nova (2012.1.3+stable-20120827-4d2a4afe-0ubuntu1.1) precise-security; urgency=low

  * SECURITY UPDATE: fix lack of authentication on block device used for
    os-volume_boot
    - debian/patches/CVE-2013-0208.patch: adjust nova/compute/api.py to
      validate we can access the volumes
    - CVE-2013-0208

 -- Jamie Strandboge <jamie@ubuntu.com>  Wed, 23 Jan 2013 13:03:11 -0600

nova (2012.1.3+stable-20120827-4d2a4afe-0ubuntu1) precise-proposed; urgency=low

  * New upstream snapshot, fixes FTBFS in -proposed. (LP: #1041120)
  * Resynchronize with stable/essex (4d2a4afe):
    - [5d63601] Inappropriate exception handling on kvm live/block migration
      (LP: #917615)
    - [ae280ca] Deleted floating ips can cause instance delete to fail
      (LP: #1038266)

 -- Adam Gandelman <adamg@canonical.com>  Mon, 27 Aug 2012 14:50:40 -0700

nova (2012.1.3+stable-20120824-86fb7362-0ubuntu1) precise-proposed; urgency=low

  * New upstream snapshot. (LP: #1041120)
  * Dropped, superseded by new snapshot:
    - debian/patches/CVE-2012-3447.patch: [d9577ce]
    - debian/patches/CVE-2012-3371.patch: [25f5bd3]
    - debian/patches/CVE-2012-3360+3361.patch: [b0feaff]
  * Resynchronize with stable/essex (86fb7362):
    - [86fb736] Libvirt driver reports incorrect error when volume-detach fails
      (LP: #1029463)
    - [272b98d] nova delete lxc-instance umounts the wrong rootfs (LP: #971621)
    - [09217ab] Block storage connections are NOT restored on system reboot
      (LP: #1036902)
    - [d9577ce] CVE-2012-3361 not fully addressed (LP: #1031311)
    - [e8ef050] pycrypto is unused and the existing code is potentially insecure
      to use (LP: #1033178)
    - [3b4ac31] cannot umount guestfs  (LP: #1013689)
    - [f8255f3] qpid_heartbeat setting in ineffective (LP: #1030430)
    - [413c641] Deallocation of fixed IP occurs before security group refresh
      leading to potential security issue in error / race conditions
      (LP: #1021352)
    - [219c5ca] Race condition in network/deallocate_for_instance() leads to
      security issue (LP: #1021340)
    - [f2bc403] cleanup_file_locks does not remove stale sentinel files
      (LP: #1018586)
    - [4c7d671] Deleting Flavor currently in use by instance creates error
      (LP: #994935)
    - [7e88e39] nova testsuite errors on newer versions of python-boto (e.g.
      2.5.2) (LP: #1027984)
    - [80d3026] NoMoreFloatingIps: Zero floating ips available after repeatedly
      creating and destroying instances over time (LP: #1017418)
    - [4d74631] Launching with source groups under load produces lazy load error
      (LP: #1018721)
    - [08e5128] API 'v1.1/{tenant_id}/os-hosts' does not return a list of hosts
      (LP: #1014925)
    - [801b94a] Restarting nova-compute removes ip packet filters (LP: #1027105)
    - [f6d1f55] instance live migration should create virtual_size disk image
      (LP: #977007)
    - [4b89b4f] [nova][volumes] Exceeding volumes, gigabytes and floating_ips
      quotas returns general uninformative HTTP 500 error (LP: #1021373)
    - [6e873bc] [nova][volumes] Exceeding volumes, gigabytes and floating_ips
      quotas returns general uninformative HTTP 500 error (LP: #1021373)
    - [7b215ed] Use default qemu-img cluster size in libvirt connection driver
    - [d3a87a2] Listing flavors with marker set returns 400 (LP: #956096)
    - [cf6a85a] nova-rootwrap hardcodes paths instead of using
      /sbin:/usr/sbin:/usr/bin:/bin (LP: #1013147)
    - [2efc87c] affinity filters don't work if scheduler_hints is None
      (LP: #1007573)
    - [48e5f46] metadata injection is broken in xen (LP: #1022036)
    - [25f5bd3] scheduler hang (DOS) possible with
      DifferentHostFilter/SameHostFilter  (LP: #1017795)
    - [1c1b858] cannot umount guestfs  (LP: #1013689)
    - [835ba4f] not able to get host total memory in xen with libvirt
      (LP: #1004298)
    - [00e5104] Call to network_get_all_by_uuids missing 'db' (LP: #986922)
    - [4c49df7] [nova][volumes] Exceeding volumes, gigabytes and floating_ips
      quotas returns general uninformative HTTP 500 error (LP: #1021373)
    - [19631f3] [nova][volumes] Exceeding volumes quotas logs
      "VolumeSizeTooLarge" instead of "VolumeLimitExceeded"  (LP: #1020634)
    - [b0feaff] Remote arbitrary file corruption / creation flaw via injected
      files (LP: #1015531)
    - [3cb6e57] NoMoreFixedIps: Zero fixed ips available. Nova seems leaking
      them. (LP: #1014769)
    - [5d8431b] ram_allocation_ratio does not work (LP: #1016273)
    - [410060f] test_get_console_output_file requires sudo NOPASSWD
      (LP: #992805)
    - [33c2575] Stop/start a KVM instance with volumes attached produces an
      error state (LP: #1013782)
    - [6c01c01] Backport tox settings to unbreak jenkins jobs.
    - [344125f] Set defaultbranch in .gitreview to stable/essex
    - [9b789be] floating ips are not disassociated from instances on deletion
      (LP: #997763)
    - [d89c2f3] qpid timeout causing compute service to crash (LP: #999698)
    - [caae0e9] floating ips do not display in 'nova list' after association to
      instance (LP: #939122)
    - [1dc9f19] impl_qpid doesn't ACK messages (LP: #1012374)
    - [bc621bc] Restarting nova-network removes ip packet filters
      (LP: #1000853)
    - [7870157] Add caching to openstack.common.cfg
    - [27133ee] Firewall rules from nova-compute are not refreshed after host
      reboot (LP: #985162)
    - [3ee026e] Source group based security group rule without protocol and port
      causes failures (LP: #1010514)
    - [f0a9f47] [SRU] dns_domains table mysql charset is 'latin1'. Should be
      'utf8' (LP: #993663)
    - [cc8fd97] euca-describe-keypair NonExistent returns 200 (LP: #1006664)
    - [9f9e9da] Security groups fail to be set correctly if incorrect case is
      used for protocol specification (LP: #985184)

 -- Adam Gandelman <adamg@canonical.com>  Fri, 24 Aug 2012 02:09:33 -0400

nova (2012.1+stable~20120612-3ee026e-0ubuntu1.3) precise-security; urgency=low

  * SECURITY UPDATE: Prohibit file injection writing to host filesystem
    - debian/patches/CVE-2012-3447.patch: update to perform the file name
      canonicalization as the root user
    - CVE-2012-3447

 -- Jamie Strandboge <jamie@ubuntu.com>  Fri, 17 Aug 2012 14:09:26 -0500

nova (2012.1+stable~20120612-3ee026e-0ubuntu1.2) precise-security; urgency=low

  * SECURITY UPDATE: scheduler affinity denial of service
    - debian/patches/CVE-2012-3371.patch: lookup instance ids only once
      instead of once for each scheduler hint instance id.

 -- Steve Beattie <sbeattie@ubuntu.com>  Thu, 05 Jul 2012 10:58:26 -0700

nova (2012.1+stable~20120612-3ee026e-0ubuntu1.1) precise-security; urgency=low

  * SECURITY UPDATE: arbitrary file injection/corruption
    - debian/patches/CVE-2012-3360+3361.patch: ensure that files cannot
      be injected in arbitrary locations
    - CVE-2012-3360
    - CVE-2012-3361

 -- Steve Beattie <sbeattie@ubuntu.com>  Mon, 02 Jul 2012 19:54:17 -0700

nova (2012.1+stable~20120612-3ee026e-0ubuntu1) precise-proposed; urgency=low

  * New upstream snapshot. (LP: #1010473)
  * Dropped, superseeded by new snapshot:
    - debian/patches/upstream/0001-fix-bug-where-nova-ignores-glance-host-in-imageref.patch
    - debian/patches/upstream/0002-Stop-libvirt-test-from-deleting-instances-dir.patch
    - debian/patches/upstream/0003-Allow-unprivileged-RADOS-users-to-access-rbd-volumes.patch
    - debian/patches/upstream/0004-Fixed-bug-962840-added-a-test-case.patch
    - debian/patches/upstream/0005-Populate-image-properties-with-project_id-again.patch
    - debian/patches/upstream/0006-Use-project_id-in-ec2.cloud._format_image.patc
    - debian/patches/CVE-2012-2101.patch
    - debian/patches/CVE-2012-2654.patch
  * Resynchronize with stable/essex:
    - 3ee026e Only invoke .lower() on non-None protocols. (LP: #1010514)
    - f0a9f47 Create a utf8 version of the dns_domains table. (LP: #993663)
    - 84a43e1 Report memory correctly on Xen. (LP: #997014) 
    - 8c72924 Add libvirt get_console_output tests: pty and file. (LP: #990237)
    - 4e423cd Fix Multi_Scheduler to process host capabilities. (LP: #1000403)
    - 4aea7f1 Nail pep8 dependencies to 1.0.1
    - 2b3bbc4 handle updated qemu-img info output. (LP: #1000261)
    - 2d7d51c Fix type of snapshot_id column to match db. (LP: #962615)
    - ec70c69 Generate a Changelog for Nova
    - e5e890f Fix nova.tests.test_nova_rootwrap on Fedora 17. (LP: #992916)
    - 9e9a554 Ec2 handle strings with "0x" (LP: #983206)
    - 26dc6b7 QuantumManager will start dnsmasq during startup. Fixes (LP: #977759)
    - 7028d66 Introduced flag base_dir_name. (LP: #973194)
    - 76b525a Get unit tests functional in OS X.
    - facb936 Update KillFilter to handle 'deleted' exe's. (LP: #967931) 
    - 1209af4 Checks if value is string or not before decode. (LP: #952176)
    - 1209af4 Fix timeout in EC2 CloudController.create_image(). (LP: #989764)
    - 108e74b Re-add console_log from console_console_output(). (LP: #987335)
    - 48a0768 Don't leak RPC connections on timeouts or other exceptions. (LP: #968843)
    - 7c64de9 Cloudpipe tap vpn not always working. (LP: #975043)
    - 5ab5051 add libvirt_inject_key flag fix (LP: #971640)
    - 6c68ef5 Xen: Pass session to destroy_vdi. (LP: #988615)
    - 015744e Delete fixed_ips when network is deleted. (LP: #754900)
  * Add debian/scripts/changelog.sh to help generate the changelog.
  * Add debian/nova-common.docs:
    - Include changelog and README.rst
  * debian/rules: Generate a tarball from git snapshot.
  * debian/patches/fix-pep8-errors.patch: Fix pep8 errors due to pep8 upstream
    migration.

 -- Chuck Short <zulcss@ubuntu.com>  Tue, 05 Jun 2012 09:50:59 -0400

nova (2012.1-0ubuntu2.2) precise-security; urgency=low

  * SECURITY UPDATE: set security groups correctly if IP protocol is
    specified in upper/mixed case
    - debian/patches/CVE-2012-2654.patch: ensure protocols are in
      lowercase for the controllers

 -- Steve Beattie <sbeattie@ubuntu.com>  Tue, 29 May 2012 15:25:43 -0700

nova (2012.1-0ubuntu2.1) precise-security; urgency=low

  * SECURITY UPDATE: Place limit on number of security groups a user may
    create
    - debian/patches/CVE-2012-2101.patch: add quotas for security groups and
      security groups rules
    - CVE-2012-2101

 -- Jamie Strandboge <jamie@ubuntu.com>  Thu, 03 May 2012 15:41:32 -0500

nova (2012.1-0ubuntu2) precise; urgency=low

  [ Adam Gandelman ]
  * debian/rules: Properly create empty doc/build/man dir for builds that
    skip doc building
  * debian/control: Set 'Conflicts: nova-compute-hypervisor' for the various
    nova-compute-$type packages. (LP: #975616)
  * debian/control: Set 'Breaks: nova-api' for the various nova-api-$service
    sub-packages. (LP: #966115)

  [ Chuck Short ]
  * Resynchronize with stable/essex:
    - b1d11b8 Use project_id in ec2.cloud._format_image()
    - 6e988ed Fixes image publication using deprecated auth. (LP: #977765)
    - 6e988ed Populate image properties with project_id again
    - 3b14c74 Fixed bug 962840, added a test case.
    - d4e96fe Allow unprivileged RADOS users to access rbd volumes.
    - 4acfab6 Stop libvirt test from deleting instances dir
    - 155c7b2 fix bug where nova ignores glance host in imageref
  * debian/nova.conf: Enabled ec2_private_dns_show_ip so that juju can
    connect to openstack instances.
  * debian/patches/fix-docs-build-without-network.patch: Fix docs build
    when there is no network access.

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 12 Apr 2012 14:14:29 -0400

nova (2012.1-0ubuntu1) precise; urgency=low

  * New upstream release.

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 05 Apr 2012 11:00:38 -0400

nova (2012.1~rc4-0ubuntu1) precise; urgency=low

  * New upstream release.
  * debian/patches/nova-console-monitor.patch: Disabled.
  * debian/nova.conf: Removed console-monitor option.

 -- Chuck Short <zulcss@ubuntu.com>  Wed, 04 Apr 2012 16:55:52 -0400

nova (2012.1~rc3-0ubuntu1) precise; urgency=low

  * New Upstream release. 
  * debian/control: Conflict nova-vncproxy with novnc.

 -- Chuck Short <zulcss@ubuntu.com>  Wed, 04 Apr 2012 09:25:14 -0400

nova (2012.1~rc2-0ubuntu1) precise; urgency=low

  [ Adam Gandelman ]
  * debian/control: Remove unncessary nova-cert dependency from nova-api.
    (LP: #965356)
  * debian/nova-common.postinst: Clean up spacing, remove redundant chown,
    set blanket 0700 nova.nova permissions on /etc/nova/
  * debian/nova-compute-{kvm, lxc, uml, xen}.postinst: Set proper permissions
    on /etc/nova/nova-compute.conf (LP: #861459)
  * debian/nova-common.postinst:  Ensure default nova.sqlite database is not
    world-readable.
  * debian/{rules, nova-common.{install, postinst}}: Install api-paste.ini 0600
    with nova-common (in prepartion for proper nova-api-* package separation)
  * debian/{nova-common.nova-manage.logrotate,
    nova-network.nova-dhcpbridge.logrotate, rules}: Add lograte files,
    override_dh_installlogrotate. (LP: #942646)
  * Add manpage stubs for nova-api-ec2, nova-api-metadata,
    nova-api-os-{volume, compute}, nova-rootwrap. Use sphinx built manpage
    for nova-manage (nova-common.manpages)
  * debian/nova-compute-{kvm, xen, uml, qemu}.postinst: Remove calls to
    adduser since this is already handled from nova-compute.postsinst in a
    vendor neutral way.  Silences lintian errors regarding adduser dependency

  [ Chuck Short ]
  * New upstream version.
  * debian/patches/libvirt-use-console-pipe.patch: Dropped.
  * debian/patches/nova-console-monitor.patch: Add console-monitor
    option.
  * debian/nova.conf: Enable use_console_monitor
  * debian/patches/fix-ubuntu-tests.patch: Fix nova testsuite.
  * debian/rules: fail package build if testsuite fails.
  * debian/patches/validate_server_name_length.patch: Dropped no longer
    needed.
  * debian/patches/fix-docs-build-without-network.patch: Some docs need
    a network connection in order to build. Disable fetching docs from
    the internet.
  * debian/patches/0001-fix-useexisting-deprecation-warnings.patch:
    Remove deprecated warnings with sqlalchemy.

  [ Tyler Hicks ]
  * SECURITY UPDATE: Denial of service via resource exhaustion in nova-api
    (LP: #968411)
    - debian/patches/validate_server_name_length.patch: Limit server names
      to a maximum of 255 characters to prevent nova-api log files from
      exhausting storage space. Based on upstream patch.
    - CVE-2012-1585

 -- Chuck Short <zulcss@ubuntu.com>  Mon, 02 Apr 2012 11:17:33 -0400

nova (2012.1~rc1-0ubuntu2) precise; urgency=low

  * debian/control: Add Breaks/Replaces to nova-consoleauth, update
    description, nova-console Recommends nova-consoleauth 
  * debian/nova-console.install: Remove nova-consoleauth

 -- Adam Gandelman <adamg@canonical.com>  Thu, 22 Mar 2012 11:31:35 -0700

nova (2012.1~rc1-0ubuntu1) precise; urgency=low

  [ Adam Gandelman ]
  [Chuck Short]
  * New upstream release. 
  * debian/patches/libvirt-use-console-pipe.patch: Refreshed

  [Adam Gandelman]
  * debian/patches/libvirt-console.patch: Refresh
  * debian/control: Split nova-consoleauth from nova-console into its own pkg
    (LP: #959289)
  * debian/nova-console.upstart.in: Specify shell

 -- Chuck Short <zulcss@ubuntu.com>  Tue, 20 Mar 2012 11:06:11 -0400

nova (2012.1~rc1~20120316.13416-0ubuntu1) precise; urgency=low

  [Adam Gandelman]
  * New upstream release.
  * debian/patches/libvirt-conosle-patch: Refresh
  * debian/control: Fix descriptions of nova-{doc, cert} (LP: #942541)

  [Paul Belanger]
  * debian/control: python-nova depends on openssh-client (LP: #956177)

 -- Adam Gandelman <adamg@canonical.com>  Mon, 12 Mar 2012 12:09:45 -0700

nova (2012.1~rc1~20120309.13261-0ubuntu1) precise; urgency=low

  [ Chuck Short ]
  * New upstream release.
  * Refreshed libvirt-console-patch again.

  [ Adam Gandleman ]
  * debian/patches/{ec2-fixes.patch, libvirt-console-pipe.patch}: Fix and
    refresh. Add dep3 headers from original git commits.
  * debian/patches/ec2-fixes.patch: Dropped.  Merge upstream at 121537c3
  * debain/{rules, nova-docs.doc}: Docs now built in doc/build/.
  * debian/patches/libvirt-use-console-pipe.patch: Update use of
    instance['name'] instead of instance_name

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 09 Mar 2012 13:07:19 -0500

nova (2012.1~e4-0ubuntu1) precise; urgency=low

  [ Adam Gandleman ]
  * debian/patches/libvirt-use-console-pipe.patch: Refreshed. 
  * debain/nova-volume.upstart.in: Ensure lock directory is created
    (LP: #940780)
  * debain/control: Fix nova-compute-$flavor Depends
  * debian/control: Add python-iso8601 to python-nova Depends

  [ Chuck Short ]
  * debian/rules: Fix FTBFS.
  * Merge Ubuntu/Debian packaging:
    - Thanks to Julien Danjou, Ghe Rivero, and Thomas Goirand
    - debian/copyright: Update copyright file.
    - debian/nova-api.init, debian/nova-compute.init,
      debian/nova-network.init, debian/nova-objectstore,
      debian/nova-scheduler, debian/nova-volume.init:
      Synchronize init scripts.
    - nova-common.install, debian/rules: Install policy.json
    - debian/rules, debian/nova-xcp-network.install,
      debian/nova-xcp-plugins.install, nova-xcp-plugins.postrm,
      debian/nova-xcp-plugins.doc, debian/nova-xcp-plugins.postinst,
      debian/README.xcp_and_openstack, debian/control,
      debian/ubuntu_xen-openvswitch-nova.rules,
      debian/patches/path-to-the-xenhost.conf-fixup.patch:
      Add Xen XCP support.
    - debian/control,
      debian/nova-compute-{kvm,lxc,qemu,xen,uml}.postinst: Make
      nova-compute a virtual package.
    - Dropped ubuntu_ubuntu_control_vars: We dont use it
  * New upstream release.
  * Dropped python-babel, it will be handled by langpacks.
  * debian/patches/ec2-fixes.patch: Backport turnk fix for ec2
    permissions.
  * debian/patches/path-to-the-xenhost.conf-fixup.patch: Refreshed.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 02 Mar 2012 11:18:35 -0500

nova (2012.1~e4~20120224.12913-0ubuntu1) precise; urgency=low

  [ Monty Taylor ]
  * Move files from nova/locale to /usr/share/locale

  [ Chuck Short ]
  * debian/rules: Fix FTBFS.
  * debian/control: Add depends on python-babel.
  * debian/control: Add depends on python-iso8601.
  * debian/nova-api-os-volume.install: Fix FTBS.
  * debian/patches/libvirt-use-console-pipe.patch: Refreshed and 
    Re-enabled. (LP: #879666)
  * debian/control: Make sure we install nova-cert

  [ Joseph Heck ]
  * debian/nova-console.install: Add nova-consoleauth.
  * Add nova-api-ec2, nova-api-os-compute, and nova-api-os-volume.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 24 Feb 2012 10:08:10 -0500

nova (2012.1~e4~20120217.12709-0ubuntu1) precise; urgency=low

  [ Dave Walker (Daviey) ]
  * New upstream snapshot
  * debian/patches/temp_fix_linux_net.patch:
    - Dropped, applied upstream. LP: #929127
  * debian/patches/libvirt-use-console-pipe.patch:
    - Rebased against latest trunk

  [ Chuck Short ]
  * debian/nova.conf: Re-enable default iscsi_helper.
  * debian/nova.conf: More fixups.
  * debian/control: Dont depend and conflicts on nova-compute-
    hypervisor. (LP: #923681)
  * debian/patches/libvirt-us-console-pipe.patch: Refreshed.
  * Temporarily disable console patch. (LP: #932787)
  * New usptream version.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 17 Feb 2012 11:02:12 -0500

nova (2012.1~e4~20120210.12574-0ubuntu1) precise; urgency=low

  [Chuck Short]
  * New upstream release.
  * debian/patches/nova-manage_flagfile_location.patch:
    Refreshed patch. 
  * debian/patches/libvirt-use-console-pipe.patch:
    Re-add from oneiric.  
  * Dropped debian/patches/packaged-ajaxterm-calls.patch. 
  * debian/control:
    - Dropped recommends on ajaxterm for nova-compute
    - Dropped nova-ajaxterm package.

  [Adam Gandleman]
  * debian/patches/temp_fix_linux_net.patch: Temporary patch until LP:
   929127 is resolved.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 10 Feb 2012 11:25:38 -0500

nova (2012.1~e4~20120208.12523-0ubuntu1) UNRELEASED; urgency=low

  [ Chuck Short ]
  * debian/patches/fix-nova-rootwraper-env.patch: Dropped
    no longer needed.
  * debian/nova-compute-{kvm,xen,uml,lxc}.conf: Add the connection
    type "--connection=libvirt" since libvirt is no longer the default.

  [ Adam Gandelman ]
  * debian/nova.conf: Define connection_type=libvirt in common nova.conf
    instead of nova-compute-*.conf until Bug #921294 is addressed.

  [ Vish Ishaya ]
   * debian/mans/nova-cert.8, debian/nova-cert.init, debian/nova-cert.install,
     debian/nova-cert.logrotate, debian/nova-cert.manpages, 
     debian/nova-cert.upstart.in, debian/control, debian/source_nova.py:
     Add nova-cert.

  [ Soren Hansen ]
  * Refresh flagfile location patch.
  * Enable builds on versions of Ubuntu that do not have dh_python2.
  * Remove ajaxterm patch (upstream performed a ajaxtermectomy)
  * Replace ajax console proxy package with an empty, transitional
    package.
  * Add a nova-compute-qemu package.

 -- Soren Hansen <soren@ubuntu.com>  Fri, 10 Feb 2012 17:41:50 +0100

nova (2012.1~e4~20120203.12454-0ubuntu1) precise; urgency=low

  [Chuck Short]
  * New upstream version.
  * debian/control: Replace m2crpto with python-crypto.
    (LP: #917851)
  * debian/*.upstart.in, debian/nova-common.postinst,
    debian/nova_sudoers: Change default shell to /bin/false.
    (LP: #890362)

  [Adam Gandleman]
  * debian/nova-common.{install, postinst}: Install policy.json on all
    Nova nodes (LP: #923817)
  * debian/rules: Remove installation of policy.json (moved to nova-common),
    point to the correct upstream git repository.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 03 Feb 2012 09:03:12 -0500

nova (2012.1~e3-0ubuntu1) precise; urgency=low

  [Chuck short]
  * New upstream release.
  * debian/patches/fix-nova-rootwraper-env.patch: Dropped
    no longer needed.
  * debian/nova-compute-{kvm,xen,uml,lxc}.conf: Add the connection
    type "--connection=libvirt" since libvirt is no longer the default.

  [Adam Gandelman]
  * debian/nova.conf: Define connection_type=libvirt in common nova.conf
    instead of nova-compute-*.conf until Bug #921294 is addressed.

  [Vish Ishaya]
   * debian/mans/nova-cert.8, debian/nova-cert.init, debian/nova-cert.install,
     debian/nova-cert.logrotate, debian/nova-cert.manpages, 
     debian/nova-cert.upstart.in, debian/control, debian/source_nova.py:
     Add nova-cert.

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 26 Jan 2012 10:29:13 -0500

nova (2012.1~e3~20120120.12170-0ubuntu1) precise; urgency=low

  [Chuck Short]
  * New upstream version.
  * debian/nova-vncproxy.install, debian/nova-vncproxy.upstart.in:
    nova-vncproxy becomes nova-xvpvncproxy.
  * debian/nova.conf: Really use the nova rootwrapper. (LP: #918179)
  * debian/nova_sudoers: Fix typo in rootwrap usage.
  * debian/patches/kombu_tests_timeout.patch: Skip 
    "test_iterconsume_errors_will_reconnect" test.

  [Dan Prince]
  * Add policy.json to packages.

  [Thierry Carrez]
   * debian/*.pyinstall: Ship filter files in each node... (LP: #919105)
   * debian/python-nova.pyremove: ...and no longer in python-nova (LP: #919105)
   * debian/patches/fix-nova-rootwraper-env.patch: Fix temporary issue with 
     nova-rootwrap and nova-compute.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 20 Jan 2012 11:54:15 -0500

nova (2012.1~e3~20120113.12049-0ubuntu1) precise; urgency=low

  [ Chuck Short ]
  * New upstream version.
  * debian/nova_sudoers, debian/nova-common.install, 
    Switch out to nova-rootwrap. (LP: #681774)
  * Add "get-origsource-git" which allows developers to 
    generate a tarball from github, by doing:
    fakeroot debian/rules get-orig-source-git
  * debian/debian/nova-objectstore.logrotate: Dont determine
    if we are running Debian or Ubuntu. (LP: #91379)

  [ Adam Gandleman ]
  * Removed python-nova.postinst, let dh_python2 generate instead since
    python-support is not a dependency. (LP: #907543)

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 13 Jan 2012 09:51:10 +0100

nova (2012.1~e2-0ubuntu4) precise; urgency=low

  * SECURITY UPDATE: fix tenant bypass by authenticated users via OpenStack
    API (LP: #904072)
    - CVE-2012-XXXX

 -- Jamie Strandboge <jamie@ubuntu.com>  Thu, 05 Jan 2012 08:58:46 -0600

nova (2012.1~e2-0ubuntu2) precise; urgency=low

  [ Chuck Short ]
  * debian/nova.conf: Fix misconfiguration. 

  [ Dan Prince ]
  * debian/nova_sudoers: Fix typo
  * Add policy.json to packages.

 -- Thierry Carrez (ttx) <thierry@openstack.org>  Thu, 22 Dec 2011 16:15:22 +0100

nova (2012.1~e2-0ubuntu1) precise; urgency=low

  * New usptream release. Fixes the following bugs:
    (LP: #871278, #848643, #859679, #83199)
  * debian/nova-console.install: Fix empty package.
  * debian/patches, debian/pydist-overrides: Cleaner way 
    of disabling unwanted python-dependencies.
  * debian/control: 
    - Suggest python-keystone. (LP: #901881)
    - Update build dependencies.
  * debian/nova.conf: Use virtio networking by default.
    (LP: #904480)
  * debian/fix-traversal-via-image-register.patch: Dropped
    fixed upstream.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 16 Dec 2011 13:03:55 -0500

nova (2012.1~e2~20111208.11721-0ubuntu3) precise; urgency=low

  * SECURITY UPDATE: fix directory traversal during image registration via
    EC2 API and S3/RegisterImage
    - fix-traversal-via-image-register.patch: adjust nova/image/s3.py to
      use basename instead of absolute path
    - CVE-2011-4596

 -- Jamie Strandboge <jamie@ubuntu.com>  Tue, 13 Dec 2011 08:39:13 -0600

nova (2012.1~e2~20111208.11721-0ubuntu2) precise; urgency=low

  * Disable python-coverage as well.

 -- Chuck Short <zulcss@ubuntu.com>  Mon, 12 Dec 2011 10:13:04 -0500

nova (2012.1~e2~20111208.11721-0ubuntu1) precise; urgency=low

  * New upstream release. 
  * debian/control:
    + Add python-suds as a dependency.
  * debian/patches: Temporarily disable python-nosexcover.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 09 Dec 2011 14:24:07 -0500

nova (2012.1~e2~20111202.11641-0ubuntu2) precise; urgency=low

  * debian/nova.conf: Remove parameter to --force_dhcp_release 
    (LP: #891227)

 -- Adam Gandelman <adamg@canonical.com>  Fri, 02 Dec 2011 11:31:34 -0800

nova (2012.1~e2~20111202.11641-0ubuntu1) precise; urgency=low

  * New upstream release.
  * debian/nova_sudoers: Clean up to remove unused programs
    needed by root. (LP: #989583)

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 02 Dec 2011 10:56:30 -0500

nova (2012.1~e2~20111125.11566-0ubuntu1) precise; urgency=low

  * New upstream release. 
  * Refreshed debian/patches/packaged-ajaxterm-calls.patch.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 25 Nov 2011 14:02:18 -0500

nova (2012.1~e2~20111116.11495-0ubuntu1) precise; urgency=low

  * New upstream version. 
  * Refreshed debian/patches/packaged-ajaxterm-calls.patch.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 18 Nov 2011 09:40:58 -0500

nova (2012.1~e1-0ubuntu3) precise; urgency=low

  * debian/rules: Take the api-paste.ini from nova/etc.  

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 17 Nov 2011 14:10:03 -0500

nova (2012.1~e1-0ubuntu2) precise; urgency=low

  * Revert debian/nova-manage_flagfile_location.patch: It 
    was causing more problems then it should have. (LP: #891229) 

 -- Chuck Short <zulcss@ubuntu.com>  Wed, 16 Nov 2011 21:12:34 -0500

nova (2012.1~e1-0ubuntu1) precise; urgency=low

  * New upstream release.
  * debian/control: Dropped python-feedparser until MIR comes through. 
  * Synced with upstream bzr packaging.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 11 Nov 2011 09:25:25 -0500

nova (2012.1~e1~20111020.11229-0ubuntu1) precise; urgency=low

  * New upstream release.
  * Dropped patches, already applied upstream:
    - debian/patches/backport-iscsitarget-choice.patch
    - debian/patches/backport-libvirt-console-pipe.patch
    - debian/patches/backport-lxc-container-console-fix.patch
    - debian/patches/backport-recreate-gateway-using-dhcp.patch
    - debian/patches/backport-snapshot-cleanup.patch
    - debian/patches/block-migration-needs-copy-backingfile.patch
    - debian/patches/fix-iscsi-target-path.patch
    - debian/patches/fix-lp838581-removed-db_pool-complexities.patch
    - debian/patches/fix-lp863305-images-permission.patch
    - debian/patches/fqdn-in-local-hostname-of-ec2-metadata.patch
    - debian/patches/use-netcat-instead-of-socat.patc
   * debian/control:
     - Add python-feedparser as a build dependency.
     - Bump standards version to 3.9.2
     - Point to the essex branch.
   * debian/patches/nova-manage_flagfile_location.patch:
     Update patch to take in account of devstack (LP: #870405)

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 21 Oct 2011 14:37:26 -0400

nova (2012.1~e1~20110909.1546-0ubuntu0) UNRELEASED; urgency=low

  [ Dan Prince ]
  * Fix dnsmasq line in nova_sudoers.
  * Update ajaxterm patch to work with latest nova code.

  [ Monty Taylor ]
  * Added python-feedparser to build-deps.
  * Added branching logic to allow for building on lucid.
  * Indicate depend on pastedeploy 1.5.0, since it's required.

  [ Tushar Patil ]
  * Added iputils-arping to Depends and arping to sudoers
  
  [Chuck Short]
  * Merged ubuntu packaging changes:
    - debian/control: Drop socat in favor of netcat.
    - debian/nova-compute.upstart.in, debian/nova.conf:
      Move reference of nova-compute.conf from nova.conf to 
      nova-compute's argv.
    - debian/nova-common.postinst: Create 'nova' group, add user to it.
    - debian/nova-common.postinst: Restrict permissions of /var/log/nova
  * Updated debian/patches/packaged-ajaxterm-calls.patch to fix FTBFS.
  * Updated debian/patches/nova-manage_flagfile_location.patch
  * debian/nova-api.install, debian/rules: Use etc/nova/api-paste.ini.
  * debian/nova_sudoers: Clean up sudoers.
  * debian/control: Add dependencies.

  [ Mark Washenberger ]
  * Add support for nova-console package.

 -- Monty Taylor <mordred@inaugust.com>  Fri, 30 Sep 2011 09:33:16 -0700

nova (2011.3-0ubuntu6.1) oneiric-proposed; urgency=low

  [Scott Moser]
  * Removed db_pool complexities from nova.db.sqlalchemy.session (LP: #838581)

  [Chuck Short]
  * debian/patches/fix-iscsi-target-path.patch: Fix ISCSI target path patch.
    (LP: #871278)
  * debian/control: Either install xen-hypervisor-4.1-amd64 or 
    xen-hypervisor-4.1-i386 for nova-compute-xen. (LP: #873243)

 -- Chuck Short <zulcss@ubuntu.com>  Wed, 12 Oct 2011 14:33:25 -0400

nova (2011.3-0ubuntu6) oneiric; urgency=low

  * debian/patches/backport-libvirt-console-pipe.patch: 
    - Patch updated to fix race on instance termination (LP: #868349)

 -- Robie Basak <robie.basak@ubuntu.com>  Wed, 05 Oct 2011 17:37:49 +0100

nova (2011.3-0ubuntu5) oneiric; urgency=low

  * debian/nova-common.postinst:
    - Set permissions recursively on /var/lib/nova to nova:nova for new
      installations (LP: #865169).
  * debian/patches/backport-libvirt-console-pipe.patch:
    - Patch updated to use correct patchset from upstream - incorrect version
      was uploaded in -0ubuntu4 (LP: #832507).

 -- James Page <james.page@ubuntu.com>  Tue, 04 Oct 2011 09:43:55 +0100

nova (2011.3-0ubuntu4) oneiric; urgency=low

  [James Page]
  * debian/nova-common.postinst:
    - Exclude mounted LXC rootfs filesystems within /var/lib/nova from 
      user/group ownership changes (LP: #861260).
    - Ensure that primary group for 'nova' user is 'nova' so that files
      created by this user have the correct group ownership.

  [Adam Gandelman]
  * debian/nova-common.postinst: Restrict permissions of /var/log/nova
    (LP: #862816)

  [Ante Karamatic]
  * Add /usr/sbin/ietadm to sudoers (LP: #861547)
  * debian/control: Fix typo in Vcs-Bzr

  [Chuck Short]
  * debian/patches/backport-libvirt-console-pipe.patch:
    Move console.log to a ringbuffer so that the console.log
    keeps filling up. (LP: #832507)
  * debian/patches/backport-lxc-container-console-fix.patch:
    Make euca-get-console-output usable for LXC containers.
    (LP: #832159)
  * debian/patches/backport-snapshot-cleanup.patch:
    Enforce snapshot cleanup. (LP: #861582).
  * debian/patches/fix-lp863305-images-permission.patch:
    Fix image access control. (LP: #863305)

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 30 Sep 2011 15:21:56 -0400

nova (2011.3-0ubuntu3) oneiric; urgency=low

  [Adam Gandelman]
  * debian/nova-common.postinst: Create 'nova' group, add user to it
    (LP: #856530)
  * debian/nova.conf, debian/nova-compute.upstart.in: Move reference of
    nova-compute.conf from nova.conf to nova-compute's argv. (LP: #839796)

  [Chuck Short]
  * debian/patches/backport-recreate-gateway-using-dhcp.patch:
    Makes sure to recreate gateway for moved ip. (LP: #859587)
  * debian/control: Update Vcs info.

  [ Scott Moser ]
  * debian/patches/fqdn-in-local-hostname-of-ec2-metadata.patch
    Make the 'local-hostname' in the EC2 Metadata service contain
    the domainname also. (LP: #854614)

 -- Chuck Short <zulcss@ubuntu.com>  Tue, 27 Sep 2011 14:56:59 -0400

nova (2011.3-0ubuntu2) oneiric; urgency=low

  [Chuck Short]
  * debian/rules, debian/control: Use dh_python2
  * debian/control, debian/series, 
    debian/patches/backport-iscsitarget-choice.patch,
    debian/nova_sudoers:
    + Change the default from iscsitarget to tgt.
  * debian/control, debian/series, 
    debian/patches/use-netcat-instead-of-socat.patch,
    debian/nova_sudoers:
     + Change from socat to netcat.
  * debian/patches/block-migration-needs-copy-backingfile.patch:
    Fix block migration by needing to copy backing_file.
  
  [Monty Taylor]
  * Install a new paste config to enable deprecated auth.,

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 23 Sep 2011 13:34:51 -0400

nova (2011.3-0ubuntu1) oneiric; urgency=low

  [Chuck Short]
  * New upstream release.
  * debian/control, debian/nova_sudoers:
    + Add iputils-arping and add /usr/bin/apring.
  * debian/nova_sudoers: Clean up missing binaries.

  [Monty Taylor]
  * debian/control:
    + Add vlan to nova-compute

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 22 Sep 2011 09:33:49 -0400

nova (2011.3~rc~20110920.r1192-0ubuntu2) oneiric; urgency=low

  * debian/nova_sudoers:
    + Fix typo in nova_sudoers. 
    + Tabs vs Spaces.
  * debian/nova.conf:
    + Use force_dhcp_release.
  
 -- Chuck Short <zulcss@ubuntu.com>  Tue, 20 Sep 2011 15:44:39 -0400

nova (2011.3~rc~20110920.r1192-0ubuntu1) oneiric; urgency=low

  [Chuck Short]
  * New Upstream release.

  [ Monty Taylor ]
  * Add branching logic for building on lucid. 
 
  [Vish Ishaya]
  * Add dnsmas-utils to nova-network dependencies
  * Add dhcp_release to sudoers.

 -- Chuck Short <zulcss@ubuntu.com>  Tue, 20 Sep 2011 10:02:04 -0400

nova (2011.3~rc~20110916.r1173-0ubuntu1) oneiric; urgency=low

  [ Chuck Short ]
  * New uptream version. 
  * debian/rules: Dont fail tests.

  [ Monty Taylor ]
  * Add branching logic for building on lucid.
  * Add vlan as a depend for nova-compute.

 -- Monty Taylor <mordred@inaugust.com>  Wed, 21 Sep 2011 17:49:43 -0400

nova (2011.3~rc~20110909.r1155-0ubuntu1) oneiric; urgency=low

  * New upstream version. 

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 09 Sep 2011 15:09:02 -0400

nova (2011.3~rc~20110901.1523-0ubuntu1) oneiric; urgency=low

  [ Chuck Short ]
  * Really remove python-ipy.
  * New upstream release.
  * Use "--use_deprecated_auth" by default because we dont support
    kestone yet. (LP: #838768)

  [ James E. Blair ]
  * Add python-unittest2 as a build dep.

  [ Dave Walker (Daviey) ]
  * debian/control: Added python-kombu as a build and run depends.
    - LP: #798876

  [ Scott Moser ]
  * add dependency on qemu-kvm to nova-compute (LP: #833530)

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 02 Sep 2011 13:21:22 -0400

nova (2011.3~d4-0ubuntu1) oneiric; urgency=low

  [Chuck Short]
  * New upstream release.

  [Thierry Carrez]
  * No longer run nova-objectstore as root (LP: #820968)

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 26 Aug 2011 13:31:14 -0400

nova (2011.3~d4~20110812.1417-0ubuntu1) oneiric; urgency=low

  [Chuck Short]
  * New upstream version
  * Dont respawn the upstart jobs if nova is failing.
  * Remove python-ipy.

  [ Dan Prince ]
  * Updated the ajaxterm patch to work with latest nova code (privsep)
  * Added python-lxml to python-nova build-deps.

  [ Thomas Goirand ]
  * Add copyright info for ipv6 class for boto.

  [ Soren Hansen ]
  * Add parted to sudoers file.
  * Add Depends: python-simplejson and Conflicts: python-cjson due to
    bug #800465 which caused the test suite to fail.
  * Remove nova-instancemonitor package (dropped upstream).
  * Remove twisted dependency (dropped upstream).
  * Create nova-compute-{kvm,lxc,uml,xen} packages that pull in the
    right packages and configures nova to use the hypervisor in
    question.

  [ Thierry Carrez (ttx) ]
  * Added python-xattr to build deps, apprently this is now needed
  * Removed python-xattr from build deps, now that python-glance properly
    depends on it
  * Added radvd to nova_sudoers file (LP: #758072)
  * Make nova.conf non-world-readable, as it may contain DB passwords
    (LP: #798878)

  [ Brian Waldon ]
  * Remove nova-instancemonitor man page stub.
  * Remove nova-instancemonitor from apport hook.

  [ Monty Taylor ]
  * Added python-lxml to build-deps.

  [ Scott Moser ]
  * use trailing '/' on all usages of chown to support the case where
    the directory is a symlink

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 12 Aug 2011 03:12:38 -0400

nova (2011.3~d1-0ubuntu1) oneiric; urgency=low

  [Chuck Short]
  * New upstream version.

  [Soren Hansen]
  * libvirt plugin was refactored. Adjust ajaxterm patch accordingly.
  * Add /sbin/brctl to sudoers (it moved from /usr/sbin to /sbin in
    Oneiric).
  * Add dependencies on dnsmasq-base and bridge-utils to nova-network.
    (LP: #790661)

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 02 Jun 2011 09:30:39 -0400

nova (2011.3~bzr1108-0ubuntu1) oneiric; urgency=low

  [ Thomas Goirand ]
  * Removes embedded jquery.js from nova-doc package.
  * Added some manpages stubs to make package lintian clean.
  * Adds a nova-volume.default where the admin can decide what VG to use.
  * debian/nova-objectstore.logrotate working in Debian.
  * Do not have debian/*.upstart files in Debian. Using debian/*.upstart.in
  and copying them as .upstart only if building in Ubuntu.
  * Nova init files reviewed so that they are working in Debian.
  * Initscripts of nova-compute now has a Should-Start: libvirt-bin
  * nova-compute.postinst working with libvirt group in Debian.
  * Reviewed the package descriptions.
  * Reviewed some dependencies in debian/control (added some adduser and
  lsb-base depends).
  * Added missing binary Depends: (nova-manage must depends on
  python-amqplib unless failing puiparts tests, nova-compute is pretty
  usless without qemu-utils)
  * Removes .gitignore files from binaries.
  * Don't package nova-manage.1 man page if we aren't building docs.
  * Packages correctly: nova-manage.1 and not novamanage.1 !!!

  [ Soren Hansen ]
  * Bump required version of libvirt-bin on Ubuntu to 0.8.8.
  * Drop the last of the AOE dependencies. iSCSI is the default
    nowadays.
  * Make the decision about the name of the libvirt group at build time
    rather than runtime. (LP: #781716)

  [ Vishvananda Ishaya ]
  * Add dd to the sudo cmd list.
  * Add a nova-vncproxy package.

 -- Soren Hansen <soren@ubuntu.com>  Wed, 25 May 2011 15:57:03 +0200

nova (2011.2-0ubuntu1) natty; urgency=low

  * New upstream release. 

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 15 Apr 2011 07:14:43 -0400

nova (2011.2~gamma1-0ubuntu1) natty; urgency=low

  [Chuck Short]
  * New upstream release.
  * debian/nova-doc.docs: Adjust directory to the right docs path.

  [Soren Hansen]
  * Refresh nova-manage-flags patch.
  * Adjust call to ajaxterm to work with the packaged ajaxterm instead
    of the one we ship in the tarball.
  * Remove all traces of the adminclient package. It moved to its own
    tarball. There are no known consumers, so this should not be a
    problem.
  * Remove build-dependency on python-suds again.
  * setup.py now takes care of installing the CA code, so yank those
    bits from debian/nova-common.install.
  * setup.py now places api-paste.ini correctly, so stop working around
    it.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 08 Apr 2011 10:49:10 -0400

nova (2011.2~bzr925-0ubuntu1) natty; urgency=low

  [Chuck Short]
  * New upstream release.

  [Soren Hansen]
  * Make the build fail if the test suite does. The test that used to
    fail on the buildd's has been complete rewritten. (LP: #712481)
  * Specify that we need Sphinx > 1.0 to build.
  * Remove refresh_bzr_branches target from debian/rules. It is not used
    anymore.
  * Clean up after doc builds on debian/rules clean.
  * Add a nova-ajax-console-proxy package.
  * Add Recommends: ajaxterm to nova-compute, so that nova-ajax-console-
    proxy will have something to connect to.
  * Stop depending on aoetools. iscsi is the default nowadays (and has
    been for a while).
  * Move dependency on open-iscsi from nova-volume to nova-compute.
    They're client tools, so that's where they belong.
  * Add a build-depends on python-suds.
  * Add logrote config for nova-ajax-console-proxy.
  * Add upstart job for nova-ajax-console-proxy.

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 31 Mar 2011 11:25:10 -0400

nova (2011.2~bzr828-0ubuntu1) natty; urgency=low

  * New upstream version. 
  * debian/control: Add python-lockfile as a build dependency.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 18 Mar 2011 09:28:17 -0400

nova (2011.2~bzr786-0ubuntu1) natty; urgency=low

  [Chuck Short]
  * New upstream version.

  [ Thierry Carrez (ttx) ]
  * nova-api.conf was renamed api-paste.ini (LP: #705453)

  [ Soren Hansen ]
  * Start on filesystem event rather than local-filesystems.
  * Weed out a *lot* of out-dated information from debian/control.
  * Create /var/lock/nova in upstart jobs and set lock_path in the
    flagfile.
  * Add dependency on python-novaclient.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 11 Mar 2011 09:41:45 -0500

nova (2011.2~bzr760-0ubuntu1) natty; urgency=low

  [Chuck Short]
  * New upstream version.
  * Fix up typos in debian/control. (LP: #721414)

  [ Thierry Carrez (ttx) ]
  * Add python-distutils-extra as build-dep (for i18n)
  * Ship .mo files in /usr/share/locale
  * Add lvdisplay to nova_sudoers, clean up dupe entries

  [ Soren Hansen ]
  * Always run "nova-manage db sync" from postinst, unless an explicit
    sql_connection has been set in nova.conf. (LP: #705758)

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 04 Mar 2011 10:19:52 -0500

nova (2011.2~bzr700-0ubuntu1) natty; urgency=low

  [ Chuck Short ]
  * New upstream version.

  [ Soren Hansen ]
  * Rely on --logdir to find and use the correct logfile.
  * Remove the postrotate magic for all but nova-objectstore. It is not
    needed anymore due to using RotatingFileHandler for logging.

  [ Thierry Carrez ]
  * Ship adminclient in a separate package.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 18 Feb 2011 09:36:22 -0500

nova (2011.2~bzr663-0ubuntu1) natty; urgency=low

  [ Chuck Short ]
  * New upstream verison.
  * Add python-paramiko to debian/control.

  [Soren Hansen]
  * Honour nocheck and nodocs in DEB_BUILD_OPTIONS.
  * Add /sbin/route to sudoers file.

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 11 Feb 2011 10:27:54 -0500

nova (2011.1-0ubuntu2) natty; urgency=low

  * Dont fail unittest because of buildd problems. 

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 03 Feb 2011 07:26:54 -0500

nova (2011.1-0ubuntu1) natty; urgency=low

  * New upstream release.
  * Add recommends to python-mysqldb (LP: #708511)
  * Add dependency of iscsitarget to nova-volume and a sugestion to use 
    sheepdog (LP: #708141)
  * Suggest radvd for those who want to try ipv6.

 -- Chuck Short <zulcss@ubuntu.com>  Thu, 03 Feb 2011 07:00:52 -0500

nova (2011.1~bzr638-0ubuntu1) natty; urgency=low

  * New upstream snapshot. 

 -- Chuck Short <zulcss@ubuntu.com>  Fri, 28 Jan 2011 13:41:00 -0500

nova (2011.1~bzr597-0ubuntu1) natty; urgency=low

  [ Chuck Short ]
  * New upstream snapshot.
  * Add socat, iscsiadm, and vgs to nova_sudoers.
  * Add aoetools, open-iscsi to dependencies for nova-volume.
  * Add socat to dependencies for nova-network.
  * Add python-paste and python-pastedeploy as build dependency.
  * Add python-tempita and python-migrate as build dependency.

  [ Soren Hansen ]
  * Add dependency on sudo.
  * Add upstart jobs for everything.
  * Adjust test run for nosetests newness.
  * Quiet nova-compute's postinst script.
  * Change the dependency on sqlalchemy to ensure the C extension gets
    installed for versions of the package where that was split out.
  * Don't chgrp anything to the 'nogroup' group. The whole idea of the
    nogroup group is that it doesn't own anything, so only being a
    member of that shouldn't grant you access to anything. Making dirs
    and files owned by nogroup messes this up.
  * Update nova-manage patch.
  * Add iptables-{restore,save} to sudoers file.
  * Create a logrotate config for each daemon. Make them restart the
    service after rotation.
  * Drop python-redis dependency.
  * Change python compatibility from "2.6" to "2.6-"
  * Add launchpad page to watch file.
  * Set Python-Version control fields for python-nova.
  * Add ip6tables-{save,restore} to sudoers file. (LP: #704458)
  * Add python-glance dependency.
  * Include paste config for nova-api.
  * Initialise database on initial install.

  [ Rick Clark ]
  * Add dependency on python-cheetah
  * Added iscsi target admin tool to sudoers file.
  * Specified log for nova-objectstore.
  * Set verbose logging in nova.conf.

  [ Monty Taylor ]
  * Add dependency on python-netaddr

  [ Thierry Carrez (ttx) ]
  * Added qemu-nbd to nova_sudoers
  * Added modprobe nbd to nova-compute upstart script

 -- Thierry Carrez (ttx) <thierry@openstack.org>  Mon, 24 Jan 2011 14:32:19 +0100

nova (2011.1~bzr456-0ubuntu1) natty; urgency=low

  [ Chuck Short ]
  * New upstream snapshot.
  * debian/source_nova.py:
    Add apport hook.

  [ Soren Hansen ]
  * Removed logdir.patch. Merged upstream.
  * Drop flagfile_location.patch: Merged upstream.
  * Use new --state_path flag and weed out the many direct references to
    /var/lib/nova.
  * Leave it to upstream's 'setup.py install' to install templates.
    Remove explicit paths from nova.conf.

 -- Chuck Short <zulcss@ubuntu.com>  Mon, 13 Dec 2010 10:17:01 -0500

nova (2011.1~bzr412-0ubuntu1) natty; urgency=low

  [ Soren Hansen ]
  * New upstream snapshot.
  * Added the new tarballs page to debian/watch.
  * Clean out patch-branches (everything is upstream now).
  * Remove redis-server as a build-depends and don't start it for tests
    anymore.
  * Add missing dependency on python-webob.
  * Force a python-support run (so avoid deferring it until dpkg
    triggers run). (LP: #660428)
  * Remove build and runtime dependencies on python-tornado. It's not
    needed anymore.
  * logdir.patch: Add a --logdir option to workers so that they can all
    use the same flagfile. (lp:~soren/nova/logdir-flag)
  * Consolidate all the flagfiles into one.
  * flagfile_location.patch: Patch from upstream to ensure all workers
    have a consistent way of finding their flagfile.
    (lp:~soren/nova/unify-default-flagfile-location)
  * nova-manage_flagfile_location.patch: Make sure nova-manage uses
    /etc/nova/nova.conf by default.
  * Add build and runtime dependency on openssl. It used to be pulled in
    by python-tornado, but is actually used directly by nova.

  [ Chuck Short ]
  * debian/control:
   - Add dependency to python-rrdtool so that nova-instancemonitor
     doesnt complain about missing python modules when starting.
  * debian/nova-common.install: Add missing templates.
  * debian/nova-*.conf: Update flagfiles to handle upstream changes.
  * Dropped start-redis since we dont do redis anymore.

 -- Soren Hansen <soren@ubuntu.com>  Tue, 23 Nov 2010 11:17:09 +0100

nova (0.9.1~bzr331-0ubuntu2) maverick; urgency=low

  * Add a minimal patch to ensure a string gets returned as an
    instance's internal ID. (LP: #657053)

 -- Soren Hansen <soren@ubuntu.com>  Fri, 08 Oct 2010 23:16:58 +0200

nova (0.9.1~bzr331-0ubuntu1) maverick; urgency=low

  [ Soren Hansen ]
  * New upstream snapshot (FFe ref: LP #645936)
  * Add SQLAlchemy dependency.
  * Specify that we want sqlite and we want it in
    /var/lib/nova/nova.sqlite.
  * Move "adduser nova libvirtd" to nova-compute.postinst.
  * Add python-eventlet and python-routes dependencies.
  * Make /bin/true our error handler for init scripts.
  * Install nova-api-new as nova-api.
  * Add nova-scheduler package.
  * Add /bin/kill to sudoers.
  * Make sure nova_sudoers has the correct mode, otherwise sudo gets
    very upset.
  * Add ebtables and gawk dependencies for nwfilter stuff to work.

  [ Chuck Short ]
  * Add dependency on lvm2 for nova-volume.
  * Add lvm commands to sudoers list.

 -- Soren Hansen <soren@ubuntu.com>  Tue, 21 Sep 2010 16:36:37 +0200

nova (0.9.1~bzr265-0ubuntu1) maverick; urgency=low

  * New upstream snapshot (FFe: LP: #628027)
  * Install uml libvirt xml file.
  * Add adduser as a dependency of nova-common so that we can create a
    nova user.
  * Create a nova user on install.
  * Create a separate tmpdir for nova, so that we can limit calls to
    chmod/chown to dirs and files in that directory.
  * Add nova-network package.
  * Add a sudoers file for nova, so that we don't have to run as root
    anymore.
  * Fix all init scripts to run their respective daemons as nova.
  * Update nova-compute flag file to account for moved libvirt
    templates.
  * Make all init scripts create /var/run/nova.
  * Move all pidfiles into /var/run/nova.
  * Make all daemons create a log file in /var/log/nova.
  * Respect DEB_BUILD_OPTIONS=nocheck.
  * Add a logrotate config file.

 -- Soren Hansen <soren@ubuntu.com>  Tue, 07 Sep 2010 13:12:10 +0200

nova (0.9.1~bzr204-0ubuntu2) maverick; urgency=low

  * Make sure debian/start-redis is executable.

 -- Soren Hansen <soren@ubuntu.com>  Sat, 07 Aug 2010 11:38:30 +0200

nova (0.9.1~bzr204-0ubuntu1) maverick; urgency=low

  * First OpenStack release.

 -- Soren Hansen <soren@ubuntu.com>  Wed, 04 Aug 2010 13:27:50 +0200

