Take the OpenStack User Survey and Change the (OpenStack) World <http://openstack.org/user-survey> Still a few more hours to fill in the OpenStack User Survey. Heartbleed <http://blogs.gnome.org/markmc/2014/04/10/heartbleed/> The bug discovered affecting OpenSSL and “breaking” internet doesn’t directly touch OpenStack but can lead to OpenStack compromise <http://lists.openstack.org/pipermail/openstack/2014-April/006539.html>. The width of the problem discovered this week is extremely wide though and I think it’s worth spending some more time learning about it. Mark McLoughlin <http://blogs.gnome.org/markmc> has collected an impressive amount of links where you can learn more. Security auditing of OpenStack releases <https://blog-nkinder.rhcloud.com/?p=51> Nathan Kinder <https://blog-nkinder.rhcloud.com/> started a conversation about how to deal with high-level security related questions about OpenStack. How to govern a project on the scale of OpenStack <http://opensource.com/business/14/4/governance-openstack> How an open source project is governed can matter just as much as the features it supports, the speed at which it runs, or the code that underlies it. Some open source projects have what I call a “benevolent dictator for life <http://www.theatlantic.com/technology/archive/2014/01/on-the-reign-of-benevolent-dictators-for-life-in-software/283139/>.” Others are outgrowths of corporate projects that, while open, still have their goals and code led by the company that manages it. And of course, there are thousands of projects out there that are written and managed by a single person or a small group of people for whom governance is less of an issue than insuring project sustainability <http://opensource.com/life/14/1/evaluate-sustainability-open-source-project>. Introducing the OpenStack SDK for PHP <http://engineeredweb.com/blog/2014/openstack-sdk-php-intro/> Marrying OpenStack with one of the most popular programming languages on the planet. Write applications to interact with OpenStack public and private clouds, using the APIs. The OpenStack SDK for PHP <https://wiki.openstack.org/wiki/OpenStack-SDK-PHP> is meant to be by the community and for the community. It will be able to work with clouds from a variety of vendors or vanilla OpenStack setups. Tearing down obstacles to OpenStack documentation contributions <http://justwriteclick.com/2014/04/10/tearing-down-obstacles-to-openstack-documentation-contributions/> Rip. Shred. Tear. Let’s gather up the obstacles to documentation contribution and tear them down one by one. I’ve designed a survey <https://docs.google.com/forms/d/136-BssH-OxjVo8vNoOD-gW4x8fDFpvixbgCfeV1w_do/viewform> with the help of the OpenStack docs team to determine blockers for docs contributions. If you’ve contributed to OpenStack, pleasefill it out <https://docs.google.com/forms/d/136-BssH-OxjVo8vNoOD-gW4x8fDFpvixbgCfeV1w_do/viewform>. The road to Juno Summit – Atlanta 2014 * Applying for Visa? Looking for accommodation in Atlanta? Visit http://openstack.org/summit * Check the official agenda <http://openstacksummitmay2014atlanta.sched.org/> * Call for Proposals Open Source @ OpenStack Summit <http://www.openstack.org/blog/2014/03/call-for-proposals-open-source-openstack-summit/> Security Advisories and Notices * XSS in Horizon orchestration dashboard (CVE-2014-0157) <http://lists.openstack.org/pipermail/openstack-announce/2014-April/000218.html> * RBAC policy not properly enforced in Nova EC2 API (CVE-2014-0167) <http://lists.openstack.org/pipermail/openstack-announce/2014-April/000219.html> * Remote code execution in Glance Sheepdog backend (CVE-2014-0162) <http://lists.openstack.org/pipermail/openstack-announce/2014-April/000220.html> * Keystone DoS through V3 API authentication chaining (CVE-2014-2828) <http://lists.openstack.org/pipermail/openstack-announce/2014-April/000221.html> * Heat templates with invalid references allows unintended network access <http://lists.openstack.org/pipermail/openstack/2014-April/006428.html> * OpenSSL Heartbleed vulnerability can lead to OpenStack compromise <http://lists.openstack.org/pipermail/openstack/2014-April/006539.html> Tips ‘n Tricks * By Steve Hardy <http://hardysteven.blogspot.com/search/label/openstack>: Heat auth model updates – part 1 Trusts <http://hardysteven.blogspot.com/2014/04/heat-auth-model-updates-part-1-trusts.html> * By Adam Young <http://adam.younglogic.com/>: Teaching Horizon to Share <http://adam.younglogic.com/2014/04/teaching-horizon-to-share/> * By Christian Berendt <http://www.cberendt.de/>: An other Vagrant box with Devstack and Ubuntu 14.04 <http://www.cberendt.de/2014/04/an-other-vagrant-box-with-devstack-and-ubuntu-14-04/> * By How To Store Incremental Backups On The Cloudwatt Object Store Using Duplicity <http://dev.cloudwatt.com/en/blog/how-to-store-incremental-backups-on-the-cloudwatt-object-store-using-duplicity.html> * By Cameron Seader <http://blog.seader.us/search/label/OpenStack>: Quickly Setting-up an OpenStack Cloud with the SUSE Cloud 3 Admin Appliance <http://blog.seader.us/2014/04/quickly-setting-up-openstack-cloud-with.html> * By Sean Dague <https://dague.net/>: Devstack Vagrant <https://dague.net/2014/04/06/devstack-vagrant/> * By Cody Bunch <http://openstack.prov12n.com/>: How to Make A LOT of Devstack with Vagrant <http://openstack.prov12n.com/how-to-make-a-lot-of-devstack-with-vagrant/> Reports from Previous Events * OpenStack Meetup, Coimbatore – 31 March 2014 <http://aptira.com/blog/98-openstack-meetup-coimbatore-31-march-2014> * Nordic OpenStack meetup 3 April – hosted by Elastx and Solidfire <http://elastx.com/our-blog/openstack-meetup-hosted-by-elastx-and-solidfire> Upcoming Events * PyCon <https://us.pycon.org/2014/> Apr 09 – 17, 2014 – Montreal, Canada Details <https://us.pycon.org/2014/> * OpenStack India Meeting <http://www.meetup.com/Indian-OpenStack-User-Group/events/173478572/> Apr 12, 2014 – Mumbai, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/173478572/> * San Antonio OpenStack Meeting <http://www.meetup.com/SA-Open-Stackers/events/175211322/> Apr 16, 2014 – San Antonio, TC Details <http://www.meetup.com/SA-Open-Stackers/events/175211322/> * SFBay OpenStack Hackathon #OSSFO <http://www.meetup.com/openstack/> Apr 17, 2014 – Details <http://www.meetup.com/openstack/> * Icehouse Release Party! <http://www.meetup.com/Openstack-Amsterdam/events/174447942/> Apr 17, 2014 – Amsterdam, Netherlands Details <http://www.meetup.com/Openstack-Amsterdam/events/174447942/> * Running OpenStack User Groups <http://www.meetup.com/OpenStack-Online-Meetup/events/174880782/> Apr 17, 2014 – Online Details <http://www.meetup.com/OpenStack-Online-Meetup/events/174880782/> * SAFNOG <http://www.safnog.org/meetings-future/agenda-2014-safnog-1.html>Apr 22 – 23, 2014 – Johannesburg, South Africa Details <http://www.safnog.org/meetings-future/agenda-2014-safnog-1.html> * Philly OpenStack Meeting <http://www.meetup.com/Philly-OpenStack-Meetup-Group/events/157769942/> Apr 24, 2014 – Philadelphia, PA Details <http://www.meetup.com/Philly-OpenStack-Meetup-Group/events/157769942/> * OpenStack India Meeting <http://www.meetup.com/Indian-OpenStack-User-Group/events/173701902/> Apr 26, 2014 – Bangalore, India Details <http://www.meetup.com/Indian-OpenStack-User-Group/events/173701902/> * OpenStack Day Mexico <https://openstackdaylatam.com/?lang=en> Apr 29, 2014 – Mexico City, Mexico Details <https://openstackdaylatam.com/?lang=en> * OpenStack Paris Meeting <http://www.meetup.com/OpenStack-France/events/172754772/> Apr 29, 2014 – Paris, France Details <http://www.meetup.com/OpenStack-France/events/172754772/> * SFBay Meetup – Beginner track <http://www.meetup.com/openstack/events/123227622/> May 01, 2014 – Sunnyvale, CA Details <http://www.meetup.com/openstack/events/123227622/> * SFBay OpenStack Hackathon #OSSFO <http://www.meetup.com/openstack/> May 01, 2014 – Details <http://www.meetup.com/openstack/> * OpenStack Brasil User Group Meeting @ FISL15 <http://softwarelivre.org/fisl15> May 07 – 10, 2014 – Porto Alegre, Brasil Details <http://softwarelivre.org/fisl15> * OpenStack DACH Day at LinuxTag 2014 <http://www.linuxtag.org/2014/en/#openstack> May 09, 2014 – Berlin, Germany Details <http://www.linuxtag.org/2014/en/#openstack> * OpenStack Summit May 2014 <http://www.openstack.org/summit/openstack-summit-atlanta-2014/> May 12 – 16, 2014 – Atlanta, GA Details <http://www.openstack.org/summit/openstack-summit-atlanta-2014/> Other News * Why We Craft OpenStack (Featuring Rackspace Principal Architect Kurt Griffiths) <http://www.rackspace.com/blog/why-we-craft-openstack-featuring-rackspace-principal-architect-kurt-griffiths/> * OpenStack Israel Podcast, Episode 7 <http://cloudifysource.tumblr.com/post/82113910247> * MongoDB 2.6 is out, Marconi will benefit from it <http://blog.flaper87.com/post/53440a53d987d2dc534d4530/> * Why I Support Mark McClain for OpenStack Neutron PTL <http://sarob.com/2014/04/why-i-support-mark-mcclain-for-openstack-neutron-ptl/> * OpenStack Day Events April – May – June 2014 <http://www.openstack.org/blog/2014/04/openstack-day-events-april-may-june-2014/> * Take the OpenStack User Survey and Change the (OpenStack) World <https://www.suse.com/communities/conversations/take-openstack-user-survey-change-openstack-world/> * OpenStack Project Meeting: Summary <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-04-08-21.03.html> and full logs <http://eavesdrop.openstack.org/meetings/project/2014/project.2014-04-08-21.03.log.html> Welcome New Reviewers and Developers Jason Kincl <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personfa79dd2b-efa8-4ae2-a27c-2403097b53cd> Manish Godara <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,persone87953ff-6004-4489-8501-d3c010953c14> Choe, Cheng-Dae <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person77f2fe4a-c6d0-4f7f-89de-f1693ad8fe69> Jason Ni <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personfac5629d-0584-4b32-86c2-fa2bddad706d> Juan Antonio Osorio Robles <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person089f126d-502a-4822-b177-84b1f5c2c03e> vishal yadav <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personfb3a20f8-13d5-4a0c-98f8-a6206857423b> Peter Jönsson <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person12e8a305-9c1a-4a33-a975-7e688284c325> Amrith <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personae0d8a83-9fe7-42b6-9a11-700669cb8b46> vaibhav <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,persond916cd64-576c-4be4-a826-9016800cc407> Doug Shelley <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,persond28659b8-3c5e-4eb0-8007-1634fc72cbb8> Victor Boivie <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person398b5244-5476-415f-8a79-102c5c138cd9> Aimon Bustardo <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,persond081b5f0-9528-4a2c-9593-bd6b796b9a31> Marc Abramowitz <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,person992da121-eafa-4a18-a583-7f4bc7fb2d39> Igor Duarte Cardoso <http://activity.openstack.org/data/plugins/zfacts/view.action?viewproperties=true&instance=Person,personac41219a-48e6-4e9f-a3d6-7eacfcb05913> Latest Activity In Projects Do you want to see at a glance the bugs filed and solved this week? Latest patches submitted for review? Check out the individual project pages on OpenStack Activity Board – Insights <http://activity.openstack.org/data/display/OPNSTK2/>. * Telemetry (Ceilometer) <http://activity.openstack.org/data/display/OPNSTK2/ceilometer> * Block Storage (Cinder) <http://activity.openstack.org/data/display/OPNSTK2/cinder> * Image Service (Glance) <http://activity.openstack.org/data/display/OPNSTK2/glance> * Orchestration API <http://activity.openstack.org/data/display/OPNSTK2/heat> (Heat) <http://activity.openstack.org/data/display/OPNSTK2/heat> * Dashboard (Horizon) <http://activity.openstack.org/data/display/OPNSTK2/horizon> * Bare Metal Provisioning (Ironic) <http://activity.openstack.org/data/display/OPNSTK2/ironic> * Identity (Keystone) <http://activity.openstack.org/data/display/OPNSTK2/keystone> * Manuals <http://activity.openstack.org/data/display/OPNSTK2/openstack-manuals> * Networking (Neutron) <http://activity.openstack.org/data/display/OPNSTK2/neutron> * Compute (Nova) <http://activity.openstack.org/data/display/OPNSTK2/nova> * Data Processing (Sahara) <http://stackalytics.com/?release=icehouse&metric=commits&project_type=openstack&module=sahara-group&company=&user_id=> * Object Storage (Swift) <http://activity.openstack.org/data/display/OPNSTK2/swift> * Database As A Service (Trove) <http://activity.openstack.org/data/display/OPNSTK2/trove> /The weekly newsletter is a way for the community to learn about all the various activities occurring on a weekly basis. If you would like to add content to a weekly update or have an idea about this newsletter, please leave a comment./