Archive for December, 2015

Lwood-20151227

Introduction

Welcome to Last week on OpenStack Dev (“Lwood”) for the week ending 27th December 2015. For more background on Lwood, please refer here.

Basic Stats for week 21st to 27th December 2015 :

  • ~307 Messages (down almost 50% relative to last week)
  • ~121 Unique threads (down about 34% relative to last week)

If nothing else we can perhaps conclude from the drop in traffic that OpenStack developers know when to take a break, may well be I need to learn something from them :)

Notable Discussions

IRC meetings warning: two “odd” weeks coming up (!)

Many of the IRC meetings within the OpenStack community are scheduled on a bi-weekly basis according to ISO week number.

Thierry Carrez points out that this will cause some quirks as there are two odd numbered weeks one after the other (Wk53 immediately precedes Wk1).

Due to a bug in the way they’re generated, the automatically generated iCals will be out of sync until they regenerate on Week 1.

Note that many projects are not running regular meetings until early January in any case – there is an at least partial list of the projects affected in the “General Events” section below.

Survey/feedback sought on network software verification research

Arseniy Zaostrovnykh posts that he is doing some research on the verification of network applications as part of the EPFL PhD program.  The team he’s involved with are keen to maximize the utility of what they’re working on and so are conducting a small survey.  

While there’s not a lot more detail in the post itself joining some dots based on the questions asked leads me to think it could be quite an interesting project… :)

Upcoming OpenStack Events

A summary of OpenStack related events that cropped up on the mailing list this past week that seemed worth calling out.  Don’t forget the OpenStack Foundation’s excellent Events Page for a comprehensive list!

General Events

Once again a reminder that many projects and working groups are cancelling or altering the schedule of their regular IRC meetings for the period spanning the last week of December 2015 into early January 2016.

Those I’m aware of are listed below, but worth double checking any that you usually attend to save that unnecessary early morning start or late night :)

  • A (possibly incomplete) list for this week: Nova, CloudKitty, Telemetry, Neutron, Ironic, Cross Project Meeting, Vitrage, Puppet, Watcher, Cinder and Sahara
  • For reference the (also possibly incomplete) list from last week’s Lwood: NFV, TelcoWG, Neutron, DVR, Searchlight, Horizon, Glance, Fuel, QA, Performance, Nova, Tacker, Stable, Freezer, Lbaas and Octavia

Midcycles

People and Projects

Further Reading & Miscellanea

Don’t forget these excellent sources of OpenStack news – all three are currently on vacation by the looks so links are to the most recent edition :)

 

This edition of Lwood brought to you by Tal Wilkenfeld (Transformation), Miles Davis (Amandla, Birth of The Cool), Peter Gabriel (Shaking The Tree) amongst other excellent tunes.

In closing the last Lwood of 2015, I extend to you the wish that 2016 will bring you all that you need and a fun amount of what you want :)

Comments

Lwood-20151220

Introduction

Welcome to Last week on OpenStack Dev (“Lwood”) for the week ending 20th December 2015. For more background on Lwood, please refer here.

Basic Stats for week 14th to 20th December 2015 :

  • ~610 Messages (down about 4% relative to last week)
  • ~184 Threads (down about 8% relative to last week)

All getting a little quieter as we near the end of year, a shorter Lwood as a result to the point where I’m worrying I’ve missed something!

Notable Discussions

Two new Open Stack Security Notices (OSSN 0061, 0062)

Glance image signature uses an insecure hash algorithm (MD5) (OSSN 0061)

From the summary “During the Liberty release the Glance project added a feature that supports verifying images by their signature. There is a flaw in the implementation that degrades verification by using the weak MD5 algorithm.” More discussion in the original post or OSSN 0061

Potential reuse of revoked Identity tokens (OSSN 0062)

From the summary “An authorization token issued by the Identity service can be revoked, which is designed to immediately make that token invalid for future use. When the PKI or PKIZ token providers are used, it is possible for an attacker to manipulate the token contents of a revoked token such that the token will still be considered to be valid.  This can allow unauthorized access to cloud resources if a revoked token is intercepted by an attacker.  More in the original post or OSSN 0062

Gerrit Upgrade to 2.11 Complete

Khai writes to confirm the planned upgrade to v2.11 for the main openstack Gerrit instance was completed successfully. The changes were flagged in an earlier post covered in Lwood-20151018

Smaug – a new Application Data Protection project

Eran Gampel announced a new OpenStack project “Smaug” that is aiming tp provide Disaster Recovery for all OpenStack resources.  The post includes an encouraging sounding mission statement for the project, an invitation to join in the bi-weekly meetings and review the proposed Smaug API v1.0

Naming polls for N and O are open

Monty Taylor noted early in the week that polls are open for the OpenStack “N” and “O” names.  Polls close at the end of December 22 (UTC) – a less than 24h from now.

Clarifying “elusive unicorns” – Rolling Upgrades for Cinder

Michael Dulko provided a nicely put together summary of the conversations around rolling upgrades for Cinder (including the reference to “elusive unicorns”) – well worth a read.

Upcoming OpenStack Events

A summary of OpenStack related events that cropped up on the mailing list this past week that seemed worth calling out. Don’t forget the OpenStack Foundation’s excellent Events Page for a comprehensive list though!

General Events

  • A reminder that many projects and working groups are cancelling regular IRC meetings over the last couple of weeks of December 2015 and early January 2016 – worth double checking any that you usually attend to save that unnecessary early morning start or late night :)
    • A (possibly incomplete) list: NFV, TelcoWG, Neutron, DVR, Searchlight, Horizon, Glance, Fuel, QA, Performance, Nova, Tacker, Stable, Freezer, Lbaas and Octavia

Midcycles

  • [kosmos] Midcycle 20-22 January, Seattle, WA, USA – Graham Hayes
  • [designate] Midcycle – 8-10 February, Galway, Ireland – Graham Hayes
  • [tacker] Surveying dates for midcycle – End January, San Jose, CA, USA – Sridhar Ramaswarmy
  • [ansible] Midcycle Partially co-located with Ops Midcycle 15-17 February, UK  – Jesse Pretorious

People and Projects

Further Reading

Don’t forget these excellent sources of OpenStack news :)

Miscellanea

This is the last Lwood before Christmas and so I take this opportunity to wish you and yours the very best for Christmas or your preferred observance at this time of year! :)

This edition of Lwood brought to you by Marillion (A Singles Collection, Clutching At Straws), Queen (Greatest Hits I & II), Richard Clapton (The Best Years of our Lives), Rush (Hold Your Fire) amongst other excellent tunes.

Comments

Lwood-20151213

Introduction

Welcome to Last week on OpenStack Dev (“Lwood”) for the week ending 13th December 2015. For more background on Lwood, please refer here.

Basic Stats for week 7th to 13th December 2015 :

  • ~635  Messages (down about 20% relative to last week)
  • ~201 Threads (down about 13% relative to last week)

Traffic and threads have dropped back to pre- R1 milestone rush levels…

Notable Discussions

Private Links in Launchpad

Roman Prykhodchenko pens a timely reminder about ensuring that when posting links into launchpad or other OpenStack sites, that we only reference things that are public.

He alludes to some specific examples from fuel where he’s marked bugs incomplete for this very reason, but I’d venture it’s something that crops from time to time up across most FOSS projects.

Release Schedules and Project Deadlines delivered direct to your calendar ?

Flavio Percoco writes to float the idea of creating .ics generated automagically for OpenStack Release Schedule and Project Deadline information.  A flurry of replies all variations on the theme of “that sounds great” and a few messages later a post from Louis Taylor with a proposed implementation.

Neato!

Changes to automated behaviour when patches merge

Doug Hellmann’s post follows one from late November and notes that as part of the process of deprecating the use of launchpad for tracking completed work there have been changes to the default behaviour when patches merge.

From herein by default behavior is that when a patch with “Fixes-Bug” in the commit message merges the bug will move to “Fix Released” (a closed state) instead of “Fix Committed” (a “still open” state).  Thierry Carrez later notes that this default behaviour can be changed on a per project basis if required.

New Release of the Gabbi HTTP API tester

Chris Dent posted midweek to announce a new version of Gabbi – a testing library that uses YAML format to declare HTTP API requests and their expected responses and so allow functional testing of OpenStack (and other HTTP request based) APIs.

Chris goes on to note that Gabbi is being used by Ceilometer, Gnocchi and AODH for some functional tests of their APIs and he’s happy to assist other projects in making use of it – reach out to him on IRC if you get stuck.

Upcoming OpenStack Events

This section was previously called “Midcycle dates and locations”, new name reflects the observation that there were other OpenStack related events that crop up on the mailing list that were worth calling out.  Don’t forget the OpenStack Foundation’s excellent Events Page for a comprehensive list though!

General Events

  • Open Cloud Symposium at linux.conf.au 31 January – 5 February in Geelong, Victoria, Australia – Josh Hesketh
    • Yes this is a repeat, but LCA is near and dear to me so a little extra publicity :)

Midcycles

People and Projects

Further Reading & Miscellanea

Don’t forget these excellent sources of OpenStack news :)

This edition of Lwood brought to you by Black Country Communion (Afterglow), Yngwie Malmsteen (“Far Beyond the Sun” Live), Magnum (On a Storyteller’s Night) and Rock of Ages (Original Cast Recording) amongst other excellent tunes.

Comments

Lwood-20151206

Introduction

Welcome to Last week on OpenStack Dev (“Lwood”) for the week ending 6th December 2015. For more background on Lwood, please refer here.

Basic Stats for week 30th November to 6th December 2015 :

  • ~793 Messages (up about 28% relative to last week)
  • ~232 Threads (up about 26% relative to last week)

Traffic and threads up markedly this week – R1 milestone traffic and some long technical threads at least part of the trend.

Notable Discussions

Semi automated static code analysis of OpenStack modules

Péter Hegedűs writes of work underway at the University of Szeged in conjunction with Ericsson Hungary that seeks to harden the codebase and so improve the overall quality of OpenStack.  

They are using an interesting combination of automated code analysis and manual review to find things like long/complex methods, duplicated code and so forth.  Worth checking out the information in the original thread or on the Wiki page they’ve put together.

Improving the effectiveness of Cross-project specs

Mike Perez puts forward an excellent suggestion for improving the effectiveness of Cross-Project specifications.  The essence of the idea is that projects nominate a cross-project liaison person who can take some of the load off the PTL by explicitly keeping an eye on things that come in to the project from the cross-project repo and ensure they get the attention required.

A neat (and well received) solution – please take a moment to acquaint yourself with the proposal particularly if if you’re a PTL or Core :)

Should DefCore explicitly require running Linux as a compute capability ?

Chris Hodge posts a request for comment on whether Defcore should explicitly require running Linux as as a compute capability.  This is an offshoot of an earlier conversation (reported in Lwood-20151122) kicked off by Egle Sigler which raised the more general question of what should and shouldn’t be OS specific.

It’s a pretty nuanced matter (and isn’t as simple as should we always be able to “run Linux”) – the summary document is worth a skim if DefCore is up your alley :)

New Mitaka Release Schedule Page

Thierry Carrez notes that “As part of the effort to move reference information off the wiki to a more peer-reviewable area, the Mitaka release schedule page was moved…” it’s new home is http://docs.openstack.org/releases/schedules/mitaka.html.

In the post he goes on to explain that projects can now propose their own deadlines through a page in the git repository and asks that projects add their information to same – the aim being to make the page a one stop shop for release information across OpenStack as a whole.

Desperately seeking the Java mirror person

Well perhaps not desperately, but Michael Krotscheck tells of a conversation some months ago on #openstack-infra where someone asked for a maven repository mirror for java builds.  He’s not been able to find trace of the person or conversation and would like to follow up with them :)

He also invites anyone else curious about the topic to help review the spec and/or patches.

OpenStack Health Dashboard

Matthew Treinish announces a rather neat test results dashboard that provides information from the gate.  Rather cool, rather useful!

Privacy issues with some OpenStack documentation ?

Thomas Goirand kicked off a couple of threads (1st here,  2nd here) late in the week both flagging concerns about the use of Google Analytics, generic CDN and other external links within OpenStack documentation.

While the tone of the the posts are a little emotive in places the technical merit of what he puts forward are valid enough and some solutions have already been put forward but the community to address them.

Upcoming OpenStack Events

This section was previously called “Midcycle dates and locations”, new name reflects the observation that there were other OpenStack related events that crop up on the mailing list that were worth calling out.  Don’t forget the OpenStack Foundation’s excellent Events Page for a comprehensive list though!

General Events

Midcycles

People and Projects

Further Reading & Miscellanea

Don’t forget these excellent sources of OpenStack news :)

This edition of Lwood brought to you by Harunobu Okubo and friends (performing ELP), Vanessa Rodrigues (Soul Project), Liquid Tension Experiment (2) amongst other excellent tunes.

 

Comments