Fedora OpenStack Projects
First of all, a handy link worth bookmarking is from the preview "Fedora Packages" service, which gives a handy way to drill down to details and status of all the Fedora OpenStack projects
OpenStack Folsom Design Summit and Conference
Fedora Booth
The OpenStack Folsom Design Summit and Conference is taking place April 16-20 and Fedora will have a booth at the conference. We are preparing some Fedora marketing collateral for the event.
Design Summit
The schedule for the Folsom Design Summit is being prepared at summit.openstack.org and the following proposals have been submitted by Fedora contributors:
- Dependency management design
- Common configuration patterns
- Stable branch maintenance
- openstack-common library
- Glance backend storage capabilities
- Smoke testing realistic deployment
- Versioning the Nova RPC APIs
- Resource rationing in Glance
OpenStack Security Issues
Dan Prince identified two security issues:
- CVE-2012-1585 Long server names grow nova-api log files significantly (public Thursday, March 29th, 1500UTC)
- CVE-2012-1572 Extremely long passwords can crash Keystone (public Tuesday, March 27th, 1500UTC)
These were promptly addressed through Russell Bryant on the OpenStack Vulnerability Management Team.
We have now fully documented the process for handling and releasing security updates for OpenStack in Fedora.
Fedora 17 Updates
Getting Started guide
Testing OpenStack Essex on Fedora 17 continues, with the setup instructions being kept up to date, and improved. For example, Cole Robinson updated the instructions to use OpenStack commands rather than euca2ools.
Release Candidate packages
Alan Pevec made a Fedora 17 preview repo available for providing the latest openstack packages irrespective of release freeze scheduling.
Fedora 17 has currently got Essex RC1 releases of Nova, Glance, Keystone, Quantum, and Swift 1.4.8 available. With the emphasis on testing and fixing before the final release there have been subsequent upstream fixes:
- nova milestone-proposed changes
- glance milestone-proposed changes
- keystone milestone-proposed changes
- quantum milestone-proposed changes
Other updates not included in the above lists are, for example, a fix to support libvirt images on GlusterFS.
The final Essex releases with the above fixes are being prepared and tested. Subsequent updates may also be included in the Fedora packages like:
Alan Pevec has been polishing Swift packages, in conjunction with testing from Derek Higgins:
- support for multiple swift instances
- add man pages
- additional init scripts
- include default configs
- SELinux issues
Other updates
The python-eventlet package used by OpenStack was updated to fix resource leaks.
Fedora specific changes have been made too, including:
- Fix process restarting with systemd and KillMode=process
- Glance switched to MySQL by default rather than sqlite
Following on from OpenStack test day observations, SELinux fixes have been included to support new OpenStack services:
Misc News
Russell Bryant has continued to work on Fedora support in devstack, which is a script to setup openstack services for development on a single node. Adam Young then documented his use of devstack to setup his environment.
A couple of new Fedora OpenStack packagers have joined, Gary Kotton (gkotton) and Joe Breu (rackerjoe).
Lorin Hochstein updated the upstream OpenStack manuals to include information on Fedora "Virtual Machine" images.
Finally, There were a couple of blogs relating to OpenStack and Fedora: