Joe Beda › Comments

Joe Beda
Answer by Joe Beda for How to write a kubernetes pod configuration to start two containers -
The error in question here is "failed to find fit". This generally happens when you have a port conflict (try and use the same hostPort too many times or perhaps you don't have any worker nodes/minions. I'd suggest you either use the Vagrant file that is in the Kubernetes git repo (see as we have been trying to make sure that stays working as Kubernetes is under very active development. If you want to make it work with the CoreOS single machine set up, I suggest you hop on IRC (#google-containers on freenode) and try and get in touch with Kelsey Hightower. - Joe Beda
Joe Beda
Comment by Joe Beda on Where do GCE compute instance accounts come from when creating new instances? -
The script won't remove any user accounts to avoid data loss. Check for sshKeys via gcutil getproject and gcutil getinstance <instance name> also to make sure you aren't missing something. - Joe Beda
Joe Beda
Answer by Joe Beda for Where do GCE compute instance accounts come from when creating new instances? -
The accounts inside the VM are separate from the accounts that have permission to operate on the API. The accounts in the VM come from the sshKeys metadata value that the VM sees. This is a union of VM specific metadata and the project metadata. By default gcutil will prompt you to create a key and expand the sshKeys metadata value with that key and $USER. The easiest way to see and edit this is at the Cloud Console. There are more details on ssh'ing into the instance here. - Joe Beda
Paul Buchheit
If you uncheck "Accept third-party cookies", Firefox will no longer send any cookies to iframes (even if set outside of an iframe), which breaks the FriendFeed Facebook app. Has Firefox always been like this?
Picture 5.png
These "privacy" features end up hurting privacy, because then web sites switch to signed urls and such, which are much worse (they leak out in referrer headers). - Paul Buchheit
Yup, this was exactly my problem. I accidentally unchecked it while messing around with cookies while programming...occupational hazard... - Emmett Shear
This breaks Feedly as well. I've always unchecked third-party cookies because I was under the impression that's where most click-trackers and ad-servers lived. Am I wrong? - Akiva
Yes, for exactly the same reasons. You are not wrong. - Sam Pullara
Isn't this the default policy in IE7, unless you enable p3p for the sites? - Michael Herf
I'm not pretty sure I agree with @paul - there are enough examples of manipulations by 3rd party cookies, from ads tuning and down to other nasty tricks. You may dislike it but it is there to protect us. And it is there for years. - A. T.
It's irritating enough that I have to allow cookies on sites I want to share through the bookmarklet. Luckily, I use CS Lite. - Akiva
Please see this bugzilla entry for a quick overview: - Reading the entire bug is a good idea. This is also a relevant bug if you're interested: - Christopher Blizzard
These sorts of gimmicks are to privacy what a paper mache motorcycle helmet is to safety. They interfere with legitimate functionality while giving a false sense of security. - Paul Buchheit
you should accept authentication using facebook params, and set a cookie if you can. you have the user info right there - no need for a cookie - Ivan Kirigin
For the record, I was part of the IE team when we implemented the IE third party cookie P3P support. It was a feature completely designed by a set of State Attorneys General. They specified everything down to the UI in the IE control panel. It was a disaster. - Joe Beda
Ivan, those facebook params leak through referrer headers, meaning that other people can steal your login. Joe, the P3P thing is kind of dumb, but at least I can set the right headers to make the problem go away. That's an amusing back-story though. - Paul Buchheit
from bug report above "b) the ability to make decisions based on p3p policies was removed for firefox 3, because p3p isn't an effective way to establish trust with a site. it's a one-way system; anyone can say they're the good guy" - A. T.
Joe Beda
Answer by Joe Beda for Can Google App Engine make a http request to a Compute Engine instance within the same project without an external IP? -
This is currently unsupported. Communication between App Engine and GCE must go through the URLFetch API and use a public IP. - Joe Beda
Joe Beda
Answer by Joe Beda for gcutil addinstance no longer returns IP address of instance -
A future release will add this back by default. We removed columns to make it fit on a more typical terminal but perhaps went too far. In the meantime, you can run: gcutil listinstances --columns=name,zone,external-ip,status Sorry for the inconvenience! - Joe Beda
Joe Beda
Answer by Joe Beda for gcutil is not woking with OS X 10.9 -
This is a known issue and we are working on getting a fix out ASAP. In the meantime, you can run the command output in the INFO line. We are tracking this issue here. - Joe Beda
Joe Beda
Answer by Joe Beda for What are the IP ranges for GCE zones? -
We don't currently publish which IPs map to which ranges. We can and do move blocks as necessary to balance capacity. However, all Google Cloud IPs are listed here: dig txt +short "v=spf1 ?all" See also: Google App Engine - urlFetch address not in Compute Engine Firewall for App Engine Url Fetch - Joe Beda
Joe Beda
Answer by Joe Beda for Authenticating Google Pull Task Queue with NodeJS client -
The best way to do this is to take advantage of Service Accounts in GCE. This is a synthetic user account that is usable by anyone in the GCE project. Getting all of the auth lined up can be a little tricky. Here is an example on how to do this in python. The general outline of what you need to do: Start the GCE instance with the task queue OAuth scope. Add the GCE service account to the task queue ACL in queue.yaml. Acquire an access token. It looks like you can use the computeclient.js credential object to automate the HTTP call to http://metadata/compute... Use this token in any API calls to the task queue API. I'm not a Node expert, but searching around I saw found an example of how to connect to the Datastore API from Node using service accounts from GCE. It should be straightforward to adapt this to the task queue API. - Joe Beda
Joe Beda
Answer by Joe Beda for Invalid Metadata Requests on Google Compute Engine -
The images provided by default on GCE will automatically configure themselves based on data returned by the metadata server. This particular request is to find IPs that are forwarded to this instance as part of Load Balancing. Basically, the script at /usr/share/google/google_daemon/ will continually wait for new IP addresses to be forwarded to this instance. Once it notices a new incoming IP (as indicated by the metadata server) it will configure the instances network stack to respond to that IP. The question in my mind is: why are you seeing these? Are you doing something interesting to capture the requests sent to that address? These should be completely transparent to any application. - Joe Beda
Joe Beda
Answer by Joe Beda for GCE zone us-central1-a gone forever? -
Sorry this surprised you! This zone was temporarily removed as part of the maintenance as we testing some processes. It should reappear shortly. Joe Beda (GCE Lead Engineer) - Joe Beda
Joe Beda
Answer by Joe Beda for Google Compute Engine Python API and web API do not return images or kernels -
The google (and public) provided images and kernels are stored in a different project. The idea is that these aren't yours, per se, but instead are published by google (or debian or centos). You can list kernels with gcutil listkernels --project=google. The equivalent with code is to replace MYPROJECT with google. For images, you can use centos-cloud for CentOS images and debian-cloud for debian images. gcutil automatically integrates from common projects for ease of use. - Joe Beda
Joe Beda
Comment by Joe Beda on Read permission error when adding disk Image to the Images Collection -
If you launch the VM with the appropriate service account scopes (--service_account_scopes=compute-rw,storage-full) this should work. - Joe Beda
Amit Patel
When I was young, I had time and energy but money limited me. In middle age, I had money and energy but time limited me. Now that I'm old, I have money and time but energy limits me.
Take heart, when you are really old you'll have no money and no energy. The cycle will be complete :-) - Todd Hoff
"Youth is wasted on the young" - Brian Fitzpatrick
Now GET OFF MY LAWN! - Brian Fitzpatrick
"'Cause dreams they seem to cost money / But money costs some dreams" - Joe Beda
Joe Beda
Answer by Joe Beda for Tools for setting up and running a grid job on Google Compute Engine? -
Starcluster is really cool. Unfortunately, there is no support for GCE and I'm familiar with any similar systems at this point. I'd love to see that happen though so that if you get something working, please share! - Joe Beda
Joe Beda
Answer by Joe Beda for Google Compute Engine, mySQL Workbench -
It isn't clear where your X Display server is running. What you need to do is somehow get the X client (mySQL Workbench) talking to your X server (the display server running on your workstation/laptop). A common way to do this is to tunnel that connection over SSH. If I make the (big) assumption that you are running on a mac and launching using gcutil from there, you probably want to do something like this: First, on your mac, download and start up XQuartz. If you are running Linux locally you can skip this. If you are on Windows I don't have any recent experience or advice there. Next, create and configure your virtual machine. Make sure that xauth ends up being installed. If it isn't, you won't be able to forward the X connection over SSH. You'll see an error in the next step. You may have to restart the shell on your host machine at this point. You then want to SSH into your GCE instance with something like: gcutil ssh --ssh-arg=-Y <my-instance> Now things should be set up so that... - Joe Beda
Joe Beda
Answer by Joe Beda for Setting external ip on VM instead of internal -
Currently there is no way to map an external IP address to a GCE instance directly. All communication is NATed to the internal address. You can, however, access the external address programmatically via the metadata server: http://metadata/compute... I've never set up cPanel so I can't give you any guidance there. - Joe Beda
Joe Beda
Answer by Joe Beda for What determines how fast an instance can be started/stopped on GCE? -
By and large copying the image currently dominates start up time for GCE. Things you can do to minimize this: Use a pre-created persistent disk to boot from. In this case, there is no image propagation time. Use one of our stock images (that are pretty small) or, if you create a custom image, don't add more bits than you need. Typically, the instance type and attached disks won't affect time dramatically. - Joe Beda
Joe Beda
Answer by Joe Beda for Getting started with gcutil and Compute Engine: Error: The resource 'projects/<project-id>' was not found -
Often you'll see this error when there is an authentication/authorization failure. Make sure you ensure that the user account gcutil is authorized as matches a user account listed in the teams section of the (Cloud Console)[]. You can find that under the gear icon in the upper right corner. To confirm which account is being used by gcutil, run the following command: $ gcutil auth --confirm_email --just_check_auth INFO: Authorization succeeded for user If you find that you are authorized under the wrong account (multiple personas in chrome, for example) you can reauthorize gcutil with: $ gcutil auth Make sure that you follow this link in the right browser tab/context. - Joe Beda
Joe Beda
Answer by Joe Beda for Rebooting an instance that is locked up -
We don't support explicit reboots from the outside/API yet. This is something that we know we need to support but I don't have a date or schedule for it yet. If you are using persistent disk to store your data (which you probably should for anything important) you can terminate and restart the instance. - Joe Beda
Google looks to unify chat services under 'Babble' | Internet & Media - CNET News -
Google looks to unify chat services under 'Babble' | Internet & Media - CNET News
"Google's messaging platforms might all be rolled into one new platform, according to a recent report. The search giant is planning to combine its many messaging platforms, including Google Talk, Hangout, Voice, and Messenger, into one service it'll call Babble, is reporting, citing "multiple sources" who claim to have knowledge of its plans. The move is designed to make it easier for Google's users to communicate and also reduce the sheer number of places the search giant needs to work to keep communication going." - Me from Bookmarklet
:( - Amit Patel
Why is this a ':(' ? - Joe Beda
Benjamin Golub
Thank you DreamHost for storing my password in plaintext :(
You're paying extra for that, you know. - Akiva
There should be a registry of companies that do dumb stuff with passwords. We can then query it with a chrome extension and display some sort of icon if you are on their site. I'm at a loss as to the correct icon for "dumbass site". - Joe Beda
Piaw Na
Apple Lowers The Price Of The Retina MacBook Pro - Business Insider -
I've been very unimpressed by the Mac book s at work. I have no idea why people buy such expensive crap for work. - Piaw Na
Of course you're unimpressed. - Brian Johns
Are you ever impressed? ;-) - Amit Patel
Yes. I'm still impressed by the Thinkpad X201. Very impressed. I'm impressed by the Nexus 7. - Piaw Na
Out of curiosity, what is it that you don't like about the Mac Books? Just that the hardware doesn't justify the price or is there something in particular you don't like? - Ross Miller
Full screen mode in multi-monitor set up is annoying and badly done. The machine has no dock. It's extremely painful to upgrade hard drives or memory (the number of screws on the bottom of the machine is ridiculous). It's heavy compared to the equivalent thinkpad, and they're extremely expensive. Oh, and reinstalling the OS is unimaginably painful --- my Macbook has already corrupted... more... - Piaw Na
What is this "upgrade" you speak of?! - Amit Patel
Increasing RAM or switching to an SSD. Or even just repairing/replacing a broken HDD. - Piaw Na
Blasphemy! Do not blaspheme! Thou must buy a new machine! - Amit Patel
I work at a startup. I'm solving this partially by buying chromebooks for people who don't need a full laptop. - Piaw Na
I've not tried the Chromebooks yet. Can you increase RAM or switch hard drives or reinstall an OS from the DVD drive? - Amit Patel
No, but everyone else who doesn't need to build iOS software is getting Thinkpads. And increasing RAM and switching hard drives is incredibly easy on those, and they're also at least 40% cheaper for a faster machine. - Piaw Na
Amit -- you should really try out one of the $250 Chromebooks. They are really sweet for the money. I'm not sure I could live with it day and night, but it is amazing how far they've come. - Joe Beda
Chromebooks look so appealing but I can't see myself using it. The Mac Air meets most of my computing needs: emacs, terminal, browser, irc. And I often use it with no network. I also don't find that I use the iPad much, because the combination of smartphone and Mac Air fills most of those needs… - Amit Patel
Amit Patel
WOAH. I saw a flamingo!! In San Francisco Bay!!!
Yes, I will post pics :) - Amit Patel
Escaped from the zoo? - Stephen Mack from iPhone
Quite possibly. I saw one report from 2003 that two (likely escaped) flamingos were found in the North Bay, and one from 2010 that one flamingo was seen at Elkhorn Slough. - Amit Patel
Global warming? - Joe Beda from iPhone
Well, if we're going to have Floridians release their wildlife here, better flamingos than alligators and Burmese pythons. - Spidra Webster
We could have a python hunting contest … - Amit Patel
Amit Patel
(Survey) Which of these roads do you find more aesthetically pleasing? (Ignore the circles and dashed lines)
I like the background on both. :) - SAM
the second one. - kendrak
Second. - Lisa L. Seifert from Android
Second - Larry Hosken
Obviously the circular arc. The Bezier is too pointy. - Joe Beda
Second - Laura Norvig from iPhone
I'm guessing they are really the same? - Todd Hoff
Second (...and I, I /didn't/ take the road less traveled by) - Micah
Thanks everyone! - Amit Patel
Second. - Victor Ganata
Second - JB
Brian Johns
My 30" monitor gives off quite a bit of heat, and I feel it on my face. This must be how steelworkers feel.
My great grandfather was a steel mill worker, Pittsburgh. He wore long johns in the summer, loved retirement in California. - Micah from FFHound(roid)!
This is what makes a great cat bed! ;-) - Amit Patel
I had heard at one time that early computer graphics pioneers had a high rate of brain cancer due the unshielded nature of early computer displays. I can't find any evidence online right now though. So, there's that. - Joe Beda
Triggertrap brings its auto shutter release powers to Android with new application -- Engadget -
Triggertrap brings its auto shutter release powers to Android with new application -- Engadget
"With Google's mobile OS claiming a whopping 68 percent of the world's total smartphone marketshare, it's almost a requirement for companies to expand outside of that other well-known platform. Naturally, the Kickstarter-funded Triggertrap has taken note of this and is now announcing that its automatic shutter release creation will be available on Android starting today. Unlike on iOS, however, the Triggertrap Mobile application won't have a free version on Google Play (or Amazon's app store), so users will have to shell out $5 for the app in order to get started -- of course, that's on top of the $30 for the must-have dongle and matching cable. Triggertrap's expected to be showing off the new Android app at Photokina next week, and you know we'll be sure to bring you a demo to help you decide if it's indeed worth pulling the trigger." - Me from Bookmarklet
Also kickstarter funded: I have one in the package at home that I haven't had time to play with yet. - Joe Beda
Amit Patel
I want to go hiking in southern Oregon but I may postpone my trip until the fire situation calms down.
Screen Shot 2012-08-12 at 12 Aug, 9.36.20.png
We just drove through there yesterday and it didn't look too bad. I really didn't notice any fires. - Joe Beda
Kevin Fox
Google's death benefits are amazing. People don't talk much about death, but Google goes way beyond life insurance.
Google's death benefits are amazing. People don't talk much about death, but Google goes way beyond life insurance.
I've hesitated to tell my wife this when the announced this a little while ago. I'm afraid she'll decide she doesn't need me anymore :) - Joe Beda
Joe Beda
Answer by Joe Beda for can you get a cluster of Google Compute Engine instances that are *physically* local? -
There is no support in GCE right now for specifying rack locality. However, we built the system to work well in the face of large numbers of instances talking to each other in a fully connected way, as long as they are in the same zone. This is one of the things that allowed MapR to approach the record for a hadoop terasort. You can see that in action in the video for the Criag Mcluckie's talk from IO: The best way to see is to test out your application and see how it works. - Joe Beda
Other ways to read this feed:Feed readerFacebook