Customizing OpenStack RBAC policies

OpenStack uses a role based access control (RBAC) mechanism to manage accesses to its resources. With the current architecture, users' roles granted on each project and domain are stored into Keystone, and can be updated through Keystone's API. However, policy enforcement (actually allowing or not the access to resources according …

more ...

Setting Keystone v3 domains

The Openstack Identity v3 API, provided by Keystone, offers features that were lacking in the previous version. Among these features, it introduces the concept of domains, allowing isolation of projects and users. For instance, an administrator allowed to create projects and users in a given domain, may not have any …

more ...

Openstack volume in-use although VM doesn't exist

A user at Cloudwatt had an issue about Cinder volumes with status in-use, attached to VMs that didn't exist anymore. I could find similar bugs referenced in launchpad here and there, both with status invalid... But I didn't succeed in reproducing the bug (using both the Horizon dashboard and the …

more ...

ZNC in Docker container

ZNC is a popular IRC bouncer, which stays connected to IRC channels and log conversations while one isn't connected. This note desrcibes how to launch ZNC in a Docker container, so that it be launched on any Docker enabled platform. To quick start with Docker, one can follow the steps …

more ...

Ubuntu VM auto installation

Installing a fresh Ubuntu, or any other Linux distribution, on a new system is quite forward. The installer asks you a few question about your country, keyboard, network, ... . Then it installs all the required packages on the system, and makes it bootable.

However, when playing with VMs (Virtual Machines), you …

more ...