[ https://issues.apache.org/jira/browse/CLOUDSTACK-450?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15853847#comment-15853847 ]
Daan Hoogland commented on CLOUDSTACK-450: ------------------------------------------ [~widodh] is this still valid (since the 4.6 ssvm rewrite)? > Controlling System VMs should not happen through SSH > ---------------------------------------------------- > > Key: CLOUDSTACK-450 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-450 > Project: CloudStack > Issue Type: Improvement > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Management Server > Affects Versions: pre-4.0.0, 4.0.0, 4.1.0, 4.2.0 > Reporter: Wido den Hollander > Fix For: Future > > > Currently we SSH into the System VMs to control them. > This is not doable on the longer run, it causes problems already, like > injecting the SSH keys into the System VM ISO which is not reliable. > Inside the System VM there should be an API running which the management > server(s) can talk to to inject DHCP entries, add loadbalancing settings to > HA proxy, have the SSVM download a template/ISO, etc, etc. > This would mean a complete rewrite of the System VMs, but it will make them > more robust over time. > The exact spec for this improvement still has to be written, this issue is > just here to identify the problem. -- This message was sent by Atlassian JIRA (v6.3.15#6346)