[Rdo-list] Compute Node without firewall (iptables) and Linux bridge
by Chris
Hello
I'm looking for a way to disable any firewall feature in one of our compute
nodes and prevent the creation of the Linux bridge in the data path inside
of this compute node.
We using the RDO Icehouse release.
Here is the configuration in the compute node:
#/etc/neutron/plugin.ini
[securitygroup]
#firewall_driver =
neutron.agent.linux.iptables_firewall.OVSHybridIptablesFirewallDriver
firewall_driver = neutron.agent.firewall.NoopFirewall
# enable_security_group = True
enable_security_group = False
#/etc/nova/nova.conf
firewall_driver = nova.virt.firewall.NoopFirewallDriver
#security_group_api = neutron
#/etc/neutron/plugins/openvswitch/ovs_neutron_plugin.ini
[securitygroup]
firewall_driver = neutron.agent.firewall.NoopFirewallDriver
enable_security_group = False
The firewall seems to be disabled but the bridge and the interfaces are
being still created.
I found an older post about it:
http://lists.openstack.org/pipermail/openstack/2014-May/007079.html
But changing "portbindings.OVS_HYBRID_PLUG" from a hard-coded "True" to
"False" didn't change anything.
Please advise!
Cheers
Chris
10 years
[Rdo-list] RDO-related Meetups in the coming week (October 6, 2014)
by Rich Bowen
The following are the meetups I'm aware of in the coming week where RDO
enthusiasts will be gathering. If you know of others, please let me
know, and/or add them to http://openstack.redhat.com/Events
If you attend any of these meetups, please take pictures, and send me
some. If you blog about the events (and you should), please send me
that, too.
* Tuesday, October 7th, OpenStack 101@ Geekdom, San Antonio, TX -
http://www.meetup.com/SA-Open-Stackers/events/207829552/
* Wednesday, October 8th, IBM OpenStack Lightning Talks, New York, NY -
http://www.meetup.com/OpenStack-New-York-Meetup/events/206618432/
* Wednesday, October 8th, From Nova-Network to Neutron and Beyond: A
Look at OpenStack Networking, Austin, TX -
http://www.meetup.com/OpenStack-Austin/events/207255882/
* Wednesday, October 8th, Project Atomic, Clayton, MO -
http://www.meetup.com/Docker-St-Louis/events/210326372/
* Wednesday, October 8th, Oct Meetup - Serving Big Data Applications
with an OpenStack environment, Cambridge, MA -
http://www.meetup.com/Openstack-Boston/events/207266652/
* Tuesday, October 14th, What is Ceph and why do I care? Fort Collins,
CO - http://www.meetup.com/OpenStack-Colorado/events/210326972/
* October 13-15, LinuxCon Europe, Dusseldorf, Germany -
http://events.linuxfoundation.org/events/linuxcon-europe
--
Rich Bowen - rbowen(a)rcbowen.com - @rbowen
http://apachecon.com/ - @apachecon
10 years
[Rdo-list] New to openStack
by Ganesh Sangle
Hi guys,
I am new to openstack and I am trying to install the cinder package on
Scientific Linux release 6.5 (Carbon)
ran the following commands:
yum install openstack-cinder
I am unable to figure which version of openstack was installed. Is there a
way to figure it out easily ?
>From the documentation, it seems that the version of openstack that was
Folsom.
How to I get the latest supported version ?
Thanks for helping!
Ganesh
10 years, 1 month
[Rdo-list] RDO Juno packages available
by Rich Bowen
We're pleased to announce the availability of RDO packages for OpenStack Juno, for EL7 (RHEL7 and CentOS7) and Fedora 20.
Fedora 21 is still in development and running RDO Juno on Fedora 21 is not recommended at this time. A separate announcement will be made when RDO Juno on Fedora 21 is ready.
You can get started with RDO Juno via the process described in the Quickstart - http://openstack.redhat.com/Quickstart - and the various packages are available at https://rdo.fedorapeople.org/openstack-juno/
As always, if you have questions, you can bring them here, to the rdo-list mailing list, or to the IRC channel - #rdo on freenode.irc.net.
Thanks for being part of the RDO community!
--
Rich Bowen - rbowen(a)redhat.com
OpenStack Community Liaison
http://openstack.redhat.com/
10 years, 1 month
[Rdo-list] Community meetup at OpenStack Summit
by Rich Bowen
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
There have been a number of conversations going on about having an
informal RDO community meetup at OpenStack Summit next week in Paris.
You may have seen the conversation about doing a BOF, and that there
are no plans to have BOF rooms available at the venue.
Two alternate plans have been discussed. We're currently planning to
have a conversation over lunch on Wednesday, which is when some people
are able to attend.
We're also investigating getting a meeting room at the Meriden, across
the street from the conference venue, for Wednesday evening, after the
last session (ends 18:10) and before the Red Hat/eNovance party
(starts 20:00).
Topics to discuss include getting more non-Red Hat people involved in
RDO packaging, and the steps to get to that reality.
How many people would be interested in attending such a meetup? If you
are, please make a note on
https://etherpad.openstack.org/p/RDO_Meetup_Summit
We're still investigating evening meeting room options, so that's
still tentative at this point, and we'll probably keep the Lunch
gathering either way.
- --Rich
- --
Rich Bowen - rbowen(a)redhat.com
OpenStack Community Liaison
http://openstack.redhat.com/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEARECAAYFAlRSQQ8ACgkQXP03+sx4yJPwnQCg3tqC6dnXoY5jzboa9cDviU/g
KoMAn1D/8n8xLmDTiroHurgheo7+Qjyu
=uQfP
-----END PGP SIGNATURE-----
10 years, 1 month
[Rdo-list] cinder install
by Ganesh Sangle
trying to install openstack-cinder on rhel fails. Any ideas what could be
the issue ?
(Redhat verison: Scientific Linux release 6.1 (Carbon))
> sudo yum install -y openstack-cinder
Loaded plugins: security
http://repos.fedorapeople.org/repos/openstack/openstack-juno/epel-6/repod...:
[Errno 14] PYCURL ERROR 22 - "The requested URL returned error: 404 Not
Found"
Trying other mirror.
Error: Cannot retrieve repository metadata (repomd.xml) for repository:
openstack-juno. Please verify its path and try again
10 years, 1 month
[Rdo-list] Concerning Rabbits
by John Eckersberg
(In the spirit of "Concerning Hobbits")
Ryan O'Hara and I have been investigating RabbitMQ as it pertains to RDO
recently. There has been a lot of discussion on several disparate
threads, so I wanted to try and capture it on the list for the benefit
of everyone.
Ryan has been working on getting RabbitMQ running in a multi-node HA
configuration. I won't steal his thunder, and he can speak to it better
than I can, so I'll defer to him on the details.
As for me, I've been working on el7 support and bug squashing along the
way.
The first bug[1] causes the daemon to load incredibly slow, or outright
fail by timing out. This is due to the SELinux policy disallowing
name_bind on ports lower than 32768. RabbitMQ tries to name_bind to a
port starting at 10000, and increments if it fails. So if you have
SELinux in enforcing mode, you'll get 22768 AVC denials in the log
before it finally starts.
The second bug[2] causes the daemon to intermittently fail to start due
to a race condition in the creation of the erlang cookie file. This
happens only the first time the service starts. Really this is an
Erlang bug, but there's a workaround for the RabbitMQ case.
I've submitted patches for both issues. Until those get merged in, I've
rebuilt[3] RabbitMQ for F20 which includes the fixes.
Beyond bugs, I've also built out RabbitMQ and all the build/runtime
dependencies for el7. I have a yum repo[4] on my fedorapeople page
containing all the bits. This is all the stuff that is presently
missing from EPEL7. In time, I would hope the maintainers build all
this stuff, but for now it'll work for testing. You will also need the
EPEL 7 Beta repository[5] enabled.
As a side note, I built everything using mock with a local override repo
on my workstation. I've not used copr before but it seems relevant to
this sort of thing, so if it's any benefit I'll look to rebuilt the el7
stack there for easier consumption.
Hopefully this helps get the discussion into one place, and provide a
baseline for further investigation by everyone interested in RabbitMQ.
John.
---
[1] Is really two bugzillas, but the same bug:
[1a] https://bugzilla.redhat.com/show_bug.cgi?id=998682
[1b] https://bugzilla.redhat.com/show_bug.cgi?id=1032595
[2] https://bugzilla.redhat.com/show_bug.cgi?id=1059913
[3] http://jeckersb.fedorapeople.org/rabbitmq-server-3.1.5-3.fc20.noarch.rpm
[4] http://jeckersb.fedorapeople.org/rabbitmq-el7/
[5] http://dl.fedoraproject.org/pub/epel/beta/7/x86_64/
10 years, 1 month
