)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":11303,"name":"Markus Zoeller (markus_z)","email":"mzoeller@linux.vnet.ibm.com","username":"mzoeller"},"change_message_id":"d868562b29b34ab4394e62c8a9ff1a5457459967","unresolved":false,"context_lines":[{"line_number":11,"context_line":"not documented in the \"admin guide\"."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: I973dda4f284ce0f3422df3159a6e1de519b82668"},{"line_number":14,"context_line":"Closes-bugs: #1477296"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"da20952f_3234fd48","line":14,"updated":"2015-09-02 07:53:22.000000000","message":"nit: \"Closes-Bug:\" (in singular). This way it gets automatically linked to the Launchpad bug.","commit_id":"5d6c2acd20eae6521027ff5de4e6e5b8b389da38"},{"author":{"_account_id":14962,"name":"ologvinova","email":"ologvinova@mirantis.com","username":"ologvinova"},"change_message_id":"3d68dd7bcba8576f02ad3825b016c54ccfffe0c0","unresolved":false,"context_lines":[{"line_number":11,"context_line":"not documented in the \"admin guide\"."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: I973dda4f284ce0f3422df3159a6e1de519b82668"},{"line_number":14,"context_line":"Closes-bugs: #1477296"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"da20952f_4b426e69","line":14,"updated":"2015-09-07 07:25:26.000000000","message":"Closes-bugs: #1477296 -\u003e Closes-bug: #1477296 (remove an \u0027s\u0027 in the word \u0027bugs\u0027 - this way it will be reflected in Launchpad statistics. https://wiki.openstack.org/wiki/GitCommitMessages#Including_external_references","commit_id":"6ffc1f5ac290d6d7671d217561bbc556500371eb"},{"author":{"_account_id":16986,"name":"Shuquan Huang","email":"shuquan.huang@live.com","username":"shuquan"},"change_message_id":"b13ca2a5341020ac03862213be6c214ec9654ce2","unresolved":false,"context_lines":[{"line_number":11,"context_line":"not documented in the \"admin guide\"."},{"line_number":12,"context_line":""},{"line_number":13,"context_line":"Change-Id: I973dda4f284ce0f3422df3159a6e1de519b82668"},{"line_number":14,"context_line":"Closes-bugs: #1477296"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":4,"id":"da20952f_fee9c2e6","line":14,"in_reply_to":"da20952f_4b426e69","updated":"2015-09-07 07:41:14.000000000","message":"Done","commit_id":"6ffc1f5ac290d6d7671d217561bbc556500371eb"}],"doc/admin-guide-cloud/source/compute-configuring-migrations.rst":[{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"35a4065d705e50a66833e8bdccadfea7af0bde65","unresolved":false,"context_lines":[{"line_number":132,"context_line":"   identical between each of your servers. This ensures that the"},{"line_number":133,"context_line":"   permissions on the NFS mount works correctly."},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"#. Ensure you can passwordless ssh access between ``HostB`` and"},{"line_number":136,"context_line":"   ``HostC`` as ``nova`` user (set with the owner of nova-compute"},{"line_number":137,"context_line":"   service) because direct access from one compute host to another"},{"line_number":138,"context_line":"   is needed to copy the VM file across."}],"source_content_type":"text/x-rst","patch_set":1,"id":"da20952f_5f2ae87f","line":135,"updated":"2015-09-01 23:27:07.000000000","message":"Consider revision: \n\n\"Ensure you can access SSH without a password between ``HostB`` and ``HostC`` as ``nova`` user (set with the owner of nova-compute service). Direct access from one compute host to another is needed to copy the VM file across.\"","commit_id":"a9647d7be7c7e21b8833134b2e1a041cb011f1a1"},{"author":{"_account_id":16986,"name":"Shuquan Huang","email":"shuquan.huang@live.com","username":"shuquan"},"change_message_id":"f86975717164b3642d770c645a02b455e4b552b3","unresolved":false,"context_lines":[{"line_number":132,"context_line":"   identical between each of your servers. This ensures that the"},{"line_number":133,"context_line":"   permissions on the NFS mount works correctly."},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"#. Ensure you can passwordless ssh access between ``HostB`` and"},{"line_number":136,"context_line":"   ``HostC`` as ``nova`` user (set with the owner of nova-compute"},{"line_number":137,"context_line":"   service) because direct access from one compute host to another"},{"line_number":138,"context_line":"   is needed to copy the VM file across."}],"source_content_type":"text/x-rst","patch_set":1,"id":"da20952f_380b897f","line":135,"in_reply_to":"da20952f_5f2ae87f","updated":"2015-09-02 01:37:30.000000000","message":"Done","commit_id":"a9647d7be7c7e21b8833134b2e1a041cb011f1a1"},{"author":{"_account_id":11303,"name":"Markus Zoeller (markus_z)","email":"mzoeller@linux.vnet.ibm.com","username":"mzoeller"},"change_message_id":"d868562b29b34ab4394e62c8a9ff1a5457459967","unresolved":false,"context_lines":[{"line_number":132,"context_line":"   identical between each of your servers. This ensures that the"},{"line_number":133,"context_line":"   permissions on the NFS mount works correctly."},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"#. Ensure you can access SSH without a password between ``HostB`` and"},{"line_number":136,"context_line":"   ``HostC`` as ``nova`` user (set with the owner of nova-compute"},{"line_number":137,"context_line":"   service). Direct access from one compute host to another"},{"line_number":138,"context_line":"   is needed to copy the VM file across."}],"source_content_type":"text/x-rst","patch_set":2,"id":"da20952f_52bad16f","line":135,"updated":"2015-09-02 07:53:22.000000000","message":"\"Ensure you can access SSH without a password and without StrictHostKeyChecking between [...]\"\n\nThe main point is that the SSH command has to be able to run without waiting for confirmation or additional input.","commit_id":"5d6c2acd20eae6521027ff5de4e6e5b8b389da38"},{"author":{"_account_id":16986,"name":"Shuquan Huang","email":"shuquan.huang@live.com","username":"shuquan"},"change_message_id":"a912b9062762ea56c7ed5a7d5619c7d5ba0a7848","unresolved":false,"context_lines":[{"line_number":132,"context_line":"   identical between each of your servers. This ensures that the"},{"line_number":133,"context_line":"   permissions on the NFS mount works correctly."},{"line_number":134,"context_line":""},{"line_number":135,"context_line":"#. Ensure you can access SSH without a password between ``HostB`` and"},{"line_number":136,"context_line":"   ``HostC`` as ``nova`` user (set with the owner of nova-compute"},{"line_number":137,"context_line":"   service). Direct access from one compute host to another"},{"line_number":138,"context_line":"   is needed to copy the VM file across."}],"source_content_type":"text/x-rst","patch_set":2,"id":"da20952f_e839b2d9","line":135,"in_reply_to":"da20952f_52bad16f","updated":"2015-09-02 08:23:03.000000000","message":"Done","commit_id":"5d6c2acd20eae6521027ff5de4e6e5b8b389da38"},{"author":{"_account_id":11303,"name":"Markus Zoeller (markus_z)","email":"mzoeller@linux.vnet.ibm.com","username":"mzoeller"},"change_message_id":"d868562b29b34ab4394e62c8a9ff1a5457459967","unresolved":false,"context_lines":[{"line_number":135,"context_line":"#. Ensure you can access SSH without a password between ``HostB`` and"},{"line_number":136,"context_line":"   ``HostC`` as ``nova`` user (set with the owner of nova-compute"},{"line_number":137,"context_line":"   service). Direct access from one compute host to another"},{"line_number":138,"context_line":"   is needed to copy the VM file across."},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"},{"line_number":141,"context_line":"   readable and writable by the Compute user on ``HostB`` and ``HostC``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"da20952f_ad1c2c6b","line":138,"updated":"2015-09-02 07:53:22.000000000","message":"And:\n\"It\u0027s also needed to detect if the source and target compute nodes share a storage subsystem.\"","commit_id":"5d6c2acd20eae6521027ff5de4e6e5b8b389da38"},{"author":{"_account_id":16986,"name":"Shuquan Huang","email":"shuquan.huang@live.com","username":"shuquan"},"change_message_id":"a912b9062762ea56c7ed5a7d5619c7d5ba0a7848","unresolved":false,"context_lines":[{"line_number":135,"context_line":"#. Ensure you can access SSH without a password between ``HostB`` and"},{"line_number":136,"context_line":"   ``HostC`` as ``nova`` user (set with the owner of nova-compute"},{"line_number":137,"context_line":"   service). Direct access from one compute host to another"},{"line_number":138,"context_line":"   is needed to copy the VM file across."},{"line_number":139,"context_line":""},{"line_number":140,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"},{"line_number":141,"context_line":"   readable and writable by the Compute user on ``HostB`` and ``HostC``."}],"source_content_type":"text/x-rst","patch_set":2,"id":"da20952f_a833baf5","line":138,"in_reply_to":"da20952f_ad1c2c6b","updated":"2015-09-02 08:23:03.000000000","message":"Done","commit_id":"5d6c2acd20eae6521027ff5de4e6e5b8b389da38"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"b990f85e60b976d65e84020a9bbde3105f39e632","unresolved":false,"context_lines":[{"line_number":136,"context_line":"   StrictHostKeyChecking between ``HostB`` and ``HostC`` as ``nova``"},{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_a40bbe7c","line":139,"updated":"2015-09-03 00:24:09.000000000","message":"It is* remove the contraction, please :)","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":10607,"name":"Alexandra Settle","email":"a.settle@outlook.com","username":"asettle"},"change_message_id":"0ae2077074e6e9da0af9c4cdc3147984b3fcffa1","unresolved":false,"context_lines":[{"line_number":136,"context_line":"   StrictHostKeyChecking between ``HostB`` and ``HostC`` as ``nova``"},{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_539d4eba","line":139,"in_reply_to":"da20952f_0e888421","updated":"2015-09-07 02:21:09.000000000","message":"OpenStack uses the IBM writing style guide for most of these things. Contractions are not used because it is difficult to translate. \nIBM says not to use contractions in technical writing.","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":16986,"name":"Shuquan Huang","email":"shuquan.huang@live.com","username":"shuquan"},"change_message_id":"4edc4223d63ab2e89d11d88f20fc45c766e5c427","unresolved":false,"context_lines":[{"line_number":136,"context_line":"   StrictHostKeyChecking between ``HostB`` and ``HostC`` as ``nova``"},{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_333c5ae0","line":139,"in_reply_to":"da20952f_539d4eba","updated":"2015-09-07 03:20:08.000000000","message":"Oh, I see. Thank you for the clarification. BTW, could you provide the detail of the writing style guide. I\u0027d like to read.\nI\u0027ll remove the contraction. :)","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":16986,"name":"Shuquan Huang","email":"shuquan.huang@live.com","username":"shuquan"},"change_message_id":"acc1d6afa1c2ae43209ce07013f9cb48fec062e4","unresolved":false,"context_lines":[{"line_number":136,"context_line":"   StrictHostKeyChecking between ``HostB`` and ``HostC`` as ``nova``"},{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_0e888421","line":139,"in_reply_to":"da20952f_a40bbe7c","updated":"2015-09-03 02:06:27.000000000","message":"why i can not use contraction here??","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"48a0f470b38211236271e9ff4f5b21d11ae774f7","unresolved":false,"context_lines":[{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"},{"line_number":143,"context_line":"   readable and writable by the Compute user on ``HostB`` and ``HostC``."}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_ca1b6f1b","line":140,"updated":"2015-09-02 16:07:23.000000000","message":"Since you mention that the SSH tunnel should be accessible without a password, could you please include a couple of words stating how the access control is being performed?  I assume that this is through a keystone token.  I think it\u0027s important for this to be clarified.","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":8768,"name":"Chris Friesen","email":"chris.friesen@windriver.com","username":"cbf123"},"change_message_id":"c1c39304945ca50f36ea5f2506aabf8e8a9cb62d","unresolved":false,"context_lines":[{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"},{"line_number":143,"context_line":"   readable and writable by the Compute user on ``HostB`` and ``HostC``."}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_1409852c","line":140,"in_reply_to":"da20952f_7e08e0d9","updated":"2015-09-02 20:21:50.000000000","message":"From what I can tell nova doesn\u0027t actually care what exact mechanism is used, as long as the user that nova-compute runs as can scp and ssh to the destination node without entering a password.","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":8768,"name":"Chris Friesen","email":"chris.friesen@windriver.com","username":"cbf123"},"change_message_id":"08a2fbbfcb82401f982913e3a8d1e2f953d51331","unresolved":false,"context_lines":[{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"},{"line_number":143,"context_line":"   readable and writable by the Compute user on ``HostB`` and ``HostC``."}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_d5e23401","line":140,"in_reply_to":"da20952f_ca1b6f1b","updated":"2015-09-02 16:23:29.000000000","message":"I was under the impression that it was generally something like using preshared ssh keys for the \"nova\" user that were shared/known across all the compute nodes.\n\nIt is my understanding that due to the perceived security issues with this, some cloud providers do not allow cold migration.\n\nIt\u0027s a messy situation.","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":16986,"name":"Shuquan Huang","email":"shuquan.huang@live.com","username":"shuquan"},"change_message_id":"acc1d6afa1c2ae43209ce07013f9cb48fec062e4","unresolved":false,"context_lines":[{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"},{"line_number":143,"context_line":"   readable and writable by the Compute user on ``HostB`` and ``HostC``."}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_ae3ab832","line":140,"in_reply_to":"da20952f_ca1b6f1b","updated":"2015-09-03 02:06:27.000000000","message":"emm, i guess accessing ssh without password is not relative to keystone token. The ssh configuration is very normal and should be common sense. \n\nChris is right that nova doesn\u0027t care what mechanism is used. we can use pre-shared keys or use random key very time with some script. It depends on how you make the nova scp \u0026\u0026 ssh without entering a password. So I tend to not show the detail configuration of accessing ssh without password.","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":6804,"name":"bruce-benjamin","email":"bruce.benjamin@jhuapl.edu","username":"bruce-benjamin"},"change_message_id":"516efe13a12a9683853c2c2849ccce5a8ac5a5f1","unresolved":false,"context_lines":[{"line_number":137,"context_line":"   user (set with the owner of nova-compute service). Direct access"},{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"},{"line_number":143,"context_line":"   readable and writable by the Compute user on ``HostB`` and ``HostC``."}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_7e08e0d9","line":140,"in_reply_to":"da20952f_d5e23401","updated":"2015-09-02 19:28:25.000000000","message":"Thanks Chris. If widely distributed pre-shared keys are being used, then I think this should be mentioned above.  I agree with you-  if this is the case, it really is a messy solution.","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"},{"author":{"_account_id":6772,"name":"Stephen Gordon","email":"sgordon@redhat.com","username":"sgordon"},"change_message_id":"43c59090e3734a522a097deedaf13db5dde687eb","unresolved":false,"context_lines":[{"line_number":138,"context_line":"   from one compute host to another is needed to copy the VM file"},{"line_number":139,"context_line":"   across. It\u0027s also needed to detect if the source and target"},{"line_number":140,"context_line":"   compute nodes share a storage subsystem."},{"line_number":141,"context_line":""},{"line_number":142,"context_line":"#. Export ``NOVA-INST-DIR/instances`` from ``HostA``, and ensure it is"},{"line_number":143,"context_line":"   readable and writable by the Compute user on ``HostB`` and ``HostC``."},{"line_number":144,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"da20952f_4cbbbfe5","line":141,"updated":"2015-09-03 18:42:35.000000000","message":"I think this is OK as is, I guess we could provide example configuration for this using ssh-key-gen/ssh-copy-id but I would hate for people to think this is the only way to handle it.","commit_id":"844761ac9b4e83f181fcc2c583a5b9b5a9aa22d0"}]}
