{"id":240,"date":"2015-02-03T10:18:28","date_gmt":"2015-02-03T10:18:28","guid":{"rendered":"http:\/\/thomas.goirand.fr\/blog\/?p=240"},"modified":"2015-02-03T10:18:28","modified_gmt":"2015-02-03T10:18:28","slug":"openstack-packaging-activity-november-2014-to-january-2015","status":"publish","type":"post","link":"http:\/\/thomas.goirand.fr\/blog\/?p=240","title":{"rendered":"OpenStack packaging activity, November 2014 to January 2015"},"content":{"rendered":"<p><strong>November 2014:<\/strong><br \/>\n<strong>Sunday 2nd:<\/strong><br \/>\n&#8211; Travel from Moscow to Paris<\/p>\n<p><strong>Monday 3rd to Sunday 8th:<\/strong><br \/>\n&#8211; Summit in Paris<\/p>\n<p><strong>Monday 10th:<\/strong><br \/>\n&#8211; Uploaded python-rudolf to Sid (needed by Fuel)<br \/>\n&#8211; Uploaded python-invoke and python-invocations (needed to run fabric&#8217;s unit tests)<br \/>\n&#8211; Uploaded python-requests-kerberos\/0.5-2 fixing CVE-2014-8650: failure to handle mutual authentication. Asked the release team for unblock.<br \/>\n&#8211; Uploaded openstack-pkg-tools version 19 fixing startup with systemd in Jessie (added RuntimeDirectory directive). Asked the release team for unblock.<br \/>\n&#8211; Opened ticket to remove TripleO, Tuskar and Ironic packages from Jessie. I don&#8217;t consider them ready for a Debian stable release, and there&#8217;s no long term support from upstream.<br \/>\n&#8211; Fixed Designate Juno dbsync process which prevented it from being installed.<br \/>\n&#8211; Fixed Ironic Juno unowned files after purge (policy 6.8, 10.8): \/var\/lib\/ironic\/{cache, ironicdb} (eg: purging these folders on purge)<\/p>\n<p><strong>Thuesday 11:<\/strong><br \/>\n&#8211; Fixed nova-api &#8220;CVE-2014-3708: Nova network DoS through API filtering&#8221; in both the Juno and Icehouse release. Asked the release team to unblock the Icehouse version for Jessie. See: https:\/\/bugs.debian.org\/769163<br \/>\n&#8211; Uploaded Cinder with Duch debconf translation fix and pt.po<br \/>\n&#8211; Uploaded python-django-pyscss with upstream patch for Django 1.7 support instead of the Debian one that I wrote 2 months ago. Asked the release team to unblock which they did.<\/p>\n<p><strong>Wednesday 12:<\/strong><br \/>\n&#8211; Uploaded fix for horizon (see #769101) unowned files after purge (policy 6.8, 10.8). Now purging \/usr\/share\/openstack-dashboard\/openstack_dashboard on purge.<br \/>\n&#8211; Uploaded Ironic with Duch translations of debconf<br \/>\n&#8211; Uploaded Designate with Duch translations of Debconf screens<br \/>\n&#8211; Uploaded openstack-trove with Duch translations of Debconf screens<br \/>\n&#8211; Uploaded Tuskar with Duch translations of Debconf screens<br \/>\n&#8211; Updated python-oslotest in Experimental to version 1.2.0<\/p>\n<p><strong>Thursday 13:<\/strong><br \/>\n&#8211; Uploaded new packages: python-oslo.middleware and python-oslo.concurrency.<br \/>\n&#8211; Opened a new packaging branch for Nova Kilo, and updated (build-)depends.<br \/>\n&#8211; Uploaded fix for Icehouse Cinder: &#8220;delete volume failed due to unicode problems&#8221;, and asked for unblock.<br \/>\n&#8211; Uploaded new package: python-pygit2 and python-xmlbuilder, needed for fuel-agent-ci.<br \/>\n&#8211; Uploaded sheepdog with Duch debconf translation.<br \/>\n&#8211; Uploaded python-daemonize to Sid (in FTP master NEW queue).<br \/>\n&#8211; Re-uploaded python-invoke after FTP master rejection (missing copyright information)<\/p>\n<p><strong>Friday 14:<\/strong><br \/>\n&#8211; Uploaded liberasurecode &amp; python-pyeclib to Sid, now in the FTP masters NEW queue waiting for approval. This will soon be needed by Swift.<\/p>\n<p><strong>Monday 17:<\/strong><br \/>\n&#8211; Worked on the Cobbler packaging (all day long&#8230;)<\/p>\n<p><strong>Tuesday 18:<\/strong><br \/>\n&#8211; Worked on backporting all of Fuel packages to Wheezy. Done with fuelclient already.<br \/>\n&#8211; Uploaded ruby-cstruct and ruby-rethtool to Sid (needed by nailgun-agent)<\/p>\n<p><strong>Wednesday 19:<\/strong><br \/>\n&#8211; Uploaded pyeclib again, with fixes for the build-depends. Package is still in the NEW queue anyway.<br \/>\n&#8211; Built a Debian-based bootstrap hardware discovery image for Fuel, and &#8230; it seems that it works already (to be checked&#8230;)! \\o\/<br \/>\nTo be added as packages in the ISO:<br \/>\n* nailgun-mcagents<br \/>\n* nailgun-net-check<br \/>\n* fuel-agent<br \/>\n* python-tasklib<\/p>\n<p><strong>Thursday 20:<\/strong><br \/>\n&#8211; Uploaded python-tasklib to Sid (now in NEW queue&#8230;)<br \/>\n&#8211; Continued working on the discovery bootstrap ISO<\/p>\n<p><strong>Friday 21:<\/strong><br \/>\n&#8211; Documented Sahara procedure in Debian in the official install-guide: https:\/\/review.openstack.org\/136237<br \/>\n&#8211; Fixed oslo.messaging so it doesn&#8217;t use PROTOCOL_SSLv3 because its support has been removed from Debian (due to possible protocol downgrade attacks): https:\/\/review.openstack.org\/136278 and uploaded fixed packages for Sid and Experimental.<br \/>\n&#8211; Uploaded fixed Neutron packages for CVE-2014-7821 in both Sid and Experimental (eg: Icehouse and Juno)<\/p>\n<p><strong>Monday 24:<\/strong><br \/>\n&#8211; Uploaded new package: python-os-client-config (in NEW queue)<br \/>\n&#8211; Installed new Xen server to be used as my new Jenkins build machine<br \/>\n&#8211; Moved the juno-wheezy VM to it<br \/>\n&#8211; Finished to package python-pymysql and uploaded to Sid. It&#8217;s now running all unit tests successfully! \\o\/<\/p>\n<p><strong>Tuesday 25:<\/strong><br \/>\n&#8211; Uploaded fix for openstack-debian-images to add the -o compat=1.0 option when building an image with Qemu &gt; 1.0. Opened bug to the release team to have it unblocked.<br \/>\n&#8211; Continued working on unit tests for fuel-nailgun.<\/p>\n<p><strong>Wednesday 26:<\/strong><br \/>\n&#8211; Uploaded python-os-net-config to Sid (new package)<br \/>\n&#8211; Worked briefly on python-cassandra-driver. It needs cassandra to be in, which is a LOT of work.<br \/>\n&#8211; Found a (not useable) hack to run nailgun unit tests. It works, however, it doesn&#8217;t seem like fuel-nailgun is designed to be able to use unix socket for the postgres connection in its unit tests.<br \/>\n&#8211; Uploaded python-pykmip to Sid (new package)<br \/>\n&#8211; Updated the Debian wheezy backport repository for libvirt to version 1.2.9 from official wheezy-backports. Removed policykit-1 and libusb from there too, as it broke stuff to use a backported version (X and usb were not useable on my Wheezy laptop when using it&#8230;).<\/p>\n<p><strong>Thursday 27 &amp; Friday 28:<\/strong><br \/>\n&#8211; Uploaded new Javascript packages or dependencies for Fuel: libjs-autonumeric, libjs-backbone-deep-model, libjs-backbone.stickit, libjs-cocktail, libjs-i18next, libjs-require-css, libjs-requirejs, libjs-requirejs-text<\/p>\n<p>Sunday 30:<br \/>\n&#8211; Uploaded debian\/copyright fixes for libjs-backbone-deep-model, libjs-backbone.stickit and libjs-cocktail after the packages were accepted by the FTP masters and they gave remarks about copyright.<\/p>\n<p><strong>DECEMBER 2014<\/strong><\/p>\n<p><strong>Monday 01:<\/strong><br \/>\n&#8211; Uploaded new Debian image to MOX, after I unerstood the issue was about the architecture field that I was wrongly filling. I&#8217;ll be able to use that for Tempest checking on my dev account.<\/p>\n<p><strong>Tuesday 02:<\/strong><br \/>\n&#8211; Uploaded python-q-text-as-data to Sid (new awesome package!)<br \/>\n&#8211; Uploaded Horizon with some triggers mechanisms to start the compress when one of its JS depends is updated. That&#8217;s very important for security!<br \/>\n&#8211; Uploaded a fixed version of heat-cfntools to Sid (it was missing the \/usr\/lib\/python* folder). Asked the release team for an unblock so it can reach Jessie.<br \/>\n&#8211; Fixed unit tests in fuel-nailgun, thanks to a patch from Sebastian Kalinowski. Now all unit tests are passing but one (for which I opened a launchpad bug: tests are trying to write in \/var\/log\/nailgun, which is impossible at package build time).<\/p>\n<p><strong>Wednesday 03:<\/strong><br \/>\n&#8211; Uploaded fixed version of ruby-rethtool after FTP master&#8217;s rejection and upstream correction of licensing files.<br \/>\n&#8211; Uploaded fixed version of libjs-require-css after FTP master&#8217;s rejection<br \/>\n&#8211; Fixed (in Git only) python-sysv-ipc missing build-depends on dh-python as per bug opened by James Page (this is not so important, but I did it still).<br \/>\n&#8211; Continued working on the tempest-ci scripts.<br \/>\n&#8211; Added to the image-guide docs about openstack-debian-images: https:\/\/review.openstack.org\/#\/c\/138743\/<\/p>\n<p><strong>Thursday 04:<\/strong><br \/>\n&#8211; Uploaded new package: python-proliantutils. Send patch to upstream about an issue in indentation (mix-up with space and tabs) which made the package uninstallable with Python 3.4.<\/p>\n<p><strong>Friday 05:<\/strong><br \/>\n&#8211; Worked on the package CI.<\/p>\n<p><strong>Monday 07:<\/strong><br \/>\n&#8211; Worked on the package CI. All works now, up to all of the Tempest tests for Keystone. Now need to fix the neutron config.<\/p>\n<p><strong>Thuesday 08:<\/strong><br \/>\n&#8211; Continued working on the CI.<\/p>\n<p><strong>Wednesday 09:<\/strong><br \/>\n&#8211; Uploaded fix for FTBFS of python-tasklib (Closes: #772606)<br \/>\n&#8211; Uploaded fix for libjerasure-deb missing dependency on libgf-complete-dev, package already unblocked and will migrate to Jessie.<br \/>\n&#8211; Uploaded fix for Designate Juno fail to upgrade from Icehouse: this was due to the database_connection directive renamed to connection =.<br \/>\n&#8211; Uploaded fix for Designate purge in Sid (Icehouse release of Designate).<br \/>\n&#8211; Commited to git updates of the German debconf translation in both Icehouse and Juno.<br \/>\n&#8211; Updated nova to use libvirtd as init script dependency instead of libvirt-bin (this was renamed in the libvirt-daemon-system package).<br \/>\n&#8211; Do not touch the db connection directive if user didn&#8217;t ask for db handling by the package.<\/p>\n<p><strong>Thursday 10 to Saturday 13:<\/strong><br \/>\n&#8211; Finally understood the issues with systemd service files not being activated by default. Fixed openstack-pkg-tools, and uploaded version 20 to Sid, after the release team accepted the changes.<\/p>\n<p><strong>Sunday 14:<\/strong><br \/>\n&#8211; Uploaded Juno 2014.2.1 to Experimental: ceilometer, cinder, glance, python-glance-store, heat, horizon, keystone<\/p>\n<p><strong>Monday 15:<\/strong><br \/>\n&#8211; Finished uploading Juno 2014.2.1 to Experimental: Nova, Neutron, Sahara<\/p>\n<p><strong>Tuesday 16:<\/strong><br \/>\n&#8211; Added crontab to flush tokens in Icehouse Keystone<br \/>\n&#8211; Some more CI work<\/p>\n<p><strong>Wednesday 17:<\/strong><br \/>\n&#8211; Uploaded keystone with systemd fix and crontab to flush the token table in Sid (eg: Icehouse).<br \/>\n&#8211; Uploaded nova Icehouse with a bunch of fixes in Sid.<\/p>\n<p><strong>Thursday 18:<\/strong><br \/>\n&#8211; Updated some issues in Nova Icehouse (Sid\/Jessie)<\/p>\n<p><strong>Friday 19:<\/strong><br \/>\n&#8211; Started building a new Jenkins instance for building Kilo packages<\/p>\n<p><strong>Monday 22:<\/strong><br \/>\n&#8211; Finished building the new Jenkins instance for building Kilo packages, and rebuilt every packages there, using Jessie as a base.<\/p>\n<p><strong>Tuesday 23:<\/strong><br \/>\n&#8211; Updated version for the following packages: oslo.utils, oslo.middleware, stevedore, oslo.concurency, pecan, oslo.concurrency, python-oslo.vmware, python-glance-store<br \/>\n&#8211; Built so far: Ceilometer, Keystone, python-glanceclient, cinder, glance<\/p>\n<p><strong>Wednesday 24:<\/strong><br \/>\n&#8211; Continued packaging Kilo beta 1. Updated: nova, designate, neutron<br \/>\n&#8211; Uploaded python-tempest-lib to Debian Unstable (new package)<\/p>\n<p><strong>Wednesday 31:<\/strong><br \/>\n&#8211; Continued packaging Kilo beta 1. Updated: heat<\/p>\n<p><strong>JANUARY 2015<\/strong><\/p>\n<p><strong>Thursday 01:<\/strong><br \/>\n&#8211; Continued packaging Kilo beta 1. Updated: ironic, openstack-trove, openstack-doc-tools, ceilometer<\/p>\n<p><strong>Friday 02:<\/strong><br \/>\n&#8211; Finished packaging Kilo beta 1. Updated: Sahara, Murano, Murano-dashboard, Murano-agent<\/p>\n<p><strong>Sunday 04:<\/strong><br \/>\n&#8211; Started testing Kilo beta 1. Fixed a few issues on default configuration for Ceilometer and Glance.<\/p>\n<p><strong>Monday 05:<\/strong><br \/>\n&#8211; Fixed openstack-pkg-tools which failed to create PID files at boot time, Uploaded to Sid, asked the release team for unblock.<br \/>\n&#8211; Uploaded ceilometer &amp; cinder to Sid, rebuilt against openstack-pkg-tools 21.<br \/>\n&#8211; Did more testing of Kilo beta 1, fixed a few more minor issues.<\/p>\n<p><strong>Tuesday 06:<\/strong><br \/>\n&#8211; Uploaded glance, neutron, nova, designate, keystone, heat, trove to Sid, so that all sysv-rc init scripts are fixed with the new openstack-pkg-tools 21. Designate, heat, keystone and trove contains other minor fixes reported to the Debian BTS.<\/p>\n<p><strong>Wednesday 07:<\/strong><br \/>\n&#8211; Asked the Debian release team (open bugs with debdiff as attachment) for unblocks of glance, neutron, nova, designate, keystone, heat, trove so they migrate to Jessie.<br \/>\n&#8211; Fixed a few minor issues tracked in the Debian BTS on various packages.<\/p>\n<p><strong>Thesday 08:<\/strong><br \/>\n&#8211; James Page from Canonical informed me that they are now using openstack-pkg-tools for maintaining their daemons in Nova, Cinder and Keystone in Ubuntu. That&#8217;s an awesome news : more QA for both platforms.<br \/>\n&#8211; James Page found out that dh_installinit *must* be called *after* the call of dh_systemd_enable, otherwise, daemons aren&#8217;t started automatically at the first install of packages, as the unmask of systemd happens after the invoke-rc.d.<\/p>\n<p><strong>Friday 09:<\/strong><br \/>\n&#8211; Did some QA checks on the latest upload. Fixed Heat which broke because using the wrong template name (glance instead of heat).<\/p>\n<p><strong>Monday 12:<\/strong><br \/>\n&#8211; Started re-running the automated openstack-deploy scrip in Icehouse, Juno and Kilo. Found out the issue in Keystone wasn&#8217;t fixed in Juno (but was fixed in other releases), and fixed it.<br \/>\n&#8211; Removed the use of ssl.PROTOCOL_SSLv3 from heat (removed form Debian). Uploaded the fixed package to Sid.<br \/>\n&#8211; All of openstack-deploy (debian\/kilo branch) now works and succesfully installs OpenStack again.<\/p>\n<p>If dh_installinit is called before, we have:<\/p>\n<pre class=\"brush:shell\"># Automatically added by dh_installinit\r\nif [ -x \"\/etc\/init.d\/keystone\" ]; then\r\nupdate-rc.d keystone defaults &gt;\/dev\/null\r\nfi\r\nif [ -x \"\/etc\/init.d\/keystone\" ] || [ -e \"\/etc\/init\/keystone.conf\" ]; then\r\ninvoke-rc.d keystone start || true\r\nfi\r\n# End automatically added section\r\n# Automatically added by dh_systemd_enable\r\n# This will only remove masks created by d-s-h on package removal.\r\ndeb-systemd-helper unmask keystone.service &gt;\/dev\/null || true\r\n\r\n# was-enabled defaults to true, so new installations run enable.\r\nif deb-systemd-helper --quiet was-enabled keystone.service; then\r\n# Enables the unit on first installation, creates new\r\n# symlinks on upgrades if the unit file has changed.\r\ndeb-systemd-helper enable keystone.service &gt;\/dev\/null || true\r\nelse\r\n# Update the statefile to add new symlinks (if any), which need to be\r\n# cleaned up on purge. Also remove old symlinks.\r\ndeb-systemd-helper update-state keystone.service &gt;\/dev\/null || true\r\nfi\r\n# End automatically added section<\/pre>\n<p>If it&#8217;s called after dh_systemd_enable, we have:<\/p>\n<pre class=\"brush:shell\"># Automatically added by dh_systemd_enable\r\n# This will only remove masks created by d-s-h on package removal.\r\ndeb-systemd-helper unmask keystone.service &gt;\/dev\/null || true\r\n\r\n# was-enabled defaults to true, so new installations run enable.\r\nif deb-systemd-helper --quiet was-enabled keystone.service; then\r\n# Enables the unit on first installation, creates new\r\n# symlinks on upgrades if the unit file has changed.\r\ndeb-systemd-helper enable keystone.service &gt;\/dev\/null || true\r\nelse\r\n# Update the statefile to add new symlinks (if any), which need to be\r\n# cleaned up on purge. Also remove old symlinks.\r\ndeb-systemd-helper update-state keystone.service &gt;\/dev\/null || true\r\nfi\r\n# End automatically added section\r\n# Automatically added by dh_installinit\r\nif [ -x \"\/etc\/init.d\/keystone\" ]; then\r\nupdate-rc.d keystone defaults &gt;\/dev\/null\r\nfi\r\nif [ -x \"\/etc\/init.d\/keystone\" ] || [ -e \"\/etc\/init\/keystone.conf\" ]; then\r\ninvoke-rc.d keystone start || true\r\nfi\r\n# End automatically added section<\/pre>\n<p>As a consequence, I have to re-upload version 22 of openstack-pkg-tools and also re-upload all OpenStack core packages to Debian Sid.<\/p>\n<p>&#8211; Fixed a number of issues like:<br \/>\n* dbc_upgrade = true check which shouldn&#8217;t have been there in postinst.<br \/>\n* &lt;project&gt;\/configure_db default value is now always false<br \/>\n* db_sync and pkgos_dbc_postinst are now only done if &lt;project&gt;\/configure_db is set to true.<br \/>\n&#8211; Rebuilt all packages in Juno and Kilo with the above changes.<\/p>\n<p><strong>Tuesday 13:<\/strong><br \/>\n&#8211; Opened unblock bugs for the release team to unblock all fixed packages.<br \/>\n&#8211; Made more tests in Juno and Kilo to make sure the fixed bugs in Icehouse are fixed there too.<br \/>\n&#8211; Fixed numerous issues in Trove (missing trove-conductor.conf, wrong trove-api init file, etc.). More work will be needed for it for both Icehouse and newer releases.<\/p>\n<p><strong>Wednesday 14:<\/strong><br \/>\n&#8211; Did a doc meeting about debconf. Some doc contributors still want to kill the debconf \/ debian manual, and I have to not agree.<br \/>\n&#8211; Made a new patch to better document the keystone install procedure:<br \/>\n&#8211; Did some bug triaging in the doc about Debian.<br \/>\n&#8211; Uploaded new versions of core packages to Experimental (eg: Juno) built against openstack-pkg-tools &gt;= 22~, and some fixes forward ported from Icehouse: Keystone, Ceilometer, Cinder, Glance, Heat, Ironic, Murano, Neutron, Nova, Saraha and Murano-agent. All where rebuilt in Juno (Wheezy + Trusty) and Kilo (Jessie only) on my Jenkins.<\/p>\n<p><strong>Thuesday 15:<\/strong><br \/>\n&#8211; Succesfully booted a live-build Debian live image containing mcollective and nailgun-agent as a Debian replacement for the hardware discovery \/ boostrap image of Fuel. Now, I need to find a way to use just a kernel + initramfs<\/p>\n<p><strong>Friday 16 to Tuesday 20:<\/strong><br \/>\n&#8211; Worked on the packaging CI.<\/p>\n<p><strong>Wednesday 21:<\/strong><br \/>\n&#8211; Fixed https:\/\/bugs.debian.org\/775636 (Horizon failed to build due to a Moscow timezone change and wrong test). Uploaded to Sid, asked for unblock.<br \/>\n&#8211; Fixed https:\/\/bugs.debian.org\/775926: CVE-2015-1195: Glance still allows users to download and delete any file in glance-api server (applied upstream patch). Uploaded to Sid, asked for unblock. Uploaded Juno version to Experimental.<br \/>\n&#8211; Uploaded openstack-trove with the remaining fixes, asked release team for unblock.<br \/>\n&#8211; Uploaded python-glanceclient 0.15.0 (Juno) to Experimental because it fixes an issue with HTTPS. Added to it a patch from James Page not yet merged, which fixes unit test with Python 2.7.9 (7 failures otherwise).<br \/>\n&#8211; Uploaded python-xstatic-d3 as it can&#8217;t be installed anymore in Sid after a new version of d3 was uploaded.<\/p>\n<p><strong>Thursday 22:<\/strong><br \/>\n&#8211; Uploaded python-xstatic-smart-table and libjs-angularjs-smart-table to Sid (new packages, now in NEW queue).<\/p>\n<p><strong>Friday 23:<\/strong><br \/>\n&#8211; Ask for the removal of the below list of packages from Jessie:<br \/>\npython-xstatic<br \/>\npython-xstatic-angular<br \/>\npython-xstatic-angular-cookies<br \/>\npython-xstatic-angular-mock<br \/>\npython-xstatic-bootstrap-datepicker<br \/>\npython-xstatic-bootstrap-scss<br \/>\npython-xstatic-d3<br \/>\npython-xstatic-font-awesome<br \/>\npython-xstatic-hogan<br \/>\npython-xstatic-jasmine<br \/>\npython-xstatic-jquery<br \/>\npython-xstatic-jquery-migrate<br \/>\npython-xstatic-jquery-ui<br \/>\npython-xstatic-jquery.bootstrap.wizard<br \/>\npython-xstatic-jquery.quicksearch<br \/>\npython-xstatic-jquery.tablesorter<br \/>\npython-xstatic-jsencrypt<br \/>\npython-xstatic-qunit<br \/>\npython-xstatic-rickshaw<br \/>\npython-xstatic-spin<br \/>\nlibjs-jsencrypt<br \/>\nlibjs-spin.js<br \/>\nlibjs-twitter-bootstrap-datepicker<br \/>\nlibjs-twitter-bootstrap-wizard<\/p>\n<p>They are used only in OpenStack Horizon starting on 2014.2 (aka Juno), and Jessie is shipped with Icehouse, so it&#8217;s IMO best to not carry the burden of maintaining these packages for the life of Jessie.<\/p>\n<p><strong>Monday 26:<\/strong><br \/>\n&#8211; Enhanced and review requested changes for https:\/\/review.openstack.org\/147296 (ie: Keystone install with more details about what the package does).<br \/>\n&#8211; Finished testing network on the CI install. Now need to automate all.<\/p>\n<p><strong>Tuesday 27:<\/strong><br \/>\n&#8211; Closed all bugs on the rabbitmq-server package (2 correction, one bug triage).<br \/>\n&#8211; Uploaded a fix for the missing conntrack dependency in neutron-l3-agent.<br \/>\n&#8211; Restarted working on CI setup of Juno after success with manual install in a Xen domU.<br \/>\n&#8211; Uploaded fix to make sheepdog build reproducible (patch from the Debian BTS).<\/p>\n<p><strong>Thursday 28:<\/strong><br \/>\n&#8211; Fixed and uploaded to Sid openstack-debian-images 2 bugs reported by Steve McIntire. Official Debian images for OpenStack are now available at:<br \/>\nhttp:\/\/cdimage.debian.org\/cdimage\/openstack\/ \\o\/<br \/>\nNote that this is the weekly build of testing. We wont get Debian Stable images before Jessie is out.<br \/>\n&#8211; Documented the new image thing here: http:\/\/docs.openstack.org\/image-guide\/content\/ch_obtaining_images.html#debian-images as a new patch: https:\/\/review.openstack.org\/#\/c\/151015\/<br \/>\n&#8211; Fixed my patch for keystone debconf doc at: https:\/\/review.openstack.org\/#\/c\/147296\/<\/p>\n<p><strong>Wednesday 29:<\/strong><br \/>\n&#8211; Continued working on packaging CI<\/p>\n<p><strong>Thursday 30:<\/strong><br \/>\n&#8211; Fixed CVE on Neutron (Juno): L3 agent denial of service with radvd 2.0+<br \/>\n&#8211; Fixed CVE on Glance (Icehouse + Juno): Glance user storage quota bypass. Asked release team for unblock.<br \/>\n&#8211; Fixed the image-guide patch after review (ie: https:\/\/review.openstack.org\/151015)<\/p>\n","protected":false},"excerpt":{"rendered":"<p>November 2014: Sunday 2nd: &#8211; Travel from Moscow to Paris Monday 3rd to Sunday 8th: &#8211; Summit in Paris Monday 10th: &#8211; Uploaded python-rudolf to Sid (needed by Fuel) &#8211; Uploaded python-invoke and python-invocations (needed to run fabric&#8217;s unit tests) &#8211; Uploaded python-requests-kerberos\/0.5-2 fixing CVE-2014-8650: failure to handle mutual authentication. Asked the release team for [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=\/wp\/v2\/posts\/240"}],"collection":[{"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=240"}],"version-history":[{"count":2,"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=\/wp\/v2\/posts\/240\/revisions"}],"predecessor-version":[{"id":242,"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=\/wp\/v2\/posts\/240\/revisions\/242"}],"wp:attachment":[{"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=240"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=240"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/thomas.goirand.fr\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=240"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}