Re: Instance created using Templates don't get IP address

2013-12-05 Thread Shanker Balan
On 06-Dec-2013, at 12:54 pm, Anju M R  wrote:

> Hi
>
> I'm using CS 4.2 with KVM.
>
> I registered an RHEL 6.4 iso. I created an instance using the ISO. In the
> /etc/sysconfig/network-scripts/ifcfg-eth0 file, I edited the ONBOOT=no to
> ONBOOT=yes and BOOTPROTO=dhcp. On restart the Instance get the IP address.
> I stopped the instance and made a template.
>
> But while creating a new instance using this template, IP is not getting
> assigned.

Did you remove the HW Address and UUID settings also?

[root@csman1-1 ~]# cat /etc/sysconfig/network-scripts/ifcfg-eth0
DEVICE="eth0"
BOOTPROTO="dhcp"
HWADDR="00:0C:29:31:AD:CF”
^^
IPV6INIT="no"
MTU="1500"
NM_CONTROLLED="yes"
ONBOOT="yes"
TYPE="Ethernet"
UUID="00ae1f03-ae6d-4898-99a5-2bf22da078d1”
^^^
[root@csman1-1 ~]#

Remove those lines. Also remove /etc/udev/rules.d/70-persistent-net.rules
and give it a reboot.



--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


Instance created using Templates don't get IP address

2013-12-05 Thread Anju M R
Hi

I'm using CS 4.2 with KVM.

I registered an RHEL 6.4 iso. I created an instance using the ISO. In the
/etc/sysconfig/network-scripts/ifcfg-eth0 file, I edited the ONBOOT=no to
ONBOOT=yes and BOOTPROTO=dhcp. On restart the Instance get the IP address.
I stopped the instance and made a template.

But while creating a new instance using this template, IP is not getting
assigned.

-- 
Regards,

Anju M R


Re: VMs created using KVM hypervisor

2013-12-05 Thread Anju M R
I added an Ingress rule with
Protocol TCP, start port 22, end port 22, cidr 0.0.0.0/0, ssh also working

Thank you


On Fri, Dec 6, 2013 at 10:13 AM, Anju M R  wrote:

> Ping worked. I'm able to reach the instances from the management server
> also between instances. But SSH is not working.
>
>
> On Thu, Dec 5, 2013 at 8:46 PM, Shanker Balan  > wrote:
>
>> On 05-Dec-2013, at 8:33 pm, Anju M R  wrote:
>>
>> > yes. i tried that too. I created a security group with CIDR, and gave
>> rules
>> > ICMP - code 0 and type 0, 0.0.0.0/0 and also tcp 80 80 0.0.0.0/0. then
>> also
>> > it didn't work.
>>
>> Can you try again with ICMP codes -1 and type -1.
>>
>>
>> --
>> @shankerbalan
>>
>> M: +91 98860 60539 | O: +91 (80) 67935867
>> shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
>> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
>> Bangalore - 560 055
>>
>> This email and any attachments to it may be confidential and are intended
>> solely for the use of the individual to whom it is addressed. Any views or
>> opinions expressed are solely those of the author and do not necessarily
>> represent those of Shape Blue Ltd or related companies. If you are not the
>> intended recipient of this email, you must neither take any action based
>> upon its contents, nor copy or show it to anyone. Please contact the sender
>> if you believe you have received this email in error. Shape Blue Ltd is a
>> company incorporated in England & Wales. ShapeBlue Services India LLP is a
>> company incorporated in India and is operated under license from Shape Blue
>> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
>> and is operated under license from Shape Blue Ltd. ShapeBlue is a
>> registered trademark.
>>
>
>
>
> --
> Regards,
>
> Anju M R
>
>


-- 
Regards,

Anju M R


Re: VMs created using KVM hypervisor

2013-12-05 Thread Anju M R
Ping worked. I'm able to reach the instances from the management server
also between instances. But SSH is not working.


On Thu, Dec 5, 2013 at 8:46 PM, Shanker Balan
wrote:

> On 05-Dec-2013, at 8:33 pm, Anju M R  wrote:
>
> > yes. i tried that too. I created a security group with CIDR, and gave
> rules
> > ICMP - code 0 and type 0, 0.0.0.0/0 and also tcp 80 80 0.0.0.0/0. then
> also
> > it didn't work.
>
> Can you try again with ICMP codes -1 and type -1.
>
>
> --
> @shankerbalan
>
> M: +91 98860 60539 | O: +91 (80) 67935867
> shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
> Bangalore - 560 055
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is a
> company incorporated in India and is operated under license from Shape Blue
> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
> and is operated under license from Shape Blue Ltd. ShapeBlue is a
> registered trademark.
>



-- 
Regards,

Anju M R


Re: public ip of system vm and public ip of guest vm on same network segment overlaps

2013-12-05 Thread Domenico De Monte
I confirm that CS complain about overlapping ranges.

After many tests i did not reach my goal.

I want to assign a public IP directly to vm without NAT/SNAT ( like in your 
blog article, Shanker ). I want also to let customer have his lan isolated 
between 2 or more vm.


I understand that with network base, CS let you assign public IPs to vm 
directly but you can not create guest network ( connect 2 vm with private 
address ) on UI. I do not via api if you can do it.


I understand also that with network advanced it’s possible to create many 
isolated network but NOT assign public IP directly to vm without NAT/SNAT.


Am i wrong ?

This is much important to let me understand how network works inside CS.


Best regards



Il giorno 05/dic/2013, alle ore 10:32, Domenico De Monte 
 ha scritto:

> Now i understand :)
> 
> Thank you for all those answers. You clarify me a crucial point.
> 
> So there is no difference between guest traffic ( public or internal ).
> 
> That means that all guest traffic will use just one switch.
> 
> For example if i create an instance with 2 nic, one for public traffic and 
> one for private traffic, private traffic goes to internet switch instead of 
> internal switch.
> 
> I understand now how it works but in my personal opinion i do not think it's 
> correct.
> 
> Best solution i believe is to let administrator choose on which switch 
> separate private and public traffic.
> 
> Just my 2 cents to CS.
> 
> 
> Thank you again shanker!
> 
> Il 04/12/2013 11:45, Shanker Balan ha scritto:
>> On 04-Dec-2013, at 1:35 pm, Domenico De Monte  wrote:
>> 
>>> Before all, thank you for your reply. You explain me many concepts, really
>>> important to know, that were not clear in CS documentation.
>> There are four traffic types in CloudStack:
>> 
>> (1) Management
>> (2) Storage
>> (3) Guest
>> (4) Public
>> 
>> Don’t call it by any other name, just use the ones listed above. :)
>> 
>>> In total there are 4 NIC on each server, 2 assigned to vSwitch0 and 2 to 
>>> vSwitch1.
>>> 
>>> In according of what you replied, my new zone configuration will be:
>>> 
>>> 1 physical interface for internet traffic ( Public traffic, Guest Public
>>> traffic both connected to vSwitch0 )
>> There is no “guest public” traffic type.
>> 
>> vSwitch0 will carry GUEST *and* PUBLIC traffic.
>> 
>> 
>>> 1 physical interface for internal traffic ( Management traffic, Storage 
>>> traffic,
>>> guest internal traffic both connected to vSwitch1 ).
>> There is no “internal" traffic type. You have Management and Storage
>> traffic on vSwitch1.
>> 
>>> I want separate guest internal traffic with guest public traffic for many 
>>> reasons.
>> Again, there is no “guest internal” traffic type and “guest public” traffic
>> type. Its just GUEST traffic and PUBLIC traffic. :)
>> 
>>> You said that for guest traffic, a hard requirement is VLAN usage. Meanwhile
>>> for public traffic, management and storage VLAN is not needed.
>> Thats correct.
>> 
>>> This point here is crucial because i still do not understand difference 
>>> between
>>> public traffic and guest public traffic.
>> :)
>> 
>> So there is no “guest public” traffic type. Just “GUEST” and “PUBLIC”
>> traffic types. Ok?
>> 
>> Q. What is “GUEST" traffic?
>> 
>> A. From 
>> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/#advanced-zone-network-traffic-types
>> 
>> "Guest. When end users run VMs, they generate guest traffic. The guest
>> VMs communicate with each other over a network that can be referred to
>> as the guest network. This network can be isolated or shared. In an isolated
>> guest network, the administrator needs to reserve VLAN ranges to provide
>> isolation for each CloudStack account’s network (potentially a large number
>> of VLANs). In a shared guest network, all guest VMs share a single network”
>> 
>> Q. What is “PUBLIC” traffic?
>> 
>> Again, from 
>> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/#advanced-zone-network-traffic-types:
>> 
>> "Public traffic is generated when VMs in the cloud access the Internet.
>> Publicly accessible IPs must be allocated for this purpose. End users can
>> use the CloudStack UI to acquire these IPs to implement NAT between their
>> guest network and the public network, as described in “Acquiring a New IP 
>> Address”
>> in the Administration Guide.”
>> 
>> The same link also described Management and Storage traffic types also.
>> 
>>> If i understand, public traffic of a zone is for system vm only ?
>> Incorrect. See 
>> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/#advanced-zone-network-traffic-types
>> 
>>> And guest public traffic is for guest vm only ?
>> There is no such traffic type as “guest public”. Its just PUBLIC traffic.
>> 
>> Again, see 
>> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/#advanced-zone-networ

Re: Xen Nic missing after reboot ,10 hosts

2013-12-05 Thread Peter Zhai
Thank you ,Carlos. I just rest all the nic in the same cluster and now it
back to normal.


On Thu, Dec 5, 2013 at 12:31 PM, Carlos Reátegui wrote:

> Hi Peter
> I experienced a similar problem. I believe it is due to interface renaming
> that happens at boot. Unfortunately I don't have access to my machines so I
> can't check the specific thing you need to do but do a search for
> "XenServer interface rename" and hopefully you'll get enough pointers. If I
> remember correctly I had to edit a file that is used by the rename process
> to set it to my original nic. Eg eth1 had been turned into eth13. This
> happened with 5 of my 8 nics. After putting them all back, I rebooted and
> was back in business.
>
> Hope this helps
> Carlos
>
> > On Dec 5, 2013, at 3:15 PM, Peter Zhai  wrote:
> >
> > Hello,
> >
> > My cloudstack 4.02 environment has 10 Xen 6.0 hosts ,i did not change
> > anything lately but start from last week ,many of my Xen hosts will lost
> > NIC after reboot ,which caused the VM instance on those hosts are not
> able
> > to start also.
> >
> > I guess it is not pool master issue because some of the slave host still
> > function . I installed all the Xen server hotfix i can found but it did
> not
> > help at all .
> >
> > There is still enough disk space on host .
> >
> > Any one met the same issue before on Xen host ??  or KVM is more stable
> > than Xen ?
> >
> >
> > Peter
>


Backup & Restore procedures for Cloudstack environment (DRP)

2013-12-05 Thread Amin Samir
Hello,



Could anyone help with the backup and
recovery procedures of cloudstack environment? I have noticed that
documentation only states to backup the cloud & cloud usage
databases.



However any recommendation on
rebuilding the environment from scratch (in case of serious outage) steps &
procedures, I am trying to make a DRP for the environment.



For instance:

Install OS, management server.
Initialize database, restore the
database.
Initiate cloudstack-setup command.
Etc..




Thanks in advance for your help.

Amin Samir

Re: System VMs not starting

2013-12-05 Thread Vosbury, David
Paul,

Are there any other steps you took to fix the problem? I removed all system VMs 
and templates from primary storage and re-seeded the system template with the 
image you gave me the link to. I'm still seeing the same behavior. Its as if CS 
can create system vms but can't start them or delete them.

David

Sent from my Verizon Wireless 4G LTE DROID


Paul Angus  wrote:

Yes, I saw the same behaviour when using the 'wrong' template. I found that the 
solution was a complete clean up of system vm templates including the 
destruction of any old templates on primary storage. Because if the old system 
vm template exists on the primary storage, CloudStack will be creating new 
system VMs from that template.

Regards,

Paul Angus
S: +44 20 3603 0540 | M: +447711418784
paul.an...@shapeblue.com

-Original Message-
From: Vosbury, David [mailto:david.vosb...@systemsmadesimple.com]
Sent: 05 December 2013 17:25
To: users@cloudstack.apache.org
Subject: RE: System VMs not starting

Okay, I tried that and it still does the same thing after reseeding with the 
new template. It seems as if it can't start the system vms and then gives up 
and deletes the SSVM out of the GUI but leaves the console proxy alone, then 
tries to recreate a new SSVM and possibly from the error tries to create the 
console proxy vm again but that one never gets deleted from the GUI so it has 
issue with that as well. Although this time I do see in the logs that the 
management server is looking for a vmdk file to try to do something with it. 
(see included log snippet) but it can't find the file. When I look at the 
properties of that vm root-233 the vmdk file is named different than what CS 
manager seems to be looking for. On the actual hypervisor host the name of the 
file is /root-233/root-233-01.vmdk not what it appears CS is looking for 
root-233-01.vmdk. That probably explains why it never deletes the vms and 
just leaves them out there. I'm assuming that CS is trying to delete the vm 
because it can't start it for some reason, but I could be wrong, then can't 
delete it because the file name is wrong.

Anyway, here is the latest log snippet.

2013-12-05 11:45:10,639 DEBUG [cloud.storage.VolumeManagerImpl] 
(secstorage-1:null) Unable to create 
Vol[232|vm=232|ROOT]:java.lang.RuntimeException: The name 'ROOT-232' already 
exists.
2013-12-05 11:45:10,639 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(secstorage-1:null) Unable to contact resource.
com.cloud.exception.StorageUnavailableException: Resource [StoragePool:4] is 
unreachable: Unable to create Vol[232|vm=232|ROOT]:java.lang.RuntimeException: 
The name 'ROOT-232' already exists.
2013-12-05 11:45:10,768 DEBUG [cloud.capacity.CapacityManagerImpl] 
(consoleproxy-1:null) VM state transitted from :Starting to Stopped with event: 
OperationFailedvm's original host id: null new host id: null host id before 
state transiti
on: 1
2013-12-05 11:45:10,789 WARN  [cloud.consoleproxy.ConsoleProxyManagerImpl] 
(consoleproxy-1:null) Exception while trying to start console proxy
com.cloud.exception.InsufficientServerCapacityException: Unable to create a 
deployment for VM[ConsoleProxy|v-230-VM]Scope=interface 
com.cloud.dc.DataCenter; id=1
2013-12-05 11:45:10,829 DEBUG [cloud.capacity.CapacityManagerImpl] 
(secstorage-1:null) VM state transitted from :Starting to Stopped with event: 
OperationFailedvm's original host id: null new host id: null host id before 
state transition
: 2
2013-12-05 11:45:10,846 WARN  [storage.secondary.SecondaryStorageManagerImpl] 
(secstorage-1:null) Exception while trying to start secondary storage vm
com.cloud.exception.InsufficientServerCapacityException: Unable to create a 
deployment for VM[SecondaryStorageVm|s-232-VM]Scope=interface 
com.cloud.dc.DataCenter; id=1
2013-12-05 11:45:10,850 INFO  [storage.secondary.SecondaryStorageManagerImpl] 
(secstorage-1:null) Unable to start secondary storage vm for standby capacity, 
secStorageVm vm Id : 232, will recycle it and start a new one
2013-12-05 11:45:40,471 ERROR [storage.resource.VmwareStorageProcessor] 
(DirectAgent-102:esxi2.ammscloud.com) clone volume from base image failed due 
to Exception: java.lang.RuntimeException
java.lang.RuntimeException: The name 'ROOT-230' already exists.
2013-12-05 11:45:40,474 DEBUG [agent.transport.Request] (DirectAgent-102:null) 
Seq 1-645201977: Processing:  { Ans: , MgmtId: 146454222325, via: 1, Ver: v1, 
Flags: 110, [{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":fa
lse,"details":"java.lang.RuntimeException: The name 'ROOT-230' already 
exists.","wait":0}}] }
2013-12-05 11:45:40,485 WARN  [storage.datastore.ObjectInDataStoreManagerImpl] 
(consoleproxy-1:null) Unsupported data object (VOLUME, 
org.apache.cloudstack.storage.datastore.PrimaryDataStoreImpl@2fd75404), no need 
to delete from object i n store ref table
2013-12-05 11:45:40,486 DEBUG [cloud.storage.VolumeManagerImpl] 
(consoleproxy-1:null) Unable to create 
Vol[230|vm=230|ROOT]:java.lang.

internal server error on CS 4.2 - can not delete guest network

2013-12-05 Thread Domenico De Monte
Hello all.

CS is 4.2 

Once setup a zone with network basic with VMware 5.1, if i try to remove step 
by step zone, when i need to delete guestnetwork in order to delete physical 
network of zone i receive following internal server error:

2013-12-05 23:00:00,527 DEBUG [db.Transaction.Transaction] 
(Job-Executor-9:job-107 = [ 602e96d6-2abc-424d-99a5-1ac1ee5fe5df ]) Rolling 
back the transaction: Time = 3 Name =  
-AsyncJobManagerImpl$1.run:494-Executors$RunnableAdapter.call:471-FutureTask$Sync.innerRun:334-FutureTask.run:166-ThreadPoolExecutor.runWorker:1146-ThreadPoolExecutor$Worker.run:615-Thread.run:701;
 called by 
-Transaction.rollback:898-Transaction.removeUpTo:841-Transaction.close:665-TransactionContextBuilder.interceptException:63-ComponentInstantiationPostProcessor$InterceptorDispatcher.intercept:133-NetworkManagerImpl.destroyNetwork:3131-ComponentInstantiationPostProcessor$InterceptorDispatcher.intercept:125-NetworkServiceImpl.deleteNetwork:1767-ComponentInstantiationPostProcessor$InterceptorDispatcher.intercept:125-DeleteNetworkCmd.execute:70-ApiDispatcher.dispatch:158-AsyncJobManagerImpl$1.run:531
2013-12-05 23:00:00,535 ERROR [cloud.async.AsyncJobManagerImpl] 
(Job-Executor-9:job-107 = [ 602e96d6-2abc-424d-99a5-1ac1ee5fe5df ]) Unexpected 
exception while executing 
org.apache.cloudstack.api.command.user.network.DeleteNetworkCmd
java.lang.NullPointerException
at 
com.cloud.network.guru.DirectNetworkGuru.trash(DirectNetworkGuru.java:311)
at 
com.cloud.utils.component.ComponentInstantiationPostProcessor$InterceptorDispatcher.intercept(ComponentInstantiationPostProcessor.java:125)
at 
com.cloud.network.NetworkManagerImpl.destroyNetwork(NetworkManagerImpl.java:3131)
at 
com.cloud.utils.component.ComponentInstantiationPostProcessor$InterceptorDispatcher.intercept(ComponentInstantiationPostProcessor.java:125)
at 
com.cloud.network.NetworkServiceImpl.deleteNetwork(NetworkServiceImpl.java:1767)
at 
com.cloud.utils.component.ComponentInstantiationPostProcessor$InterceptorDispatcher.intercept(ComponentInstantiationPostProcessor.java:125)
at 
org.apache.cloudstack.api.command.user.network.DeleteNetworkCmd.execute(DeleteNetworkCmd.java:70)
at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:158)
at 
com.cloud.async.AsyncJobManagerImpl$1.run(AsyncJobManagerImpl.java:531)
at 
java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
at java.util.concurrent.FutureTask.run(FutureTask.java:166)
at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
at java.lang.Thread.run(Thread.java:701)
2013-12-05 23:00:00,537 DEBUG [cloud.async.AsyncJobManagerImpl] 
(Job-Executor-9:job-107 = [ 602e96d6-2abc-424d-99a5-1ac1ee5fe5df ]) Complete 
async job-107 = [ 602e96d6-2abc-424d-99a5-1ac1ee5fe5df ], jobStatus: 2, 
resultCode: 530, result: Error Code: 530 Error text: null
2013-12-05 23:00:00,551 DEBUG [cloud.async.SyncQueueManagerImpl] 
(Job-Executor-9:job-107 = [ 602e96d6-2abc-424d-99a5-1ac1ee5fe5df ]) Sync queue 
(7) is currently empty
2013-12-05 23:00:00,552 WARN  [cloud.async.AsyncJobManagerImpl] 
(Job-Executor-9:job-107 = [ 602e96d6-2abc-424d-99a5-1ac1ee5fe5df ]) Unable to 
unregister active job [ 107 ] = [ 602e96d6-2abc-424d-99a5-1ac1ee5fe5df ] from 
JMX monitoring



Waiting for your reply

Best regards

Re: Xen Nic missing after reboot ,10 hosts

2013-12-05 Thread Carlos Reátegui
Hi Peter
I experienced a similar problem. I believe it is due to interface renaming that 
happens at boot. Unfortunately I don't have access to my machines so I can't 
check the specific thing you need to do but do a search for "XenServer 
interface rename" and hopefully you'll get enough pointers. If I remember 
correctly I had to edit a file that is used by the rename process to set it to 
my original nic. Eg eth1 had been turned into eth13. This happened with 5 of my 
8 nics. After putting them all back, I rebooted and was back in business. 

Hope this helps
Carlos

> On Dec 5, 2013, at 3:15 PM, Peter Zhai  wrote:
> 
> Hello,
> 
> My cloudstack 4.02 environment has 10 Xen 6.0 hosts ,i did not change
> anything lately but start from last week ,many of my Xen hosts will lost
> NIC after reboot ,which caused the VM instance on those hosts are not able
> to start also.
> 
> I guess it is not pool master issue because some of the slave host still
> function . I installed all the Xen server hotfix i can found but it did not
> help at all .
> 
> There is still enough disk space on host .
> 
> Any one met the same issue before on Xen host ??  or KVM is more stable
> than Xen ?
> 
> 
> Peter


Fwd: Xen Nic missing after reboot ,10 hosts

2013-12-05 Thread Peter Zhai
Hello,

My cloudstack 4.02 environment has 10 Xen 6.0 hosts ,i did not change
anything lately but start from last week ,many of my Xen hosts will lost
NIC after reboot ,which caused the VM instance on those hosts are not able
to start also.

I guess it is not pool master issue because some of the slave host still
function . I installed all the Xen server hotfix i can found but it did not
help at all .

There is still enough disk space on host .

Any one met the same issue before on Xen host ??  or KVM is more stable
than Xen ?


Peter


Xen Nic missing after reboot ,10 hosts

2013-12-05 Thread Peter Zhai
Hello,

My cloudstack 4.02 environment has 10 Xen 6.0 hosts ,i did not change
anything lately but start from last week ,many of my Xen hosts will lost
NIC after reboot ,which caused the VM instance on those hosts are not able
to start also.

I guess it is not pool master issue because some of the slave host still
function . I installed all the Xen server hotfix i can found but it did not
help at all .

There is still enough disk space on host .

Any one met the same issue before on Xen host ??  or KVM is more stable
than Xen ?


Peter


Re: CS 4.2.1 install can't get system vms to start

2013-12-05 Thread jason pavao
Any additional help would be greatly appreciated folks. I've done 
several successful CS installations, but the 4.2 release has given me 
nothing but issues.


Thanks in advance!
-jason

On 12/4/2013 11:13 PM, jason pavao wrote:

What does avoid set mean?

I've restarted both the cloudstack-management on the mgtm server along 
with cloudstakc-agent on the kvm host, both to no avail.


This is a fairly clean installation using bits from 
baseurl=http://cloudstack.apt-get.eu/rhel/4.2/


This is on OEL 6.4

Any additional feedback would be greatly appreciated!
Thanks!
-jason



On 12/4/2013 11:00 PM, Jayapal Reddy Uradi wrote:

Hi,

From the below logs the host is in avoid set.
Can you please check host status for up, try restarting MS server.




2013-12-04 23:36:07,519 DEBUG [allocator.impl.FirstFitAllocator] 
(secstorage-1:FirstFitRoutingAllocator) Host name: 
slcai547.us.oracle.com , hostId: 1 is 
in avoid set, skipping this and trying other available hosts
2013-12-04 23:36:07,520 DEBUG [allocator.impl.FirstFitAllocator] 
(secstorage-1:FirstFitRoutingAllocator) Host Allocator returning 0 
suitable hosts
2013-12-04 23:36:07,520 DEBUG 
[cloud.deploy.DeploymentPlanningManagerImpl] (secstorage-1:null) No 
suitable hosts found
2013-12-04 23:36:07,520 DEBUG 
[cloud.deploy.DeploymentPlanningManagerImpl] (secstorage-1:null) No 
suitable hosts found under this Cluster: 1
2013-12-04 23:36:07,521 DEBUG 
[cloud.deploy.DeploymentPlanningManagerImpl] (secstorage-1:null) 
Could not find suitable Deployment Destination for this VM under any 
clusters, returning.
2013-12-04 23:36:07,521 DEBUG [cloud.deploy.FirstFitPlanner] 
(secstorage-1:null) Searching all possible resources under this Zone: 1
2013-12-04 23:36:07,522 DEBUG [cloud.deploy.FirstFitPlanner] 
(secstorage-1:null) Listing clusters in order of aggregate capacity, 
that have (atleast one host with) enough CPU and RAM capacity under 
this Zone: 1
2013-12-04 23:36:07,523 DEBUG [cloud.deploy.FirstFitPlanner] 
(secstorage-1:null) Removing from the clusterId list these clusters 
from avoid set: [1]
2013-12-04 23:36:07,524 DEBUG [cloud.deploy.FirstFitPlanner] 
(secstorage-1:null) No clusters found after removing disabled 
clusters and clusters in avoid list, returning.
2013-12-04 23:36:07,527 DEBUG [cloud.capacity.CapacityManagerImpl] 
(secstorage-1:null) VM state transitted from :Starting to Stopped 
with event: OperationFailedvm's original host id: null new host id: 
null host id before state transition: 1



Thanks,
Jayapal

On 05-Dec-2013, at 12:11 PM, jason pavao >

 wrote:

2013-12-04 23:36:07,519 DEBUG [allocator.impl.FirstFitAllocator] 
(secstorage-1:FirstFitRoutingAllocator) Host 
name:slcai547.us.oracle.com , 
hostId: 1 is in avoid set, skipping this and trying other available 
hosts
2013-12-04 23:36:07,520 DEBUG [allocator.impl.FirstFitAllocator] 
(secstorage-1:FirstFitRoutingAllocator) Host Allocator returning 0 
suitable hosts
2013-12-04 23:36:07,520 DEBUG 
[cloud.deploy.DeploymentPlanningManagerImpl] (secstorage-1:null) No 
suitable hosts found
2013-12-04 23:36:07,520 DEBUG 
[cloud.deploy.DeploymentPlanningManagerImpl] (secstorage-1:null) No 
suitable hosts found under this Cluster: 1
2013-12-04 23:36:07,521 DEBUG 
[cloud.deploy.DeploymentPlanningManagerImpl] (secstorage-1:null) 
Could not find suitable Deployment Destination for this VM under any 
clusters, returning.
2013-12-04 23:36:07,521 DEBUG [cloud.deploy.FirstFitPlanner] 
(secstorage-1:null) Searching all possible resources under this Zone: 1
2013-12-04 23:36:07,522 DEBUG [cloud.deploy.FirstFitPlanner] 
(secstorage-1:null) Listing clusters in order of aggregate capacity, 
that have (atleast one host with) enough CPU and RAM capacity under 
this Zone: 1
2013-12-04 23:36:07,523 DEBUG [cloud.deploy.FirstFitPlanner] 
(secstorage-1:null) Removing from the clusterId list these clusters 
from avoid set: [1]
2013-12-04 23:36:07,524 DEBUG [cloud.deploy.FirstFitPlanner] 
(secstorage-1:null) No clusters found after removing disabled 
clusters and clusters in avoid list, returning.
2013-12-04 23:36:07,527 DEBUG [cloud.capacity.CapacityManagerImpl] 
(secstorage-1:null) VM state transitted from :Starting to Stopped 
with event: OperationFailedvm's original host id: null new host id: 
null host id before state transition: 1









RE: System VMs not starting

2013-12-05 Thread Paul Angus
Yes, I saw the same behaviour when using the 'wrong' template. I found that the 
solution was a complete clean up of system vm templates including the 
destruction of any old templates on primary storage. Because if the old system 
vm template exists on the primary storage, CloudStack will be creating new 
system VMs from that template.

Regards,

Paul Angus
S: +44 20 3603 0540 | M: +447711418784
paul.an...@shapeblue.com

-Original Message-
From: Vosbury, David [mailto:david.vosb...@systemsmadesimple.com]
Sent: 05 December 2013 17:25
To: users@cloudstack.apache.org
Subject: RE: System VMs not starting

Okay, I tried that and it still does the same thing after reseeding with the 
new template. It seems as if it can't start the system vms and then gives up 
and deletes the SSVM out of the GUI but leaves the console proxy alone, then 
tries to recreate a new SSVM and possibly from the error tries to create the 
console proxy vm again but that one never gets deleted from the GUI so it has 
issue with that as well. Although this time I do see in the logs that the 
management server is looking for a vmdk file to try to do something with it. 
(see included log snippet) but it can't find the file. When I look at the 
properties of that vm root-233 the vmdk file is named different than what CS 
manager seems to be looking for. On the actual hypervisor host the name of the 
file is /root-233/root-233-01.vmdk not what it appears CS is looking for 
root-233-01.vmdk. That probably explains why it never deletes the vms and 
just leaves them out there. I'm assuming that CS is trying to delete the vm 
because it can't start it for some reason, but I could be wrong, then can't 
delete it because the file name is wrong.

Anyway, here is the latest log snippet.

2013-12-05 11:45:10,639 DEBUG [cloud.storage.VolumeManagerImpl] 
(secstorage-1:null) Unable to create 
Vol[232|vm=232|ROOT]:java.lang.RuntimeException: The name 'ROOT-232' already 
exists.
2013-12-05 11:45:10,639 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(secstorage-1:null) Unable to contact resource.
com.cloud.exception.StorageUnavailableException: Resource [StoragePool:4] is 
unreachable: Unable to create Vol[232|vm=232|ROOT]:java.lang.RuntimeException: 
The name 'ROOT-232' already exists.
2013-12-05 11:45:10,768 DEBUG [cloud.capacity.CapacityManagerImpl] 
(consoleproxy-1:null) VM state transitted from :Starting to Stopped with event: 
OperationFailedvm's original host id: null new host id: null host id before 
state transiti
on: 1
2013-12-05 11:45:10,789 WARN  [cloud.consoleproxy.ConsoleProxyManagerImpl] 
(consoleproxy-1:null) Exception while trying to start console proxy
com.cloud.exception.InsufficientServerCapacityException: Unable to create a 
deployment for VM[ConsoleProxy|v-230-VM]Scope=interface 
com.cloud.dc.DataCenter; id=1
2013-12-05 11:45:10,829 DEBUG [cloud.capacity.CapacityManagerImpl] 
(secstorage-1:null) VM state transitted from :Starting to Stopped with event: 
OperationFailedvm's original host id: null new host id: null host id before 
state transition
: 2
2013-12-05 11:45:10,846 WARN  [storage.secondary.SecondaryStorageManagerImpl] 
(secstorage-1:null) Exception while trying to start secondary storage vm
com.cloud.exception.InsufficientServerCapacityException: Unable to create a 
deployment for VM[SecondaryStorageVm|s-232-VM]Scope=interface 
com.cloud.dc.DataCenter; id=1
2013-12-05 11:45:10,850 INFO  [storage.secondary.SecondaryStorageManagerImpl] 
(secstorage-1:null) Unable to start secondary storage vm for standby capacity, 
secStorageVm vm Id : 232, will recycle it and start a new one
2013-12-05 11:45:40,471 ERROR [storage.resource.VmwareStorageProcessor] 
(DirectAgent-102:esxi2.ammscloud.com) clone volume from base image failed due 
to Exception: java.lang.RuntimeException
java.lang.RuntimeException: The name 'ROOT-230' already exists.
2013-12-05 11:45:40,474 DEBUG [agent.transport.Request] (DirectAgent-102:null) 
Seq 1-645201977: Processing:  { Ans: , MgmtId: 146454222325, via: 1, Ver: v1, 
Flags: 110, [{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":fa
lse,"details":"java.lang.RuntimeException: The name 'ROOT-230' already 
exists.","wait":0}}] }
2013-12-05 11:45:40,485 WARN  [storage.datastore.ObjectInDataStoreManagerImpl] 
(consoleproxy-1:null) Unsupported data object (VOLUME, 
org.apache.cloudstack.storage.datastore.PrimaryDataStoreImpl@2fd75404), no need 
to delete from object i n store ref table
2013-12-05 11:45:40,486 DEBUG [cloud.storage.VolumeManagerImpl] 
(consoleproxy-1:null) Unable to create 
Vol[230|vm=230|ROOT]:java.lang.RuntimeException: The name 'ROOT-230' already 
exists.
2013-12-05 11:45:40,486 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(consoleproxy-1:null) Unable to contact resource.
com.cloud.exception.StorageUnavailableException: Resource [StoragePool:4] is 
unreachable: Unable to create Vol[230|vm=230|ROOT]:java.lang.RuntimeException: 
The name 'ROOT-230' already exists.
2013-12-05 11

RE: System VMs not starting

2013-12-05 Thread Vosbury, David
Okay, I tried that and it still does the same thing after reseeding with the 
new template. It seems as if it can't start the system vms and then gives up 
and deletes the SSVM out of the GUI but leaves the console proxy alone, then 
tries to recreate a new SSVM and possibly from the error tries to create the 
console proxy vm again but that one never gets deleted from the GUI so it has 
issue with that as well. Although this time I do see in the logs that the 
management server is looking for a vmdk file to try to do something with it. 
(see included log snippet) but it can't find the file. When I look at the 
properties of that vm root-233 the vmdk file is named different than what CS 
manager seems to be looking for. On the actual hypervisor host the name of the 
file is /root-233/root-233-01.vmdk not what it appears CS is looking for 
root-233-01.vmdk. That probably explains why it never deletes the vms and 
just leaves them out there. I'm assuming that CS is trying to delete the vm 
because it can't start it for some reason, but I could be wrong, then can't 
delete it because the file name is wrong.

Anyway, here is the latest log snippet.

2013-12-05 11:45:10,639 DEBUG [cloud.storage.VolumeManagerImpl] 
(secstorage-1:null) Unable to create 
Vol[232|vm=232|ROOT]:java.lang.RuntimeException: The name 'ROOT-232' already 
exists.
2013-12-05 11:45:10,639 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(secstorage-1:null) Unable to contact resource.
com.cloud.exception.StorageUnavailableException: Resource [StoragePool:4] is 
unreachable: Unable to create Vol[232|vm=232|ROOT]:java.lang.RuntimeException: 
The name 'ROOT-232' already exists.
2013-12-05 11:45:10,768 DEBUG [cloud.capacity.CapacityManagerImpl] 
(consoleproxy-1:null) VM state transitted from :Starting to Stopped with event: 
OperationFailedvm's original host id: null new host id: null host id before 
state transiti
on: 1
2013-12-05 11:45:10,789 WARN  [cloud.consoleproxy.ConsoleProxyManagerImpl] 
(consoleproxy-1:null) Exception while trying to start console proxy
com.cloud.exception.InsufficientServerCapacityException: Unable to create a 
deployment for VM[ConsoleProxy|v-230-VM]Scope=interface 
com.cloud.dc.DataCenter; id=1
2013-12-05 11:45:10,829 DEBUG [cloud.capacity.CapacityManagerImpl] 
(secstorage-1:null) VM state transitted from :Starting to Stopped with event: 
OperationFailedvm's original host id: null new host id: null host id before 
state transition
: 2
2013-12-05 11:45:10,846 WARN  [storage.secondary.SecondaryStorageManagerImpl] 
(secstorage-1:null) Exception while trying to start secondary storage vm
com.cloud.exception.InsufficientServerCapacityException: Unable to create a 
deployment for VM[SecondaryStorageVm|s-232-VM]Scope=interface 
com.cloud.dc.DataCenter; id=1
2013-12-05 11:45:10,850 INFO  [storage.secondary.SecondaryStorageManagerImpl] 
(secstorage-1:null) Unable to start secondary storage vm for standby capacity, 
secStorageVm vm Id : 232, will recycle it and start a new one
2013-12-05 11:45:40,471 ERROR [storage.resource.VmwareStorageProcessor] 
(DirectAgent-102:esxi2.ammscloud.com) clone volume from base image failed due 
to Exception: java.lang.RuntimeException
java.lang.RuntimeException: The name 'ROOT-230' already exists.
2013-12-05 11:45:40,474 DEBUG [agent.transport.Request] (DirectAgent-102:null) 
Seq 1-645201977: Processing:  { Ans: , MgmtId: 146454222325, via: 1, Ver: v1, 
Flags: 110, [{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":fa
lse,"details":"java.lang.RuntimeException: The name 'ROOT-230' already 
exists.","wait":0}}] }
2013-12-05 11:45:40,485 WARN  [storage.datastore.ObjectInDataStoreManagerImpl] 
(consoleproxy-1:null) Unsupported data object (VOLUME, 
org.apache.cloudstack.storage.datastore.PrimaryDataStoreImpl@2fd75404), no need 
to delete from object i
n store ref table
2013-12-05 11:45:40,486 DEBUG [cloud.storage.VolumeManagerImpl] 
(consoleproxy-1:null) Unable to create 
Vol[230|vm=230|ROOT]:java.lang.RuntimeException: The name 'ROOT-230' already 
exists.
2013-12-05 11:45:40,486 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(consoleproxy-1:null) Unable to contact resource.
com.cloud.exception.StorageUnavailableException: Resource [StoragePool:4] is 
unreachable: Unable to create Vol[230|vm=230|ROOT]:java.lang.RuntimeException: 
The name 'ROOT-230' already exists.
2013-12-05 11:46:03,533 ERROR [storage.resource.VmwareStorageProcessor] 
(DirectAgent-103:esxi1.ammscloud.com) clone volume from base image failed due 
to Exception: java.lang.RuntimeException
java.lang.RuntimeException: File [iSCSI-Datastore-1] ROOT-233/ROOT-233.vmdk was 
not found
2013-12-05 11:46:03,536 DEBUG [agent.transport.Request] (DirectAgent-103:null) 
Seq 2-1810104381: Processing:  { Ans: , MgmtId: 146454222325, via: 2, Ver: v1, 
Flags: 110, [{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":f
alse,"details":"java.lang.RuntimeException: File [iSCSI-Datastore-1] 
ROOT-233/ROOT-233.vmdk was not found"

RE: Improving SSVM performance

2013-12-05 Thread Geoff Higginbottom
Deploying templates - copying from Secondary to Primary Storage - is handled by 
the Host and not the SSVM

Exporting Templates is handled by the SSVM using its 'Storage Interface' to 
read from Secondary Storage, and its 'Public Interface' to export it to the 
logged in user.


Improving deployment times would be best achieved by enabling Jumbo Frames on 
the Secondary Storage Device and the NIC/Bond/vSwitch on the Host dedicated to 
Secondary Storage and obviously the networks connecting them (this assumes you 
are using the Storage Network within CloudStack and hence have dedicated NICs)

There is also a SSVM MTU Global Setting which will also enable Jumbo Frames on 
the 'Storage Interface' of the SSVM, but this will not change the MTU on the 
Public Interface which will probably be your bottleneck


So for optimal Deployment, use the CloudStack Storage Network, have dedicated 
NICs on the Hosts, and use Jumbo Frames.

For optimal Exporting, the Public Network will be your bottleneck, and as this 
is typically going over the Internet, using Jumbo Frames is not really an 
option.


Regards

Geoff Higginbottom

D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581

geoff.higginbot...@shapeblue.com

-Original Message-
From: Sean Hamilton [mailto:s...@seanhamilton.co.uk]
Sent: 05 December 2013 16:48
To: users@cloudstack.apache.org
Subject: Re: Improving SSVM performance

Hey Simon,

Got round to testing this in my lab. Times to complete Export OVF commands 
didn't improve massively:

10Gb template with SSVM on E1000:   03:21.18 (10GB)

10Gb  template with SSVM on VMXNET3:  03:17.18 (10GB)

60Gb  template with SSVM on E1000:  18:32.16 (60GB)

60Gb  template with SSVM on VMXNET3: 18:12.98 (60GB)


Any other thoughts on how to speed stuff up? Where would the bottleneck lie; 
storage for NFS mount?


On 2 December 2013 09:25, Simon Murphy  wrote:

> there is a global settting under the vmware section.
>
> Sent from my Android phone using TouchDown (www.nitrodesk.com)
>
> -Original Message-
> From: Sean Hamilton [s...@seanhamilton.co.uk]
> Received: Monday, 02 Dec 2013, 10:10pm
> To: users@cloudstack.apache.org [users@cloudstack.apache.org]
> Subject: Re: Improving SSVM performance
>
> Hey Simon,
>
> Is that done as the systemvm template is being uploaded, or can we
> edit it afterwards?
>
> Thanks,
> Sean
>
>
> On 28 November 2013 19:34, Simon Murphy  wrote:
>
> > have you tried changing the default network adapter to vmxnet3?
> >
> > Sent from my Android phone using TouchDown (www.nitrodesk.com<
> http://www.nitrodesk.com>)
> >
> > -Original Message-
> > From: Sean Hamilton [s...@seanhamilton.co.uk]
> > Received: Friday, 29 Nov 2013, 4:10am
> > To: users@cloudstack.apache.org [users@cloudstack.apache.org]
> > Subject: Improving SSVM performance
> >
> > We run 4.2 with VMware hypervisor.
> > We'd like to improve the SSVM performance, specifically when
> > exporting
> and
> > deploying templates.
> >
> > Does anyone have any guides on doing this at all?
> >
> > Thanks,
> > Sean
> >
>
This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


Re: Improving SSVM performance

2013-12-05 Thread Shanker Balan
Comments inline.

On 05-Dec-2013, at 10:18 pm, Sean Hamilton  wrote:

> Hey Simon,
>
> Got round to testing this in my lab. Times to complete Export OVF commands
> didn't improve massively:
>
> 10Gb template with SSVM on E1000:   03:21.18 (10GB)
>
> 10Gb  template with SSVM on VMXNET3:  03:17.18 (10GB)
>
> 60Gb  template with SSVM on E1000:  18:32.16 (60GB)
>
> 60Gb  template with SSVM on VMXNET3: 18:12.98 (60GB)
>
>
> Any other thoughts on how to speed stuff up? Where would the bottleneck
> lie; storage for NFS mount?


Sean,

I suspect you would be limited by your storage IOPS performance
rather than the NIC speed.

If you have the time, can you

(1) Compare raw storage IOPS with NFS IOPS? Bonnie and Iozone are
 good tools to benchmark IO.
(2) Compare network throughput of your SSVM NIC Vs the physical
 hosts NIC? You can use nuttcp for network tests.

Hth.


>
>
> On 2 December 2013 09:25, Simon Murphy  wrote:
>
>> there is a global settting under the vmware section.
>>
>> Sent from my Android phone using TouchDown (www.nitrodesk.com)
>>
>> -Original Message-
>> From: Sean Hamilton [s...@seanhamilton.co.uk]
>> Received: Monday, 02 Dec 2013, 10:10pm
>> To: users@cloudstack.apache.org [users@cloudstack.apache.org]
>> Subject: Re: Improving SSVM performance
>>
>> Hey Simon,
>>
>> Is that done as the systemvm template is being uploaded, or can we edit it
>> afterwards?
>>
>> Thanks,
>> Sean
>>
>>
>> On 28 November 2013 19:34, Simon Murphy  wrote:
>>
>>> have you tried changing the default network adapter to vmxnet3?
>>>
>>> Sent from my Android phone using TouchDown (www.nitrodesk.com<
>> http://www.nitrodesk.com>)
>>>
>>> -Original Message-
>>> From: Sean Hamilton [s...@seanhamilton.co.uk]
>>> Received: Friday, 29 Nov 2013, 4:10am
>>> To: users@cloudstack.apache.org [users@cloudstack.apache.org]
>>> Subject: Improving SSVM performance
>>>
>>> We run 4.2 with VMware hypervisor.
>>> We'd like to improve the SSVM performance, specifically when exporting
>> and
>>> deploying templates.
>>>
>>> Does anyone have any guides on doing this at all?
>>>
>>> Thanks,
>>> Sean
>>>
>>

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


start vm failed after taking vm snapshot

2013-12-05 Thread Domenico De Monte

Hello,
i configured CS 4.2 with a basic network zone and local disk.

Configuration is one zone, one pod, one cluster, one host, one primary 
storage ( local ), one secondary storage ( nfs ).


I am using VMware 5.1

If i create an instance everything works. If i take a VM snapshot, after 
stop and start vm i obtain same error discussed here:


https://issues.apache.org/jira/browse/CLOUDSTACK-3234

On issues website it said it was fixed ( at least for advanced network ) 
but i still receive same error.



VM does not start and on CS log i see following lines:

2013-12-05 17:48:04,372 INFO [cloud.vm.VirtualMachineManagerImpl] 
(Job-Executor-27:job-72 = [ 48e7c5c4-c2f0-4ea1-8e8e-045332c5f9db ]) 
Unable to start VM on Host[-4-Routing] due to StartCommand failed due to 
Exception: java.lang.RuntimeException

Message: Invalid configuration for device '0'.

If i delete VM snapshot everything works.


Waiting for your reply

Best regards


Re: Improving SSVM performance

2013-12-05 Thread Sean Hamilton
Hey Simon,

Got round to testing this in my lab. Times to complete Export OVF commands
didn't improve massively:

10Gb template with SSVM on E1000:   03:21.18 (10GB)

10Gb  template with SSVM on VMXNET3:  03:17.18 (10GB)

60Gb  template with SSVM on E1000:  18:32.16 (60GB)

60Gb  template with SSVM on VMXNET3: 18:12.98 (60GB)


Any other thoughts on how to speed stuff up? Where would the bottleneck
lie; storage for NFS mount?


On 2 December 2013 09:25, Simon Murphy  wrote:

> there is a global settting under the vmware section.
>
> Sent from my Android phone using TouchDown (www.nitrodesk.com)
>
> -Original Message-
> From: Sean Hamilton [s...@seanhamilton.co.uk]
> Received: Monday, 02 Dec 2013, 10:10pm
> To: users@cloudstack.apache.org [users@cloudstack.apache.org]
> Subject: Re: Improving SSVM performance
>
> Hey Simon,
>
> Is that done as the systemvm template is being uploaded, or can we edit it
> afterwards?
>
> Thanks,
> Sean
>
>
> On 28 November 2013 19:34, Simon Murphy  wrote:
>
> > have you tried changing the default network adapter to vmxnet3?
> >
> > Sent from my Android phone using TouchDown (www.nitrodesk.com<
> http://www.nitrodesk.com>)
> >
> > -Original Message-
> > From: Sean Hamilton [s...@seanhamilton.co.uk]
> > Received: Friday, 29 Nov 2013, 4:10am
> > To: users@cloudstack.apache.org [users@cloudstack.apache.org]
> > Subject: Improving SSVM performance
> >
> > We run 4.2 with VMware hypervisor.
> > We'd like to improve the SSVM performance, specifically when exporting
> and
> > deploying templates.
> >
> > Does anyone have any guides on doing this at all?
> >
> > Thanks,
> > Sean
> >
>


Re: Password reset feature and "User Data" service

2013-12-05 Thread Andrija Panic
I should add:I can see the "edit" button on Isolated netowrks already
deployed and in use buy some VMs...but have only 1 shred netowrk, and no
edit button for it...


On 5 December 2013 17:08, Andrija Panic  wrote:

> From the
> http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network
>
> There should be the "edit" button on the network, but I dont see it, only
> the "restart" and "delete" netowrk buttons...This shared network is shared
> type, defined vlan ID, and has DNS/DHCP as the services provided by Virtual
> Router...
>
> Not sure why I don't see the edit button...
>
>
> On 5 December 2013 09:57, Andrija Panic  wrote:
>
>> Thank you Sanjeev for inputs. Can you please confirm that updating
>> network is possible only from API - I can not find it anywhere in GUI ?
>> Also how should I handle VLAN assigment to this shared network - now vlan
>> 500 is assigned...I suppose when updating the network (with the new
>> networking template), that already deployed network should retain it's vlan
>> and IP ranges, right ?
>>
>> Thank you very much...
>>
>>
>> On 5 December 2013 06:15, Sanjeev Neelarapu > > wrote:
>>
>>> Hi,
>>>
>>> Create another network offering with dhcp,dns and userdata service and
>>> undate the shared network with these offerings. While doing the network
>>> update choose not to change the network cidr.
>>>
>>> Thanks,
>>> Sanjeev
>>>
>>> -Original Message-
>>> From: Andrija Panic [mailto:andrija.pa...@gmail.com]
>>> Sent: Wednesday, December 04, 2013 3:31 PM
>>> To: users@cloudstack.apache.org
>>> Subject: Password reset feature and "User Data" service
>>>
>>> Hi,
>>>
>>> I have kind of problem and need advice please.
>>>
>>> I have 1 shared network for assigning public IP addresses to all VMs we
>>> create - with DHCP,DNS, and Virtual Router, as the services that are
>>> enabled in this networking tempalte.
>>>
>>>
>>> Now I want to enable "password management/reset" features, but I got
>>> error messages "user data" service is not enabled for my network id=212.
>>>
>>> So since modifications of Network tempalte is not possible, and the
>>> modification of the already deployed Network (id=212) is not possible
>>> is there a change to hack the database to include the "User Data"
>>> service as the service in both the netowrk template, and for the already
>>> used network (id=212)
>>>
>>> Any help would be really appriciated...
>>>
>>> Thanks,
>>> --
>>>
>>> Andrija Panić
>>>
>>
>>
>>
>> --
>>
>> Andrija Panić
>> --
>>   http://admintweets.com
>> --
>>
>
>
>
> --
>
> Andrija Panić
> --
>   http://admintweets.com
> --
>



-- 

Andrija Panić
--
  http://admintweets.com
--


Re: Password reset feature and "User Data" service

2013-12-05 Thread Andrija Panic
>From the
http://cloudstack.apache.org/docs/en-US/Apache_CloudStack/4.2.0/html-single/Installation_Guide/index.html#change-network-offering-on-guest-network

There should be the "edit" button on the network, but I dont see it, only
the "restart" and "delete" netowrk buttons...This shared network is shared
type, defined vlan ID, and has DNS/DHCP as the services provided by Virtual
Router...

Not sure why I don't see the edit button...


On 5 December 2013 09:57, Andrija Panic  wrote:

> Thank you Sanjeev for inputs. Can you please confirm that updating network
> is possible only from API - I can not find it anywhere in GUI ?
> Also how should I handle VLAN assigment to this shared network - now vlan
> 500 is assigned...I suppose when updating the network (with the new
> networking template), that already deployed network should retain it's vlan
> and IP ranges, right ?
>
> Thank you very much...
>
>
> On 5 December 2013 06:15, Sanjeev Neelarapu 
> wrote:
>
>> Hi,
>>
>> Create another network offering with dhcp,dns and userdata service and
>> undate the shared network with these offerings. While doing the network
>> update choose not to change the network cidr.
>>
>> Thanks,
>> Sanjeev
>>
>> -Original Message-
>> From: Andrija Panic [mailto:andrija.pa...@gmail.com]
>> Sent: Wednesday, December 04, 2013 3:31 PM
>> To: users@cloudstack.apache.org
>> Subject: Password reset feature and "User Data" service
>>
>> Hi,
>>
>> I have kind of problem and need advice please.
>>
>> I have 1 shared network for assigning public IP addresses to all VMs we
>> create - with DHCP,DNS, and Virtual Router, as the services that are
>> enabled in this networking tempalte.
>>
>>
>> Now I want to enable "password management/reset" features, but I got
>> error messages "user data" service is not enabled for my network id=212.
>>
>> So since modifications of Network tempalte is not possible, and the
>> modification of the already deployed Network (id=212) is not possible
>> is there a change to hack the database to include the "User Data" service
>> as the service in both the netowrk template, and for the already used
>> network (id=212)
>>
>> Any help would be really appriciated...
>>
>> Thanks,
>> --
>>
>> Andrija Panić
>>
>
>
>
> --
>
> Andrija Panić
> --
>   http://admintweets.com
> --
>



-- 

Andrija Panić
--
  http://admintweets.com
--


Re: Storage/Console SSVM loose connectivity (can't ping them anymore) after creating the first guest instance

2013-12-05 Thread Shanker Balan
Comments inline.

On 05-Dec-2013, at 6:34 pm, Francesco Maria Magnini  wrote:

> Cloud0 is created dynamically by Cloudstack, in CentOS too.

Yes, of course its created by cloudstack. I am trying to recall what
I was thinking while I was typing. :D

> I think it's not related to security groups, since I'm not able to ping
> anymore from outside the Console VM and Storage VM after creating instances.
> So it's definitely something wrong with the scripts that are responsible to
> create instances (involving the creation of the Virtual Router, and so on).

Can you do tcpdumps also?

- tcpdump on the physical NIC thats assigned for public traffic
- tcpdump on the bridge interface that connects to the public NIC
- tcpdump on the VIF thats connected to the bridge
- tcpdump on the VM’s interface

Additionally, can you share your network schema?




>
>
>
>
> On Thu, Dec 5, 2013 at 1:34 PM, Shanker Balan
> wrote:
>
>> Comments inline.
>>
>> On 05-Dec-2013, at 5:35 pm, Francesco Maria Magnini 
>> wrote:
>>
>>> I know.
>>
>> My reply was inline to the comment:
>>
>
> I think icmp is disabled by default on SSVM and CPVM
> on control IP address, but should be allowed on public IP address.

 FWIW, ICMP works on both the public and private addresses on my lab
>> setup:
>>
>> :)
>>
>>
>>> As I said on top of the discussion, I tested Cloudstack 4.2 on a CentOS
>> 6.4
>>> deployment (Controller, KVM Host) and never encountered problems on
>>> network. I even tested Advancend networking with VLANS, GRE Tunnels in a
>>> very complicated scenarios.
>>>
>>> Switching to Ubuntu (because I need to interact with CEPH), SSVM and KVM
>>> Guest have no connectivity, in a very basic scenario consisting in basic
>>> network zone.
>>
>> Am looking at your brctl output:
>>
>> root@kvm01:~# brctl show
>> bridge name bridge id STP enabled interfaces
>> cloud0 8000.fe00a9fe01a8 no vnet0
>> vnet4
>> cloudbr0 8000.0019995a73ac no eth0
>> vnet1
>> vnet2
>> vnet3
>> vnet5
>> vnet6
>> virbr0 8000. yes
>>
>> What’s cloud0 interface? Does the brctl output match with your working
>> CentOS setup?
>>
>>> After debugging, watching iptables counters, I see that all the incoming
>>> public traffic is dropped by iptables on the KVM host, and is not passed
>> to
>>> KVM Guests (including SSVM and Guest VMs).
>>>
>>>
>>> On Thu, Dec 5, 2013 at 12:52 PM, Shanker Balan
>>> wrote:
>>>
 On 05-Dec-2013, at 10:53 am, Sanjeev Neelarapu <
 sanjeev.neelar...@citrix.com> wrote:

> Hi,
>
> Make sure that iptable rules are configured properly for icmp and ssh
> traffic on kvm host.


> I think icmp is disabled by default on SSVM and CPVM
> on control IP address, but should be allowed on public IP address.

 FWIW, ICMP works on both the public and private addresses on my lab
>> setup:

 [root@csman1-1 cloudmonkey]# cloudmonkey list systemvms|grep ip
 linklocalip = 169.254.3.16
 privateip = 192.168.44.62
 publicip = 192.168.64.100
 linklocalip = 169.254.3.98
 privateip = 192.168.44.61
 publicip = 192.168.64.101
 [root@csman1-1 cloudmonkey]# fping 192.168.44.62
 192.168.44.62 is alive
 [root@csman1-1 cloudmonkey]# fping 192.168.64.100
 192.168.64.100 is alive
 [root@csman1-1 cloudmonkey]# fping 192.168.44.61
 192.168.44.61 is alive
 [root@csman1-1 cloudmonkey]# fping 192.168.64.101
 192.168.64.101 is alive
 [root@csman1-1 cloudmonkey]#


 --
 @shankerbalan

 M: +91 98860 60539 | O: +91 (80) 67935867
 shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
 ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade
>> Centre,
 Bangalore - 560 055

 This email and any attachments to it may be confidential and are
>> intended
 solely for the use of the individual to whom it is addressed. Any views
>> or
 opinions expressed are solely those of the author and do not necessarily
 represent those of Shape Blue Ltd or related companies. If you are not
>> the
 intended recipient of this email, you must neither take any action based
 upon its contents, nor copy or show it to anyone. Please contact the
>> sender
 if you believe you have received this email in error. Shape Blue Ltd is
>> a
 company incorporated in England & Wales. ShapeBlue Services India LLP
>> is a
 company incorporated in India and is operated under license from Shape
>> Blue
 Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in
>> Brasil
 and is operated under license from Shape Blue Ltd. ShapeBlue is a
 registered trademark.

>>>
>>>
>>>
>>> --
>>> “I videogiochi non influenzano i bambini.
>>> Voglio dire, se pac-man avesse influenzato la nostra generazione,
>>> staremmo tutti saltando in sale scure,
>>> masticando pillole magiche e ascoltando musica elettronica
>>> ripetitiva...”
>>>
>>> (Kristian Wilson, Nintendo Inc, 1989)
>>
>> --

RE: System VMs not starting

2013-12-05 Thread Paul Angus
Hi David

I suspect that your problem is that the documentation hasn't been updated fully 
for 4.2.

You're probably using system VM template 'systemvmtemplate-4.2-vh7.ova' which 
is misnamed as it's for 4.1

The correct download path for the 4.2 template for ESXi is:
http://download.cloud.com/templates/4.2/systemvmtemplate-4.2-vh8.ova

It can be a bit of a pain to kill off the old/wrong template.

So to re-seed sec storage...
Remember to use -F to force an overwrite when re-running the 
cloud-install-sys-tmplt script. Also disable the zone and destroy any system 
VMs. If you want to go belt and braces; find the old ESXi system VM templates 
in secondary storage and delete '...vh7' and the template.properties file too 
before re-running cloud-install-sys-tmplt.

Regards,

Paul Angus
S: +44 20 3603 0540 | M: +447711418784
paul.an...@shapeblue.com

From: Vosbury, David [mailto:david.vosb...@systemsmadesimple.com]
Sent: 05 December 2013 14:34
To: users@cloudstack.apache.org
Subject: System VMs not starting



From: Vosbury, David
Sent: Thursday, December 05, 2013 12:33 AM
To: 'd...@cloudstack.apache.org'; 'users@cloudstack.apache.org'
Subject: System VMs not starting

Hello,


I've been trying to get an new install of CloudStack 4.2 working with a Vsphere 
cluster. I've went through creating my zone with advanced networking. I can see 
the system VMs but they are not started. The secondary storage vm seems to keep 
appearing and disappearing however. When I look in vcenter I see that vms are 
being created one after another named root-2 and then root-192, root-193 etc. 
They keep creating one after another until I shutdown the management service. 
The vm's never start-up.  Here is part of the management-server.log

Has anyone seen this before? I've seen some references to bugs that sound like 
this problem (cloudstack-1228)that were supposedly fixed back in August. I don' 
t know if I have an earlier build of 4.2, but I downloaded and compiled it just 
last week and I'm having this issue. I've tried some of the workarounds listed 
in this bug report and still can't get the system vm's to start and stop 
respawing on my vmware hypervisor hosts.

Any help would be greatly appreciated. I'm getting to the point where I'm going 
to look for another solution as I can't seem to get Cloudstack working with 
Vsphere.

2013-12-05 00:07:28,642 WARN  [utils.crypt.EncryptionSecretKeyChecker] 
(Timer-2:null) Encryption already enabled, is check() called twice?
2013-12-05 00:07:29,394 DEBUG [cloud.server.ConfigurationServerImpl] 
(Timer-2:null) mount: warning: /systemvm_mnt seems to be mounted read-only.
2013-12-05 00:07:30,316 INFO  [xen.resource.XenServerConnectionPool] 
(Timer-2:null) XenServer Connection Pool Configs: 
manage.xenserver.pool.master=true; sleep.interval.on.error=1
2013-12-05 00:07:30,997 WARN  [utils.crypt.EncryptionSecretKeyChecker] 
(Timer-2:null) Encryption already enabled, is check() called twice?
2013-12-05 00:07:34,050 WARN  [apache.cloudstack.alerts] 
(Cluster-Notification-1:null)  alertType:: 14 // dataCenterId:: 0 // podId:: 0 
// clusterId:: null // message:: Management server node 10.2.150.100 is up
2013-12-05 00:07:34,071 WARN  [cloud.cluster.ClusterManagerImpl] 
(Cluster-Notification-1:null) Notifying management server join event took 39 ms
2013-12-05 00:08:33,140 ERROR [storage.resource.VmwareStorageProcessor] 
(DirectAgent-2:esxi2.ammscloud.com) clone volume from base image failed due to 
Exception: java.lang.RuntimeException
java.lang.RuntimeException: The name 'ROOT-2' already exists.
2013-12-05 00:08:33,145 DEBUG [agent.transport.Request] (DirectAgent-2:null) 
Seq 1-1861287941: Processing:  { Ans: , MgmtId: 146454222325, via: 1, Ver: v1, 
Flags: 110, 
[{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":false,"details":"java.lang.RuntimeException:
 The name 'ROOT-2' already exists.","wait":0}}] }
2013-12-05 00:08:33,163 WARN  [storage.datastore.ObjectInDataStoreManagerImpl] 
(consoleproxy-1:null) Unsupported data object (VOLUME, 
org.apache.cloudstack.storage.datastore.PrimaryDataStoreImpl@4838d3f7),
 no need to delete from object in store ref table
2013-12-05 00:08:33,164 DEBUG [cloud.storage.VolumeManagerImpl] 
(consoleproxy-1:null) Unable to create 
Vol[2|vm=2|ROOT]:java.lang.RuntimeException: The name 'ROOT-2' already exists.
2013-12-05 00:08:33,169 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(consoleproxy-1:null) Unable to contact resource.
com.cloud.exception.StorageUnavailableException: Resource [StoragePool:4] is 
unreachable: Unable to create Vol[2|vm=2|ROOT]:java.lang.RuntimeException: The 
name 'ROOT-2' already exists.
2013-12-05 00:08:56,958 ERROR [storage.resource.VmwareStorageProcessor] 
(DirectAgent-4:esxi1.ammscloud.com) clone volume from base image failed due to 
Exception: java.lang.RuntimeException
java.lang.RuntimeException: File [iSCSI-Datas

Re: VMs created using KVM hypervisor

2013-12-05 Thread Shanker Balan
On 05-Dec-2013, at 8:33 pm, Anju M R  wrote:

> yes. i tried that too. I created a security group with CIDR, and gave rules
> ICMP - code 0 and type 0, 0.0.0.0/0 and also tcp 80 80 0.0.0.0/0. then also
> it didn't work.

Can you try again with ICMP codes -1 and type -1.


--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


Re: Unable to execute PrimaryStorageDownloadCommand

2013-12-05 Thread Sean Hamilton
It's been logged: https://issues.apache.org/jira/browse/CLOUDSTACK-5382<%22>



On 4 December 2013 21:48, Nitin Mehta  wrote:

> Sean - I can confirm from the code that what you have seen is a valid bug.
> But should be a problem only for templates occurring in multiple zones.
> Would you mind filing a bug for this please ?
>
> Thanks,
> -Nitin
>
> On 04/12/13 1:44 PM, "Sean Hamilton"  wrote:
>
> >We're seeing a bug where cloudstack tries to spool a template from any
> >secondary storage in any zone in a region to primary storage.
> >
> >DB selects show a rand() at the end, it took a few attempts to get the
> >template onto primary storage.
> >
> >Must be a bug.
> >
> >> On 4 Dec 2013, at 13:23, John Skinner  wrote:
> >>
> >> I did confirm that the template does exist in the directory.
> >>> On Dec 3, 2013, at 11:05 PM, Sanjeev Neelarapu
> >>> wrote:
> >>>
> >>> Hi,
> >>>
> >>> Can you make sure that the template with which you are trying to
> >>>deploy a VM is present on the secondary Storage inside 244 directory?
> >>>
> >>> -Sanjeev
> >>> -Original Message-
> >>> From: John Skinner [mailto:john.skin...@appcore.com]
> >>> Sent: Wednesday, December 04, 2013 12:55 AM
> >>> To: users@cloudstack.apache.org
> >>> Subject: Unable to execute PrimaryStorageDownloadCommand
> >>>
> >>> Environment running CloudStack 4.1.1 with VMware vSphere 5.1 nodes and
> >>>NFS backed Primary Storage data stores. We are currently having issues
> >>>creating VMs from a template when we have to copy the template from
> >>>secondary storage. If the template already exists on primary storage
> >>>then the VM gets created just fine. I have already checked the mount
> >>>points and vCenter has read/write access to the NFS share for secondary
> >>>storage, and the secondary storage VM has the share mounted and can
> >>>read/write to it as well.
> >>>
> >>> This is the exception from the management server logs:
> >>>
> >>> 2013-12-03 09:13:10,468 DEBUG [agent.manager.AgentManagerImpl]
> >>>(Job-Executor-9:job-14655) Details from executing class
> >>>com.cloud.agent.api.storage.PrimaryStorageDownloadCommand: Unable to
> >>>execute PrimaryStorageDownloadCommand due to exception
> >>> 2013-12-03 09:13:10,468 DEBUG [cloud.template.TemplateManagerImpl]
> >>>(Job-Executor-9:job-14655) Template 244 download to pool 222 failed due
> >>>to Unable to execute PrimaryStorageDownloadCommand due to exception
> >>> 2013-12-03 09:13:10,469 DEBUG [cloud.template.TemplateManagerImpl]
> >>>(Job-Executor-9:job-14655) Template 244 is not found on and can not be
> >>>downloaded to pool 222
> >>> 2013-12-03 09:13:10,469 DEBUG [cloud.storage.StorageManagerImpl]
> >>>(Job-Executor-9:job-14655) Cannot use this pool
> >>>Pool[222|NetworkFilesystem] because we can't propagate template
> >>>Tmpl[244-OVA-244-2-0e18671b-1f2a-3b10-8b1a-7608bda5695c
> >>> 2013-12-03 09:13:10,505 DEBUG [agent.manager.AgentAttache]
> >>>(AgentManager-Handler-15:null) Seq 59-806028519: No more commands found
> >>> 2013-12-03 09:13:10,580 INFO  [cloud.vm.VirtualMachineManagerImpl]
> >>>(Job-Executor-9:job-14655) Unable to contact resource.
> >>> com.cloud.exception.StorageUnavailableException: Resource
> >>>[StoragePool:222] is unreachable: Unable to create
> >>>Vol[11319|vm=11283|ROOT]
> >>>   at
> >>>com.cloud.storage.StorageManagerImpl.prepare(StorageManagerImpl.java:348
> >>>8)
> >>>   at
> >>>com.cloud.vm.VirtualMachineManagerImpl.advanceStart(VirtualMachineManage
> >>>rImpl.java:748)
> >>>   at
> >>>com.cloud.vm.VirtualMachineManagerImpl.start(VirtualMachineManagerImpl.j
> >>>ava:471)
> >>>   at
> >>>org.apache.cloudstack.engine.cloud.entity.api.VMEntityManagerImpl.deploy
> >>>VirtualMachine(VMEntityManagerImpl.java:212)
> >>>   at
> >>>org.apache.cloudstack.engine.cloud.entity.api.VirtualMachineEntityImpl.d
> >>>eploy(VirtualMachineEntityImpl.java:209)
> >>>   at
> >>>com.cloud.vm.UserVmManagerImpl.startVirtualMachine(UserVmManagerImpl.jav
> >>>a:3871)
> >>>   at
> >>>com.cloud.vm.UserVmManagerImpl.startVirtualMachine(UserVmManagerImpl.jav
> >>>a:3464)
> >>>   at
> >>>com.cloud.vm.UserVmManagerImpl.startVirtualMachine(UserVmManagerImpl.jav
> >>>a:3450)
> >>>   at
> >>>com.cloud.utils.component.ComponentInstantiationPostProcessor$Intercepto
> >>>rDispatcher.intercept(ComponentInstantiationPostProcessor.java:125)
> >>>   at
> >>>org.apache.cloudstack.api.command.user.vm.DeployVMCmd.execute(DeployVMCm
> >>>d.java:379)
> >>>   at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:162)
> >>>   at
> >>>com.cloud.async.AsyncJobManagerImpl$1.run(AsyncJobManagerImpl.java:437)
> >>>   at
> >>>java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
> >>>   at
> >>>java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
> >>>   at java.util.concurrent.FutureTask.run(FutureTask.java:166)
> >>>   at
> >>>java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.jav
> >>>a:1146)
> >>

Re: VMs created using KVM hypervisor

2013-12-05 Thread Anju M R
yes. i tried that too. I created a security group with CIDR, and gave rules
ICMP - code 0 and type 0, 0.0.0.0/0 and also tcp 80 80 0.0.0.0/0. then also
it didn't work.


On Thu, Dec 5, 2013 at 4:12 PM, Nux!  wrote:

> On 05.12.2013 09:32, Anju M R wrote:
>
>> Hi
>>
>> I installed Management Server in 192.168.14.70/25 and my KVM hypervisor
>> host is in 192.168.150.173/23. I'm able to add zone (basic), pod,
>> cluster,
>> host, primary storage and secondary storage. The System VMs are running. I
>> registered an RHEL 6.4 iso and tried to make an instance using it. The IPs
>> get assigned by the cloudstack. From the KVM machine am able to do ping
>> and
>> ssh the instances. But I cannot access the instances from other machines,
>> not even from the Management Server.
>>
>> But when I used XenServer as the hypervisor, it worked. Even without doing
>> any setting changes am able to access the instances from the Management
>> server and other machines in the network.
>>
>>
> If you update your security groups to allow traffic does it work?
>
>
> --
> Sent from the Delta quadrant using Borg technology!
>
> Nux!
> www.nux.ro
>



-- 
Regards,

Anju M R


System VMs not starting

2013-12-05 Thread Vosbury, David


From: Vosbury, David
Sent: Thursday, December 05, 2013 12:33 AM
To: 'd...@cloudstack.apache.org'; 'users@cloudstack.apache.org'
Subject: System VMs not starting

Hello,


I've been trying to get an new install of CloudStack 4.2 working with a Vsphere 
cluster. I've went through creating my zone with advanced networking. I can see 
the system VMs but they are not started. The secondary storage vm seems to keep 
appearing and disappearing however. When I look in vcenter I see that vms are 
being created one after another named root-2 and then root-192, root-193 etc. 
They keep creating one after another until I shutdown the management service. 
The vm's never start-up.  Here is part of the management-server.log

Has anyone seen this before? I've seen some references to bugs that sound like 
this problem (cloudstack-1228)that were supposedly fixed back in August. I don' 
t know if I have an earlier build of 4.2, but I downloaded and compiled it just 
last week and I'm having this issue. I've tried some of the workarounds listed 
in this bug report and still can't get the system vm's to start and stop 
respawing on my vmware hypervisor hosts.

Any help would be greatly appreciated. I'm getting to the point where I'm going 
to look for another solution as I can't seem to get Cloudstack working with 
Vsphere.

2013-12-05 00:07:28,642 WARN  [utils.crypt.EncryptionSecretKeyChecker] 
(Timer-2:null) Encryption already enabled, is check() called twice?
2013-12-05 00:07:29,394 DEBUG [cloud.server.ConfigurationServerImpl] 
(Timer-2:null) mount: warning: /systemvm_mnt seems to be mounted read-only.
2013-12-05 00:07:30,316 INFO  [xen.resource.XenServerConnectionPool] 
(Timer-2:null) XenServer Connection Pool Configs: 
manage.xenserver.pool.master=true; sleep.interval.on.error=1
2013-12-05 00:07:30,997 WARN  [utils.crypt.EncryptionSecretKeyChecker] 
(Timer-2:null) Encryption already enabled, is check() called twice?
2013-12-05 00:07:34,050 WARN  [apache.cloudstack.alerts] 
(Cluster-Notification-1:null)  alertType:: 14 // dataCenterId:: 0 // podId:: 0 
// clusterId:: null // message:: Management server node 10.2.150.100 is up
2013-12-05 00:07:34,071 WARN  [cloud.cluster.ClusterManagerImpl] 
(Cluster-Notification-1:null) Notifying management server join event took 39 ms
2013-12-05 00:08:33,140 ERROR [storage.resource.VmwareStorageProcessor] 
(DirectAgent-2:esxi2.ammscloud.com) clone volume from base image failed due to 
Exception: java.lang.RuntimeException
java.lang.RuntimeException: The name 'ROOT-2' already exists.
2013-12-05 00:08:33,145 DEBUG [agent.transport.Request] (DirectAgent-2:null) 
Seq 1-1861287941: Processing:  { Ans: , MgmtId: 146454222325, via: 1, Ver: v1, 
Flags: 110, 
[{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":false,"details":"java.lang.RuntimeException:
 The name 'ROOT-2' already exists.","wait":0}}] }
2013-12-05 00:08:33,163 WARN  [storage.datastore.ObjectInDataStoreManagerImpl] 
(consoleproxy-1:null) Unsupported data object (VOLUME, 
org.apache.cloudstack.storage.datastore.PrimaryDataStoreImpl@4838d3f7),
 no need to delete from object in store ref table
2013-12-05 00:08:33,164 DEBUG [cloud.storage.VolumeManagerImpl] 
(consoleproxy-1:null) Unable to create 
Vol[2|vm=2|ROOT]:java.lang.RuntimeException: The name 'ROOT-2' already exists.
2013-12-05 00:08:33,169 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(consoleproxy-1:null) Unable to contact resource.
com.cloud.exception.StorageUnavailableException: Resource [StoragePool:4] is 
unreachable: Unable to create Vol[2|vm=2|ROOT]:java.lang.RuntimeException: The 
name 'ROOT-2' already exists.
2013-12-05 00:08:56,958 ERROR [storage.resource.VmwareStorageProcessor] 
(DirectAgent-4:esxi1.ammscloud.com) clone volume from base image failed due to 
Exception: java.lang.RuntimeException
java.lang.RuntimeException: File [iSCSI-Datastore-1] ROOT-203/ROOT-203.vmdk was 
not found
2013-12-05 00:08:56,960 DEBUG [agent.transport.Request] (DirectAgent-4:null) 
Seq 2-2058223621: Processing:  { Ans: , MgmtId: 146454222325, via: 2, Ver: v1, 
Flags: 110, 
[{"org.apache.cloudstack.storage.command.CopyCmdAnswer":{"result":false,"details":"java.lang.RuntimeException:
 File [iSCSI-Datastore-1] ROOT-203/ROOT-203.vmdk was not found","wait":0}}] }
2013-12-05 00:08:56,978 WARN  [storage.datastore.ObjectInDataStoreManagerImpl] 
(secstorage-1:null) Unsupported data object (VOLUME, 
org.apache.cloudstack.storage.datastore.PrimaryDataStoreImpl@6e0e449e),
 no need to delete from object in store ref table
2013-12-05 00:08:56,979 DEBUG [cloud.storage.VolumeManagerImpl] 
(secstorage-1:null) Unable to create 
Vol[203|vm=203|ROOT]:java.lang.RuntimeException: File [iSCSI-Datastore-1] 
ROOT-203/ROOT-203.vmdk was not found
2013-12-05 00:08:56,980 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(secstorage-1:null) Unable to 

Re: Missing vhd-util on the KVM System VM?

2013-12-05 Thread Nux!

On 05.12.2013 12:43, Shanker Balan wrote:

Helo,

While trying to create a template from an instance running on
XenServer I ran into the below error:

"/usr/local/cloud/systemvm/scripts/storage/secondary/
create_privatetemplate_from_snapshot_xen.sh line 65:
/bin/vhd-util no such file or directory"

See screenshot: http://imgur.com/XyzdazP

The SSVM (which was running on a KVM host) was indeed missing 
/bin/vhd-util.
I manually coped over the file to work around the issue. The XenServer 
system

VM does seem to have vhd-util though.

root@s-1-VM:~# which vhd-util
/bin/vhd-util

The system VMs templates I using are:

systemvmtemplate-2013-06-12-master-kvm.qcow2.bz2
systemvmtemplate-2013-07-12-master-xen.vhd.bz2

Anyone else seen this issue?


Make sure it's executable and you can run it (try manually, see what it 
spits out).
If the system VM is 64 bit it may require glibc.i686 installed or some 
other library (libstd blah), just a guess.


--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro


Re: Missing vhd-util on the KVM System VM?

2013-12-05 Thread Harikrishna Patnala
Hi Shankar,
Can you please try giving execution rights to vhd-util. Are you using 64bit 
template for system vms ?

This'll work.
chmod a+x /bin/vhd-util

Thanks,
Harikrishna

On 05-Dec-2013, at 6:13 pm, Shanker Balan  wrote:

> Helo,
> 
> While trying to create a template from an instance running on
> XenServer I ran into the below error:
> 
> "/usr/local/cloud/systemvm/scripts/storage/secondary/
> create_privatetemplate_from_snapshot_xen.sh line 65:
> /bin/vhd-util no such file or directory"
> 
> See screenshot: http://imgur.com/XyzdazP
> 
> The SSVM (which was running on a KVM host) was indeed missing /bin/vhd-util.
> I manually coped over the file to work around the issue. The XenServer system
> VM does seem to have vhd-util though.
> 
> root@s-1-VM:~# which vhd-util
> /bin/vhd-util
> 
> The system VMs templates I using are:
> 
> systemvmtemplate-2013-06-12-master-kvm.qcow2.bz2
> systemvmtemplate-2013-07-12-master-xen.vhd.bz2
> 
> Anyone else seen this issue?
> 
> 
> --
> @shankerbalan
> 
> M: +91 98860 60539 | O: +91 (80) 67935867
> shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
> Bangalore - 560 055
> 
> This email and any attachments to it may be confidential and are intended 
> solely for the use of the individual to whom it is addressed. Any views or 
> opinions expressed are solely those of the author and do not necessarily 
> represent those of Shape Blue Ltd or related companies. If you are not the 
> intended recipient of this email, you must neither take any action based upon 
> its contents, nor copy or show it to anyone. Please contact the sender if you 
> believe you have received this email in error. Shape Blue Ltd is a company 
> incorporated in England & Wales. ShapeBlue Services India LLP is a company 
> incorporated in India and is operated under license from Shape Blue Ltd. 
> Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
> operated under license from Shape Blue Ltd. ShapeBlue is a registered 
> trademark.



Re: Storage/Console SSVM loose connectivity (can't ping them anymore) after creating the first guest instance

2013-12-05 Thread Francesco Maria Magnini
Cloud0 is created dynamically by Cloudstack, in CentOS too.

I think it's not related to security groups, since I'm not able to ping
anymore from outside the Console VM and Storage VM after creating instances.
So it's definitely something wrong with the scripts that are responsible to
create instances (involving the creation of the Virtual Router, and so on).




On Thu, Dec 5, 2013 at 1:34 PM, Shanker Balan
wrote:

> Comments inline.
>
> On 05-Dec-2013, at 5:35 pm, Francesco Maria Magnini 
> wrote:
>
> > I know.
>
> My reply was inline to the comment:
>
> >>>
> >>> I think icmp is disabled by default on SSVM and CPVM
> >>> on control IP address, but should be allowed on public IP address.
> >>
> >> FWIW, ICMP works on both the public and private addresses on my lab
> setup:
>
> :)
>
>
> > As I said on top of the discussion, I tested Cloudstack 4.2 on a CentOS
> 6.4
> > deployment (Controller, KVM Host) and never encountered problems on
> > network. I even tested Advancend networking with VLANS, GRE Tunnels in a
> > very complicated scenarios.
> >
> > Switching to Ubuntu (because I need to interact with CEPH), SSVM and KVM
> > Guest have no connectivity, in a very basic scenario consisting in basic
> > network zone.
>
> Am looking at your brctl output:
>
> root@kvm01:~# brctl show
> bridge name bridge id STP enabled interfaces
> cloud0 8000.fe00a9fe01a8 no vnet0
> vnet4
> cloudbr0 8000.0019995a73ac no eth0
> vnet1
> vnet2
> vnet3
> vnet5
> vnet6
> virbr0 8000. yes
>
> What’s cloud0 interface? Does the brctl output match with your working
> CentOS setup?
>
> > After debugging, watching iptables counters, I see that all the incoming
> > public traffic is dropped by iptables on the KVM host, and is not passed
> to
> > KVM Guests (including SSVM and Guest VMs).
> >
> >
> > On Thu, Dec 5, 2013 at 12:52 PM, Shanker Balan
> > wrote:
> >
> >> On 05-Dec-2013, at 10:53 am, Sanjeev Neelarapu <
> >> sanjeev.neelar...@citrix.com> wrote:
> >>
> >>> Hi,
> >>>
> >>> Make sure that iptable rules are configured properly for icmp and ssh
> >>> traffic on kvm host.
> >>
> >>
> >>> I think icmp is disabled by default on SSVM and CPVM
> >>> on control IP address, but should be allowed on public IP address.
> >>
> >> FWIW, ICMP works on both the public and private addresses on my lab
> setup:
> >>
> >> [root@csman1-1 cloudmonkey]# cloudmonkey list systemvms|grep ip
> >> linklocalip = 169.254.3.16
> >> privateip = 192.168.44.62
> >> publicip = 192.168.64.100
> >> linklocalip = 169.254.3.98
> >> privateip = 192.168.44.61
> >> publicip = 192.168.64.101
> >> [root@csman1-1 cloudmonkey]# fping 192.168.44.62
> >> 192.168.44.62 is alive
> >> [root@csman1-1 cloudmonkey]# fping 192.168.64.100
> >> 192.168.64.100 is alive
> >> [root@csman1-1 cloudmonkey]# fping 192.168.44.61
> >> 192.168.44.61 is alive
> >> [root@csman1-1 cloudmonkey]# fping 192.168.64.101
> >> 192.168.64.101 is alive
> >> [root@csman1-1 cloudmonkey]#
> >>
> >>
> >> --
> >> @shankerbalan
> >>
> >> M: +91 98860 60539 | O: +91 (80) 67935867
> >> shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> >> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade
> Centre,
> >> Bangalore - 560 055
> >>
> >> This email and any attachments to it may be confidential and are
> intended
> >> solely for the use of the individual to whom it is addressed. Any views
> or
> >> opinions expressed are solely those of the author and do not necessarily
> >> represent those of Shape Blue Ltd or related companies. If you are not
> the
> >> intended recipient of this email, you must neither take any action based
> >> upon its contents, nor copy or show it to anyone. Please contact the
> sender
> >> if you believe you have received this email in error. Shape Blue Ltd is
> a
> >> company incorporated in England & Wales. ShapeBlue Services India LLP
> is a
> >> company incorporated in India and is operated under license from Shape
> Blue
> >> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in
> Brasil
> >> and is operated under license from Shape Blue Ltd. ShapeBlue is a
> >> registered trademark.
> >>
> >
> >
> >
> > --
> > “I videogiochi non influenzano i bambini.
> > Voglio dire, se pac-man avesse influenzato la nostra generazione,
> > staremmo tutti saltando in sale scure,
> > masticando pillole magiche e ascoltando musica elettronica
> > ripetitiva...”
> >
> > (Kristian Wilson, Nintendo Inc, 1989)
>
> --
> @shankerbalan
>
> M: +91 98860 60539 | O: +91 (80) 67935867
> shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
> Bangalore - 560 055
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> inten

Missing vhd-util on the KVM System VM?

2013-12-05 Thread Shanker Balan
Helo,

While trying to create a template from an instance running on
XenServer I ran into the below error:

"/usr/local/cloud/systemvm/scripts/storage/secondary/
create_privatetemplate_from_snapshot_xen.sh line 65:
/bin/vhd-util no such file or directory"

See screenshot: http://imgur.com/XyzdazP

The SSVM (which was running on a KVM host) was indeed missing /bin/vhd-util.
I manually coped over the file to work around the issue. The XenServer system
VM does seem to have vhd-util though.

root@s-1-VM:~# which vhd-util
/bin/vhd-util

The system VMs templates I using are:

systemvmtemplate-2013-06-12-master-kvm.qcow2.bz2
systemvmtemplate-2013-07-12-master-xen.vhd.bz2

Anyone else seen this issue?


--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


Re: Storage/Console SSVM loose connectivity (can't ping them anymore) after creating the first guest instance

2013-12-05 Thread Shanker Balan
Comments inline.

On 05-Dec-2013, at 5:35 pm, Francesco Maria Magnini  wrote:

> I know.

My reply was inline to the comment:

>>>
>>> I think icmp is disabled by default on SSVM and CPVM
>>> on control IP address, but should be allowed on public IP address.
>>
>> FWIW, ICMP works on both the public and private addresses on my lab setup:

:)


> As I said on top of the discussion, I tested Cloudstack 4.2 on a CentOS 6.4
> deployment (Controller, KVM Host) and never encountered problems on
> network. I even tested Advancend networking with VLANS, GRE Tunnels in a
> very complicated scenarios.
>
> Switching to Ubuntu (because I need to interact with CEPH), SSVM and KVM
> Guest have no connectivity, in a very basic scenario consisting in basic
> network zone.

Am looking at your brctl output:

root@kvm01:~# brctl show
bridge name bridge id STP enabled interfaces
cloud0 8000.fe00a9fe01a8 no vnet0
vnet4
cloudbr0 8000.0019995a73ac no eth0
vnet1
vnet2
vnet3
vnet5
vnet6
virbr0 8000. yes

What’s cloud0 interface? Does the brctl output match with your working CentOS 
setup?

> After debugging, watching iptables counters, I see that all the incoming
> public traffic is dropped by iptables on the KVM host, and is not passed to
> KVM Guests (including SSVM and Guest VMs).
>
>
> On Thu, Dec 5, 2013 at 12:52 PM, Shanker Balan
> wrote:
>
>> On 05-Dec-2013, at 10:53 am, Sanjeev Neelarapu <
>> sanjeev.neelar...@citrix.com> wrote:
>>
>>> Hi,
>>>
>>> Make sure that iptable rules are configured properly for icmp and ssh
>>> traffic on kvm host.
>>
>>
>>> I think icmp is disabled by default on SSVM and CPVM
>>> on control IP address, but should be allowed on public IP address.
>>
>> FWIW, ICMP works on both the public and private addresses on my lab setup:
>>
>> [root@csman1-1 cloudmonkey]# cloudmonkey list systemvms|grep ip
>> linklocalip = 169.254.3.16
>> privateip = 192.168.44.62
>> publicip = 192.168.64.100
>> linklocalip = 169.254.3.98
>> privateip = 192.168.44.61
>> publicip = 192.168.64.101
>> [root@csman1-1 cloudmonkey]# fping 192.168.44.62
>> 192.168.44.62 is alive
>> [root@csman1-1 cloudmonkey]# fping 192.168.64.100
>> 192.168.64.100 is alive
>> [root@csman1-1 cloudmonkey]# fping 192.168.44.61
>> 192.168.44.61 is alive
>> [root@csman1-1 cloudmonkey]# fping 192.168.64.101
>> 192.168.64.101 is alive
>> [root@csman1-1 cloudmonkey]#
>>
>>
>> --
>> @shankerbalan
>>
>> M: +91 98860 60539 | O: +91 (80) 67935867
>> shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
>> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
>> Bangalore - 560 055
>>
>> This email and any attachments to it may be confidential and are intended
>> solely for the use of the individual to whom it is addressed. Any views or
>> opinions expressed are solely those of the author and do not necessarily
>> represent those of Shape Blue Ltd or related companies. If you are not the
>> intended recipient of this email, you must neither take any action based
>> upon its contents, nor copy or show it to anyone. Please contact the sender
>> if you believe you have received this email in error. Shape Blue Ltd is a
>> company incorporated in England & Wales. ShapeBlue Services India LLP is a
>> company incorporated in India and is operated under license from Shape Blue
>> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
>> and is operated under license from Shape Blue Ltd. ShapeBlue is a
>> registered trademark.
>>
>
>
>
> --
> “I videogiochi non influenzano i bambini.
> Voglio dire, se pac-man avesse influenzato la nostra generazione,
> staremmo tutti saltando in sale scure,
> masticando pillole magiche e ascoltando musica elettronica
> ripetitiva...”
>
> (Kristian Wilson, Nintendo Inc, 1989)

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


Re: Storage/Console SSVM loose connectivity (can't ping them anymore) after creating the first guest instance

2013-12-05 Thread Francesco Maria Magnini
I know.
As I said on top of the discussion, I tested Cloudstack 4.2 on a CentOS 6.4
deployment (Controller, KVM Host) and never encountered problems on
network. I even tested Advancend networking with VLANS, GRE Tunnels in a
very complicated scenarios.

Switching to Ubuntu (because I need to interact with CEPH), SSVM and KVM
Guest have no connectivity, in a very basic scenario consisting in basic
network zone.

After debugging, watching iptables counters, I see that all the incoming
public traffic is dropped by iptables on the KVM host, and is not passed to
KVM Guests (including SSVM and Guest VMs).


On Thu, Dec 5, 2013 at 12:52 PM, Shanker Balan
wrote:

> On 05-Dec-2013, at 10:53 am, Sanjeev Neelarapu <
> sanjeev.neelar...@citrix.com> wrote:
>
> > Hi,
> >
> > Make sure that iptable rules are configured properly for icmp and ssh
> > traffic on kvm host.
>
>
> > I think icmp is disabled by default on SSVM and CPVM
> > on control IP address, but should be allowed on public IP address.
>
> FWIW, ICMP works on both the public and private addresses on my lab setup:
>
> [root@csman1-1 cloudmonkey]# cloudmonkey list systemvms|grep ip
> linklocalip = 169.254.3.16
> privateip = 192.168.44.62
> publicip = 192.168.64.100
> linklocalip = 169.254.3.98
> privateip = 192.168.44.61
> publicip = 192.168.64.101
> [root@csman1-1 cloudmonkey]# fping 192.168.44.62
> 192.168.44.62 is alive
> [root@csman1-1 cloudmonkey]# fping 192.168.64.100
> 192.168.64.100 is alive
> [root@csman1-1 cloudmonkey]# fping 192.168.44.61
> 192.168.44.61 is alive
> [root@csman1-1 cloudmonkey]# fping 192.168.64.101
> 192.168.64.101 is alive
> [root@csman1-1 cloudmonkey]#
>
>
> --
> @shankerbalan
>
> M: +91 98860 60539 | O: +91 (80) 67935867
> shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
> ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre,
> Bangalore - 560 055
>
> This email and any attachments to it may be confidential and are intended
> solely for the use of the individual to whom it is addressed. Any views or
> opinions expressed are solely those of the author and do not necessarily
> represent those of Shape Blue Ltd or related companies. If you are not the
> intended recipient of this email, you must neither take any action based
> upon its contents, nor copy or show it to anyone. Please contact the sender
> if you believe you have received this email in error. Shape Blue Ltd is a
> company incorporated in England & Wales. ShapeBlue Services India LLP is a
> company incorporated in India and is operated under license from Shape Blue
> Ltd. Shape Blue Brasil Consultoria Ltda is a company incorporated in Brasil
> and is operated under license from Shape Blue Ltd. ShapeBlue is a
> registered trademark.
>



-- 
“I videogiochi non influenzano i bambini.
Voglio dire, se pac-man avesse influenzato la nostra generazione,
staremmo tutti saltando in sale scure,
masticando pillole magiche e ascoltando musica elettronica
ripetitiva...”

(Kristian Wilson, Nintendo Inc, 1989)


Re: Storage/Console SSVM loose connectivity (can't ping them anymore) after creating the first guest instance

2013-12-05 Thread Shanker Balan
On 05-Dec-2013, at 10:53 am, Sanjeev Neelarapu  
wrote:

> Hi,
>
> Make sure that iptable rules are configured properly for icmp and ssh
> traffic on kvm host.


> I think icmp is disabled by default on SSVM and CPVM
> on control IP address, but should be allowed on public IP address.

FWIW, ICMP works on both the public and private addresses on my lab setup:

[root@csman1-1 cloudmonkey]# cloudmonkey list systemvms|grep ip
linklocalip = 169.254.3.16
privateip = 192.168.44.62
publicip = 192.168.64.100
linklocalip = 169.254.3.98
privateip = 192.168.44.61
publicip = 192.168.64.101
[root@csman1-1 cloudmonkey]# fping 192.168.44.62
192.168.44.62 is alive
[root@csman1-1 cloudmonkey]# fping 192.168.64.100
192.168.64.100 is alive
[root@csman1-1 cloudmonkey]# fping 192.168.44.61
192.168.44.61 is alive
[root@csman1-1 cloudmonkey]# fping 192.168.64.101
192.168.64.101 is alive
[root@csman1-1 cloudmonkey]#


--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


AW: WG: ERROR: Adding volumes when a VMs were deploy.

2013-12-05 Thread Kmiotek, Daniel
Hey Radek.

The primary -storage is on the mgmt server.
It is shared with NFS.

[root@acs01 ~]# cat /etc/exports
/home/ *(rw,async,no_root_squash,no_subtree_check)

The SystemVMs works correctly.

--> The host have enough capacity?!

Thank you for your responsing :)

[root@acs02 ~]# cat /proc/meminfo
MemTotal:1921628 kB
MemFree:  941952 kB
Buffers:   65744 kB
Cached:   104480 kB
SwapCached:0 kB
Active:   724176 kB
Inactive: 114360 kB
Active(anon): 668528 kB
Inactive(anon):   12 kB
Active(file):  55648 kB
Inactive(file):   114348 kB
Unevictable:   0 kB
Mlocked:   0 kB
SwapTotal:   4128760 kB
SwapFree:4128760 kB
Dirty:40 kB
Writeback: 0 kB
AnonPages:668360 kB
Mapped:28876 kB
Shmem:   228 kB
Slab:  80884 kB
SReclaimable:  19784 kB
SUnreclaim:61100 kB
KernelStack:1848 kB
PageTables: 7480 kB
NFS_Unstable:  0 kB
Bounce:0 kB
WritebackTmp:  0 kB
CommitLimit: 5089572 kB
Committed_AS:1960760 kB
VmallocTotal:   34359738367 kB
VmallocUsed:   30248 kB
VmallocChunk:   34359695764 kB
HardwareCorrupted: 0 kB
AnonHugePages:280576 kB
HugePages_Total:   0
HugePages_Free:0
HugePages_Rsvd:0
HugePages_Surp:0
Hugepagesize:   2048 kB
DirectMap4k:7552 kB
DirectMap2M: 2088960 kB

[root@acs02 ~]# cat /proc/cpuinfo
processor   : 0
vendor_id   : GenuineIntel
cpu family  : 6
model   : 15
model name  : Intel(R) Xeon(R) CPU   E5345  @ 2.33GHz
stepping: 7
cpu MHz : 2333.460
cache size  : 4096 KB
physical id : 0
siblings: 4
core id : 0
cpu cores   : 4
apicid  : 0
initial apicid  : 0
fpu : yes
fpu_exception   : yes
cpuid level : 10
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm 
constant_tsc arch_perfmon pebs bts rep_good aperfmperf pni dtes64 monitor 
ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca lahf_lm dts tpr_shadow
bogomips: 4666.92
clflush size: 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management:

processor   : 1
vendor_id   : GenuineIntel
cpu family  : 6
model   : 15
model name  : Intel(R) Xeon(R) CPU   E5345  @ 2.33GHz
stepping: 7
cpu MHz : 2333.460
cache size  : 4096 KB
physical id : 0
siblings: 4
core id : 1
cpu cores   : 4
apicid  : 1
initial apicid  : 1
fpu : yes
fpu_exception   : yes
cpuid level : 10
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm 
constant_tsc arch_perfmon pebs bts rep_good aperfmperf pni dtes64 monitor 
ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca lahf_lm dts tpr_shadow
bogomips: 4666.92
clflush size: 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management:

processor   : 2
vendor_id   : GenuineIntel
cpu family  : 6
model   : 15
model name  : Intel(R) Xeon(R) CPU   E5345  @ 2.33GHz
stepping: 7
cpu MHz : 2333.460
cache size  : 4096 KB
physical id : 0
siblings: 4
core id : 2
cpu cores   : 4
apicid  : 2
initial apicid  : 2
fpu : yes
fpu_exception   : yes
cpuid level : 10
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm 
constant_tsc arch_perfmon pebs bts rep_good aperfmperf pni dtes64 monitor 
ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca lahf_lm dts tpr_shadow
bogomips: 4666.92
clflush size: 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management:

processor   : 3
vendor_id   : GenuineIntel
cpu family  : 6
model   : 15
model name  : Intel(R) Xeon(R) CPU   E5345  @ 2.33GHz
stepping: 7
cpu MHz : 2333.460
cache size  : 4096 KB
physical id : 0
siblings: 4
core id : 3
cpu cores   : 4
apicid  : 3
initial apicid  : 3
fpu : yes
fpu_exception   : yes
cpuid level : 10
wp  : yes
flags   : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov 
pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe syscall nx lm 
constant_tsc arch_perfmon pebs bts rep_good aperfmperf pni dtes64 monitor 
ds_cpl vmx est tm2 ssse3 cx16 xtpr pdcm dca lahf_lm dts tpr_shadow
bogomips: 4666.92
clflush size: 64
cache_alignment : 64
address sizes   : 36 bits physical, 48 bits virtual
power management:


CloudMonkey and URL Encoded password string

2013-12-05 Thread Shanker Balan
Helo,

I having a bit of a bother with this command:

[root@csman1-1 ~]# cloudmonkey add host 
zoneid=1d2b7f7e-8a44-4c2f-840c-41b8eab715ff
clusterid=fe96dd24-ba3d-4a3f-be2a-f0792113200b hypervisor=XenServer
podid=55d1abca-8094-434d-81e7-ead9ac32faf6 url=http://vxen1-1.lan username=root
password=pass*word
^^
Unauthorized: None

2013-12-05 16:40:19,369 INFO  [cloud.api.ApiServer] (catalina-exec-3:null)
0:0:0:0:0:0:0:1 -- GET 
apiKey=22Bj8f2SE4GCIrUexHLD3fvaRgbiQ4wWhp6zr2Ac1s-6v5q_u1dOSiwxlPL1_IvkqsWebYn86UoZLYgOb6EeUQ&clusterid=fe96dd24-ba3d-4a3f-be2a-
f0792113200b&command=addHost&hypervisor=XenServer&password=pass%2Aword&podid=
55d1abca-8094-434d-81e7-ead9ac32faf6&response=json&url=http%3A%2F%2Fvxen1-1.lan&username=root&zoneid=1d2b7f7e-8a44-4c2f-840c-41b8eab715ff&signature=m8j0nnQQ%2B%2BhCnsHmPRx2UdpN46I%3D
401 unable to verify user credentials and/or request signature

It seems that CloudMonkey URL encoding the password field is breaking
the sig - pass*word is being encoded as "password=pass%2Aword”. %2A being
the HTML escape code for “*” char.

cloudmonkey/requester.py:
request_url = "&".join(["=".join([r[0], urllib.quote_plus(str(r[1]))])
   for r in request])

Any suggestions as to how I can get CloudMonkey to not the encode
the password field?

Regards.

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


Re: xenserver 6.2 added to pool

2013-12-05 Thread Shanker Balan
On 05-Dec-2013, at 11:13 am, Adam Harvey  wrote:

> If it were only that way with these for me. They're completely stock I am at 
> a loss of why this is occurring.

Adam, I am not sure whether you are looking at the real error message. The
standard process I follow for setting up a XenServer is as below:

1) Install from ISO
2) Create pool
3) Update xenserver traffic label using XenCenter or
via "/opt/xensource/bin/xe network-param-set” CLI
4) Add the pool master to CloudStack

Of course, copy vhd-util to the manager host first.




>
> -Original Message-
> From: Shanker Balan [mailto:shanker.ba...@shapeblue.com]
> Sent: Wednesday, December 04, 2013 8:05 PM
> To: CloudStack-Users
> Subject: Re: xenserver 6.2 added to pool
>
> On 05-Dec-2013, at 4:47 am, Adam Harvey  wrote:
>
>> 2013-12-04 23:13:44,097 DEBUG [utils.script.Script]
>> (DirectAgent-119:null) Looking for
>> scripts/vm/hypervisor/xenserver/xenserver60/patch in the classpath
>> 2013-12-04 23:13:44,097 DEBUG [utils.script.Script]
>> (DirectAgent-119:null) System resource: null
>> 2013-12-04 23:13:44,097 DEBUG [utils.script.Script]
>> (DirectAgent-119:null) Classpath resource:
>> file:/usr/share/cloudstack-management/webapps/client/WEB-INF/classes/s
>> cripts/vm/hypervisor/xenserver/xenserver60/patch
>> 2013-12-04 23:13:44,098 DEBUG [utils.script.Script]
>> (DirectAgent-119:null) Absolute path =
>> /usr/share/cloudstack-management/webapps/client/WEB-INF/classes/script
>> s/vm/hypervisor/xenserver/xenserver60/patch
>> 2013-12-04 23:13:44,098 DEBUG [xen.resource.CitrixResourceBase]
>> (DirectAgent-119:null) Copying
>> /usr/share/cloudstack-management/webapps/client/WEB-INF/classes/script
>> s/vm/hypervisor/xenserver/xenserver60/../cloudstack_pluginlib.py to
>> /etc /xapi.d/plugins on *removed* with permission 0755
>> 2013-12-04 23:13:44,163 DEBUG [xen.resource.CitrixResourceBase]
>> (DirectAgent-119:null) Copying
>> /usr/share/cloudstack-management/webapps/client/WEB-INF/classes/script
>> s/vm/hypervisor/xenserver/xenserver60/../vmopsSnapshot to
>> /etc/xapi.d/pl ugins on *removed* with permission 0755
>> 2013-12-04 23:13:44,164 DEBUG [xen.resource.CitrixResourceBase]
>> (DirectAgent-119:null) Unable to create destination path:
>> /etc/xapi.d/plugins on *removed* but trying anyway
>> 2013-12-04 23:13:44,245 DEBUG [xen.resource.CitrixResourceBase]
>> (DirectAgent-119:null) Copying
>> /usr/share/cloudstack-management/webapps/client/WEB-INF/classes/script
>> s/vm/hypervisor/xenserver/xenserver60/../ovs-vif-flows.py to
>> /etc/xapi.d /plugins on *removed* with permission 0755
>> 2013-12-04 23:13:44,245 DEBUG [xen.resource.CitrixResourceBase]
>> (DirectAgent-119:null) Unable to create destination path:
>> /etc/xapi.d/plugins on *removed* but trying anyway
>> 2013-12-04 23:13:44,327 DEBUG [xen.resource.CitrixResourceBase]
>> (DirectAgent-119:null) Copying
>> /usr/share/cloudstack-management/webapps/client/WEB-INF/classes/script
>> s/vm/hypervisor/xenserver/xenserver60/../cloud-setup-bonding.sh to
>> /opt/ xensource/bin on *removed* with permission 0755
>>
>> This occurring w/anyone else?  Running CS 4.2 with xenserver 6.2 I've
>> verified vhd-util is the proper one recommended in the documentation and I 
>> have it placed in:
>
> The only place I put vhd-util is under 
> /usr/share/cloudstack-common/scripts/vm/hypervisor/xenserver/
> ON the management server before adding the XenServer hosts to ACS. See below 
> ansible recipe.
>
> - name: Copy vhd-util
>  action: copy src=vhd-util 
> dest=/usr/share/cloudstack-common/scripts/vm/hypervisor/xenserver/vhd-util 
> mode=0755
>  tags: cloudstack
>
> The management server then does:
>
> [root@csman1-1 ~]# grep vhd-util 
> /var/log/cloudstack/management/management-server.log
> 2013-12-05 00:01:02,612 DEBUG [xen.resource.CitrixResourceBase] 
> (DirectAgent-1:null) Copying 
> /usr/share/cloudstack-common/scripts/vm/hypervisor/xenserver/xenserver60/../vhd-util
>  to /opt/xensource/bin on 192.168.44.23 with permission 0755
> 2013-12-05 00:01:12,294 DEBUG [xen.resource.CitrixResourceBase] 
> (DirectAgent-9:null) Copying 
> /usr/share/cloudstack-common/scripts/vm/hypervisor/xenserver/xenserver60/../vhd-util
>  to /opt/xensource/bin on 192.168.44.24 with permission 0755
>
>
>> /usr/share/cloudstack-common/scripts/vm/hypervisor/xenserver/vhd-util
>> /usr/share/cloudstack-common/scripts/vm/hypervisor/xenserver/xenserver
>> 60/vhd-util
>> /usr/share/cloudstack-management/webapps/client/WEB-INF/classes/script
>> s/vm/hypervisor/xenserver/xenserver60/vhd-util
>
> Been adding and removing XenServer 6.2 clusters all day yesterday on stock 
> ACS 4.2.0 without issues.
>
> Regards.
>
> --
> @shankerbalan
>
> M: +91 98860 60539 | O: +91 (80) 67935867 shanker.ba...@shapeblue.com | 
> www.shapeblue.com | Twitter:@shapeblue ShapeBlue Services India LLP, 22nd 
> floor, Unit 2201A, World Trade Centre, Bangalore - 560 055
>
> This email and any attachments to it may be confidential and are intended 
> solely for the use of the

Re: SecurityGroups, Advanced Zone And DefaultSharedNetworkOfferingWithSGService

2013-12-05 Thread Shanker Balan
On 05-Dec-2013, at 2:12 pm, Radek Smigielski  wrote:

>> I just redid the setup with Advanced Zone + Security Groups enabled.
> I am trying to understand if you could define, apply, use security groups 
> after you just update value in data_center.is_security_group_enabled ?
>
>
> Or you just basically rebuild zone with SG enabled?

Hi Radek,

I created a shared network with DefaultSharedNetworkOfferingWithSGService
in an existing Advanced Zone which had security groups disabled. VMs would get
created in the default security group if I choose the 
DefaultSharedNetworkOfferingWithSGService
offering. However, I wasn’t able to any other security groups to the VMs 
created in the
DefaultSharedNetworkOfferingWithSGService network.

Once I set data_center.is_security_group_enabled=1, I was able to assign 
security
groups to VMs in the DefaultSharedNetworkOfferingWithSGService network via API.

I hope it makes sense.

--
@shankerbalan

M: +91 98860 60539 | O: +91 (80) 67935867
shanker.ba...@shapeblue.com | www.shapeblue.com | Twitter:@shapeblue
ShapeBlue Services India LLP, 22nd floor, Unit 2201A, World Trade Centre, 
Bangalore - 560 055

This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


Re: Storage/Console SSVM loose connectivity (can't ping them anymore) after creating the first guest instance

2013-12-05 Thread Francesco Maria Magnini
Hi,
below you can find the iptables rules and the bridge configuration.

Anyway, what I see is that ICMP request are reaching the KVM host, but
opening a virsh console to the guest shows no ICMP packets coming from
public network.

root@kvm01:~# ufw status
Status: inactive
root@kvm01:~#
root@kvm01:~#
root@kvm01:~#
root@kvm01:~#
root@kvm01:~# brctl show
bridge name bridge id STP enabled interfaces
cloud0 8000.fe00a9fe01a8 no vnet0
vnet4
cloudbr0 8000.0019995a73ac no eth0
vnet1
 vnet2
vnet3
vnet5
vnet6
virbr0 8000. yes

root@kvm01:~# iptables -L -n
Chain INPUT (policy ACCEPT)
target prot opt source   destination
ACCEPT udp  --  0.0.0.0/00.0.0.0/0udp dpt:53
ACCEPT tcp  --  0.0.0.0/00.0.0.0/0tcp dpt:53
ACCEPT udp  --  0.0.0.0/00.0.0.0/0udp dpt:67
ACCEPT tcp  --  0.0.0.0/00.0.0.0/0tcp dpt:67

Chain FORWARD (policy ACCEPT)
target prot opt source   destination
BF-cloudbr0  all  --  0.0.0.0/00.0.0.0/0PHYSDEV
match --physdev-is-bridged
BF-cloudbr0  all  --  0.0.0.0/00.0.0.0/0PHYSDEV
match --physdev-is-bridged
DROP   all  --  0.0.0.0/00.0.0.0/0
DROP   all  --  0.0.0.0/00.0.0.0/0
ACCEPT all  --  0.0.0.0/0192.168.122.0/24 ctstate
RELATED,ESTABLISHED
ACCEPT all  --  192.168.122.0/24 0.0.0.0/0
ACCEPT all  --  0.0.0.0/00.0.0.0/0
REJECT all  --  0.0.0.0/00.0.0.0/0reject-with
icmp-port-unreachable
REJECT all  --  0.0.0.0/00.0.0.0/0reject-with
icmp-port-unreachable

Chain OUTPUT (policy ACCEPT)
target prot opt source   destination

Chain BF-cloudbr0 (2 references)
target prot opt source   destination
ACCEPT all  --  0.0.0.0/00.0.0.0/0state
RELATED,ESTABLISHED
BF-cloudbr0-IN  all  --  0.0.0.0/00.0.0.0/0PHYSDEV
match --physdev-is-in --physdev-is-bridged
BF-cloudbr0-OUT  all  --  0.0.0.0/00.0.0.0/0PHYSDEV
match --physdev-is-out --physdev-is-bridged
ACCEPT all  --  0.0.0.0/00.0.0.0/0PHYSDEV match
--physdev-out eth0 --physdev-is-bridged

Chain BF-cloudbr0-IN (1 references)
target prot opt source   destination

Chain BF-cloudbr0-OUT (1 references)
target prot opt source   destination
root@kvm01:~#


On Thu, Dec 5, 2013 at 6:23 AM, Sanjeev Neelarapu <
sanjeev.neelar...@citrix.com> wrote:

> Hi,
>
> Make sure that iptable rules are configured properly for icmp and ssh
> traffic on kvm host.
> I think icmp is disabled by default on SSVM and CPVM on control IP
> address, but should be allowed on public IP address.
>
> Thanks,
> Sanjeev
>
> -Original Message-
> From: Francesco Maria Magnini [mailto:fmm1...@gmail.com]
> Sent: Wednesday, December 04, 2013 9:23 PM
> To: users@cloudstack.apache.org
> Subject: Storage/Console SSVM loose connectivity (can't ping them anymore)
> after creating the first guest instance
>
> I'm experiencing problems in Cloudstack 4.2 installation on both Ubuntu
> Server 12.04 and 13.10.
>
>- Installed Cloudstack Management Controller and a KVM host in two
>separate boxes
>- Cloudstack installations went fine
>- Created a basic networking zone, all is green, storage ok, vvms ok
>
> At this point, I'm able to ping physical hosts, Storage and Proxy SSVM
> public IP Address.
>
>- Created instance with basic template of CentOS, fine
>- Automatically created System Router
>
> At this point I'm still able to ping physical hosts, but no longer Storage
> SSMV, Proxy SSVM and the CentOS instance created a while ago.
>
> No errors, all is green, all processes running fine, just connectivity
> issue on the public network side of Proxy/Storage VVMS and Instances.
>
> *IMPORTANT* I've configured Cloudstack in CentOS enviroment before testing
> Ubuntu Server, with both Basic and Advanced Networking (VLAN separation)
> without problems.
>
> Security group is already configured with ICMP/SSH rules for inbound.
>
> Any ideas? Thanks
>



-- 
“I videogiochi non influenzano i bambini.
Voglio dire, se pac-man avesse influenzato la nostra generazione,
staremmo tutti saltando in sale scure,
masticando pillole magiche e ascoltando musica elettronica
ripetitiva...”

(Kristian Wilson, Nintendo Inc, 1989)


Re: VMs created using KVM hypervisor

2013-12-05 Thread Nux!

On 05.12.2013 09:32, Anju M R wrote:

Hi

I installed Management Server in 192.168.14.70/25 and my KVM 
hypervisor
host is in 192.168.150.173/23. I'm able to add zone (basic), pod, 
cluster,
host, primary storage and secondary storage. The System VMs are 
running. I
registered an RHEL 6.4 iso and tried to make an instance using it. The 
IPs
get assigned by the cloudstack. From the KVM machine am able to do 
ping and
ssh the instances. But I cannot access the instances from other 
machines,

not even from the Management Server.

But when I used XenServer as the hypervisor, it worked. Even without 
doing
any setting changes am able to access the instances from the 
Management

server and other machines in the network.



If you update your security groups to allow traffic does it work?


--
Sent from the Delta quadrant using Borg technology!

Nux!
www.nux.ro


Re: Cloudstack user-data empty for VMs

2013-12-05 Thread David Nalley
On Wed, Dec 4, 2013 at 11:38 PM, Derek Cole  wrote:
> I will see what I can do. I dont have a github presently, but since I am
> mostly working with FreeBSD I had to fix puppet's service resource, jason
> hancocks section that look for dhcp leases and a couple of other things.
> The userdata fix I put in seems to be working, though not when the puppet
> agent is ubuntu presently, so I am trying to track that down.
>
> I only saw one other branch in dans and it was showing like 9 months ago
> for the latest work - is that the correct place I am looking?
>

Don't worry about github if it's too much hassle - a simple patch is
fine as well.

The problem with Ubuntu is probably related to the DHCP client, but not sure.

Yeah 9 months sounds about right - it's languished a bit since Dan
changed employers.

--David


VMs created using KVM hypervisor

2013-12-05 Thread Anju M R
Hi

I installed Management Server in 192.168.14.70/25 and my KVM hypervisor
host is in 192.168.150.173/23. I'm able to add zone (basic), pod, cluster,
host, primary storage and secondary storage. The System VMs are running. I
registered an RHEL 6.4 iso and tried to make an instance using it. The IPs
get assigned by the cloudstack. From the KVM machine am able to do ping and
ssh the instances. But I cannot access the instances from other machines,
not even from the Management Server.

But when I used XenServer as the hypervisor, it worked. Even without doing
any setting changes am able to access the instances from the Management
server and other machines in the network.

Please help me to figure out the problem.

-- 
Regards,

Anju M R
Engineer


Re: Password reset feature and "User Data" service

2013-12-05 Thread Andrija Panic
Thank you Sanjeev for inputs. Can you please confirm that updating network
is possible only from API - I can not find it anywhere in GUI ?
Also how should I handle VLAN assigment to this shared network - now vlan
500 is assigned...I suppose when updating the network (with the new
networking template), that already deployed network should retain it's vlan
and IP ranges, right ?

Thank you very much...


On 5 December 2013 06:15, Sanjeev Neelarapu wrote:

> Hi,
>
> Create another network offering with dhcp,dns and userdata service and
> undate the shared network with these offerings. While doing the network
> update choose not to change the network cidr.
>
> Thanks,
> Sanjeev
>
> -Original Message-
> From: Andrija Panic [mailto:andrija.pa...@gmail.com]
> Sent: Wednesday, December 04, 2013 3:31 PM
> To: users@cloudstack.apache.org
> Subject: Password reset feature and "User Data" service
>
> Hi,
>
> I have kind of problem and need advice please.
>
> I have 1 shared network for assigning public IP addresses to all VMs we
> create - with DHCP,DNS, and Virtual Router, as the services that are
> enabled in this networking tempalte.
>
>
> Now I want to enable "password management/reset" features, but I got error
> messages "user data" service is not enabled for my network id=212.
>
> So since modifications of Network tempalte is not possible, and the
> modification of the already deployed Network (id=212) is not possible
> is there a change to hack the database to include the "User Data" service
> as the service in both the netowrk template, and for the already used
> network (id=212)
>
> Any help would be really appriciated...
>
> Thanks,
> --
>
> Andrija Panić
>



-- 

Andrija Panić
--
  http://admintweets.com
--


Re: SecurityGroups, Advanced Zone And DefaultSharedNetworkOfferingWithSGService

2013-12-05 Thread Radek Smigielski
> I just redid the setup with Advanced Zone + Security Groups enabled.
I am trying to understand if you could define, apply, use security groups after 
you just update value in data_center.is_security_group_enabled ? 


Or you just basically rebuild zone with SG enabled? 


- Radoslaw Smigielski


RE: Issue with imported VHD from CS 4.0

2013-12-05 Thread Geoff Higginbottom
Adam,

Is this a new Template or one which is currently is use (linked to existing VMs)

As Radek has highlighted you appear to be having a storage issue, which could 
be related to Secondary Storage.

Can you confirm your XenServer is able to mount Secondary Storage?

Regards

Geoff Higginbottom

D: +44 20 3603 0542 | S: +44 20 3603 0540 | M: +447968161581

geoff.higginbot...@shapeblue.com

-Original Message-
From: Radek Smigielski [mailto:radek.smigiel...@ymail.com]
Sent: 05 December 2013 07:59
To: users@cloudstack.apache.org
Subject: Re: Issue with imported VHD from CS 4.0

This:

>> 2013-12-04 23:18:21,065 WARN
>> [xen.resource.XenServerStorageProcessor]
(DirectAgent-223:null) Catch Exception

>> com.cloud.utils.exception.CloudRuntimeException for template +  due
>> to
com.cloud.utils.exception.CloudRuntimeException: failed
>> com.cloud.utils.exception.CloudRuntimeException: failed
>>
   at

>> com.cloud.hypervisor.xen.resource.XenServerStorageProcessor.copy_vhd_
>> from_secondarystorage(XenServerStorageProcessor.java:792)

and later this:

>> 2013-12-04 23:34:31,699 INFO  [cloud.vm.VirtualMachineManagerImpl]
(Job-Executor-36:job-131 = [ 4f6a0267-7d26-4a4c-a160-fb22bd450fe5 ]) Unable to 
contact resource.

looks to me like your XenServer host has some problems with the NFS storage. 
Check /var/log/SMlog on your XenServer(s).



- Radoslaw  Smigielski
This email and any attachments to it may be confidential and are intended 
solely for the use of the individual to whom it is addressed. Any views or 
opinions expressed are solely those of the author and do not necessarily 
represent those of Shape Blue Ltd or related companies. If you are not the 
intended recipient of this email, you must neither take any action based upon 
its contents, nor copy or show it to anyone. Please contact the sender if you 
believe you have received this email in error. Shape Blue Ltd is a company 
incorporated in England & Wales. ShapeBlue Services India LLP is a company 
incorporated in India and is operated under license from Shape Blue Ltd. Shape 
Blue Brasil Consultoria Ltda is a company incorporated in Brasil and is 
operated under license from Shape Blue Ltd. ShapeBlue is a registered trademark.


Re: Issue with imported VHD from CS 4.0

2013-12-05 Thread Radek Smigielski
This:

>> 2013-12-04 23:18:21,065 WARN  [xen.resource.XenServerStorageProcessor] 
(DirectAgent-223:null) Catch Exception 

>> com.cloud.utils.exception.CloudRuntimeException for template +  due to 
com.cloud.utils.exception.CloudRuntimeException: failed
>> com.cloud.utils.exception.CloudRuntimeException: failed
>> 
       at 

>> com.cloud.hypervisor.xen.resource.XenServerStorageProcessor.copy_vhd_from_secondarystorage(XenServerStorageProcessor.java:792)

and later this: 

>> 2013-12-04 23:34:31,699 INFO  [cloud.vm.VirtualMachineManagerImpl] 
(Job-Executor-36:job-131 = [ 4f6a0267-7d26-4a4c-a160-fb22bd450fe5 ]) 
Unable to contact resource.
 
looks to me like your XenServer host has some problems with the NFS storage. 
Check /var/log/SMlog on your XenServer(s).



- Radoslaw  Smigielski