content-Type: text/plain; charset="iso-8859-1"
HI
I can't delete a subnet (id f505a109-07a7-420a-ae6b-aa5995126be7 ), because
one port is still in use.
root at opst-ctrl1-dev:/# neutron subnet-delete
f505a109-07a7-420a-ae6b-aa5995126be7
Unable to complete operation on subnet f505a109-07a7-420a-ae6b-aa5995126be7.
One or more ports have an IP allocation from this subnet. (HTTP 409)
(Request-ID: req-fbd64f19-2888-4d87-8e60-bc2cc920cd12)
This is the port in use:
root at opst-ctrl1-dev:/# neutron port-list | grep
f505a109-07a7-420a-ae6b-aa5995126be7
| 220f1ad2-10bb-4d17-8cc5-3ad4f86f0b00 | | fa:16:3e:15:20:59 |
{"subnet_id": "f505a109-07a7-420a-ae6b-aa5995126be7", "ip_address":
"157.157.8.114"} |
root at opst-ctrl1-dev:/#
But I can't delete the port
root at opst-ctrl1-dev:/# neutron port-delete
220f1ad2-10bb-4d17-8cc5-3ad4f86f0b00
Port 220f1ad2-10bb-4d17-8cc5-3ad4f86f0b00 has owner network:floatingip and
therefore cannot be deleted directly via the port API. (HTTP 409)
(Request-ID: req-4823d685-6dd2-4f31-aa8c-0c8b8aa624a0)
There are no floating ip's left on the system (I've already deleted them)
root at opst-ctrl1-dev:/# neutron floatingip-list
thus the list is empty.
Listing this up in the db shows nothing either:
MariaDB [neutron]> select * from floatingips; Empty set (0.00 sec)
Can anyone help on this matter, i.e. how can I delete the port ( and also
the subnet) ?
Best regards
Yngvi
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.openstack.org/pipermail/openstack/attachments/20150908/e6d5024
b/attachment-0001.html<http://lists.openstack.org/pipermail/openstack/attachments/20150908/e6d5024b/attachment-0001.html>>
------------------------------
Message: 3
Date: Tue, 08 Sep 2015 09:26:18 -0700
From: "John Dickinson" <me at not.mn<mailto:me at not.mn>>
To: "pragya jain" <prag_2648 at yahoo.co.in<mailto:prag_2648 at yahoo.co.in>>
Cc: Aparna Datt <aparna.datt at gmail.com<mailto:aparna.datt at gmail.com>>, OpenStack Mailing List
<openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>, Anita Goel <goel.anita at gmail.com<mailto:goel.anita at gmail.com>>
Subject: Re: [Openstack] Query regarding contribution for monitoring
of Nova and Swift
Message-ID: <BD31EA44-72B4-4510-B36A-5525C3CAE230 at not.mn<mailto:BD31EA44-72B4-4510-B36A-5525C3CAE230 at not.mn>>
Content-Type: text/plain; charset="utf-8"
I'm the Project Technical Lead for Swift, and I'd be happy to look over a
summary of your work about monitoring Swift. Feel free to email me directly
or find me in #openstack-swift on IRC (I'm notmyname).
--John
On 8 Sep 2015, at 3:20, pragya jain wrote:
> ?Hello all
> Me and my colleague, aparna are carrying out research in the area of
> cloud computing under Department of CS, University f Delhi.? We would
> like to contribute our research work regarding monitoring of Nova and
> Swift. We would appreciate if we can find the appropriate link with
> whom we can connect to know if our work is relevant for contribution.
> -----RegardsPragya JainDepartment of Computer ScienceUniversity of
> DelhiDelhi, India_______________________________________________
> Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 801 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.openstack.org/pipermail/openstack/attachments/20150908/4fd06d1
f/attachment-0001.pgp<http://lists.openstack.org/pipermail/openstack/attachments/20150908/4fd06d1f/attachment-0001.pgp>>
------------------------------
Message: 4
Date: Tue, 8 Sep 2015 12:42:33 -0400
From: Erik McCormick <emccormick at cirrusseven.com<mailto:emccormick at cirrusseven.com>>
To: pragya jain <prag_2648 at yahoo.co.in<mailto:prag_2648 at yahoo.co.in>>
Cc: Aparna Datt <aparna.datt at gmail.com<mailto:aparna.datt at gmail.com>>, OpenStack Mailing List
<openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>, Anita Goel <goel.anita at gmail.com<mailto:goel.anita at gmail.com>>
Subject: Re: [Openstack] Query regarding contribution for monitoring
of Nova and Swift
Message-ID:
<CAHUi5cPO4q351bezn1XBwKXWg0rxnKL06JA6ci1utEvvECaceg at mail.gmail.com<mailto:CAHUi5cPO4q351bezn1XBwKXWg0rxnKL06JA6ci1utEvvECaceg at mail.gmail.com>>
Content-Type: text/plain; charset=UTF-8
On Tue, Sep 8, 2015 at 6:20 AM, pragya jain <prag_2648 at yahoo.co.in<mailto:prag_2648 at yahoo.co.in>> wrote:
> Hello all
>
> Me and my colleague, aparna are carrying out research in the area of
> cloud computing under Department of CS, University f Delhi. We would
> like to contribute our research work regarding monitoring of Nova and
> Swift. We would appreciate if we can find the appropriate link with
> whom we can connect to know if our work is relevant for contribution.
You may want to cross-post this to openstack-operators. There is a Tools &
Monitoring working group to help define best practices and share tools and
configurations. Here's a link to the WG wiki and some of the stuff they've
been working on.
https://wiki.openstack.org/wiki/Tools_and_Monitoring_WG
https://wiki.openstack.org/wiki/Operations/Monitoring
https://wiki.openstack.org/wiki/Operations/Tools
> -----
> Regards
> Pragya Jain
> Department of Computer Science
> University of Delhi
> Delhi, India
>
> _______________________________________________
> Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
-Erik
------------------------------
Message: 5
Date: Tue, 8 Sep 2015 12:45:27 -0400
From: Brian Haley <brian.haley at hp.com<mailto:brian.haley at hp.com>>
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Re: [Openstack] port-delete issue
Message-ID: <55EF10A7.5080607 at hp.com<mailto:55EF10A7.5080607 at hp.com>>
Content-Type: text/plain; charset=windows-1252; format=flowed
On 09/08/2015 12:01 PM, Yngvi P?ll ?orfinnsson wrote:
> HI
>
> I can?t delete a subnet (id f505a109-07a7-420a-ae6b-aa5995126be7 ),
> because one port is still in use.
>
> root at opst-ctrl1-dev:/# neutron subnet-delete
> f505a109-07a7-420a-ae6b-aa5995126be7
>
> Unable to complete operation on subnet
> f505a109-07a7-420a-ae6b-aa5995126be7. One or more ports have an IP
allocation from this subnet. (HTTP 409) (Request-ID:
> req-fbd64f19-2888-4d87-8e60-bc2cc920cd12)
Do you have a router on the subnet? Try deleting it.
-Brian
------------------------------
Message: 6
Date: Tue, 8 Sep 2015 17:08:16 +0000
From: Yngvi P?ll ?orfinnsson <yngvith at siminn.is<mailto:yngvith at siminn.is>>
To: Brian Haley <brian.haley at hp.com<mailto:brian.haley at hp.com>>, "openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>"
<openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: Re: [Openstack] port-delete issue
Message-ID: <e10fa1372973473fbe8d8f6ff1282e7e at simi-mbx-04.siminn.is<mailto:e10fa1372973473fbe8d8f6ff1282e7e at simi-mbx-04.siminn.is>>
Content-Type: text/plain; charset="iso-8859-1"
HI
I don't see a router attached :
root at opst-ctrl1-dev:/# neutron subnet-show ext-subnet
+-------------------+----------------------------------------------------+
| Field | Value |
+-------------------+----------------------------------------------------+
| allocation_pools | {"start": "157.157.8.100", "end": "157.157.8.200"} |
| cidr | 157.157.8.0/24<http://157.157.8.0/24> |
| dns_nameservers | 212.30.200.199 |
| | 212.30.200.200 |
| enable_dhcp | True |
| gateway_ip | 157.157.8.1 |
| host_routes | |
| id | f505a109-07a7-420a-ae6b-aa5995126be7 |
| ip_version | 4 |
| ipv6_address_mode | |
| ipv6_ra_mode | |
| name | ext-subnet |
| network_id | 523721c5-ea5d-42a1-8920-8bc75010f273 |
| tenant_id | 1dda2478e30d44dda0ca752c6047725d |
+-------------------+----------------------------------------------------+
root at opst-ctrl1-dev:/#
best regards
Yngvi
-----Original Message-----
From: Brian Haley [mailto:brian.haley at hp.com<mailto:brian.haley at hp.com>]
Sent: 8. september 2015 16:45
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Re: [Openstack] port-delete issue
On 09/08/2015 12:01 PM, Yngvi P?ll ?orfinnsson wrote:
> HI
>
> I can't delete a subnet (id f505a109-07a7-420a-ae6b-aa5995126be7 ),
> because one port is still in use.
>
> root at opst-ctrl1-dev:/# neutron subnet-delete
> f505a109-07a7-420a-ae6b-aa5995126be7
>
> Unable to complete operation on subnet
> f505a109-07a7-420a-ae6b-aa5995126be7. One or more ports have an IP
allocation from this subnet. (HTTP 409) (Request-ID:
> req-fbd64f19-2888-4d87-8e60-bc2cc920cd12)
Do you have a router on the subnet? Try deleting it.
-Brian
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
------------------------------
Message: 7
Date: Tue, 8 Sep 2015 17:17:04 +0000
From: Yngvi P?ll ?orfinnsson <yngvith at siminn.is<mailto:yngvith at siminn.is>>
To: Brian Haley <brian.haley at hp.com<mailto:brian.haley at hp.com>>, "openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>"
<openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: Re: [Openstack] port-delete issue
Message-ID: <60bec238c4b042acadc1c57a5701194d at simi-mbx-04.siminn.is<mailto:60bec238c4b042acadc1c57a5701194d at simi-mbx-04.siminn.is>>
Content-Type: text/plain; charset="iso-8859-1"
HI
I have cleared the gateway on all routers, but it did not help
root at opst-ctrl1-dev:/# neutron router-list
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
| id | name |
external_gateway_info | distributed | ha |
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
| 164ad471-5ab0-4109-acf5-f88de1e4b5f3 | gw | null
| False | False |
| 2371ae6e-8a07-464c-9b3e-3d7d35e96a59 | gw | null
| False | False |
| 45ab4a9a-c7fc-4cf6-844c-6265b5620121 | gw | null
| False | False |
| 50d16aec-adaf-431d-9b42-f8aff78ea5b8 | gw1 | null
| False | False |
| 546456aa-a312-48d5-8a3b-6031b1dcb3a9 | OskarTestRouter | null
| False | False |
| 78feb17a-9a29-4ddb-9477-914850d8f5d2 | ElasticRouter | null
| False | False |
| 7a06a85c-826a-4f00-a62f-5ae8586ea1fb | adminTest | null
| False | False |
| 7ba38ec5-49d9-4fc8-b77f-ef8a38e79af3 | Safni?-router | null
| False | False |
| 9e367dd6-ab2c-4949-a5e4-4d8d2787d84b | gw | null
| False | False |
| f05c4cc8-724e-4731-bea3-6ef68d794137 | gw1 | null
| False | False |
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
But it did not help.
best regards
Yngvi
-----Original Message-----
From: Brian Haley [mailto:brian.haley at hp.com<mailto:brian.haley at hp.com>]
Sent: 8. september 2015 16:45
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Re: [Openstack] port-delete issue
On 09/08/2015 12:01 PM, Yngvi P?ll ?orfinnsson wrote:
> HI
>
> I can't delete a subnet (id f505a109-07a7-420a-ae6b-aa5995126be7 ),
> because one port is still in use.
>
> root at opst-ctrl1-dev:/# neutron subnet-delete
> f505a109-07a7-420a-ae6b-aa5995126be7
>
> Unable to complete operation on subnet
> f505a109-07a7-420a-ae6b-aa5995126be7. One or more ports have an IP
allocation from this subnet. (HTTP 409) (Request-ID:
> req-fbd64f19-2888-4d87-8e60-bc2cc920cd12)
Do you have a router on the subnet? Try deleting it.
-Brian
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
------------------------------
Message: 8
Date: Tue, 8 Sep 2015 13:32:43 -0400
From: Brian Haley <brian.haley at hp.com<mailto:brian.haley at hp.com>>
To: Yngvi P?ll ?orfinnsson <yngvith at siminn.is<mailto:yngvith at siminn.is>>,
"openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>" <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: Re: [Openstack] port-delete issue
Message-ID: <55EF1BBB.2030807 at hp.com<mailto:55EF1BBB.2030807 at hp.com>>
Content-Type: text/plain; charset=windows-1252; format=flowed
My only other suggestion is to do a port-list with admin privs and look. I
can't tell if you're doing that as root != admin necessarily.
-Brian
On 09/08/2015 01:08 PM, Yngvi P?ll ?orfinnsson wrote:
> HI
> I don't see a router attached :
>
> root at opst-ctrl1-dev:/# neutron subnet-show ext-subnet
> +-------------------+----------------------------------------------------+
> | Field | Value |
> +-------------------+----------------------------------------------------+
> | allocation_pools | {"start": "157.157.8.100", "end": "157.157.8.200"} |
> | cidr | 157.157.8.0/24<http://157.157.8.0/24> |
> | dns_nameservers | 212.30.200.199 |
> | | 212.30.200.200 |
> | enable_dhcp | True |
> | gateway_ip | 157.157.8.1 |
> | host_routes | |
> | id | f505a109-07a7-420a-ae6b-aa5995126be7 |
> | ip_version | 4 |
> | ipv6_address_mode | |
> | ipv6_ra_mode | |
> | name | ext-subnet |
> | network_id | 523721c5-ea5d-42a1-8920-8bc75010f273 |
> | tenant_id | 1dda2478e30d44dda0ca752c6047725d |
> +-------------------+----------------------------------------------------+
> root at opst-ctrl1-dev:/#
>
> best regards
> Yngvi
>
>
> -----Original Message-----
> From: Brian Haley [mailto:brian.haley at hp.com<mailto:brian.haley at hp.com>]
> Sent: 8. september 2015 16:45
> To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Subject: Re: [Openstack] port-delete issue
>
> On 09/08/2015 12:01 PM, Yngvi P?ll ?orfinnsson wrote:
>> HI
>>
>> I can't delete a subnet (id f505a109-07a7-420a-ae6b-aa5995126be7 ),
>> because one port is still in use.
>>
>> root at opst-ctrl1-dev:/# neutron subnet-delete
>> f505a109-07a7-420a-ae6b-aa5995126be7
>>
>> Unable to complete operation on subnet
>> f505a109-07a7-420a-ae6b-aa5995126be7. One or more ports have an IP
allocation from this subnet. (HTTP 409) (Request-ID:
>> req-fbd64f19-2888-4d87-8e60-bc2cc920cd12)
>
> Do you have a router on the subnet? Try deleting it.
>
> -Brian
>
> _______________________________________________
> Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
------------------------------
Message: 9
Date: Tue, 8 Sep 2015 17:42:09 +0000
From: Yngvi P?ll ?orfinnsson <yngvith at siminn.is<mailto:yngvith at siminn.is>>
To: Brian Haley <brian.haley at hp.com<mailto:brian.haley at hp.com>>, "openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>"
<openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: Re: [Openstack] port-delete issue
Message-ID: <d2b7f0b84a664e88b340d120d923bcd1 at simi-mbx-04.siminn.is<mailto:d2b7f0b84a664e88b340d120d923bcd1 at simi-mbx-04.siminn.is>>
Content-Type: text/plain; charset="iso-8859-1"
Those are the routers in the system (admin sees this)
root at opst-ctrl1-dev:/# neutron router-list
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
| id | name |
external_gateway_info | distributed | ha |
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
| 164ad471-5ab0-4109-acf5-f88de1e4b5f3 | gw | null
| False | False |
| 2371ae6e-8a07-464c-9b3e-3d7d35e96a59 | gw | null
| False | False |
| 45ab4a9a-c7fc-4cf6-844c-6265b5620121 | gw | null
| False | False |
| 50d16aec-adaf-431d-9b42-f8aff78ea5b8 | gw1 | null
| False | False |
| 546456aa-a312-48d5-8a3b-6031b1dcb3a9 | OskarTestRouter | null
| False | False |
| 78feb17a-9a29-4ddb-9477-914850d8f5d2 | ElasticRouter | null
| False | False |
| 7a06a85c-826a-4f00-a62f-5ae8586ea1fb | adminTest | null
| False | False |
| 7ba38ec5-49d9-4fc8-b77f-ef8a38e79af3 | Safni?-router | null
| False | False |
| 9e367dd6-ab2c-4949-a5e4-4d8d2787d84b | gw | null
| False | False |
| f05c4cc8-724e-4731-bea3-6ef68d794137 | gw1 | null
| False | False |
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
root at opst-ctrl1-dev:/#
but the port does not show up, when I list ports for each router with:
neutron router-port-list ROUTER-ID
but it does show up in the general port-list , like
root at opst-ctrl1-dev:/# neutron port-list | grep 157
| 220f1ad2-10bb-4d17-8cc5-3ad4f86f0b00 | | fa:16:3e:15:20:59 |
{"subnet_id": "f505a109-07a7-420a-ae6b-aa5995126be7", "ip_address":
"157.157.8.114"} |
Best regards
Yngvi
-----Original Message-----
From: Brian Haley [mailto:brian.haley at hp.com<mailto:brian.haley at hp.com>]
Sent: 8. september 2015 17:33
To: Yngvi P?ll ?orfinnsson <yngvith at siminn.is<mailto:yngvith at siminn.is>>;
openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Re: [Openstack] port-delete issue
My only other suggestion is to do a port-list with admin privs and look. I
can't tell if you're doing that as root != admin necessarily.
-Brian
On 09/08/2015 01:08 PM, Yngvi P?ll ?orfinnsson wrote:
> HI
> I don't see a router attached :
>
> root at opst-ctrl1-dev:/# neutron subnet-show ext-subnet
> +-------------------+----------------------------------------------------+
> | Field | Value |
> +-------------------+----------------------------------------------------+
> | allocation_pools | {"start": "157.157.8.100", "end": "157.157.8.200"} |
> | cidr | 157.157.8.0/24<http://157.157.8.0/24> |
> | dns_nameservers | 212.30.200.199 |
> | | 212.30.200.200 |
> | enable_dhcp | True |
> | gateway_ip | 157.157.8.1 |
> | host_routes | |
> | id | f505a109-07a7-420a-ae6b-aa5995126be7 |
> | ip_version | 4 |
> | ipv6_address_mode | |
> | ipv6_ra_mode | |
> | name | ext-subnet |
> | network_id | 523721c5-ea5d-42a1-8920-8bc75010f273 |
> | tenant_id | 1dda2478e30d44dda0ca752c6047725d |
> +-------------------+----------------------------------------------------+
> root at opst-ctrl1-dev:/#
>
> best regards
> Yngvi
>
>
> -----Original Message-----
> From: Brian Haley [mailto:brian.haley at hp.com<mailto:brian.haley at hp.com>]
> Sent: 8. september 2015 16:45
> To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Subject: Re: [Openstack] port-delete issue
>
> On 09/08/2015 12:01 PM, Yngvi P?ll ?orfinnsson wrote:
>> HI
>>
>> I can't delete a subnet (id f505a109-07a7-420a-ae6b-aa5995126be7 ),
>> because one port is still in use.
>>
>> root at opst-ctrl1-dev:/# neutron subnet-delete
>> f505a109-07a7-420a-ae6b-aa5995126be7
>>
>> Unable to complete operation on subnet
>> f505a109-07a7-420a-ae6b-aa5995126be7. One or more ports have an IP
allocation from this subnet. (HTTP 409) (Request-ID:
>> req-fbd64f19-2888-4d87-8e60-bc2cc920cd12)
>
> Do you have a router on the subnet? Try deleting it.
>
> -Brian
>
> _______________________________________________
> Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
------------------------------
Message: 10
Date: Tue, 8 Sep 2015 23:42:38 +0000
From: Tristan Cacqueray <tdecacqu at redhat.com<mailto:tdecacqu at redhat.com>>
To: openstack-announce at lists.openstack.org<mailto:openstack-announce at lists.openstack.org>,
openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: [Openstack] [OSSA 2015-018] Neutron firewall rules bypass
through port update (CVE-2015-5240)
Message-ID: <55EF726E.9040407 at redhat.com<mailto:55EF726E.9040407 at redhat.com>>
Content-Type: text/plain; charset="utf-8"
================================================================
OSSA-2015-018: Neutron firewall rules bypass through port update
================================================================
:Date: September 08, 2015
:CVE: CVE-2015-5240
Affects
~~~~~~~
- Neutron: versions through 2014.2.3 and
2015.1 versions through 2015.1.1
Description
~~~~~~~~~~~
Kevin Benton from Mirantis reported a vulnerability in Neutron. By changing
the device owner of an instance's port right after it is created, an
authenticated user may prevent application of firewall rules and so avoid IP
anti-spoofing controls. All Neutron setups using the ML2 plugin or a plugin
that relies on the security groups AMQP API are affected.
Patches
~~~~~~~
- https://review.openstack.org/221345 (Juno)
- https://review.openstack.org/221344 (Kilo)
- https://review.openstack.org/221342 (Liberty)
Credits
~~~~~~~
- Kevin Benton from Mirantis (CVE-2015-5240)
References
~~~~~~~~~~
- https://launchpad.net/bugs/1489111
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5240
Notes
~~~~~
- This fix will be included in future 2014.2.4 (juno) and
2015.1.2 (kilo) releases.
--
Tristan Cacqueray
OpenStack Vulnerability Management Team
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 473 bytes
Desc: OpenPGP digital signature
URL:
<http://lists.openstack.org/pipermail/openstack/attachments/20150908/de7365a
0/attachment-0001.pgp<http://lists.openstack.org/pipermail/openstack/attachments/20150908/de7365a0/attachment-0001.pgp>>
------------------------------
Message: 11
Date: Wed, 9 Sep 2015 12:09:04 +0530
From: saurabh suman <90.suman at gmail.com<mailto:90.suman at gmail.com>>
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: [Openstack] Devstack multinode setup integration with
Opendaylight
Message-ID:
<CAHoSm6JfNKiFMvv_G3Z56iR9zLj8U6BscOnMZKqs5ZScdXNKmg at mail.gmail.com<mailto:CAHoSm6JfNKiFMvv_G3Z56iR9zLj8U6BscOnMZKqs5ZScdXNKmg at mail.gmail.com>>
Content-Type: text/plain; charset="utf-8"
Hi,
I have a working 2 node openstack setup through devstack. Controller +
Compute + Opendaylight -> 192.168.10.1 and Compute -> 192.168.10.2
I have br-int and br-tun on both compute and controller node with their
manager set to ODL and each bridge is connected to controller, as evident
from ODL GUI.
*On controller node*:
[image: Inline image 1]
On Compute node
[image: Inline image 1]
I am able to create a network.But when I launch a cirros VM, in the logs I
see, *udhcpc (v1.21.1) started Sending discover... Sending discover...
Sending discover...*
My DHCP server is running with IP 10.20.30.2 (IP allocated from network
created) and corresponding tap device is attached to br-int. when I run
ovs-ofctl dump-ports br-int , I do not see any traffic going to dhcp tap
though tap device created for VM is sending packets.
After few minutes "lease fail" message is displayed and IP is not allocated
to VM.
Can anyone help me out here.
Regards,
Saurav
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
<http://lists.openstack.org/pipermail/openstack/attachments/20150909/eb80ffd
3/attachment-0001.html<http://lists.openstack.org/pipermail/openstack/attachments/20150909/eb80ffd3/attachment-0001.html>>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Compute_OVS.JPG
Type: image/jpeg
Size: 54795 bytes
Desc: not available
URL:
<http://lists.openstack.org/pipermail/openstack/attachments/20150909/eb80ffd
3/attachment-0002.jpe<http://lists.openstack.org/pipermail/openstack/attachments/20150909/eb80ffd3/attachment-0002.jpe>>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: controller_OVS.JPG
Type: image/jpeg
Size: 79960 bytes
Desc: not available
URL:
<http://lists.openstack.org/pipermail/openstack/attachments/20150909/eb80ffd
3/attachment-0003.jpe<http://lists.openstack.org/pipermail/openstack/attachments/20150909/eb80ffd3/attachment-0003.jpe>>
------------------------------
Message: 12
Date: Wed, 9 Sep 2015 09:24:24 +0000
From: Yngvi P?ll ?orfinnsson <yngvith at siminn.is<mailto:yngvith at siminn.is>>
To: Brian Haley <brian.haley at hp.com<mailto:brian.haley at hp.com>>, "openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>"
<openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: Re: [Openstack] port-delete issue
Message-ID: <9ca3e2f111064ecf8eccd3fcf1ef351e at simi-mbx-04.siminn.is<mailto:9ca3e2f111064ecf8eccd3fcf1ef351e at simi-mbx-04.siminn.is>>
Content-Type: text/plain; charset="iso-8859-1"
Hi
This is the solution ;-)
https://ask.openstack.org/en/question/67752/unable-to-delete-port/
best regards
Yngvi
-----Original Message-----
From: Yngvi P?ll ?orfinnsson
Sent: 8. september 2015 17:42
To: Brian Haley <brian.haley at hp.com<mailto:brian.haley at hp.com>>; openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Re: [Openstack] port-delete issue
Those are the routers in the system (admin sees this)
root at opst-ctrl1-dev:/# neutron router-list
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
| id | name |
external_gateway_info | distributed | ha |
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
| 164ad471-5ab0-4109-acf5-f88de1e4b5f3 | gw | null
| False | False |
| 2371ae6e-8a07-464c-9b3e-3d7d35e96a59 | gw | null
| False | False |
| 45ab4a9a-c7fc-4cf6-844c-6265b5620121 | gw | null
| False | False |
| 50d16aec-adaf-431d-9b42-f8aff78ea5b8 | gw1 | null
| False | False |
| 546456aa-a312-48d5-8a3b-6031b1dcb3a9 | OskarTestRouter | null
| False | False |
| 78feb17a-9a29-4ddb-9477-914850d8f5d2 | ElasticRouter | null
| False | False |
| 7a06a85c-826a-4f00-a62f-5ae8586ea1fb | adminTest | null
| False | False |
| 7ba38ec5-49d9-4fc8-b77f-ef8a38e79af3 | Safni?-router | null
| False | False |
| 9e367dd6-ab2c-4949-a5e4-4d8d2787d84b | gw | null
| False | False |
| f05c4cc8-724e-4731-bea3-6ef68d794137 | gw1 | null
| False | False |
+--------------------------------------+-----------------+------------------
-----+-------------+-------+
root at opst-ctrl1-dev:/#
but the port does not show up, when I list ports for each router with:
neutron router-port-list ROUTER-ID
but it does show up in the general port-list , like
root at opst-ctrl1-dev:/# neutron port-list | grep 157
| 220f1ad2-10bb-4d17-8cc5-3ad4f86f0b00 | | fa:16:3e:15:20:59 |
{"subnet_id": "f505a109-07a7-420a-ae6b-aa5995126be7", "ip_address":
"157.157.8.114"} |
Best regards
Yngvi
-----Original Message-----
From: Brian Haley [mailto:brian.haley at hp.com<mailto:brian.haley at hp.com>]
Sent: 8. september 2015 17:33
To: Yngvi P?ll ?orfinnsson <yngvith at siminn.is<mailto:yngvith at siminn.is>>;
openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: Re: [Openstack] port-delete issue
My only other suggestion is to do a port-list with admin privs and look. I
can't tell if you're doing that as root != admin necessarily.
-Brian
On 09/08/2015 01:08 PM, Yngvi P?ll ?orfinnsson wrote:
> HI
> I don't see a router attached :
>
> root at opst-ctrl1-dev:/# neutron subnet-show ext-subnet
> +-------------------+----------------------------------------------------+
> | Field | Value |
> +-------------------+----------------------------------------------------+
> | allocation_pools | {"start": "157.157.8.100", "end": "157.157.8.200"} |
> | cidr | 157.157.8.0/24<http://157.157.8.0/24> |
> | dns_nameservers | 212.30.200.199 |
> | | 212.30.200.200 |
> | enable_dhcp | True |
> | gateway_ip | 157.157.8.1 |
> | host_routes | |
> | id | f505a109-07a7-420a-ae6b-aa5995126be7 |
> | ip_version | 4 |
> | ipv6_address_mode | |
> | ipv6_ra_mode | |
> | name | ext-subnet |
> | network_id | 523721c5-ea5d-42a1-8920-8bc75010f273 |
> | tenant_id | 1dda2478e30d44dda0ca752c6047725d |
> +-------------------+----------------------------------------------------+
> root at opst-ctrl1-dev:/#
>
> best regards
> Yngvi
>
>
> -----Original Message-----
> From: Brian Haley [mailto:brian.haley at hp.com<mailto:brian.haley at hp.com>]
> Sent: 8. september 2015 16:45
> To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Subject: Re: [Openstack] port-delete issue
>
> On 09/08/2015 12:01 PM, Yngvi P?ll ?orfinnsson wrote:
>> HI
>>
>> I can't delete a subnet (id f505a109-07a7-420a-ae6b-aa5995126be7 ),
>> because one port is still in use.
>>
>> root at opst-ctrl1-dev:/# neutron subnet-delete
>> f505a109-07a7-420a-ae6b-aa5995126be7
>>
>> Unable to complete operation on subnet
>> f505a109-07a7-420a-ae6b-aa5995126be7. One or more ports have an IP
allocation from this subnet. (HTTP 409) (Request-ID:
>> req-fbd64f19-2888-4d87-8e60-bc2cc920cd12)
>
> Do you have a router on the subnet? Try deleting it.
>
> -Brian
>
> _______________________________________________
> Mailing list:
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
> Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
> Unsubscribe :
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
>
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
------------------------------
Message: 13
Date: Wed, 9 Sep 2015 17:26:59 +0800
From: hao wang <sxmatch1986 at gmail.com<mailto:sxmatch1986 at gmail.com>>
To: "openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>" <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: [Openstack] [openstack][swift]Got error when installing swift
all in one.
Message-ID:
<CAOEh+o0714WzHCM1YFkoKS=o2bjPGh6T7cDcvhoS+Lzn0PrUBA at mail.gmail.com<mailto:o2bjPGh6T7cDcvhoS%2BLzn0PrUBA at mail.gmail.com>>
Content-Type: text/plain; charset=UTF-8
Hi, all
I was installing swift all-in-one in my virtual machine, OS is ubuntu 14.04.
But I got errors when I start the swift service by using "startmain" script:
liberasurecode[2969]: liberasurecode_backend_open: dynamic linking error
libJerasure.so: cannot open shared object file: No such file or directory
Traceback (most recent call last):
File "/usr/local/bin/swift-object-server", line 6, in <module>
exec(compile(open(__file__).read(), __file__, 'exec'))
File "/swift/bin/swift-object-server", line 19, in <module>
from swift.common.wsgi import run_wsgi
File "/swift/swift/common/wsgi.py", line 39, in <module>
from swift.common.storage_policy import BindPortsCache
File "/swift/swift/common/storage_policy.py", line 738, in <module>
reload_storage_policies()
File "/swift/swift/common/storage_policy.py", line 730, in
reload_storage_policies
_POLICIES = parse_storage_policies(policy_conf)
File "/swift/swift/common/storage_policy.py", line 686, in
parse_storage_policies
policy = policy_cls.from_config(policy_index, config_options)
File "/swift/swift/common/storage_policy.py", line 251, in from_config
return cls(policy_index, **policy_options)
File "/swift/swift/common/storage_policy.py", line 387, in __init__
ec_type=self._ec_type)
File "/usr/local/lib/python2.7/dist-packages/pyeclib/ec_iface.py",
line 172, in __init__
chksum_type=self.chksum_type)
File "/usr/local/lib/python2.7/dist-packages/pyeclib/utils.py", line 73,
in create_instance
instance = object_class(*args, **kwargs)
File "/usr/local/lib/python2.7/dist-packages/pyeclib/core.py", line 61, in
__init__
self.algsig_chksum)
pyeclib.Error: Invalid arguments passed to liberasurecode_instance_create
I'm sure the libjerasure2 has been installed. So is there a solution to fix
this issue?
Thanks.
--
Best Wishes For You!
------------------------------
Message: 14
Date: Wed, 09 Sep 2015 18:40:42 +0900
From: Kota TSUYUZAKI <tsuyuzaki.kota at lab.ntt.co.jp<mailto:tsuyuzaki.kota at lab.ntt.co.jp>>
To: hao wang <sxmatch1986 at gmail.com<mailto:sxmatch1986 at gmail.com>>
Cc: "openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>" <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: Re: [Openstack] [openstack][swift]Got error when installing
swift all in one.
Message-ID: <55EFFE9A.7030002 at lab.ntt.co.jp<mailto:55EFFE9A.7030002 at lab.ntt.co.jp>>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Hi, Hao
Did you already do the setting for where shared jerasure library located?
The log message looks that Linux system doesn't have a seach path for that.
Like:
- Add /usr/local/lib path (if you installed libJerasure.so in another
location, you should set the path here) into /etc/ld.so.conf
- sudo ldconfig
That helps Linux system to search shared object library.
Details is described in here. [1]
1: https://bitbucket.org/kmgreen2/pyeclib
Best
Kota
(2015/09/09 18:26), hao wang wrote:
> Hi, all
>
> I was installing swift all-in-one in my virtual machine, OS is ubuntu
14.04.
>
> But I got errors when I start the swift service by using "startmain"
script:
>
> liberasurecode[2969]: liberasurecode_backend_open: dynamic linking
> error libJerasure.so: cannot open shared object file: No such file or
> directory
> Traceback (most recent call last):
> File "/usr/local/bin/swift-object-server", line 6, in <module>
> exec(compile(open(__file__).read(), __file__, 'exec'))
> File "/swift/bin/swift-object-server", line 19, in <module>
> from swift.common.wsgi import run_wsgi
> File "/swift/swift/common/wsgi.py", line 39, in <module>
> from swift.common.storage_policy import BindPortsCache
> File "/swift/swift/common/storage_policy.py", line 738, in <module>
> reload_storage_policies()
> File "/swift/swift/common/storage_policy.py", line 730, in
> reload_storage_policies
> _POLICIES = parse_storage_policies(policy_conf)
> File "/swift/swift/common/storage_policy.py", line 686, in
> parse_storage_policies
> policy = policy_cls.from_config(policy_index, config_options)
> File "/swift/swift/common/storage_policy.py", line 251, in from_config
> return cls(policy_index, **policy_options)
> File "/swift/swift/common/storage_policy.py", line 387, in __init__
> ec_type=self._ec_type)
> File "/usr/local/lib/python2.7/dist-packages/pyeclib/ec_iface.py",
> line 172, in __init__
> chksum_type=self.chksum_type)
> File "/usr/local/lib/python2.7/dist-packages/pyeclib/utils.py", line
> 73, in create_instance
> instance = object_class(*args, **kwargs)
> File "/usr/local/lib/python2.7/dist-packages/pyeclib/core.py", line
> 61, in __init__
> self.algsig_chksum)
> pyeclib.Error: Invalid arguments passed to liberasurecode_instance_create
>
>
> I'm sure the libjerasure2 has been installed. So is there a solution
> to fix this issue?
>
> Thanks.
------------------------------
Message: 15
Date: Wed, 09 Sep 2015 18:24:31 +0800
From: Ludwig Tirazona <ljtirazona at codebridge.com.ph<mailto:ljtirazona at codebridge.com.ph>>
To: openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
Subject: [Openstack] Cannot Attach Volumes Via Horizon
Message-ID: <55F008DF.9040807 at codebridge.com.ph<mailto:55F008DF.9040807 at codebridge.com.ph>>
Content-Type: text/plain; charset=utf-8
Hello Everyone,
I devstacked a deployment, just for PoC purposes. I have a problem
wherein I can't attach volumes to instances via Horizon, but can do so
via the nova CLI tool, so it seems that Cinder and Nova are set up
properly. Right after attempting to attach a volume, Horizon gives me
this error: "Error: Unable to attach volume."
I took a look at the nova API logs, and I see this log:
2015-09-09 18:01:00.704 DEBUG nova.api.openstack.wsgi
[req-8bde1423-b8cf-4a7f-a743-92c2a5a26ae4 admin admin] Returning 400 to
user: Invalid input for field/attribute device. Value: . u'' does not
match '(^/dev/x{0,1}[a-z]{0,1}d{0,1})([a-z]+)[0-9]*$' from (pid=25349)
__call__ /opt/stack/nova/nova/api/openstack/wsgi.py:1175
It looks like nova-api is looking for a "/dev/something" value for u,
but Horizon only passes a blank value.
The following link has the logs for Horizon.
http://pastebin.com/DiwzW0tD
What can I do to fix this? Inelegant solutions are very much welcome, I
just want this to get working as soon as possible.
Help would be greatly appreciated. Thanks!
------------------------------
Message: 16
Date: Wed, 9 Sep 2015 13:41:00 +0200
From: Heiko Kr?mer <hkraemer at anynines.com<mailto:hkraemer at anynines.com>>
To: "openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>" <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: [Openstack] Neutron with apache2 wsgi module don't ack
rabbitMQ messages
Message-ID: <55F01ACC.8060008 at anynines.com<mailto:55F01ACC.8060008 at anynines.com>>
Content-Type: text/plain; charset=utf-8
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi guys,
another day, another problem :).
* Icehouse
* Apache2.4
* Ubuntu 14.04
I'm scaling our Neutron API endpoints to different servers to reach more
throughput. In this case i decided to use apache2 with WSGI module to
run the server in multi threaded mode to use optimal all CPU cores and
handle more parallel requests.
I create a vHost and a wsgi startup script file
script:
|from neutron.openstack.common import log as logging
from neutron.common import config
logging.setup('neutron')
config.parse(['--config-file', '/etc/neutron/neutron.conf',
'--config-file', '/etc/neutron/plugins/ml2/ml2_conf.ini'])
application = config.load_paste_app("neutron")|
vhost:
|Listen *:9696
<VirtualHost *:9696>
WSGIScriptAlias / /var/www/cgi-bin/neutron
WSGIDaemonProcess neutron-public user=neutron group=neutron
processes=3 threads=10
WSGIProcessGroup neutron-public
WSGIApplicationGroup %{GLOBAL}
WSGIPassAuthorization On
LogLevel info
ErrorLog /var/log/apache2/neutron-error.log
CustomLog /var/log/apache2/neutron-access.log combined
</VirtualHost>|
So the server is running well, all requests are working well but i see
on the messaging bus (rabbitmq) unack messages in two queues as far as
the apache2 is running. The unack messages on both queues
(n-lbaas-plugin & q-metering-plugin) is increasing over time. As soon as
i switch to the build-IN webserver of Neutron all messages on both
queues will ack and deliver.
Is there any trick or is that a problem with multi thread ?
Cheers and thanks
Heiko
- --
anynines.com<http://anynines.com>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iQEcBAEBAgAGBQJV8BrMAAoJELxFogM4ixOF8WIH/Aw+nXtaIAzZIyHn6XdvDQqf
P2qDnGO460CtnKVYUBtLxxeTqOj0w2/g7A5ijvAXY97D0dSKmE08xwXFj1XA8zq9
kTT5IKOf6M6OhXkYnNJWVWD+qNSseL8svRrUOhjVCu+PQBlm2k7EDRtyG3OySWQo
M6RR9UvOUWZfnr8FJzA/p/K7Zha4POCoFjW3MxWJ9TC/Gv8+jhhO2HRBHz3H+OTE
abq1CFv8f7/RwDJ1z05ZVoy7QolACLCd2mEAjaUmvAGp+iqy7gU/NRwNagDjExHw
imwEO/DMYppz7//FUWCWQwNlu731sKIKBTx8DX2WeZz//rip0fi4vD8sys8NSsQ=
=HQfo
-----END PGP SIGNATURE-----
------------------------------
_______________________________________________
Openstack mailing list
openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
End of Openstack Digest, Vol 27, Issue 8
****************************************
------------------------------
Message: 5
Date: Fri, 11 Sep 2015 01:53:30 +0000 (UTC)
From: venkatesh kotipalli <member at linkedin.com<mailto:member at linkedin.com>>
To: ??? <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Subject: [Openstack] ??????? LinkedIn (??) ????????????????
Message-ID:
<1176099700.3442449.1441936410384.JavaMail.app at ltx1-app6310.prod<mailto:1176099700.3442449.1441936410384.JavaMail.app at ltx1-app6310.prod>>
Content-Type: text/plain; charset="utf-8"
??????
?? LinkedIn (??) ?????????????????
venkatesh kotipalli
Cloud InfraStructure Engineer at Simplify DC
??: https://www.linkedin.com/e/v2?e=64uxg4-ieezpc9b-1u&a=invite-accept&midToken=AQH0SkAEnsMymg&tracking=eml-comm_invm-b-accept-newinvite&ek=invite_member_28&mboxId=I6047919489427738624_500&sharedKey=__ZQ1zvM&invitationId=6047919478241529856&fromReminder=false&fromEmail=true
venkatesh kotipalli????? https://www.linkedin.com/e/v2?e=64uxg4-ieezpc9b-1u&t=npv&midToken=AQH0SkAEnsMymg&tracking=eml-comm_invm-b-name-newinvite&ek=invite_member_28&invitationAccept=370958548_I6047919489427738624_500&authType=name&authToken=v-W3&memberID=425289714
???????????????????????: https://www.linkedin.com/e/v2?e=64uxg4-ieezpc9b-1u&t=lun&midToken=AQH0SkAEnsMymg&tracking=eml-comm_invm-f-unsub-newinvite&ek=invite_member_28&loid=AQEJeA1XzKO39wAAAU-6G4bxCHGTPXbzZxNhkAji_V4R-1C7AIb9RRbnrA8j1uMu0BkHfwNolvg3rRrtRrIXDzmXiRl7&eid=64uxg4-ieezpc9b-1u
??????????? (???? - yocto????)? ????????????: https://www.linkedin.com/e/v2?e=64uxg4-ieezpc9b-1u&a=customerServiceUrl&midToken=AQH0SkAEnsMymg&ek=invite_member_28&articleId=4788
©<https://www.linkedin.com/e/v2?e=64uxg4-ieezpc9b-1u&a=customerServiceUrl&midToken=AQH0SkAEnsMymg&ek=invite_member_28&articleId=4788©>; 2015 LinkedIn Ireland Limited?LinkedIn?LinkedIn ???? InMail ?? LinkedIn Corporation ???????? (??) ?????????????
LinkedIn ? LinkedIn Ireland Limited ???????
???????????????????: 477441
????: 70 Sir John Robersons Quay, Dublin 2?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150911/24495d49/attachment-0001.html>
------------------------------
Message: 6
Date: Fri, 11 Sep 2015 12:57:47 +0530
From: Shital Patil <shital.patil at gslab.com<mailto:shital.patil at gslab.com>>
To: "<openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>" <openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>>
Cc: Sagar Pradhan <sagar.pradhan at gslab.com<mailto:sagar.pradhan at gslab.com>>
Subject: [Openstack] GBP(Group Based Policy) REST APIs
Message-ID:
<CADdv+15bE9ptY5_NXcPyXEJA6wfrUq6v1UWVW+hhJS0v=CxOsQ at mail.gmail.com<mailto:CxOsQ at mail.gmail.com>>
Content-Type: text/plain; charset="utf-8"
Hello Guys,
>From blueprint it looks likeGBP is currently using neutron REST and in next
release plan is to write wrapper over it but I was interested to know *when
will GBP have its own REST exposed so that it can be consumed by
applications having **programmatic interaction with openstack ?*
Thanks,
Shital
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150911/905a9596/attachment-0001.html>
------------------------------
_______________________________________________
Openstack mailing list
openstack at lists.openstack.org<mailto:openstack at lists.openstack.org>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
End of Openstack Digest, Vol 27, Issue 10
*****************************************
"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."
"DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20150922/57feb6c2/attachment.html>
More information about the Openstack
mailing list
